Публічний реєстр
Звіт про здоров'я програмного забезпеченнясхема 0.27.0 · метрики 1.13.0 · 2026-07-26 22:49 UTC

SocketDev / decmpfs

TypeScript · JavaScriptMIT★ 0 зірок⑂ 0 форківз черв. 2026 р.Переглянути на GitHub ↗

SocketDev/decmpfs має індекс здоров’я 55 зі 100, що відповідає смузі «Помірний». Найвищий показник — Vitality (73/100), найнижчий — Community & Adoption (40/100). Останнє оновлення — сьогодні. Більшість нещодавньої роботи виконує один учасник.

55
загалом / 100
Помірний

Індекс здоров'я програмного забезпечення

Метрики згруповано у зважені категорії на шкалі 1–100. Загальна оцінка починається як їхнє середнє; коли публічні дані активують Політику юрисдикцій високого ризику, рейтинг коригується й отримує верхню межу 49 («Під ризиком»). Готовність до ШІ не входить до індексу.

55
Відмінний85-100Зразковий; відповідає практично всім перевіреним критеріям
Добрий70-84Здоровий; незначні прогалини
Помірний50-69Прийнятний, але з помітними прогалинами; рекомендовано перевірку
У зоні ризику30-49Суттєві слабкі місця; впровадження потребує обережності
Критичний1-29Серйозні проблеми (покинутий, єдиний мейнтейнер, без базової гігієни)
ЖиттєздатністьСпільнота тавпровадженняСталість таврядуванняІнженернаякістьБезпекаГотовність доШІ

Профіль оцінок

Кожна вісь — окрема категорія. Форма важить більше, ніж середнє: здоровий об'єкт заповнює всю фігуру, тоді як профіль із піками та провалами означає, що сила в одному вимірі маскує ризик в іншому.

Власність

SocketОрганізація
784 підписники50 публічних репозиторіївз серп. 2020 р.

За цим репозиторієм стоїть організація — спільна, підзвітна опіка, здатна пережити будь-якого окремого мейнтейнера.

Пакетні екосистеми

РеєстрПакетВерсіяЗавантажень / місВерсіїОстання публікаціяТеги
crates.iodecmpfsвказує на інший репозиторій — не оцінюється0.1.22 20332 дні томуapfsbtrfscompressiondecmpfsntfsfilesystem
npmdecmpfs0.0.0182128 днів томуapfsbtrfscompressiondecmpfsfilesystemlzvnnative-addonnodentfszstd

Метрики за категоріями

Життєздатність

Чи живий проєкт — чи пишеться код і чи виходять релізи?

73Добрий · 22% загального індексу
Як обчислюється оцінка
36/36Свіжість push — останній push 0 дн. тому
1.4/36Ритм комітів — 2/52 тижнів із комітами
17.2/18Обсяг комітів — 81 комітів за останній рік
0/10OpenSSF Scorecard: Maintained — project was created within the last 90 days. Please review its contents carefully
Використані вхідні дані
commits_last_year81
human_commit_share1
days_since_last_push0
active_weeks_last_year2
Як обчислюється оцінка
27/27Випускає релізи — опубліковано 2 релізів
36/36Свіжість релізів — останній реліз 2 дн. тому
27/27Ритм релізів — реліз кожні ~2,8 дн.
0/10OpenSSF Scorecard: Signed-Releases — немає даних
Використані вхідні дані
releases_count2
latest_release_tagv0.1.2
releases_from_tagsні
days_since_latest_release2
mean_days_between_releases2,8
Виключено з оцінювання (немає даних або не застосовно): OpenSSF Scorecard: Signed-Releases. Залишкові ваги перенормовано.

Спільнота та впровадження

Чи має проєкт користувачів, завантаження, увагу та влаштовані умови для контриб’юторів?

40У зоні ризику · 18% загального індексу
Як обчислюється оцінка
0/60Зірки — 0 зірок
0/25Форки — 0 форків
0/15Спостерігачі — 0 спостерігачів
Використані вхідні дані
forks0
stars0
watchers0
growth_stateunverified
growth_factor_pct100
growth_unverified_reasonno_history
Як обчислюється оцінка
22.5/22.5README
22.5/22.5Ліцензія — визнана ліцензія (MIT)
18/18Настанови CONTRIBUTING
13.5/13.5Кодекс поведінки
0/7.2Шаблон issue
0/6.3Шаблон PR
Використані вхідні дані
has_readmeтак
has_licenseтак
has_contributingтак
has_issue_templateні
has_code_of_conductтак
has_pull_request_templateні
Як обчислюється оцінка
30.2/80Щомісячні завантаження — 182 завантажень/місяць у npm
0/20Залежні пакети в реєстрі — ця екосистема цього не повідомляє
Використані вхідні дані
packagesdecmpfs
dependents
ecosystemsnpm
total_downloads
monthly_downloads182
Виключено з оцінювання (немає даних або не застосовно): Залежні пакети в реєстрі. Залишкові ваги перенормовано.

Сталість та врядування

Чи переживе проєкт своїх людей — бас-фактор, реактивність, хто за ним стоїть і як супроводжуються пакети?

42У зоні ризику · 24% загального індексу
Як обчислюється оцінка
9/54Бас-фактор — на 1 контриб’ютор(ів) припадає половина всіх комітів
0/22.5Розподіл комітів — головний контриб’ютор — автор 100% комітів
1.4/13.5Широта контриб’юторів — 1 контриб’юторів
10/10OpenSSF Scorecard: Contributors — project has 10 contributing companies or organizations
Використані вхідні дані
bus_factor1
contributors_sampled1
top_contributor_share1
Як обчислюється оцінка
0/46.8Вирішення issue — немає issue або даних
0/38.3Прийняття PR — немає вирішених pull request-ів або даних
0/15OpenSSF Scorecard: Code-Review — Found 0/30 approved changesets -- score normalized to 0
Використані вхідні дані
merged_prs0
open_issues0
closed_issues0
issue_closed_ratio
closed_unmerged_prs0
Виключено з оцінювання (немає даних або не застосовно): Вирішення issue, Прийняття PR. Залишкові ваги перенормовано.
Як обчислюється оцінка
30/30Підтримка власника — у власності організації
0/20Верифікований домен
20.8/25Охоплення власника — 784 підписників у SocketDev
24.4/25Послужний список — 50 публічних репозиторіїв, вік облікового запису ~5 р.
Використані вхідні дані
followers784
owner_typeOrganization
is_verified
owner_loginSocketDev
public_repos50
account_age_days2 180
Як обчислюється оцінка
25/25Опубліковано й доступно — 1 пакет(ів) у npm
35/35Свіжість публікацій — остання публікація 28 дн. тому
4/20Історія версій — 1 опублікованих версій
20/20Не застарілий — активний, не deprecated і не yanked
Використані вхідні дані
packagesdecmpfs
ecosystemsnpm
any_deprecatedні
min_days_since_publish28

Інженерна якість

Чи наявні базові інженерні практики та документація?

63Помірний · 20% загального індексу
Як обчислюється оцінка
24/24Процеси CI — 10 процес(ів) CI
24/24Наявні тести
0/16Конфігурація лінтера
0/9.6Pre-commit-хуки
6.4/6.4.editorconfig
0/20OpenSSF Scorecard: CI-Tests — немає даних
Використані вхідні дані
has_ciтак
has_testsтак
has_editorconfigтак
has_linter_configні
has_precommit_configні
Виключено з оцінювання (немає даних або не застосовно): OpenSSF Scorecard: CI-Tests. Залишкові ваги перенормовано.

Документація

55Помірний
Як обчислюється оцінка
30/30README
25/25Каталог документації
0/15Сайт документації / домашня сторінка
0/10Опис репозиторію
0/10Теми
0/10Wiki
Використані вхідні дані
topics
has_wikiні
homepage
has_readmeтак
has_docs_dirтак
has_descriptionні

Безпека

Чи міцні видимі практики безпеки й ланцюга постачання, без непослабленої пов’язаності з юрисдикціями високого ризику?

59Помірний · 16% загального індексу

Стан безпеки

49У зоні ризику
Як обчислюється оцінка
4.5/7.5Binary-Artifacts — binaries present in source code
0.8/7.5Branch-Protection — branch protection is not maximal on development and all release branches
0/2.5CI-Tests — немає даних
0/2.5CII-Best-Practices — no effort to earn an OpenSSF best practices badge detected
0/7.5Code-Review — Found 0/30 approved changesets -- score normalized to 0
2.5/2.5Contributors — project has 10 contributing companies or organizations
10/10Dangerous-Workflow — no dangerous workflow patterns detected
7.5/7.5Dependency-Update-Tool — update tool detected
0/5Fuzzing — project is not fuzzed
2.5/2.5Ліцензія — license file detected
0/7.5Maintained — project was created within the last 90 days. Please review its contents carefully
0/5Packaging — немає даних
4/5Pinned-Dependencies — dependency not pinned by hash detected -- score normalized to 8
0/5SAST — no SAST tool detected
4.5/5Security-Policy — security policy file detected
0/7.5Signed-Releases — немає даних
0/7.5Token-Permissions — detected GitHub workflow tokens with excessive permissions
7.5/7.5Vulnerabilities — 0 existing vulnerabilities detected
Використані вхідні дані
sourceopenssf_scorecard
checks_evaluated15
scorecard_versionv5.5.0
checks_inconclusive3
scorecard_aggregate4,9
Виключено з оцінювання (немає даних або не застосовно): ci_tests, packaging, signed_releases. Залишкові ваги перенормовано.
Як обчислюється оцінка
35/35Прямі залежності без відомих сповіщень — жодна пряма залежність не має відомих сповіщень
25/25Непрямі залежності без відомих сповіщень — жодна непряма залежність не має відомих сповіщень
0/40Немає задавнених сповіщень — жодне сповіщення не має дати публікації
Використані вхідні дані
sourceosv
advisories0
affected_packages0
assessed_packages62
unassessed_packages0
affected_by_severitynone
direct_affected_packages0
Виключено з оцінювання (немає даних або не застосовно): Немає задавнених сповіщень. Залишкові ваги перенормовано. Звірено з runtime-замиканням залежностей crates:decmpfs@0.1.2 — тим, що тягне за собою встановлення опублікованого пакета, — 62 пакетів. Досяжність не аналізується.

Готовність до ШІ

Наскільки репозиторій оснащений для розробки та супроводу за участі ШІ-агентів? Незалежний, експериментальний бейдж — вага 0.0, тож він подається окремо і не впливає на загальний індекс здоров'я.

57Помірний · 0% загального індексу
Як обчислюється оцінка
0/45Інструкції для агентів — немає CLAUDE.md / AGENTS.md / правил редактора
0/15Машиночитана документація (llms.txt)
40/40Читабельна історія комітів — намір зазначено у 85 з 85 людських комітів (структурований заголовок або пояснювальний текст)
Використані вхідні дані
has_llms_txtні
legible_history_share1
agent_instruction_files
agent_instruction_max_bytes
Як обчислюється оцінка
12.6/18Розгортання однією командою — Cargo.toml, crates/decmpfs/Cargo.toml, fuzz/Cargo.toml (домовленість інструментарію, без раннера задач)
22/22Автоматизовані тести
0/11Конфігурація лінтера / форматера
11/11Статична перевірка типів — .claude/hooks/fleet/actionlint-on-workflow-edit/tsconfig.json, .claude/hooks/fleet/adversarial-review-nudge/tsconfig.json, .claude/hooks/fleet/agents-skills-mirror-nudge/tsconfig.json, .claude/hooks/fleet/ai-config-drift-nudge/tsconfig.json, .claude/hooks/fleet/ai-config-poisoning-guard/tsconfig.json, .claude/hooks/fleet/alpha-sort-nudge/tsconfig.json, .claude/hooks/fleet/answer-questions-nudge/tsconfig.json, .claude/hooks/fleet/answer-status-requests-nudge/tsconfig.json, .claude/hooks/fleet/anti-prose-guard/tsconfig.json, .claude/hooks/fleet/ask-suppression-nudge/tsconfig.json, .claude/hooks/fleet/auth-rotation-nudge/tsconfig.json, .claude/hooks/fleet/brew-supply-chain-guard/tsconfig.json, .claude/hooks/fleet/broken-hook-detector/tsconfig.json, .claude/hooks/fleet/bundle-flags-guard/tsconfig.json, .claude/hooks/fleet/c8-ignore-reason-guard/tsconfig.json, .claude/hooks/fleet/cascade-first-triage-nudge/tsconfig.json, .claude/hooks/fleet/catch-message-guard/tsconfig.json, .claude/hooks/fleet/cdn-allowlist-guard/tsconfig.json, .claude/hooks/fleet/changelog-entry-shape-nudge/tsconfig.json, .claude/hooks/fleet/changelog-no-empty-guard/tsconfig.json, .claude/hooks/fleet/check-new-deps/tsconfig.json, .claude/hooks/fleet/claude-code-action-lockdown-guard/tsconfig.json, .claude/hooks/fleet/claude-lockdown-guard/tsconfig.json, .claude/hooks/fleet/claude-md-defer-detail-nudge/tsconfig.json, .claude/hooks/fleet/claude-md-rule-add-guard/tsconfig.json, .claude/hooks/fleet/claude-md-section-size-guard/tsconfig.json, .claude/hooks/fleet/claude-md-size-guard/tsconfig.json, .claude/hooks/fleet/claude-segmentation-guard/tsconfig.json, .claude/hooks/fleet/clone-reviewed-repo-nudge/tsconfig.json, .claude/hooks/fleet/codex-no-write-guard/tsconfig.json, .claude/hooks/fleet/codex-session-budget-guard/tsconfig.json, .claude/hooks/fleet/commit-author-guard/tsconfig.json, .claude/hooks/fleet/commit-cadence-nudge/tsconfig.json, .claude/hooks/fleet/commit-message-format-guard/tsconfig.json, .claude/hooks/fleet/commit-pr-nudge/tsconfig.json, .claude/hooks/fleet/commit-size-nudge/tsconfig.json, .claude/hooks/fleet/compound-lessons-nudge/tsconfig.json, .claude/hooks/fleet/concurrent-cargo-build-guard/tsconfig.json, .claude/hooks/fleet/consumer-grep-nudge/tsconfig.json, .claude/hooks/fleet/convo-prose-nudge/tsconfig.json, .claude/hooks/fleet/cross-repo-guard/tsconfig.json, .claude/hooks/fleet/dated-citation-guard/tsconfig.json, .claude/hooks/fleet/default-branch-guard/tsconfig.json, .claude/hooks/fleet/dep-derived-source-nudge/tsconfig.json, .claude/hooks/fleet/dirty-lockfile-nudge/tsconfig.json, .claude/hooks/fleet/dirty-worktree-stop-guard/tsconfig.json, .claude/hooks/fleet/dogfood-cascade-nudge/tsconfig.json, .claude/hooks/fleet/dont-blame-nudge/tsconfig.json, .claude/hooks/fleet/dont-stop-mid-queue-nudge/tsconfig.json, .claude/hooks/fleet/drift-check-nudge/tsconfig.json, .claude/hooks/fleet/enqueue-dont-pivot-nudge/tsconfig.json, .claude/hooks/fleet/enterprise-push-nudge/tsconfig.json, .claude/hooks/fleet/error-message-quality-nudge/tsconfig.json, .claude/hooks/fleet/excuse-detector/tsconfig.json, .claude/hooks/fleet/file-size-nudge/tsconfig.json, .claude/hooks/fleet/fixes-need-tests-nudge/tsconfig.json, .claude/hooks/fleet/follow-direct-imperative-nudge/tsconfig.json, .claude/hooks/fleet/gh-token-hygiene-guard/tsconfig.json, .claude/hooks/fleet/git-config-write-guard/tsconfig.json, .claude/hooks/fleet/git-identity-drift-nudge/tsconfig.json, .claude/hooks/fleet/gitmodules-comment-guard/tsconfig.json, .claude/hooks/fleet/golden-fixture-naming-guard/tsconfig.json, .claude/hooks/fleet/handoff-command-nudge/tsconfig.json, .claude/hooks/fleet/headroom-proxy-start/tsconfig.json, .claude/hooks/fleet/honesty-framing-guard/tsconfig.json, .claude/hooks/fleet/immutable-release-guard/tsconfig.json, .claude/hooks/fleet/inline-script-defer-guard/tsconfig.json, .claude/hooks/fleet/judgment-nudge/tsconfig.json, .claude/hooks/fleet/keep-working-while-waiting-nudge/tsconfig.json, .claude/hooks/fleet/land-fast-nudge/tsconfig.json, .claude/hooks/fleet/lock-step-ref-nudge/tsconfig.json, .claude/hooks/fleet/logger-guard/tsconfig.json, .claude/hooks/fleet/markdown-filename-guard/tsconfig.json, .claude/hooks/fleet/memory-codify-nudge/tsconfig.json, .claude/hooks/fleet/minimum-release-age-guard/tsconfig.json, .claude/hooks/fleet/module-noun-name-guard/tsconfig.json, .claude/hooks/fleet/new-hook-claude-md-guard/tsconfig.json, .claude/hooks/fleet/no-blanket-file-exclusion-guard/tsconfig.json, .claude/hooks/fleet/no-blind-keychain-read-guard/tsconfig.json, .claude/hooks/fleet/no-boolean-trap-guard/tsconfig.json, .claude/hooks/fleet/no-branch-reuse-nudge/tsconfig.json, .claude/hooks/fleet/no-corepack-guard/tsconfig.json, .claude/hooks/fleet/no-direct-linter-guard/tsconfig.json, .claude/hooks/fleet/no-disable-lint-rule-guard/tsconfig.json, .claude/hooks/fleet/no-empty-commit-guard/tsconfig.json, .claude/hooks/fleet/no-env-kill-switch-guard/tsconfig.json, .claude/hooks/fleet/no-ext-issue-ref-guard/tsconfig.json, .claude/hooks/fleet/no-file-oxlint-disable-guard/tsconfig.json, .claude/hooks/fleet/no-fleet-fork-guard/tsconfig.json, .claude/hooks/fleet/no-force-push-guard/tsconfig.json, .claude/hooks/fleet/no-github-ai-attribution-guard/tsconfig.json, .claude/hooks/fleet/no-hook-cmd-regex-guard/tsconfig.json, .claude/hooks/fleet/no-meta-comments-guard/tsconfig.json, .claude/hooks/fleet/no-new-config-guard/tsconfig.json, .claude/hooks/fleet/no-non-fleet-push-guard/tsconfig.json, .claude/hooks/fleet/no-npm-otp-flag-guard/tsconfig.json, .claude/hooks/fleet/no-orphaned-staging/tsconfig.json, .claude/hooks/fleet/no-other-linters-guard/tsconfig.json, .claude/hooks/fleet/no-pkgjson-pnpm-overrides-guard/tsconfig.json, .claude/hooks/fleet/no-placeholder-commit-subject-guard/tsconfig.json, .claude/hooks/fleet/no-platform-import-guard/tsconfig.json, .claude/hooks/fleet/no-pm-exec-guard/tsconfig.json, .claude/hooks/fleet/no-pr-from-default-branch-guard/tsconfig.json, .claude/hooks/fleet/no-pr-from-default-checkout-guard/tsconfig.json, .claude/hooks/fleet/no-pr-review-verdict-guard/tsconfig.json, .claude/hooks/fleet/no-premature-commit-kill-guard/tsconfig.json, .claude/hooks/fleet/no-private-path-in-source-guard/tsconfig.json, .claude/hooks/fleet/no-private-ref-in-tests-docs-guard/tsconfig.json, .claude/hooks/fleet/no-registry-mutation-in-repo-script-nudge/tsconfig.json, .claude/hooks/fleet/no-removal-comment-nudge/tsconfig.json, .claude/hooks/fleet/no-repo-scope-in-fleet-config-guard/tsconfig.json, .claude/hooks/fleet/no-revert-guard/tsconfig.json, .claude/hooks/fleet/no-strip-types-guard/tsconfig.json, .claude/hooks/fleet/no-subagent-commit-guard/tsconfig.json, .claude/hooks/fleet/no-tail-install-out-guard/tsconfig.json, .claude/hooks/fleet/no-test-in-scripts-guard/tsconfig.json, .claude/hooks/fleet/no-token-in-dotenv-guard/tsconfig.json, .claude/hooks/fleet/no-total-squash-guard/tsconfig.json, .claude/hooks/fleet/no-tsx-guard/tsconfig.json, .claude/hooks/fleet/no-underscore-ident-guard/tsconfig.json, .claude/hooks/fleet/no-unisolated-git-fixture-guard/tsconfig.json, .claude/hooks/fleet/no-unmocked-net-guard/tsconfig.json, .claude/hooks/fleet/no-upstream-gitlink-guard/tsconfig.json, .claude/hooks/fleet/no-verify-format-nudge/tsconfig.json, .claude/hooks/fleet/node-modules-staging-guard/tsconfig.json, .claude/hooks/fleet/non-fleet-pr-issue-ask-guard/tsconfig.json, .claude/hooks/fleet/npm-otp-flow-nudge/tsconfig.json, .claude/hooks/fleet/npmrc-trust-optout-guard/tsconfig.json, .claude/hooks/fleet/options-param-naming-guard/tsconfig.json, .claude/hooks/fleet/overeager-staging-guard/tsconfig.json, .claude/hooks/fleet/oxlint-plugin-load-nudge/tsconfig.json, .claude/hooks/fleet/package-manager-auto-update-guard/tsconfig.json, .claude/hooks/fleet/parallel-agent-edit-guard/tsconfig.json, .claude/hooks/fleet/parallel-agent-on-stop-nudge/tsconfig.json, .claude/hooks/fleet/parallel-agent-removal-nudge/tsconfig.json, .claude/hooks/fleet/parallel-agent-staging-guard/tsconfig.json, .claude/hooks/fleet/path-guard/tsconfig.json, .claude/hooks/fleet/path-regex-normalize-nudge/tsconfig.json, .claude/hooks/fleet/paths-mts-inherit-guard/tsconfig.json, .claude/hooks/fleet/personal-path-guard/tsconfig.json, .claude/hooks/fleet/plan-location-guard/tsconfig.json, .claude/hooks/fleet/plan-review-nudge/tsconfig.json, .claude/hooks/fleet/pnpm-filter-zero-match-nudge/tsconfig.json, .claude/hooks/fleet/pointer-comment-nudge/tsconfig.json, .claude/hooks/fleet/post-push-ci-monitor-nudge/tsconfig.json, .claude/hooks/fleet/pr-vs-push-default-nudge/tsconfig.json, .claude/hooks/fleet/pre-commit-race-nudge/tsconfig.json, .claude/hooks/fleet/prefer-async-spawn-guard/tsconfig.json, .claude/hooks/fleet/prefer-evergreen-target-nudge/tsconfig.json, .claude/hooks/fleet/prefer-fn-decl-guard/tsconfig.json, .claude/hooks/fleet/prefer-json-clone-guard/tsconfig.json, .claude/hooks/fleet/prefer-pipx-over-pip-guard/tsconfig.json, .claude/hooks/fleet/prefer-rebase-over-revert-nudge/tsconfig.json, .claude/hooks/fleet/prefer-type-import-guard/tsconfig.json, .claude/hooks/fleet/prefer-vitest-guard/tsconfig.json, .claude/hooks/fleet/primary-checkout-branch-guard/tsconfig.json, .claude/hooks/fleet/primary-checkout-on-default-stop-guard/tsconfig.json, .claude/hooks/fleet/private-name-nudge/tsconfig.json, .claude/hooks/fleet/proc-environ-exfil-guard/tsconfig.json, .claude/hooks/fleet/prompt-injection-guard/tsconfig.json, .claude/hooks/fleet/provenance-publish-nudge/tsconfig.json, .claude/hooks/fleet/public-surface-nudge/tsconfig.json, .claude/hooks/fleet/pull-request-target-guard/tsconfig.json, .claude/hooks/fleet/push-protected-branch-guard/tsconfig.json, .claude/hooks/fleet/readme-fleet-shape-guard/tsconfig.json, .claude/hooks/fleet/release-tag-tied-guard/tsconfig.json, .claude/hooks/fleet/release-workflow-guard/tsconfig.json, .claude/hooks/fleet/reply-prose-nudge/tsconfig.json, .claude/hooks/fleet/report-location-guard/tsconfig.json, .claude/hooks/fleet/reserved-script-dir-guard/tsconfig.json, .claude/hooks/fleet/rg-replace-flag-nudge/tsconfig.json, .claude/hooks/fleet/scan-label-in-commit-guard/tsconfig.json, .claude/hooks/fleet/secret-content-guard/tsconfig.json, .claude/hooks/fleet/session-handoff-nudge/tsconfig.json, .claude/hooks/fleet/setup-basics-tools/tsconfig.json, .claude/hooks/fleet/setup-claude-scanners/tsconfig.json, .claude/hooks/fleet/setup-firewall/tsconfig.json, .claude/hooks/fleet/setup-misc-tools/tsconfig.json, .claude/hooks/fleet/setup-security-tools/tsconfig.json, .claude/hooks/fleet/setup-signing/tsconfig.json, .claude/hooks/fleet/shallow-clone-guard/tsconfig.json, .claude/hooks/fleet/skill-usage-logger/tsconfig.json, .claude/hooks/fleet/small-pr-nudge/tsconfig.json, .claude/hooks/fleet/soak-exclude-date-guard/tsconfig.json, .claude/hooks/fleet/soak-exclude-scope-guard/tsconfig.json, .claude/hooks/fleet/soak-pin-needs-annotation-guard/tsconfig.json, .claude/hooks/fleet/squash-history-nudge/tsconfig.json, .claude/hooks/fleet/stale-process-sweeper/tsconfig.json, .claude/hooks/fleet/stop-claim-verify-nudge/tsconfig.json, .claude/hooks/fleet/sweep-ds-store/tsconfig.json, .claude/hooks/fleet/target-arch-env-guard/tsconfig.json, .claude/hooks/fleet/test-script-defers-guard/tsconfig.json, .claude/hooks/fleet/token-guard/tsconfig.json, .claude/hooks/fleet/token-spend-guard/tsconfig.json, .claude/hooks/fleet/trust-downgrade-guard/tsconfig.json, .claude/hooks/fleet/unbacked-claim-commit-guard/tsconfig.json, .claude/hooks/fleet/uncodified-lesson-nudge/tsconfig.json, .claude/hooks/fleet/unpushed-main-nudge/tsconfig.json, .claude/hooks/fleet/untrusted-coauthor-guard/tsconfig.json, .claude/hooks/fleet/uses-sha-verify-guard/tsconfig.json, .claude/hooks/fleet/variant-analysis-nudge/tsconfig.json, .claude/hooks/fleet/verify-absence-claims-nudge/tsconfig.json, .claude/hooks/fleet/verify-render-pre-commit-nudge/tsconfig.json, .claude/hooks/fleet/version-bump-order-guard/tsconfig.json, .claude/hooks/fleet/vitest-vs-node-test-guard/tsconfig.json, .claude/hooks/fleet/wheelhouse-drift-guard/tsconfig.json, .claude/hooks/fleet/workflow-multiline-body-guard/tsconfig.json, .claude/hooks/fleet/workflow-uses-comment-guard/tsconfig.json, .claude/hooks/fleet/worktree-remove-relink-nudge/tsconfig.json, napi/decmpfs/tsconfig.json, tsconfig.json
10/10Відтворюване середовище — Dockerfile, lockfile
0/10Підтверджена практика роботи з агентами — серед останніх 85 комітів немає створених агентом
5/8Автоматизоване супроводження — автоматизацію залежностей налаштовано, але у вибірці комітів її не видно
8/10OpenSSF Scorecard: Pinned-Dependencies — dependency not pinned by hash detected -- score normalized to 8
Використані вхідні дані
has_nixні
has_testsтак
lockfilesCargo.lock, pnpm-lock.yaml, uv.lock
has_dockerfileтак
typed_languageтак
bootstrap_files
has_devcontainerні
has_linter_configні
typecheck_configs.claude/hooks/fleet/actionlint-on-workflow-edit/tsconfig.json, .claude/hooks/fleet/adversarial-review-nudge/tsconfig.json, .claude/hooks/fleet/agents-skills-mirror-nudge/tsconfig.json, .claude/hooks/fleet/ai-config-drift-nudge/tsconfig.json, .claude/hooks/fleet/ai-config-poisoning-guard/tsconfig.json, .claude/hooks/fleet/alpha-sort-nudge/tsconfig.json, .claude/hooks/fleet/answer-questions-nudge/tsconfig.json, .claude/hooks/fleet/answer-status-requests-nudge/tsconfig.json, .claude/hooks/fleet/anti-prose-guard/tsconfig.json, .claude/hooks/fleet/ask-suppression-nudge/tsconfig.json, .claude/hooks/fleet/auth-rotation-nudge/tsconfig.json, .claude/hooks/fleet/brew-supply-chain-guard/tsconfig.json, .claude/hooks/fleet/broken-hook-detector/tsconfig.json, .claude/hooks/fleet/bundle-flags-guard/tsconfig.json, .claude/hooks/fleet/c8-ignore-reason-guard/tsconfig.json, .claude/hooks/fleet/cascade-first-triage-nudge/tsconfig.json, .claude/hooks/fleet/catch-message-guard/tsconfig.json, .claude/hooks/fleet/cdn-allowlist-guard/tsconfig.json, .claude/hooks/fleet/changelog-entry-shape-nudge/tsconfig.json, .claude/hooks/fleet/changelog-no-empty-guard/tsconfig.json, .claude/hooks/fleet/check-new-deps/tsconfig.json, .claude/hooks/fleet/claude-code-action-lockdown-guard/tsconfig.json, .claude/hooks/fleet/claude-lockdown-guard/tsconfig.json, .claude/hooks/fleet/claude-md-defer-detail-nudge/tsconfig.json, .claude/hooks/fleet/claude-md-rule-add-guard/tsconfig.json, .claude/hooks/fleet/claude-md-section-size-guard/tsconfig.json, .claude/hooks/fleet/claude-md-size-guard/tsconfig.json, .claude/hooks/fleet/claude-segmentation-guard/tsconfig.json, .claude/hooks/fleet/clone-reviewed-repo-nudge/tsconfig.json, .claude/hooks/fleet/codex-no-write-guard/tsconfig.json, .claude/hooks/fleet/codex-session-budget-guard/tsconfig.json, .claude/hooks/fleet/commit-author-guard/tsconfig.json, .claude/hooks/fleet/commit-cadence-nudge/tsconfig.json, .claude/hooks/fleet/commit-message-format-guard/tsconfig.json, .claude/hooks/fleet/commit-pr-nudge/tsconfig.json, .claude/hooks/fleet/commit-size-nudge/tsconfig.json, .claude/hooks/fleet/compound-lessons-nudge/tsconfig.json, .claude/hooks/fleet/concurrent-cargo-build-guard/tsconfig.json, .claude/hooks/fleet/consumer-grep-nudge/tsconfig.json, .claude/hooks/fleet/convo-prose-nudge/tsconfig.json, .claude/hooks/fleet/cross-repo-guard/tsconfig.json, .claude/hooks/fleet/dated-citation-guard/tsconfig.json, .claude/hooks/fleet/default-branch-guard/tsconfig.json, .claude/hooks/fleet/dep-derived-source-nudge/tsconfig.json, .claude/hooks/fleet/dirty-lockfile-nudge/tsconfig.json, .claude/hooks/fleet/dirty-worktree-stop-guard/tsconfig.json, .claude/hooks/fleet/dogfood-cascade-nudge/tsconfig.json, .claude/hooks/fleet/dont-blame-nudge/tsconfig.json, .claude/hooks/fleet/dont-stop-mid-queue-nudge/tsconfig.json, .claude/hooks/fleet/drift-check-nudge/tsconfig.json, .claude/hooks/fleet/enqueue-dont-pivot-nudge/tsconfig.json, .claude/hooks/fleet/enterprise-push-nudge/tsconfig.json, .claude/hooks/fleet/error-message-quality-nudge/tsconfig.json, .claude/hooks/fleet/excuse-detector/tsconfig.json, .claude/hooks/fleet/file-size-nudge/tsconfig.json, .claude/hooks/fleet/fixes-need-tests-nudge/tsconfig.json, .claude/hooks/fleet/follow-direct-imperative-nudge/tsconfig.json, .claude/hooks/fleet/gh-token-hygiene-guard/tsconfig.json, .claude/hooks/fleet/git-config-write-guard/tsconfig.json, .claude/hooks/fleet/git-identity-drift-nudge/tsconfig.json, .claude/hooks/fleet/gitmodules-comment-guard/tsconfig.json, .claude/hooks/fleet/golden-fixture-naming-guard/tsconfig.json, .claude/hooks/fleet/handoff-command-nudge/tsconfig.json, .claude/hooks/fleet/headroom-proxy-start/tsconfig.json, .claude/hooks/fleet/honesty-framing-guard/tsconfig.json, .claude/hooks/fleet/immutable-release-guard/tsconfig.json, .claude/hooks/fleet/inline-script-defer-guard/tsconfig.json, .claude/hooks/fleet/judgment-nudge/tsconfig.json, .claude/hooks/fleet/keep-working-while-waiting-nudge/tsconfig.json, .claude/hooks/fleet/land-fast-nudge/tsconfig.json, .claude/hooks/fleet/lock-step-ref-nudge/tsconfig.json, .claude/hooks/fleet/logger-guard/tsconfig.json, .claude/hooks/fleet/markdown-filename-guard/tsconfig.json, .claude/hooks/fleet/memory-codify-nudge/tsconfig.json, .claude/hooks/fleet/minimum-release-age-guard/tsconfig.json, .claude/hooks/fleet/module-noun-name-guard/tsconfig.json, .claude/hooks/fleet/new-hook-claude-md-guard/tsconfig.json, .claude/hooks/fleet/no-blanket-file-exclusion-guard/tsconfig.json, .claude/hooks/fleet/no-blind-keychain-read-guard/tsconfig.json, .claude/hooks/fleet/no-boolean-trap-guard/tsconfig.json, .claude/hooks/fleet/no-branch-reuse-nudge/tsconfig.json, .claude/hooks/fleet/no-corepack-guard/tsconfig.json, .claude/hooks/fleet/no-direct-linter-guard/tsconfig.json, .claude/hooks/fleet/no-disable-lint-rule-guard/tsconfig.json, .claude/hooks/fleet/no-empty-commit-guard/tsconfig.json, .claude/hooks/fleet/no-env-kill-switch-guard/tsconfig.json, .claude/hooks/fleet/no-ext-issue-ref-guard/tsconfig.json, .claude/hooks/fleet/no-file-oxlint-disable-guard/tsconfig.json, .claude/hooks/fleet/no-fleet-fork-guard/tsconfig.json, .claude/hooks/fleet/no-force-push-guard/tsconfig.json, .claude/hooks/fleet/no-github-ai-attribution-guard/tsconfig.json, .claude/hooks/fleet/no-hook-cmd-regex-guard/tsconfig.json, .claude/hooks/fleet/no-meta-comments-guard/tsconfig.json, .claude/hooks/fleet/no-new-config-guard/tsconfig.json, .claude/hooks/fleet/no-non-fleet-push-guard/tsconfig.json, .claude/hooks/fleet/no-npm-otp-flag-guard/tsconfig.json, .claude/hooks/fleet/no-orphaned-staging/tsconfig.json, .claude/hooks/fleet/no-other-linters-guard/tsconfig.json, .claude/hooks/fleet/no-pkgjson-pnpm-overrides-guard/tsconfig.json, .claude/hooks/fleet/no-placeholder-commit-subject-guard/tsconfig.json, .claude/hooks/fleet/no-platform-import-guard/tsconfig.json, .claude/hooks/fleet/no-pm-exec-guard/tsconfig.json, .claude/hooks/fleet/no-pr-from-default-branch-guard/tsconfig.json, .claude/hooks/fleet/no-pr-from-default-checkout-guard/tsconfig.json, .claude/hooks/fleet/no-pr-review-verdict-guard/tsconfig.json, .claude/hooks/fleet/no-premature-commit-kill-guard/tsconfig.json, .claude/hooks/fleet/no-private-path-in-source-guard/tsconfig.json, .claude/hooks/fleet/no-private-ref-in-tests-docs-guard/tsconfig.json, .claude/hooks/fleet/no-registry-mutation-in-repo-script-nudge/tsconfig.json, .claude/hooks/fleet/no-removal-comment-nudge/tsconfig.json, .claude/hooks/fleet/no-repo-scope-in-fleet-config-guard/tsconfig.json, .claude/hooks/fleet/no-revert-guard/tsconfig.json, .claude/hooks/fleet/no-strip-types-guard/tsconfig.json, .claude/hooks/fleet/no-subagent-commit-guard/tsconfig.json, .claude/hooks/fleet/no-tail-install-out-guard/tsconfig.json, .claude/hooks/fleet/no-test-in-scripts-guard/tsconfig.json, .claude/hooks/fleet/no-token-in-dotenv-guard/tsconfig.json, .claude/hooks/fleet/no-total-squash-guard/tsconfig.json, .claude/hooks/fleet/no-tsx-guard/tsconfig.json, .claude/hooks/fleet/no-underscore-ident-guard/tsconfig.json, .claude/hooks/fleet/no-unisolated-git-fixture-guard/tsconfig.json, .claude/hooks/fleet/no-unmocked-net-guard/tsconfig.json, .claude/hooks/fleet/no-upstream-gitlink-guard/tsconfig.json, .claude/hooks/fleet/no-verify-format-nudge/tsconfig.json, .claude/hooks/fleet/node-modules-staging-guard/tsconfig.json, .claude/hooks/fleet/non-fleet-pr-issue-ask-guard/tsconfig.json, .claude/hooks/fleet/npm-otp-flow-nudge/tsconfig.json, .claude/hooks/fleet/npmrc-trust-optout-guard/tsconfig.json, .claude/hooks/fleet/options-param-naming-guard/tsconfig.json, .claude/hooks/fleet/overeager-staging-guard/tsconfig.json, .claude/hooks/fleet/oxlint-plugin-load-nudge/tsconfig.json, .claude/hooks/fleet/package-manager-auto-update-guard/tsconfig.json, .claude/hooks/fleet/parallel-agent-edit-guard/tsconfig.json, .claude/hooks/fleet/parallel-agent-on-stop-nudge/tsconfig.json, .claude/hooks/fleet/parallel-agent-removal-nudge/tsconfig.json, .claude/hooks/fleet/parallel-agent-staging-guard/tsconfig.json, .claude/hooks/fleet/path-guard/tsconfig.json, .claude/hooks/fleet/path-regex-normalize-nudge/tsconfig.json, .claude/hooks/fleet/paths-mts-inherit-guard/tsconfig.json, .claude/hooks/fleet/personal-path-guard/tsconfig.json, .claude/hooks/fleet/plan-location-guard/tsconfig.json, .claude/hooks/fleet/plan-review-nudge/tsconfig.json, .claude/hooks/fleet/pnpm-filter-zero-match-nudge/tsconfig.json, .claude/hooks/fleet/pointer-comment-nudge/tsconfig.json, .claude/hooks/fleet/post-push-ci-monitor-nudge/tsconfig.json, .claude/hooks/fleet/pr-vs-push-default-nudge/tsconfig.json, .claude/hooks/fleet/pre-commit-race-nudge/tsconfig.json, .claude/hooks/fleet/prefer-async-spawn-guard/tsconfig.json, .claude/hooks/fleet/prefer-evergreen-target-nudge/tsconfig.json, .claude/hooks/fleet/prefer-fn-decl-guard/tsconfig.json, .claude/hooks/fleet/prefer-json-clone-guard/tsconfig.json, .claude/hooks/fleet/prefer-pipx-over-pip-guard/tsconfig.json, .claude/hooks/fleet/prefer-rebase-over-revert-nudge/tsconfig.json, .claude/hooks/fleet/prefer-type-import-guard/tsconfig.json, .claude/hooks/fleet/prefer-vitest-guard/tsconfig.json, .claude/hooks/fleet/primary-checkout-branch-guard/tsconfig.json, .claude/hooks/fleet/primary-checkout-on-default-stop-guard/tsconfig.json, .claude/hooks/fleet/private-name-nudge/tsconfig.json, .claude/hooks/fleet/proc-environ-exfil-guard/tsconfig.json, .claude/hooks/fleet/prompt-injection-guard/tsconfig.json, .claude/hooks/fleet/provenance-publish-nudge/tsconfig.json, .claude/hooks/fleet/public-surface-nudge/tsconfig.json, .claude/hooks/fleet/pull-request-target-guard/tsconfig.json, .claude/hooks/fleet/push-protected-branch-guard/tsconfig.json, .claude/hooks/fleet/readme-fleet-shape-guard/tsconfig.json, .claude/hooks/fleet/release-tag-tied-guard/tsconfig.json, .claude/hooks/fleet/release-workflow-guard/tsconfig.json, .claude/hooks/fleet/reply-prose-nudge/tsconfig.json, .claude/hooks/fleet/report-location-guard/tsconfig.json, .claude/hooks/fleet/reserved-script-dir-guard/tsconfig.json, .claude/hooks/fleet/rg-replace-flag-nudge/tsconfig.json, .claude/hooks/fleet/scan-label-in-commit-guard/tsconfig.json, .claude/hooks/fleet/secret-content-guard/tsconfig.json, .claude/hooks/fleet/session-handoff-nudge/tsconfig.json, .claude/hooks/fleet/setup-basics-tools/tsconfig.json, .claude/hooks/fleet/setup-claude-scanners/tsconfig.json, .claude/hooks/fleet/setup-firewall/tsconfig.json, .claude/hooks/fleet/setup-misc-tools/tsconfig.json, .claude/hooks/fleet/setup-security-tools/tsconfig.json, .claude/hooks/fleet/setup-signing/tsconfig.json, .claude/hooks/fleet/shallow-clone-guard/tsconfig.json, .claude/hooks/fleet/skill-usage-logger/tsconfig.json, .claude/hooks/fleet/small-pr-nudge/tsconfig.json, .claude/hooks/fleet/soak-exclude-date-guard/tsconfig.json, .claude/hooks/fleet/soak-exclude-scope-guard/tsconfig.json, .claude/hooks/fleet/soak-pin-needs-annotation-guard/tsconfig.json, .claude/hooks/fleet/squash-history-nudge/tsconfig.json, .claude/hooks/fleet/stale-process-sweeper/tsconfig.json, .claude/hooks/fleet/stop-claim-verify-nudge/tsconfig.json, .claude/hooks/fleet/sweep-ds-store/tsconfig.json, .claude/hooks/fleet/target-arch-env-guard/tsconfig.json, .claude/hooks/fleet/test-script-defers-guard/tsconfig.json, .claude/hooks/fleet/token-guard/tsconfig.json, .claude/hooks/fleet/token-spend-guard/tsconfig.json, .claude/hooks/fleet/trust-downgrade-guard/tsconfig.json, .claude/hooks/fleet/unbacked-claim-commit-guard/tsconfig.json, .claude/hooks/fleet/uncodified-lesson-nudge/tsconfig.json, .claude/hooks/fleet/unpushed-main-nudge/tsconfig.json, .claude/hooks/fleet/untrusted-coauthor-guard/tsconfig.json, .claude/hooks/fleet/uses-sha-verify-guard/tsconfig.json, .claude/hooks/fleet/variant-analysis-nudge/tsconfig.json, .claude/hooks/fleet/verify-absence-claims-nudge/tsconfig.json, .claude/hooks/fleet/verify-render-pre-commit-nudge/tsconfig.json, .claude/hooks/fleet/version-bump-order-guard/tsconfig.json, .claude/hooks/fleet/vitest-vs-node-test-guard/tsconfig.json, .claude/hooks/fleet/wheelhouse-drift-guard/tsconfig.json, .claude/hooks/fleet/workflow-multiline-body-guard/tsconfig.json, .claude/hooks/fleet/workflow-uses-comment-guard/tsconfig.json, .claude/hooks/fleet/worktree-remove-relink-nudge/tsconfig.json, napi/decmpfs/tsconfig.json, tsconfig.json
agent_commit_share0
toolchain_manifestsCargo.toml, crates/decmpfs/Cargo.toml, fuzz/Cargo.toml, napi/decmpfs/Cargo.toml
dependency_bot_commit_share0
Як обчислюється оцінка
45/45Типізований код — TypeScript (статично типізована)
54.1/55Керовані розміри файлів — 1/63 файлів вихідного коду понад 60 КБ
Використані вхідні дані
primary_languageTypeScript
largest_source_bytes60 023
source_files_sampled63
oversized_source_files1
Як обчислюється оцінка
0/40Схема API (OpenAPI/GraphQL/proto)
20/20Сервер MCP
0/40Придатні до запуску приклади
Використані вхідні дані
example_dirs
has_mcp_signalтак
api_schema_files

