Публічний реєстр
Звіт про здоров'я програмного забезпеченнясхема 0.27.0 · метрики 1.13.0 · 2026-07-25 09:56 UTC

YosefHayim / launch-store

Self-hosted CLI for building, signing, and shipping Expo/React Native apps to TestFlight and Google Play.

TypeScriptMIT★ 3 зірки⑂ 1 форкз черв. 2026 р.Переглянути на GitHub ↗

YosefHayim/launch-store має індекс здоров’я 62 зі 100, що відповідає смузі «Помірний». Найвищий показник — Engineering Quality (88/100), найнижчий — Community & Adoption (41/100). Останнє оновлення було 5 днів тому. Більшість нещодавньої роботи виконує один учасник.

62
загалом / 100
Помірний

Індекс здоров'я програмного забезпечення

Метрики згруповано у зважені категорії на шкалі 1–100. Загальна оцінка починається як їхнє середнє; коли публічні дані активують Політику юрисдикцій високого ризику, рейтинг коригується й отримує верхню межу 49 («Під ризиком»). Готовність до ШІ не входить до індексу.

62
Відмінний85-100Зразковий; відповідає практично всім перевіреним критеріям
Добрий70-84Здоровий; незначні прогалини
Помірний50-69Прийнятний, але з помітними прогалинами; рекомендовано перевірку
У зоні ризику30-49Суттєві слабкі місця; впровадження потребує обережності
Критичний1-29Серйозні проблеми (покинутий, єдиний мейнтейнер, без базової гігієни)
ЖиттєздатністьСпільнота тавпровадженняСталість таврядуванняІнженернаякістьБезпекаГотовність доШІ

Профіль оцінок

Кожна вісь — окрема категорія. Форма важить більше, ніж середнє: здоровий об'єкт заповнює всю фігуру, тоді як профіль із піками та провалами означає, що сила в одному вимірі маскує ризик в іншому.

Власність

YosefHayimОсобистий обліковий запис
16 підписників12 публічних репозиторіївз серп. 2024 р.

Цей репозиторій належить особистому обліковому запису. Проєкт з єдиним власником несе більший ризик безперервності, ніж підтримуваний організацією.

Пакетні екосистеми

РеєстрПакетВерсіяЗавантажень / місВерсіїОстання публікаціяТеги
npmlaunch-store0.32.82 629365 днів томуclimobileiosandroidapp-storetestflightplay-storefastlanereact-nativeexpoeascode-signingapp-store-connectci-cdeas-alternativeexpo-easota-updatesself-hosted

Метрики за категоріями

Життєздатність

Чи живий проєкт — чи пишеться код і чи виходять релізи?

75Добрий · 22% загального індексу
Як обчислюється оцінка
36/36Свіжість push — останній push 5 дн. тому
4.2/36Ритм комітів — 6/52 тижнів із комітами
18/18Обсяг комітів — 311 комітів за останній рік
0/10OpenSSF Scorecard: Maintained — project was created within the last 90 days. Please review its contents carefully
Використані вхідні дані
commits_last_year311
human_commit_share1
days_since_last_push5
active_weeks_last_year6
Як обчислюється оцінка
27/27Випускає релізи — опубліковано 37 релізів
36/36Свіжість релізів — останній реліз 5 дн. тому
27/27Ритм релізів — реліз кожні ~2,4 дн.
0/10OpenSSF Scorecard: Signed-Releases — немає даних
Використані вхідні дані
releases_count37
latest_release_tagv0.32.8
releases_from_tagsні
days_since_latest_release5
mean_days_between_releases2,4
Виключено з оцінювання (немає даних або не застосовно): OpenSSF Scorecard: Signed-Releases. Залишкові ваги перенормовано.

Спільнота та впровадження

Чи має проєкт користувачів, завантаження, увагу та влаштовані умови для контриб’юторів?

41У зоні ризику · 18% загального індексу
Як обчислюється оцінка
4.9/60Зірки — 3 зірок
0/25Форки — 1 форків
0/15Спостерігачі — 0 спостерігачів
Використані вхідні дані
forks1
stars3
watchers0
growth_stateunverified
growth_factor_pct100
growth_unverified_reasonno_history
Як обчислюється оцінка
22.5/22.5README
22.5/22.5Ліцензія — визнана ліцензія (MIT)
18/18Настанови CONTRIBUTING
0/13.5Кодекс поведінки
0/7.2Шаблон issue
0/6.3Шаблон PR
Використані вхідні дані
has_readmeтак
has_licenseтак
has_contributingтак
has_issue_templateні
has_code_of_conductні
has_pull_request_templateні
Як обчислюється оцінка
45.6/80Щомісячні завантаження — 2 629 завантажень/місяць у npm
0/20Залежні пакети в реєстрі — ця екосистема цього не повідомляє
Використані вхідні дані
packageslaunch-store
dependents
ecosystemsnpm
total_downloads
monthly_downloads2 629
Виключено з оцінювання (немає даних або не застосовно): Залежні пакети в реєстрі. Залишкові ваги перенормовано.

Сталість та врядування

Чи переживе проєкт своїх людей — бас-фактор, реактивність, хто за ним стоїть і як супроводжуються пакети?

54Помірний · 24% загального індексу
Як обчислюється оцінка
9/54Бас-фактор — на 1 контриб’ютор(ів) припадає половина всіх комітів
0/22.5Розподіл комітів — головний контриб’ютор — автор 100% комітів
1.4/13.5Широта контриб’юторів — 1 контриб’юторів
0/10OpenSSF Scorecard: Contributors — project has 0 contributing companies or organizations -- score normalized to 0
Використані вхідні дані
bus_factor1
contributors_sampled1
top_contributor_share1
Як обчислюється оцінка
46.4/46.8Вирішення issue — закрито 99% issue
37.6/38.3Прийняття PR — злито 167/170 вирішених PR
0/15OpenSSF Scorecard: Code-Review — Found 0/30 approved changesets -- score normalized to 0
Використані вхідні дані
merged_prs167
open_issues1
closed_issues132
issue_closed_ratio0,992
closed_unmerged_prs3

Власність та опіка

38У зоні ризику
Як обчислюється оцінка
10/30Підтримка власника — особистий (користувацький) обліковий запис
0/20Верифікований домен — не застосовно до користувацьких облікових записів
8.8/25Охоплення власника — 16 підписників у YosefHayim
11.9/25Послужний список — 12 публічних репозиторіїв, вік облікового запису ~1 р.
Використані вхідні дані
followers16
owner_typeUser
is_verified
owner_loginYosefHayim
public_repos12
account_age_days701
Виключено з оцінювання (немає даних або не застосовно): Верифікований домен. Залишкові ваги перенормовано.

Супровід пакетів

100Відмінний
Як обчислюється оцінка
25/25Опубліковано й доступно — 1 пакет(ів) у npm
35/35Свіжість публікацій — остання публікація 5 дн. тому
20/20Історія версій — 36 опублікованих версій
20/20Не застарілий — активний, не deprecated і не yanked
Використані вхідні дані
packageslaunch-store
ecosystemsnpm
any_deprecatedні
min_days_since_publish5

Інженерна якість

Чи наявні базові інженерні практики та документація?

88Відмінний · 20% загального індексу
Як обчислюється оцінка
24/24Процеси CI — 11 процес(ів) CI
24/24Наявні тести
16/16Конфігурація лінтера — biome.json
0/9.6Pre-commit-хуки
0/6.4.editorconfig
0/20OpenSSF Scorecard: CI-Tests — немає даних
Використані вхідні дані
has_ciтак
has_testsтак
has_editorconfigні
has_linter_configтак
has_precommit_configні
Виключено з оцінювання (немає даних або не застосовно): OpenSSF Scorecard: CI-Tests. Залишкові ваги перенормовано.

Документація

100Відмінний
Як обчислюється оцінка
30/30README
25/25Каталог документації
15/15Сайт документації / домашня сторінка — https://www.npmjs.com/package/launch-store
10/10Опис репозиторію
10/10Теми — 18 тем
10/10Wiki
Використані вхідні дані
topicsandroid, app-store, app-store-connect, ci-cd, cli, code-signing, eas, expo, fastlane, ios, mobile, play-store, react-native, testflight, expo-updates, google-play, nodejs, typescript
has_wikiтак
homepagehttps://www.npmjs.com/package/launch-store
has_readmeтак
has_docs_dirтак
has_descriptionтак

Безпека

Чи міцні видимі практики безпеки й ланцюга постачання, без непослабленої пов’язаності з юрисдикціями високого ризику?

47У зоні ризику · 16% загального індексу

Стан безпеки

37У зоні ризику
Як обчислюється оцінка
7.5/7.5Binary-Artifacts — no binaries found in the repo
0/7.5Branch-Protection — немає даних
0/2.5CI-Tests — немає даних
0/2.5CII-Best-Practices — no effort to earn an OpenSSF best practices badge detected
0/7.5Code-Review — Found 0/30 approved changesets -- score normalized to 0
0/2.5Contributors — project has 0 contributing companies or organizations -- score normalized to 0
10/10Dangerous-Workflow — no dangerous workflow patterns detected
0/7.5Dependency-Update-Tool — no update tool detected
0/5Fuzzing — project is not fuzzed
2.5/2.5Ліцензія — license file detected
0/7.5Maintained — project was created within the last 90 days. Please review its contents carefully
5/5Packaging — packaging workflow detected
0/5Pinned-Dependencies — dependency not pinned by hash detected -- score normalized to 0
0/5SAST — no SAST tool detected
0/5Security-Policy — security policy file not detected
0/7.5Signed-Releases — немає даних
7.5/7.5Token-Permissions — GitHub workflow tokens follow principle of least privilege
0/7.5Vulnerabilities — 10 existing vulnerabilities detected
Використані вхідні дані
sourceopenssf_scorecard
checks_evaluated15
scorecard_versionv5.5.0
checks_inconclusive3
scorecard_aggregate3,7
Виключено з оцінювання (немає даних або не застосовно): branch_protection, ci_tests, signed_releases. Залишкові ваги перенормовано.
Як обчислюється оцінка
35/35Прямі залежності без відомих сповіщень — жодна пряма залежність не має відомих сповіщень
13.2/25Непрямі залежності без відомих сповіщень — уражено 1: @hono/node-server 1.19.15 (moderate 5.9)
40/40Немає задавнених сповіщень — жодне сповіщення не є публічним довше за 90 дн.
Використані вхідні дані
sourceosv
advisories1
affected_packages1
assessed_packages165
unassessed_packages0
affected_by_severitymoderate 1
direct_affected_packages0
Звірено з runtime-замиканням залежностей npm:launch-store@0.32.8 — тим, що тягне за собою встановлення опублікованого пакета, — 165 пакетів. Досяжність не аналізується.

Готовність до ШІ

Наскільки репозиторій оснащений для розробки та супроводу за участі ШІ-агентів? Незалежний, експериментальний бейдж — вага 0.0, тож він подається окремо і не впливає на загальний індекс здоров'я.

77Добрий · 0% загального індексу
Як обчислюється оцінка
45/45Інструкції для агентів — .cursor/rules/core-types.mdc, .cursor/rules/exec-secrets.mdc, .cursor/rules/launch.mdc, .cursor/rules/providers.mdc, AGENTS.md, CLAUDE.md
15/15Машиночитана документація (llms.txt) — llms.txt наявний
40/40Читабельна історія комітів — намір зазначено у 100 з 100 людських комітів (структурований заголовок або пояснювальний текст)
Використані вхідні дані
has_llms_txtтак
legible_history_share1
agent_instruction_files.cursor/rules/core-types.mdc, .cursor/rules/exec-secrets.mdc, .cursor/rules/launch.mdc, .cursor/rules/providers.mdc, AGENTS.md, CLAUDE.md
agent_instruction_max_bytes7 397
Як обчислюється оцінка
0/18Розгортання однією командою
22/22Автоматизовані тести
11/11Конфігурація лінтера / форматера — biome.json
11/11Статична перевірка типів — examples/hello-world/tsconfig.json, tsconfig.json
10/10Відтворюване середовище — lockfile
10/10Підтверджена практика роботи з агентами — 73 з останніх 100 комітів створено агентом або з його зазначенням
0/8Автоматизоване супроводження — автоматичних оновлень залежностей не виявлено
0/10OpenSSF Scorecard: Pinned-Dependencies — dependency not pinned by hash detected -- score normalized to 0
Використані вхідні дані
has_nixні
has_testsтак
lockfilespnpm-lock.yaml
has_dockerfileні
typed_languageтак
bootstrap_files
has_devcontainerні
has_linter_configтак
typecheck_configsexamples/hello-world/tsconfig.json, tsconfig.json
agent_commit_share0,73
toolchain_manifests
dependency_bot_commit_share0
Як обчислюється оцінка
45/45Типізований код — TypeScript (статично типізована)
54.6/55Керовані розміри файлів — 4/525 файлів вихідного коду понад 60 КБ
Використані вхідні дані
primary_languageTypeScript
largest_source_bytes5 069 338
source_files_sampled525
oversized_source_files4
Як обчислюється оцінка
0/40Схема API (OpenAPI/GraphQL/proto)
0/20Сервер MCP
40/40Придатні до запуску приклади — examples
Використані вхідні дані
example_dirsexamples
has_mcp_signalні
api_schema_files

Ключові факти

3зірок GitHub
1контриб'юторів
311комітів за останні 12 місяців
5днів від останнього пушу
37релізів
1бас-фактор
1відкритих issue
npmпакетних екосистем

Попередження щодо збору даних

  • Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token

Докладніше

OpenSSF Scorecard 3.7 / 10
3.7сукупно

Незалежна, не прив'язана до інструментів оцінка безпеки від відкритого проєкту OpenSSF Scorecard. Кожна перевірка винагороджує практику безпеки, а не інструмент конкретного постачальника. Перевірки, які Scorecard не зміг визначити, позначено н/д і виключено з оцінки безпеки (вони ніколи не зараховуються як нуль).Scorecard v5.5.0 · 2026-07-25 09:56 UTC

10Binary-Artifactsno binaries found in the repo
н/дBranch-Protectioninternal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md
н/дCI-Testsno pull request found
0CII-Best-Practicesno effort to earn an OpenSSF best practices badge detected
0Code-ReviewFound 0/30 approved changesets -- score normalized to 0
0Contributorsproject has 0 contributing companies or organizations -- score normalized to 0
10Dangerous-Workflowno dangerous workflow patterns detected
0Dependency-Update-Toolno update tool detected
0Fuzzingproject is not fuzzed
10Licenselicense file detected
0Maintainedproject was created within the last 90 days. Please review its contents carefully
10Packagingpackaging workflow detected
0Pinned-Dependenciesdependency not pinned by hash detected -- score normalized to 0
0SASTno SAST tool detected
0Security-Policysecurity policy file not detected
н/дSigned-Releasesno releases found
10Token-PermissionsGitHub workflow tokens follow principle of least privilege
0Vulnerabilities10 existing vulnerabilities detected
Прямі залежності 7
РеєстрПакетОбмеження версіїМаніфест
npm@clack/prompts^1.5.1package.json
npm@effect/platform^0.96.2package.json
npmchalk^5.6.2package.json
npmcommander^12.1.0package.json
npmeffect^3.21.4package.json
npmjiti^2.4.0package.json
npmjose^5.9.6package.json
Усі залежності 393

Повний розв'язаний набір залежностей із графа залежностей GitHub: 9 прямих і 384 непрямих (транзитивних) пакетів. Транзитивне замикання є повним, коли в репозиторії закомічено lockfile.