Ключові факти

0зірок GitHub
1контриб'юторів
81комітів за останні 12 місяців
0днів від останнього пушу
2релізів
1бас-фактор
0відкритих issue
crates.io, npmпакетних екосистем

Попередження щодо збору даних

  • Could not fetch crates package 'decmpfs-node' from its registry
  • crates package 'decmpfs' points at a different repository (https://github.com/decmpfs/decmpfs); excluded from ecosystem scoring

Докладніше

OpenSSF Scorecard 4.9 / 10
4.9сукупно

Незалежна, не прив'язана до інструментів оцінка безпеки від відкритого проєкту OpenSSF Scorecard. Кожна перевірка винагороджує практику безпеки, а не інструмент конкретного постачальника. Перевірки, які Scorecard не зміг визначити, позначено н/д і виключено з оцінки безпеки (вони ніколи не зараховуються як нуль).Scorecard v5.5.0 · 2026-07-26 22:49 UTC

6Binary-Artifactsbinaries present in source code
1Branch-Protectionbranch protection is not maximal on development and all release branches
н/дCI-Testsno pull request found
0CII-Best-Practicesno effort to earn an OpenSSF best practices badge detected
0Code-ReviewFound 0/30 approved changesets -- score normalized to 0
10Contributorsproject has 10 contributing companies or organizations
10Dangerous-Workflowno dangerous workflow patterns detected
10Dependency-Update-Toolupdate tool detected
0Fuzzingproject is not fuzzed
10Licenselicense file detected
0Maintainedproject was created within the last 90 days. Please review its contents carefully
н/дPackagingpackaging workflow not detected
8Pinned-Dependenciesdependency not pinned by hash detected -- score normalized to 8
0SASTno SAST tool detected
9Security-Policysecurity policy file detected
н/дSigned-Releasesno releases found
0Token-Permissionsdetected GitHub workflow tokens with excessive permissions
10Vulnerabilities0 existing vulnerabilities detected
Прямі залежності 5
РеєстрПакетОбмеження версіїМаніфест
crates.iozstd=0.13.3crates/decmpfs/Cargo.toml
crates.iosha2=0.10.9crates/decmpfs/Cargo.toml
crates.ionapi3napi/decmpfs/Cargo.toml
crates.ionapi-derive3napi/decmpfs/Cargo.toml
crates.iodecmpfsnapi/decmpfs/Cargo.toml
Усі залежності 295

Повний розв'язаний набір залежностей із графа залежностей GitHub: 6 прямих і 289 непрямих (транзитивних) пакетів. Транзитивне замикання є повним, коли в репозиторії закомічено lockfile.

РеєстрПакетВерсіяЗв'язок
crates.ionapiпряма
crates.ionapi3.10.1пряма
crates.ionapi-deriveпряма
crates.ionapi-derive3.5.9пряма
crates.iosha20.10.9пряма
crates.iozstd0.13.3пряма
crates.ioanstyle1.0.14непряма
crates.ioarbitrary1.4.2непряма
crates.ioautocfg1.5.1непряма
crates.iobit-set0.8.0непряма
crates.iobit-vec0.8.0непряма
crates.iobitflags2.13.0непряма
crates.ioblock-buffer0.10.4непряма
crates.iocc1.2.65непряма
crates.iocc1.2.67непряма
crates.iocfg-if1.0.4непряма
crates.ioconvert_case0.11.0непряма
crates.iocpufeatures0.2.17непряма
crates.iocrypto-common0.1.7непряма
crates.ioctor1.0.7непряма
crates.ioderive_arbitrary1.4.2непряма
crates.iodigest0.10.7непряма
crates.iodowncast0.11.0непряма
crates.ioerrno0.3.14непряма
crates.iofastrand2.4.1непряма
crates.iofind-msvc-tools0.1.9непряма
crates.iofnv1.0.7непряма
crates.iofragile2.1.0непряма
crates.iofutures0.3.32непряма
crates.iofutures-channel0.3.32непряма
crates.iofutures-core0.3.32непряма
crates.iofutures-executor0.3.32непряма
crates.iofutures-io0.3.32непряма
crates.iofutures-macro0.3.32непряма
crates.iofutures-sink0.3.32непряма
crates.iofutures-task0.3.32непряма
crates.iofutures-util0.3.32непряма
crates.iogeneric-array0.14.7непряма
crates.iogetrandom0.3.4непряма
crates.iogetrandom0.4.3непряма
crates.iojobserver0.1.34непряма
crates.iojobserver0.1.35непряма
crates.iolibc0.2.186непряма
crates.iolibfuzzer-sys0.4.13непряма
crates.iolibloading0.9.0непряма
crates.iolinux-raw-sys0.12.1непряма
crates.iomemchr2.8.2непряма
crates.iomockall0.15.0непряма
crates.iomockall_derive0.15.0непряма
crates.ionapi-buildнепряма
crates.ionapi-build2.3.2непряма
crates.ionapi-derive-backend5.1.1непряма
crates.ionapi-sys3.2.2непряма
crates.ionohash-hasher0.2.0непряма
crates.ionum-traits0.2.19непряма
crates.ioonce_cell1.21.4непряма
crates.iopin-project-lite0.2.17непряма
crates.iopkg-config0.3.33непряма
crates.ioppv-lite860.2.21непряма
crates.iopredicates3.1.4непряма
crates.iopredicates-core1.0.10непряма
crates.iopredicates-tree1.0.13непряма
crates.ioproc-macro21.0.106непряма
crates.ioproptest1.11.0непряма
crates.ioquick-error1.2.3непряма
crates.ioquote1.0.46непряма
crates.ior-efi5.3.0непряма
crates.ior-efi6.0.0непряма
crates.iorand0.9.5непряма
crates.iorand_chacha0.9.0непряма
crates.iorand_core0.9.5непряма
crates.iorand_xorshift0.4.0непряма
crates.ioregex-syntax0.8.11непряма
crates.iorustc-hash2.1.3непряма
crates.iorustix1.1.4непряма
crates.iorusty-fork0.3.1непряма
crates.iosemver1.0.28непряма
crates.ioshlex2.0.1непряма
crates.ioslab0.4.12непряма
crates.iosyn2.0.118непряма
crates.iotempfile3.27.0непряма
crates.iotermtree0.5.1непряма
crates.iotypenum1.20.1непряма
crates.iounarray0.1.4непряма
crates.iounicode-ident1.0.24непряма
crates.iounicode-segmentation1.13.3непряма
crates.ioversion_check0.9.5непряма
crates.iowait-timeout0.2.1непряма
crates.iowasip21.0.4+wasi-0.2.12непряма
crates.iowindows-link0.2.1непряма
crates.iowindows-sys0.59.0непряма
crates.iowindows-targets0.52.6непряма
crates.iowindows_aarch64_gnullvm0.52.6непряма
crates.iowindows_aarch64_msvc0.52.6непряма
crates.iowindows_i686_gnu0.52.6непряма
crates.iowindows_i686_gnullvm0.52.6непряма
crates.iowindows_i686_msvc0.52.6непряма
crates.iowindows_x86_64_gnu0.52.6непряма
crates.iowindows_x86_64_gnullvm0.52.6непряма
crates.iowindows_x86_64_msvc0.52.6непряма
crates.iowit-bindgen0.57.1непряма
crates.iozerocopy0.8.55непряма
crates.iozerocopy-derive0.8.55непряма
crates.iozstd-safe7.2.4непряма
crates.iozstd-sys2.0.16+zstd.1.5.7непряма
npm@decmpfs/darwin-arm640.1.2непряма
npm@decmpfs/darwin-x640.1.2непряма
npm@decmpfs/linux-arm64-gnu0.1.2непряма
npm@decmpfs/linux-x64-gnu0.1.2непряма
npm@decmpfs/win32-x64-msvc0.1.2непряма
npm@pnpm/exe11.9.0непряма
npm@pnpm/linux-arm6411.9.0непряма
npm@pnpm/linux-x6411.9.0непряма
npm@pnpm/linuxstatic-arm6411.9.0непряма
npm@pnpm/linuxstatic-x6411.9.0непряма
npm@pnpm/macos-arm6411.9.0непряма
npm@pnpm/win-arm6411.9.0непряма
npm@pnpm/win-x6411.9.0непряма
npm@reflink/reflink0.1.19непряма
npm@reflink/reflink-darwin-arm640.1.19непряма
npm@reflink/reflink-darwin-x640.1.19непряма
npm@reflink/reflink-linux-arm64-gnu0.1.19непряма
npm@reflink/reflink-linux-arm64-musl0.1.19непряма
npm@reflink/reflink-linux-x64-gnu0.1.19непряма
npm@reflink/reflink-linux-x64-musl0.1.19непряма
npm@reflink/reflink-win32-arm64-msvc0.1.19непряма
npm@reflink/reflink-win32-x64-msvc0.1.19непряма
npm@sinclair/typeboxcatalog:непряма
npm@socketregistry/packageurl-js-stablecatalog:непряма
npm@socketsecurity/lib-stablecatalog:непряма
npm@socketsecurity/sdk-stablecatalog:непряма
npm@types/nodecatalog:непряма
npm@ultrathink/acorn.wasmcatalog:непряма
npmcompromisecatalog:непряма
npmdetect-libc2.1.2непряма
npmpnpm11.9.0непряма
npmregjsparsercatalog:непряма
npmshell-quotecatalog:непряма
npmtypescriptcatalog:непряма
PyPIaiohappyeyeballs2.6.2непряма
PyPIaiohttp3.14.1непряма
PyPIaiosignal1.4.0непряма
PyPIannotated-doc0.0.4непряма
PyPIannotated-types0.7.0непряма
PyPIanyio4.13.0непряма
PyPIast-grep-cli0.42.3непряма
PyPIasync-timeout5.0.1непряма
PyPIattrs26.1.0непряма
PyPIblockbuster1.5.26непряма
PyPIcertifi2026.4.22непряма
PyPIcertifi2026.5.20непряма
PyPIcffi2.0.0непряма
PyPIcharset-normalizer3.4.7непряма
PyPIclick8.4.0непряма
PyPIclick8.4.1непряма
PyPIcloudpickle3.1.2непряма
PyPIcolorama0.4.6непряма
PyPIcoloredlogs15.0.1непряма
PyPIcroniter6.2.2непряма
PyPIcryptography48.0.1непряма
PyPIdistro1.9.0непряма
PyPIexceptiongroup1.3.1непряма
PyPIfastapi0.136.3непряма
PyPIfastuuid0.14.0непряма
PyPIfilelock3.29.1непряма
PyPIflatbuffers25.12.19непряма
PyPIforbiddenfruit0.1.4непряма
PyPIfrozenlist1.8.0непряма
PyPIfsspec2026.4.0непряма
PyPIgoogleapis-common-protos1.75.0непряма
PyPIgrpcio1.78.0непряма
PyPIgrpcio-health-checking1.78.0непряма
PyPIgrpcio-tools1.78.0непряма
PyPIh110.16.0непряма
PyPIh24.3.0непряма
PyPIheadroom-ai0.30.0непряма
PyPIhf-xet1.5.1непряма
PyPIhpack4.1.0непряма
PyPIhttpcore1.0.9непряма
PyPIhttptools0.7.1непряма
PyPIhttpx0.28.1непряма
PyPIhttpx-sse0.4.3непряма
PyPIhuggingface-hub1.18.0непряма
PyPIhumanfriendly10.0непряма
PyPIhyperframe6.1.0непряма
PyPIidna3.15непряма
PyPIidna3.18непряма
PyPIimportlib-metadata8.7.1непряма
PyPIimportlib-metadata8.9.0непряма
PyPIjinja23.1.6непряма
PyPIjiter0.14.0непряма
PyPIjiter0.15.0непряма
PyPIjsonpatch1.33непряма
PyPIjsonpointer3.1.1непряма
PyPIjsonschema4.26.0непряма
PyPIjsonschema-rs0.44.1непряма
PyPIjsonschema-specifications2025.9.1непряма
PyPIlangchain-core1.4.0непряма
PyPIlangchain-openai1.2.1непряма
PyPIlangchain-protocol0.0.15непряма
PyPIlanggraph1.2.0непряма
PyPIlanggraph-api0.8.7непряма
PyPIlanggraph-checkpoint4.1.1непряма
PyPIlanggraph-cli0.4.26непряма
PyPIlanggraph-prebuilt1.1.0непряма
PyPIlanggraph-runtime-inmem0.28.1непряма
PyPIlanggraph-sdk0.3.15непряма
PyPIlangsmith0.8.18непряма
PyPIlitellm1.88.1непряма
PyPImagika1.0.3непряма
PyPImarkdown-it-py4.2.0непряма
PyPImarkupsafe3.0.3непряма
PyPImcp1.28.1непряма
PyPImdurl0.1.2непряма
PyPImpmath1.3.0непряма
PyPImultidict6.7.1непряма
PyPInumpy2.2.6непряма
PyPInumpy2.4.6непряма
PyPIonnxruntime1.23.2непряма
PyPIonnxruntime1.26.0непряма
PyPIopenai2.37.0непряма
PyPIopenai2.41.0непряма
PyPIopentelemetry-api1.41.1непряма
PyPIopentelemetry-api1.42.1непряма
PyPIopentelemetry-exporter-otlp-proto-common1.41.1непряма
PyPIopentelemetry-exporter-otlp-proto-http1.41.1непряма
PyPIopentelemetry-proto1.41.1непряма
PyPIopentelemetry-sdk1.41.1непряма
PyPIopentelemetry-semantic-conventions0.62b1непряма
PyPIorjson3.11.9непряма
PyPIormsgpack1.12.2непряма
PyPIpackaging26.2непряма
PyPIpathspec1.1.1непряма
PyPIpropcache0.5.2непряма
PyPIprotobuf6.33.6непряма
PyPIprotobuf7.35.0непряма
PyPIpycparser3.0непряма
PyPIpydantic2.13.4непряма
PyPIpydantic-core2.46.4непряма
PyPIpydantic-settings2.14.2непряма
PyPIpygments2.20.0непряма
PyPIpyjwt2.13.0непряма
PyPIpyreadline33.5.6непряма
PyPIpython-dateutil2.9.0.post0непряма
PyPIpython-dotenv1.2.2непряма
PyPIpython-multipart0.0.32непряма
PyPIpywin32312непряма
PyPIpyyaml6.0.3непряма
PyPIreferencing0.37.0непряма
PyPIregex2026.5.9непряма
PyPIrequests2.34.2непряма
PyPIrequests-toolbelt1.0.0непряма
PyPIrich15.0.0непряма
PyPIrpds-py0.30.0непряма
PyPIrpds-py2026.5.1непряма
PyPIsafetensors0.8.0непряма
PyPIsetuptools83.0.0непряма
PyPIshellingham1.5.4непряма
PyPIsix1.17.0непряма
PyPIskillspector2.0.0непряма
PyPIsniffio1.3.1непряма
PyPIsocket-headroom-pin0.0.0непряма
PyPIsocket-skillspector-pin0.0.0непряма
PyPIsqlite-vec0.1.9непряма
PyPIsse-starlette3.3.4непряма
PyPIsse-starlette3.4.4непряма
PyPIstarlette1.3.1непряма
PyPIstructlog25.5.0непряма
PyPIsympy1.14.0непряма
PyPItenacity9.1.4непряма
PyPItiktoken0.13.0непряма
PyPItokenizers0.22.2непряма
PyPItomli2.4.1непряма
PyPItqdm4.67.3непряма
PyPItqdm4.68.2непряма
PyPItransformers5.10.2непряма
PyPItruststore0.10.4непряма
PyPItyper0.23.2непряма
PyPItyper0.25.1непряма
PyPItyping-extensions4.15.0непряма
PyPItyping-inspection0.4.2непряма
PyPIurllib32.7.0непряма
PyPIuuid-utils0.15.0непряма
PyPIuvicorn0.47.0непряма
PyPIuvicorn0.49.0непряма
PyPIuvloop0.22.1непряма
PyPIwatchdog6.0.0непряма
PyPIwatchfiles1.1.1непряма
PyPIwebsockets16.0непряма
PyPIxxhash3.7.0непряма
PyPIyara-python4.5.4непряма
PyPIyarl1.24.2непряма
PyPIzipp3.23.1непряма
PyPIzipp4.1.0непряма
PyPIzstandard0.25.0непряма
Сповіщення про залежності 0

Встановлення crates:decmpfs@0.1.2 тягне 62 пакетів, прямих і транзитивних: 0 мають відомі сповіщення, з них 0 — прямі залежності.

Жодне відоме сповіщення не стосується оцінених залежностей.

Сповіщення означає, що версія, записана в графі залежностей, потрапляє в уражений діапазон. Досяжність не аналізується, а граф містить піниї розробки й тестування — знахідка може стосуватися інструментів, а не поставленого коду.

Звіт у форматі JSON машиночитний
{
  "data": {
    "repo": {
      "topics": [],
      "is_fork": false,
      "size_kb": 8254,
      "has_wiki": false,
      "homepage": null,
      "languages": {
        "C": 12349,
        "HTML": 3349,
        "Rust": 329919,
        "Shell": 17422,
        "JavaScript": 3491983,
        "TypeScript": 4597877
      },
      "pushed_at": "2026-07-26T21:22:43Z",
      "created_at": "2026-06-30T00:02:40Z",
      "owner_type": "Organization",
      "updated_at": "2026-07-26T21:22:49Z",
      "description": null,
      "is_archived": false,
      "is_disabled": false,
      "license_spdx": "MIT",
      "default_branch": "main",
      "license_spdx_raw": "MIT",
      "primary_language": "TypeScript",
      "significant_languages": [
        "TypeScript",
        "JavaScript"
      ]
    },
    "owner": {
      "blog": "https://socket.dev",
      "name": "Socket",
      "type": "Organization",
      "login": "SocketDev",
      "company": null,
      "location": "United States of America",
      "followers": 784,
      "avatar_url": "https://avatars.githubusercontent.com/u/69326764?v=4",
      "created_at": "2020-08-06T21:36:01Z",
      "is_verified": null,
      "public_repos": 50,
      "account_age_days": 2180
    },
    "license": {
      "state": "standard",
      "spdx_id": "MIT",
      "raw_spdx": "MIT",
      "file_present": true,
      "scorecard_found": true,
      "profile_has_license": true
    },
    "activity": {
      "releases": [
        {
          "tag": "v0.1.2",
          "kind": "patch",
          "published_at": "2026-07-24T22:04:56Z"
        },
        {
          "tag": "v0.1.1",
          "kind": "patch",
          "published_at": "2026-07-22T02:01:11Z"
        }
      ],
      "recent_commits": [
        {
          "oid": "1c3f01e7f05ff0d3aae9d1af908f3c5c4255ecad",
          "body": null,
          "is_bot": false,
          "headline": "chore(fleet): refresh mirrors from bundle 1.0.13",
          "author_name": "jdalton",
          "author_login": "jdalton",
          "committed_at": "2026-07-26T21:22:28Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "c93b59d23eebd72b196c591cc41475df14a7ea77",
          "body": null,
          "is_bot": false,
          "headline": "chore(fleet): apply cascade prunes and refresh the lockfile",
          "author_name": "jdalton",
          "author_login": "jdalton",
          "committed_at": "2026-07-26T12:18:00Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "a1433b5eaf2c8c3619a85956d71e3df6a6383472",
          "body": "The npm main manifest (platform dirs regenerate from it via\nmake-npm-dirs), the placeholder generator, and the crate manifest all\ncarried github.com/decmpfs/decmpfs — a nonexistent repo. npm provenance\nvalidates repository.url against the building repo, so the mismatch\nwould fail the attestation on the first real publish.",
          "is_bot": false,
          "headline": "fix(npm): point repository metadata at the real SocketDev owner",
          "author_name": "jdalton",
          "author_login": "jdalton",
          "committed_at": "2026-07-26T12:17:40Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "060d50d92d697aee24c92c4a8c535b68932ad3d2",
          "body": "Auto-applied by socket-wheelhouse sync-scaffolding into decmpfs.\n166 file(s) touched:\n  - .claude/hooks/fleet/_dispatch/dispatch.mts\n  - .claude/hooks/fleet/_shared/ast/core.mts\n  - .claude/hooks/fleet/_shared/es-polyfills.mts\n  - .claude/hooks/fleet/alpha-sort-nudge/index.mts\n  - .claude/hooks/flee\n[…]\n.mts\n  - .claude/hooks/fleet/gh-token-hygiene-guard/index.mts\n  - .claude/hooks/fleet/gitmodules-comment-guard/index.mts\n  - .claude/hooks/fleet/hook-snapshot-rewire-nudge/index.mts\n  ... and 146 more",
          "is_bot": false,
          "headline": "chore(wheelhouse): cascade template@3bef5cc3b",
          "author_name": "jdalton",
          "author_login": "jdalton",
          "committed_at": "2026-07-26T12:15:17Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "8fc157d33a77688cb81ab2d49414400a55e27949",
          "body": null,
          "is_bot": false,
          "headline": "fix(deps): override js-yaml to 5.2.2 for GHSA-pm4m-ph32-ghv5",
          "author_name": "jdalton",
          "author_login": "jdalton",
          "committed_at": "2026-07-25T22:14:38Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "dfa889f631bc1424afd68b5a0731ccc20f68fe1d",
          "body": null,
          "is_bot": false,
          "headline": "chore(fleet): refresh mirrors from bundle 1.0.12",
          "author_name": "jdalton",
          "author_login": "jdalton",
          "committed_at": "2026-07-25T12:20:17Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "582c0be8063f5b9af34226e8a6d927072fb6f161",
          "body": null,
          "is_bot": false,
          "headline": "chore(fleet): drop orphaned actions lib/ dir superseded by _shared",
          "author_name": "jdalton",
          "author_login": "jdalton",
          "committed_at": "2026-07-25T12:16:42Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "9e4134a23d4805e2e2c4b739f33847728f600dd4",
          "body": null,
          "is_bot": false,
          "headline": "chore(deps): relock for @socketsecurity/sdk 4.0.4",
          "author_name": "jdalton",
          "author_login": "jdalton",
          "committed_at": "2026-07-24T22:02:34Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "90a2a8ec0981673f66e4c54b2d0bd57dfba92cf5",
          "body": null,
          "is_bot": false,
          "headline": "fix(ci): publish with the rustup cargo ahead of the sfw shim",
          "author_name": "jdalton",
          "author_login": "jdalton",
          "committed_at": "2026-07-24T21:57:53Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "0fd5c7da46bf51ae5277e727de6f861551e9f9b3",
          "body": "Auto-applied by socket-wheelhouse sync-scaffolding into decmpfs.\n33 file(s) touched:\n  - .claude/output-styles/fleet.md\n  - .claude/skills/fleet/reviewing-web-interfaces/SKILL.md\n  - .claude/skills/fleet/reviewing-web-interfaces/references/shadscan-audit.md\n  - .config/fleet/.prettierignore\n  - .con\n[…]\ngithub/actions/fleet/install/action.yml\n  - .github/actions/fleet/install/semver.mjs\n  - .github/actions/fleet/setup-and-install/action.yml\n  - .github/actions/fleet/setup/action.yml\n  ... and 13 more",
          "is_bot": false,
          "headline": "chore(wheelhouse): cascade template@d72753044",
          "author_name": "jdalton",
          "author_login": "jdalton",
          "committed_at": "2026-07-24T21:56:29Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "ea2140d74b59c7eec35398e7eeec7c3a906ece7f",
          "body": "…r parity with CI",
          "is_bot": false,
          "headline": "fix(release): generate platform manifests before the relock — importe…",
          "author_name": "jdalton",
          "author_login": "jdalton",
          "committed_at": "2026-07-24T16:46:24Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "16af6654067ed786a74683d384043e7721792567",
          "body": "… parity for the 0.1.2 importers",
          "is_bot": false,
          "headline": "fix(release): relock with platform manifests present — frozen install…",
          "author_name": "jdalton",
          "author_login": "jdalton",
          "committed_at": "2026-07-24T16:45:40Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "6af3cfe3e888bd234edc72f49513bdc1e0999d20",
          "body": null,
          "is_bot": false,
          "headline": "chore(deps): settle catalog pins — sdk 4.0.3",
          "author_name": "jdalton",
          "author_login": "jdalton",
          "committed_at": "2026-07-24T16:35:54Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "220b8dff3547284d4d6ebddc4cf0be36512b99f5",
          "body": null,
          "is_bot": false,
          "headline": "chore(fleet): drop empty lockstep seed; sync member-guarded mirror gate",
          "author_name": "jdalton",
          "author_login": "jdalton",
          "committed_at": "2026-07-24T15:56:01Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "d22734bf1362618e5297fa2f4b631940a4f5efb0",
          "body": null,
          "is_bot": false,
          "headline": "chore(deps): bump @socketregistry/packageurl-js catalog pin to 1.4.7",
          "author_name": "jdalton",
          "author_login": "jdalton",
          "committed_at": "2026-07-24T15:45:56Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "c3faa7d42aaa41e46ecc13ac23277073c89f5e42",
          "body": null,
          "is_bot": false,
          "headline": "chore: bump version to 0.1.2",
          "author_name": "jdalton",
          "author_login": "jdalton",
          "committed_at": "2026-07-24T15:39:17Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "82c9600ba38230d137072ff5583f15038a4feddf",
          "body": null,
          "is_bot": false,
          "headline": "chore(test): finish release-lib test relocation to test/unit",
          "author_name": "jdalton",
          "author_login": "jdalton",
          "committed_at": "2026-07-24T15:39:12Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "2fff9eb34b58f5362d3bc5fe30fdc5ed3fee73fc",
          "body": "…sts keep safeDelete\n\nThe tests use the guarded lib-stable cleanup by doctrine; the missing\npiece was the install step the typecheck job already had. Reverts the\ninterim raw-fs rewrite.",
          "is_bot": false,
          "headline": "fix(ci): install workspace devDependencies in the test job — addon te…",
          "author_name": "jdalton",
          "author_login": "jdalton",
          "committed_at": "2026-07-24T15:30:21Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "9fd7d00e3716f5c24833574dfda4734069b95823",
          "body": "The lint sweep swapped mkdtemp cleanup to lib-stable safeDelete in the\nfour addon tests, which only resolves after a pnpm install the Test job\nnever runs. Back to node:fs rm/rmSync on the tests own tmp dirs; the\ninterim devDependency comes out again.",
          "is_bot": false,
          "headline": "fix(napi): addon tests stay dep-0 — the CI Test job runs with no install",
          "author_name": "jdalton",
          "author_login": "jdalton",
          "committed_at": "2026-07-24T15:20:39Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "472ecd600ffb7667627b2183b23fd3d9960bb4f3",
          "body": null,
          "is_bot": false,
          "headline": "chore(deps): bump @socketsecurity/lib catalog pin to 6.2.3",
          "author_name": "jdalton",
          "author_login": "jdalton",
          "committed_at": "2026-07-24T15:11:32Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "aa5014ad5ac498b2993645b5e45513bcf26295dd",
          "body": "…b-stable into a pre-install script",
          "is_bot": false,
          "headline": "fix(ci): setup-pnpm install-tool stays dep-0 — lint sweep imported li…",
          "author_name": "jdalton",
          "author_login": "jdalton",
          "committed_at": "2026-07-24T15:08:19Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "038dbf5259ee20e7eafa918d37841197f66f8978",
          "body": "… gate",
          "is_bot": false,
          "headline": "style(test): exitCode over exit; js branch structured out of the rust…",
          "author_name": "jdalton",
          "author_login": "jdalton",
          "committed_at": "2026-07-24T15:06:04Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "77670b4252ef032bab910c06bd7b484cbb3e7216",
          "body": "feat/fix/perf render as conventionalcommits-shaped sections with scope\nlead-ins; plumbing (ci, deps, fleet churn, lint waves) drops out; a\nrelease with nothing user-facing says so plainly. The named-file test\npath in the wrapper runs node --test instead of Rust-gating.",
          "is_bot": false,
          "headline": "feat(release): derive the CHANGELOG section from commit subjects",
          "author_name": "jdalton",
          "author_login": "jdalton",
          "committed_at": "2026-07-24T15:04:24Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "0fb3935b62400030d6d8c0d9094b4f1d6c3847ba",
          "body": null,
          "is_bot": false,
          "headline": "chore(fleet): refresh mirrors from bundle 1.0.11",
          "author_name": "jdalton",
          "author_login": "jdalton",
          "committed_at": "2026-07-24T14:57:14Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "425fdb0eb281fb0c90d1a55710c5434cd6f6159d",
          "body": "…it — hoisting broke on the catalog bump",
          "is_bot": false,
          "headline": "fix(napi): declare @socketsecurity/lib-stable where the tests import …",
          "author_name": "jdalton",
          "author_login": "jdalton",
          "committed_at": "2026-07-24T14:51:55Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "5505d88fa2dc5b7b8c656c910e9bf5fa40c19417",
          "body": null,
          "is_bot": false,
          "headline": "chore(deps): bump @socketregistry/packageurl-js catalog pin to 1.4.6",
          "author_name": "jdalton",
          "author_login": "jdalton",
          "committed_at": "2026-07-24T13:23:25Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "1a7617a5363590267e6898ad67caeb6ee9e6cbd1",
          "body": null,
          "is_bot": false,
          "headline": "chore(deps): bump @socketsecurity/sdk catalog pin to 4.0.2",
          "author_name": "jdalton",
          "author_login": "jdalton",
          "committed_at": "2026-07-24T11:40:05Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "840ba831304f168a084ceba9e37fc4bb33765e45",
          "body": null,
          "is_bot": false,
          "headline": "chore(deps): bump @socketregistry/packageurl-js catalog pin to 1.4.5",
          "author_name": "jdalton",
          "author_login": "jdalton",
          "committed_at": "2026-07-24T05:36:22Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "2eb8399dc80a3a2c3aa7b47faed1ae7076ff3936",
          "body": null,
          "is_bot": false,
          "headline": "chore(deps): bump @socketsecurity/lib catalog pin to 6.2.2",
          "author_name": "jdalton",
          "author_login": "jdalton",
          "committed_at": "2026-07-24T03:30:51Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "5bd8449a4c0c8d9cec8eaab0b14711ab25fcedce",
          "body": null,
          "is_bot": false,
          "headline": "chore(deps): bump @socketsecurity/lib catalog pin to 6.2.1",
          "author_name": "jdalton",
          "author_login": "jdalton",
          "committed_at": "2026-07-24T00:31:20Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "1f9d4f38eb810eb4a1ea7332f08252d789f088d9",
          "body": null,
          "is_bot": false,
          "headline": "chore(fleet): refresh mirrors from bundle v1.0.10",
          "author_name": "jdalton",
          "author_login": "jdalton",
          "committed_at": "2026-07-23T23:19:24Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "61c4ce6f4f7d0526f93b5787d2d5f8c5a3294da5",
          "body": null,
          "is_bot": false,
          "headline": "style: hand-fix remaining full-lint findings",
          "author_name": "jdalton",
          "author_login": "jdalton",
          "committed_at": "2026-07-23T21:09:15Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "53587f431f72688ed8e2cf40e36c315aa0da7318",
          "body": null,
          "is_bot": false,
          "headline": "chore(soak): drop @socketaddon/* + @socketbin/* excludes — dead scopes",
          "author_name": "jdalton",
          "author_login": "jdalton",
          "committed_at": "2026-07-23T21:03:17Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "54b0a461650f24ab63f51c943ca837aff0546662",
          "body": null,
          "is_bot": false,
          "headline": "style: lint --fix --all wave",
          "author_name": "jdalton",
          "author_login": "jdalton",
          "committed_at": "2026-07-23T20:55:31Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "8c26322406785e5e8dc3cbf2aecadacb4cdd75bc",
          "body": null,
          "is_bot": false,
          "headline": "chore(fleet): pre-take lint stack from template",
          "author_name": "jdalton",
          "author_login": "jdalton",
          "committed_at": "2026-07-23T20:53:34Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "6bff47c7e6cb635d30187f56536fa5aa180db66c",
          "body": null,
          "is_bot": false,
          "headline": "docs(readme): fold parenthetical asides into their sentences",
          "author_name": "jdalton",
          "author_login": "jdalton",
          "committed_at": "2026-07-23T20:06:31Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "e721881237c42fbce2c9add94546937f4aba947d",
          "body": "…-stable to 1.4.4",
          "is_bot": false,
          "headline": "chore(deps): bump @socketsecurity/lib catalog to 6.2.0, packageurl-js…",
          "author_name": "jdalton",
          "author_login": "jdalton",
          "committed_at": "2026-07-23T20:06:15Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "bc2a93609bc1233475f4dfe004753179f189a2fd",
          "body": "The cascade tightened clippy to ban std::env::current_dir. decmpfs's safe-delete\nguard legitimately reads the process cwd through the Io seam's cwd() (mocked in\ntests) to refuse deleting the cwd/its ancestors (socket-lib safeDelete model);\nits guard test reads the real cwd to prove that. Per-site #[allow] with reasons,\nnot a global config weakening. Greens the Check step on all 3 Test jobs.",
          "is_bot": false,
          "headline": "fix(remove): allow current_dir at the Io-seam cwd + its guard test",
          "author_name": "jdalton",
          "author_login": "jdalton",
          "committed_at": "2026-07-22T16:00:41Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "d428ec5744206d46ec252d26072ea1f27200d1d0",
          "body": "… packages\n\nThe 0.1.1 release added five `@decmpfs/<triple>@0.1.1` optionalDependencies to\nnapi/decmpfs/package.json but never backfilled the lockfile, so CI's\n`pnpm install --frozen-lockfile` (the Typecheck job) failed ERR_PNPM_OUTDATED_LOCKFILE.\nRegenerated the lock (adds the 5 importer entries, nothing else). Greens the red\n`🧷 Typecheck (.d.cts)` job on main.",
          "is_bot": false,
          "headline": "fix(napi): resync pnpm-lock with the @decmpfs/<triple>@0.1.1 platform…",
          "author_name": "jdalton",
          "author_login": "jdalton",
          "committed_at": "2026-07-22T15:51:28Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "9e0757f2680faa18251a325c4f9bce4d5d1eb0e4",
          "body": null,
          "is_bot": false,
          "headline": "refactor(config): move socket-wheelhouse.json to .config/repo",
          "author_name": "jdalton",
          "author_login": "jdalton",
          "committed_at": "2026-07-22T03:40:05Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "f6dada67cfd5a341a2181071471014775683f192",
          "body": "Auto-applied by socket-wheelhouse sync-scaffolding into decmpfs.\n4 file(s) touched:\n  - bootstrap/fleet.mjs\n  - bootstrap/src/fleet.mts\n  - bootstrap/src/install.mts\n  - bootstrap/src/lockstep.mts",
          "is_bot": false,
          "headline": "chore(wheelhouse): cascade template@1f9cbd9ed",
          "author_name": "jdalton",
          "author_login": "jdalton",
          "committed_at": "2026-07-22T03:39:38Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "b13c028938b08b01f5440bd4f0e73578374f8032",
          "body": "…a, sync cascade residue",
          "is_bot": false,
          "headline": "refactor(config): seed segregated lockstep manifest, drop loose schem…",
          "author_name": "jdalton",
          "author_login": "jdalton",
          "committed_at": "2026-07-22T03:27:20Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "4914c5e90531bf9dde0c08c70f0446e0a190ffa4",
          "body": "Auto-applied by socket-wheelhouse sync-scaffolding into decmpfs.\n358 file(s) touched:\n  - .claude/commands/fleet/update-hooks-dry.md\n  - .claude/commands/fleet/update-pricing.md\n  - .claude/hooks/fleet/_dispatch/SNAPSHOT-NOTES.md\n  - .claude/hooks/fleet/_shared/README.md\n  - .claude/hooks/fleet/_sha\n[…]\nDME.md\n  - .claude/hooks/fleet/c8-ignore-reason-guard/README.md\n  - .claude/hooks/fleet/c8-ignore-reason-guard/index.mts\n  - .claude/hooks/fleet/cascade-first-triage-nudge/README.md\n  ... and 338 more",
          "is_bot": false,
          "headline": "chore(wheelhouse): cascade template@a16b85755",
          "author_name": "jdalton",
          "author_login": "jdalton",
          "committed_at": "2026-07-22T03:21:00Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "9f85b3216aa039d1a3af38f80590066d4e11b9cc",
          "body": "…up-and-install\n\nsetup-and-install does its own git auth; a persisted checkout token conflicts and\n400s its fetch. Match the working github-release.yml pattern: a credential-less\nbootstrap checkout only to make the local composite resolvable.",
          "is_bot": false,
          "headline": "fix(ci): bootstrap checkout with persist-credentials:false before set…",
          "author_name": "jdalton",
          "author_login": "jdalton",
          "committed_at": "2026-07-22T02:23:45Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "ad063b7443401699ec99acee422c6e97fc2ce1f5",
          "body": "…publish\n\nA local (./…) action can't be loaded until the repo is checked out; the preset\nstarted with setup-and-install and had no checkout, so the step failed to find\nits action.yml.",
          "is_bot": false,
          "headline": "fix(ci): checkout before the local setup-and-install action in cargo-…",
          "author_name": "jdalton",
          "author_login": "jdalton",
          "committed_at": "2026-07-22T02:19:14Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "812a7512c12c9819250e1f6385d4e4b43632ee3d",
          "body": "…sh env)\n\nReplace the divergent on:release + raw 'cargo publish' under the 'release'\nenvironment with the fleet preset: workflow_dispatch-only (so the inputs context\nis valid — the old on:release + inputs.dry-run startup-failed), staged/--direct\nvia cargo-publish.mts, OIDC Trusted Publishing + provenance, gated by the\nsame-named 'cargo-publish' environment.",
          "is_bot": false,
          "headline": "fix(ci): align cargo-publish to the fleet preset (staged, cargo-publi…",
          "author_name": "jdalton",
          "author_login": "jdalton",
          "committed_at": "2026-07-22T02:16:30Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "983282470fa250714028c8ed5c0790c888fdba1b",
          "body": "…on release)\n\nThe job's environment/DRY_RUN expressions read inputs.dry-run, but the inputs\ncontext isn't populated for the release event → workflow startup_failure, so no\npublish ran. github.event.inputs is always available (empty off-dispatch) and\nits string form makes the == 'true' compare correct.",
          "is_bot": false,
          "headline": "fix(ci): use github.event.inputs in cargo-publish (inputs ctx absent …",
          "author_name": "jdalton",
          "author_login": "jdalton",
          "committed_at": "2026-07-22T02:08:19Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "f5f14ce899e262c3a785fd807e2447034577ccef",
          "body": "…table tags\n\nMove the pure prerelease/bump/as-committed resolver into release-lib.mts with a\nno-network unit test (was inline + untested), and refuse to move a tag whose\nGitHub Release was already cut (verify-before-acting).",
          "is_bot": false,
          "headline": "refactor(release): extract resolveRelease to a tested lib; guard immu…",
          "author_name": "jdalton",
          "author_login": "jdalton",
          "committed_at": "2026-07-22T01:44:11Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "f0000b7eb2fbb06c6b960641087a26c0e1d7d4d9",
          "body": null,
          "is_bot": false,
          "headline": "chore: sync pnpm-lock.yaml",
          "author_name": "jdalton",
          "author_login": "jdalton",
          "committed_at": "2026-07-22T01:35:37Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "7abb44dfbbcaebba7761020ef348602063a23acf",
          "body": "Run pnpm install --lockfile-only after the napi manifest bump and include\npnpm-lock.yaml in the release commit when it changed, so a release never leaves\nthe lock drifted.",
          "is_bot": false,
          "headline": "fix(release): resync pnpm-lock.yaml after the version bump",
          "author_name": "jdalton",
          "author_login": "jdalton",
          "committed_at": "2026-07-22T01:34:58Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "28d1da508d31fd67c781f6948090e28e8e4b5c74",
          "body": null,
          "is_bot": false,
          "headline": "fix(release): dep-0 mint-app-token (cascade from wheelhouse)",
          "author_name": "jdalton",
          "author_login": "jdalton",
          "committed_at": "2026-07-21T22:28:40Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "a4a0139776461ddab394c91697479727b7296e5e",
          "body": "Render on GitHub, crates.io, and npm: light/dark combomark via <picture> with a\nlight <img> fallback, absolute raw-GitHub asset URLs (relative paths don't\nresolve on npm), a floating Socket badge linked to the package page (the pinned\n0.2.0 didn't exist, so it 404'd), and the npm README gets the npm-tuned logo.",
          "is_bot": false,
          "headline": "docs: cross-registry logo + badges (light/dark, absolute URLs)",
          "author_name": "jdalton",
          "author_login": "jdalton",
          "committed_at": "2026-07-21T22:28:40Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "9249c0dc55f76d48f9e8ab4bb23ed5c38c7039bb",
          "body": null,
          "is_bot": false,
          "headline": "chore: bump version to 0.1.1",
          "author_name": "jdalton",
          "author_login": "jdalton",
          "committed_at": "2026-07-21T22:22:23Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "da2f0f7cf5585412b917665a1ca4efab7e14b737",
          "body": null,
          "is_bot": false,
          "headline": "test(fuzz): add generated decode_pressed_data corpus entries",
          "author_name": "jdalton",
          "author_login": "jdalton",
          "committed_at": "2026-07-21T22:22:04Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "22e0f7ec11b4361d9c270f444d22948e7b66bf61",
          "body": "release.mts now previews the plan with --dry-run (detected version, CHANGELOG\nsection, tag) without touching the tree, and auto-finalizes a committed\n-prerelease version to its plain semver (0.1.1-prerelease -> 0.1.1), reusing the\nCHANGELOG section already written for it instead of dying on the no-op edit.",
          "is_bot": false,
          "headline": "feat(release): --dry-run + auto-finalize a -prerelease version",
          "author_name": "jdalton",
          "author_login": "jdalton",
          "committed_at": "2026-07-21T22:03:23Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "36c47e92f11030f75fa4b90e3991f09aa78bb5ac",
          "body": null,
          "is_bot": false,
          "headline": "test(fuzz): add proptest properties + gate parser/glob fuzz targets",
          "author_name": "jdalton",
          "author_login": "jdalton",
          "committed_at": "2026-07-21T16:21:29Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "a4619e39f84aad0a217e24be77cfef42816c620f",
          "body": "Collapses the 51 commits since the crates.io 0.1.0 publish (SHA 55fb470) into one. Net: version 0.1.1-prerelease hint (crate + napi + 5 platform pins), fleet tooling cascades, brand mark, rust 1.97.1 pin, .codex untrack. Published 0.1.0 history preserved.",
          "is_bot": false,
          "headline": "chore: consolidate development since 0.1.0",
          "author_name": "jdalton",
          "author_login": "jdalton",
          "committed_at": "2026-07-21T12:23:40Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "55fb470a720c03e8cf4feb76c600b7cc1a277838",
          "body": "Gate non-dry-run publishes behind a 'release' GitHub environment (reviewer\napproval + a tighter OIDC trusted-publisher match); dry runs skip it.",
          "is_bot": false,
          "headline": "ci(node): run real publishes in the release environment",
          "author_name": "jdalton",
          "author_login": "jdalton",
          "committed_at": "2026-06-30T00:07:55Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "10885186f3dde3678aaf2e2ae9ca6e4c4b17c34b",
          "body": "Ahead of transferring the repo to the decmpfs GitHub org: repository fields,\ngenerated placeholder metadata, and the provenance.yml job_workflow_ref comment\nnow reference github.com/decmpfs/decmpfs.",
          "is_bot": false,
          "headline": "chore: point repository URLs at the decmpfs org",
          "author_name": "jdalton",
          "author_login": "jdalton",
          "committed_at": "2026-06-29T23:26:13Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "80b6ba0a53d46a88c92786b700ce4f99d30c3141",
          "body": "The loader still required the old @jdalton scope (only the comment had been\nrenamed), so it would never find the published @decmpfs/* packages — masked in\ntests by the local ./decmpfs.node fallback.",
          "is_bot": false,
          "headline": "fix(node): loader resolves @decmpfs/<triple>, not @jdalton/decmpfs-",
          "author_name": "jdalton",
          "author_login": "jdalton",
          "committed_at": "2026-06-29T23:26:13Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "2440d5db966e8a178d0aeba7c3990cf5a95e1e79",
          "body": "Matrix-build each platform addon (one runner per triple), then an inlined publish\njob publishes every @decmpfs/<triple> package plus the main decmpfs package with\nprovenance via npm OIDC trusted publishing. Inlined (not a reusable workflow) so\njob_workflow_ref stays stable for the trusted-publisher match, mirroring\nsocket-lib; dry-run defaults true, actions SHA-pinned.",
          "is_bot": false,
          "headline": "ci(node): add provenance.yml to publish @decmpfs addons via OIDC",
          "author_name": "jdalton",
          "author_login": "jdalton",
          "committed_at": "2026-06-29T22:34:27Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "dc4f3e94abe2e7bdbf7318db5972816a90f055cb",
          "body": "…tstrap\n\nmake-placeholders.mts emits minimal version-0.0.0 packages (no binary, no\nprovenance) so the @decmpfs/<triple> names can be claimed by a one-time manual\npublish — the prerequisite for configuring npm trusted publishing, after which CI\npublishes the real binaries with provenance. Generated tree is gitignored.",
          "is_bot": false,
          "headline": "build(node): generate @decmpfs/* placeholder packages for publish boo…",
          "author_name": "jdalton",
          "author_login": "jdalton",
          "committed_at": "2026-06-29T21:56:50Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "c9d7f8e6cd7534d617ba3c0b8deed001e9f4d377",
          "body": "The per-platform packages are addons (a .node dlopen'd into Node), so they take\nnapi-rs's platformArchABI naming (explicit -gnu/-musl/-msvc), not pnpm pack-app's\nbinary naming — an addon built against one C library can't load on another. Scope\nthem under the dedicated @decmpfs org: @decmpfs/darwin-arm64,\n@decmpfs/linux-x64-gnu, @decmpfs/win32-x64-msvc, etc. Loader, generator, and\noptionalDependencies all track the target list.",
          "is_bot": false,
          "headline": "build(node): scope platform addons under @decmpfs with napi-rs naming",
          "author_name": "jdalton",
          "author_login": "jdalton",
          "committed_at": "2026-06-29T21:55:41Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "c46da26953047f2e99c513ede434bd2fd602efdd",
          "body": "scripts/targets.mts is the canonical platform list; scripts/make-npm-dirs.mts\nwrites node/npm/<triple>/package.json for each (os/cpu/libc gates, hardened\npublishConfig) and stages the host's freshly built binary. The generated npm/\ntree is gitignored — the publish workflow rebuilds it per matrix host.",
          "is_bot": false,
          "headline": "build(node): generate per-triple npm package dirs from a target list",
          "author_name": "jdalton",
          "author_login": "jdalton",
          "committed_at": "2026-06-29T21:41:43Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "d81cbe5e2f5ee88501d38b87c329718a1a9565b1",
          "body": "index.cjs resolves @jdalton/decmpfs-<triple> for the host (platform/arch + glibc\n/musl/msvc abi), falling back to a local ./decmpfs.node for dev. The main\npackage now ships only index.cjs; the prebuilt binaries live in per-platform\noptionalDependencies (@jdalton/decmpfs-darwin-arm64, …) that npm installs\nselectively by os/cpu. Fix the test require path for the .cjs rename.",
          "is_bot": false,
          "headline": "feat(node): multi-platform loader + per-triple optional deps",
          "author_name": "jdalton",
          "author_login": "jdalton",
          "committed_at": "2026-06-29T21:39:35Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "f5a47ef16809d11633d50a14bab6aa1be3749b88",
          "body": "Replace the macOS-hardcoded inline 'cp …dylib' with node/scripts/build.mts,\nwhich maps the cdylib artifact per platform (dylib/so/dll). Rename the loader\nshim to index.cjs (explicit CommonJS). Node strips the .mts types natively, so\nthe package stays zero-dependency.",
          "is_bot": false,
          "headline": "build: move the addon build into a platform-aware .mts script",
          "author_name": "jdalton",
          "author_login": "jdalton",
          "committed_at": "2026-06-29T21:05:56Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "b7b7216f41dbb9e6da961063cb9f0e9d1af4aeea",
          "body": "…registry)",
          "is_bot": false,
          "headline": "build: use the fleet-hardened publishConfig (access, provenance, npm …",