РеєстрПакетВерсіяЗв'язок
npm@clack/prompts1.5.1пряма
npm@effect/platform0.96.2пряма
npmchalk5.6.2пряма
npmcommander12.1.0пряма
npmcommander13.1.0пряма
npmeffect3.21.4пряма
npmjiti2.7.0пряма
npmjose5.10.0пряма
npmjose6.2.3пряма
npm@aws-crypto/crc325.2.0непряма
npm@aws-crypto/crc32c5.2.0непряма
npm@aws-crypto/sha1-browser5.2.0непряма
npm@aws-crypto/sha256-browser5.2.0непряма
npm@aws-crypto/sha256-js5.2.0непряма
npm@aws-crypto/supports-web-crypto5.2.0непряма
npm@aws-crypto/util5.2.0непряма
npm@aws-sdk/checksums3.1000.5непряма
npm@aws-sdk/client-cognito-identity3.1068.0непряма
npm@aws-sdk/client-ec23.1068.0непряма
npm@aws-sdk/client-s33.1068.0непряма
npm@aws-sdk/core3.974.20непряма
npm@aws-sdk/credential-provider-cognito-identity3.972.45непряма
npm@aws-sdk/credential-provider-env3.972.46непряма
npm@aws-sdk/credential-provider-http3.972.48непряма
npm@aws-sdk/credential-provider-ini3.972.53непряма
npm@aws-sdk/credential-provider-login3.972.52непряма
npm@aws-sdk/credential-provider-node3.972.55непряма
npm@aws-sdk/credential-provider-process3.972.46непряма
npm@aws-sdk/credential-provider-sso3.972.52непряма
npm@aws-sdk/credential-provider-web-identity3.972.52непряма
npm@aws-sdk/credential-providers3.1068.0непряма
npm@aws-sdk/middleware-flexible-checksums3.974.30непряма
npm@aws-sdk/middleware-sdk-ec23.972.34непряма
npm@aws-sdk/middleware-sdk-s33.972.51непряма
npm@aws-sdk/nested-clients3.997.20непряма
npm@aws-sdk/signature-v4-multi-region3.996.34непряма
npm@aws-sdk/token-providers3.1066.0непряма
npm@aws-sdk/types3.973.12непряма
npm@aws-sdk/util-locate-window3.965.7непряма
npm@aws-sdk/xml-builder3.972.29непряма
npm@aws/lambda-invoke-store0.2.4непряма
npm@babel/code-frame7.29.7непряма
npm@babel/core^7.25.0непряма
npm@babel/helper-string-parser7.29.7непряма
npm@babel/helper-validator-identifier7.29.7непряма
npm@babel/parser7.29.7непряма
npm@babel/types7.29.7непряма
npm@bcoe/v8-coverage1.0.2непряма
npm@biomejs/biome2.5.1непряма
npm@biomejs/cli-darwin-arm642.5.1непряма
npm@biomejs/cli-darwin-x642.5.1непряма
npm@biomejs/cli-linux-arm642.5.1непряма
npm@biomejs/cli-linux-arm64-musl2.5.1непряма
npm@biomejs/cli-linux-x642.5.1непряма
npm@biomejs/cli-linux-x64-musl2.5.1непряма
npm@biomejs/cli-win32-arm642.5.1непряма
npm@biomejs/cli-win32-x642.5.1непряма
npm@clack/core1.4.1непряма
npm@emnapi/core1.10.0непряма
npm@emnapi/runtime1.10.0непряма
npm@emnapi/wasi-threads1.2.1непряма
npm@esbuild/aix-ppc640.28.1непряма
npm@esbuild/android-arm0.28.1непряма
npm@esbuild/android-arm640.28.1непряма
npm@esbuild/android-x640.28.1непряма
npm@esbuild/darwin-arm640.28.1непряма
npm@esbuild/darwin-x640.28.1непряма
npm@esbuild/freebsd-arm640.28.1непряма
npm@esbuild/freebsd-x640.28.1непряма
npm@esbuild/linux-arm0.28.1непряма
npm@esbuild/linux-arm640.28.1непряма
npm@esbuild/linux-ia320.28.1непряма
npm@esbuild/linux-loong640.28.1непряма
npm@esbuild/linux-mips64el0.28.1непряма
npm@esbuild/linux-ppc640.28.1непряма
npm@esbuild/linux-riscv640.28.1непряма
npm@esbuild/linux-s390x0.28.1непряма
npm@esbuild/linux-x640.28.1непряма
npm@esbuild/netbsd-arm640.28.1непряма
npm@esbuild/netbsd-x640.28.1непряма
npm@esbuild/openbsd-arm640.28.1непряма
npm@esbuild/openbsd-x640.28.1непряма
npm@esbuild/openharmony-arm640.28.1непряма
npm@esbuild/sunos-x640.28.1непряма
npm@esbuild/win32-arm640.28.1непряма
npm@esbuild/win32-ia320.28.1непряма
npm@esbuild/win32-x640.28.1непряма
npm@hono/node-server1.19.14непряма
npm@jridgewell/resolve-uri3.1.2непряма
npm@jridgewell/sourcemap-codec1.5.5непряма
npm@jridgewell/trace-mapping0.3.31непряма
npm@modelcontextprotocol/sdk1.29.0непряма
npm@msgpackr-extract/msgpackr-extract-darwin-arm643.0.4непряма
npm@msgpackr-extract/msgpackr-extract-darwin-x643.0.4непряма
npm@msgpackr-extract/msgpackr-extract-linux-arm3.0.4непряма
npm@msgpackr-extract/msgpackr-extract-linux-arm643.0.4непряма
npm@msgpackr-extract/msgpackr-extract-linux-x643.0.4непряма
npm@msgpackr-extract/msgpackr-extract-win32-x643.0.4непряма
npm@napi-rs/keyring1.3.0непряма
npm@napi-rs/keyring-darwin-arm641.3.0непряма
npm@napi-rs/keyring-darwin-x641.3.0непряма
npm@napi-rs/keyring-freebsd-x641.3.0непряма
npm@napi-rs/keyring-linux-arm-gnueabihf1.3.0непряма
npm@napi-rs/keyring-linux-arm64-gnu1.3.0непряма
npm@napi-rs/keyring-linux-arm64-musl1.3.0непряма
npm@napi-rs/keyring-linux-riscv64-gnu1.3.0непряма
npm@napi-rs/keyring-linux-x64-gnu1.3.0непряма
npm@napi-rs/keyring-linux-x64-musl1.3.0непряма
npm@napi-rs/keyring-win32-arm64-msvc1.3.0непряма
npm@napi-rs/keyring-win32-ia32-msvc1.3.0непряма
npm@napi-rs/keyring-win32-x64-msvc1.3.0непряма
npm@napi-rs/wasm-runtime1.1.6непряма
npm@nodable/entities2.2.0непряма
npm@oxc-project/types0.133.0непряма
npm@redocly/ajv8.11.2непряма
npm@redocly/config0.22.0непряма
npm@redocly/openapi-core1.34.17непряма
npm@rolldown/binding-android-arm641.0.3непряма
npm@rolldown/binding-darwin-arm641.0.3непряма
npm@rolldown/binding-darwin-x641.0.3непряма
npm@rolldown/binding-freebsd-x641.0.3непряма
npm@rolldown/binding-linux-arm-gnueabihf1.0.3непряма
npm@rolldown/binding-linux-arm64-gnu1.0.3непряма
npm@rolldown/binding-linux-arm64-musl1.0.3непряма
npm@rolldown/binding-linux-ppc64-gnu1.0.3непряма
npm@rolldown/binding-linux-s390x-gnu1.0.3непряма
npm@rolldown/binding-linux-x64-gnu1.0.3непряма
npm@rolldown/binding-linux-x64-musl1.0.3непряма
npm@rolldown/binding-openharmony-arm641.0.3непряма
npm@rolldown/binding-wasm32-wasi1.0.3непряма
npm@rolldown/binding-win32-arm64-msvc1.0.3непряма
npm@rolldown/binding-win32-x64-msvc1.0.3непряма
npm@rolldown/pluginutils1.0.1непряма
npm@smithy/core3.24.7непряма
npm@smithy/credential-provider-imds4.3.9непряма
npm@smithy/fetch-http-handler5.4.7непряма
npm@smithy/is-array-buffer2.2.0непряма
npm@smithy/node-http-handler4.7.8непряма
npm@smithy/signature-v45.4.7непряма
npm@smithy/types4.14.4непряма
npm@smithy/util-buffer-from2.2.0непряма
npm@smithy/util-utf82.3.0непряма
npm@standard-schema/spec1.1.0непряма
npm@tybys/wasm-util0.10.3непряма
npm@types/chai5.2.3непряма
npm@types/deep-eql4.0.2непряма
npm@types/estree1.0.9непряма
npm@types/node20.19.43непряма
npm@types/react~18.3.0непряма
npm@vitest/coverage-v84.1.8непряма
npm@vitest/expect4.1.8непряма
npm@vitest/mocker4.1.8непряма
npm@vitest/pretty-format4.1.8непряма
npm@vitest/runner4.1.8непряма
npm@vitest/snapshot4.1.8непряма
npm@vitest/spy4.1.8непряма
npm@vitest/utils4.1.8непряма
npmaccepts2.0.0непряма
npmagent-base7.1.4непряма
npmajv8.20.0непряма
npmajv-formats3.0.1непряма
npmansi-colors4.1.3непряма
npmansi-escapes7.3.0непряма
npmansi-regex6.2.2непряма
npmansi-styles6.2.3непряма
npmanynum1.0.0непряма
npmargparse2.0.1непряма
npmassertion-error2.0.1непряма
npmast-v8-to-istanbul1.0.4непряма
npmbalanced-match1.0.2непряма
npmbody-parser2.3.0непряма
npmbowser2.14.1непряма
npmbrace-expansion2.1.1непряма
npmbraces3.0.3непряма
npmbytes3.1.2непряма
npmcall-bind-apply-helpers1.0.2непряма
npmcall-bound1.0.4непряма
npmchai6.2.2непряма
npmchange-case5.4.4непряма
npmcli-cursor5.0.0непряма
npmcli-truncate4.0.0непряма
npmcolorette1.4.0непряма
npmcolorette2.0.20непряма
npmcontent-disposition1.1.0непряма
npmcontent-type1.0.5непряма
npmcontent-type2.0.0непряма
npmconvert-source-map2.0.0непряма
npmcookie0.7.2непряма
npmcookie-signature1.2.2непряма
npmcors2.8.6непряма
npmcross-spawn7.0.6непряма
npmdebug4.4.3непряма
npmdepd2.0.0непряма
npmdetect-libc2.1.2непряма
npmdunder-proto1.0.1непряма
npmee-first1.1.1непряма
npmemoji-regex10.6.0непряма
npmencodeurl2.0.0непряма
npmenvironment1.1.0непряма
npmes-define-property1.0.1непряма
npmes-errors1.3.0непряма
npmes-module-lexer2.1.0непряма
npmes-object-atoms1.1.2непряма
npmesbuild0.28.1непряма
npmescape-html1.0.3непряма
npmestree-walker3.0.3непряма
npmetag1.8.1непряма
npmeventemitter35.0.4непряма
npmeventsource3.0.7непряма
npmeventsource-parser3.1.0непряма
npmexeca8.0.1непряма
npmexpect-type1.3.0непряма
npmexpo~52.0.0непряма
npmexpo-status-bar~2.0.0непряма
npmexpress5.2.1непряма
npmexpress-rate-limit8.5.2непряма
npmfast-check3.23.2непряма
npmfast-deep-equal3.1.3непряма
npmfast-string-truncated-width3.0.3непряма
npmfast-string-width3.0.2непряма
npmfast-uri3.1.2непряма
npmfast-wrap-ansi0.2.2непряма
npmfast-xml-builder1.2.0непряма
npmfast-xml-parser5.7.3непряма
npmfdir6.5.0непряма
npmfill-range7.1.1непряма
npmfinalhandler2.1.1непряма
npmfind-my-way-ts0.1.6непряма
npmforwarded0.2.0непряма
npmfresh2.0.0непряма
npmfsevents2.3.3непряма
npmfunction-bind1.1.2непряма
npmget-east-asian-width1.6.0непряма
npmget-intrinsic1.3.0непряма
npmget-proto1.0.1непряма
npmget-stream8.0.1непряма
npmgopd1.2.0непряма
npmhas-flag4.0.0непряма
npmhas-symbols1.1.0непряма
npmhasown2.0.4непряма
npmhono4.12.25непряма
npmhtml-escaper2.0.2непряма
npmhttp-errors2.0.1непряма
npmhttps-proxy-agent7.0.6непряма
npmhuman-signals5.0.0непряма
npmhusky9.1.7непряма
npmiconv-lite0.7.2непряма
npmindex-to-position1.2.0непряма
npminherits2.0.4непряма
npmip-address10.2.0непряма
npmipaddr.js1.9.1непряма
npmis-fullwidth-code-point4.0.0непряма
npmis-fullwidth-code-point5.1.0непряма
npmis-number7.0.0непряма
npmis-promise4.0.0непряма
npmis-stream3.0.0непряма
npmisexe2.0.0непряма
npmistanbul-lib-coverage3.2.2непряма
npmistanbul-lib-report3.0.1непряма
npmistanbul-reports3.2.0непряма
npmjs-levenshtein1.1.6непряма
npmjs-tokens10.0.0непряма
npmjs-tokens4.0.0непряма
npmjs-yaml4.2.0непряма
npmjson-schema-traverse1.0.0непряма
npmjson-schema-typed8.0.2непряма
npmlightningcss1.32.0непряма
npmlightningcss-android-arm641.32.0непряма
npmlightningcss-darwin-arm641.32.0непряма
npmlightningcss-darwin-x641.32.0непряма
npmlightningcss-freebsd-x641.32.0непряма
npmlightningcss-linux-arm-gnueabihf1.32.0непряма
npmlightningcss-linux-arm64-gnu1.32.0непряма
npmlightningcss-linux-arm64-musl1.32.0непряма
npmlightningcss-linux-x64-gnu1.32.0непряма
npmlightningcss-linux-x64-musl1.32.0непряма
npmlightningcss-win32-arm64-msvc1.32.0непряма
npmlightningcss-win32-x64-msvc1.32.0непряма
npmlilconfig3.1.3непряма
npmlint-staged15.5.2непряма
npmlistr28.3.3непряма
npmlog-update6.1.0непряма
npmmagic-string0.30.21непряма
npmmagicast0.5.3непряма
npmmake-dir4.0.0непряма
npmmath-intrinsics1.1.0непряма
npmmedia-typer1.1.0непряма
npmmerge-descriptors2.0.0непряма
npmmerge-stream2.0.0непряма
npmmicromatch4.0.8непряма
npmmime-db1.54.0непряма
npmmime-types3.0.2непряма
npmmimic-fn4.0.0непряма
npmmimic-function5.0.1непряма
npmminimatch5.1.9непряма
npmms2.1.3непряма
npmmsgpackr1.12.1непряма
npmmsgpackr-extract3.0.4непряма
npmmultipasta0.2.7непряма
npmnanoid3.3.15непряма
npmnegotiator1.0.0непряма
npmnode-gyp-build-optional-packages5.2.2непряма
npmnpm-run-path5.3.0непряма
npmobject-assign4.1.1непряма
npmobject-inspect1.13.4непряма
npmobug2.1.3непряма
npmon-finished2.4.1непряма
npmonce1.4.0непряма
npmonetime6.0.0непряма
npmonetime7.0.0непряма
npmopenapi-typescript7.13.0непряма
npmparse-json8.3.0непряма
npmparseurl1.3.3непряма
npmpath-expression-matcher1.5.0непряма
npmpath-key3.1.1непряма
npmpath-key4.0.0непряма
npmpath-to-regexp8.4.2непряма
npmpathe2.0.3непряма
npmpicocolors1.1.1непряма
npmpicomatch2.3.2непряма
npmpicomatch4.0.4непряма
npmpicomatch4.0.5непряма
npmpidtree0.6.1непряма
npmpkce-challenge5.0.1непряма
npmpluralize8.0.0непряма
npmpostcss8.5.16непряма
npmproxy-addr2.0.7непряма
npmpure-rand6.1.0непряма
npmqs6.15.2непряма
npmrange-parser1.2.1непряма
npmraw-body3.0.2непряма
npmreact18.3.1непряма
npmreact-native0.76.5непряма
npmrequire-from-string2.0.2непряма
npmrestore-cursor5.1.0непряма
npmrfdc1.4.1непряма
npmrolldown1.0.3непряма
npmrouter2.2.0непряма
npmsafer-buffer2.1.2непряма
npmsemver7.8.4непряма
npmsend1.2.1непряма
npmserve-static2.2.1непряма
npmsetprototypeof1.2.0непряма
npmshebang-command2.0.0непряма
npmshebang-regex3.0.0непряма
npmside-channel1.1.1непряма
npmside-channel-list1.0.1непряма
npmside-channel-map1.0.1непряма
npmside-channel-weakmap1.0.2непряма
npmsiginfo2.0.0непряма
npmsignal-exit4.1.0непряма
npmsisteransi1.0.5непряма
npmslice-ansi5.0.0непряма
npmslice-ansi7.1.2непряма
npmsource-map-js1.2.1непряма
npmstackback0.0.2непряма
npmstatuses2.0.2непряма
npmstd-env4.1.0непряма
npmstring-argv0.3.2непряма
npmstring-width7.2.0непряма
npmstrip-ansi7.2.0непряма
npmstrip-final-newline3.0.0непряма
npmstrnum2.4.0непряма
npmsupports-color10.2.2непряма
npmsupports-color7.2.0непряма
npmtinybench2.9.0непряма
npmtinyexec1.2.4непряма
npmtinyglobby0.2.17непряма
npmtinyrainbow3.1.0непряма
npmto-regex-range5.0.1непряма
npmtoidentifier1.0.1непряма
npmtslib2.8.1непряма
npmtsx4.22.4непряма
npmtype-fest4.41.0непряма
npmtype-is2.1.0непряма
npmtypescript5.9.3непряма
npmtypescript~5.3.3непряма
npmundici-types6.21.0непряма
npmunpipe1.0.0непряма
npmuri-js-replace1.0.1непряма
npmvary1.1.2непряма
npmvite8.0.16непряма
npmvitest4.1.8непряма
npmwhich2.0.2непряма
npmwhy-is-node-running2.3.0непряма
npmwrap-ansi9.0.2непряма
npmwrappy1.0.2непряма
npmxml-naming0.1.0непряма
npmyaml2.9.0непряма
npmyaml-ast-parser0.0.43непряма
npmyargs-parser21.1.1непряма
npmzod4.4.3непряма
npmzod-to-json-schema3.25.2непряма
Сповіщення про залежності 1

Встановлення npm:launch-store@0.32.8 тягне 165 пакетів, прямих і транзитивних: 1 мають відомі сповіщення, з них 0 — прямі залежності.

ПакетВерсіяЗв'язокКритичністьСповіщеньВиправлено в
@hono/node-server1.19.15непрямапомірна12.0.5

Сповіщення означає, що версія, записана в графі залежностей, потрапляє в уражений діапазон. Досяжність не аналізується, а граф містить піниї розробки й тестування — знахідка може стосуватися інструментів, а не поставленого коду.