          "author_name": "jdalton",
          "author_login": "jdalton",
          "committed_at": "2026-06-29T21:03:10Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "ffdf5e7c88fc6521989a195223fa25da8cee6075",
          "body": "Add publishConfig (public access) and set the version to 0.1.0 to match the\ncrate. The files allowlist (index.js + *.node) was already correct.",
          "is_bot": false,
          "headline": "build: harden the node package manifest for publish",
          "author_name": "jdalton",
          "author_login": "jdalton",
          "committed_at": "2026-06-29T20:59:55Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "af7337887b8080be0f53a2ca81dd4d49861a51b5",
          "body": "…aths\n\nIntroduce a Backend trait (instance methods) with the real Os impl and a\n#[cfg(test)] FakeBackend; route compress_file/compress_bytes through generic\n_with helpers. Static dispatch threads Os in release — monomorphized and inlined\nto the same code as a direct call, no vtable. A single configu\n[…]\npply-error propagation, the not-loadable/read-back rollbacks, and\nthe plain-write fallbacks (unsupported FS, guarded skip) that a real APFS write\nnever reaches. Line coverage 96.5% -> 97.0%, 57 tests.",
          "is_bot": false,
          "headline": "test: inject the backend via a trait to cover rollback and fallback p…",
          "author_name": "jdalton",
          "author_login": "jdalton",
          "committed_at": "2026-06-29T20:56:18Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "9f5dac44d3ce1431970793ca586aecd629c9db8d",
          "body": "Direct unit tests for setxattr failure, empty-input compress_block, the\napply_inplace read-error path, and compress_bytes_guarded propagating an\nunclassifiable backend error. Line coverage 95.7% -> 96.5%; macos.rs reaches\n97.7%.",
          "is_bot": false,
          "headline": "test: cover backend syscall-error and unclassifiable-error paths",
          "author_name": "jdalton",
          "author_login": "jdalton",
          "committed_at": "2026-06-29T20:42:26Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "aace50571af3e35e1439c3fee5283a6e50802cb5",
          "body": null,
          "is_bot": false,
          "headline": "docs: bump coverage badge to 96%",
          "author_name": "jdalton",
          "author_login": "jdalton",
          "committed_at": "2026-06-29T20:39:44Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "fd385d2f86c5549791f68d5f5228a56a83ed2904",
          "body": "Extract the post-apply verification tails of apply_guarded and\ncompress_bytes_guarded into verify_loadable_or_restore /\nverify_readback_or_restore so the not-loadable and read-back-mismatch rollbacks\nare unit-testable without a corrupting backend, and add a plain_write no-parent\ntest. Line coverage 94.5% -> 95.7%.",
          "is_bot": false,
          "headline": "test: cover the rollback safety nets and the no-parent guard",
          "author_name": "jdalton",
          "author_login": "jdalton",
          "committed_at": "2026-06-29T20:39:07Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "05c8cee724154d215121290cc697f9c8d10d14c8",
          "body": null,
          "is_bot": false,
          "headline": "docs: name the badges coverage-score and socket-score",
          "author_name": "jdalton",
          "author_login": "jdalton",
          "committed_at": "2026-06-29T20:21:34Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "10bc14b34e882bb5741385a45702548d4bddae74",
          "body": "The addon is a cdylib build artifact, so pin its lockfile for reproducibility.",
          "is_bot": false,
          "headline": "build: track the node addon lockfile",
          "author_name": "jdalton",
          "author_login": "jdalton",
          "committed_at": "2026-06-29T20:19:09Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "a12dc8d790d510441aa01e8dfdbc315ea52e6dcf",
          "body": "Self-contained SVG badges committed in assets/ and referenced by relative path\n(crates.io rewrites these to the repo), so they render with no img.shields.io\ndependency. The socket badge links to the cargo package score page.",
          "is_bot": false,
          "headline": "docs: add coverage and socket score badges to the readme",
          "author_name": "jdalton",
          "author_login": "jdalton",
          "committed_at": "2026-06-29T20:19:09Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "2155c9c9af05c705f9b313c001cd94d250ddab51",
          "body": "Add deterministic tests for the existing-target/read-only-dir/directory-target\nfail-soft paths, the magic_prefix read-error arm, and the gate's no-size and\nsingle-star edges. Line coverage 90% -> 94%; gate and verify reach 100%. The\nresidual misses are syscall-error and corruption-rollback safety nets that only\na fault-injecting backend could reach.",
          "is_bot": false,
          "headline": "test: cover reachable backend and gate branches",
          "author_name": "jdalton",
          "author_login": "jdalton",
          "committed_at": "2026-06-29T20:19:09Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "a80eb6a5ae6bfa1f9e2c3853beab9963aac9a445",
          "body": "Exact-pin zstd, sha2, libc, and windows-sys (Cargo.lock already locks the\ntransitive tree) so a published build resolves byte-for-byte.",
          "is_bot": false,
          "headline": "build(deps): pin direct dependencies to exact versions",
          "author_name": "jdalton",
          "author_login": "jdalton",
          "committed_at": "2026-06-29T20:19:08Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "33f1af3129a94f22a2444b01ca01fd9942e4aa6b",
          "body": "Describes the one-pass compress_bytes / in-place compress_file, the fail-soft Outcome, the Gate, the per-OS codecs, the addon feature, and the node/ N-API binding. cargo auto-includes README.md + sets the readme field.",
          "is_bot": false,
          "headline": "docs: add crate README for the crates.io page",
          "author_name": "jdalton",
          "author_login": "jdalton",
          "committed_at": "2026-06-29T19:58:49Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "0e2857ee8736f37f62807f90629819489c518dc4",
          "body": "…leSync\n\nN-API binding over the core: mirrors fs.writeFile/writeFileSync, writing bytes straight to an OS-FS-compressed file in one pass (compress_bytes — no rewrite). Atomic by default (sibling temp + rename, gate judged on the real target path not the temp); { atomic: false } opts out. cp-shaped {\n[…]\n compressed, before, after, reason }), never throws on an unsupported FS. 12 node:test cases cover every branch + outcome; on APFS a 300KB compressible file lands at 4KB on disk, round-trip-identical.",
          "is_bot": false,
          "headline": "feat(node): decmpfs N-API package — writeDecmpfsFile / writeDecmpfsFi…",
          "author_name": "jdalton",
          "author_login": "jdalton",
          "committed_at": "2026-06-29T19:54:01Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "757c6f2d3fc202ffced0519fbf152011ec5a91cb",
          "body": "Add the install-time API the PM agents call:\n\n- Gate: glob (default **/*.node, recursive matcher) AND/OR a size predicate\n  (>/>= with B/KB/MB/GB/KiB/MiB/GiB units → bytes); gate.matches(name, len).\n- compress_bytes(path, &content, &Gate): one-pass write of content as an\n  OS-compressed file — no wr\n[…]\ncoded\n  length — matching socket-btm/bin-infra's ABI.\n\n48 unit tests + 2 btrfs harness tests; cargo test + llvm-cov green on macOS\n(91% lines). btrfs path is ci/Dockerfile; Windows backend is CI-only.",
          "is_bot": false,
          "headline": "feat: gate + one-pass compress_bytes + addon hybrid unwrap",
          "author_name": "jdalton",
          "author_login": "jdalton",
          "committed_at": "2026-06-29T14:56:42Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "1c2c8456afcc8043712dc3066c12bc136800654e",
          "body": null,
          "is_bot": false,
          "headline": "test: btrfs Docker harness — real-FS coverage for the linux backend",
          "author_name": "jdalton",
          "author_login": "jdalton",
          "committed_at": "2026-06-29T02:09:38Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "44b88159632209604d464e9af0410c7e6664c47a",
          "body": null,
          "is_bot": false,
          "headline": "test: cover the compress success path + restore edge cases (88%→91%)",
          "author_name": "jdalton",
          "author_login": "jdalton",
          "committed_at": "2026-06-29T01:55:19Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "a733aafc2f4191155722fb3117d635a21435e6c0",
          "body": null,
          "is_bot": false,
          "headline": "test: cover Error display/source + probe (lib.rs 79%→94%)",
          "author_name": "jdalton",
          "author_login": "jdalton",
          "committed_at": "2026-06-29T01:45:17Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "f2f3386d9ad329091cf28906d2dc7872414762f4",
          "body": "…std)",
          "is_bot": false,
          "headline": "refactor: trim to the FS-compression core (drop napi self-loading + z…",
          "author_name": "jdalton",
          "author_login": "jdalton",
          "committed_at": "2026-06-29T01:36:15Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "60af13753ffb51804ca3deeac22ff96f80a50790",
          "body": "…s / NTFS)",
          "is_bot": false,
          "headline": "feat: FS-compression core (probe + compress_file; APFS decmpfs / btrf…",
          "author_name": "jdalton",
          "author_login": "jdalton",
          "committed_at": "2026-06-29T01:00:50Z",
          "body_truncated": false,
          "is_coding_agent": false
        }
      ],
      "releases_count": 2,
      "commits_last_year": 81,
      "latest_release_at": "2026-07-24T22:04:56Z",
      "latest_release_tag": "v0.1.2",
      "releases_from_tags": false,
      "days_since_last_push": 0,
      "active_weeks_last_year": 2,
      "days_since_latest_release": 2,
      "mean_days_between_releases": 2.8
    },
    "community": {
      "has_readme": true,
      "has_license": true,
      "has_description": false,
      "has_contributing": true,
      "health_percentage": 75,
      "has_issue_template": false,
      "has_code_of_conduct": true,
      "has_pull_request_template": false
    },
    "ecosystem": {
      "packages": [
        {
          "name": "decmpfs",
          "exists": true,
          "license": "MIT",
          "keywords": [
            "apfs",
            "btrfs",
            "compression",
            "decmpfs",
            "ntfs",
            "filesystem"
          ],
          "ecosystem": "crates",
          "matches_repo": false,
          "registry_url": "https://crates.io/crates/decmpfs",
          "is_deprecated": false,
          "latest_version": "0.1.2",
          "repository_url": "https://github.com/decmpfs/decmpfs",
          "versions_count": 3,
          "total_downloads": 6610,
          "dependents_count": null,
          "deprecation_note": null,
          "maintainers_count": null,
          "monthly_downloads": 2203,
          "first_published_at": "2026-06-28T15:17:23.764680Z",
          "latest_published_at": "2026-07-24T22:04:53.059540Z",
          "latest_version_yanked": false,
          "days_since_latest_publish": 2
        },
        {
          "name": "decmpfs",
          "exists": true,
          "license": "MIT",
          "keywords": [
            "apfs",
            "btrfs",
            "compression",
            "decmpfs",
            "filesystem",
            "lzvn",
            "native-addon",
            "node",
            "ntfs",
            "zstd"
          ],
          "ecosystem": "npm",
          "matches_repo": null,
          "registry_url": "https://www.npmjs.com/package/decmpfs",
          "is_deprecated": false,
          "latest_version": "0.0.0",
          "repository_url": null,
          "versions_count": 1,
          "total_downloads": null,
          "dependents_count": null,
          "deprecation_note": null,
          "maintainers_count": 1,
          "monthly_downloads": 182,
          "first_published_at": "2026-06-28T15:11:57.798000Z",
          "latest_published_at": "2026-06-28T15:11:58.214000Z",
          "latest_version_yanked": null,
          "days_since_latest_publish": 28
        }
      ]
    },
    "popularity": {
      "forks": 0,
      "stars": 0,
      "watchers": 0,
      "fork_history": {
        "days": [],
        "complete": true,
        "collected": 0,
        "total_forks": 0
      },
      "star_history": {
        "days": [],
        "complete": true,
        "collected": 0,
        "total_stars": 0,
        "collected_at": null
      },
      "open_issues_and_prs": 0
    },
    "ai_readiness": {
      "has_nix": false,
      "example_dirs": [],
      "has_llms_txt": false,
      "has_dockerfile": true,
      "has_mcp_signal": true,
      "bootstrap_files": [],
      "api_schema_files": [],
      "has_devcontainer": false,
      "typecheck_configs": [
        ".claude/hooks/fleet/actionlint-on-workflow-edit/tsconfig.json",
        ".claude/hooks/fleet/adversarial-review-nudge/tsconfig.json",
        ".claude/hooks/fleet/agents-skills-mirror-nudge/tsconfig.json",
        ".claude/hooks/fleet/ai-config-drift-nudge/tsconfig.json",
        ".claude/hooks/fleet/ai-config-poisoning-guard/tsconfig.json",
        ".claude/hooks/fleet/alpha-sort-nudge/tsconfig.json",
        ".claude/hooks/fleet/answer-questions-nudge/tsconfig.json",
        ".claude/hooks/fleet/answer-status-requests-nudge/tsconfig.json",
        ".claude/hooks/fleet/anti-prose-guard/tsconfig.json",
        ".claude/hooks/fleet/ask-suppression-nudge/tsconfig.json",
        ".claude/hooks/fleet/auth-rotation-nudge/tsconfig.json",
        ".claude/hooks/fleet/brew-supply-chain-guard/tsconfig.json",
        ".claude/hooks/fleet/broken-hook-detector/tsconfig.json",
        ".claude/hooks/fleet/bundle-flags-guard/tsconfig.json",
        ".claude/hooks/fleet/c8-ignore-reason-guard/tsconfig.json",
        ".claude/hooks/fleet/cascade-first-triage-nudge/tsconfig.json",
        ".claude/hooks/fleet/catch-message-guard/tsconfig.json",
        ".claude/hooks/fleet/cdn-allowlist-guard/tsconfig.json",
        ".claude/hooks/fleet/changelog-entry-shape-nudge/tsconfig.json",
        ".claude/hooks/fleet/changelog-no-empty-guard/tsconfig.json",
        ".claude/hooks/fleet/check-new-deps/tsconfig.json",
        ".claude/hooks/fleet/claude-code-action-lockdown-guard/tsconfig.json",
        ".claude/hooks/fleet/claude-lockdown-guard/tsconfig.json",
        ".claude/hooks/fleet/claude-md-defer-detail-nudge/tsconfig.json",
        ".claude/hooks/fleet/claude-md-rule-add-guard/tsconfig.json",
        ".claude/hooks/fleet/claude-md-section-size-guard/tsconfig.json",
        ".claude/hooks/fleet/claude-md-size-guard/tsconfig.json",
        ".claude/hooks/fleet/claude-segmentation-guard/tsconfig.json",
        ".claude/hooks/fleet/clone-reviewed-repo-nudge/tsconfig.json",
        ".claude/hooks/fleet/codex-no-write-guard/tsconfig.json",
        ".claude/hooks/fleet/codex-session-budget-guard/tsconfig.json",
        ".claude/hooks/fleet/commit-author-guard/tsconfig.json",
        ".claude/hooks/fleet/commit-cadence-nudge/tsconfig.json",
        ".claude/hooks/fleet/commit-message-format-guard/tsconfig.json",
        ".claude/hooks/fleet/commit-pr-nudge/tsconfig.json",
        ".claude/hooks/fleet/commit-size-nudge/tsconfig.json",
        ".claude/hooks/fleet/compound-lessons-nudge/tsconfig.json",
        ".claude/hooks/fleet/concurrent-cargo-build-guard/tsconfig.json",
        ".claude/hooks/fleet/consumer-grep-nudge/tsconfig.json",
        ".claude/hooks/fleet/convo-prose-nudge/tsconfig.json",
        ".claude/hooks/fleet/cross-repo-guard/tsconfig.json",
        ".claude/hooks/fleet/dated-citation-guard/tsconfig.json",
        ".claude/hooks/fleet/default-branch-guard/tsconfig.json",
        ".claude/hooks/fleet/dep-derived-source-nudge/tsconfig.json",
        ".claude/hooks/fleet/dirty-lockfile-nudge/tsconfig.json",
        ".claude/hooks/fleet/dirty-worktree-stop-guard/tsconfig.json",
        ".claude/hooks/fleet/dogfood-cascade-nudge/tsconfig.json",
        ".claude/hooks/fleet/dont-blame-nudge/tsconfig.json",
        ".claude/hooks/fleet/dont-stop-mid-queue-nudge/tsconfig.json",
        ".claude/hooks/fleet/drift-check-nudge/tsconfig.json",
        ".claude/hooks/fleet/enqueue-dont-pivot-nudge/tsconfig.json",
        ".claude/hooks/fleet/enterprise-push-nudge/tsconfig.json",
        ".claude/hooks/fleet/error-message-quality-nudge/tsconfig.json",
        ".claude/hooks/fleet/excuse-detector/tsconfig.json",
        ".claude/hooks/fleet/file-size-nudge/tsconfig.json",
        ".claude/hooks/fleet/fixes-need-tests-nudge/tsconfig.json",
        ".claude/hooks/fleet/follow-direct-imperative-nudge/tsconfig.json",
        ".claude/hooks/fleet/gh-token-hygiene-guard/tsconfig.json",
        ".claude/hooks/fleet/git-config-write-guard/tsconfig.json",
        ".claude/hooks/fleet/git-identity-drift-nudge/tsconfig.json",
        ".claude/hooks/fleet/gitmodules-comment-guard/tsconfig.json",
        ".claude/hooks/fleet/golden-fixture-naming-guard/tsconfig.json",
        ".claude/hooks/fleet/handoff-command-nudge/tsconfig.json",
        ".claude/hooks/fleet/headroom-proxy-start/tsconfig.json",
        ".claude/hooks/fleet/honesty-framing-guard/tsconfig.json",
        ".claude/hooks/fleet/immutable-release-guard/tsconfig.json",
        ".claude/hooks/fleet/inline-script-defer-guard/tsconfig.json",
        ".claude/hooks/fleet/judgment-nudge/tsconfig.json",
        ".claude/hooks/fleet/keep-working-while-waiting-nudge/tsconfig.json",
        ".claude/hooks/fleet/land-fast-nudge/tsconfig.json",
        ".claude/hooks/fleet/lock-step-ref-nudge/tsconfig.json",
        ".claude/hooks/fleet/logger-guard/tsconfig.json",
        ".claude/hooks/fleet/markdown-filename-guard/tsconfig.json",
        ".claude/hooks/fleet/memory-codify-nudge/tsconfig.json",
        ".claude/hooks/fleet/minimum-release-age-guard/tsconfig.json",
        ".claude/hooks/fleet/module-noun-name-guard/tsconfig.json",
        ".claude/hooks/fleet/new-hook-claude-md-guard/tsconfig.json",
        ".claude/hooks/fleet/no-blanket-file-exclusion-guard/tsconfig.json",
        ".claude/hooks/fleet/no-blind-keychain-read-guard/tsconfig.json",
        ".claude/hooks/fleet/no-boolean-trap-guard/tsconfig.json",
        ".claude/hooks/fleet/no-branch-reuse-nudge/tsconfig.json",
        ".claude/hooks/fleet/no-corepack-guard/tsconfig.json",
        ".claude/hooks/fleet/no-direct-linter-guard/tsconfig.json",
        ".claude/hooks/fleet/no-disable-lint-rule-guard/tsconfig.json",
        ".claude/hooks/fleet/no-empty-commit-guard/tsconfig.json",
        ".claude/hooks/fleet/no-env-kill-switch-guard/tsconfig.json",
        ".claude/hooks/fleet/no-ext-issue-ref-guard/tsconfig.json",
        ".claude/hooks/fleet/no-file-oxlint-disable-guard/tsconfig.json",
        ".claude/hooks/fleet/no-fleet-fork-guard/tsconfig.json",
        ".claude/hooks/fleet/no-force-push-guard/tsconfig.json",
        ".claude/hooks/fleet/no-github-ai-attribution-guard/tsconfig.json",
        ".claude/hooks/fleet/no-hook-cmd-regex-guard/tsconfig.json",
        ".claude/hooks/fleet/no-meta-comments-guard/tsconfig.json",
        ".claude/hooks/fleet/no-new-config-guard/tsconfig.json",
        ".claude/hooks/fleet/no-non-fleet-push-guard/tsconfig.json",
        ".claude/hooks/fleet/no-npm-otp-flag-guard/tsconfig.json",
        ".claude/hooks/fleet/no-orphaned-staging/tsconfig.json",
        ".claude/hooks/fleet/no-other-linters-guard/tsconfig.json",
        ".claude/hooks/fleet/no-pkgjson-pnpm-overrides-guard/tsconfig.json",
        ".claude/hooks/fleet/no-placeholder-commit-subject-guard/tsconfig.json",
        ".claude/hooks/fleet/no-platform-import-guard/tsconfig.json",
        ".claude/hooks/fleet/no-pm-exec-guard/tsconfig.json",
        ".claude/hooks/fleet/no-pr-from-default-branch-guard/tsconfig.json",
        ".claude/hooks/fleet/no-pr-from-default-checkout-guard/tsconfig.json",
        ".claude/hooks/fleet/no-pr-review-verdict-guard/tsconfig.json",
        ".claude/hooks/fleet/no-premature-commit-kill-guard/tsconfig.json",
        ".claude/hooks/fleet/no-private-path-in-source-guard/tsconfig.json",
        ".claude/hooks/fleet/no-private-ref-in-tests-docs-guard/tsconfig.json",
        ".claude/hooks/fleet/no-registry-mutation-in-repo-script-nudge/tsconfig.json",
        ".claude/hooks/fleet/no-removal-comment-nudge/tsconfig.json",
        ".claude/hooks/fleet/no-repo-scope-in-fleet-config-guard/tsconfig.json",
        ".claude/hooks/fleet/no-revert-guard/tsconfig.json",
        ".claude/hooks/fleet/no-strip-types-guard/tsconfig.json",
        ".claude/hooks/fleet/no-subagent-commit-guard/tsconfig.json",
        ".claude/hooks/fleet/no-tail-install-out-guard/tsconfig.json",
        ".claude/hooks/fleet/no-test-in-scripts-guard/tsconfig.json",
        ".claude/hooks/fleet/no-token-in-dotenv-guard/tsconfig.json",
        ".claude/hooks/fleet/no-total-squash-guard/tsconfig.json",
        ".claude/hooks/fleet/no-tsx-guard/tsconfig.json",
        ".claude/hooks/fleet/no-underscore-ident-guard/tsconfig.json",
        ".claude/hooks/fleet/no-unisolated-git-fixture-guard/tsconfig.json",
        ".claude/hooks/fleet/no-unmocked-net-guard/tsconfig.json",
        ".claude/hooks/fleet/no-upstream-gitlink-guard/tsconfig.json",
        ".claude/hooks/fleet/no-verify-format-nudge/tsconfig.json",
        ".claude/hooks/fleet/node-modules-staging-guard/tsconfig.json",
        ".claude/hooks/fleet/non-fleet-pr-issue-ask-guard/tsconfig.json",
        ".claude/hooks/fleet/npm-otp-flow-nudge/tsconfig.json",
        ".claude/hooks/fleet/npmrc-trust-optout-guard/tsconfig.json",
        ".claude/hooks/fleet/options-param-naming-guard/tsconfig.json",
        ".claude/hooks/fleet/overeager-staging-guard/tsconfig.json",
        ".claude/hooks/fleet/oxlint-plugin-load-nudge/tsconfig.json",
        ".claude/hooks/fleet/package-manager-auto-update-guard/tsconfig.json",
        ".claude/hooks/fleet/parallel-agent-edit-guard/tsconfig.json",
        ".claude/hooks/fleet/parallel-agent-on-stop-nudge/tsconfig.json",
        ".claude/hooks/fleet/parallel-agent-removal-nudge/tsconfig.json",
        ".claude/hooks/fleet/parallel-agent-staging-guard/tsconfig.json",
        ".claude/hooks/fleet/path-guard/tsconfig.json",
        ".claude/hooks/fleet/path-regex-normalize-nudge/tsconfig.json",
        ".claude/hooks/fleet/paths-mts-inherit-guard/tsconfig.json",
        ".claude/hooks/fleet/personal-path-guard/tsconfig.json",
        ".claude/hooks/fleet/plan-location-guard/tsconfig.json",
        ".claude/hooks/fleet/plan-review-nudge/tsconfig.json",
        ".claude/hooks/fleet/pnpm-filter-zero-match-nudge/tsconfig.json",
        ".claude/hooks/fleet/pointer-comment-nudge/tsconfig.json",
        ".claude/hooks/fleet/post-push-ci-monitor-nudge/tsconfig.json",
        ".claude/hooks/fleet/pr-vs-push-default-nudge/tsconfig.json",
        ".claude/hooks/fleet/pre-commit-race-nudge/tsconfig.json",
        ".claude/hooks/fleet/prefer-async-spawn-guard/tsconfig.json",
        ".claude/hooks/fleet/prefer-evergreen-target-nudge/tsconfig.json",
        ".claude/hooks/fleet/prefer-fn-decl-guard/tsconfig.json",
        ".claude/hooks/fleet/prefer-json-clone-guard/tsconfig.json",
        ".claude/hooks/fleet/prefer-pipx-over-pip-guard/tsconfig.json",
        ".claude/hooks/fleet/prefer-rebase-over-revert-nudge/tsconfig.json",
        ".claude/hooks/fleet/prefer-type-import-guard/tsconfig.json",
        ".claude/hooks/fleet/prefer-vitest-guard/tsconfig.json",
        ".claude/hooks/fleet/primary-checkout-branch-guard/tsconfig.json",
        ".claude/hooks/fleet/primary-checkout-on-default-stop-guard/tsconfig.json",
        ".claude/hooks/fleet/private-name-nudge/tsconfig.json",
        ".claude/hooks/fleet/proc-environ-exfil-guard/tsconfig.json",
        ".claude/hooks/fleet/prompt-injection-guard/tsconfig.json",
        ".claude/hooks/fleet/provenance-publish-nudge/tsconfig.json",
        ".claude/hooks/fleet/public-surface-nudge/tsconfig.json",
        ".claude/hooks/fleet/pull-request-target-guard/tsconfig.json",
        ".claude/hooks/fleet/push-protected-branch-guard/tsconfig.json",
        ".claude/hooks/fleet/readme-fleet-shape-guard/tsconfig.json",
        ".claude/hooks/fleet/release-tag-tied-guard/tsconfig.json",
        ".claude/hooks/fleet/release-workflow-guard/tsconfig.json",
        ".claude/hooks/fleet/reply-prose-nudge/tsconfig.json",
        ".claude/hooks/fleet/report-location-guard/tsconfig.json",
        ".claude/hooks/fleet/reserved-script-dir-guard/tsconfig.json",
        ".claude/hooks/fleet/rg-replace-flag-nudge/tsconfig.json",
        ".claude/hooks/fleet/scan-label-in-commit-guard/tsconfig.json",
        ".claude/hooks/fleet/secret-content-guard/tsconfig.json",
        ".claude/hooks/fleet/session-handoff-nudge/tsconfig.json",
        ".claude/hooks/fleet/setup-basics-tools/tsconfig.json",
        ".claude/hooks/fleet/setup-claude-scanners/tsconfig.json",
        ".claude/hooks/fleet/setup-firewall/tsconfig.json",
        ".claude/hooks/fleet/setup-misc-tools/tsconfig.json",
        ".claude/hooks/fleet/setup-security-tools/tsconfig.json",
        ".claude/hooks/fleet/setup-signing/tsconfig.json",
        ".claude/hooks/fleet/shallow-clone-guard/tsconfig.json",
        ".claude/hooks/fleet/skill-usage-logger/tsconfig.json",
        ".claude/hooks/fleet/small-pr-nudge/tsconfig.json",
        ".claude/hooks/fleet/soak-exclude-date-guard/tsconfig.json",
        ".claude/hooks/fleet/soak-exclude-scope-guard/tsconfig.json",
        ".claude/hooks/fleet/soak-pin-needs-annotation-guard/tsconfig.json",
        ".claude/hooks/fleet/squash-history-nudge/tsconfig.json",
        ".claude/hooks/fleet/stale-process-sweeper/tsconfig.json",
        ".claude/hooks/fleet/stop-claim-verify-nudge/tsconfig.json",
        ".claude/hooks/fleet/sweep-ds-store/tsconfig.json",
        ".claude/hooks/fleet/target-arch-env-guard/tsconfig.json",
        ".claude/hooks/fleet/test-script-defers-guard/tsconfig.json",
        ".claude/hooks/fleet/token-guard/tsconfig.json",
        ".claude/hooks/fleet/token-spend-guard/tsconfig.json",
        ".claude/hooks/fleet/trust-downgrade-guard/tsconfig.json",
        ".claude/hooks/fleet/unbacked-claim-commit-guard/tsconfig.json",
        ".claude/hooks/fleet/uncodified-lesson-nudge/tsconfig.json",
        ".claude/hooks/fleet/unpushed-main-nudge/tsconfig.json",
        ".claude/hooks/fleet/untrusted-coauthor-guard/tsconfig.json",
        ".claude/hooks/fleet/uses-sha-verify-guard/tsconfig.json",
        ".claude/hooks/fleet/variant-analysis-nudge/tsconfig.json",
        ".claude/hooks/fleet/verify-absence-claims-nudge/tsconfig.json",
        ".claude/hooks/fleet/verify-render-pre-commit-nudge/tsconfig.json",
        ".claude/hooks/fleet/version-bump-order-guard/tsconfig.json",
        ".claude/hooks/fleet/vitest-vs-node-test-guard/tsconfig.json",
        ".claude/hooks/fleet/wheelhouse-drift-guard/tsconfig.json",
        ".claude/hooks/fleet/workflow-multiline-body-guard/tsconfig.json",
        ".claude/hooks/fleet/workflow-uses-comment-guard/tsconfig.json",
        ".claude/hooks/fleet/worktree-remove-relink-nudge/tsconfig.json",
        "napi/decmpfs/tsconfig.json",
        "tsconfig.json"
      ],
      "toolchain_manifests": [
        "Cargo.toml",
        "crates/decmpfs/Cargo.toml",
        "fuzz/Cargo.toml",
        "napi/decmpfs/Cargo.toml"
      ],
      "largest_source_bytes": 60023,
      "source_files_sampled": 63,
      "oversized_source_files": 1,
      "agent_instruction_files": [],
      "agent_instruction_max_bytes": null
    },
    "dependencies": {
      "manifests": [
        "Cargo.toml",
        "fuzz/Cargo.toml",
        "package.json"
      ],
      "advisories": {
        "error": null,
        "scope": "published_package",
        "source": "osv",
        "findings": [],
        "collected": true,
        "malicious": [],
        "truncated": false,
        "by_severity": {},
        "advisory_count": 0,
        "affected_count": 0,
        "assessed_count": 62,
        "malicious_count": 0,
        "assessed_package": "crates:decmpfs@0.1.2",
        "unassessed_count": 0,
        "direct_affected_count": 0
      },
      "ecosystems": [
        "crates",
        "npm"
      ],
      "dependencies": [
        {
          "name": "zstd",
          "manifest": "crates/decmpfs/Cargo.toml",
          "ecosystem": "crates",
          "version_constraint": "=0.13.3"
        },
        {
          "name": "sha2",
          "manifest": "crates/decmpfs/Cargo.toml",
          "ecosystem": "crates",
          "version_constraint": "=0.10.9"
        },
        {
          "name": "napi",
          "manifest": "napi/decmpfs/Cargo.toml",
          "ecosystem": "crates",
          "version_constraint": "3"
        },
        {
          "name": "napi-derive",
          "manifest": "napi/decmpfs/Cargo.toml",
          "ecosystem": "crates",
          "version_constraint": "3"
        },
        {
          "name": "decmpfs",
          "manifest": "napi/decmpfs/Cargo.toml",
          "ecosystem": "crates",
          "version_constraint": null
        }
      ],
      "all_dependencies": {
        "error": null,
        "source": "github-sbom",
        "packages": [
          {
            "name": "napi",
            "direct": true,
            "version": null,
            "ecosystem": "crates"
          },
          {
            "name": "napi",
            "direct": true,
            "version": "3.10.1",
            "ecosystem": "crates"
          },
          {
            "name": "napi-derive",
            "direct": true,
            "version": null,
            "ecosystem": "crates"
          },
          {
            "name": "napi-derive",
            "direct": true,
            "version": "3.5.9",
            "ecosystem": "crates"
          },
          {
            "name": "sha2",
            "direct": true,
            "version": "0.10.9",
            "ecosystem": "crates"
          },
          {
            "name": "zstd",
            "direct": true,
            "version": "0.13.3",
            "ecosystem": "crates"
          },
          {
            "name": "anstyle",
            "direct": false,
            "version": "1.0.14",
            "ecosystem": "crates"
          },
          {
            "name": "arbitrary",
            "direct": false,
            "version": "1.4.2",
            "ecosystem": "crates"
          },
          {
            "name": "autocfg",
            "direct": false,
            "version": "1.5.1",
            "ecosystem": "crates"
          },
          {
            "name": "bit-set",
            "direct": false,
            "version": "0.8.0",
            "ecosystem": "crates"
          },
          {
            "name": "bit-vec",
            "direct": false,
            "version": "0.8.0",
            "ecosystem": "crates"
          },
          {
            "name": "bitflags",
            "direct": false,
            "version": "2.13.0",
            "ecosystem": "crates"
          },
          {
            "name": "block-buffer",
            "direct": false,
            "version": "0.10.4",
            "ecosystem": "crates"
          },
          {
            "name": "cc",
            "direct": false,
            "version": "1.2.65",
            "ecosystem": "crates"
          },
          {
            "name": "cc",
            "direct": false,
            "version": "1.2.67",
            "ecosystem": "crates"
          },
          {
            "name": "cfg-if",
            "direct": false,
            "version": "1.0.4",
            "ecosystem": "crates"
          },
          {
            "name": "convert_case",
            "direct": false,
            "version": "0.11.0",
            "ecosystem": "crates"
          },
          {
            "name": "cpufeatures",
            "direct": false,
            "version": "0.2.17",
            "ecosystem": "crates"
          },
          {
            "name": "crypto-common",
            "direct": false,
            "version": "0.1.7",
            "ecosystem": "crates"
          },
          {
            "name": "ctor",
            "direct": false,
            "version": "1.0.7",
            "ecosystem": "crates"
          },
          {
            "name": "derive_arbitrary",
            "direct": false,
            "version": "1.4.2",
            "ecosystem": "crates"
          },
          {
            "name": "digest",
            "direct": false,
            "version": "0.10.7",
            "ecosystem": "crates"
          },
          {
            "name": "downcast",
            "direct": false,
            "version": "0.11.0",
            "ecosystem": "crates"
          },
          {
            "name": "errno",
            "direct": false,
            "version": "0.3.14",
            "ecosystem": "crates"
          },
          {
            "name": "fastrand",
            "direct": false,
            "version": "2.4.1",
            "ecosystem": "crates"
          },
          {
            "name": "find-msvc-tools",
            "direct": false,
            "version": "0.1.9",
            "ecosystem": "crates"
          },
          {
            "name": "fnv",
            "direct": false,
            "version": "1.0.7",
            "ecosystem": "crates"
          },
          {
            "name": "fragile",
            "direct": false,
            "version": "2.1.0",
            "ecosystem": "crates"
          },
          {
            "name": "futures",
            "direct": false,
            "version": "0.3.32",
            "ecosystem": "crates"
          },
          {
            "name": "futures-channel",
            "direct": false,
            "version": "0.3.32",
            "ecosystem": "crates"
          },
          {
            "name": "futures-core",
            "direct": false,
            "version": "0.3.32",
            "ecosystem": "crates"
          },
          {
            "name": "futures-executor",
            "direct": false,
            "version": "0.3.32",
            "ecosystem": "crates"
          },
          {
            "name": "futures-io",
            "direct": false,
            "version": "0.3.32",
            "ecosystem": "crates"
          },
          {
            "name": "futures-macro",
            "direct": false,
            "version": "0.3.32",
            "ecosystem": "crates"
          },
          {
            "name": "futures-sink",
            "direct": false,
            "version": "0.3.32",
            "ecosystem": "crates"
          },
          {
            "name": "futures-task",
            "direct": false,
            "version": "0.3.32",
            "ecosystem": "crates"
          },
          {
            "name": "futures-util",
            "direct": false,
            "version": "0.3.32",
            "ecosystem": "crates"
          },
          {
            "name": "generic-array",
            "direct": false,
            "version": "0.14.7",
            "ecosystem": "crates"
          },
          {
            "name": "getrandom",
            "direct": false,
            "version": "0.3.4",
            "ecosystem": "crates"
          },
          {
            "name": "getrandom",
            "direct": false,
            "version": "0.4.3",
            "ecosystem": "crates"
          },
          {
            "name": "jobserver",
            "direct": false,
            "version": "0.1.34",
            "ecosystem": "crates"
          },
          {
            "name": "jobserver",
            "direct": false,
            "version": "0.1.35",
            "ecosystem": "crates"
          },
          {
            "name": "libc",
            "direct": false,
            "version": "0.2.186",
            "ecosystem": "crates"
          },
          {
            "name": "libfuzzer-sys",
            "direct": false,
            "version": "0.4.13",
            "ecosystem": "crates"
          },
          {
            "name": "libloading",
            "direct": false,
            "version": "0.9.0",
            "ecosystem": "crates"
          },
          {
            "name": "linux-raw-sys",
            "direct": false,
            "version": "0.12.1",
            "ecosystem": "crates"
          },
          {
            "name": "memchr",
            "direct": false,
            "version": "2.8.2",
            "ecosystem": "crates"
          },
          {
            "name": "mockall",
            "direct": false,
            "version": "0.15.0",
            "ecosystem": "crates"
          },
          {
            "name": "mockall_derive",
            "direct": false,
            "version": "0.15.0",
            "ecosystem": "crates"
          },
          {
            "name": "napi-build",
            "direct": false,
            "version": null,
            "ecosystem": "crates"
          },
          {
            "name": "napi-build",
            "direct": false,
            "version": "2.3.2",
            "ecosystem": "crates"
          },
          {
            "name": "napi-derive-backend",
            "direct": false,
            "version": "5.1.1",
            "ecosystem": "crates"
          },
          {
            "name": "napi-sys",
            "direct": false,
            "version": "3.2.2",
            "ecosystem": "crates"
          },
          {
            "name": "nohash-hasher",
            "direct": false,
            "version": "0.2.0",
            "ecosystem": "crates"
          },
          {
            "name": "num-traits",
            "direct": false,
            "version": "0.2.19",
            "ecosystem": "crates"
          },
          {
            "name": "once_cell",
            "direct": false,
            "version": "1.21.4",
            "ecosystem": "crates"
          },
          {
            "name": "pin-project-lite",
            "direct": false,
            "version": "0.2.17",
            "ecosystem": "crates"
          },
          {
            "name": "pkg-config",
            "direct": false,
            "version": "0.3.33",
            "ecosystem": "crates"
          },
          {
            "name": "ppv-lite86",
            "direct": false,
            "version": "0.2.21",
            "ecosystem": "crates"
          },
          {
            "name": "predicates",
            "direct": false,
            "version": "3.1.4",
            "ecosystem": "crates"
          },
          {
            "name": "predicates-core",
            "direct": false,
            "version": "1.0.10",
            "ecosystem": "crates"
          },
          {
            "name": "predicates-tree",
            "direct": false,
            "version": "1.0.13",
            "ecosystem": "crates"
          },
          {
            "name": "proc-macro2",
            "direct": false,
            "version": "1.0.106",
            "ecosystem": "crates"
          },
          {
            "name": "proptest",
            "direct": false,
            "version": "1.11.0",
            "ecosystem": "crates"
          },
          {
            "name": "quick-error",
            "direct": false,
            "version": "1.2.3",
            "ecosystem": "crates"
          },
          {
            "name": "quote",
            "direct": false,
            "version": "1.0.46",
            "ecosystem": "crates"
          },
          {
            "name": "r-efi",
            "direct": false,
            "version": "5.3.0",
            "ecosystem": "crates"
          },
          {
            "name": "r-efi",
            "direct": false,
            "version": "6.0.0",
            "ecosystem": "crates"
          },
          {
            "name": "rand",
            "direct": false,
            "version": "0.9.5",
            "ecosystem": "crates"
          },
          {
            "name": "rand_chacha",
            "direct": false,
            "version": "0.9.0",
            "ecosystem": "crates"
          },
          {
            "name": "rand_core",
            "direct": false,
            "version": "0.9.5",
            "ecosystem": "crates"
          },
          {
            "name": "rand_xorshift",
            "direct": false,
            "version": "0.4.0",
            "ecosystem": "crates"
          },
          {
            "name": "regex-syntax",
            "direct": false,
            "version": "0.8.11",
            "ecosystem": "crates"
          },
          {
            "name": "rustc-hash",
            "direct": false,
            "version": "2.1.3",
            "ecosystem": "crates"
          },
          {
            "name": "rustix",
            "direct": false,
            "version": "1.1.4",
            "ecosystem": "crates"
          },
          {
            "name": "rusty-fork",
            "direct": false,
            "version": "0.3.1",
            "ecosystem": "crates"
          },
          {
            "name": "semver",
            "direct": false,
            "version": "1.0.28",
            "ecosystem": "crates"
          },
          {
            "name": "shlex",
            "direct": false,
            "version": "2.0.1",
            "ecosystem": "crates"
          },
          {
            "name": "slab",
            "direct": false,
            "version": "0.4.12",
            "ecosystem": "crates"
          },
          {
            "name": "syn",
            "direct": false,
            "version": "2.0.118",
            "ecosystem": "crates"
          },
          {
            "name": "tempfile",
            "direct": false,
            "version": "3.27.0",
            "ecosystem": "crates"
          },
          {
            "name": "termtree",
            "direct": false,
            "version": "0.5.1",
            "ecosystem": "crates"
          },
          {
            "name": "typenum",
            "direct": false,
            "version": "1.20.1",
            "ecosystem": "crates"
          },
          {
            "name": "unarray",
            "direct": false,
            "version": "0.1.4",
            "ecosystem": "crates"
          },
          {
            "name": "unicode-ident",
            "direct": false,
            "version": "1.0.24",
            "ecosystem": "crates"
          },
          {
            "name": "unicode-segmentation",
            "direct": false,
            "version": "1.13.3",
            "ecosystem": "crates"
          },
          {
            "name": "version_check",
            "direct": false,
            "version": "0.9.5",
            "ecosystem": "crates"
          },
          {
            "name": "wait-timeout",
            "direct": false,
            "version": "0.2.1",
            "ecosystem": "crates"
          },
          {
            "name": "wasip2",
            "direct": false,
            "version": "1.0.4+wasi-0.2.12",
            "ecosystem": "crates"
          },
          {
            "name": "windows-link",
            "direct": false,
            "version": "0.2.1",
            "ecosystem": "crates"
          },
          {
            "name": "windows-sys",
            "direct": false,
            "version": "0.59.0",
            "ecosystem": "crates"
          },
          {
            "name": "windows-targets",
            "direct": false,
            "version": "0.52.6",
            "ecosystem": "crates"
          },
          {
            "name": "windows_aarch64_gnullvm",
            "direct": false,
            "version": "0.52.6",
            "ecosystem": "crates"
          },
          {
            "name": "windows_aarch64_msvc",
            "direct": false,
            "version": "0.52.6",
            "ecosystem": "crates"
          },
          {
            "name": "windows_i686_gnu",
            "direct": false,
            "version": "0.52.6",
            "ecosystem": "crates"
          },
          {
            "name": "windows_i686_gnullvm",
            "direct": false,
            "version": "0.52.6",
            "ecosystem": "crates"
          },
          {
            "name": "windows_i686_msvc",
            "direct": false,
            "version": "0.52.6",
            "ecosystem": "crates"
          },
          {
            "name": "windows_x86_64_gnu",
            "direct": false,
            "version": "0.52.6",
            "ecosystem": "crates"
          },
          {
            "name": "windows_x86_64_gnullvm",
            "direct": false,
            "version": "0.52.6",
            "ecosystem": "crates"
          },
          {
            "name": "windows_x86_64_msvc",
            "direct": false,
            "version": "0.52.6",
            "ecosystem": "crates"
          },
          {
            "name": "wit-bindgen",
            "direct": false,
            "version": "0.57.1",
            "ecosystem": "crates"
          },
          {
            "name": "zerocopy",
            "direct": false,
            "version": "0.8.55",
            "ecosystem": "crates"
          },
          {
            "name": "zerocopy-derive",
            "direct": false,
            "version": "0.8.55",
            "ecosystem": "crates"
          },
          {
            "name": "zstd-safe",
            "direct": false,
            "version": "7.2.4",
            "ecosystem": "crates"
          },
          {
            "name": "zstd-sys",
            "direct": false,
            "version": "2.0.16+zstd.1.5.7",
            "ecosystem": "crates"
          },
          {
            "name": "@decmpfs/darwin-arm64",
            "direct": false,
            "version": "0.1.2",
            "ecosystem": "npm"
          },
          {
            "name": "@decmpfs/darwin-x64",
            "direct": false,
            "version": "0.1.2",
            "ecosystem": "npm"
          },
          {
            "name": "@decmpfs/linux-arm64-gnu",
            "direct": false,
            "version": "0.1.2",
            "ecosystem": "npm"
          },
          {
            "name": "@decmpfs/linux-x64-gnu",
            "direct": false,
            "version": "0.1.2",
            "ecosystem": "npm"
          },
          {
            "name": "@decmpfs/win32-x64-msvc",
            "direct": false,
            "version": "0.1.2",
            "ecosystem": "npm"
          },
          {
            "name": "@pnpm/exe",
            "direct": false,
            "version": "11.9.0",
            "ecosystem": "npm"
          },
          {
            "name": "@pnpm/linux-arm64",
            "direct": false,
            "version": "11.9.0",
            "ecosystem": "npm"
          },
          {
            "name": "@pnpm/linux-x64",
            "direct": false,
            "version": "11.9.0",
            "ecosystem": "npm"
          },
          {
            "name": "@pnpm/linuxstatic-arm64",
            "direct": false,
            "version": "11.9.0",
            "ecosystem": "npm"
          },
          {
            "name": "@pnpm/linuxstatic-x64",
            "direct": false,
            "version": "11.9.0",
            "ecosystem": "npm"
          },
          {
            "name": "@pnpm/macos-arm64",
            "direct": false,
            "version": "11.9.0",
            "ecosystem": "npm"
          },
          {
            "name": "@pnpm/win-arm64",
            "direct": false,
            "version": "11.9.0",
            "ecosystem": "npm"
          },
          {
            "name": "@pnpm/win-x64",
            "direct": false,
            "version": "11.9.0",
            "ecosystem": "npm"
          },
          {
            "name": "@reflink/reflink",
            "direct": false,
            "version": "0.1.19",
            "ecosystem": "npm"
          },
          {
            "name": "@reflink/reflink-darwin-arm64",
            "direct": false,
            "version": "0.1.19",
            "ecosystem": "npm"
          },
          {
            "name": "@reflink/reflink-darwin-x64",
            "direct": false,
            "version": "0.1.19",
            "ecosystem": "npm"
          },
          {
            "name": "@reflink/reflink-linux-arm64-gnu",
            "direct": false,
            "version": "0.1.19",
            "ecosystem": "npm"
          },
          {
            "name": "@reflink/reflink-linux-arm64-musl",
            "direct": false,
            "version": "0.1.19",
            "ecosystem": "npm"
          },
          {
            "name": "@reflink/reflink-linux-x64-gnu",
            "direct": false,
            "version": "0.1.19",
            "ecosystem": "npm"
          },
          {
            "name": "@reflink/reflink-linux-x64-musl",
            "direct": false,
            "version": "0.1.19",
            "ecosystem": "npm"
          },
          {
            "name": "@reflink/reflink-win32-arm64-msvc",
            "direct": false,
            "version": "0.1.19",
            "ecosystem": "npm"
          },
          {
            "name": "@reflink/reflink-win32-x64-msvc",
            "direct": false,
            "version": "0.1.19",
            "ecosystem": "npm"
          },
          {
            "name": "@sinclair/typebox",
            "direct": false,
            "version": "catalog:",
            "ecosystem": "npm"
          },
          {
            "name": "@socketregistry/packageurl-js-stable",
            "direct": false,
            "version": "catalog:",
            "ecosystem": "npm"
          },
          {
            "name": "@socketsecurity/lib-stable",
            "direct": false,
            "version": "catalog:",
            "ecosystem": "npm"
          },
          {
            "name": "@socketsecurity/sdk-stable",
            "direct": false,
            "version": "catalog:",
            "ecosystem": "npm"
          },
          {
            "name": "@types/node",
            "direct": false,
            "version": "catalog:",
            "ecosystem": "npm"
          },
          {
            "name": "@ultrathink/acorn.wasm",
            "direct": false,
            "version": "catalog:",
            "ecosystem": "npm"
          },
          {
            "name": "compromise",
            "direct": false,
            "version": "catalog:",
            "ecosystem": "npm"
          },
          {
            "name": "detect-libc",
            "direct": false,
            "version": "2.1.2",
            "ecosystem": "npm"
          },
          {
            "name": "pnpm",
            "direct": false,
            "version": "11.9.0",
            "ecosystem": "npm"
          },
          {
            "name": "regjsparser",
            "direct": false,
            "version": "catalog:",
            "ecosystem": "npm"
          },
          {
            "name": "shell-quote",
            "direct": false,
            "version": "catalog:",
            "ecosystem": "npm"
          },
          {
            "name": "typescript",
            "direct": false,
            "version": "catalog:",
            "ecosystem": "npm"
          },
          {
            "name": "aiohappyeyeballs",
            "direct": false,
            "version": "2.6.2",
            "ecosystem": "pypi"
          },
          {
            "name": "aiohttp",
            "direct": false,
            "version": "3.14.1",
            "ecosystem": "pypi"
          },
          {
            "name": "aiosignal",
            "direct": false,
            "version": "1.4.0",
            "ecosystem": "pypi"
          },
          {
            "name": "annotated-doc",
            "direct": false,
            "version": "0.0.4",
            "ecosystem": "pypi"
          },
          {
            "name": "annotated-types",
            "direct": false,
            "version": "0.7.0",
            "ecosystem": "pypi"
          },
          {
            "name": "anyio",
            "direct": false,
            "version": "4.13.0",
            "ecosystem": "pypi"
          },
          {
            "name": "ast-grep-cli",
            "direct": false,
            "version": "0.42.3",
            "ecosystem": "pypi"
          },
          {
            "name": "async-timeout",
            "direct": false,
            "version": "5.0.1",
            "ecosystem": "pypi"
          },
          {
            "name": "attrs",
            "direct": false,
            "version": "26.1.0",
            "ecosystem": "pypi"
          },
          {
            "name": "blockbuster",
            "direct": false,
            "version": "1.5.26",
            "ecosystem": "pypi"
          },
          {
            "name": "certifi",
            "direct": false,
            "version": "2026.4.22",
            "ecosystem": "pypi"
          },
          {
            "name": "certifi",
            "direct": false,
            "version": "2026.5.20",
            "ecosystem": "pypi"
          },
          {
            "name": "cffi",
            "direct": false,
            "version": "2.0.0",
            "ecosystem": "pypi"
          },
          {
            "name": "charset-normalizer",
            "direct": false,
            "version": "3.4.7",
            "ecosystem": "pypi"
          },
          {
            "name": "click",
            "direct": false,
            "version": "8.4.0",
            "ecosystem": "pypi"
          },
          {
            "name": "click",
            "direct": false,
            "version": "8.4.1",
            "ecosystem": "pypi"
          },
          {
            "name": "cloudpickle",
            "direct": false,
            "version": "3.1.2",
            "ecosystem": "pypi"
          },
          {
            "name": "colorama",
            "direct": false,
            "version": "0.4.6",
            "ecosystem": "pypi"
          },
          {
            "name": "coloredlogs",
            "direct": false,
            "version": "15.0.1",
            "ecosystem": "pypi"
          },
          {
            "name": "croniter",
            "direct": false,
            "version": "6.2.2",
            "ecosystem": "pypi"
          },
          {
            "name": "cryptography",
            "direct": false,
            "version": "48.0.1",
            "ecosystem": "pypi"
          },
          {
            "name": "distro",
            "direct": false,
            "version": "1.9.0",
            "ecosystem": "pypi"
          },
          {
            "name": "exceptiongroup",
            "direct": false,
            "version": "1.3.1",
            "ecosystem": "pypi"
          },
          {
            "name": "fastapi",
            "direct": false,
            "version": "0.136.3",
            "ecosystem": "pypi"
          },
          {
            "name": "fastuuid",
            "direct": false,
            "version": "0.14.0",
            "ecosystem": "pypi"
          },
          {
            "name": "filelock",
            "direct": false,
            "version": "3.29.1",
            "ecosystem": "pypi"
          },
          {
            "name": "flatbuffers",
            "direct": false,
            "version": "25.12.19",
            "ecosystem": "pypi"
          },
          {
            "name": "forbiddenfruit",
            "direct": false,
            "version": "0.1.4",
            "ecosystem": "pypi"
          },
          {
            "name": "frozenlist",
            "direct": false,
            "version": "1.8.0",
            "ecosystem": "pypi"
          },
          {
            "name": "fsspec",
            "direct": false,
            "version": "2026.4.0",
            "ecosystem": "pypi"
          },
          {
            "name": "googleapis-common-protos",
            "direct": false,
            "version": "1.75.0",
            "ecosystem": "pypi"
          },
          {
            "name": "grpcio",
            "direct": false,
            "version": "1.78.0",
            "ecosystem": "pypi"
          },
          {
            "name": "grpcio-health-checking",
            "direct": false,
            "version": "1.78.0",
            "ecosystem": "pypi"
          },
          {
            "name": "grpcio-tools",
            "direct": false,
            "version": "1.78.0",
            "ecosystem": "pypi"
          },
          {
            "name": "h11",
            "direct": false,
            "version": "0.16.0",
            "ecosystem": "pypi"
          },
          {
            "name": "h2",
            "direct": false,
            "version": "4.3.0",
            "ecosystem": "pypi"
          },
          {
            "name": "headroom-ai",
            "direct": false,
            "version": "0.30.0",
            "ecosystem": "pypi"
          },
          {
            "name": "hf-xet",
            "direct": false,
            "version": "1.5.1",
            "ecosystem": "pypi"
          },
          {
            "name": "hpack",
            "direct": false,
            "version": "4.1.0",
            "ecosystem": "pypi"
          },
          {
            "name": "httpcore",
            "direct": false,
            "version": "1.0.9",
            "ecosystem": "pypi"
          },
          {
            "name": "httptools",
            "direct": false,
            "version": "0.7.1",
            "ecosystem": "pypi"
          },
          {
            "name": "httpx",
            "direct": false,
            "version": "0.28.1",
            "ecosystem": "pypi"
          },
          {
            "name": "httpx-sse",
            "direct": false,
            "version": "0.4.3",
            "ecosystem": "pypi"
          },
          {
            "name": "huggingface-hub",
            "direct": false,
            "version": "1.18.0",
            "ecosystem": "pypi"
          },
          {
            "name": "humanfriendly",
            "direct": false,
            "version": "10.0",
            "ecosystem": "pypi"
          },
          {
            "name": "hyperframe",
            "direct": false,
            "version": "6.1.0",
            "ecosystem": "pypi"
          },
          {
            "name": "idna",
            "direct": false,
            "version": "3.15",
            "ecosystem": "pypi"
          },
          {
            "name": "idna",
            "direct": false,
            "version": "3.18",
            "ecosystem": "pypi"
          },
          {
            "name": "importlib-metadata",
            "direct": false,
            "version": "8.7.1",
            "ecosystem": "pypi"
          },
          {
            "name": "importlib-metadata",
            "direct": false,
            "version": "8.9.0",
            "ecosystem": "pypi"
          },
          {
            "name": "jinja2",
            "direct": false,
            "version": "3.1.6",
            "ecosystem": "pypi"
          },
          {
            "name": "jiter",
            "direct": false,
            "version": "0.14.0",
            "ecosystem": "pypi"
          },
          {
            "name": "jiter",
            "direct": false,
            "version": "0.15.0",
            "ecosystem": "pypi"
          },
          {
            "name": "jsonpatch",
            "direct": false,
            "version": "1.33",
            "ecosystem": "pypi"
          },
          {
            "name": "jsonpointer",
            "direct": false,
            "version": "3.1.1",
            "ecosystem": "pypi"
          },
          {
            "name": "jsonschema",
            "direct": false,
            "version": "4.26.0",
            "ecosystem": "pypi"
          },
          {
            "name": "jsonschema-rs",
            "direct": false,
            "version": "0.44.1",
            "ecosystem": "pypi"
          },
          {
            "name": "jsonschema-specifications",
            "direct": false,
            "version": "2025.9.1",
            "ecosystem": "pypi"
          },
          {
            "name": "langchain-core",
            "direct": false,
            "version": "1.4.0",
            "ecosystem": "pypi"
          },
          {
            "name": "langchain-openai",
            "direct": false,
            "version": "1.2.1",
            "ecosystem": "pypi"
          },
          {
            "name": "langchain-protocol",
            "direct": false,
            "version": "0.0.15",
            "ecosystem": "pypi"
          },
          {
            "name": "langgraph",
            "direct": false,
            "version": "1.2.0",
            "ecosystem": "pypi"
          },
          {
            "name": "langgraph-api",
            "direct": false,
            "version": "0.8.7",
            "ecosystem": "pypi"
          },
          {
            "name": "langgraph-checkpoint",
            "direct": false,
            "version": "4.1.1",
            "ecosystem": "pypi"
          },
          {
            "name": "langgraph-cli",
            "direct": false,
            "version": "0.4.26",
            "ecosystem": "pypi"
          },
          {
            "name": "langgraph-prebuilt",
            "direct": false,
            "version": "1.1.0",
            "ecosystem": "pypi"
          },
          {
            "name": "langgraph-runtime-inmem",
            "direct": false,
            "version": "0.28.1",
            "ecosystem": "pypi"
          },
          {
            "name": "langgraph-sdk",
            "direct": false,
            "version": "0.3.15",
            "ecosystem": "pypi"
          },
          {
            "name": "langsmith",
            "direct": false,
            "version": "0.8.18",
            "ecosystem": "pypi"
          },
          {
            "name": "litellm",
            "direct": false,
            "version": "1.88.1",
            "ecosystem": "pypi"
          },
          {
            "name": "magika",
            "direct": false,
            "version": "1.0.3",
            "ecosystem": "pypi"
          },
          {
            "name": "markdown-it-py",
            "direct": false,
            "version": "4.2.0",
            "ecosystem": "pypi"
          },
          {
            "name": "markupsafe",
            "direct": false,
            "version": "3.0.3",
            "ecosystem": "pypi"
          },
          {
            "name": "mcp",
            "direct": false,
            "version": "1.28.1",
            "ecosystem": "pypi"
          },
          {
            "name": "mdurl",
            "direct": false,
            "version": "0.1.2",
            "ecosystem": "pypi"
          },
          {
            "name": "mpmath",
            "direct": false,
            "version": "1.3.0",
            "ecosystem": "pypi"
          },
          {
            "name": "multidict",
            "direct": false,
            "version": "6.7.1",
            "ecosystem": "pypi"
          },
          {
            "name": "numpy",
            "direct": false,
            "version": "2.2.6",
            "ecosystem": "pypi"
          },
          {
            "name": "numpy",
            "direct": false,
            "version": "2.4.6",
            "ecosystem": "pypi"
          },
          {
            "name": "onnxruntime",
            "direct": false,
            "version": "1.23.2",
            "ecosystem": "pypi"
          },
          {
            "name": "onnxruntime",
            "direct": false,
            "version": "1.26.0",
            "ecosystem": "pypi"
          },
          {
            "name": "openai",
            "direct": false,
            "version": "2.37.0",
            "ecosystem": "pypi"
          },
          {
            "name": "openai",
            "direct": false,
            "version": "2.41.0",
            "ecosystem": "pypi"
          },
          {
            "name": "opentelemetry-api",
            "direct": false,
            "version": "1.41.1",
            "ecosystem": "pypi"
          },
          {
            "name": "opentelemetry-api",
            "direct": false,
            "version": "1.42.1",
            "ecosystem": "pypi"
          },
          {
            "name": "opentelemetry-exporter-otlp-proto-common",
            "direct": false,
            "version": "1.41.1",
            "ecosystem": "pypi"
          },
          {
            "name": "opentelemetry-exporter-otlp-proto-http",
            "direct": false,
            "version": "1.41.1",
            "ecosystem": "pypi"
          },
          {
            "name": "opentelemetry-proto",
            "direct": false,
            "version": "1.41.1",
            "ecosystem": "pypi"
          },
          {
            "name": "opentelemetry-sdk",
            "direct": false,
            "version": "1.41.1",
            "ecosystem": "pypi"
          },
          {
            "name": "opentelemetry-semantic-conventions",
            "direct": false,
            "version": "0.62b1",
            "ecosystem": "pypi"
          },
          {
            "name": "orjson",
            "direct": false,
            "version": "3.11.9",
            "ecosystem": "pypi"
          },
          {
            "name": "ormsgpack",
            "direct": false,
            "version": "1.12.2",
            "ecosystem": "pypi"
          },
          {
            "name": "packaging",
            "direct": false,
            "version": "26.2",
            "ecosystem": "pypi"
          },
          {
            "name": "pathspec",
            "direct": false,
            "version": "1.1.1",
            "ecosystem": "pypi"
          },
          {
            "name": "propcache",
            "direct": false,
            "version": "0.5.2",
            "ecosystem": "pypi"
          },
          {
            "name": "protobuf",
            "direct": false,
            "version": "6.33.6",
            "ecosystem": "pypi"
          },
          {
            "name": "protobuf",
            "direct": false,
            "version": "7.35.0",
            "ecosystem": "pypi"
          },
          {
            "name": "pycparser",
            "direct": false,
            "version": "3.0",
            "ecosystem": "pypi"
          },
          {
            "name": "pydantic",
            "direct": false,
            "version": "2.13.4",
            "ecosystem": "pypi"
          },
          {
            "name": "pydantic-core",
            "direct": false,
            "version": "2.46.4",
            "ecosystem": "pypi"
          },
          {
            "name": "pydantic-settings",
            "direct": false,
            "version": "2.14.2",
            "ecosystem": "pypi"
          },
          {
            "name": "pygments",
            "direct": false,
            "version": "2.20.0",
            "ecosystem": "pypi"
          },
          {
            "name": "pyjwt",
            "direct": false,
            "version": "2.13.0",
            "ecosystem": "pypi"
          },
          {
            "name": "pyreadline3",
            "direct": false,
            "version": "3.5.6",
            "ecosystem": "pypi"
          },
          {
            "name": "python-dateutil",
            "direct": false,
            "version": "2.9.0.post0",
            "ecosystem": "pypi"
          },
          {
            "name": "python-dotenv",
            "direct": false,
            "version": "1.2.2",
            "ecosystem": "pypi"
          },
          {
            "name": "python-multipart",
            "direct": false,
            "version": "0.0.32",