Звіт у форматі JSON машиночитний
{
  "data": {
    "repo": {
      "topics": [
        "android",
        "app-store",
        "app-store-connect",
        "ci-cd",
        "cli",
        "code-signing",
        "eas",
        "expo",
        "fastlane",
        "ios",
        "mobile",
        "play-store",
        "react-native",
        "testflight",
        "expo-updates",
        "google-play",
        "nodejs",
        "typescript"
      ],
      "is_fork": false,
      "size_kb": 18516,
      "has_wiki": true,
      "homepage": "https://www.npmjs.com/package/launch-store",
      "languages": {
        "JavaScript": 13754,
        "TypeScript": 8968545
      },
      "pushed_at": "2026-07-19T12:31:32Z",
      "created_at": "2026-06-13T18:49:45Z",
      "owner_type": "User",
      "updated_at": "2026-07-21T08:05:41Z",
      "description": "Self-hosted CLI for building, signing, and shipping Expo/React Native apps to TestFlight and Google Play.",
      "is_archived": false,
      "is_disabled": false,
      "license_spdx": "MIT",
      "default_branch": "main",
      "license_spdx_raw": "MIT",
      "primary_language": "TypeScript",
      "significant_languages": [
        "TypeScript"
      ]
    },
    "owner": {
      "blog": "https://yosefhayimsabag.com",
      "name": null,
      "type": "User",
      "login": "YosefHayim",
      "company": null,
      "location": "Israel, HaMarkeZ, Tel Aviv",
      "followers": 16,
      "avatar_url": "https://avatars.githubusercontent.com/u/179159376?v=4",
      "created_at": "2024-08-22T17:23:42Z",
      "is_verified": null,
      "public_repos": 12,
      "account_age_days": 701
    },
    "license": {
      "state": "standard",
      "spdx_id": "MIT",
      "raw_spdx": "MIT",
      "file_present": true,
      "scorecard_found": true,
      "profile_has_license": true
    },
    "activity": {
      "releases": [
        {
          "tag": "v0.32.8",
          "kind": "patch",
          "published_at": "2026-07-19T12:31:34Z"
        },
        {
          "tag": "v0.32.7",
          "kind": "patch",
          "published_at": "2026-07-11T11:25:53Z"
        },
        {
          "tag": "v0.32.6",
          "kind": "patch",
          "published_at": "2026-07-11T11:22:45Z"
        },
        {
          "tag": "v0.32.4",
          "kind": "patch",
          "published_at": "2026-07-02T17:44:31Z"
        },
        {
          "tag": "v0.32.3",
          "kind": "patch",
          "published_at": "2026-07-01T23:40:45Z"
        },
        {
          "tag": "v0.32.0",
          "kind": "minor",
          "published_at": "2026-07-01T18:49:13Z"
        },
        {
          "tag": "v0.31.2",
          "kind": "patch",
          "published_at": "2026-06-30T09:57:54Z"
        },
        {
          "tag": "v0.31.1",
          "kind": "patch",
          "published_at": "2026-06-30T09:56:25Z"
        },
        {
          "tag": "v0.31.0",
          "kind": "minor",
          "published_at": "2026-06-28T15:30:57Z"
        },
        {
          "tag": "v0.30.0",
          "kind": "minor",
          "published_at": "2026-06-27T17:13:29Z"
        },
        {
          "tag": "v0.29.1",
          "kind": "patch",
          "published_at": "2026-06-25T11:37:30Z"
        },
        {
          "tag": "v0.29.0",
          "kind": "minor",
          "published_at": "2026-06-22T23:15:05Z"
        },
        {
          "tag": "v0.28.0",
          "kind": "minor",
          "published_at": "2026-06-21T10:19:52Z"
        },
        {
          "tag": "v0.27.0",
          "kind": "minor",
          "published_at": "2026-06-19T15:27:44Z"
        },
        {
          "tag": "v0.26.1",
          "kind": "patch",
          "published_at": "2026-06-16T09:28:13Z"
        },
        {
          "tag": "v0.26.0",
          "kind": "minor",
          "published_at": "2026-06-15T23:42:30Z"
        },
        {
          "tag": "v0.18.0",
          "kind": "minor",
          "published_at": "2026-06-15T19:54:55Z"
        },
        {
          "tag": "v0.17.0",
          "kind": "minor",
          "published_at": "2026-06-15T18:17:49Z"
        },
        {
          "tag": "v0.16.1",
          "kind": "patch",
          "published_at": "2026-06-15T14:40:24Z"
        },
        {
          "tag": "v0.16.0",
          "kind": "minor",
          "published_at": "2026-06-15T13:38:15Z"
        },
        {
          "tag": "v0.15.0",
          "kind": "minor",
          "published_at": "2026-06-15T11:43:23Z"
        },
        {
          "tag": "v0.14.0",
          "kind": "minor",
          "published_at": "2026-06-15T11:34:35Z"
        },
        {
          "tag": "v0.13.3",
          "kind": "patch",
          "published_at": "2026-06-15T10:10:20Z"
        },
        {
          "tag": "v0.13.2",
          "kind": "patch",
          "published_at": "2026-06-15T09:16:22Z"
        },
        {
          "tag": "v0.13.1",
          "kind": "patch",
          "published_at": "2026-06-15T08:09:50Z"
        },
        {
          "tag": "v0.13.0",
          "kind": "minor",
          "published_at": "2026-06-15T07:50:29Z"
        },
        {
          "tag": "v0.12.0",
          "kind": "minor",
          "published_at": "2026-06-14T17:26:42Z"
        },
        {
          "tag": "v0.11.0",
          "kind": "minor",
          "published_at": "2026-06-14T06:01:18Z"
        },
        {
          "tag": "v0.10.0",
          "kind": "minor",
          "published_at": "2026-06-14T05:17:18Z"
        },
        {
          "tag": "v0.9.0",
          "kind": "minor",
          "published_at": "2026-06-14T04:34:18Z"
        },
        {
          "tag": "v0.8.0",
          "kind": "minor",
          "published_at": "2026-06-14T04:07:11Z"
        },
        {
          "tag": "v0.7.0",
          "kind": "minor",
          "published_at": "2026-06-14T02:10:16Z"
        },
        {
          "tag": "v0.6.0",
          "kind": "minor",
          "published_at": "2026-06-14T01:40:46Z"
        },
        {
          "tag": "v0.5.0",
          "kind": "minor",
          "published_at": "2026-06-14T01:17:00Z"
        },
        {
          "tag": "v0.4.1",
          "kind": "patch",
          "published_at": "2026-06-13T23:58:26Z"
        },
        {
          "tag": "v0.4.0",
          "kind": "minor",
          "published_at": "2026-06-13T23:37:02Z"
        },
        {
          "tag": "v0.3.0",
          "kind": "minor",
          "published_at": "2026-06-13T22:47:17Z"
        }
      ],
      "recent_commits": [
        {
          "oid": "a232009914c129d10ffc2e67387fc989cddf03ed",
          "body": "…e isolation)",
          "is_bot": false,
          "headline": "chore: release v0.32.8 (Effect Schema SSOT, pipeline extract, keystor…",
          "author_name": "YosefHayim",
          "author_login": "YosefHayim",
          "committed_at": "2026-07-19T12:31:08Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "89bc3778f13942a01297147ddfe4b80d1ef43fe7",
          "body": "… isolation\n\nComplete the Effect Schema config SSOT: annotate fields so JSON Schema\ndescriptions emit without a merge bridge, drop the gen-docs description\nmerge helper, and remove the zod dependency.\n\nExtract pipeline.ts into phase modules (types, providers, env, signing,\nversion, artifact, ios, android) and isolate Google keystore tests by\nredirecting HOME via vi.hoisted. Align contributor docs with pnpm.",
          "is_bot": false,
          "headline": "refactor: Effect Schema field descriptions, pipeline phases, keystore…",
          "author_name": "YosefHayim",
          "author_login": "YosefHayim",
          "committed_at": "2026-07-19T12:30:47Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "c12001434bef5d48921be14b2bc729374602480c",
          "body": null,
          "is_bot": false,
          "headline": "chore: release v0.32.7 (export compliance + publish CI fixes)",
          "author_name": "YosefHayim",
          "author_login": "YosefHayim",
          "committed_at": "2026-07-11T11:25:42Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "f210a80d56b55c17a9f0d70ae4d2c22b354d574a",
          "body": "llms.txt and README link to ./docs/adr/, but the directory was gitignored\nvia docs/*. Clean checkouts (publish CI) failed docsConsistency when the\ndirectory was missing. Exception + commit the ADRs so the public links resolve.",
          "is_bot": false,
          "headline": "docs: track docs/adr so CI can resolve public ADR links",
          "author_name": "YosefHayim",
          "author_login": "YosefHayim",
          "committed_at": "2026-07-11T11:25:38Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "f084da0b328df0d99132de3c61c573caa9544f47",
          "body": "setup-node with cache: pnpm shells out to `pnpm store path`, so\npnpm/action-setup must run first. Without it, v0.32.6 publish failed\nimmediately after checkout.",
          "is_bot": false,
          "headline": "ci(publish): install pnpm before setup-node cache",
          "author_name": "YosefHayim",
          "author_login": "YosefHayim",
          "committed_at": "2026-07-11T11:23:19Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "ca6371ef88179a6ed5a4e2ee1a39fcf51a3c2c02",
          "body": null,
          "is_bot": false,
          "headline": "chore: release v0.32.6 (export compliance 409 idempotent, #299)",
          "author_name": "YosefHayim",
          "author_login": "YosefHayim",
          "committed_at": "2026-07-11T11:22:35Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "8282a848e284822996836a8790e44e15daa2e817",
          "body": "Skip the export-compliance PATCH when App Store Connect already has the\ndesired usesNonExemptEncryption value, and treat Apple's 409 \"already\nset\" conflict as skipped success so a matching desired state does not\nfail the release run.",
          "is_bot": false,
          "headline": "fix(release): treat already-set export compliance 409 as success (#299)",
          "author_name": "YosefHayim",
          "author_login": "YosefHayim",
          "committed_at": "2026-07-11T11:22:31Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "eb1dd2d9afee948f050cdb085e667bb64703ae7d",
          "body": null,
          "is_bot": false,
          "headline": "chore: release v0.32.5 (iOS signing scope fix, #301)",
          "author_name": "YosefHayim",
          "author_login": "YosefHayim",
          "committed_at": "2026-07-08T16:45:33Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "27e851d12309544344ad4075807ec05ebed3b1b6",
          "body": "… Pods (#301)\n\n`launch build ios` failed at the archive step on Xcode 26 for a plain single-target\napp: gym passed CODE_SIGN_STYLE=Manual + PROVISIONING_PROFILE_SPECIFIER as workspace-\nwide xcargs, so xcodebuild applied the app's manual App Store profile to every\nCocoaPods library target. Xcode 26 p\n[…]\nIDs that were used as test fixtures / doc-comment examples with clearly-fake pseudonyms\n(com.example.sampleapp, ABCDE12345, KEY*).\n\nFixes #301.\n\nCo-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix(build): scope iOS signing to the app target so it can't leak onto…",
          "author_name": "YosefHayim",
          "author_login": "YosefHayim",
          "committed_at": "2026-07-08T16:44:48Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "931c8a09191e928ee63aa176a8143ac33a7733d8",
          "body": null,
          "is_bot": false,
          "headline": "docs: refresh agent and readme guidance",
          "author_name": "YosefHayim",
          "author_login": "YosefHayim",
          "committed_at": "2026-07-07T05:21:55Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "62004efa3b5365812c93930467f3b9b6986f5b48",
          "body": null,
          "is_bot": false,
          "headline": "chore: refresh openapi transitive dependencies",
          "author_name": "YosefHayim",
          "author_login": "YosefHayim",
          "committed_at": "2026-07-07T05:00:16Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "a481e7ed327f833608f71cfdd0c496a7fd082257",
          "body": null,
          "is_bot": false,
          "headline": "refactor: group core modules by purpose",
          "author_name": "YosefHayim",
          "author_login": "YosefHayim",
          "committed_at": "2026-07-07T04:52:28Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "2a9b35e84f16e94d2669468afa499dde17c8c781",
          "body": null,
          "is_bot": false,
          "headline": "docs: add official README links",
          "author_name": "YosefHayim",
          "author_login": "YosefHayim",
          "committed_at": "2026-07-07T03:59:34Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "9b5ba2747b53521140c2455a213dae59a30a0b1c",
          "body": null,
          "is_bot": false,
          "headline": "docs: sync generated launch docs",
          "author_name": "YosefHayim",
          "author_login": "YosefHayim",
          "committed_at": "2026-07-07T01:09:28Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "7fd9b2b80f4c6471b78052a52c6d9ecc397bf572",
          "body": null,
          "is_bot": false,
          "headline": "docs: refresh README feature map",
          "author_name": "YosefHayim",
          "author_login": "YosefHayim",
          "committed_at": "2026-07-07T01:07:18Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "60ed76bd9630a722b58cfc7ab5525914a568ed8d",
          "body": "- Replace npm/package-lock.json with pnpm/pnpm-lock.yaml\n- Add packageManager field to package.json\n- Update scripts: npm run → pnpm, npx → pnpm exec\n- Workflows: add pnpm/action-setup@v4, cache: pnpm, pnpm install --frozen-lockfile",
          "is_bot": false,
          "headline": "chore: migrate to pnpm, update CI workflows",
          "author_name": "YosefHayim",
          "author_login": "YosefHayim",
          "committed_at": "2026-07-04T21:01:03Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "b7adf9ec48c6f31dc1e4e7182440c4ce082e6be1",
          "body": null,
          "is_bot": false,
          "headline": "chore: remove obsolete dev script (moved to scripts/dev/, gitignored)",
          "author_name": "YosefHayim",
          "author_login": "YosefHayim",
          "committed_at": "2026-07-04T19:57:02Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "a6ad9925317b63560adba136c1e023ca1b54f864",
          "body": "…k, report-failure, ci)\n\nSynced from the canonical dufflebag/alg workflow set. Each workflow is\nsingle-purpose and reusable (workflow_call). ci.yml orchestrates them and\ngates merges via the CI Gate job.",
          "is_bot": false,
          "headline": "ci: add missing workflow templates (biome, build, e2e, test, typechec…",
          "author_name": "YosefHayim",
          "author_login": "YosefHayim",
          "committed_at": "2026-07-04T19:47:28Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "6e0ae15e087463eec8e56e54c3c61aa98884d027",
          "body": "- Move preview-wordmark.ts to scripts/dev/\n- Document scripts/dev/ convention in CODE-STYLE.md\n- Add scripts/dev/ to .gitignore",
          "is_bot": false,
          "headline": "chore: organize dev scripts into scripts/dev/ (gitignored)",
          "author_name": "YosefHayim",
          "author_login": "YosefHayim",
          "committed_at": "2026-07-04T14:02:23Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "97bb77c4bd8f88eab705c50dbbfe82d07f02a238",
          "body": null,
          "is_bot": false,
          "headline": "release: v0.32.4",
          "author_name": "YosefHayim",
          "author_login": "YosefHayim",
          "committed_at": "2026-07-02T17:44:12Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "8e23475d1e09f7795ffe529bb5922af799673505",
          "body": "…the build path (#291, #292) (#293)\n\nfindBundleId resolved the wrong App ID for multi-target apps: Apple's filter[identifier]\nis a substring match, so a query for com.acme.app also returned com.acme.app.widget and\ndata[0] could be the widget. Select the exact identifier and raise the limit off 1. Th\n[…]\n decode grades as current so reuse stands (#292).\n\n7 unit tests; README/llms/commands test-count badge regenerated (1967 -> 1974).\n\nCo-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix(signing): exact App ID resolution + regenerate stale profiles on …",
          "author_name": "YosefHayim",
          "author_login": "YosefHayim",
          "committed_at": "2026-07-02T17:43:38Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "f77f4ae633b683b256aec1df703ef806cdd52470",
          "body": "…rget archives (#289) (#290)\n\nAfter #262 dropped the clobbering global PROVISIONING_PROFILE_SPECIFIER for\nmulti-target apps, nothing supplied each target its profile, so an app with an\nembedded extension (widget) failed the archive at exit 65 — \"requires a\nprovisioning profile — Select a provisionin\n[…]\n.ts: buildXcargs doc points at the writer.\n- Regenerated the README/llms/commands test-count badge (docs:gen) for the 8 new tests.\n\nCo-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix(build): stamp per-target manual signing into pbxproj for multi-ta…",
          "author_name": "YosefHayim",
          "author_login": "YosefHayim",
          "committed_at": "2026-07-02T17:28:46Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "dc64c09636302e85ccfc78893e3e91fb3b3f1aba",
          "body": null,
          "is_bot": false,
          "headline": "release: v0.32.3",
          "author_name": "YosefHayim",
          "author_login": "YosefHayim",
          "committed_at": "2026-07-01T23:40:18Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "8e569ae474669732d3ee1d7a3a6afc6019f52689",
          "body": "Fold the three hand-synced config artifacts — the TypeScript interfaces, the\nhand-rolled JSON-Schema validator, and the generated schema — into one zod\nschema per shape, so they can no longer drift.\n\n- The config type tree (app/catalog/storeSurface/remote/config) is now zod\n  schemas; every exported\n[…]\ne is introduced. Age rating stays the open `string | boolean`.\n- Drop the now-unused `ts-json-schema-generator` devDep; add `zod`.\n\nCo-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "migration: adopt zod v4 as the config SSOT (ADR 0008) (#274) (#288)",
          "author_name": "YosefHayim",
          "author_login": "YosefHayim",
          "committed_at": "2026-07-01T23:38:48Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "7ac4a9d198d2cad4b06b70ddd6e5b16d641b91f8",
          "body": "…76) (#287)\n\nCompletes the CODE-STYLE 'Never' enforcement (noDefaultExport was already error):\n\n- noNonNullAssertion -> error for production src/ (already 0 violations there, so the guarantee is locked). A scoped biome.json override keeps test files at warn; clearing those 142 test assertions is tra\n[…]\nrker-pool lane, retry backoff), each annotated with a justified biome-ignore. Behavior-preserving — none converted to Promise.all.\n\nCo-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "chore(lint): promote noNonNullAssertion + noAwaitInLoops to error (#2…",
          "author_name": "YosefHayim",
          "author_login": "YosefHayim",
          "committed_at": "2026-07-01T22:49:07Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "40dbb2567b3cf76c0cc963bf6702c481a6069864",
          "body": "… archives (#262) (#285)\n\nA command-line PROVISIONING_PROFILE_SPECIFIER applies to every target, so pinning the main app's profile clobbers an embedded app-extension bundle (its app-id differs) and fails the archive with exit 65 before export. Drop the global specifier when SigningAssets.extensionPr\n[…]\n via exportOptionsPlist. The remote path is single-target-only by construction (it uploads one profile) — documented, not touched.\n\nCo-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix(build): drop clobbering global profile specifier for multi-target…",
          "author_name": "YosefHayim",
          "author_login": "YosefHayim",
          "committed_at": "2026-07-01T22:33:21Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "f4a3242c786dc645b736772e5afdcd4e6ae4b4df",
          "body": "Split the monolithic CI check into reusable workflow_call legs\n(lint/typecheck/docs/test/build/e2e) composed by ci.yml, with a shared\ncached-install composite action (.github/actions/setup-node-cached), an\naggregated CI Gate status check, and report-failure that files a ci-failure\nissue when main go\n[…]\nage, mirroring *.testkit.ts.\n\nRationale recorded in ADR 0009 (reusable CI + report-failure) and ADR 0010\n(built-CLI e2e, not MSW).\n\nCo-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "ci: reusable single-purpose workflows + built-CLI e2e (#282) (#283)",
          "author_name": "YosefHayim",
          "author_login": "YosefHayim",
          "committed_at": "2026-07-01T22:14:58Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "396a7399bd7ce657e96bfecb1f0dc6f6701ba587",
          "body": null,
          "is_bot": false,
          "headline": "release: v0.32.0",
          "author_name": "YosefHayim",
          "author_login": "YosefHayim",
          "committed_at": "2026-07-01T18:48:41Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "c2e1aa60a1a24ee8c42a1a81b28fdf153f15cce0",
          "body": "…nsole.* (#273) (#281)\n\nAdds the plain-line seam primitive `Logger.line(message)` (a glyph-free `console.log`\npassthrough) and routes every raw `console.*` in the CLI through the logger, so the\nlogger is the single owner of content output.\n\n- Logger.line: the one owner of raw content output — a comm\n[…]\nentically; the content\nflow goes through log.line (=== console.log). Gate green: typecheck 0 · lint 0 errors ·\n1968 tests · build.\n\nCo-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "migration: route all CLI output through the logger seam — kill raw co…",
          "author_name": "YosefHayim",
          "author_login": "YosefHayim",
          "committed_at": "2026-07-01T18:43:03Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "9fa8bdec178c405e67cc38558021ed2cc90680cf",
          "body": "…el (#280)\n\n* migration: fold the 14 per-feature types.ts into the core/types/ barrel (#272)\n\nEvery exported domain shape now lives in a src/core/types/*.ts module re-exported by\nthe src/core/types.ts barrel and imported everywhere as `../core/types.js`. The 14\nper-feature `types.ts` modules are gon\n[…]\nhe\nrest of the codebase uses. No behavior change.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>\n\n---------\n\nCo-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "migration: fold the 14 per-feature types.ts into the core/types/ barr…",
          "author_name": "YosefHayim",
          "author_login": "YosefHayim",
          "committed_at": "2026-07-01T18:39:29Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "a8368a79e1e1ee1b2584b71e4f8e211e99c8dd23",
          "body": "…-loop cleanups) (#279)\n\n* migration: promote noDefaultExport to Biome error; annotate await-loops (#276)\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>\n\n* chore(biome): disable useImportExtensions — it fights NodeNext\n\nUnder module/moduleResolution \"NodeNext\" with real emit, \n[…]\n noise here; turn it off. Warnings: 5204 -> 3442.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>\n\n---------\n\nCo-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "migration: promote noDefaultExport to Biome error (+ non-null / await…",
          "author_name": "YosefHayim",
          "author_login": "YosefHayim",
          "committed_at": "2026-07-01T18:31:23Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "893db05bffe42387bb1758467a536f8765abb7be",
          "body": "Co-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "migration: consolidate shared test fakes into src/testkit/ (#275) (#278)",
          "author_name": "YosefHayim",
          "author_login": "YosefHayim",
          "committed_at": "2026-07-01T18:31:06Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "b9d6ac9460d91262ca570bd8f27d960d718b8274",
          "body": "… (#277)\n\nCo-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "docs: add CODE-STYLE.md style SSOT and refresh AGENTS.md rules digest…",
          "author_name": "YosefHayim",
          "author_login": "YosefHayim",
          "committed_at": "2026-07-01T18:30:43Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "d78b33d4aea64995f214a732f52d25e8a60128db",
          "body": null,
          "is_bot": false,
          "headline": "release: v0.31.2",
          "author_name": "YosefHayim",
          "author_login": "YosefHayim",
          "committed_at": "2026-06-30T09:57:48Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "f9fd6069acbde20d3d5fee949f8db1f4f800a0d7",
          "body": "Co-authored-by: Cursor <cursoragent@cursor.com>",
          "is_bot": false,
          "headline": "docs: regenerate badges after UTF-8 locale tests",
          "author_name": "YosefHayim",
          "author_login": "YosefHayim",
          "committed_at": "2026-06-30T09:57:44Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "43e13dea0f346c796c457a8a5e2b61607e86aca7",
          "body": null,
          "is_bot": false,
          "headline": "release: v0.31.1 — force UTF-8 locale for fastlane subprocesses",
          "author_name": "YosefHayim",
          "author_login": "YosefHayim",
          "committed_at": "2026-06-30T09:56:11Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "3013cd7a5b7ab9f192d2ad7d30f7545235c21e74",
          "body": "macOS shells defaulting to US-ASCII break xcpretty/gym with non-ASCII\nXcode output. Launch now sets LANG/LC_ALL on every child process and\ndoctor reports whether the interactive shell is already UTF-8.\n\nCo-authored-by: Cursor <cursoragent@cursor.com>",
          "is_bot": false,
          "headline": "fix(exec): force UTF-8 locale for fastlane subprocesses",
          "author_name": "YosefHayim",
          "author_login": "YosefHayim",
          "committed_at": "2026-06-30T09:54:58Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "b6dc2e5e331c6a079d7117368692f89885cf823c",
          "body": "…(#271)\n\n* refactor(apple): extract ASC resource type wall into ascResources.ts\n\nascClient.ts was 5,030 LOC: an 88-interface \"type wall\" of `*Resource`/\n`*Query`/enum shapes, one 190-method `AppStoreConnectClient` class over a\nsmall shared transport core, and its private mappers. The class can't mov\n[…]\nng still holds at the boundary it actually meant.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>\n\n---------\n\nCo-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "refactor(apple): extract ASC resource type wall into ascResources.ts …",
          "author_name": "YosefHayim",
          "author_login": "YosefHayim",
          "committed_at": "2026-06-28T21:33:09Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "314820a801a798838c1d4327a61894a913ec2575",
          "body": "…un (#270)\n\n* refactor(cli): dedup the readiness command family behind one shared run\n\n`audit`, `store doctor`, and `iap doctor` answer three distinct questions\n(submission / account / IAP readiness) but copy-pasted an identical ~20-line\nrun-flow: register probes → load config → build the read-only \n[…]\nhe live-stats badges for the\n+4 tests (docs:gen).\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>\n\n---------\n\nCo-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "refactor(cli): dedup the readiness command family behind one shared r…",
          "author_name": "YosefHayim",
          "author_login": "YosefHayim",
          "committed_at": "2026-06-28T20:28:31Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "f578cb851762ae589d92d53e1e8b9c027265fe50",
          "body": "feat(doctor): iOS signing preflight for App Groups + multi-target apps (#261)",
          "is_bot": false,
          "headline": "Merge pull request #269 from YosefHayim/feat/doctor-signing-preflight",
          "author_name": "YosefHayim",
          "author_login": "YosefHayim",
          "committed_at": "2026-06-28T15:38:33Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "04c783dbaeed28226d6b4bde5fe6d31ccfc2c218",
          "body": "Co-authored-by: Cursor <cursoragent@cursor.com>",
          "is_bot": false,
          "headline": "chore: merge main and regenerate docs after conflict resolution",
          "author_name": "YosefHayim",
          "author_login": "YosefHayim",
          "committed_at": "2026-06-28T15:36:49Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "14c18f696ac3aee17d20f1f9f4210ae8410e1920",
          "body": "fix(doctor): add --app flag for multi-app preflight checks",
          "is_bot": false,
          "headline": "Merge pull request #268 from YosefHayim/fix/doctor-app-flag",
          "author_name": "YosefHayim",
          "author_login": "YosefHayim",
          "committed_at": "2026-06-28T15:35:00Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "eaef013c3882e0a53d50b602a038964173f96974",
          "body": "…et apps (#261)\n\nExtract shared signing readiness checks from the build pipeline and run them in `launch doctor` so widget/extension App ID gaps and App Group portal steps surface before a long compile.\n\nCo-authored-by: Cursor <cursoragent@cursor.com>",
          "is_bot": false,
          "headline": "feat(doctor): add iOS signing preflight for App Groups and multi-targ…",
          "author_name": "YosefHayim",
          "author_login": "YosefHayim",
          "committed_at": "2026-06-28T15:34:20Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "528fd7a0d31f55360ecff4a090b7fbf23fb7ea69",
          "body": "Closes #266. Scope launch doctor to selected app handles so monorepos can\nrun toolchain and config checks for one app without evaluating every\nentry in launch.config.ts. Mirrors store doctor and build flag behavior.\n\nCo-authored-by: Cursor <cursoragent@cursor.com>",
          "is_bot": false,
          "headline": "fix(doctor): add --app flag for multi-app preflight checks",
          "author_name": "YosefHayim",
          "author_login": "YosefHayim",
          "committed_at": "2026-06-28T15:33:16Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "866fd653a13f6274f9295b67b8d935e03958d127",
          "body": "…ing safe slice (#267)\n\nRollup since v0.30.0:\n- feat(build): per-run `--size-budget`/`--budget` override + wizard step (#260, #263)\n- fix(apple): multi-target iOS signing safe slice — pbxproj target discovery,\n  stale-profile capability-diff regenerate, `creds setup --app`, build preflight\n  (#261 s\n[…]\ne, #264; archive-vector flip tracked in #262)\n- chore: finish the eslint+prettier → biome migration; repair the red CI gate (#265)\n\nCo-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "chore(release): v0.31.0 — per-run size budget + multi-target iOS sign…",
          "author_name": "YosefHayim",
          "author_login": "YosefHayim",
          "committed_at": "2026-06-28T15:30:53Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "fa20ff6a09cfccd40e2d33c5b9e78458e6fa8552",
          "body": "…-profile regen, creds --app, preflight (#261) (#264)\n\nThe CI-provable safe slice of #261. Does NOT touch the archive-step signing\nvector in buildFlags.ts (the exit-65→success per-target flip is #262); the\nno-extension iOS arg vector stays byte-identical (its pinned test is untouched).\n\n- creds setu\n[…]\ngen, matching the existing src/core/asc/schema.ts\nexclusion) so lint and docs:check no longer conflict on it.\n\nRefs #261\nRefs #262\n\nCo-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix(apple): multi-target signing safe slice — target discovery, stale…",
          "author_name": "YosefHayim",
          "author_login": "YosefHayim",
          "committed_at": "2026-06-28T15:17:21Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "27b0df238103034ec098a24a1be8283e044b92ee",
          "body": "Let a single build override the soft size budget without editing\nlaunch.config.ts. A new optional `BuildRunOptions.sizeBudgetMB` is\nresolved at the upload gate by `resolveSizeBudgetMB(options, profile)`\n— one shared helper for all three `confirmUpload` sites (local iOS,\nlocal Android, EAS handoff) w\n[…]\ncover the resolve order, CLI/wizard validation, and the\nprofile-default fallback. Docs regenerated for the new flags.\n\nCloses #260\n\nCo-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat(build): per-run size-budget override (#260) (#263)",
          "author_name": "YosefHayim",
          "author_login": "YosefHayim",
          "committed_at": "2026-06-28T15:12:53Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "6d08a2c06242e519fd6c2b342f19cfe251691a03",
          "body": "… (#265)\n\nThe biome migration (0be8b2d) replaced eslint+prettier as the source\nformatter with biome, but left the toolchain half-wired, which turned\nCI red on main:\n\n  - ci.yml still ran `npm run format:check`, a script 0be8b2d deleted\n    → \"Missing script\" → CI failed before tests on every push/PR\n[…]\ne reality;\n    regenerated docs reflect the prettier-free generator.\n\nGate green: typecheck, lint, test (1903), build, docs:check.\n\nCo-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "chore: finish the biome migration — drop prettier, repair the CI gate…",
          "author_name": "YosefHayim",
          "author_login": "YosefHayim",
          "committed_at": "2026-06-28T15:02:43Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "0be8b2d50ab83d51b49e0a70dd93835441d5f6c0",
          "body": "Co-authored-by: Cursor <cursoragent@cursor.com>",
          "is_bot": false,
          "headline": "chore: apply biome format and lint fixes",
          "author_name": "YosefHayim",
          "author_login": "YosefHayim",
          "committed_at": "2026-06-27T21:25:31Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "c029b9adff9a8e575f578305f24c3d3a50334949",
          "body": "…amily (#259)\n\nMinor release rolling up everything merged since v0.29.1:\n- #255 route every submit/store path through the config-aware storage resolver\n- #256 env/keychain reference for the App Review demoAccountPassword\n- #257 decouple the build platform from the submit store (ADR 0006)\n- #258 tvOS\n[…]\nly package.json and\npackage-lock.json change here; the tag created on the squashed commit\nfires the OIDC trusted-publish workflow.\n\nCo-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "chore(release): v0.30.0 — platform/store split + the Apple platform f…",
          "author_name": "YosefHayim",
          "author_login": "YosefHayim",
          "committed_at": "2026-06-27T17:12:54Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "6c911fab10b5a9effc736733d6b5d823e0ffc016",
          "body": "… (#258)\n\nWiden Platform to the four Apple build targets behind one pure vocabulary\nmodule (src/core/platform.ts): isApplePlatform, the two ASC mappers\n(toAscPlatform vs toBundleIdPlatform), profile-type mappers (visionOS reuses\nIOS_APP_STORE; macOS has no ad-hoc), and gymDestination (iOS -> undefin\n[…]\nbuild:resign are explicitly gated (not silently routed to\niOS). Enum/profile mappings verified against Apple's bundled ASC OpenAPI spec.\n\n🤖 Generated with [Claude Code](https://claude.com/claude-code)",
          "is_bot": false,
          "headline": "feat(apple): tvOS, macOS, and visionOS as first-class build platforms…",
          "author_name": "YosefHayim",
          "author_login": "YosefHayim",
          "committed_at": "2026-06-27T17:03:20Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "f3abbde921c69a7d0fbe04c47dc5d9f43ce51308",
          "body": "…R 0006) (#257)\n\n`config.submit` was a single string mapped 1:1 to a Submitter, welding the build platform\n(ios/android) to the store. Grow it to `string | SubmitByPlatform` so one build can fan out to\nseveral stores, resolving to a store LIST per platform — the foundation that alternative Android\ns\n[…]\n0006 is the local decision record)\n\nThe `Submitter` interface is untouched, so each new store stays a pure add-a-provider drop-in.\n\nCo-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "refactor(core): decouple the build platform from the submit store (AD…",
          "author_name": "YosefHayim",
          "author_login": "YosefHayim",
          "committed_at": "2026-06-27T14:52:47Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "f10f8c5041d858c70f1c8bf9d9ccc124da92f598",
          "body": "…ccountPassword (#249) (#256)\n\n`release.config.json`'s `reviewDetails.demoAccountPassword` could only be a plaintext literal in a\nrepo-committed file. Allow it to name an indirection resolved at submit time instead, per \"secrets\nnever touch the repo\":\n\n- `env:VAR_NAME`     → read from the environmen\n[…]\nnever reads, holds, or renders\nthe secret (the plan still shows the field by name only). Schema doc + generated config.md updated.\n\nCo-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat(core): accept an env/keychain reference for the App Review demoA…",
          "author_name": "YosefHayim",
          "author_login": "YosefHayim",
          "committed_at": "2026-06-27T14:48:42Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "e5df583b0468095f2135d717514d327124642680",
          "body": "…rage resolver (#251) (#255)\n\nThe release-train engine and `launch release` looked storage up through the registry\n(`getStorageProvider(config.storage)`), where only the default-bound `local` singleton is\nregistered — so an Android submit with `s3`/`supabase` threw \"Unknown storage provider\", and a\n\n[…]\nreArtifactPresent` (P2)\n- extract `ensureArtifactPresent` into core/storage.ts so `launch release` and the train guard identically\n\nCo-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix(core): route every submit/store path through the config-aware sto…",
          "author_name": "YosefHayim",
          "author_login": "YosefHayim",
          "committed_at": "2026-06-27T14:21:39Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "b7c9c8fac283cf2230c8099f74da799a6383c5f5",
          "body": "Behavior-preserving release. Every change since v0.29.0 is an internal\nrefactor that deepens a shallow module behind its existing interface —\nno new commands, flags, or behavior, so this is a drop-in upgrade.\n\n- #247 consolidate reconciler scaffolding into shared store-sync vocabulary\n- #248 split t\n[…]\nscClient behind typed JSON:API engine helpers\n- #253 name the build-transport seam and extract fork selection into a pure resolver\n\nCo-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "chore(release): v0.29.1 — architecture-deepening rollup (#254)",
          "author_name": "YosefHayim",
          "author_login": "YosefHayim",
          "committed_at": "2026-06-25T11:36:37Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "a072a6cad93170ff4cb6a3b71442cbb56cc00d1b",
          "body": "…ion into a pure resolver (#253)\n\nThe build → submit flow forks three ways — the local Mac spine, the remote-Mac\npipeline, and the EAS handoff — and the three implementations already share the\nsignature (PreparedBuild, BuildRunOptions) => Promise<void>. That contract was\nimplicit, and the choice bet\n[…]\nasync function` to `export const … : BuildTransport = async`,\nwhich is runtime-identical and leaves their named imports unchanged.\n\nCo-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "refactor(core): name the build-transport seam and extract fork select…",
          "author_name": "YosefHayim",
          "author_login": "YosefHayim",
          "committed_at": "2026-06-25T11:25:03Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "8c5ef6455de96708be4bfe3e47083a102bf1bed7",
          "body": "…s (#252)\n\n* refactor(apple): deepen ascClient behind typed JSON:API engine helpers\n\nThe App Store Connect client already had its HTTP/auth/retry/pagination behind\n`request`/`requestAll`, but every method still hand-rolled the JSON:API envelope\nand the \"404 means absent\" idiom. Consolidate that repe\n[…]\nus. Addresses CodeAnt's test-latency nit on #252.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>\n\n---------\n\nCo-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "refactor(apple): deepen ascClient behind typed JSON:API engine helper…",
          "author_name": "YosefHayim",
          "author_login": "YosefHayim",
          "committed_at": "2026-06-25T11:07:37Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "0f21a5ebb8d98328749341c2f96a3de389c60e19",
          "body": "…the CLI seam into core (#250)\n\nThe `src/cli` layer owns thin commander wiring; the domain lives in `src/core`\n(AGENTS.md). Two pieces of real domain logic had leaked into command files —\nmove them behind core seams, behavior-preserving:\n\n- `core/releaseInputs.ts` (new) — the four pure release-input\n[…]\nline creds.ts account-orchestration is left for a follow-up\nissue; it's I/O- and prompt-heavy and wants its own tested extraction.\n\nCo-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "refactor(cli): move release-input + train-engine domain logic out of …",
          "author_name": "YosefHayim",
          "author_login": "YosefHayim",
          "committed_at": "2026-06-25T10:11:29Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "e3335ad97ae1b1890ab9bec470f81517aa20fb30",
          "body": "…ules behind barrels (#248)\n\nSplits the two longest single-file slabs in `src/core` into co-located modules behind a re-export barrel, so `import … from \"../core/types.js\"` and `\"./commandDocs.js\"` stay unchanged for every caller.\n\n- **types.ts** (1695 lines) → `types/` barrel (`export type *`): 9 c\n[…]\ncal). Addressed cubic's review (moved `{@link import()}` paths, credentials-header secret-accuracy, `spliceRegion` end-fence hardening).\n\n🤖 Generated with [Claude Code](https://claude.com/claude-code)",
          "is_bot": false,
          "headline": "refactor(core): split types.ts and commandDocs.ts into co-located mod…",
          "author_name": "YosefHayim",
          "author_login": "YosefHayim",
          "committed_at": "2026-06-25T09:23:12Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "ed9e67ff780a25a2dff98c08ed9279def5d753fa",
          "body": "…sync vocabulary (#247)\n\nThe per-feature App Store Connect / Play reconcilers had each grown their own\nverbatim copies of the same scaffolding helpers — `plan`, `skip`, the\n`ReconcileContext` interface, the \"no app record\" error, and the\n`error instanceof Error ? … : String(error)` narrowing — one s\n[…]\nrMessage.test.ts`; `storeSync.test.ts` extended for `plan`,\n`appRecordMissing`, `appRecordNotFound`, and the non-Error `act` path.\n\nCo-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "refactor(core): consolidate reconciler scaffolding into shared store-…",
          "author_name": "YosefHayim",
          "author_login": "YosefHayim",
          "committed_at": "2026-06-24T00:22:08Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "5655fef30ae26c9aed3d99266f69e96010fef42d",
          "body": "Cuts v0.29.0 (notify transitions #239, play-reports vitals #240, play-pricing localize #242, Play catalog restore #244, ai screenshots #243, glossary catch-up #245) and renders the README FAQ as per-question collapsible <details> (English README only; llms.txt stays flat).",
          "is_bot": false,
          "headline": "chore(release): v0.29.0 + collapsible README FAQ (#246)",
          "author_name": "YosefHayim",
          "author_login": "YosefHayim",
          "committed_at": "2026-06-22T23:14:03Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "d0063e29e206bd11385e5b4bdf15ee7aeadf2c31",
          "body": "…launch ai screenshots` (#243)\n\n* feat(screenshots): canonical store dimension specs + hard-gate, and `launch ai screenshots`\n\nLaunch held no screenshot dimension truth — `KNOWN_DISPLAY_TYPES` is labels-only\nand the ascClient width/height is read back off already-uploaded shots. This adds\nthe canoni\n[…]\n- Re-sync the README live-stats test-count badge.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>\n\n---------\n\nCo-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat(screenshots): canonical store dimension specs + hard-gate, and `…",
          "author_name": "YosefHayim",
          "author_login": "YosefHayim",
          "committed_at": "2026-06-22T17:45:48Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "b3e7e3d1d1a1df250977f171cb01ab65e47724e6",
          "body": "…ncepts (#245)\n\nThe ubiquitous language froze around v0.13–v0.20; every store surface\nshipped since (App Clips, Game Center, in-app events, custom product\npages, PPO experiments, Wallet/Apple Pay ids, privacy/data-safety,\naccessibility labels, EU/DMA distribution, app availability, store\nreviews & r\n[…]\nling\n(dashboard, mcp, ci, agents, artifactDir, diagnose, secret) is\ndeliberately excluded. Docs-only: no runtime behavior changes.\n\nCo-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "docs(glossary): catch up language.md + glossary on 20 store-domain co…",
          "author_name": "YosefHayim",
          "author_login": "YosefHayim",
          "committed_at": "2026-06-22T17:40:59Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "3423ab8c7f91dab82a65049a7a0e71f511acc716",
          "body": "`launch snapshot restore` now pushes a saved Play catalog back to live,\nnot just the App Store listing. Both Play sources gain a `restore` pass\nthat inverts their capture and reconciles additively via the same\n`reconcilePlayProducts` / `reconcilePlaySubscriptions` `launch sync` uses\n— create-or-patc\n[…]\nchase's current price/territory, so its capture can't be\nmade config-complete. Covered by new restore test suites with Play fakes.\n\nCo-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat(snapshot): config-complete Play catalog restore (#236) (#244)",
          "author_name": "YosefHayim",
          "author_login": "YosefHayim",
          "committed_at": "2026-06-22T17:39:34Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "ee4688bb0250521c1cf7ea257634d176af97e873",
          "body": "…ices (#241) (#242)\n\nGiven one base price, call the Play Developer API's\n`monetization.convertRegionPrices` and print Google's recommended local\nprice for every Play market (plus the USD/EUR fallback for markets with no\nlocal currency). `--json` for scripting.\n\nAdvisory and read-only: it computes a \n[…]\ny),\n  region→price table render, --json.\n- Tests for price parsing/formatting + client fetch sequence/normalization.\n\nCloses #241.\n\nCo-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat(cli): `launch play-pricing localize` — recommended per-region pr…",
          "author_name": "YosefHayim",
          "author_login": "YosefHayim",
          "committed_at": "2026-06-22T16:39:22Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "0c7eb7cec25b13051fcfbe2271cc0d0040e96dbc",
          "body": "…a the Play Developer Reporting API (#226) (#240)\n\n* feat(cli): `launch play-reports vitals` — Android crash/ANR vitals via the Play Developer Reporting API (#226)\n\nAdd `launch play-reports vitals` reading Android quality vitals (crash rate,\nANR rate) from the Play Developer Reporting API — the Andr\n[…]\ne exception. Pure relocation; no\nbehavior change.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>\n\n---------\n\nCo-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat(cli): `launch play-reports vitals` — Android crash/ANR vitals vi…",
          "author_name": "YosefHayim",
          "author_login": "YosefHayim",
          "committed_at": "2026-06-22T12:00:16Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "678a8d7e72efdae37c422f9d68238aeb4a2a3d6e",
          "body": "…nsitions (#225) (#239)\n\n* feat(notify): fire notifications on review-state & phased-rollout transitions (#225)\n\nExtend the notification hook beyond build/submit completion to the milestones a\ndev actually waits on — Apple's review verdict and a phased rollout's day-N\nadvance — so they can walk away\n[…]\nn)` instead, and cover it with a regression test.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>\n\n---------\n\nCo-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat(notify): fire notifications on review-state & phased-rollout tra…",
          "author_name": "YosefHayim",
          "author_login": "YosefHayim",
          "committed_at": "2026-06-21T10:58:51Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "b3a6b0b037f04f9dec5a6da68097ce941bfd32a1",
          "body": "Rollup release covering the feature surface landed since v0.27.0:\nsnapshot restore + App ID capabilities capture & housekeeping (#191),\nplan/drift offers & screenshots surface planners (#140), shell completions\n(#232), testflight feedback (#234), and the maximalist agent skills +\ncollapsible README features (#237).\n\nCo-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "chore(release): v0.28.0 (#238)",
          "author_name": "YosefHayim",
          "author_login": "YosefHayim",
          "committed_at": "2026-06-21T10:18:41Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "b5b232c1a20f3a8b11928dd960d1dc3acf5d72a6",
          "body": "…ible README features (#237)\n\nSeven new consumer skills cover the command surface shipped since the\noriginal six (verify, plan, snapshot, migrate, insights, ai-listing,\nagent-access), each with CLI-validated steps; plus base-context guardrail\nupdates, a release-train step on launch-release, and plan\n[…]\n Features` now renders each group as a default-collapsed\n`<details>` (English README only; `llms.txt` stays a flat numbered list).\n\nCo-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "docs(agents): maximalist skills for the new feature surface + collaps…",
          "author_name": "YosefHayim",
          "author_login": "YosefHayim",
          "committed_at": "2026-06-21T10:14:14Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "0edbe8d4e73d289b6be3abd2acd803b920dd17c2",
          "body": "… & screenshot feedback (#234)\n\n* feat(testflight): `launch testflight feedback` — surface tester crash & screenshot feedback (#224)\n\nAdd `launch testflight feedback [--build <ver>] [--type crash|screenshot] [--out <dir>] [--json] [-a <app>]`\nto list TestFlight beta feedback — crash and screenshot s\n[…]\nr-strip ids produce distinct,\nin-directory files.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>\n\n---------\n\nCo-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat(testflight): `launch testflight feedback` — surface tester crash…",
          "author_name": "YosefHayim",
          "author_login": "YosefHayim",
          "committed_at": "2026-06-21T10:06:32Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "e33efcf16acbad8d109a379791fd73bdde36044b",
          "body": "…#191) (#235)\n\nThree deliverables on the snapshot layer:\n\n- restore: `launch snapshot restore <name>` pushes a saved capture back to\n  live, gated behind --yes (dry-run plan by default). Wired as an optional\n  per-source capability — App Store listing (config-complete capture)\n  implements it via th\n[…]\ne needs their capture enriched first. Restore is wired as\nan optional per-source capability so they gain it without an API change.\n\nCo-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat(snapshot): restore, App ID capabilities capture & housekeeping (…",
          "author_name": "YosefHayim",
          "author_login": "YosefHayim",
          "committed_at": "2026-06-21T09:51:54Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "6f748ff5b0cb43ad3b9480667f9252c84219a18c",
          "body": "…ldable plan/drift surfaces (#140) (#233)\n\nWire the last two diffable App Store surfaces into `launch plan` / `launch drift`:\n\n- **offers** — wraps `reconcileOffers` in dry-run over the typed `products[bundleId]`\n  catalog. Additive (Apple offer terms are immutable, so the reconciler only creates).\n\n[…]\ne config and no reconciler, so it\nhas no diff substrate. Making in-app events plannable would mean a new events config section\nplus a reconciler — a separate feature, worth its own issue.\n\nCloses #140",
          "is_bot": false,
          "headline": "feat(plan): offers & screenshots surface planners — completes the bui…",
          "author_name": "YosefHayim",
          "author_login": "YosefHayim",
          "committed_at": "2026-06-21T08:59:31Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "c694658e75eadb17929e957fca786d36da7a1f52",
          "body": "…th dynamic completion (#232)\n\n* feat(cli): `launch completion` — shell completions (bash/zsh/fish) with dynamic completion\n\nAdd `launch completion <bash|zsh|fish>` (prints the script), `launch completion\ninstall` (idempotently wires it into the shell rc via a fenced managed block,\nor prints the man\n[…]\n) —\nonly the shared Shell enum lives in types.ts.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>\n\n---------\n\nCo-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat(cli): `launch completion` — shell completions (bash/zsh/fish) wi…",
          "author_name": "YosefHayim",
          "author_login": "YosefHayim",
          "committed_at": "2026-06-21T08:51:36Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "be7a07ecdafb3ea433d051a45f761923c7cc924f",
          "body": "…account, profile entitlements, screenshots (#188) (#231)\n\nAdd the remaining submit-blocking readiness probes behind `launch audit`,\neach a read-only check that grades live App Store Connect state against a\nsubmission prerequisite and degrades to a warn (never a false blocker) when\nthe app record or\n[…]\nr `submit` (and their domain tag), so `launch audit` picks\nthem up via the existing category selector with no orchestrator change.\n\nCo-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat(audit): deferred pre-submit probes — account-deletion URL, demo …",
          "author_name": "YosefHayim",
          "author_login": "YosefHayim",
          "committed_at": "2026-06-20T18:50:53Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "55e657be8618a4321e7fca083c8d7fe241f78e07",
          "body": "…ofiles; guide the App Group portal step (#221) (#229)\n\nApps with embedded extensions (WidgetKit, share, notification-service\ntargets) need their own App ID + App Store profile per target, all signed\nby the team's single distribution certificate. Without per-target profiles\nxcodebuild falls back to \n[…]\n5), since the JWT\n  API can't create or assign group containers\n- setup ios report: declared-extension provisioning status section\n\nCo-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat(creds/build): provision app-extension bundle IDs + per-target pr…",
          "author_name": "YosefHayim",
          "author_login": "YosefHayim",
          "committed_at": "2026-06-20T13:27:51Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "187cfe4608bac0c5273c01f6878b201402d895f0",
          "body": "…ole / TestFlight / live listing (#230)\n\n* feat(cli): `launch open [target]` — deep-link to App Store Connect / Play Console / TestFlight / live listing (#223)\n\nAdd `launch open [target]` to jump from a read-only finding to the irreducible\nUI step that fixes it. Targets: asc | play | testflight | li\n[…]\nemoved as the CLI no longer holds testable logic.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>\n\n---------\n\nCo-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat(cli): `launch open` — deep-link to App Store Connect / Play Cons…",
          "author_name": "YosefHayim",
          "author_login": "YosefHayim",
          "committed_at": "2026-06-20T13:17:31Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "15167a65a7c45545bf8ed96007647f9288683140",
          "body": "…migrate, mcp, insights, ai listing, privacy, dashboard, artifactDir (#220)\n\nBundles all 25 commits since v0.26.1 into one minor release. New surfaces:\nlaunch store doctor / audit / iap doctor, launch snapshot, launch migrate\neas|fastlane, launch config schema|validate|docs, launch mcp (read + write\n[…]\n insights, launch ai listing, launch privacy scan,\nlaunch dashboard, and the configurable in-repo `artifactDir` (auto-gitignored).\n\nCo-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "chore(release): v0.27.0 — store doctor, audit, iap doctor, snapshot, …",
          "author_name": "YosefHayim",
          "author_login": "YosefHayim",
          "committed_at": "2026-06-18T17:06:35Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "ebaa878ac0c72b231c99e3a9c81102f680472a4d",
          "body": "…output + auto-gitignore (#219)\n\nLet users choose where the `local` storage provider writes build binaries\ninstead of always burying them in the global `~/.launch/artifacts`. `launch\ninit` and the no-args wizard now scaffold an in-repo `./.launch/artifacts` and\nauto-add it to `.gitignore`, so artifa\n[…]\n and a real-git\ngitignore suite (in-repo add, idempotency, broader-pattern respect, out-of-repo\nand non-repo no-ops).\n\nCloses #218\n\nCo-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat(config): `artifactDir` — configurable, in-repo-by-default build …",
          "author_name": "YosefHayim",
          "author_login": "YosefHayim",
          "committed_at": "2026-06-18T16:33:53Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "56e17e7b9cff7d31e35bd72e3b0cf2a2dce5c5f8",
          "body": "…er CLI state (#217)\n\nA tiny `node:http` server (no new dependency) serves one self-contained HTML\npage summarising everything readable from `launch.config.ts` + `~/.launch`:\ndiscovered apps, profiles, the provider wiring, Apple accounts, recent build\nartifacts, build-secret coordinates (names only \n[…]\ns first cut — they need ASC auth and belong on the confirmed\n`plan`/`reports` read path, not an always-on local page.\n\nCloses #177\n\nCo-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat(cli): `launch dashboard` — a strictly-local, read-only web UI ov…",
          "author_name": "YosefHayim",
          "author_login": "YosefHayim",
          "committed_at": "2026-06-18T16:30:08Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "e708a167cb3eb49e21a263cb9c5b4c06f16e8411",
          "body": "…eclarations (#175) (#214)\n\nAdd `launch privacy scan`: a read-only sweep that reconciles an app's actual\npermission/data surface against its declared iOS privacy manifest, catching the\nopaque, common rejection causes before App Review does.\n\nIt can't diff against the *published* App Privacy label or\n[…]\non`\nfor CI/agents. Tests cover the parsers, every reconcile rule, the exit codes, and\nthe renderer. Docs regenerated.\n\nCloses #175\n\nCo-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat(cli): `launch privacy scan` — reconcile permissions vs privacy d…",
          "author_name": "YosefHayim",
          "author_login": "YosefHayim",
          "committed_at": "2026-06-18T16:26:43Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "8b8fc4445f9085dc5508a8bc81aff3bae00311e4",
          "body": "…o store.config.json (#179) (#212)\n\nAdd `launch ai listing`: draft App Store / Play listing copy with a model and\nwrite it into the app's versioned `store.config.json`. It never touches a store —\nthe draft lands in the same file `launch metadata` reads, so the user reviews the\ndiff with `launch plan\n[…]\nidLocale, renderDraftPreview,\nbuildListingPrompt, parseDraftListing, and the no-API-key error path. Docs regenerated.\n\nCloses #179\n\nCo-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat(cli): `launch ai listing` — AI-drafted App Store / Play copy int…",
          "author_name": "YosefHayim",
          "author_login": "YosefHayim",
          "committed_at": "2026-06-18T16:23:14Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "e43228e57207ca3198551a8a6448520d40982cb1",
          "body": "…(#178) (#210)\n\nThe synthesis layer (Axis 4 of the differentiation roadmap) over the review\ndata Launch already pulls via `reviews` / `play-reviews` — no new data source.\n`launch insights` resolves the read-only ASC + Play clients once, pulls each\napp's reviews, normalizes them to a store-agnostic `\n[…]\n warning).\n\nAll numeric work + the renderer live in the pure `core/insights` aggregator,\nunit-tested without a network or account.\n\nCo-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat(insights): `launch insights` — aggregate rating & review trends …",
          "author_name": "YosefHayim",
          "author_login": "YosefHayim",
          "committed_at": "2026-06-18T16:19:11Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "b90cccab03033727a9f869e534ee41656b42bdd6",
          "body": "… offer codes (#189) (#216)\n\nAdds the three App Store Connect API-backed iap-doctor readiness probes that\nPR #213 (file-based code-reference + StoreKit config) does not cover:\n\n- apple-sandbox-testers (iap): warns when an account selling IAP has no sandbox\n  tester to test-buy the StoreKit flow befo\n[…]\ned iapReadiness scoping helpers. New probes auto-appear under\n`launch iap doctor` / `launch audit` through the readiness registry.\n\nCo-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat(iap-doctor): ASC-API deferred probes — sandbox testers, pricing,…",
          "author_name": "YosefHayim",
          "author_login": "YosefHayim",
          "committed_at": "2026-06-18T01:04:08Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "4825798e0108a2cc7304ee20051b28656a2867ea",
          "body": "Turn more of a fastlane setup into real Launch config instead of manual\nnotes, extending the existing tolerant line-scan parser (no new files):\n\n- Metadata import — read the `fastlane/metadata` (deliver) and\n  `fastlane/metadata/android` (supply) folders into `store.config.json`,\n  reusing storeConf\n[…]\nne formatter.\n\nStill deferred (noted in #195): Gymfile/Scanfile hints and multi-platform\n`for_platform`/`for_lane` Appfile blocks.\n\nCo-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat(migrate): deepen `launch migrate fastlane` coverage (#195) (#209)",
          "author_name": "YosefHayim",
          "author_login": "YosefHayim",
          "committed_at": "2026-06-18T00:59:26Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "a9935440ef00d899427357d56a73a266f5b96317",
          "body": "…nv, app facts (#193) (#211)\n\n`launch migrate eas` now carries over three pieces of an EAS setup it previously\ndropped, each as a non-secret report note or artifact:\n\n- **credentials.json** — when `credentialsSource: \"local\"`, surface the iOS cert /\n  provisioning-profile paths and the Android keyst\n[…]\nrationResult | Promise<MigrationResult>` and awaits the result —\n`migrateFastlane` stays sync and remains assignable.\n\nCloses #193\n\nCo-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat(migrate): deepen `migrate eas` — credentials.json, per-profile e…",
          "author_name": "YosefHayim",
          "author_login": "YosefHayim",
          "committed_at": "2026-06-18T00:14:40Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "2cb5eb2956acf00eb358cf5b1d2b6d00d22c19d6",
          "body": "… (#191) (#215)\n\nRicher snapshot coverage and a reversible-by-default `launch sync`:\n\n- New `apple-listing` snapshot source captures per-locale App Store listing\n  copy (app-level name/subtitle/privacy URL merged with version-level\n  description/keywords/whatsNew/…), keyed by locale. Read-only — reu\n[…]\n never touching a user's manually-named snapshots.\n\nDestructive `snapshot restore` stays deferred (issue remains open). Refs #191.\n\nCo-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat(snapshot): App Store listing surface + auto-snapshot before sync…",
          "author_name": "YosefHayim",
          "author_login": "YosefHayim",
          "committed_at": "2026-06-18T00:11:01Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "9e0704d0d7f6b85031ff286838bca117a3349afe",
          "body": "…eference + StoreKit config (#189) (#213)\n\nTwo new `iap`-tagged readiness probes, both purely local (no credentials, never\nskip) and advisory (`warn`, not a submission blocker):\n\n- **apple-iap-code-reference** — every product id declared in `launch.config.ts`\n  (one-off IAPs + every subscription acr\n[…]\n#189 probes (sandbox testers, pricing/\nterritory, offer verification) need new networked ASC readers and stay deferred.\n\nRefs #189\n\nCo-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat(iap-doctor): add the two file-based deferred IAP probes — code-r…",
          "author_name": "YosefHayim",
          "author_login": "YosefHayim",
          "committed_at": "2026-06-18T00:04:45Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "d4455c8d459e3dd5d9d195b80fe0a694d70473b5",
          "body": "…208)\n\nAll three are pure App Store Connect request-shape fixes in apple/ascClient.ts,\nindependent of config, that break `launch sync` against a live account with IAPs:\n\n- Bug 1: drop `limit=200` from the `bundleIdCapabilities` to-many related read —\n  Apple's related endpoint rejects `limit` (400);\n[…]\ntime IAP now prices successfully (bug 3), and the re-plan no longer\nsurfaces the price action (bug 2b detects it via the v2 path).\n\nCo-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix(apple): correct 3 ASC request-shape bugs in launch sync (#204) (#…",
          "author_name": "YosefHayim",
          "author_login": "YosefHayim",
          "committed_at": "2026-06-17T14:02:55Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "5799e15a65c26992077a51555d488e27dce85d7c",