            "ecosystem": "pypi"
          },
          {
            "name": "pywin32",
            "direct": false,
            "version": "312",
            "ecosystem": "pypi"
          },
          {
            "name": "pyyaml",
            "direct": false,
            "version": "6.0.3",
            "ecosystem": "pypi"
          },
          {
            "name": "referencing",
            "direct": false,
            "version": "0.37.0",
            "ecosystem": "pypi"
          },
          {
            "name": "regex",
            "direct": false,
            "version": "2026.5.9",
            "ecosystem": "pypi"
          },
          {
            "name": "requests",
            "direct": false,
            "version": "2.34.2",
            "ecosystem": "pypi"
          },
          {
            "name": "requests-toolbelt",
            "direct": false,
            "version": "1.0.0",
            "ecosystem": "pypi"
          },
          {
            "name": "rich",
            "direct": false,
            "version": "15.0.0",
            "ecosystem": "pypi"
          },
          {
            "name": "rpds-py",
            "direct": false,
            "version": "0.30.0",
            "ecosystem": "pypi"
          },
          {
            "name": "rpds-py",
            "direct": false,
            "version": "2026.5.1",
            "ecosystem": "pypi"
          },
          {
            "name": "safetensors",
            "direct": false,
            "version": "0.8.0",
            "ecosystem": "pypi"
          },
          {
            "name": "setuptools",
            "direct": false,
            "version": "83.0.0",
            "ecosystem": "pypi"
          },
          {
            "name": "shellingham",
            "direct": false,
            "version": "1.5.4",
            "ecosystem": "pypi"
          },
          {
            "name": "six",
            "direct": false,
            "version": "1.17.0",
            "ecosystem": "pypi"
          },
          {
            "name": "skillspector",
            "direct": false,
            "version": "2.0.0",
            "ecosystem": "pypi"
          },
          {
            "name": "sniffio",
            "direct": false,
            "version": "1.3.1",
            "ecosystem": "pypi"
          },
          {
            "name": "socket-headroom-pin",
            "direct": false,
            "version": "0.0.0",
            "ecosystem": "pypi"
          },
          {
            "name": "socket-skillspector-pin",
            "direct": false,
            "version": "0.0.0",
            "ecosystem": "pypi"
          },
          {
            "name": "sqlite-vec",
            "direct": false,
            "version": "0.1.9",
            "ecosystem": "pypi"
          },
          {
            "name": "sse-starlette",
            "direct": false,
            "version": "3.3.4",
            "ecosystem": "pypi"
          },
          {
            "name": "sse-starlette",
            "direct": false,
            "version": "3.4.4",
            "ecosystem": "pypi"
          },
          {
            "name": "starlette",
            "direct": false,
            "version": "1.3.1",
            "ecosystem": "pypi"
          },
          {
            "name": "structlog",
            "direct": false,
            "version": "25.5.0",
            "ecosystem": "pypi"
          },
          {
            "name": "sympy",
            "direct": false,
            "version": "1.14.0",
            "ecosystem": "pypi"
          },
          {
            "name": "tenacity",
            "direct": false,
            "version": "9.1.4",
            "ecosystem": "pypi"
          },
          {
            "name": "tiktoken",
            "direct": false,
            "version": "0.13.0",
            "ecosystem": "pypi"
          },
          {
            "name": "tokenizers",
            "direct": false,
            "version": "0.22.2",
            "ecosystem": "pypi"
          },
          {
            "name": "tomli",
            "direct": false,
            "version": "2.4.1",
            "ecosystem": "pypi"
          },
          {
            "name": "tqdm",
            "direct": false,
            "version": "4.67.3",
            "ecosystem": "pypi"
          },
          {
            "name": "tqdm",
            "direct": false,
            "version": "4.68.2",
            "ecosystem": "pypi"
          },
          {
            "name": "transformers",
            "direct": false,
            "version": "5.10.2",
            "ecosystem": "pypi"
          },
          {
            "name": "truststore",
            "direct": false,
            "version": "0.10.4",
            "ecosystem": "pypi"
          },
          {
            "name": "typer",
            "direct": false,
            "version": "0.23.2",
            "ecosystem": "pypi"
          },
          {
            "name": "typer",
            "direct": false,
            "version": "0.25.1",
            "ecosystem": "pypi"
          },
          {
            "name": "typing-extensions",
            "direct": false,
            "version": "4.15.0",
            "ecosystem": "pypi"
          },
          {
            "name": "typing-inspection",
            "direct": false,
            "version": "0.4.2",
            "ecosystem": "pypi"
          },
          {
            "name": "urllib3",
            "direct": false,
            "version": "2.7.0",
            "ecosystem": "pypi"
          },
          {
            "name": "uuid-utils",
            "direct": false,
            "version": "0.15.0",
            "ecosystem": "pypi"
          },
          {
            "name": "uvicorn",
            "direct": false,
            "version": "0.47.0",
            "ecosystem": "pypi"
          },
          {
            "name": "uvicorn",
            "direct": false,
            "version": "0.49.0",
            "ecosystem": "pypi"
          },
          {
            "name": "uvloop",
            "direct": false,
            "version": "0.22.1",
            "ecosystem": "pypi"
          },
          {
            "name": "watchdog",
            "direct": false,
            "version": "6.0.0",
            "ecosystem": "pypi"
          },
          {
            "name": "watchfiles",
            "direct": false,
            "version": "1.1.1",
            "ecosystem": "pypi"
          },
          {
            "name": "websockets",
            "direct": false,
            "version": "16.0",
            "ecosystem": "pypi"
          },
          {
            "name": "xxhash",
            "direct": false,
            "version": "3.7.0",
            "ecosystem": "pypi"
          },
          {
            "name": "yara-python",
            "direct": false,
            "version": "4.5.4",
            "ecosystem": "pypi"
          },
          {
            "name": "yarl",
            "direct": false,
            "version": "1.24.2",
            "ecosystem": "pypi"
          },
          {
            "name": "zipp",
            "direct": false,
            "version": "3.23.1",
            "ecosystem": "pypi"
          },
          {
            "name": "zipp",
            "direct": false,
            "version": "4.1.0",
            "ecosystem": "pypi"
          },
          {
            "name": "zstandard",
            "direct": false,
            "version": "0.25.0",
            "ecosystem": "pypi"
          }
        ],
        "collected": true,
        "truncated": false,
        "total_count": 295,
        "direct_count": 6,
        "indirect_count": 289
      }
    },
    "maintainership": {
      "issues": {
        "open_prs": 0,
        "merged_prs": 0,
        "open_issues": 0,
        "closed_ratio": null,
        "closed_issues": 0,
        "closed_unmerged_prs": 0
      },
      "bus_factor": 1,
      "bot_contributors": 0,
      "top_contributors": [
        {
          "type": "User",
          "login": "jdalton",
          "commits": 85,
          "avatar_url": "https://avatars.githubusercontent.com/u/4303?v=4"
        }
      ],
      "contributors_sampled": 1,
      "top_contributor_share": 1
    },
    "quality_signals": {
      "has_ci": true,
      "has_tests": true,
      "ci_workflows": [
        "cargo-publish.yml",
        "ci.yml",
        "get-green.lock.yml",
        "get-green.yml",
        "github-release.yml",
        "npm-publish.yml",
        "prune-workflow-runs.yml",
        "publish-npm.yml",
        "release-reconcile.yml",
        "weekly-update.lock.yml"
      ],
      "has_docs_dir": true,
      "linter_configs": [],
      "has_editorconfig": true,
      "has_linter_config": false,
      "has_precommit_config": false
    },
    "security_signals": {
      "lockfiles": [
        "Cargo.lock",
        "pnpm-lock.yaml",
        "uv.lock"
      ],
      "scorecard": {
        "checks": [
          {
            "name": "Binary-Artifacts",
            "score": 6,
            "reason": "binaries present in source code",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#binary-artifacts"
          },
          {
            "name": "Branch-Protection",
            "score": 1,
            "reason": "branch protection is not maximal on development and all release branches",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#branch-protection"
          },
          {
            "name": "CI-Tests",
            "score": null,
            "reason": "no pull request found",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#ci-tests"
          },
          {
            "name": "CII-Best-Practices",
            "score": 0,
            "reason": "no effort to earn an OpenSSF best practices badge detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#cii-best-practices"
          },
          {
            "name": "Code-Review",
            "score": 0,
            "reason": "Found 0/30 approved changesets -- score normalized to 0",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#code-review"
          },
          {
            "name": "Contributors",
            "score": 10,
            "reason": "project has 10 contributing companies or organizations",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#contributors"
          },
          {
            "name": "Dangerous-Workflow",
            "score": 10,
            "reason": "no dangerous workflow patterns detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dangerous-workflow"
          },
          {
            "name": "Dependency-Update-Tool",
            "score": 10,
            "reason": "update tool detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dependency-update-tool"
          },
          {
            "name": "Fuzzing",
            "score": 0,
            "reason": "project is not fuzzed",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#fuzzing"
          },
          {
            "name": "License",
            "score": 10,
            "reason": "license file detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#license"
          },
          {
            "name": "Maintained",
            "score": 0,
            "reason": "project was created within the last 90 days. Please review its contents carefully",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#maintained"
          },
          {
            "name": "Packaging",
            "score": null,
            "reason": "packaging workflow not detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#packaging"
          },
          {
            "name": "Pinned-Dependencies",
            "score": 8,
            "reason": "dependency not pinned by hash detected -- score normalized to 8",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#pinned-dependencies"
          },
          {
            "name": "SAST",
            "score": 0,
            "reason": "no SAST tool detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#sast"
          },
          {
            "name": "Security-Policy",
            "score": 9,
            "reason": "security policy file detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#security-policy"
          },
          {
            "name": "Signed-Releases",
            "score": null,
            "reason": "no releases found",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#signed-releases"
          },
          {
            "name": "Token-Permissions",
            "score": 0,
            "reason": "detected GitHub workflow tokens with excessive permissions",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#token-permissions"
          },
          {
            "name": "Vulnerabilities",
            "score": 10,
            "reason": "0 existing vulnerabilities detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#vulnerabilities"
          }
        ],
        "commit": "1c3f01e7f05ff0d3aae9d1af908f3c5c4255ecad",
        "ran_at": "2026-07-26T22:49:03Z",
        "aggregate_score": 4.9,
        "scorecard_version": "v5.5.0"
      },
      "has_codeql_workflow": false,
      "has_security_policy": false,
      "has_dependabot_config": true
    },
    "contribution_flow": {
      "collected": true,
      "ci_last_run_at": "2026-07-26T22:34:11Z",
      "oldest_open_prs": [],
      "last_merged_pr_at": null,
      "ci_last_conclusion": "SUCCESS",
      "oldest_open_issues": []
    }
  },
  "config": {
    "disabled_metrics": [],
    "disabled_categories": [],
    "disabled_components": {}
  },
  "source": {
    "url": "https://github.com/SocketDev/decmpfs",
    "host": "github.com",
    "name": "decmpfs",
    "owner": "SocketDev"
  },
  "metrics": {
    "overall": {
      "key": "overall",
      "band": "moderate",
      "name": "Overall health",
      "note": null,
      "notes": [],
      "value": 55,
      "inputs": {
        "security": 59,
        "vitality": 73,
        "community": 40,
        "governance": 42,
        "engineering": 63
      },
      "components": []
    },
    "categories": [
      {
        "key": "vitality",
        "band": "good",
        "name": "Vitality",
        "value": 73,
        "weight": 0.22,
        "metrics": [
          {
            "key": "development_activity",
            "band": "moderate",
            "name": "Development activity",
            "note": null,
            "notes": [],
            "value": 55,
            "inputs": {
              "commits_last_year": 81,
              "human_commit_share": 1,
              "days_since_last_push": 0,
              "active_weeks_last_year": 2
            },
            "components": [
              {
                "key": "push_recency",
                "name": "Push recency",
                "detail": "last push 0 days ago",
                "points": 36,
                "status": "met",
                "details": [
                  {
                    "code": "push_recency",
                    "params": {
                      "days": 0
                    }
                  }
                ],
                "max_points": 36
              },
              {
                "key": "commit_cadence",
                "name": "Commit cadence",
                "detail": "2/52 weeks with commits",
                "points": 1.4,
                "status": "partial",
                "details": [
                  {
                    "code": "commit_cadence_weeks",
                    "params": {
                      "weeks": 2
                    }
                  }
                ],
                "max_points": 36
              },
              {
                "key": "commit_volume",
                "name": "Commit volume",
                "detail": "81 commits in the last year",
                "points": 17.2,
                "status": "partial",
                "details": [
                  {
                    "code": "commits_last_year",
                    "params": {
                      "count": 81
                    }
                  }
                ],
                "max_points": 18
              },
              {
                "key": "openssf_scorecard_maintained",
                "name": "OpenSSF Scorecard: Maintained",
                "detail": "project was created within the last 90 days. Please review its contents carefully",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "release_discipline",
            "band": "excellent",
            "name": "Release discipline",
            "note": "Excluded from scoring (no data or not applicable): OpenSSF Scorecard: Signed-Releases. Remaining weights renormalized.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "openssf_scorecard_signed_releases"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              }
            ],
            "value": 100,
            "inputs": {
              "releases_count": 2,
              "latest_release_tag": "v0.1.2",
              "releases_from_tags": false,
              "days_since_latest_release": 2,
              "mean_days_between_releases": 2.8
            },
            "components": [
              {
                "key": "ships_releases",
                "name": "Ships releases",
                "detail": "2 releases published",
                "points": 27,
                "status": "met",
                "details": [
                  {
                    "code": "releases_published",
                    "params": {
                      "count": 2
                    }
                  }
                ],
                "max_points": 27
              },
              {
                "key": "release_recency",
                "name": "Release recency",
                "detail": "latest release 2 days ago",
                "points": 36,
                "status": "met",
                "details": [
                  {
                    "code": "release_recency",
                    "params": {
                      "days": 2
                    }
                  }
                ],
                "max_points": 36
              },
              {
                "key": "release_cadence",
                "name": "Release cadence",
                "detail": "a release every ~2.8 days",
                "points": 27,
                "status": "met",
                "details": [
                  {
                    "code": "release_cadence",
                    "params": {
                      "gap": 2.8
                    }
                  }
                ],
                "max_points": 27
              },
              {
                "key": "openssf_scorecard_signed_releases",
                "name": "OpenSSF Scorecard: Signed-Releases",
                "detail": "no releases found",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_data",
                    "params": {}
                  }
                ],
                "max_points": 10
              }
            ]
          },
          {
            "key": "abandonment",
            "band": "excellent",
            "name": "Abandonment",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "cap": null,
              "state": "unverified",
              "guards": [],
              "signals": [],
              "red_flag": false,
              "multiplier_pct": 100,
              "declared_reason": null,
              "unverified_reason": "repository_too_young",
              "unanswered_open_prs": null,
              "unanswered_open_issues": null,
              "days_since_last_merged_pr": null,
              "days_since_last_human_commit": null,
              "days_since_last_human_commit_is_floor": false
            },
            "components": [
              {
                "key": "project_is_still_maintained",
                "name": "Project is still maintained",
                "detail": "maintenance record not established from the collected data",
                "points": 100,
                "status": "met",
                "details": [
                  {
                    "code": "abandonment_unverified",
                    "params": {}
                  }
                ],
                "max_points": 100
              }
            ]
          }
        ],
        "description": "Is the project alive — is code being written and are releases shipping?"
      },
      {
        "key": "community",
        "band": "at_risk",
        "name": "Community & Adoption",
        "value": 40,
        "weight": 0.18,
        "metrics": [
          {
            "key": "popularity",
            "band": "critical",
            "name": "Popularity & adoption",
            "note": null,
            "notes": [],
            "value": 1,
            "inputs": {
              "forks": 0,
              "stars": 0,
              "watchers": 0,
              "growth_state": "unverified",
              "growth_factor_pct": 100,
              "growth_unverified_reason": "no_history"
            },
            "components": [
              {
                "key": "stars",
                "name": "Stars",
                "detail": "0 stars",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "stars",
                    "params": {
                      "count": 0
                    }
                  }
                ],
                "max_points": 60
              },
              {
                "key": "forks",
                "name": "Forks",
                "detail": "0 forks",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "forks",
                    "params": {
                      "count": 0
                    }
                  }
                ],
                "max_points": 25
              },
              {
                "key": "watchers",
                "name": "Watchers",
                "detail": "0 watchers",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "watchers",
                    "params": {
                      "count": 0
                    }
                  }
                ],
                "max_points": 15
              }
            ]
          },
          {
            "key": "community_health",
            "band": "excellent",
            "name": "Community health",
            "note": null,
            "notes": [],
            "value": 85,
            "inputs": {
              "has_readme": true,
              "has_license": true,
              "has_contributing": true,
              "has_issue_template": false,
              "has_code_of_conduct": true,
              "has_pull_request_template": false
            },
            "components": [
              {
                "key": "readme",
                "name": "README",
                "detail": null,
                "points": 22.5,
                "status": "met",
                "details": [],
                "max_points": 22.5
              },
              {
                "key": "license",
                "name": "License",
                "detail": "recognized license (MIT)",
                "points": 22.5,
                "status": "met",
                "details": [
                  {
                    "code": "license_standard",
                    "params": {}
                  },
                  {
                    "code": "license_spdx",
                    "params": {
                      "spdx": "MIT"
                    }
                  }
                ],
                "max_points": 22.5
              },
              {
                "key": "contributing_guide",
                "name": "CONTRIBUTING guide",
                "detail": null,
                "points": 18,
                "status": "met",
                "details": [],
                "max_points": 18
              },
              {
                "key": "code_of_conduct",
                "name": "Code of conduct",
                "detail": null,
                "points": 13.5,
                "status": "met",
                "details": [],
                "max_points": 13.5
              },
              {
                "key": "issue_template",
                "name": "Issue template",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.2
              },
              {
                "key": "pr_template",
                "name": "PR template",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 6.3
              }
            ]
          },
          {
            "key": "ecosystem_adoption",
            "band": "at_risk",
            "name": "Ecosystem adoption (downloads)",
            "note": "Excluded from scoring (no data or not applicable): Registry dependents. Remaining weights renormalized.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "registry_dependents"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              }
            ],
            "value": 38,
            "inputs": {
              "packages": [
                "decmpfs"
              ],
              "dependents": null,
              "ecosystems": "npm",
              "total_downloads": null,
              "monthly_downloads": 182
            },
            "components": [
              {
                "key": "monthly_downloads",
                "name": "Monthly downloads",
                "detail": "182 downloads/month across npm",
                "points": 30.2,
                "status": "partial",
                "details": [
                  {
                    "code": "downloads_monthly",
                    "params": {
                      "count": 182,
                      "ecosystems": "npm"
                    }
                  }
                ],
                "max_points": 80
              },
              {
                "key": "registry_dependents",
                "name": "Registry dependents",
                "detail": "not reported by this ecosystem",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "not_reported_by_this_ecosystem",
                    "params": {}
                  }
                ],
                "max_points": 20
              }
            ]
          }
        ],
        "description": "Does the project have users, downloads, attention, and a welcoming setup for contributors?"
      },
      {
        "key": "governance",
        "band": "at_risk",
        "name": "Sustainability & Governance",
        "value": 42,
        "weight": 0.24,
        "metrics": [
          {
            "key": "maintainer_resilience",
            "band": "critical",
            "name": "Maintainer resilience (bus factor)",
            "note": null,
            "notes": [],
            "value": 20,
            "inputs": {
              "bus_factor": 1,
              "contributors_sampled": 1,
              "top_contributor_share": 1
            },
            "components": [
              {
                "key": "bus_factor",
                "name": "Bus factor",
                "detail": "1 contributor(s) cover half of all commits",
                "points": 9,
                "status": "partial",
                "details": [
                  {
                    "code": "bus_factor",
                    "params": {
                      "count": 1
                    }
                  }
                ],
                "max_points": 54
              },
              {
                "key": "commit_distribution",
                "name": "Commit distribution",
                "detail": "top contributor authored 100% of commits",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "top_contributor_share",
                    "params": {
                      "share": 100
                    }
                  }
                ],
                "max_points": 22.5
              },
              {
                "key": "contributor_breadth",
                "name": "Contributor breadth",
                "detail": "1 contributors",
                "points": 1.4,
                "status": "partial",
                "details": [
                  {
                    "code": "contributors_sampled",
                    "params": {
                      "count": 1
                    }
                  }
                ],
                "max_points": 13.5
              },
              {
                "key": "openssf_scorecard_contributors",
                "name": "OpenSSF Scorecard: Contributors",
                "detail": "project has 10 contributing companies or organizations",
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "responsiveness",
            "band": "critical",
            "name": "Issue & PR responsiveness",
            "note": "Excluded from scoring (no data or not applicable): Issue resolution, PR acceptance. Remaining weights renormalized.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "issue_resolution",
                    "pr_acceptance"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              }
            ],
            "value": 1,
            "inputs": {
              "merged_prs": 0,
              "open_issues": 0,
              "closed_issues": 0,
              "issue_closed_ratio": null,
              "closed_unmerged_prs": 0
            },
            "components": [
              {
                "key": "issue_resolution",
                "name": "Issue resolution",
                "detail": "no issues or no data",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_issues_or_data",
                    "params": {}
                  }
                ],
                "max_points": 46.75
              },
              {
                "key": "pr_acceptance",
                "name": "PR acceptance",
                "detail": "no decided pull requests or no data",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_decided_prs_or_data",
                    "params": {}
                  }
                ],
                "max_points": 38.25
              },
              {
                "key": "openssf_scorecard_code_review",
                "name": "OpenSSF Scorecard: Code-Review",
                "detail": "Found 0/30 approved changesets -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 15
              }
            ]
          },
          {
            "key": "stewardship",
            "band": "good",
            "name": "Ownership & stewardship",
            "note": null,
            "notes": [],
            "value": 75,
            "inputs": {
              "followers": 784,
              "owner_type": "Organization",
              "is_verified": null,
              "owner_login": "SocketDev",
              "public_repos": 50,
              "account_age_days": 2180
            },
            "components": [
              {
                "key": "ownership_backing",
                "name": "Ownership backing",
                "detail": "organization-owned",
                "points": 30,
                "status": "met",
                "details": [
                  {
                    "code": "owner_organization",
                    "params": {}
                  }
                ],
                "max_points": 30
              },
              {
                "key": "verified_domain",
                "name": "Verified domain",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 20
              },
              {
                "key": "owner_reach",
                "name": "Owner reach",
                "detail": "784 followers of SocketDev",
                "points": 20.8,
                "status": "partial",
                "details": [
                  {
                    "code": "owner_followers",
                    "params": {
                      "count": 784,
                      "login": "SocketDev"
                    }
                  }
                ],
                "max_points": 25
              },
              {
                "key": "track_record",
                "name": "Track record",
                "detail": "50 public repos, account ~5 yr old",
                "points": 24.4,
                "status": "partial",
                "details": [
                  {
                    "code": "public_repos",
                    "params": {
                      "count": 50
                    }
                  },
                  {
                    "code": "account_age_years",
                    "params": {
                      "years": 5
                    }
                  }
                ],
                "max_points": 25
              }
            ]
          },
          {
            "key": "package_maintenance",
            "band": "good",
            "name": "Package maintenance",
            "note": null,
            "notes": [],
            "value": 84,
            "inputs": {
              "packages": [
                "decmpfs"
              ],
              "ecosystems": "npm",
              "any_deprecated": false,
              "min_days_since_publish": 28
            },
            "components": [
              {
                "key": "published_resolvable",
                "name": "Published & resolvable",
                "detail": "1 package(s) on npm",
                "points": 25,
                "status": "met",
                "details": [
                  {
                    "code": "packages_published",
                    "params": {
                      "count": 1,
                      "ecosystems": "npm"
                    }
                  }
                ],
                "max_points": 25
              },
              {
                "key": "publish_recency",
                "name": "Publish recency",
                "detail": "latest publish 28 days ago",
                "points": 35,
                "status": "met",
                "details": [
                  {
                    "code": "publish_recency",
                    "params": {
                      "days": 28