          "body": "…(#187) (#207)\n\nFollow-up to #170. Adds the deferred Apple account-onboarding probe and the\nASC reader it needs.\n\n- `apple-agreements` probe (`account` + `submit`): an unsigned or expired\n  Apple Developer Program License Agreement, Paid Applications Agreement, or\n  its banking/tax forms 403s every \n[…]\nmandatory for all new apps, and `play-app-access` + `play-first-upload`\nalready cover the real Play account blockers.\n\nCloses #187\n\nCo-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat(store-doctor): Apple agreements / banking & tax readiness probe …",
          "author_name": "YosefHayim",
          "author_login": "YosefHayim",
          "committed_at": "2026-06-17T12:31:02Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "7cbededa93098e4722fde066ea4cda1857b2b7d3",
          "body": "…206)\n\nExpose `launch sync` to AI agents over MCP behind the `write` and\n`dangerous` capability tiers — the first mutating MCP tools.\n\n- Extract the headless reconcile engine into `core/syncRun.ts`\n  (`reconcileJob`/`summarize`/`summarizeRun`/`mergeOutcomes`/`runSyncBatch`),\n  shared verbatim by the\n[…]\nus registry composition and per-tier gating; the\n  choreography reuses the already-tested `reconcileApp` + `runPool`.\n\nCloses #202\n\nCo-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat(mcp): `sync` + `sync_destructive` write-tier MCP tools (#202) (#…",
          "author_name": "YosefHayim",
          "author_login": "YosefHayim",
          "committed_at": "2026-06-17T06:57:33Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "929fea591315ea118b0ea411e5ee271e9e08fb93",
          "body": "…ic checks (#197) (#205)\n\nAdd `core/configSemantics.ts` — a pure, dependency-free cross-field validator\n(the config twin of `configCheck.ts`) covering invariants the JSON Schema can't\nexpress: cloud storage requires `storageConfig`, `SCHEDULED` releases require a\nvalid `earliestReleaseDate`, per-loc\n[…]\nich also collapses 20 lines of conditional spreads. Expand the\nconfig docs intro to document the `$schema` autocomplete path end to end (part 3).\n\nCo-authored-by: Claude Opus 4 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat(config): deepen `launch config validate` with cross-field semant…",
          "author_name": "YosefHayim",
          "author_login": "YosefHayim",
          "committed_at": "2026-06-16T21:56:34Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "28fc532c76038556e24b21f8e5428e2b7f4e0d24",
          "body": "…er (#201) (#203)\n\nAdds a write-free `build_plan` MCP tool that rehearses `launch build <platform>`:\nit resolves the engine, submitter, profile, distribution, and (on Android) track +\nrollout from config via the pipeline's own pure resolvers, touching no toolchain,\nnetwork, or stdout. Lives behind t\n[…]\n\n- server defaults to `ALL_TOOLS`; the gate filters to enabled tiers\n- tests for previewBuild + the new registries; docs regenerated\n\nCloses #201\n\nCo-authored-by: Claude Opus 4 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat(mcp): build_plan dry-run tool — the first `dryRun` capability ti…",
          "author_name": "YosefHayim",
          "author_login": "YosefHayim",
          "committed_at": "2026-06-16T21:25:03Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "717ed819c40ba23286df6fdf72d6f3473cf9946e",
          "body": "…sync language.md (#199)\n\n* docs(glossary): teach offers/plan/drift/adopt/migrate + IAP terms, resync language.md\n\nAdds six glossary topics for first-class commands and IAP concepts that\nshipped without teaching text — subscription-group, subscription-offer,\nconfig-reconcile, plan-drift, adopt, migr\n[…]\nd after merging #200,\nso docs:check passes now that the file is tracked (#198).\n\nCo-Authored-By: Claude Opus 4 <noreply@anthropic.com>\n\n---------\n\nCo-authored-by: Claude Opus 4 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "docs(glossary): teach offers/plan/drift/adopt/migrate + IAP terms, re…",
          "author_name": "YosefHayim",
          "author_login": "YosefHayim",
          "committed_at": "2026-06-16T21:20:04Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "f8bafad4bbce6a69cce0f5daf959cd64f07c5ad4",
          "body": "…resh checkout (#198)\n\nPR #196 added docs/config.md to the gen-docs output and the docs:check gate\nbut left it under the docs/* gitignore rule, so CI's clean checkout had no\nfile for `docs:check` to diff and threw ENOENT. Un-ignore and commit it,\nmirroring the existing docs/commands.md exception.\n\nCo-authored-by: Claude Opus 4 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix(docs): track generated docs/config.md so docs:check passes on a f…",
          "author_name": "YosefHayim",
          "author_login": "YosefHayim",
          "committed_at": "2026-06-16T21:13:29Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "019f704b90deab1595463f71c494d511d9c483b0",
          "body": "…s over MCP (#176) (#200)\n\nServe Launch as an MCP (Model Context Protocol) server over stdio so a coding\nagent can call its read-only introspection in-process: plan, drift, audit,\nstore/iap doctors, config validate/schema/docs, snapshot list/diff/export, and\nthe local doctor. Each tool calls the sam\n[…]\nrReport\n  with a shared buildDoctorContext, so the CLI and the `doctor` tool share one\n  inspection (the --fix network reconcile stays CLI-only).\n\nCo-authored-by: Claude Opus 4 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat(mcp): `launch mcp` — expose Launch's read-only tools to AI agent…",
          "author_name": "YosefHayim",
          "author_login": "YosefHayim",
          "committed_at": "2026-06-16T19:02:08Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "6f793dd5773a84c4ffb64244fa8aab0d94dca73b",
          "body": "…+ typed reference from the config types (#173) (#196)\n\nAdds a `config` command group that lets humans and AI agents edit `launch.config.ts`\nsafely with editor autocomplete + validation, generated from the config types so the\ntypes stay the single source of truth.\n\n- `config schema [--out]` — emit t\n[…]\nkeys. The\n`<file>.json` path validates verbatim (full shape, incl. unknown-key detection) — the\nAI/programmatic case.\n\nCloses #173\n\nCo-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat(config): `launch config schema`/`validate`/`docs` — JSON Schema …",
          "author_name": "YosefHayim",
          "author_login": "YosefHayim",
          "committed_at": "2026-06-16T12:56:14Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "122f30d7a45e3e1a88d9bfd2760c7a744755ab68",
          "body": "…to a Launch config (#172) (#194)\n\nAdd the fastlane sibling of `launch migrate eas`: read an existing fastlane\nsetup (Appfile / Fastfile / Matchfile / Supplyfile / Deliverfile) off disk and\nemit the equivalent Launch artifacts plus a report of what carries over and what\nneeds a human.\n\n- `core/migra\n[…]\nor, options)` helper.\n- Tests for the parsers, `migrateFastlane`, the shared scaffold, and the command\n  wiring; docs regenerated.\n\nCo-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat(migrate): `launch migrate fastlane` — import a fastlane setup in…",
          "author_name": "YosefHayim",
          "author_login": "YosefHayim",
          "committed_at": "2026-06-16T12:17:13Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "e5011f8540f59333d6d0a898f69c49540cdb43ce",
          "body": "…onfig (#171) (#192)\n\nRead an existing Expo/EAS project's eas.json (plus the app facts Launch\nalready discovers from app.json) and emit the equivalent launch.config.ts,\n.env.example, store.config.json, and a migration-report.md of what mapped and\nwhat needs manual follow-up. File-based and read-only\n[…]\nal mapped profiles (init/adopt callers unchanged).\n- Never overwrites without --force; --dry-run previews; --out redirects output.\n\nCo-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat(migrate): `launch migrate eas` — import eas.json into a Launch c…",
          "author_name": "YosefHayim",
          "author_login": "YosefHayim",
          "committed_at": "2026-06-16T11:55:16Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "15d7fde500007ce4103b5b716491c5b8a3046c89",
          "body": "…e (#169) (#190)\n\nAdd `launch snapshot` — a read-only, point-in-time capture of live App Store\nConnect + Google Play catalog state, saved as a named record under\n~/.launch/snapshots. It is the trustworthy \"before\" that makes destructive\nstore automation (`launch sync` / `apply`) reversible.\n\nArchite\n[…]\ninst] (default: live),\nexport <name>. Read-only end to end. Partial restore and\nauto-snapshot-before-sync are deferred follow-ups.\n\nCo-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat(snapshot): launch snapshot — capture/diff/export live store stat…",
          "author_name": "YosefHayim",
          "author_login": "YosefHayim",
          "committed_at": "2026-06-16T11:31:31Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "2e3ef8ff8d448608ced4f24bfc11810770450ded",
          "body": "…174) (#186)\n\nAdd `launch iap doctor`, the third command in the trust-layer family, as a thin\nselector over the readiness registry. IAP is the most error-prone surface to\nship: a green build says nothing about whether a purchase actually works, because\na product can be undeclared, missing metadata, \n[…]\nlability depth, offer verification.\n\nExit codes mirror plan/status (0 ready · 2 blockers · 1 unreadable, error wins).\n\nCloses #174\n\nCo-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat(iap): launch iap doctor — read-only in-app-purchase readiness (#…",
          "author_name": "YosefHayim",
          "author_login": "YosefHayim",
          "committed_at": "2026-06-16T10:44:59Z",
          "body_truncated": true,
          "is_coding_agent": true
        }
      ],
      "releases_count": 37,
      "commits_last_year": 311,
      "latest_release_at": "2026-07-19T12:31:34Z",
      "latest_release_tag": "v0.32.8",
      "releases_from_tags": false,
      "days_since_last_push": 5,
      "active_weeks_last_year": 6,
      "days_since_latest_release": 5,
      "mean_days_between_releases": 2.4
    },
    "community": {
      "has_readme": true,
      "has_license": true,
      "has_description": true,
      "has_contributing": true,
      "health_percentage": 57,
      "has_issue_template": false,
      "has_code_of_conduct": false,
      "has_pull_request_template": false
    },
    "ecosystem": {
      "packages": [
        {
          "name": "launch-store",
          "exists": true,
          "license": "MIT",
          "keywords": [
            "cli",
            "mobile",
            "ios",
            "android",
            "app-store",
            "testflight",
            "play-store",
            "fastlane",
            "react-native",
            "expo",
            "eas",
            "code-signing",
            "app-store-connect",
            "ci-cd",
            "eas-alternative",
            "expo-eas",
            "ota-updates",
            "self-hosted"
          ],
          "ecosystem": "npm",
          "matches_repo": true,
          "registry_url": "https://www.npmjs.com/package/launch-store",
          "is_deprecated": false,
          "latest_version": "0.32.8",
          "repository_url": "https://github.com/YosefHayim/launch-store",
          "versions_count": 36,
          "total_downloads": null,
          "dependents_count": null,
          "deprecation_note": null,
          "maintainers_count": 1,
          "monthly_downloads": 2629,
          "first_published_at": "2026-06-13T19:26:12.374000Z",
          "latest_published_at": "2026-07-19T12:32:52.779000Z",
          "latest_version_yanked": null,
          "days_since_latest_publish": 5
        }
      ]
    },
    "popularity": {
      "forks": 1,
      "stars": 3,
      "watchers": 0,
      "fork_history": {
        "days": [
          {
            "date": "2026-07-10",
            "count": 1
          }
        ],
        "complete": true,
        "collected": 1,
        "total_forks": 1
      },
      "star_history": null,
      "open_issues_and_prs": 1
    },
    "ai_readiness": {
      "has_nix": false,
      "example_dirs": [
        "examples"
      ],
      "has_llms_txt": true,
      "has_dockerfile": false,
      "has_mcp_signal": false,
      "bootstrap_files": [],
      "api_schema_files": [],
      "has_devcontainer": false,
      "typecheck_configs": [
        "examples/hello-world/tsconfig.json",
        "tsconfig.json"
      ],
      "toolchain_manifests": [],
      "largest_source_bytes": 5069338,
      "source_files_sampled": 525,
      "oversized_source_files": 4,
      "agent_instruction_files": [
        ".cursor/rules/core-types.mdc",
        ".cursor/rules/exec-secrets.mdc",
        ".cursor/rules/launch.mdc",
        ".cursor/rules/providers.mdc",
        "AGENTS.md",
        "CLAUDE.md"
      ],
      "agent_instruction_max_bytes": 7397
    },
    "dependencies": {
      "manifests": [
        "package.json"
      ],
      "advisories": {
        "error": null,
        "scope": "published_package",
        "source": "osv",
        "findings": [
          {
            "name": "@hono/node-server",
            "direct": false,
            "version": "1.19.15",
            "severity": "moderate",
            "ecosystem": "npm",
            "cvss_score": 5.9,
            "advisory_ids": [
              "GHSA-frvp-7c67-39w9"
            ],
            "fixed_version": "2.0.5",
            "advisory_count": 1,
            "oldest_advisory_days": 3
          }
        ],
        "collected": true,
        "malicious": [],
        "truncated": false,
        "by_severity": {
          "moderate": 1
        },
        "advisory_count": 1,
        "affected_count": 1,
        "assessed_count": 165,
        "malicious_count": 0,
        "assessed_package": "npm:launch-store@0.32.8",
        "unassessed_count": 0,
        "direct_affected_count": 0
      },
      "ecosystems": [
        "npm"
      ],
      "dependencies": [
        {
          "name": "@clack/prompts",
          "manifest": "package.json",
          "ecosystem": "npm",
          "version_constraint": "^1.5.1"
        },
        {
          "name": "@effect/platform",
          "manifest": "package.json",
          "ecosystem": "npm",
          "version_constraint": "^0.96.2"
        },
        {
          "name": "chalk",
          "manifest": "package.json",
          "ecosystem": "npm",
          "version_constraint": "^5.6.2"
        },
        {
          "name": "commander",
          "manifest": "package.json",
          "ecosystem": "npm",
          "version_constraint": "^12.1.0"
        },
        {
          "name": "effect",
          "manifest": "package.json",
          "ecosystem": "npm",
          "version_constraint": "^3.21.4"
        },
        {
          "name": "jiti",
          "manifest": "package.json",
          "ecosystem": "npm",
          "version_constraint": "^2.4.0"
        },
        {
          "name": "jose",
          "manifest": "package.json",
          "ecosystem": "npm",
          "version_constraint": "^5.9.6"
        }
      ],
      "all_dependencies": {
        "error": null,
        "source": "github-sbom",
        "packages": [
          {
            "name": "@clack/prompts",
            "direct": true,
            "version": "1.5.1",
            "ecosystem": "npm"
          },
          {
            "name": "@effect/platform",
            "direct": true,
            "version": "0.96.2",
            "ecosystem": "npm"
          },
          {
            "name": "chalk",
            "direct": true,
            "version": "5.6.2",
            "ecosystem": "npm"
          },
          {
            "name": "commander",
            "direct": true,
            "version": "12.1.0",
            "ecosystem": "npm"
          },
          {
            "name": "commander",
            "direct": true,
            "version": "13.1.0",
            "ecosystem": "npm"
          },
          {
            "name": "effect",
            "direct": true,
            "version": "3.21.4",
            "ecosystem": "npm"
          },
          {
            "name": "jiti",
            "direct": true,
            "version": "2.7.0",
            "ecosystem": "npm"
          },
          {
            "name": "jose",
            "direct": true,
            "version": "5.10.0",
            "ecosystem": "npm"
          },
          {
            "name": "jose",
            "direct": true,
            "version": "6.2.3",
            "ecosystem": "npm"
          },
          {
            "name": "@aws-crypto/crc32",
            "direct": false,
            "version": "5.2.0",
            "ecosystem": "npm"
          },
          {
            "name": "@aws-crypto/crc32c",
            "direct": false,
            "version": "5.2.0",
            "ecosystem": "npm"
          },
          {
            "name": "@aws-crypto/sha1-browser",
            "direct": false,
            "version": "5.2.0",
            "ecosystem": "npm"
          },
          {
            "name": "@aws-crypto/sha256-browser",
            "direct": false,
            "version": "5.2.0",
            "ecosystem": "npm"
          },
          {
            "name": "@aws-crypto/sha256-js",
            "direct": false,
            "version": "5.2.0",
            "ecosystem": "npm"
          },
          {
            "name": "@aws-crypto/supports-web-crypto",
            "direct": false,
            "version": "5.2.0",
            "ecosystem": "npm"
          },
          {
            "name": "@aws-crypto/util",
            "direct": false,
            "version": "5.2.0",
            "ecosystem": "npm"
          },
          {
            "name": "@aws-sdk/checksums",
            "direct": false,
            "version": "3.1000.5",
            "ecosystem": "npm"
          },
          {
            "name": "@aws-sdk/client-cognito-identity",
            "direct": false,
            "version": "3.1068.0",
            "ecosystem": "npm"
          },
          {
            "name": "@aws-sdk/client-ec2",
            "direct": false,
            "version": "3.1068.0",
            "ecosystem": "npm"
          },
          {
            "name": "@aws-sdk/client-s3",
            "direct": false,
            "version": "3.1068.0",
            "ecosystem": "npm"
          },
          {
            "name": "@aws-sdk/core",
            "direct": false,
            "version": "3.974.20",
            "ecosystem": "npm"
          },
          {
            "name": "@aws-sdk/credential-provider-cognito-identity",
            "direct": false,
            "version": "3.972.45",
            "ecosystem": "npm"
          },
          {
            "name": "@aws-sdk/credential-provider-env",
            "direct": false,
            "version": "3.972.46",
            "ecosystem": "npm"
          },
          {
            "name": "@aws-sdk/credential-provider-http",
            "direct": false,
            "version": "3.972.48",
            "ecosystem": "npm"
          },
          {
            "name": "@aws-sdk/credential-provider-ini",
            "direct": false,
            "version": "3.972.53",
            "ecosystem": "npm"
          },
          {
            "name": "@aws-sdk/credential-provider-login",
            "direct": false,
            "version": "3.972.52",
            "ecosystem": "npm"
          },
          {
            "name": "@aws-sdk/credential-provider-node",
            "direct": false,
            "version": "3.972.55",
            "ecosystem": "npm"
          },
          {
            "name": "@aws-sdk/credential-provider-process",
            "direct": false,
            "version": "3.972.46",
            "ecosystem": "npm"
          },
          {
            "name": "@aws-sdk/credential-provider-sso",
            "direct": false,
            "version": "3.972.52",
            "ecosystem": "npm"
          },
          {
            "name": "@aws-sdk/credential-provider-web-identity",
            "direct": false,
            "version": "3.972.52",
            "ecosystem": "npm"
          },
          {
            "name": "@aws-sdk/credential-providers",
            "direct": false,
            "version": "3.1068.0",
            "ecosystem": "npm"
          },
          {
            "name": "@aws-sdk/middleware-flexible-checksums",
            "direct": false,
            "version": "3.974.30",
            "ecosystem": "npm"
          },
          {
            "name": "@aws-sdk/middleware-sdk-ec2",
            "direct": false,
            "version": "3.972.34",
            "ecosystem": "npm"
          },
          {
            "name": "@aws-sdk/middleware-sdk-s3",
            "direct": false,
            "version": "3.972.51",
            "ecosystem": "npm"
          },
          {
            "name": "@aws-sdk/nested-clients",
            "direct": false,
            "version": "3.997.20",
            "ecosystem": "npm"
          },
          {
            "name": "@aws-sdk/signature-v4-multi-region",
            "direct": false,
            "version": "3.996.34",
            "ecosystem": "npm"
          },
          {
            "name": "@aws-sdk/token-providers",
            "direct": false,
            "version": "3.1066.0",
            "ecosystem": "npm"
          },
          {
            "name": "@aws-sdk/types",
            "direct": false,
            "version": "3.973.12",
            "ecosystem": "npm"
          },
          {
            "name": "@aws-sdk/util-locate-window",
            "direct": false,
            "version": "3.965.7",
            "ecosystem": "npm"
          },
          {
            "name": "@aws-sdk/xml-builder",
            "direct": false,
            "version": "3.972.29",
            "ecosystem": "npm"
          },
          {
            "name": "@aws/lambda-invoke-store",
            "direct": false,
            "version": "0.2.4",
            "ecosystem": "npm"
          },
          {
            "name": "@babel/code-frame",
            "direct": false,
            "version": "7.29.7",
            "ecosystem": "npm"
          },
          {
            "name": "@babel/core",
            "direct": false,
            "version": "^7.25.0",
            "ecosystem": "npm"
          },
          {
            "name": "@babel/helper-string-parser",
            "direct": false,
            "version": "7.29.7",
            "ecosystem": "npm"
          },
          {
            "name": "@babel/helper-validator-identifier",
            "direct": false,
            "version": "7.29.7",
            "ecosystem": "npm"
          },
          {
            "name": "@babel/parser",
            "direct": false,
            "version": "7.29.7",
            "ecosystem": "npm"
          },
          {
            "name": "@babel/types",
            "direct": false,
            "version": "7.29.7",
            "ecosystem": "npm"
          },
          {
            "name": "@bcoe/v8-coverage",
            "direct": false,
            "version": "1.0.2",
            "ecosystem": "npm"
          },
          {
            "name": "@biomejs/biome",
            "direct": false,
            "version": "2.5.1",
            "ecosystem": "npm"
          },
          {
            "name": "@biomejs/cli-darwin-arm64",
            "direct": false,
            "version": "2.5.1",
            "ecosystem": "npm"
          },
          {
            "name": "@biomejs/cli-darwin-x64",
            "direct": false,
            "version": "2.5.1",
            "ecosystem": "npm"
          },
          {
            "name": "@biomejs/cli-linux-arm64",
            "direct": false,
            "version": "2.5.1",
            "ecosystem": "npm"
          },
          {
            "name": "@biomejs/cli-linux-arm64-musl",
            "direct": false,
            "version": "2.5.1",
            "ecosystem": "npm"
          },
          {
            "name": "@biomejs/cli-linux-x64",
            "direct": false,
            "version": "2.5.1",
            "ecosystem": "npm"
          },
          {
            "name": "@biomejs/cli-linux-x64-musl",
            "direct": false,
            "version": "2.5.1",
            "ecosystem": "npm"
          },
          {
            "name": "@biomejs/cli-win32-arm64",
            "direct": false,
            "version": "2.5.1",
            "ecosystem": "npm"
          },
          {
            "name": "@biomejs/cli-win32-x64",
            "direct": false,
            "version": "2.5.1",
            "ecosystem": "npm"
          },
          {
            "name": "@clack/core",
            "direct": false,
            "version": "1.4.1",
            "ecosystem": "npm"
          },
          {
            "name": "@emnapi/core",
            "direct": false,
            "version": "1.10.0",
            "ecosystem": "npm"
          },
          {
            "name": "@emnapi/runtime",
            "direct": false,
            "version": "1.10.0",
            "ecosystem": "npm"
          },
          {
            "name": "@emnapi/wasi-threads",
            "direct": false,
            "version": "1.2.1",
            "ecosystem": "npm"
          },
          {
            "name": "@esbuild/aix-ppc64",
            "direct": false,
            "version": "0.28.1",
            "ecosystem": "npm"
          },
          {
            "name": "@esbuild/android-arm",
            "direct": false,
            "version": "0.28.1",
            "ecosystem": "npm"
          },
          {
            "name": "@esbuild/android-arm64",
            "direct": false,
            "version": "0.28.1",
            "ecosystem": "npm"
          },
          {
            "name": "@esbuild/android-x64",
            "direct": false,
            "version": "0.28.1",
            "ecosystem": "npm"
          },
          {
            "name": "@esbuild/darwin-arm64",
            "direct": false,
            "version": "0.28.1",
            "ecosystem": "npm"
          },
          {
            "name": "@esbuild/darwin-x64",
            "direct": false,
            "version": "0.28.1",
            "ecosystem": "npm"
          },
          {
            "name": "@esbuild/freebsd-arm64",
            "direct": false,
            "version": "0.28.1",
            "ecosystem": "npm"
          },
          {
            "name": "@esbuild/freebsd-x64",
            "direct": false,
            "version": "0.28.1",
            "ecosystem": "npm"
          },
          {
            "name": "@esbuild/linux-arm",
            "direct": false,
            "version": "0.28.1",
            "ecosystem": "npm"
          },
          {
            "name": "@esbuild/linux-arm64",
            "direct": false,
            "version": "0.28.1",
            "ecosystem": "npm"
          },
          {
            "name": "@esbuild/linux-ia32",
            "direct": false,
            "version": "0.28.1",
            "ecosystem": "npm"
          },
          {
            "name": "@esbuild/linux-loong64",
            "direct": false,
            "version": "0.28.1",
            "ecosystem": "npm"
          },
          {
            "name": "@esbuild/linux-mips64el",
            "direct": false,
            "version": "0.28.1",
            "ecosystem": "npm"
          },
          {
            "name": "@esbuild/linux-ppc64",
            "direct": false,
            "version": "0.28.1",
            "ecosystem": "npm"
          },
          {
            "name": "@esbuild/linux-riscv64",
            "direct": false,
            "version": "0.28.1",
            "ecosystem": "npm"
          },
          {
            "name": "@esbuild/linux-s390x",
            "direct": false,
            "version": "0.28.1",
            "ecosystem": "npm"
          },
          {
            "name": "@esbuild/linux-x64",
            "direct": false,
            "version": "0.28.1",
            "ecosystem": "npm"
          },
          {
            "name": "@esbuild/netbsd-arm64",
            "direct": false,
            "version": "0.28.1",
            "ecosystem": "npm"
          },
          {
            "name": "@esbuild/netbsd-x64",
            "direct": false,
            "version": "0.28.1",
            "ecosystem": "npm"
          },
          {
            "name": "@esbuild/openbsd-arm64",
            "direct": false,
            "version": "0.28.1",
            "ecosystem": "npm"
          },
          {
            "name": "@esbuild/openbsd-x64",
            "direct": false,
            "version": "0.28.1",
            "ecosystem": "npm"
          },
          {
            "name": "@esbuild/openharmony-arm64",
            "direct": false,
            "version": "0.28.1",
            "ecosystem": "npm"
          },
          {
            "name": "@esbuild/sunos-x64",
            "direct": false,
            "version": "0.28.1",
            "ecosystem": "npm"
          },
          {
            "name": "@esbuild/win32-arm64",
            "direct": false,
            "version": "0.28.1",
            "ecosystem": "npm"
          },
          {
            "name": "@esbuild/win32-ia32",
            "direct": false,
            "version": "0.28.1",
            "ecosystem": "npm"
          },
          {
            "name": "@esbuild/win32-x64",
            "direct": false,
            "version": "0.28.1",
            "ecosystem": "npm"
          },
          {
            "name": "@hono/node-server",
            "direct": false,
            "version": "1.19.14",
            "ecosystem": "npm"
          },
          {
            "name": "@jridgewell/resolve-uri",
            "direct": false,
            "version": "3.1.2",
            "ecosystem": "npm"
          },
          {
            "name": "@jridgewell/sourcemap-codec",
            "direct": false,
            "version": "1.5.5",
            "ecosystem": "npm"
          },
          {
            "name": "@jridgewell/trace-mapping",
            "direct": false,
            "version": "0.3.31",
            "ecosystem": "npm"
          },
          {
            "name": "@modelcontextprotocol/sdk",
            "direct": false,
            "version": "1.29.0",
            "ecosystem": "npm"
          },
          {
            "name": "@msgpackr-extract/msgpackr-extract-darwin-arm64",
            "direct": false,
            "version": "3.0.4",
            "ecosystem": "npm"
          },
          {
            "name": "@msgpackr-extract/msgpackr-extract-darwin-x64",
            "direct": false,
            "version": "3.0.4",
            "ecosystem": "npm"
          },
          {
            "name": "@msgpackr-extract/msgpackr-extract-linux-arm",
            "direct": false,
            "version": "3.0.4",
            "ecosystem": "npm"
          },
          {
            "name": "@msgpackr-extract/msgpackr-extract-linux-arm64",
            "direct": false,
            "version": "3.0.4",
            "ecosystem": "npm"
          },
          {
            "name": "@msgpackr-extract/msgpackr-extract-linux-x64",
            "direct": false,
            "version": "3.0.4",
            "ecosystem": "npm"
          },
          {
            "name": "@msgpackr-extract/msgpackr-extract-win32-x64",
            "direct": false,
            "version": "3.0.4",
            "ecosystem": "npm"
          },
          {
            "name": "@napi-rs/keyring",
            "direct": false,
            "version": "1.3.0",
            "ecosystem": "npm"
          },
          {
            "name": "@napi-rs/keyring-darwin-arm64",
            "direct": false,
            "version": "1.3.0",
            "ecosystem": "npm"
          },
          {
            "name": "@napi-rs/keyring-darwin-x64",
            "direct": false,
            "version": "1.3.0",
            "ecosystem": "npm"
          },
          {
            "name": "@napi-rs/keyring-freebsd-x64",
            "direct": false,
            "version": "1.3.0",
            "ecosystem": "npm"
          },
          {
            "name": "@napi-rs/keyring-linux-arm-gnueabihf",
            "direct": false,
            "version": "1.3.0",
            "ecosystem": "npm"
          },
          {
            "name": "@napi-rs/keyring-linux-arm64-gnu",
            "direct": false,
            "version": "1.3.0",
            "ecosystem": "npm"
          },
          {
            "name": "@napi-rs/keyring-linux-arm64-musl",
            "direct": false,
            "version": "1.3.0",
            "ecosystem": "npm"
          },
          {
            "name": "@napi-rs/keyring-linux-riscv64-gnu",
            "direct": false,
            "version": "1.3.0",
            "ecosystem": "npm"
          },
          {