                    }
                  }
                ],
                "max_points": 35
              },
              {
                "key": "version_history",
                "name": "Version history",
                "detail": "1 published versions",
                "points": 4,
                "status": "partial",
                "details": [
                  {
                    "code": "published_versions",
                    "params": {
                      "count": 1
                    }
                  }
                ],
                "max_points": 20
              },
              {
                "key": "not_deprecated",
                "name": "Not deprecated",
                "detail": "active, not deprecated or yanked",
                "points": 20,
                "status": "met",
                "details": [
                  {
                    "code": "package_not_deprecated",
                    "params": {}
                  }
                ],
                "max_points": 20
              }
            ]
          }
        ],
        "description": "Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?"
      },
      {
        "key": "engineering",
        "band": "moderate",
        "name": "Engineering Quality",
        "value": 63,
        "weight": 0.2,
        "metrics": [
          {
            "key": "engineering_practices",
            "band": "moderate",
            "name": "Engineering practices",
            "note": "Excluded from scoring (no data or not applicable): OpenSSF Scorecard: CI-Tests. Remaining weights renormalized.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "openssf_scorecard_ci_tests"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              }
            ],
            "value": 68,
            "inputs": {
              "has_ci": true,
              "has_tests": true,
              "has_editorconfig": true,
              "has_linter_config": false,
              "has_precommit_config": false
            },
            "components": [
              {
                "key": "ci_workflows",
                "name": "CI workflows",
                "detail": "10 workflow(s)",
                "points": 24,
                "status": "met",
                "details": [
                  {
                    "code": "ci_workflows",
                    "params": {
                      "count": 10
                    }
                  }
                ],
                "max_points": 24
              },
              {
                "key": "tests_present",
                "name": "Tests present",
                "detail": null,
                "points": 24,
                "status": "met",
                "details": [],
                "max_points": 24
              },
              {
                "key": "linter_config",
                "name": "Linter config",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 16
              },
              {
                "key": "pre_commit_hooks",
                "name": "Pre-commit hooks",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 9.6
              },
              {
                "key": "editorconfig",
                "name": ".editorconfig",
                "detail": null,
                "points": 6.4,
                "status": "met",
                "details": [],
                "max_points": 6.4
              },
              {
                "key": "openssf_scorecard_ci_tests",
                "name": "OpenSSF Scorecard: CI-Tests",
                "detail": "no pull request found",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_data",
                    "params": {}
                  }
                ],
                "max_points": 20
              }
            ]
          },
          {
            "key": "documentation",
            "band": "moderate",
            "name": "Documentation",
            "note": null,
            "notes": [],
            "value": 55,
            "inputs": {
              "topics": [],
              "has_wiki": false,
              "homepage": null,
              "has_readme": true,
              "has_docs_dir": true,
              "has_description": false
            },
            "components": [
              {
                "key": "readme",
                "name": "README",
                "detail": null,
                "points": 30,
                "status": "met",
                "details": [],
                "max_points": 30
              },
              {
                "key": "documentation_directory",
                "name": "Documentation directory",
                "detail": null,
                "points": 25,
                "status": "met",
                "details": [],
                "max_points": 25
              },
              {
                "key": "documentation_homepage_site",
                "name": "Documentation / homepage site",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 15
              },
              {
                "key": "repository_description",
                "name": "Repository description",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 10
              },
              {
                "key": "topics",
                "name": "Topics",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 10
              },
              {
                "key": "wiki",
                "name": "Wiki",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 10
              }
            ]
          }
        ],
        "description": "Are baseline engineering and documentation practices in place?"
      },
      {
        "key": "security",
        "band": "moderate",
        "name": "Security",
        "value": 59,
        "weight": 0.16,
        "metrics": [
          {
            "key": "security_posture",
            "band": "at_risk",
            "name": "Security posture",
            "note": "Excluded from scoring (no data or not applicable): CI-Tests, Packaging, Signed-Releases. Remaining weights renormalized.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "ci_tests",
                    "packaging",
                    "signed_releases"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              }
            ],
            "value": 49,
            "inputs": {
              "source": "openssf_scorecard",
              "checks_evaluated": 15,
              "scorecard_version": "v5.5.0",
              "checks_inconclusive": 3,
              "scorecard_aggregate": 4.9
            },
            "components": [
              {
                "key": "binary_artifacts",
                "name": "Binary-Artifacts",
                "detail": "binaries present in source code",
                "points": 4.5,
                "status": "partial",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "branch_protection",
                "name": "Branch-Protection",
                "detail": "branch protection is not maximal on development and all release branches",
                "points": 0.8,
                "status": "partial",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "ci_tests",
                "name": "CI-Tests",
                "detail": "no pull request found",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_data",
                    "params": {}
                  }
                ],
                "max_points": 2.5
              },
              {
                "key": "cii_best_practices",
                "name": "CII-Best-Practices",
                "detail": "no effort to earn an OpenSSF best practices badge detected",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "code_review",
                "name": "Code-Review",
                "detail": "Found 0/30 approved changesets -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "contributors",
                "name": "Contributors",
                "detail": "project has 10 contributing companies or organizations",
                "points": 2.5,
                "status": "met",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "dangerous_workflow",
                "name": "Dangerous-Workflow",
                "detail": "no dangerous workflow patterns detected",
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              },
              {
                "key": "dependency_update_tool",
                "name": "Dependency-Update-Tool",
                "detail": "update tool detected",
                "points": 7.5,
                "status": "met",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "fuzzing",
                "name": "Fuzzing",
                "detail": "project is not fuzzed",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 5
              },
              {
                "key": "license",
                "name": "License",
                "detail": "license file detected",
                "points": 2.5,
                "status": "met",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "maintained",
                "name": "Maintained",
                "detail": "project was created within the last 90 days. Please review its contents carefully",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "packaging",
                "name": "Packaging",
                "detail": "packaging workflow not detected",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_data",
                    "params": {}
                  }
                ],
                "max_points": 5
              },
              {
                "key": "pinned_dependencies",
                "name": "Pinned-Dependencies",
                "detail": "dependency not pinned by hash detected -- score normalized to 8",
                "points": 4,
                "status": "partial",
                "details": [],
                "max_points": 5
              },
              {
                "key": "sast",
                "name": "SAST",
                "detail": "no SAST tool detected",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 5
              },
              {
                "key": "security_policy",
                "name": "Security-Policy",
                "detail": "security policy file detected",
                "points": 4.5,
                "status": "partial",
                "details": [],
                "max_points": 5
              },
              {
                "key": "signed_releases",
                "name": "Signed-Releases",
                "detail": "no releases found",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_data",
                    "params": {}
                  }
                ],
                "max_points": 7.5
              },
              {
                "key": "token_permissions",
                "name": "Token-Permissions",
                "detail": "detected GitHub workflow tokens with excessive permissions",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "vulnerabilities",
                "name": "Vulnerabilities",
                "detail": "0 existing vulnerabilities detected",
                "points": 7.5,
                "status": "met",
                "details": [],
                "max_points": 7.5
              }
            ]
          },
          {
            "key": "dependency_advisories",
            "band": "excellent",
            "name": "Dependency advisories",
            "note": "Excluded from scoring (no data or not applicable): No advisories left outstanding. Remaining weights renormalized. Matched the crates:decmpfs@0.1.2 runtime dependency closure — what installing the published package pulls in — 62 packages. Reachability is not analyzed.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "no_advisories_left_outstanding"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              },
              {
                "code": "advisories_scope_published",
                "params": {
                  "package": "crates:decmpfs@0.1.2",
                  "assessed": 62
                }
              },
              {
                "code": "advisories_reachability",
                "params": {}
              }
            ],
            "value": 100,
            "inputs": {
              "source": "osv",
              "advisories": 0,
              "affected_packages": 0,
              "assessed_packages": 62,
              "unassessed_packages": 0,
              "affected_by_severity": "none",
              "direct_affected_packages": 0
            },
            "components": [
              {
                "key": "direct_dependencies_free_of_known_advisories",
                "name": "Direct dependencies free of known advisories",
                "detail": "no direct dependency carries a known advisory",
                "points": 35,
                "status": "met",
                "details": [
                  {
                    "code": "no_direct_advisories",
                    "params": {}
                  }
                ],
                "max_points": 35
              },
              {
                "key": "indirect_dependencies_free_of_known_advisories",
                "name": "Indirect dependencies free of known advisories",
                "detail": "no indirect dependency carries a known advisory",
                "points": 25,
                "status": "met",
                "details": [
                  {
                    "code": "no_indirect_advisories",
                    "params": {}
                  }
                ],
                "max_points": 25
              },
              {
                "key": "no_advisories_left_outstanding",
                "name": "No advisories left outstanding",
                "detail": "no advisory carries a publication date",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "advisories_no_publication_date",
                    "params": {}
                  }
                ],
                "max_points": 40
              }
            ]
          },
          {
            "key": "malicious_dependencies",
            "band": "excellent",
            "name": "Malicious dependencies",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "source": "osv",
              "meaning": "reported as a malicious package by the OpenSSF corpus; the remedy is removal or moving off the compromised name, never an upgrade of the same artifact. Versions the registry has since pulled are listed but not scored",
              "packages": [],
              "red_flag": false,
              "assessed_packages": 62,
              "malicious_packages": 0,
              "direct_malicious_packages": 0,
              "withdrawn_malicious_packages": 0,
              "installable_malicious_packages": 0
            },
            "components": [
              {
                "key": "no_dependency_reported_as_a_malicious_package",
                "name": "No dependency reported as a malicious package",
                "detail": "no dependency is reported as a malicious package",
                "points": 100,
                "status": "met",
                "details": [
                  {
                    "code": "no_malicious_dependencies",
                    "params": {}
                  }
                ],
                "max_points": 100
              }
            ]
          },
          {
            "key": "high_risk_jurisdiction_exposure",
            "band": "excellent",
            "name": "High-Risk Jurisdiction Exposure",
            "note": "Only high-confidence self-published location evidence affects this multiplier. Ambiguous matches are review-only; country evidence is not proof of nationality, citizenship, legal registration, malicious intent, or sanctions status.",
            "notes": [
              {
                "code": "jurisdiction_evidence_limits",
                "params": {}
              }
            ],
            "value": 100,
            "inputs": {
              "meaning": "self-published location evidence; not nationality or citizenship",
              "red_flag": false,
              "exposures": [],
              "policy_countries": [
                "Russia",
                "Iran",
                "North Korea"
              ],
              "review_only_matches": 0,
              "assessed_self_published_locations": 5
            },
            "components": [
              {
                "key": "policy_exposure_multiplier",
                "name": "Policy exposure multiplier",
                "detail": "no confirmed policy-scope location match",
                "points": 100,
                "status": "met",
                "details": [
                  {
                    "code": "jurisdiction_no_match",
                    "params": {}
                  }
                ],
                "max_points": 100
              }
            ]
          }
        ],
        "description": "Are visible security and supply-chain practices strong, with no malicious dependency and no unresolved high-risk jurisdiction exposure?"
      },
      {
        "key": "ai_readiness",
        "band": "moderate",
        "name": "AI Readiness",
        "value": 57,
        "weight": 0,
        "metrics": [
          {
            "key": "ai_agent_context",
            "band": "at_risk",
            "name": "Agent context & guidance",
            "note": null,
            "notes": [],
            "value": 40,
            "inputs": {
              "has_llms_txt": false,
              "legible_history_share": 1,
              "agent_instruction_files": [],
              "agent_instruction_max_bytes": null
            },
            "components": [
              {
                "key": "agent_instructions",
                "name": "Agent instructions",
                "detail": "no CLAUDE.md / AGENTS.md / editor rules",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "no_agent_instructions",
                    "params": {}
                  }
                ],
                "max_points": 45
              },
              {
                "key": "machine_readable_docs_llms_txt",
                "name": "Machine-readable docs (llms.txt)",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 15
              },
              {
                "key": "legible_commit_history",
                "name": "Legible commit history",
                "detail": "85 of 85 human commits state their intent (structured subject or explanatory body)",
                "points": 40,
                "status": "met",
                "details": [
                  {
                    "code": "legible_history",
                    "params": {
                      "legible": 85,
                      "sampled": 85
                    }
                  }
                ],
                "max_points": 40
              }
            ]
          },
          {
            "key": "ai_verify_loop",
            "band": "moderate",
            "name": "Verify loop (build / test / typecheck)",
            "note": null,
            "notes": [],
            "value": 69,
            "inputs": {
              "has_nix": false,
              "has_tests": true,
              "lockfiles": [
                "Cargo.lock",
                "pnpm-lock.yaml",
                "uv.lock"
              ],
              "has_dockerfile": true,
              "typed_language": true,
              "bootstrap_files": [],
              "has_devcontainer": false,
              "has_linter_config": false,
              "typecheck_configs": [
                ".claude/hooks/fleet/actionlint-on-workflow-edit/tsconfig.json",
                ".claude/hooks/fleet/adversarial-review-nudge/tsconfig.json",
                ".claude/hooks/fleet/agents-skills-mirror-nudge/tsconfig.json",
                ".claude/hooks/fleet/ai-config-drift-nudge/tsconfig.json",
                ".claude/hooks/fleet/ai-config-poisoning-guard/tsconfig.json",
                ".claude/hooks/fleet/alpha-sort-nudge/tsconfig.json",
                ".claude/hooks/fleet/answer-questions-nudge/tsconfig.json",
                ".claude/hooks/fleet/answer-status-requests-nudge/tsconfig.json",
                ".claude/hooks/fleet/anti-prose-guard/tsconfig.json",
                ".claude/hooks/fleet/ask-suppression-nudge/tsconfig.json",
                ".claude/hooks/fleet/auth-rotation-nudge/tsconfig.json",
                ".claude/hooks/fleet/brew-supply-chain-guard/tsconfig.json",
                ".claude/hooks/fleet/broken-hook-detector/tsconfig.json",
                ".claude/hooks/fleet/bundle-flags-guard/tsconfig.json",
                ".claude/hooks/fleet/c8-ignore-reason-guard/tsconfig.json",
                ".claude/hooks/fleet/cascade-first-triage-nudge/tsconfig.json",
                ".claude/hooks/fleet/catch-message-guard/tsconfig.json",
                ".claude/hooks/fleet/cdn-allowlist-guard/tsconfig.json",
                ".claude/hooks/fleet/changelog-entry-shape-nudge/tsconfig.json",
                ".claude/hooks/fleet/changelog-no-empty-guard/tsconfig.json",
                ".claude/hooks/fleet/check-new-deps/tsconfig.json",
                ".claude/hooks/fleet/claude-code-action-lockdown-guard/tsconfig.json",
                ".claude/hooks/fleet/claude-lockdown-guard/tsconfig.json",
                ".claude/hooks/fleet/claude-md-defer-detail-nudge/tsconfig.json",
                ".claude/hooks/fleet/claude-md-rule-add-guard/tsconfig.json",
                ".claude/hooks/fleet/claude-md-section-size-guard/tsconfig.json",
                ".claude/hooks/fleet/claude-md-size-guard/tsconfig.json",
                ".claude/hooks/fleet/claude-segmentation-guard/tsconfig.json",
                ".claude/hooks/fleet/clone-reviewed-repo-nudge/tsconfig.json",
                ".claude/hooks/fleet/codex-no-write-guard/tsconfig.json",
                ".claude/hooks/fleet/codex-session-budget-guard/tsconfig.json",
                ".claude/hooks/fleet/commit-author-guard/tsconfig.json",
                ".claude/hooks/fleet/commit-cadence-nudge/tsconfig.json",
                ".claude/hooks/fleet/commit-message-format-guard/tsconfig.json",
                ".claude/hooks/fleet/commit-pr-nudge/tsconfig.json",
                ".claude/hooks/fleet/commit-size-nudge/tsconfig.json",
                ".claude/hooks/fleet/compound-lessons-nudge/tsconfig.json",
                ".claude/hooks/fleet/concurrent-cargo-build-guard/tsconfig.json",
                ".claude/hooks/fleet/consumer-grep-nudge/tsconfig.json",
                ".claude/hooks/fleet/convo-prose-nudge/tsconfig.json",
                ".claude/hooks/fleet/cross-repo-guard/tsconfig.json",
                ".claude/hooks/fleet/dated-citation-guard/tsconfig.json",
                ".claude/hooks/fleet/default-branch-guard/tsconfig.json",
                ".claude/hooks/fleet/dep-derived-source-nudge/tsconfig.json",
                ".claude/hooks/fleet/dirty-lockfile-nudge/tsconfig.json",
                ".claude/hooks/fleet/dirty-worktree-stop-guard/tsconfig.json",
                ".claude/hooks/fleet/dogfood-cascade-nudge/tsconfig.json",
                ".claude/hooks/fleet/dont-blame-nudge/tsconfig.json",
                ".claude/hooks/fleet/dont-stop-mid-queue-nudge/tsconfig.json",
                ".claude/hooks/fleet/drift-check-nudge/tsconfig.json",
                ".claude/hooks/fleet/enqueue-dont-pivot-nudge/tsconfig.json",
                ".claude/hooks/fleet/enterprise-push-nudge/tsconfig.json",
                ".claude/hooks/fleet/error-message-quality-nudge/tsconfig.json",
                ".claude/hooks/fleet/excuse-detector/tsconfig.json",
                ".claude/hooks/fleet/file-size-nudge/tsconfig.json",
                ".claude/hooks/fleet/fixes-need-tests-nudge/tsconfig.json",
                ".claude/hooks/fleet/follow-direct-imperative-nudge/tsconfig.json",
                ".claude/hooks/fleet/gh-token-hygiene-guard/tsconfig.json",
                ".claude/hooks/fleet/git-config-write-guard/tsconfig.json",
                ".claude/hooks/fleet/git-identity-drift-nudge/tsconfig.json",
                ".claude/hooks/fleet/gitmodules-comment-guard/tsconfig.json",
                ".claude/hooks/fleet/golden-fixture-naming-guard/tsconfig.json",
                ".claude/hooks/fleet/handoff-command-nudge/tsconfig.json",
                ".claude/hooks/fleet/headroom-proxy-start/tsconfig.json",
                ".claude/hooks/fleet/honesty-framing-guard/tsconfig.json",
                ".claude/hooks/fleet/immutable-release-guard/tsconfig.json",
                ".claude/hooks/fleet/inline-script-defer-guard/tsconfig.json",
                ".claude/hooks/fleet/judgment-nudge/tsconfig.json",
                ".claude/hooks/fleet/keep-working-while-waiting-nudge/tsconfig.json",
                ".claude/hooks/fleet/land-fast-nudge/tsconfig.json",
                ".claude/hooks/fleet/lock-step-ref-nudge/tsconfig.json",
                ".claude/hooks/fleet/logger-guard/tsconfig.json",
                ".claude/hooks/fleet/markdown-filename-guard/tsconfig.json",
                ".claude/hooks/fleet/memory-codify-nudge/tsconfig.json",
                ".claude/hooks/fleet/minimum-release-age-guard/tsconfig.json",
                ".claude/hooks/fleet/module-noun-name-guard/tsconfig.json",
                ".claude/hooks/fleet/new-hook-claude-md-guard/tsconfig.json",
                ".claude/hooks/fleet/no-blanket-file-exclusion-guard/tsconfig.json",
                ".claude/hooks/fleet/no-blind-keychain-read-guard/tsconfig.json",
                ".claude/hooks/fleet/no-boolean-trap-guard/tsconfig.json",
                ".claude/hooks/fleet/no-branch-reuse-nudge/tsconfig.json",
                ".claude/hooks/fleet/no-corepack-guard/tsconfig.json",
                ".claude/hooks/fleet/no-direct-linter-guard/tsconfig.json",
                ".claude/hooks/fleet/no-disable-lint-rule-guard/tsconfig.json",
                ".claude/hooks/fleet/no-empty-commit-guard/tsconfig.json",
                ".claude/hooks/fleet/no-env-kill-switch-guard/tsconfig.json",
                ".claude/hooks/fleet/no-ext-issue-ref-guard/tsconfig.json",
                ".claude/hooks/fleet/no-file-oxlint-disable-guard/tsconfig.json",
                ".claude/hooks/fleet/no-fleet-fork-guard/tsconfig.json",
                ".claude/hooks/fleet/no-force-push-guard/tsconfig.json",
                ".claude/hooks/fleet/no-github-ai-attribution-guard/tsconfig.json",
                ".claude/hooks/fleet/no-hook-cmd-regex-guard/tsconfig.json",
                ".claude/hooks/fleet/no-meta-comments-guard/tsconfig.json",
                ".claude/hooks/fleet/no-new-config-guard/tsconfig.json",
                ".claude/hooks/fleet/no-non-fleet-push-guard/tsconfig.json",
                ".claude/hooks/fleet/no-npm-otp-flag-guard/tsconfig.json",
                ".claude/hooks/fleet/no-orphaned-staging/tsconfig.json",
                ".claude/hooks/fleet/no-other-linters-guard/tsconfig.json",
                ".claude/hooks/fleet/no-pkgjson-pnpm-overrides-guard/tsconfig.json",
                ".claude/hooks/fleet/no-placeholder-commit-subject-guard/tsconfig.json",
                ".claude/hooks/fleet/no-platform-import-guard/tsconfig.json",
                ".claude/hooks/fleet/no-pm-exec-guard/tsconfig.json",
                ".claude/hooks/fleet/no-pr-from-default-branch-guard/tsconfig.json",
                ".claude/hooks/fleet/no-pr-from-default-checkout-guard/tsconfig.json",
                ".claude/hooks/fleet/no-pr-review-verdict-guard/tsconfig.json",
                ".claude/hooks/fleet/no-premature-commit-kill-guard/tsconfig.json",
                ".claude/hooks/fleet/no-private-path-in-source-guard/tsconfig.json",
                ".claude/hooks/fleet/no-private-ref-in-tests-docs-guard/tsconfig.json",
                ".claude/hooks/fleet/no-registry-mutation-in-repo-script-nudge/tsconfig.json",
                ".claude/hooks/fleet/no-removal-comment-nudge/tsconfig.json",
                ".claude/hooks/fleet/no-repo-scope-in-fleet-config-guard/tsconfig.json",
                ".claude/hooks/fleet/no-revert-guard/tsconfig.json",
                ".claude/hooks/fleet/no-strip-types-guard/tsconfig.json",
                ".claude/hooks/fleet/no-subagent-commit-guard/tsconfig.json",
                ".claude/hooks/fleet/no-tail-install-out-guard/tsconfig.json",
                ".claude/hooks/fleet/no-test-in-scripts-guard/tsconfig.json",
                ".claude/hooks/fleet/no-token-in-dotenv-guard/tsconfig.json",
                ".claude/hooks/fleet/no-total-squash-guard/tsconfig.json",
                ".claude/hooks/fleet/no-tsx-guard/tsconfig.json",
                ".claude/hooks/fleet/no-underscore-ident-guard/tsconfig.json",
                ".claude/hooks/fleet/no-unisolated-git-fixture-guard/tsconfig.json",
                ".claude/hooks/fleet/no-unmocked-net-guard/tsconfig.json",
                ".claude/hooks/fleet/no-upstream-gitlink-guard/tsconfig.json",
                ".claude/hooks/fleet/no-verify-format-nudge/tsconfig.json",
                ".claude/hooks/fleet/node-modules-staging-guard/tsconfig.json",
                ".claude/hooks/fleet/non-fleet-pr-issue-ask-guard/tsconfig.json",
                ".claude/hooks/fleet/npm-otp-flow-nudge/tsconfig.json",
                ".claude/hooks/fleet/npmrc-trust-optout-guard/tsconfig.json",
                ".claude/hooks/fleet/options-param-naming-guard/tsconfig.json",
                ".claude/hooks/fleet/overeager-staging-guard/tsconfig.json",
                ".claude/hooks/fleet/oxlint-plugin-load-nudge/tsconfig.json",
                ".claude/hooks/fleet/package-manager-auto-update-guard/tsconfig.json",
                ".claude/hooks/fleet/parallel-agent-edit-guard/tsconfig.json",
                ".claude/hooks/fleet/parallel-agent-on-stop-nudge/tsconfig.json",
                ".claude/hooks/fleet/parallel-agent-removal-nudge/tsconfig.json",
                ".claude/hooks/fleet/parallel-agent-staging-guard/tsconfig.json",
                ".claude/hooks/fleet/path-guard/tsconfig.json",
                ".claude/hooks/fleet/path-regex-normalize-nudge/tsconfig.json",
                ".claude/hooks/fleet/paths-mts-inherit-guard/tsconfig.json",
                ".claude/hooks/fleet/personal-path-guard/tsconfig.json",
                ".claude/hooks/fleet/plan-location-guard/tsconfig.json",
                ".claude/hooks/fleet/plan-review-nudge/tsconfig.json",
                ".claude/hooks/fleet/pnpm-filter-zero-match-nudge/tsconfig.json",
                ".claude/hooks/fleet/pointer-comment-nudge/tsconfig.json",
                ".claude/hooks/fleet/post-push-ci-monitor-nudge/tsconfig.json",
                ".claude/hooks/fleet/pr-vs-push-default-nudge/tsconfig.json",
                ".claude/hooks/fleet/pre-commit-race-nudge/tsconfig.json",
                ".claude/hooks/fleet/prefer-async-spawn-guard/tsconfig.json",
                ".claude/hooks/fleet/prefer-evergreen-target-nudge/tsconfig.json",
                ".claude/hooks/fleet/prefer-fn-decl-guard/tsconfig.json",
                ".claude/hooks/fleet/prefer-json-clone-guard/tsconfig.json",
                ".claude/hooks/fleet/prefer-pipx-over-pip-guard/tsconfig.json",
                ".claude/hooks/fleet/prefer-rebase-over-revert-nudge/tsconfig.json",
                ".claude/hooks/fleet/prefer-type-import-guard/tsconfig.json",
                ".claude/hooks/fleet/prefer-vitest-guard/tsconfig.json",
                ".claude/hooks/fleet/primary-checkout-branch-guard/tsconfig.json",
                ".claude/hooks/fleet/primary-checkout-on-default-stop-guard/tsconfig.json",
                ".claude/hooks/fleet/private-name-nudge/tsconfig.json",
                ".claude/hooks/fleet/proc-environ-exfil-guard/tsconfig.json",
                ".claude/hooks/fleet/prompt-injection-guard/tsconfig.json",
                ".claude/hooks/fleet/provenance-publish-nudge/tsconfig.json",
                ".claude/hooks/fleet/public-surface-nudge/tsconfig.json",
                ".claude/hooks/fleet/pull-request-target-guard/tsconfig.json",
                ".claude/hooks/fleet/push-protected-branch-guard/tsconfig.json",
                ".claude/hooks/fleet/readme-fleet-shape-guard/tsconfig.json",
                ".claude/hooks/fleet/release-tag-tied-guard/tsconfig.json",
                ".claude/hooks/fleet/release-workflow-guard/tsconfig.json",
                ".claude/hooks/fleet/reply-prose-nudge/tsconfig.json",
                ".claude/hooks/fleet/report-location-guard/tsconfig.json",
                ".claude/hooks/fleet/reserved-script-dir-guard/tsconfig.json",
                ".claude/hooks/fleet/rg-replace-flag-nudge/tsconfig.json",
                ".claude/hooks/fleet/scan-label-in-commit-guard/tsconfig.json",
                ".claude/hooks/fleet/secret-content-guard/tsconfig.json",
                ".claude/hooks/fleet/session-handoff-nudge/tsconfig.json",
                ".claude/hooks/fleet/setup-basics-tools/tsconfig.json",
                ".claude/hooks/fleet/setup-claude-scanners/tsconfig.json",
                ".claude/hooks/fleet/setup-firewall/tsconfig.json",
                ".claude/hooks/fleet/setup-misc-tools/tsconfig.json",
                ".claude/hooks/fleet/setup-security-tools/tsconfig.json",
                ".claude/hooks/fleet/setup-signing/tsconfig.json",
                ".claude/hooks/fleet/shallow-clone-guard/tsconfig.json",
                ".claude/hooks/fleet/skill-usage-logger/tsconfig.json",
                ".claude/hooks/fleet/small-pr-nudge/tsconfig.json",
                ".claude/hooks/fleet/soak-exclude-date-guard/tsconfig.json",
                ".claude/hooks/fleet/soak-exclude-scope-guard/tsconfig.json",
                ".claude/hooks/fleet/soak-pin-needs-annotation-guard/tsconfig.json",