            "name": "@napi-rs/keyring-linux-x64-gnu",
            "direct": false,
            "version": "1.3.0",
            "ecosystem": "npm"
          },
          {
            "name": "@napi-rs/keyring-linux-x64-musl",
            "direct": false,
            "version": "1.3.0",
            "ecosystem": "npm"
          },
          {
            "name": "@napi-rs/keyring-win32-arm64-msvc",
            "direct": false,
            "version": "1.3.0",
            "ecosystem": "npm"
          },
          {
            "name": "@napi-rs/keyring-win32-ia32-msvc",
            "direct": false,
            "version": "1.3.0",
            "ecosystem": "npm"
          },
          {
            "name": "@napi-rs/keyring-win32-x64-msvc",
            "direct": false,
            "version": "1.3.0",
            "ecosystem": "npm"
          },
          {
            "name": "@napi-rs/wasm-runtime",
            "direct": false,
            "version": "1.1.6",
            "ecosystem": "npm"
          },
          {
            "name": "@nodable/entities",
            "direct": false,
            "version": "2.2.0",
            "ecosystem": "npm"
          },
          {
            "name": "@oxc-project/types",
            "direct": false,
            "version": "0.133.0",
            "ecosystem": "npm"
          },
          {
            "name": "@redocly/ajv",
            "direct": false,
            "version": "8.11.2",
            "ecosystem": "npm"
          },
          {
            "name": "@redocly/config",
            "direct": false,
            "version": "0.22.0",
            "ecosystem": "npm"
          },
          {
            "name": "@redocly/openapi-core",
            "direct": false,
            "version": "1.34.17",
            "ecosystem": "npm"
          },
          {
            "name": "@rolldown/binding-android-arm64",
            "direct": false,
            "version": "1.0.3",
            "ecosystem": "npm"
          },
          {
            "name": "@rolldown/binding-darwin-arm64",
            "direct": false,
            "version": "1.0.3",
            "ecosystem": "npm"
          },
          {
            "name": "@rolldown/binding-darwin-x64",
            "direct": false,
            "version": "1.0.3",
            "ecosystem": "npm"
          },
          {
            "name": "@rolldown/binding-freebsd-x64",
            "direct": false,
            "version": "1.0.3",
            "ecosystem": "npm"
          },
          {
            "name": "@rolldown/binding-linux-arm-gnueabihf",
            "direct": false,
            "version": "1.0.3",
            "ecosystem": "npm"
          },
          {
            "name": "@rolldown/binding-linux-arm64-gnu",
            "direct": false,
            "version": "1.0.3",
            "ecosystem": "npm"
          },
          {
            "name": "@rolldown/binding-linux-arm64-musl",
            "direct": false,
            "version": "1.0.3",
            "ecosystem": "npm"
          },
          {
            "name": "@rolldown/binding-linux-ppc64-gnu",
            "direct": false,
            "version": "1.0.3",
            "ecosystem": "npm"
          },
          {
            "name": "@rolldown/binding-linux-s390x-gnu",
            "direct": false,
            "version": "1.0.3",
            "ecosystem": "npm"
          },
          {
            "name": "@rolldown/binding-linux-x64-gnu",
            "direct": false,
            "version": "1.0.3",
            "ecosystem": "npm"
          },
          {
            "name": "@rolldown/binding-linux-x64-musl",
            "direct": false,
            "version": "1.0.3",
            "ecosystem": "npm"
          },
          {
            "name": "@rolldown/binding-openharmony-arm64",
            "direct": false,
            "version": "1.0.3",
            "ecosystem": "npm"
          },
          {
            "name": "@rolldown/binding-wasm32-wasi",
            "direct": false,
            "version": "1.0.3",
            "ecosystem": "npm"
          },
          {
            "name": "@rolldown/binding-win32-arm64-msvc",
            "direct": false,
            "version": "1.0.3",
            "ecosystem": "npm"
          },
          {
            "name": "@rolldown/binding-win32-x64-msvc",
            "direct": false,
            "version": "1.0.3",
            "ecosystem": "npm"
          },
          {
            "name": "@rolldown/pluginutils",
            "direct": false,
            "version": "1.0.1",
            "ecosystem": "npm"
          },
          {
            "name": "@smithy/core",
            "direct": false,
            "version": "3.24.7",
            "ecosystem": "npm"
          },
          {
            "name": "@smithy/credential-provider-imds",
            "direct": false,
            "version": "4.3.9",
            "ecosystem": "npm"
          },
          {
            "name": "@smithy/fetch-http-handler",
            "direct": false,
            "version": "5.4.7",
            "ecosystem": "npm"
          },
          {
            "name": "@smithy/is-array-buffer",
            "direct": false,
            "version": "2.2.0",
            "ecosystem": "npm"
          },
          {
            "name": "@smithy/node-http-handler",
            "direct": false,
            "version": "4.7.8",
            "ecosystem": "npm"
          },
          {
            "name": "@smithy/signature-v4",
            "direct": false,
            "version": "5.4.7",
            "ecosystem": "npm"
          },
          {
            "name": "@smithy/types",
            "direct": false,
            "version": "4.14.4",
            "ecosystem": "npm"
          },
          {
            "name": "@smithy/util-buffer-from",
            "direct": false,
            "version": "2.2.0",
            "ecosystem": "npm"
          },
          {
            "name": "@smithy/util-utf8",
            "direct": false,
            "version": "2.3.0",
            "ecosystem": "npm"
          },
          {
            "name": "@standard-schema/spec",
            "direct": false,
            "version": "1.1.0",
            "ecosystem": "npm"
          },
          {
            "name": "@tybys/wasm-util",
            "direct": false,
            "version": "0.10.3",
            "ecosystem": "npm"
          },
          {
            "name": "@types/chai",
            "direct": false,
            "version": "5.2.3",
            "ecosystem": "npm"
          },
          {
            "name": "@types/deep-eql",
            "direct": false,
            "version": "4.0.2",
            "ecosystem": "npm"
          },
          {
            "name": "@types/estree",
            "direct": false,
            "version": "1.0.9",
            "ecosystem": "npm"
          },
          {
            "name": "@types/node",
            "direct": false,
            "version": "20.19.43",
            "ecosystem": "npm"
          },
          {
            "name": "@types/react",
            "direct": false,
            "version": "~18.3.0",
            "ecosystem": "npm"
          },
          {
            "name": "@vitest/coverage-v8",
            "direct": false,
            "version": "4.1.8",
            "ecosystem": "npm"
          },
          {
            "name": "@vitest/expect",
            "direct": false,
            "version": "4.1.8",
            "ecosystem": "npm"
          },
          {
            "name": "@vitest/mocker",
            "direct": false,
            "version": "4.1.8",
            "ecosystem": "npm"
          },
          {
            "name": "@vitest/pretty-format",
            "direct": false,
            "version": "4.1.8",
            "ecosystem": "npm"
          },
          {
            "name": "@vitest/runner",
            "direct": false,
            "version": "4.1.8",
            "ecosystem": "npm"
          },
          {
            "name": "@vitest/snapshot",
            "direct": false,
            "version": "4.1.8",
            "ecosystem": "npm"
          },
          {
            "name": "@vitest/spy",
            "direct": false,
            "version": "4.1.8",
            "ecosystem": "npm"
          },
          {
            "name": "@vitest/utils",
            "direct": false,
            "version": "4.1.8",
            "ecosystem": "npm"
          },
          {
            "name": "accepts",
            "direct": false,
            "version": "2.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "agent-base",
            "direct": false,
            "version": "7.1.4",
            "ecosystem": "npm"
          },
          {
            "name": "ajv",
            "direct": false,
            "version": "8.20.0",
            "ecosystem": "npm"
          },
          {
            "name": "ajv-formats",
            "direct": false,
            "version": "3.0.1",
            "ecosystem": "npm"
          },
          {
            "name": "ansi-colors",
            "direct": false,
            "version": "4.1.3",
            "ecosystem": "npm"
          },
          {
            "name": "ansi-escapes",
            "direct": false,
            "version": "7.3.0",
            "ecosystem": "npm"
          },
          {
            "name": "ansi-regex",
            "direct": false,
            "version": "6.2.2",
            "ecosystem": "npm"
          },
          {
            "name": "ansi-styles",
            "direct": false,
            "version": "6.2.3",
            "ecosystem": "npm"
          },
          {
            "name": "anynum",
            "direct": false,
            "version": "1.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "argparse",
            "direct": false,
            "version": "2.0.1",
            "ecosystem": "npm"
          },
          {
            "name": "assertion-error",
            "direct": false,
            "version": "2.0.1",
            "ecosystem": "npm"
          },
          {
            "name": "ast-v8-to-istanbul",
            "direct": false,
            "version": "1.0.4",
            "ecosystem": "npm"
          },
          {
            "name": "balanced-match",
            "direct": false,
            "version": "1.0.2",
            "ecosystem": "npm"
          },
          {
            "name": "body-parser",
            "direct": false,
            "version": "2.3.0",
            "ecosystem": "npm"
          },
          {
            "name": "bowser",
            "direct": false,
            "version": "2.14.1",
            "ecosystem": "npm"
          },
          {
            "name": "brace-expansion",
            "direct": false,
            "version": "2.1.1",
            "ecosystem": "npm"
          },
          {
            "name": "braces",
            "direct": false,
            "version": "3.0.3",
            "ecosystem": "npm"
          },
          {
            "name": "bytes",
            "direct": false,
            "version": "3.1.2",
            "ecosystem": "npm"
          },
          {
            "name": "call-bind-apply-helpers",
            "direct": false,
            "version": "1.0.2",
            "ecosystem": "npm"
          },
          {
            "name": "call-bound",
            "direct": false,
            "version": "1.0.4",
            "ecosystem": "npm"
          },
          {
            "name": "chai",
            "direct": false,
            "version": "6.2.2",
            "ecosystem": "npm"
          },
          {
            "name": "change-case",
            "direct": false,
            "version": "5.4.4",
            "ecosystem": "npm"
          },
          {
            "name": "cli-cursor",
            "direct": false,
            "version": "5.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "cli-truncate",
            "direct": false,
            "version": "4.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "colorette",
            "direct": false,
            "version": "1.4.0",
            "ecosystem": "npm"
          },
          {
            "name": "colorette",
            "direct": false,
            "version": "2.0.20",
            "ecosystem": "npm"
          },
          {
            "name": "content-disposition",
            "direct": false,
            "version": "1.1.0",
            "ecosystem": "npm"
          },
          {
            "name": "content-type",
            "direct": false,
            "version": "1.0.5",
            "ecosystem": "npm"
          },
          {
            "name": "content-type",
            "direct": false,
            "version": "2.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "convert-source-map",
            "direct": false,
            "version": "2.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "cookie",
            "direct": false,
            "version": "0.7.2",
            "ecosystem": "npm"
          },
          {
            "name": "cookie-signature",
            "direct": false,
            "version": "1.2.2",
            "ecosystem": "npm"
          },
          {
            "name": "cors",
            "direct": false,
            "version": "2.8.6",
            "ecosystem": "npm"
          },
          {
            "name": "cross-spawn",
            "direct": false,
            "version": "7.0.6",
            "ecosystem": "npm"
          },
          {
            "name": "debug",
            "direct": false,
            "version": "4.4.3",
            "ecosystem": "npm"
          },
          {
            "name": "depd",
            "direct": false,
            "version": "2.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "detect-libc",
            "direct": false,
            "version": "2.1.2",
            "ecosystem": "npm"
          },
          {
            "name": "dunder-proto",
            "direct": false,
            "version": "1.0.1",
            "ecosystem": "npm"
          },
          {
            "name": "ee-first",
            "direct": false,
            "version": "1.1.1",
            "ecosystem": "npm"
          },
          {
            "name": "emoji-regex",
            "direct": false,
            "version": "10.6.0",
            "ecosystem": "npm"
          },
          {
            "name": "encodeurl",
            "direct": false,
            "version": "2.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "environment",
            "direct": false,
            "version": "1.1.0",
            "ecosystem": "npm"
          },
          {
            "name": "es-define-property",
            "direct": false,
            "version": "1.0.1",
            "ecosystem": "npm"
          },
          {
            "name": "es-errors",
            "direct": false,
            "version": "1.3.0",
            "ecosystem": "npm"
          },
          {
            "name": "es-module-lexer",
            "direct": false,
            "version": "2.1.0",
            "ecosystem": "npm"
          },
          {
            "name": "es-object-atoms",
            "direct": false,
            "version": "1.1.2",
            "ecosystem": "npm"
          },
          {
            "name": "esbuild",
            "direct": false,
            "version": "0.28.1",
            "ecosystem": "npm"
          },
          {
            "name": "escape-html",
            "direct": false,
            "version": "1.0.3",
            "ecosystem": "npm"
          },
          {
            "name": "estree-walker",
            "direct": false,
            "version": "3.0.3",
            "ecosystem": "npm"
          },
          {
            "name": "etag",
            "direct": false,
            "version": "1.8.1",
            "ecosystem": "npm"
          },
          {
            "name": "eventemitter3",
            "direct": false,
            "version": "5.0.4",
            "ecosystem": "npm"
          },
          {
            "name": "eventsource",
            "direct": false,
            "version": "3.0.7",
            "ecosystem": "npm"
          },
          {
            "name": "eventsource-parser",
            "direct": false,
            "version": "3.1.0",
            "ecosystem": "npm"
          },
          {
            "name": "execa",
            "direct": false,
            "version": "8.0.1",
            "ecosystem": "npm"
          },
          {
            "name": "expect-type",
            "direct": false,
            "version": "1.3.0",
            "ecosystem": "npm"
          },
          {
            "name": "expo",
            "direct": false,
            "version": "~52.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "expo-status-bar",
            "direct": false,
            "version": "~2.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "express",
            "direct": false,
            "version": "5.2.1",
            "ecosystem": "npm"
          },
          {
            "name": "express-rate-limit",
            "direct": false,
            "version": "8.5.2",
            "ecosystem": "npm"
          },
          {
            "name": "fast-check",
            "direct": false,
            "version": "3.23.2",
            "ecosystem": "npm"
          },
          {
            "name": "fast-deep-equal",
            "direct": false,
            "version": "3.1.3",
            "ecosystem": "npm"
          },
          {
            "name": "fast-string-truncated-width",
            "direct": false,
            "version": "3.0.3",
            "ecosystem": "npm"
          },
          {
            "name": "fast-string-width",
            "direct": false,
            "version": "3.0.2",
            "ecosystem": "npm"
          },
          {
            "name": "fast-uri",
            "direct": false,
            "version": "3.1.2",
            "ecosystem": "npm"
          },
          {
            "name": "fast-wrap-ansi",
            "direct": false,
            "version": "0.2.2",
            "ecosystem": "npm"
          },
          {
            "name": "fast-xml-builder",
            "direct": false,
            "version": "1.2.0",
            "ecosystem": "npm"
          },
          {
            "name": "fast-xml-parser",
            "direct": false,
            "version": "5.7.3",
            "ecosystem": "npm"
          },
          {
            "name": "fdir",
            "direct": false,
            "version": "6.5.0",
            "ecosystem": "npm"
          },
          {
            "name": "fill-range",
            "direct": false,
            "version": "7.1.1",
            "ecosystem": "npm"
          },
          {
            "name": "finalhandler",
            "direct": false,
            "version": "2.1.1",
            "ecosystem": "npm"
          },
          {
            "name": "find-my-way-ts",
            "direct": false,
            "version": "0.1.6",
            "ecosystem": "npm"
          },
          {
            "name": "forwarded",
            "direct": false,
            "version": "0.2.0",
            "ecosystem": "npm"
          },
          {
            "name": "fresh",
            "direct": false,
            "version": "2.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "fsevents",
            "direct": false,
            "version": "2.3.3",
            "ecosystem": "npm"
          },
          {
            "name": "function-bind",
            "direct": false,
            "version": "1.1.2",
            "ecosystem": "npm"
          },
          {
            "name": "get-east-asian-width",
            "direct": false,
            "version": "1.6.0",
            "ecosystem": "npm"
          },
          {
            "name": "get-intrinsic",
            "direct": false,
            "version": "1.3.0",
            "ecosystem": "npm"
          },
          {
            "name": "get-proto",
            "direct": false,
            "version": "1.0.1",
            "ecosystem": "npm"
          },
          {
            "name": "get-stream",
            "direct": false,
            "version": "8.0.1",
            "ecosystem": "npm"
          },
          {
            "name": "gopd",
            "direct": false,
            "version": "1.2.0",
            "ecosystem": "npm"
          },
          {
            "name": "has-flag",
            "direct": false,
            "version": "4.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "has-symbols",
            "direct": false,
            "version": "1.1.0",
            "ecosystem": "npm"
          },
          {
            "name": "hasown",
            "direct": false,
            "version": "2.0.4",
            "ecosystem": "npm"
          },
          {
            "name": "hono",
            "direct": false,
            "version": "4.12.25",
            "ecosystem": "npm"
          },
          {
            "name": "html-escaper",
            "direct": false,
            "version": "2.0.2",
            "ecosystem": "npm"
          },
          {
            "name": "http-errors",
            "direct": false,
            "version": "2.0.1",
            "ecosystem": "npm"
          },
          {
            "name": "https-proxy-agent",
            "direct": false,
            "version": "7.0.6",
            "ecosystem": "npm"
          },
          {
            "name": "human-signals",
            "direct": false,
            "version": "5.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "husky",
            "direct": false,
            "version": "9.1.7",
            "ecosystem": "npm"
          },
          {
            "name": "iconv-lite",
            "direct": false,
            "version": "0.7.2",
            "ecosystem": "npm"
          },
          {
            "name": "index-to-position",
            "direct": false,
            "version": "1.2.0",
            "ecosystem": "npm"
          },
          {
            "name": "inherits",
            "direct": false,
            "version": "2.0.4",
            "ecosystem": "npm"
          },
          {
            "name": "ip-address",
            "direct": false,
            "version": "10.2.0",
            "ecosystem": "npm"
          },
          {
            "name": "ipaddr.js",
            "direct": false,
            "version": "1.9.1",
            "ecosystem": "npm"
          },
          {
            "name": "is-fullwidth-code-point",
            "direct": false,
            "version": "4.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "is-fullwidth-code-point",
            "direct": false,
            "version": "5.1.0",
            "ecosystem": "npm"
          },
          {
            "name": "is-number",
            "direct": false,
            "version": "7.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "is-promise",
            "direct": false,
            "version": "4.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "is-stream",
            "direct": false,
            "version": "3.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "isexe",
            "direct": false,
            "version": "2.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "istanbul-lib-coverage",
            "direct": false,
            "version": "3.2.2",
            "ecosystem": "npm"
          },
          {
            "name": "istanbul-lib-report",
            "direct": false,
            "version": "3.0.1",
            "ecosystem": "npm"
          },
          {
            "name": "istanbul-reports",
            "direct": false,
            "version": "3.2.0",
            "ecosystem": "npm"
          },
          {
            "name": "js-levenshtein",
            "direct": false,
            "version": "1.1.6",
            "ecosystem": "npm"
          },
          {
            "name": "js-tokens",
            "direct": false,
            "version": "10.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "js-tokens",
            "direct": false,
            "version": "4.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "js-yaml",
            "direct": false,
            "version": "4.2.0",
            "ecosystem": "npm"
          },
          {
            "name": "json-schema-traverse",
            "direct": false,
            "version": "1.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "json-schema-typed",
            "direct": false,
            "version": "8.0.2",
            "ecosystem": "npm"
          },
          {
            "name": "lightningcss",
            "direct": false,
            "version": "1.32.0",
            "ecosystem": "npm"
          },
          {
            "name": "lightningcss-android-arm64",
            "direct": false,
            "version": "1.32.0",
            "ecosystem": "npm"
          },
          {
            "name": "lightningcss-darwin-arm64",
            "direct": false,
            "version": "1.32.0",
            "ecosystem": "npm"
          },
          {
            "name": "lightningcss-darwin-x64",
            "direct": false,
            "version": "1.32.0",
            "ecosystem": "npm"
          },
          {
            "name": "lightningcss-freebsd-x64",
            "direct": false,
            "version": "1.32.0",
            "ecosystem": "npm"
          },
          {
            "name": "lightningcss-linux-arm-gnueabihf",
            "direct": false,
            "version": "1.32.0",
            "ecosystem": "npm"
          },
          {
            "name": "lightningcss-linux-arm64-gnu",
            "direct": false,
            "version": "1.32.0",
            "ecosystem": "npm"
          },
          {
            "name": "lightningcss-linux-arm64-musl",
            "direct": false,
            "version": "1.32.0",
            "ecosystem": "npm"
          },
          {
            "name": "lightningcss-linux-x64-gnu",
            "direct": false,
            "version": "1.32.0",
            "ecosystem": "npm"
          },
          {
            "name": "lightningcss-linux-x64-musl",
            "direct": false,
            "version": "1.32.0",
            "ecosystem": "npm"
          },
          {
            "name": "lightningcss-win32-arm64-msvc",
            "direct": false,
            "version": "1.32.0",
            "ecosystem": "npm"
          },
          {
            "name": "lightningcss-win32-x64-msvc",
            "direct": false,
            "version": "1.32.0",
            "ecosystem": "npm"
          },
          {
            "name": "lilconfig",
            "direct": false,
            "version": "3.1.3",
            "ecosystem": "npm"
          },
          {
            "name": "lint-staged",
            "direct": false,
            "version": "15.5.2",
            "ecosystem": "npm"
          },
          {
            "name": "listr2",
            "direct": false,
            "version": "8.3.3",
            "ecosystem": "npm"
          },
          {
            "name": "log-update",
            "direct": false,
            "version": "6.1.0",
            "ecosystem": "npm"
          },
          {
            "name": "magic-string",
            "direct": false,
            "version": "0.30.21",
            "ecosystem": "npm"
          },
          {
            "name": "magicast",
            "direct": false,
            "version": "0.5.3",
            "ecosystem": "npm"
          },
          {
            "name": "make-dir",
            "direct": false,
            "version": "4.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "math-intrinsics",
            "direct": false,
            "version": "1.1.0",
            "ecosystem": "npm"
          },
          {
            "name": "media-typer",
            "direct": false,
            "version": "1.1.0",
            "ecosystem": "npm"
          },
          {
            "name": "merge-descriptors",
            "direct": false,
            "version": "2.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "merge-stream",
            "direct": false,
            "version": "2.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "micromatch",
            "direct": false,
            "version": "4.0.8",
            "ecosystem": "npm"
          },
          {
            "name": "mime-db",
            "direct": false,
            "version": "1.54.0",
            "ecosystem": "npm"
          },
          {
            "name": "mime-types",
            "direct": false,
            "version": "3.0.2",
            "ecosystem": "npm"
          },
          {
            "name": "mimic-fn",
            "direct": false,
            "version": "4.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "mimic-function",
            "direct": false,
            "version": "5.0.1",
            "ecosystem": "npm"
          },
          {
            "name": "minimatch",
            "direct": false,
            "version": "5.1.9",
            "ecosystem": "npm"
          },
          {
            "name": "ms",
            "direct": false,
            "version": "2.1.3",
            "ecosystem": "npm"
          },
          {
            "name": "msgpackr",
            "direct": false,
            "version": "1.12.1",
            "ecosystem": "npm"
          },
          {
            "name": "msgpackr-extract",
            "direct": false,
            "version": "3.0.4",
            "ecosystem": "npm"
          },
          {
            "name": "multipasta",
            "direct": false,
            "version": "0.2.7",
            "ecosystem": "npm"
          },
          {
            "name": "nanoid",
            "direct": false,
            "version": "3.3.15",
            "ecosystem": "npm"
          },
          {
            "name": "negotiator",
            "direct": false,
            "version": "1.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "node-gyp-build-optional-packages",
            "direct": false,
            "version": "5.2.2",
            "ecosystem": "npm"
          },
          {
            "name": "npm-run-path",
            "direct": false,
            "version": "5.3.0",
            "ecosystem": "npm"
          },
          {
            "name": "object-assign",
            "direct": false,
            "version": "4.1.1",
            "ecosystem": "npm"
          },
          {
            "name": "object-inspect",
            "direct": false,
            "version": "1.13.4",
            "ecosystem": "npm"
          },
          {
            "name": "obug",
            "direct": false,
            "version": "2.1.3",
            "ecosystem": "npm"
          },
          {
            "name": "on-finished",
            "direct": false,
            "version": "2.4.1",
            "ecosystem": "npm"
          },
          {
            "name": "once",
            "direct": false,
            "version": "1.4.0",
            "ecosystem": "npm"
          },
          {
            "name": "onetime",
            "direct": false,
            "version": "6.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "onetime",
            "direct": false,
            "version": "7.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "openapi-typescript",
            "direct": false,
            "version": "7.13.0",
            "ecosystem": "npm"
          },
          {
            "name": "parse-json",
            "direct": false,
            "version": "8.3.0",
            "ecosystem": "npm"
          },
          {
            "name": "parseurl",
            "direct": false,
            "version": "1.3.3",
            "ecosystem": "npm"
          },
          {
            "name": "path-expression-matcher",
            "direct": false,
            "version": "1.5.0",
            "ecosystem": "npm"
          },
          {
            "name": "path-key",
            "direct": false,
            "version": "3.1.1",
            "ecosystem": "npm"
          },
          {
            "name": "path-key",
            "direct": false,
            "version": "4.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "path-to-regexp",
            "direct": false,
            "version": "8.4.2",
            "ecosystem": "npm"
          },
          {
            "name": "pathe",
            "direct": false,
            "version": "2.0.3",
            "ecosystem": "npm"
          },
          {
            "name": "picocolors",
            "direct": false,
            "version": "1.1.1",
            "ecosystem": "npm"
          },
          {
            "name": "picomatch",
            "direct": false,
            "version": "2.3.2",
            "ecosystem": "npm"
          },
          {
            "name": "picomatch",
            "direct": false,
            "version": "4.0.4",
            "ecosystem": "npm"
          },
          {
            "name": "picomatch",
            "direct": false,
            "version": "4.0.5",