                ".claude/hooks/fleet/squash-history-nudge/tsconfig.json",
                ".claude/hooks/fleet/stale-process-sweeper/tsconfig.json",
                ".claude/hooks/fleet/stop-claim-verify-nudge/tsconfig.json",
                ".claude/hooks/fleet/sweep-ds-store/tsconfig.json",
                ".claude/hooks/fleet/target-arch-env-guard/tsconfig.json",
                ".claude/hooks/fleet/test-script-defers-guard/tsconfig.json",
                ".claude/hooks/fleet/token-guard/tsconfig.json",
                ".claude/hooks/fleet/token-spend-guard/tsconfig.json",
                ".claude/hooks/fleet/trust-downgrade-guard/tsconfig.json",
                ".claude/hooks/fleet/unbacked-claim-commit-guard/tsconfig.json",
                ".claude/hooks/fleet/uncodified-lesson-nudge/tsconfig.json",
                ".claude/hooks/fleet/unpushed-main-nudge/tsconfig.json",
                ".claude/hooks/fleet/untrusted-coauthor-guard/tsconfig.json",
                ".claude/hooks/fleet/uses-sha-verify-guard/tsconfig.json",
                ".claude/hooks/fleet/variant-analysis-nudge/tsconfig.json",
                ".claude/hooks/fleet/verify-absence-claims-nudge/tsconfig.json",
                ".claude/hooks/fleet/verify-render-pre-commit-nudge/tsconfig.json",
                ".claude/hooks/fleet/version-bump-order-guard/tsconfig.json",
                ".claude/hooks/fleet/vitest-vs-node-test-guard/tsconfig.json",
                ".claude/hooks/fleet/wheelhouse-drift-guard/tsconfig.json",
                ".claude/hooks/fleet/workflow-multiline-body-guard/tsconfig.json",
                ".claude/hooks/fleet/workflow-uses-comment-guard/tsconfig.json",
                ".claude/hooks/fleet/worktree-remove-relink-nudge/tsconfig.json",
                "napi/decmpfs/tsconfig.json",
                "tsconfig.json"
              ],
              "agent_commit_share": 0,
              "toolchain_manifests": [
                "Cargo.toml",
                "crates/decmpfs/Cargo.toml",
                "fuzz/Cargo.toml",
                "napi/decmpfs/Cargo.toml"
              ],
              "dependency_bot_commit_share": 0
            },
            "components": [
              {
                "key": "one_command_bootstrap",
                "name": "One-command bootstrap",
                "detail": "Cargo.toml, crates/decmpfs/Cargo.toml, fuzz/Cargo.toml (toolchain convention, no task runner)",
                "points": 12.6,
                "status": "partial",
                "details": [
                  {
                    "code": "toolchain_convention",
                    "params": {
                      "files": "Cargo.toml, crates/decmpfs/Cargo.toml, fuzz/Cargo.toml"
                    }
                  }
                ],
                "max_points": 18
              },
              {
                "key": "automated_tests",
                "name": "Automated tests",
                "detail": null,
                "points": 22,
                "status": "met",
                "details": [],
                "max_points": 22
              },
              {
                "key": "lint_format_config",
                "name": "Lint / format config",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 11
              },
              {
                "key": "static_type_checking",
                "name": "Static type checking",
                "detail": ".claude/hooks/fleet/actionlint-on-workflow-edit/tsconfig.json, .claude/hooks/fleet/adversarial-review-nudge/tsconfig.json, .claude/hooks/fleet/agents-skills-mirror-nudge/tsconfig.json, .claude/hooks/fleet/ai-config-drift-nudge/tsconfig.json, .claude/hooks/fleet/ai-config-poisoning-guard/tsconfig.json, .claude/hooks/fleet/alpha-sort-nudge/tsconfig.json, .claude/hooks/fleet/answer-questions-nudge/tsconfig.json, .claude/hooks/fleet/answer-status-requests-nudge/tsconfig.json, .claude/hooks/fleet/anti-prose-guard/tsconfig.json, .claude/hooks/fleet/ask-suppression-nudge/tsconfig.json, .claude/hooks/fleet/auth-rotation-nudge/tsconfig.json, .claude/hooks/fleet/brew-supply-chain-guard/tsconfig.json, .claude/hooks/fleet/broken-hook-detector/tsconfig.json, .claude/hooks/fleet/bundle-flags-guard/tsconfig.json, .claude/hooks/fleet/c8-ignore-reason-guard/tsconfig.json, .claude/hooks/fleet/cascade-first-triage-nudge/tsconfig.json, .claude/hooks/fleet/catch-message-guard/tsconfig.json, .claude/hooks/fleet/cdn-allowlist-guard/tsconfig.json, .claude/hooks/fleet/changelog-entry-shape-nudge/tsconfig.json, .claude/hooks/fleet/changelog-no-empty-guard/tsconfig.json, .claude/hooks/fleet/check-new-deps/tsconfig.json, .claude/hooks/fleet/claude-code-action-lockdown-guard/tsconfig.json, .claude/hooks/fleet/claude-lockdown-guard/tsconfig.json, .claude/hooks/fleet/claude-md-defer-detail-nudge/tsconfig.json, .claude/hooks/fleet/claude-md-rule-add-guard/tsconfig.json, .claude/hooks/fleet/claude-md-section-size-guard/tsconfig.json, .claude/hooks/fleet/claude-md-size-guard/tsconfig.json, .claude/hooks/fleet/claude-segmentation-guard/tsconfig.json, .claude/hooks/fleet/clone-reviewed-repo-nudge/tsconfig.json, .claude/hooks/fleet/codex-no-write-guard/tsconfig.json, .claude/hooks/fleet/codex-session-budget-guard/tsconfig.json, .claude/hooks/fleet/commit-author-guard/tsconfig.json, .claude/hooks/fleet/commit-cadence-nudge/tsconfig.json, .claude/hooks/fleet/commit-message-format-guard/tsconfig.json, .claude/hooks/fleet/commit-pr-nudge/tsconfig.json, .claude/hooks/fleet/commit-size-nudge/tsconfig.json, .claude/hooks/fleet/compound-lessons-nudge/tsconfig.json, .claude/hooks/fleet/concurrent-cargo-build-guard/tsconfig.json, .claude/hooks/fleet/consumer-grep-nudge/tsconfig.json, .claude/hooks/fleet/convo-prose-nudge/tsconfig.json, .claude/hooks/fleet/cross-repo-guard/tsconfig.json, .claude/hooks/fleet/dated-citation-guard/tsconfig.json, .claude/hooks/fleet/default-branch-guard/tsconfig.json, .claude/hooks/fleet/dep-derived-source-nudge/tsconfig.json, .claude/hooks/fleet/dirty-lockfile-nudge/tsconfig.json, .claude/hooks/fleet/dirty-worktree-stop-guard/tsconfig.json, .claude/hooks/fleet/dogfood-cascade-nudge/tsconfig.json, .claude/hooks/fleet/dont-blame-nudge/tsconfig.json, .claude/hooks/fleet/dont-stop-mid-queue-nudge/tsconfig.json, .claude/hooks/fleet/drift-check-nudge/tsconfig.json, .claude/hooks/fleet/enqueue-dont-pivot-nudge/tsconfig.json, .claude/hooks/fleet/enterprise-push-nudge/tsconfig.json, .claude/hooks/fleet/error-message-quality-nudge/tsconfig.json, .claude/hooks/fleet/excuse-detector/tsconfig.json, .claude/hooks/fleet/file-size-nudge/tsconfig.json, .claude/hooks/fleet/fixes-need-tests-nudge/tsconfig.json, .claude/hooks/fleet/follow-direct-imperative-nudge/tsconfig.json, .claude/hooks/fleet/gh-token-hygiene-guard/tsconfig.json, .claude/hooks/fleet/git-config-write-guard/tsconfig.json, .claude/hooks/fleet/git-identity-drift-nudge/tsconfig.json, .claude/hooks/fleet/gitmodules-comment-guard/tsconfig.json, .claude/hooks/fleet/golden-fixture-naming-guard/tsconfig.json, .claude/hooks/fleet/handoff-command-nudge/tsconfig.json, .claude/hooks/fleet/headroom-proxy-start/tsconfig.json, .claude/hooks/fleet/honesty-framing-guard/tsconfig.json, .claude/hooks/fleet/immutable-release-guard/tsconfig.json, .claude/hooks/fleet/inline-script-defer-guard/tsconfig.json, .claude/hooks/fleet/judgment-nudge/tsconfig.json, .claude/hooks/fleet/keep-working-while-waiting-nudge/tsconfig.json, .claude/hooks/fleet/land-fast-nudge/tsconfig.json, .claude/hooks/fleet/lock-step-ref-nudge/tsconfig.json, .claude/hooks/fleet/logger-guard/tsconfig.json, .claude/hooks/fleet/markdown-filename-guard/tsconfig.json, .claude/hooks/fleet/memory-codify-nudge/tsconfig.json, .claude/hooks/fleet/minimum-release-age-guard/tsconfig.json, .claude/hooks/fleet/module-noun-name-guard/tsconfig.json, .claude/hooks/fleet/new-hook-claude-md-guard/tsconfig.json, .claude/hooks/fleet/no-blanket-file-exclusion-guard/tsconfig.json, .claude/hooks/fleet/no-blind-keychain-read-guard/tsconfig.json, .claude/hooks/fleet/no-boolean-trap-guard/tsconfig.json, .claude/hooks/fleet/no-branch-reuse-nudge/tsconfig.json, .claude/hooks/fleet/no-corepack-guard/tsconfig.json, .claude/hooks/fleet/no-direct-linter-guard/tsconfig.json, .claude/hooks/fleet/no-disable-lint-rule-guard/tsconfig.json, .claude/hooks/fleet/no-empty-commit-guard/tsconfig.json, .claude/hooks/fleet/no-env-kill-switch-guard/tsconfig.json, .claude/hooks/fleet/no-ext-issue-ref-guard/tsconfig.json, .claude/hooks/fleet/no-file-oxlint-disable-guard/tsconfig.json, .claude/hooks/fleet/no-fleet-fork-guard/tsconfig.json, .claude/hooks/fleet/no-force-push-guard/tsconfig.json, .claude/hooks/fleet/no-github-ai-attribution-guard/tsconfig.json, .claude/hooks/fleet/no-hook-cmd-regex-guard/tsconfig.json, .claude/hooks/fleet/no-meta-comments-guard/tsconfig.json, .claude/hooks/fleet/no-new-config-guard/tsconfig.json, .claude/hooks/fleet/no-non-fleet-push-guard/tsconfig.json, .claude/hooks/fleet/no-npm-otp-flag-guard/tsconfig.json, .claude/hooks/fleet/no-orphaned-staging/tsconfig.json, .claude/hooks/fleet/no-other-linters-guard/tsconfig.json, .claude/hooks/fleet/no-pkgjson-pnpm-overrides-guard/tsconfig.json, .claude/hooks/fleet/no-placeholder-commit-subject-guard/tsconfig.json, .claude/hooks/fleet/no-platform-import-guard/tsconfig.json, .claude/hooks/fleet/no-pm-exec-guard/tsconfig.json, .claude/hooks/fleet/no-pr-from-default-branch-guard/tsconfig.json, .claude/hooks/fleet/no-pr-from-default-checkout-guard/tsconfig.json, .claude/hooks/fleet/no-pr-review-verdict-guard/tsconfig.json, .claude/hooks/fleet/no-premature-commit-kill-guard/tsconfig.json, .claude/hooks/fleet/no-private-path-in-source-guard/tsconfig.json, .claude/hooks/fleet/no-private-ref-in-tests-docs-guard/tsconfig.json, .claude/hooks/fleet/no-registry-mutation-in-repo-script-nudge/tsconfig.json, .claude/hooks/fleet/no-removal-comment-nudge/tsconfig.json, .claude/hooks/fleet/no-repo-scope-in-fleet-config-guard/tsconfig.json, .claude/hooks/fleet/no-revert-guard/tsconfig.json, .claude/hooks/fleet/no-strip-types-guard/tsconfig.json, .claude/hooks/fleet/no-subagent-commit-guard/tsconfig.json, .claude/hooks/fleet/no-tail-install-out-guard/tsconfig.json, .claude/hooks/fleet/no-test-in-scripts-guard/tsconfig.json, .claude/hooks/fleet/no-token-in-dotenv-guard/tsconfig.json, .claude/hooks/fleet/no-total-squash-guard/tsconfig.json, .claude/hooks/fleet/no-tsx-guard/tsconfig.json, .claude/hooks/fleet/no-underscore-ident-guard/tsconfig.json, .claude/hooks/fleet/no-unisolated-git-fixture-guard/tsconfig.json, .claude/hooks/fleet/no-unmocked-net-guard/tsconfig.json, .claude/hooks/fleet/no-upstream-gitlink-guard/tsconfig.json, .claude/hooks/fleet/no-verify-format-nudge/tsconfig.json, .claude/hooks/fleet/node-modules-staging-guard/tsconfig.json, .claude/hooks/fleet/non-fleet-pr-issue-ask-guard/tsconfig.json, .claude/hooks/fleet/npm-otp-flow-nudge/tsconfig.json, .claude/hooks/fleet/npmrc-trust-optout-guard/tsconfig.json, .claude/hooks/fleet/options-param-naming-guard/tsconfig.json, .claude/hooks/fleet/overeager-staging-guard/tsconfig.json, .claude/hooks/fleet/oxlint-plugin-load-nudge/tsconfig.json, .claude/hooks/fleet/package-manager-auto-update-guard/tsconfig.json, .claude/hooks/fleet/parallel-agent-edit-guard/tsconfig.json, .claude/hooks/fleet/parallel-agent-on-stop-nudge/tsconfig.json, .claude/hooks/fleet/parallel-agent-removal-nudge/tsconfig.json, .claude/hooks/fleet/parallel-agent-staging-guard/tsconfig.json, .claude/hooks/fleet/path-guard/tsconfig.json, .claude/hooks/fleet/path-regex-normalize-nudge/tsconfig.json, .claude/hooks/fleet/paths-mts-inherit-guard/tsconfig.json, .claude/hooks/fleet/personal-path-guard/tsconfig.json, .claude/hooks/fleet/plan-location-guard/tsconfig.json, .claude/hooks/fleet/plan-review-nudge/tsconfig.json, .claude/hooks/fleet/pnpm-filter-zero-match-nudge/tsconfig.json, .claude/hooks/fleet/pointer-comment-nudge/tsconfig.json, .claude/hooks/fleet/post-push-ci-monitor-nudge/tsconfig.json, .claude/hooks/fleet/pr-vs-push-default-nudge/tsconfig.json, .claude/hooks/fleet/pre-commit-race-nudge/tsconfig.json, .claude/hooks/fleet/prefer-async-spawn-guard/tsconfig.json, .claude/hooks/fleet/prefer-evergreen-target-nudge/tsconfig.json, .claude/hooks/fleet/prefer-fn-decl-guard/tsconfig.json, .claude/hooks/fleet/prefer-json-clone-guard/tsconfig.json, .claude/hooks/fleet/prefer-pipx-over-pip-guard/tsconfig.json, .claude/hooks/fleet/prefer-rebase-over-revert-nudge/tsconfig.json, .claude/hooks/fleet/prefer-type-import-guard/tsconfig.json, .claude/hooks/fleet/prefer-vitest-guard/tsconfig.json, .claude/hooks/fleet/primary-checkout-branch-guard/tsconfig.json, .claude/hooks/fleet/primary-checkout-on-default-stop-guard/tsconfig.json, .claude/hooks/fleet/private-name-nudge/tsconfig.json, .claude/hooks/fleet/proc-environ-exfil-guard/tsconfig.json, .claude/hooks/fleet/prompt-injection-guard/tsconfig.json, .claude/hooks/fleet/provenance-publish-nudge/tsconfig.json, .claude/hooks/fleet/public-surface-nudge/tsconfig.json, .claude/hooks/fleet/pull-request-target-guard/tsconfig.json, .claude/hooks/fleet/push-protected-branch-guard/tsconfig.json, .claude/hooks/fleet/readme-fleet-shape-guard/tsconfig.json, .claude/hooks/fleet/release-tag-tied-guard/tsconfig.json, .claude/hooks/fleet/release-workflow-guard/tsconfig.json, .claude/hooks/fleet/reply-prose-nudge/tsconfig.json, .claude/hooks/fleet/report-location-guard/tsconfig.json, .claude/hooks/fleet/reserved-script-dir-guard/tsconfig.json, .claude/hooks/fleet/rg-replace-flag-nudge/tsconfig.json, .claude/hooks/fleet/scan-label-in-commit-guard/tsconfig.json, .claude/hooks/fleet/secret-content-guard/tsconfig.json, .claude/hooks/fleet/session-handoff-nudge/tsconfig.json, .claude/hooks/fleet/setup-basics-tools/tsconfig.json, .claude/hooks/fleet/setup-claude-scanners/tsconfig.json, .claude/hooks/fleet/setup-firewall/tsconfig.json, .claude/hooks/fleet/setup-misc-tools/tsconfig.json, .claude/hooks/fleet/setup-security-tools/tsconfig.json, .claude/hooks/fleet/setup-signing/tsconfig.json, .claude/hooks/fleet/shallow-clone-guard/tsconfig.json, .claude/hooks/fleet/skill-usage-logger/tsconfig.json, .claude/hooks/fleet/small-pr-nudge/tsconfig.json, .claude/hooks/fleet/soak-exclude-date-guard/tsconfig.json, .claude/hooks/fleet/soak-exclude-scope-guard/tsconfig.json, .claude/hooks/fleet/soak-pin-needs-annotation-guard/tsconfig.json, .claude/hooks/fleet/squash-history-nudge/tsconfig.json, .claude/hooks/fleet/stale-process-sweeper/tsconfig.json, .claude/hooks/fleet/stop-claim-verify-nudge/tsconfig.json, .claude/hooks/fleet/sweep-ds-store/tsconfig.json, .claude/hooks/fleet/target-arch-env-guard/tsconfig.json, .claude/hooks/fleet/test-script-defers-guard/tsconfig.json, .claude/hooks/fleet/token-guard/tsconfig.json, .claude/hooks/fleet/token-spend-guard/tsconfig.json, .claude/hooks/fleet/trust-downgrade-guard/tsconfig.json, .claude/hooks/fleet/unbacked-claim-commit-guard/tsconfig.json, .claude/hooks/fleet/uncodified-lesson-nudge/tsconfig.json, .claude/hooks/fleet/unpushed-main-nudge/tsconfig.json, .claude/hooks/fleet/untrusted-coauthor-guard/tsconfig.json, .claude/hooks/fleet/uses-sha-verify-guard/tsconfig.json, .claude/hooks/fleet/variant-analysis-nudge/tsconfig.json, .claude/hooks/fleet/verify-absence-claims-nudge/tsconfig.json, .claude/hooks/fleet/verify-render-pre-commit-nudge/tsconfig.json, .claude/hooks/fleet/version-bump-order-guard/tsconfig.json, .claude/hooks/fleet/vitest-vs-node-test-guard/tsconfig.json, .claude/hooks/fleet/wheelhouse-drift-guard/tsconfig.json, .claude/hooks/fleet/workflow-multiline-body-guard/tsconfig.json, .claude/hooks/fleet/workflow-uses-comment-guard/tsconfig.json, .claude/hooks/fleet/worktree-remove-relink-nudge/tsconfig.json, napi/decmpfs/tsconfig.json, tsconfig.json",
                "points": 11,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": ".claude/hooks/fleet/actionlint-on-workflow-edit/tsconfig.json, .claude/hooks/fleet/adversarial-review-nudge/tsconfig.json, .claude/hooks/fleet/agents-skills-mirror-nudge/tsconfig.json, .claude/hooks/fleet/ai-config-drift-nudge/tsconfig.json, .claude/hooks/fleet/ai-config-poisoning-guard/tsconfig.json, .claude/hooks/fleet/alpha-sort-nudge/tsconfig.json, .claude/hooks/fleet/answer-questions-nudge/tsconfig.json, .claude/hooks/fleet/answer-status-requests-nudge/tsconfig.json, .claude/hooks/fleet/anti-prose-guard/tsconfig.json, .claude/hooks/fleet/ask-suppression-nudge/tsconfig.json, .claude/hooks/fleet/auth-rotation-nudge/tsconfig.json, .claude/hooks/fleet/brew-supply-chain-guard/tsconfig.json, .claude/hooks/fleet/broken-hook-detector/tsconfig.json, .claude/hooks/fleet/bundle-flags-guard/tsconfig.json, .claude/hooks/fleet/c8-ignore-reason-guard/tsconfig.json, .claude/hooks/fleet/cascade-first-triage-nudge/tsconfig.json, .claude/hooks/fleet/catch-message-guard/tsconfig.json, .claude/hooks/fleet/cdn-allowlist-guard/tsconfig.json, .claude/hooks/fleet/changelog-entry-shape-nudge/tsconfig.json, .claude/hooks/fleet/changelog-no-empty-guard/tsconfig.json, .claude/hooks/fleet/check-new-deps/tsconfig.json, .claude/hooks/fleet/claude-code-action-lockdown-guard/tsconfig.json, .claude/hooks/fleet/claude-lockdown-guard/tsconfig.json, .claude/hooks/fleet/claude-md-defer-detail-nudge/tsconfig.json, .claude/hooks/fleet/claude-md-rule-add-guard/tsconfig.json, .claude/hooks/fleet/claude-md-section-size-guard/tsconfig.json, .claude/hooks/fleet/claude-md-size-guard/tsconfig.json, .claude/hooks/fleet/claude-segmentation-guard/tsconfig.json, .claude/hooks/fleet/clone-reviewed-repo-nudge/tsconfig.json, .claude/hooks/fleet/codex-no-write-guard/tsconfig.json, .claude/hooks/fleet/codex-session-budget-guard/tsconfig.json, .claude/hooks/fleet/commit-author-guard/tsconfig.json, .claude/hooks/fleet/commit-cadence-nudge/tsconfig.json, .claude/hooks/fleet/commit-message-format-guard/tsconfig.json, .claude/hooks/fleet/commit-pr-nudge/tsconfig.json, .claude/hooks/fleet/commit-size-nudge/tsconfig.json, .claude/hooks/fleet/compound-lessons-nudge/tsconfig.json, .claude/hooks/fleet/concurrent-cargo-build-guard/tsconfig.json, .claude/hooks/fleet/consumer-grep-nudge/tsconfig.json, .claude/hooks/fleet/convo-prose-nudge/tsconfig.json, .claude/hooks/fleet/cross-repo-guard/tsconfig.json, .claude/hooks/fleet/dated-citation-guard/tsconfig.json, .claude/hooks/fleet/default-branch-guard/tsconfig.json, .claude/hooks/fleet/dep-derived-source-nudge/tsconfig.json, .claude/hooks/fleet/dirty-lockfile-nudge/tsconfig.json, .claude/hooks/fleet/dirty-worktree-stop-guard/tsconfig.json, .claude/hooks/fleet/dogfood-cascade-nudge/tsconfig.json, .claude/hooks/fleet/dont-blame-nudge/tsconfig.json, .claude/hooks/fleet/dont-stop-mid-queue-nudge/tsconfig.json, .claude/hooks/fleet/drift-check-nudge/tsconfig.json, .claude/hooks/fleet/enqueue-dont-pivot-nudge/tsconfig.json, .claude/hooks/fleet/enterprise-push-nudge/tsconfig.json, .claude/hooks/fleet/error-message-quality-nudge/tsconfig.json, .claude/hooks/fleet/excuse-detector/tsconfig.json, .claude/hooks/fleet/file-size-nudge/tsconfig.json, .claude/hooks/fleet/fixes-need-tests-nudge/tsconfig.json, .claude/hooks/fleet/follow-direct-imperative-nudge/tsconfig.json, .claude/hooks/fleet/gh-token-hygiene-guard/tsconfig.json, .claude/hooks/fleet/git-config-write-guard/tsconfig.json, .claude/hooks/fleet/git-identity-drift-nudge/tsconfig.json, .claude/hooks/fleet/gitmodules-comment-guard/tsconfig.json, .claude/hooks/fleet/golden-fixture-naming-guard/tsconfig.json, .claude/hooks/fleet/handoff-command-nudge/tsconfig.json, .claude/hooks/fleet/headroom-proxy-start/tsconfig.json, .claude/hooks/fleet/honesty-framing-guard/tsconfig.json, .claude/hooks/fleet/immutable-release-guard/tsconfig.json, .claude/hooks/fleet/inline-script-defer-guard/tsconfig.json, .claude/hooks/fleet/judgment-nudge/tsconfig.json, .claude/hooks/fleet/keep-working-while-waiting-nudge/tsconfig.json, .claude/hooks/fleet/land-fast-nudge/tsconfig.json, .claude/hooks/fleet/lock-step-ref-nudge/tsconfig.json, .claude/hooks/fleet/logger-guard/tsconfig.json, .claude/hooks/fleet/markdown-filename-guard/tsconfig.json, .claude/hooks/fleet/memory-codify-nudge/tsconfig.json, .claude/hooks/fleet/minimum-release-age-guard/tsconfig.json, .claude/hooks/fleet/module-noun-name-guard/tsconfig.json, .claude/hooks/fleet/new-hook-claude-md-guard/tsconfig.json, .claude/hooks/fleet/no-blanket-file-exclusion-guard/tsconfig.json, .claude/hooks/fleet/no-blind-keychain-read-guard/tsconfig.json, .claude/hooks/fleet/no-boolean-trap-guard/tsconfig.json, .claude/hooks/fleet/no-branch-reuse-nudge/tsconfig.json, .claude/hooks/fleet/no-corepack-guard/tsconfig.json, .claude/hooks/fleet/no-direct-linter-guard/tsconfig.json, .claude/hooks/fleet/no-disable-lint-rule-guard/tsconfig.json, .claude/hooks/fleet/no-empty-commit-guard/tsconfig.json, .claude/hooks/fleet/no-env-kill-switch-guard/tsconfig.json, .claude/hooks/fleet/no-ext-issue-ref-guard/tsconfig.json, .claude/hooks/fleet/no-file-oxlint-disable-guard/tsconfig.json, .claude/hooks/fleet/no-fleet-fork-guard/tsconfig.json, .claude/hooks/fleet/no-force-push-guard/tsconfig.json, .claude/hooks/fleet/no-github-ai-attribution-guard/tsconfig.json, .claude/hooks/fleet/no-hook-cmd-regex-guard/tsconfig.json, .claude/hooks/fleet/no-meta-comments-guard/tsconfig.json, .claude/hooks/fleet/no-new-config-guard/tsconfig.json, .claude/hooks/fleet/no-non-fleet-push-guard/tsconfig.json, .claude/hooks/fleet/no-npm-otp-flag-guard/tsconfig.json, .claude/hooks/fleet/no-orphaned-staging/tsconfig.json, .claude/hooks/fleet/no-other-linters-guard/tsconfig.json, .claude/hooks/fleet/no-pkgjson-pnpm-overrides-guard/tsconfig.json, .claude/hooks/fleet/no-placeholder-commit-subject-guard/tsconfig.json, .claude/hooks/fleet/no-platform-import-guard/tsconfig.json, .claude/hooks/fleet/no-pm-exec-guard/tsconfig.json, .claude/hooks/fleet/no-pr-from-default-branch-guard/tsconfig.json, .claude/hooks/fleet/no-pr-from-default-checkout-guard/tsconfig.json, .claude/hooks/fleet/no-pr-review-verdict-guard/tsconfig.json, .claude/hooks/fleet/no-premature-commit-kill-guard/tsconfig.json, .claude/hooks/fleet/no-private-path-in-source-guard/tsconfig.json, .claude/hooks/fleet/no-private-ref-in-tests-docs-guard/tsconfig.json, .claude/hooks/fleet/no-registry-mutation-in-repo-script-nudge/tsconfig.json, .claude/hooks/fleet/no-removal-comment-nudge/tsconfig.json, .claude/hooks/fleet/no-repo-scope-in-fleet-config-guard/tsconfig.json, .claude/hooks/fleet/no-revert-guard/tsconfig.json, .claude/hooks/fleet/no-strip-types-guard/tsconfig.json, .claude/hooks/fleet/no-subagent-commit-guard/tsconfig.json, .claude/hooks/fleet/no-tail-install-out-guard/tsconfig.json, .claude/hooks/fleet/no-test-in-scripts-guard/tsconfig.json, .claude/hooks/fleet/no-token-in-dotenv-guard/tsconfig.json, .claude/hooks/fleet/no-total-squash-guard/tsconfig.json, .claude/hooks/fleet/no-tsx-guard/tsconfig.json, .claude/hooks/fleet/no-underscore-ident-guard/tsconfig.json, .claude/hooks/fleet/no-unisolated-git-fixture-guard/tsconfig.json, .claude/hooks/fleet/no-unmocked-net-guard/tsconfig.json, .claude/hooks/fleet/no-upstream-gitlink-guard/tsconfig.json, .claude/hooks/fleet/no-verify-format-nudge/tsconfig.json, .claude/hooks/fleet/node-modules-staging-guard/tsconfig.json, .claude/hooks/fleet/non-fleet-pr-issue-ask-guard/tsconfig.json, .claude/hooks/fleet/npm-otp-flow-nudge/tsconfig.json, .claude/hooks/fleet/npmrc-trust-optout-guard/tsconfig.json, .claude/hooks/fleet/options-param-naming-guard/tsconfig.json, .claude/hooks/fleet/overeager-staging-guard/tsconfig.json, .claude/hooks/fleet/oxlint-plugin-load-nudge/tsconfig.json, .claude/hooks/fleet/package-manager-auto-update-guard/tsconfig.json, .claude/hooks/fleet/parallel-agent-edit-guard/tsconfig.json, .claude/hooks/fleet/parallel-agent-on-stop-nudge/tsconfig.json, .claude/hooks/fleet/parallel-agent-removal-nudge/tsconfig.json, .claude/hooks/fleet/parallel-agent-staging-guard/tsconfig.json, .claude/hooks/fleet/path-guard/tsconfig.json, .claude/hooks/fleet/path-regex-normalize-nudge/tsconfig.json, .claude/hooks/fleet/paths-mts-inherit-guard/tsconfig.json, .claude/hooks/fleet/personal-path-guard/tsconfig.json, .claude/hooks/fleet/plan-location-guard/tsconfig.json, .claude/hooks/fleet/plan-review-nudge/tsconfig.json, .claude/hooks/fleet/pnpm-filter-zero-match-nudge/tsconfig.json, .claude/hooks/fleet/pointer-comment-nudge/tsconfig.json, .claude/hooks/fleet/post-push-ci-monitor-nudge/tsconfig.json, .claude/hooks/fleet/pr-vs-push-default-nudge/tsconfig.json, .claude/hooks/fleet/pre-commit-race-nudge/tsconfig.json, .claude/hooks/fleet/prefer-async-spawn-guard/tsconfig.json, .claude/hooks/fleet/prefer-evergreen-target-nudge/tsconfig.json, .claude/hooks/fleet/prefer-fn-decl-guard/tsconfig.json, .claude/hooks/fleet/prefer-json-clone-guard/tsconfig.json, .claude/hooks/fleet/prefer-pipx-over-pip-guard/tsconfig.json, .claude/hooks/fleet/prefer-rebase-over-revert-nudge/tsconfig.json, .claude/hooks/fleet/prefer-type-import-guard/tsconfig.json, .claude/hooks/fleet/prefer-vitest-guard/tsconfig.json, .claude/hooks/fleet/primary-checkout-branch-guard/tsconfig.json, .claude/hooks/fleet/primary-checkout-on-default-stop-guard/tsconfig.json, .claude/hooks/fleet/private-name-nudge/tsconfig.json, .claude/hooks/fleet/proc-environ-exfil-guard/tsconfig.json, .claude/hooks/fleet/prompt-injection-guard/tsconfig.json, .claude/hooks/fleet/provenance-publish-nudge/tsconfig.json, .claude/hooks/fleet/public-surface-nudge/tsconfig.json, .claude/hooks/fleet/pull-request-target-guard/tsconfig.json, .claude/hooks/fleet/push-protected-branch-guard/tsconfig.json, .claude/hooks/fleet/readme-fleet-shape-guard/tsconfig.json, .claude/hooks/fleet/release-tag-tied-guard/tsconfig.json, .claude/hooks/fleet/release-workflow-guard/tsconfig.json, .claude/hooks/fleet/reply-prose-nudge/tsconfig.json, .claude/hooks/fleet/report-location-guard/tsconfig.json, .claude/hooks/fleet/reserved-script-dir-guard/tsconfig.json, .claude/hooks/fleet/rg-replace-flag-nudge/tsconfig.json, .claude/hooks/fleet/scan-label-in-commit-guard/tsconfig.json, .claude/hooks/fleet/secret-content-guard/tsconfig.json, .claude/hooks/fleet/session-handoff-nudge/tsconfig.json, .claude/hooks/fleet/setup-basics-tools/tsconfig.json, .claude/hooks/fleet/setup-claude-scanners/tsconfig.json, .claude/hooks/fleet/setup-firewall/tsconfig.json, .claude/hooks/fleet/setup-misc-tools/tsconfig.json, .claude/hooks/fleet/setup-security-tools/tsconfig.json, .claude/hooks/fleet/setup-signing/tsconfig.json, .claude/hooks/fleet/shallow-clone-guard/tsconfig.json, .claude/hooks/fleet/skill-usage-logger/tsconfig.json, .claude/hooks/fleet/small-pr-nudge/tsconfig.json, .claude/hooks/fleet/soak-exclude-date-guard/tsconfig.json, .claude/hooks/fleet/soak-exclude-scope-guard/tsconfig.json, .claude/hooks/fleet/soak-pin-needs-annotation-guard/tsconfig.json, .claude/hooks/fleet/squash-history-nudge/tsconfig.json, .claude/hooks/fleet/stale-process-sweeper/tsconfig.json, .claude/hooks/fleet/stop-claim-verify-nudge/tsconfig.json, .claude/hooks/fleet/sweep-ds-store/tsconfig.json, .claude/hooks/fleet/target-arch-env-guard/tsconfig.json, .claude/hooks/fleet/test-script-defers-guard/tsconfig.json, .claude/hooks/fleet/token-guard/tsconfig.json, .claude/hooks/fleet/token-spend-guard/tsconfig.json, .claude/hooks/fleet/trust-downgrade-guard/tsconfig.json, .claude/hooks/fleet/unbacked-claim-commit-guard/tsconfig.json, .claude/hooks/fleet/uncodified-lesson-nudge/tsconfig.json, .claude/hooks/fleet/unpushed-main-nudge/tsconfig.json, .claude/hooks/fleet/untrusted-coauthor-guard/tsconfig.json, .claude/hooks/fleet/uses-sha-verify-guard/tsconfig.json, .claude/hooks/fleet/variant-analysis-nudge/tsconfig.json, .claude/hooks/fleet/verify-absence-claims-nudge/tsconfig.json, .claude/hooks/fleet/verify-render-pre-commit-nudge/tsconfig.json, .claude/hooks/fleet/version-bump-order-guard/tsconfig.json, .claude/hooks/fleet/vitest-vs-node-test-guard/tsconfig.json, .claude/hooks/fleet/wheelhouse-drift-guard/tsconfig.json, .claude/hooks/fleet/workflow-multiline-body-guard/tsconfig.json, .claude/hooks/fleet/workflow-uses-comment-guard/tsconfig.json, .claude/hooks/fleet/worktree-remove-relink-nudge/tsconfig.json, napi/decmpfs/tsconfig.json, tsconfig.json"
                    }
                  }
                ],
                "max_points": 11
              },
              {
                "key": "reproducible_environment",
                "name": "Reproducible environment",
                "detail": "Dockerfile, lockfile",
                "points": 10,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": "Dockerfile, lockfile"
                    }
                  }
                ],
                "max_points": 10
              },
              {
                "key": "demonstrated_agent_practice",
                "name": "Demonstrated agent practice",
                "detail": "no agent-authored commits among the last 85",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "no_agent_authored_commits",
                    "params": {
                      "sampled": 85
                    }
                  }
                ],
                "max_points": 10
              },
              {
                "key": "automated_maintenance",
                "name": "Automated maintenance",
                "detail": "dependency automation configured, none observed in the sampled commits",
                "points": 5,
                "status": "partial",
                "details": [
                  {
                    "code": "dependency_bot_config_only",
                    "params": {}
                  }
                ],
                "max_points": 8
              },
              {
                "key": "openssf_scorecard_pinned_dependencies",
                "name": "OpenSSF Scorecard: Pinned-Dependencies",
                "detail": "dependency not pinned by hash detected -- score normalized to 8",
                "points": 8,
                "status": "partial",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "ai_code_legibility",
            "band": "excellent",
            "name": "Code legibility for models",
            "note": null,
            "notes": [],
            "value": 99,
            "inputs": {
              "primary_language": "TypeScript",
              "largest_source_bytes": 60023,
              "source_files_sampled": 63,
              "oversized_source_files": 1
            },
            "components": [
              {
                "key": "type_checkable_code",
                "name": "Type-checkable code",
                "detail": "TypeScript (statically typed)",
                "points": 45,
                "status": "met",
                "details": [
                  {
                    "code": "statically_typed_language",
                    "params": {
                      "language": "TypeScript"
                    }
                  }
                ],
                "max_points": 45
              },
              {
                "key": "manageable_file_sizes",
                "name": "Manageable file sizes",
                "detail": "1/63 source files over 60KB",
                "points": 54.1,
                "status": "partial",
                "details": [
                  {
                    "code": "oversized_source_files",
                    "params": {
                      "kb": 60,
                      "sampled": 63,
                      "oversized": 1
                    }
                  }
                ],
                "max_points": 55
              }
            ]
          },
          {
            "key": "ai_interfaces",
            "band": "critical",
            "name": "Machine-readable interfaces",
            "note": null,
            "notes": [],
            "value": 20,
            "inputs": {
              "example_dirs": [],
              "has_mcp_signal": true,
              "api_schema_files": []
            },
            "components": [
              {
                "key": "api_schema_openapi_graphql_proto",
                "name": "API schema (OpenAPI/GraphQL/proto)",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 40
              },
              {
                "key": "mcp_server",
                "name": "MCP server",
                "detail": null,
                "points": 20,
                "status": "met",
                "details": [],
                "max_points": 20
              },
              {
                "key": "runnable_examples",
                "name": "Runnable examples",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 40
              }
            ]
          }
        ],
        "description": "How well is the repo equipped to be developed and maintained with AI coding agents? An independent, experimental badge — weight 0.0, so it is surfaced on its own and does not affect the overall health score."
      }
    ],
    "metrics_version": "1.13.0"
  },
  "warnings": [
    "Could not fetch crates package 'decmpfs-node' from its registry",
    "crates package 'decmpfs' points at a different repository (https://github.com/decmpfs/decmpfs); excluded from ecosystem scoring"
  ],
  "report_type": "repository",
  "generated_at": "2026-07-26T22:49:09.991474Z",
  "schema_version": "0.27.0",
  "badge_url": "https://raw.githubusercontent.com/inspect-software/badges/main/v1/s/SocketDev/decmpfs.svg",
  "full_name": "SocketDev/decmpfs",
  "license_state": "standard",
  "license_spdx": "MIT"
}

Оцінки — це сигнали, а не гарантії. Вони відображають публічно видимі практики на GitHub — це не аудит коду й не гарантія безпеки.

Відсутні дані виключаються, а ваги перенормовуються — нуль за відсутність ніколи не ставиться. Методологія версіонована й відкрита: метрики v1.13.0, схема v0.27.0 — повна методологія · вікі метрик.

Як окремий результат виглядає на тлі всього реєстру: сукупна статистикаcrates.io, npm.