            "ecosystem": "npm"
          },
          {
            "name": "pidtree",
            "direct": false,
            "version": "0.6.1",
            "ecosystem": "npm"
          },
          {
            "name": "pkce-challenge",
            "direct": false,
            "version": "5.0.1",
            "ecosystem": "npm"
          },
          {
            "name": "pluralize",
            "direct": false,
            "version": "8.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "postcss",
            "direct": false,
            "version": "8.5.16",
            "ecosystem": "npm"
          },
          {
            "name": "proxy-addr",
            "direct": false,
            "version": "2.0.7",
            "ecosystem": "npm"
          },
          {
            "name": "pure-rand",
            "direct": false,
            "version": "6.1.0",
            "ecosystem": "npm"
          },
          {
            "name": "qs",
            "direct": false,
            "version": "6.15.2",
            "ecosystem": "npm"
          },
          {
            "name": "range-parser",
            "direct": false,
            "version": "1.2.1",
            "ecosystem": "npm"
          },
          {
            "name": "raw-body",
            "direct": false,
            "version": "3.0.2",
            "ecosystem": "npm"
          },
          {
            "name": "react",
            "direct": false,
            "version": "18.3.1",
            "ecosystem": "npm"
          },
          {
            "name": "react-native",
            "direct": false,
            "version": "0.76.5",
            "ecosystem": "npm"
          },
          {
            "name": "require-from-string",
            "direct": false,
            "version": "2.0.2",
            "ecosystem": "npm"
          },
          {
            "name": "restore-cursor",
            "direct": false,
            "version": "5.1.0",
            "ecosystem": "npm"
          },
          {
            "name": "rfdc",
            "direct": false,
            "version": "1.4.1",
            "ecosystem": "npm"
          },
          {
            "name": "rolldown",
            "direct": false,
            "version": "1.0.3",
            "ecosystem": "npm"
          },
          {
            "name": "router",
            "direct": false,
            "version": "2.2.0",
            "ecosystem": "npm"
          },
          {
            "name": "safer-buffer",
            "direct": false,
            "version": "2.1.2",
            "ecosystem": "npm"
          },
          {
            "name": "semver",
            "direct": false,
            "version": "7.8.4",
            "ecosystem": "npm"
          },
          {
            "name": "send",
            "direct": false,
            "version": "1.2.1",
            "ecosystem": "npm"
          },
          {
            "name": "serve-static",
            "direct": false,
            "version": "2.2.1",
            "ecosystem": "npm"
          },
          {
            "name": "setprototypeof",
            "direct": false,
            "version": "1.2.0",
            "ecosystem": "npm"
          },
          {
            "name": "shebang-command",
            "direct": false,
            "version": "2.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "shebang-regex",
            "direct": false,
            "version": "3.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "side-channel",
            "direct": false,
            "version": "1.1.1",
            "ecosystem": "npm"
          },
          {
            "name": "side-channel-list",
            "direct": false,
            "version": "1.0.1",
            "ecosystem": "npm"
          },
          {
            "name": "side-channel-map",
            "direct": false,
            "version": "1.0.1",
            "ecosystem": "npm"
          },
          {
            "name": "side-channel-weakmap",
            "direct": false,
            "version": "1.0.2",
            "ecosystem": "npm"
          },
          {
            "name": "siginfo",
            "direct": false,
            "version": "2.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "signal-exit",
            "direct": false,
            "version": "4.1.0",
            "ecosystem": "npm"
          },
          {
            "name": "sisteransi",
            "direct": false,
            "version": "1.0.5",
            "ecosystem": "npm"
          },
          {
            "name": "slice-ansi",
            "direct": false,
            "version": "5.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "slice-ansi",
            "direct": false,
            "version": "7.1.2",
            "ecosystem": "npm"
          },
          {
            "name": "source-map-js",
            "direct": false,
            "version": "1.2.1",
            "ecosystem": "npm"
          },
          {
            "name": "stackback",
            "direct": false,
            "version": "0.0.2",
            "ecosystem": "npm"
          },
          {
            "name": "statuses",
            "direct": false,
            "version": "2.0.2",
            "ecosystem": "npm"
          },
          {
            "name": "std-env",
            "direct": false,
            "version": "4.1.0",
            "ecosystem": "npm"
          },
          {
            "name": "string-argv",
            "direct": false,
            "version": "0.3.2",
            "ecosystem": "npm"
          },
          {
            "name": "string-width",
            "direct": false,
            "version": "7.2.0",
            "ecosystem": "npm"
          },
          {
            "name": "strip-ansi",
            "direct": false,
            "version": "7.2.0",
            "ecosystem": "npm"
          },
          {
            "name": "strip-final-newline",
            "direct": false,
            "version": "3.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "strnum",
            "direct": false,
            "version": "2.4.0",
            "ecosystem": "npm"
          },
          {
            "name": "supports-color",
            "direct": false,
            "version": "10.2.2",
            "ecosystem": "npm"
          },
          {
            "name": "supports-color",
            "direct": false,
            "version": "7.2.0",
            "ecosystem": "npm"
          },
          {
            "name": "tinybench",
            "direct": false,
            "version": "2.9.0",
            "ecosystem": "npm"
          },
          {
            "name": "tinyexec",
            "direct": false,
            "version": "1.2.4",
            "ecosystem": "npm"
          },
          {
            "name": "tinyglobby",
            "direct": false,
            "version": "0.2.17",
            "ecosystem": "npm"
          },
          {
            "name": "tinyrainbow",
            "direct": false,
            "version": "3.1.0",
            "ecosystem": "npm"
          },
          {
            "name": "to-regex-range",
            "direct": false,
            "version": "5.0.1",
            "ecosystem": "npm"
          },
          {
            "name": "toidentifier",
            "direct": false,
            "version": "1.0.1",
            "ecosystem": "npm"
          },
          {
            "name": "tslib",
            "direct": false,
            "version": "2.8.1",
            "ecosystem": "npm"
          },
          {
            "name": "tsx",
            "direct": false,
            "version": "4.22.4",
            "ecosystem": "npm"
          },
          {
            "name": "type-fest",
            "direct": false,
            "version": "4.41.0",
            "ecosystem": "npm"
          },
          {
            "name": "type-is",
            "direct": false,
            "version": "2.1.0",
            "ecosystem": "npm"
          },
          {
            "name": "typescript",
            "direct": false,
            "version": "5.9.3",
            "ecosystem": "npm"
          },
          {
            "name": "typescript",
            "direct": false,
            "version": "~5.3.3",
            "ecosystem": "npm"
          },
          {
            "name": "undici-types",
            "direct": false,
            "version": "6.21.0",
            "ecosystem": "npm"
          },
          {
            "name": "unpipe",
            "direct": false,
            "version": "1.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "uri-js-replace",
            "direct": false,
            "version": "1.0.1",
            "ecosystem": "npm"
          },
          {
            "name": "vary",
            "direct": false,
            "version": "1.1.2",
            "ecosystem": "npm"
          },
          {
            "name": "vite",
            "direct": false,
            "version": "8.0.16",
            "ecosystem": "npm"
          },
          {
            "name": "vitest",
            "direct": false,
            "version": "4.1.8",
            "ecosystem": "npm"
          },
          {
            "name": "which",
            "direct": false,
            "version": "2.0.2",
            "ecosystem": "npm"
          },
          {
            "name": "why-is-node-running",
            "direct": false,
            "version": "2.3.0",
            "ecosystem": "npm"
          },
          {
            "name": "wrap-ansi",
            "direct": false,
            "version": "9.0.2",
            "ecosystem": "npm"
          },
          {
            "name": "wrappy",
            "direct": false,
            "version": "1.0.2",
            "ecosystem": "npm"
          },
          {
            "name": "xml-naming",
            "direct": false,
            "version": "0.1.0",
            "ecosystem": "npm"
          },
          {
            "name": "yaml",
            "direct": false,
            "version": "2.9.0",
            "ecosystem": "npm"
          },
          {
            "name": "yaml-ast-parser",
            "direct": false,
            "version": "0.0.43",
            "ecosystem": "npm"
          },
          {
            "name": "yargs-parser",
            "direct": false,
            "version": "21.1.1",
            "ecosystem": "npm"
          },
          {
            "name": "zod",
            "direct": false,
            "version": "4.4.3",
            "ecosystem": "npm"
          },
          {
            "name": "zod-to-json-schema",
            "direct": false,
            "version": "3.25.2",
            "ecosystem": "npm"
          }
        ],
        "collected": true,
        "truncated": false,
        "total_count": 393,
        "direct_count": 9,
        "indirect_count": 384
      }
    },
    "maintainership": {
      "issues": {
        "open_prs": 0,
        "merged_prs": 167,
        "open_issues": 1,
        "closed_ratio": 0.992,
        "closed_issues": 132,
        "closed_unmerged_prs": 3
      },
      "bus_factor": 1,
      "bot_contributors": 0,
      "top_contributors": [
        {
          "type": "User",
          "login": "YosefHayim",
          "commits": 311,
          "avatar_url": "https://avatars.githubusercontent.com/u/179159376?v=4"
        }
      ],
      "contributors_sampled": 1,
      "top_contributor_share": 1
    },
    "quality_signals": {
      "has_ci": true,
      "has_tests": true,
      "ci_workflows": [
        "biome.yml",
        "build.yml",
        "ci.yml",
        "docs.yml",
        "e2e.yml",
        "lint.yml",
        "publish.yml",
        "report-failure.yml",
        "schema-drift.yml",
        "test.yml",
        "typecheck.yml"
      ],
      "has_docs_dir": true,
      "linter_configs": [
        "biome.json"
      ],
      "has_editorconfig": false,
      "has_linter_config": true,
      "has_precommit_config": false
    },
    "security_signals": {
      "lockfiles": [
        "pnpm-lock.yaml"
      ],
      "scorecard": {
        "checks": [
          {
            "name": "Binary-Artifacts",
            "score": 10,
            "reason": "no binaries found in the repo",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#binary-artifacts"
          },
          {
            "name": "Branch-Protection",
            "score": null,
            "reason": "internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#branch-protection"
          },
          {
            "name": "CI-Tests",
            "score": null,
            "reason": "no pull request found",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#ci-tests"
          },
          {
            "name": "CII-Best-Practices",
            "score": 0,
            "reason": "no effort to earn an OpenSSF best practices badge detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#cii-best-practices"
          },
          {
            "name": "Code-Review",
            "score": 0,
            "reason": "Found 0/30 approved changesets -- score normalized to 0",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#code-review"
          },
          {
            "name": "Contributors",
            "score": 0,
            "reason": "project has 0 contributing companies or organizations -- score normalized to 0",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#contributors"
          },
          {
            "name": "Dangerous-Workflow",
            "score": 10,
            "reason": "no dangerous workflow patterns detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dangerous-workflow"
          },
          {
            "name": "Dependency-Update-Tool",
            "score": 0,
            "reason": "no update tool detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dependency-update-tool"
          },
          {
            "name": "Fuzzing",
            "score": 0,
            "reason": "project is not fuzzed",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#fuzzing"
          },
          {
            "name": "License",
            "score": 10,
            "reason": "license file detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#license"
          },
          {
            "name": "Maintained",
            "score": 0,
            "reason": "project was created within the last 90 days. Please review its contents carefully",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#maintained"
          },
          {
            "name": "Packaging",
            "score": 10,
            "reason": "packaging workflow detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#packaging"
          },
          {
            "name": "Pinned-Dependencies",
            "score": 0,
            "reason": "dependency not pinned by hash detected -- score normalized to 0",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#pinned-dependencies"
          },
          {
            "name": "SAST",
            "score": 0,
            "reason": "no SAST tool detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#sast"
          },
          {
            "name": "Security-Policy",
            "score": 0,
            "reason": "security policy file not detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#security-policy"
          },
          {
            "name": "Signed-Releases",
            "score": null,
            "reason": "no releases found",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#signed-releases"
          },
          {
            "name": "Token-Permissions",
            "score": 10,
            "reason": "GitHub workflow tokens follow principle of least privilege",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#token-permissions"
          },
          {
            "name": "Vulnerabilities",
            "score": 0,
            "reason": "10 existing vulnerabilities detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#vulnerabilities"
          }
        ],
        "commit": "a232009914c129d10ffc2e67387fc989cddf03ed",
        "ran_at": "2026-07-25T09:56:25Z",
        "aggregate_score": 3.7,
        "scorecard_version": "v5.5.0"
      },
      "has_codeql_workflow": false,
      "has_security_policy": false,
      "has_dependabot_config": false
    },
    "contribution_flow": {
      "collected": true,
      "ci_last_run_at": "2026-07-24T08:14:23Z",
      "oldest_open_prs": [],
      "last_merged_pr_at": "2026-07-02T17:43:38Z",
      "ci_last_conclusion": "SUCCESS",
      "oldest_open_issues": [
        {
          "number": 303,
          "created_at": "2026-07-23T07:47:16Z",
          "last_comment_at": "2026-07-23T08:15:28Z",
          "last_comment_author": "YosefHayim"
        }
      ]
    }
  },
  "config": {
    "disabled_metrics": [],
    "disabled_categories": [],
    "disabled_components": {}
  },
  "source": {
    "url": "https://github.com/YosefHayim/launch-store",
    "host": "github.com",
    "name": "launch-store",
    "owner": "YosefHayim"
  },
  "metrics": {
    "overall": {
      "key": "overall",
      "band": "moderate",
      "name": "Overall health",
      "note": null,
      "notes": [],
      "value": 62,
      "inputs": {
        "security": 47,
        "vitality": 75,
        "community": 41,
        "governance": 54,
        "engineering": 88
      },
      "components": []
    },
    "categories": [
      {
        "key": "vitality",
        "band": "good",
        "name": "Vitality",
        "value": 75,
        "weight": 0.22,
        "metrics": [
          {
            "key": "development_activity",
            "band": "moderate",
            "name": "Development activity",
            "note": null,
            "notes": [],
            "value": 58,
            "inputs": {
              "commits_last_year": 311,
              "human_commit_share": 1,
              "days_since_last_push": 5,
              "active_weeks_last_year": 6
            },
            "components": [
              {
                "key": "push_recency",
                "name": "Push recency",
                "detail": "last push 5 days ago",
                "points": 36,
                "status": "met",
                "details": [
                  {
                    "code": "push_recency",
                    "params": {
                      "days": 5
                    }
                  }
                ],
                "max_points": 36
              },
              {
                "key": "commit_cadence",
                "name": "Commit cadence",
                "detail": "6/52 weeks with commits",
                "points": 4.2,
                "status": "partial",
                "details": [
                  {
                    "code": "commit_cadence_weeks",
                    "params": {
                      "weeks": 6
                    }
                  }
                ],
                "max_points": 36
              },
              {
                "key": "commit_volume",
                "name": "Commit volume",
                "detail": "311 commits in the last year",
                "points": 18,
                "status": "met",
                "details": [
                  {
                    "code": "commits_last_year",
                    "params": {
                      "count": 311
                    }
                  }
                ],
                "max_points": 18
              },
              {
                "key": "openssf_scorecard_maintained",
                "name": "OpenSSF Scorecard: Maintained",
                "detail": "project was created within the last 90 days. Please review its contents carefully",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "release_discipline",
            "band": "excellent",
            "name": "Release discipline",
            "note": "Excluded from scoring (no data or not applicable): OpenSSF Scorecard: Signed-Releases. Remaining weights renormalized.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "openssf_scorecard_signed_releases"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              }
            ],
            "value": 100,
            "inputs": {
              "releases_count": 37,
              "latest_release_tag": "v0.32.8",
              "releases_from_tags": false,
              "days_since_latest_release": 5,
              "mean_days_between_releases": 2.4
            },
            "components": [
              {
                "key": "ships_releases",
                "name": "Ships releases",
                "detail": "37 releases published",
                "points": 27,
                "status": "met",
                "details": [
                  {
                    "code": "releases_published",
                    "params": {
                      "count": 37
                    }
                  }
                ],
                "max_points": 27
              },
              {
                "key": "release_recency",
                "name": "Release recency",
                "detail": "latest release 5 days ago",
                "points": 36,
                "status": "met",
                "details": [
                  {
                    "code": "release_recency",
                    "params": {
                      "days": 5
                    }
                  }
                ],
                "max_points": 36
              },
              {
                "key": "release_cadence",
                "name": "Release cadence",
                "detail": "a release every ~2.4 days",
                "points": 27,
                "status": "met",
                "details": [
                  {
                    "code": "release_cadence",
                    "params": {
                      "gap": 2.4
                    }
                  }
                ],
                "max_points": 27
              },
              {
                "key": "openssf_scorecard_signed_releases",
                "name": "OpenSSF Scorecard: Signed-Releases",
                "detail": "no releases found",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_data",
                    "params": {}
                  }
                ],
                "max_points": 10
              }
            ]
          },
          {
            "key": "abandonment",
            "band": "excellent",
            "name": "Abandonment",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "cap": null,
              "state": "unverified",
              "guards": [],
              "signals": [],
              "red_flag": false,
              "multiplier_pct": 100,
              "declared_reason": null,
              "unverified_reason": "repository_too_young",
              "unanswered_open_prs": null,
              "unanswered_open_issues": null,
              "days_since_last_merged_pr": null,
              "days_since_last_human_commit": null,
              "days_since_last_human_commit_is_floor": false
            },
            "components": [
              {
                "key": "project_is_still_maintained",
                "name": "Project is still maintained",
                "detail": "maintenance record not established from the collected data",
                "points": 100,
                "status": "met",
                "details": [
                  {
                    "code": "abandonment_unverified",
                    "params": {}
                  }
                ],
                "max_points": 100
              }
            ]
          }
        ],
        "description": "Is the project alive — is code being written and are releases shipping?"
      },
      {
        "key": "community",
        "band": "at_risk",
        "name": "Community & Adoption",
        "value": 41,
        "weight": 0.18,
        "metrics": [
          {
            "key": "popularity",
            "band": "critical",
            "name": "Popularity & adoption",
            "note": null,
            "notes": [],
            "value": 5,
            "inputs": {
              "forks": 1,
              "stars": 3,
              "watchers": 0,
              "growth_state": "unverified",
              "growth_factor_pct": 100,
              "growth_unverified_reason": "no_history"
            },
            "components": [
              {
                "key": "stars",
                "name": "Stars",
                "detail": "3 stars",
                "points": 4.9,
                "status": "partial",
                "details": [
                  {
                    "code": "stars",
                    "params": {
                      "count": 3
                    }
                  }
                ],
                "max_points": 60
              },
              {
                "key": "forks",
                "name": "Forks",
                "detail": "1 forks",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "forks",
                    "params": {
                      "count": 1
                    }
                  }
                ],
                "max_points": 25
              },
              {
                "key": "watchers",
                "name": "Watchers",
                "detail": "0 watchers",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "watchers",
                    "params": {
                      "count": 0
                    }
                  }
                ],
                "max_points": 15
              }
            ]
          },
          {
            "key": "community_health",
            "band": "good",
            "name": "Community health",
            "note": null,
            "notes": [],
            "value": 70,
            "inputs": {
              "has_readme": true,
              "has_license": true,
              "has_contributing": true,
              "has_issue_template": false,
              "has_code_of_conduct": false,
              "has_pull_request_template": false
            },
            "components": [
              {
                "key": "readme",
                "name": "README",
                "detail": null,
                "points": 22.5,
                "status": "met",
                "details": [],
                "max_points": 22.5
              },
              {
                "key": "license",
                "name": "License",
                "detail": "recognized license (MIT)",
                "points": 22.5,
                "status": "met",
                "details": [
                  {
                    "code": "license_standard",
                    "params": {}
                  },
                  {
                    "code": "license_spdx",
                    "params": {
                      "spdx": "MIT"
                    }
                  }
                ],
                "max_points": 22.5
              },
              {
                "key": "contributing_guide",
                "name": "CONTRIBUTING guide",
                "detail": null,
                "points": 18,
                "status": "met",
                "details": [],
                "max_points": 18
              },
              {
                "key": "code_of_conduct",
                "name": "Code of conduct",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 13.5
              },
              {
                "key": "issue_template",
                "name": "Issue template",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.2
              },
              {
                "key": "pr_template",
                "name": "PR template",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 6.3
              }
            ]
          },
          {
            "key": "ecosystem_adoption",
            "band": "moderate",
            "name": "Ecosystem adoption (downloads)",
            "note": "Excluded from scoring (no data or not applicable): Registry dependents. Remaining weights renormalized.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "registry_dependents"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              }
            ],
            "value": 57,
            "inputs": {
              "packages": [
                "launch-store"
              ],
              "dependents": null,
              "ecosystems": "npm",
              "total_downloads": null,
              "monthly_downloads": 2629
            },
            "components": [
              {
                "key": "monthly_downloads",
                "name": "Monthly downloads",
                "detail": "2,629 downloads/month across npm",
                "points": 45.6,
                "status": "partial",
                "details": [
                  {
                    "code": "downloads_monthly",
                    "params": {
                      "count": 2629,
                      "ecosystems": "npm"
                    }
                  }
                ],
                "max_points": 80
              },
              {
                "key": "registry_dependents",
                "name": "Registry dependents",
                "detail": "not reported by this ecosystem",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "not_reported_by_this_ecosystem",
                    "params": {}
                  }
                ],
                "max_points": 20
              }
            ]
          }
        ],
        "description": "Does the project have users, downloads, attention, and a welcoming setup for contributors?"
      },
      {
        "key": "governance",
        "band": "moderate",
        "name": "Sustainability & Governance",
        "value": 54,
        "weight": 0.24,
        "metrics": [
          {
            "key": "maintainer_resilience",
            "band": "critical",
            "name": "Maintainer resilience (bus factor)",
            "note": null,
            "notes": [],
            "value": 10,
            "inputs": {
              "bus_factor": 1,
              "contributors_sampled": 1,
              "top_contributor_share": 1
            },
            "components": [
              {
                "key": "bus_factor",
                "name": "Bus factor",
                "detail": "1 contributor(s) cover half of all commits",
                "points": 9,
                "status": "partial",
                "details": [
                  {
                    "code": "bus_factor",
                    "params": {
                      "count": 1
                    }
                  }
                ],
                "max_points": 54
              },
              {
                "key": "commit_distribution",
                "name": "Commit distribution",
                "detail": "top contributor authored 100% of commits",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "top_contributor_share",
                    "params": {
                      "share": 100
                    }
                  }
                ],
                "max_points": 22.5
              },
              {
                "key": "contributor_breadth",
                "name": "Contributor breadth",
                "detail": "1 contributors",
                "points": 1.4,
                "status": "partial",
                "details": [
                  {
                    "code": "contributors_sampled",
                    "params": {
                      "count": 1
                    }
                  }
                ],
                "max_points": 13.5
              },
              {
                "key": "openssf_scorecard_contributors",
                "name": "OpenSSF Scorecard: Contributors",
                "detail": "project has 0 contributing companies or organizations -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "responsiveness",
            "band": "good",
            "name": "Issue & PR responsiveness",
            "note": null,
            "notes": [],
            "value": 84,
            "inputs": {
              "merged_prs": 167,
              "open_issues": 1,
              "closed_issues": 132,
              "issue_closed_ratio": 0.992,
              "closed_unmerged_prs": 3
            },
            "components": [
              {
                "key": "issue_resolution",
                "name": "Issue resolution",
                "detail": "99% of issues closed",
                "points": 46.4,
                "status": "partial",
                "details": [
                  {
                    "code": "issues_closed_share",
                    "params": {
                      "share": 99
                    }
                  }
                ],
                "max_points": 46.75
              },
              {
                "key": "pr_acceptance",
                "name": "PR acceptance",
                "detail": "167/170 decided PRs merged",
                "points": 37.6,
                "status": "partial",
                "details": [
                  {
                    "code": "decided_prs_merged",
                    "params": {
                      "merged": 167,
                      "decided": 170
                    }
                  }
                ],
                "max_points": 38.25
              },
              {
                "key": "openssf_scorecard_code_review",
                "name": "OpenSSF Scorecard: Code-Review",
                "detail": "Found 0/30 approved changesets -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 15
              }
            ]
          },
          {
            "key": "stewardship",
            "band": "at_risk",
            "name": "Ownership & stewardship",
            "note": "Excluded from scoring (no data or not applicable): Verified domain. Remaining weights renormalized.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "verified_domain"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              }
            ],
            "value": 38,
            "inputs": {
              "followers": 16,
              "owner_type": "User",
              "is_verified": null,
              "owner_login": "YosefHayim",
              "public_repos": 12,
              "account_age_days": 701
            },
            "components": [
              {
                "key": "ownership_backing",
                "name": "Ownership backing",
                "detail": "personal (user) account",
                "points": 10,
                "status": "partial",
                "details": [
                  {
                    "code": "owner_personal",
                    "params": {}
                  }
                ],
                "max_points": 30
              },
              {
                "key": "verified_domain",
                "name": "Verified domain",
                "detail": "not applicable to user accounts",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "not_applicable_to_user_accounts",
                    "params": {}
                  }
                ],
                "max_points": 20
              },
              {
                "key": "owner_reach",
                "name": "Owner reach",
                "detail": "16 followers of YosefHayim",
                "points": 8.8,
                "status": "partial",
                "details": [
                  {
                    "code": "owner_followers",
                    "params": {
                      "count": 16,
                      "login": "YosefHayim"
                    }
                  }
                ],
                "max_points": 25
              },
              {
                "key": "track_record",
                "name": "Track record",
                "detail": "12 public repos, account ~1 yr old",
                "points": 11.9,
                "status": "partial",
                "details": [
                  {
                    "code": "public_repos",
                    "params": {
                      "count": 12
                    }
                  },
                  {
                    "code": "account_age_years",
                    "params": {
                      "years": 1
                    }
                  }
                ],
                "max_points": 25
              }
            ]
          },
          {
            "key": "package_maintenance",
            "band": "excellent",
            "name": "Package maintenance",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "packages": [
                "launch-store"
              ],
              "ecosystems": "npm",
              "any_deprecated": false,
              "min_days_since_publish": 5
            },
            "components": [
              {
                "key": "published_resolvable",
                "name": "Published & resolvable",
                "detail": "1 package(s) on npm",
                "points": 25,
                "status": "met",
                "details": [
                  {
                    "code": "packages_published",
                    "params": {
                      "count": 1,
                      "ecosystems": "npm"
                    }
                  }
                ],
                "max_points": 25
              },
              {
                "key": "publish_recency",
                "name": "Publish recency",
                "detail": "latest publish 5 days ago",
                "points": 35,
                "status": "met",
                "details": [
                  {
                    "code": "publish_recency",
                    "params": {
                      "days": 5
                    }
                  }
                ],
                "max_points": 35
              },
              {
                "key": "version_history",
                "name": "Version history",
                "detail": "36 published versions",
                "points": 20,
                "status": "met",
                "details": [
                  {
                    "code": "published_versions",
                    "params": {
                      "count": 36
                    }
                  }
                ],
                "max_points": 20
              },
              {
                "key": "not_deprecated",
                "name": "Not deprecated",
                "detail": "active, not deprecated or yanked",
                "points": 20,
                "status": "met",
                "details": [
                  {
                    "code": "package_not_deprecated",
                    "params": {}
                  }
                ],
                "max_points": 20
              }
            ]
          }
        ],
        "description": "Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?"
      },
      {
        "key": "engineering",
        "band": "excellent",
        "name": "Engineering Quality",
        "value": 88,
        "weight": 0.2,
        "metrics": [
          {
            "key": "engineering_practices",
            "band": "good",
            "name": "Engineering practices",
            "note": "Excluded from scoring (no data or not applicable): OpenSSF Scorecard: CI-Tests. Remaining weights renormalized.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "openssf_scorecard_ci_tests"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              }
            ],
            "value": 80,
            "inputs": {
              "has_ci": true,
              "has_tests": true,
              "has_editorconfig": false,
              "has_linter_config": true,
              "has_precommit_config": false
            },
            "components": [
              {
                "key": "ci_workflows",
                "name": "CI workflows",
                "detail": "11 workflow(s)",
                "points": 24,
                "status": "met",
                "details": [
                  {
                    "code": "ci_workflows",
                    "params": {
                      "count": 11
                    }
                  }
                ],
                "max_points": 24
              },
              {
                "key": "tests_present",
                "name": "Tests present",
                "detail": null,
                "points": 24,
                "status": "met",
                "details": [],
                "max_points": 24
              },
              {
                "key": "linter_config",
                "name": "Linter config",
                "detail": "biome.json",
                "points": 16,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": "biome.json"
                    }
                  }
                ],
                "max_points": 16
              },
              {
                "key": "pre_commit_hooks",
                "name": "Pre-commit hooks",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 9.6
              },
              {
                "key": "editorconfig",
                "name": ".editorconfig",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 6.4
              },
              {
                "key": "openssf_scorecard_ci_tests",
                "name": "OpenSSF Scorecard: CI-Tests",
                "detail": "no pull request found",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_data",
                    "params": {}
                  }
                ],
                "max_points": 20
              }
            ]
          },
          {
            "key": "documentation",
            "band": "excellent",
            "name": "Documentation",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "topics": [
                "android",
                "app-store",
                "app-store-connect",
                "ci-cd",
                "cli",
                "code-signing",
                "eas",
                "expo",
                "fastlane",
                "ios",
                "mobile",
                "play-store",
                "react-native",
                "testflight",
                "expo-updates",
                "google-play",
                "nodejs",
                "typescript"
              ],
              "has_wiki": true,
              "homepage": "https://www.npmjs.com/package/launch-store",
              "has_readme": true,
              "has_docs_dir": true,
              "has_description": true
            },
            "components": [
              {
                "key": "readme",
                "name": "README",
                "detail": null,
                "points": 30,
                "status": "met",
                "details": [],
                "max_points": 30
              },
              {
                "key": "documentation_directory",
                "name": "Documentation directory",
                "detail": null,
                "points": 25,
                "status": "met",
                "details": [],
                "max_points": 25
              },
              {
                "key": "documentation_homepage_site",
                "name": "Documentation / homepage site",
                "detail": "https://www.npmjs.com/package/launch-store",
                "points": 15,
                "status": "met",
                "details": [],
                "max_points": 15
              },
              {
                "key": "repository_description",
                "name": "Repository description",
                "detail": null,
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              },
              {
                "key": "topics",
                "name": "Topics",
                "detail": "18 topics",
                "points": 10,
                "status": "met",
                "details": [
                  {
                    "code": "topics_count",
                    "params": {
                      "count": 18
                    }
                  }
                ],
                "max_points": 10
              },
              {
                "key": "wiki",
                "name": "Wiki",
                "detail": null,
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              }
            ]
          }
        ],
        "description": "Are baseline engineering and documentation practices in place?"
      },
      {
        "key": "security",
        "band": "at_risk",
        "name": "Security",
        "value": 47,
        "weight": 0.16,
        "metrics": [
          {
            "key": "security_posture",
            "band": "at_risk",
            "name": "Security posture",
            "note": "Excluded from scoring (no data or not applicable): Branch-Protection, CI-Tests, Signed-Releases. Remaining weights renormalized.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "branch_protection",
                    "ci_tests",
                    "signed_releases"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              }
            ],
            "value": 37,
            "inputs": {
              "source": "openssf_scorecard",
              "checks_evaluated": 15,
              "scorecard_version": "v5.5.0",
              "checks_inconclusive": 3,
              "scorecard_aggregate": 3.7
            },
            "components": [
              {
                "key": "binary_artifacts",
                "name": "Binary-Artifacts",
                "detail": "no binaries found in the repo",
                "points": 7.5,
                "status": "met",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "branch_protection",
                "name": "Branch-Protection",
                "detail": "internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_data",
                    "params": {}
                  }
                ],
                "max_points": 7.5
              },
              {
                "key": "ci_tests",
                "name": "CI-Tests",
                "detail": "no pull request found",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_data",
                    "params": {}
                  }
                ],
                "max_points": 2.5
              },
              {
                "key": "cii_best_practices",
                "name": "CII-Best-Practices",
                "detail": "no effort to earn an OpenSSF best practices badge detected",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "code_review",
                "name": "Code-Review",
                "detail": "Found 0/30 approved changesets -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "contributors",
                "name": "Contributors",
                "detail": "project has 0 contributing companies or organizations -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "dangerous_workflow",
                "name": "Dangerous-Workflow",
                "detail": "no dangerous workflow patterns detected",
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              },
              {
                "key": "dependency_update_tool",
                "name": "Dependency-Update-Tool",
                "detail": "no update tool detected",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "fuzzing",
                "name": "Fuzzing",
                "detail": "project is not fuzzed",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 5
              },
              {
                "key": "license",
                "name": "License",
                "detail": "license file detected",
                "points": 2.5,
                "status": "met",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "maintained",
                "name": "Maintained",
                "detail": "project was created within the last 90 days. Please review its contents carefully",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "packaging",
                "name": "Packaging",
                "detail": "packaging workflow detected",
                "points": 5,
                "status": "met",
                "details": [],
                "max_points": 5
              },
              {
                "key": "pinned_dependencies",
                "name": "Pinned-Dependencies",
                "detail": "dependency not pinned by hash detected -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 5
              },
              {
                "key": "sast",
                "name": "SAST",
                "detail": "no SAST tool detected",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 5
              },
              {
                "key": "security_policy",
                "name": "Security-Policy",
                "detail": "security policy file not detected",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 5
              },
              {
                "key": "signed_releases",
                "name": "Signed-Releases",
                "detail": "no releases found",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_data",
                    "params": {}
                  }
                ],
                "max_points": 7.5
              },
              {
                "key": "token_permissions",
                "name": "Token-Permissions",
                "detail": "GitHub workflow tokens follow principle of least privilege",
                "points": 7.5,
                "status": "met",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "vulnerabilities",
                "name": "Vulnerabilities",
                "detail": "10 existing vulnerabilities detected",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              }
            ]
          },
          {
            "key": "dependency_advisories",
            "band": "excellent",
            "name": "Dependency advisories",
            "note": "Matched the npm:launch-store@0.32.8 runtime dependency closure — what installing the published package pulls in — 165 packages. Reachability is not analyzed.",
            "notes": [
              {
                "code": "advisories_scope_published",
                "params": {
                  "package": "npm:launch-store@0.32.8",
                  "assessed": 165
                }
              },
              {
                "code": "advisories_reachability",
                "params": {}
              }
            ],
            "value": 88,
            "inputs": {
              "source": "osv",
              "advisories": 1,
              "affected_packages": 1,
              "assessed_packages": 165,
              "unassessed_packages": 0,
              "affected_by_severity": "moderate 1",
              "direct_affected_packages": 0
            },
            "components": [
              {
                "key": "direct_dependencies_free_of_known_advisories",
                "name": "Direct dependencies free of known advisories",
                "detail": "no direct dependency carries a known advisory",
                "points": 35,
                "status": "met",
                "details": [
                  {
                    "code": "no_direct_advisories",
                    "params": {}
                  }
                ],
                "max_points": 35
              },
              {
                "key": "indirect_dependencies_free_of_known_advisories",
                "name": "Indirect dependencies free of known advisories",
                "detail": "1 affected: @hono/node-server 1.19.15 (moderate 5.9)",
                "points": 13.2,
                "status": "partial",
                "details": [
                  {
                    "code": "advisories_affected",
                    "params": {
                      "count": 1,
                      "packages": "@hono/node-server 1.19.15 (moderate 5.9)"
                    }
                  }
                ],
                "max_points": 25
              },
              {
                "key": "no_advisories_left_outstanding",
                "name": "No advisories left outstanding",
                "detail": "no advisory has been public longer than 90 days",
                "points": 40,
                "status": "met",
                "details": [
                  {
                    "code": "advisories_none_stale",
                    "params": {
                      "days": 90
                    }
                  }
                ],
                "max_points": 40
              }
            ]
          },
          {
            "key": "malicious_dependencies",
            "band": "excellent",
            "name": "Malicious dependencies",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "source": "osv",
              "meaning": "reported as a malicious package by the OpenSSF corpus; the remedy is removal or moving off the compromised name, never an upgrade of the same artifact. Versions the registry has since pulled are listed but not scored",
              "packages": [],
              "red_flag": false,
              "assessed_packages": 165,
              "malicious_packages": 0,
              "direct_malicious_packages": 0,
              "withdrawn_malicious_packages": 0,
              "installable_malicious_packages": 0
            },
            "components": [
              {
                "key": "no_dependency_reported_as_a_malicious_package",
                "name": "No dependency reported as a malicious package",
                "detail": "no dependency is reported as a malicious package",
                "points": 100,
                "status": "met",
                "details": [
                  {
                    "code": "no_malicious_dependencies",
                    "params": {}
                  }
                ],
                "max_points": 100
              }
            ]
          },
          {
            "key": "high_risk_jurisdiction_exposure",
            "band": "excellent",
            "name": "High-Risk Jurisdiction Exposure",
            "note": "Only high-confidence self-published location evidence affects this multiplier. Ambiguous matches are review-only; country evidence is not proof of nationality, citizenship, legal registration, malicious intent, or sanctions status.",
            "notes": [
              {
                "code": "jurisdiction_evidence_limits",
                "params": {}
              }
            ],
            "value": 100,
            "inputs": {
              "meaning": "self-published location evidence; not nationality or citizenship",
              "red_flag": false,
              "exposures": [],
              "policy_countries": [
                "Russia",
                "Iran",
                "North Korea"
              ],
              "review_only_matches": 0,
              "assessed_self_published_locations": 2
            },
            "components": [
              {
                "key": "policy_exposure_multiplier",
                "name": "Policy exposure multiplier",
                "detail": "no confirmed policy-scope location match",
                "points": 100,
                "status": "met",
                "details": [
                  {
                    "code": "jurisdiction_no_match",
                    "params": {}
                  }
                ],
                "max_points": 100
              }
            ]
          }
        ],
        "description": "Are visible security and supply-chain practices strong, with no malicious dependency and no unresolved high-risk jurisdiction exposure?"
      },
      {
        "key": "ai_readiness",
        "band": "good",
        "name": "AI Readiness",
        "value": 77,
        "weight": 0,
        "metrics": [
          {
            "key": "ai_agent_context",
            "band": "excellent",
            "name": "Agent context & guidance",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "has_llms_txt": true,
              "legible_history_share": 1,
              "agent_instruction_files": [
                ".cursor/rules/core-types.mdc",
                ".cursor/rules/exec-secrets.mdc",
                ".cursor/rules/launch.mdc",
                ".cursor/rules/providers.mdc",
                "AGENTS.md",
                "CLAUDE.md"
              ],
              "agent_instruction_max_bytes": 7397
            },
            "components": [
              {
                "key": "agent_instructions",
                "name": "Agent instructions",
                "detail": ".cursor/rules/core-types.mdc, .cursor/rules/exec-secrets.mdc, .cursor/rules/launch.mdc, .cursor/rules/providers.mdc, AGENTS.md, CLAUDE.md",
                "points": 45,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": ".cursor/rules/core-types.mdc, .cursor/rules/exec-secrets.mdc, .cursor/rules/launch.mdc, .cursor/rules/providers.mdc, AGENTS.md, CLAUDE.md"
                    }
                  }
                ],
                "max_points": 45
              },
              {
                "key": "machine_readable_docs_llms_txt",
                "name": "Machine-readable docs (llms.txt)",
                "detail": "llms.txt present",
                "points": 15,
                "status": "met",
                "details": [
                  {
                    "code": "llms_txt_present",
                    "params": {}
                  }
                ],
                "max_points": 15
              },
              {
                "key": "legible_commit_history",
                "name": "Legible commit history",
                "detail": "100 of 100 human commits state their intent (structured subject or explanatory body)",
                "points": 40,
                "status": "met",
                "details": [
                  {
                    "code": "legible_history",
                    "params": {
                      "legible": 100,
                      "sampled": 100
                    }
                  }
                ],
                "max_points": 40
              }
            ]
          },
          {
            "key": "ai_verify_loop",
            "band": "moderate",
            "name": "Verify loop (build / test / typecheck)",
            "note": null,
            "notes": [],
            "value": 64,
            "inputs": {
              "has_nix": false,
              "has_tests": true,
              "lockfiles": [
                "pnpm-lock.yaml"
              ],
              "has_dockerfile": false,
              "typed_language": true,
              "bootstrap_files": [],
              "has_devcontainer": false,
              "has_linter_config": true,
              "typecheck_configs": [
                "examples/hello-world/tsconfig.json",
                "tsconfig.json"
              ],
              "agent_commit_share": 0.73,
              "toolchain_manifests": [],
              "dependency_bot_commit_share": 0
            },
            "components": [
              {
                "key": "one_command_bootstrap",
                "name": "One-command bootstrap",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 18
              },
              {
                "key": "automated_tests",
                "name": "Automated tests",
                "detail": null,
                "points": 22,
                "status": "met",
                "details": [],
                "max_points": 22
              },
              {
                "key": "lint_format_config",
                "name": "Lint / format config",
                "detail": "biome.json",
                "points": 11,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": "biome.json"
                    }
                  }
                ],
                "max_points": 11
              },
              {
                "key": "static_type_checking",
                "name": "Static type checking",
                "detail": "examples/hello-world/tsconfig.json, tsconfig.json",
                "points": 11,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": "examples/hello-world/tsconfig.json, tsconfig.json"
                    }
                  }
                ],
                "max_points": 11
              },
              {
                "key": "reproducible_environment",
                "name": "Reproducible environment",
                "detail": "lockfile",
                "points": 10,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": "lockfile"
                    }
                  }
                ],
                "max_points": 10
              },
              {
                "key": "demonstrated_agent_practice",
                "name": "Demonstrated agent practice",
                "detail": "73 of the last 100 commits agent-authored or agent-credited",
                "points": 10,
                "status": "met",
                "details": [
                  {
                    "code": "agent_authored_commits",
                    "params": {
                      "count": 73,
                      "sampled": 100
                    }
                  }
                ],
                "max_points": 10
              },
              {
                "key": "automated_maintenance",
                "name": "Automated maintenance",
                "detail": "no automated dependency updates observed",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "no_dependency_automation",
                    "params": {}
                  }
                ],
                "max_points": 8
              },
              {
                "key": "openssf_scorecard_pinned_dependencies",
                "name": "OpenSSF Scorecard: Pinned-Dependencies",
                "detail": "dependency not pinned by hash detected -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "ai_code_legibility",
            "band": "excellent",
            "name": "Code legibility for models",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "primary_language": "TypeScript",
              "largest_source_bytes": 5069338,
              "source_files_sampled": 525,
              "oversized_source_files": 4
            },
            "components": [
              {
                "key": "type_checkable_code",
                "name": "Type-checkable code",
                "detail": "TypeScript (statically typed)",
                "points": 45,
                "status": "met",
                "details": [
                  {
                    "code": "statically_typed_language",
                    "params": {
                      "language": "TypeScript"
                    }
                  }
                ],
                "max_points": 45
              },
              {
                "key": "manageable_file_sizes",
                "name": "Manageable file sizes",
                "detail": "4/525 source files over 60KB",
                "points": 54.6,
                "status": "partial",
                "details": [
                  {
                    "code": "oversized_source_files",
                    "params": {
                      "kb": 60,
                      "sampled": 525,
                      "oversized": 4
                    }
                  }
                ],
                "max_points": 55
              }
            ]
          },
          {
            "key": "ai_interfaces",
            "band": "at_risk",
            "name": "Machine-readable interfaces",
            "note": null,
            "notes": [],
            "value": 40,
            "inputs": {
              "example_dirs": [
                "examples"
              ],
              "has_mcp_signal": false,
              "api_schema_files": []
            },
            "components": [
              {
                "key": "api_schema_openapi_graphql_proto",
                "name": "API schema (OpenAPI/GraphQL/proto)",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 40
              },
              {
                "key": "mcp_server",
                "name": "MCP server",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 20
              },
              {
                "key": "runnable_examples",
                "name": "Runnable examples",
                "detail": "examples",
                "points": 40,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": "examples"
                    }
                  }
                ],
                "max_points": 40
              }
            ]
          }
        ],
        "description": "How well is the repo equipped to be developed and maintained with AI coding agents? An independent, experimental badge — weight 0.0, so it is surfaced on its own and does not affect the overall health score."
      }
    ],
    "metrics_version": "1.13.0"
  },
  "warnings": [
    "Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token"
  ],
  "report_type": "repository",
  "generated_at": "2026-07-25T09:56:31.982278Z",
  "schema_version": "0.27.0",
  "badge_url": "https://raw.githubusercontent.com/inspect-software/badges/main/v1/y/YosefHayim/launch-store.svg",
  "full_name": "YosefHayim/launch-store",
  "license_state": "standard",
  "license_spdx": "MIT"
}

Оцінки — це сигнали, а не гарантії. Вони відображають публічно видимі практики на GitHub — це не аудит коду й не гарантія безпеки.

Відсутні дані виключаються, а ваги перенормовуються — нуль за відсутність ніколи не ставиться. Методологія версіонована й відкрита: метрики v1.13.0, схема v0.27.0 — повна методологія · вікі метрик.

Як окремий результат виглядає на тлі всього реєстру: сукупна статистикаnpm.