ctrlcmdshft / homebridge-hubspace-platform

Не вдалося зібрати розв'язаний набір залежностей для цього звіту: GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository

Встановлення npm:homebridge-hubspace-platform@2.0.3 тягне 30 пакетів, прямих і транзитивних: 0 мають відомі сповіщення, з них 0 — прямі залежності.

Жодне відоме сповіщення не стосується оцінених залежностей.

Сповіщення означає, що версія, записана в графі залежностей, потрапляє в уражений діапазон. Досяжність не аналізується, а граф містить піниї розробки й тестування — знахідка може стосуватися інструментів, а не поставленого коду.

{
  "data": {
    "repo": {
      "topics": [
        "afero",
        "apple-homekit",
        "home-depot",
        "homebridge",
        "homebridge-plugin",
        "hubspace",
        "smart-home",
        "typescript"
      ],
      "is_fork": false,
      "size_kb": 949,
      "has_wiki": true,
      "homepage": null,
      "languages": {
        "HTML": 13330,
        "JavaScript": 21252,
        "TypeScript": 136388
      },
      "pushed_at": "2026-07-17T14:38:34Z",
      "created_at": "2026-05-03T14:53:44Z",
      "owner_type": "User",
      "updated_at": "2026-06-24T15:31:46Z",
      "description": "Homebridge plugin for controlling Hubspace accessories.",
      "is_archived": false,
      "is_disabled": false,
      "license_spdx": "MIT",
      "default_branch": "main",
      "license_spdx_raw": "MIT",
      "primary_language": "TypeScript",
      "significant_languages": [
        "TypeScript",
        "JavaScript"
      ]
    },
    "owner": {
      "blog": null,
      "name": "Christopher Knudsen",
      "type": "User",
      "login": "ctrlcmdshft",
      "company": null,
      "location": "New Jersey",
      "followers": 3,
      "avatar_url": "https://avatars.githubusercontent.com/u/61129128?v=4",
      "created_at": "2020-02-17T01:45:35Z",
      "is_verified": null,
      "public_repos": 37,
      "account_age_days": 2347
    },
    "license": {
      "state": "standard",
      "spdx_id": "MIT",
      "raw_spdx": "MIT",
      "file_present": true,
      "scorecard_found": true,
      "profile_has_license": true
    },
    "activity": {
      "releases": [
        {
          "tag": "v2.0.3",
          "kind": "patch",
          "published_at": "2026-05-24T21:32:37Z"
        },
        {
          "tag": "v2.0.2",
          "kind": "patch",
          "published_at": "2026-05-24T14:21:17Z"
        },
        {
          "tag": "v2.0.1",
          "kind": "patch",
          "published_at": "2026-05-23T16:50:04Z"
        },
        {
          "tag": "v1.2.2",
          "kind": "patch",
          "published_at": "2026-05-17T14:25:09Z"
        },
        {
          "tag": "v1.2.1",
          "kind": "patch",
          "published_at": "2026-05-16T18:37:50Z"
        },
        {
          "tag": "v1.2.0",
          "kind": "minor",
          "published_at": "2026-05-14T23:14:25Z"
        },
        {
          "tag": "v1.1.21",
          "kind": "patch",
          "published_at": "2026-05-07T23:19:58Z"
        },
        {
          "tag": "v1.1.20",
          "kind": "patch",
          "published_at": "2026-05-06T00:13:36Z"
        },
        {
          "tag": "v1.1.19",
          "kind": "patch",
          "published_at": "2026-05-05T23:10:00Z"
        },
        {
          "tag": "v1.1.17",
          "kind": "patch",
          "published_at": "2026-05-04T19:29:15Z"
        },
        {
          "tag": "v1.1.16",
          "kind": "patch",
          "published_at": "2026-05-04T19:17:30Z"
        },
        {
          "tag": "v1.1.15",
          "kind": "patch",
          "published_at": "2026-05-04T19:17:25Z"
        },
        {
          "tag": "v1.1.14",
          "kind": "patch",
          "published_at": "2026-05-04T16:40:14Z"
        },
        {
          "tag": "v1.1.13",
          "kind": "patch",
          "published_at": "2026-05-04T16:40:08Z"
        },
        {
          "tag": "v1.1.12",
          "kind": "patch",
          "published_at": "2026-05-04T13:09:40Z"
        },
        {
          "tag": "v1.1.11",
          "kind": "patch",
          "published_at": "2026-05-04T12:59:24Z"
        },
        {
          "tag": "v1.1.10",
          "kind": "patch",
          "published_at": "2026-05-04T12:34:30Z"
        },
        {
          "tag": "v1.1.9",
          "kind": "patch",
          "published_at": "2026-05-04T12:21:42Z"
        },
        {
          "tag": "v1.1.8",
          "kind": "patch",
          "published_at": "2026-05-04T12:15:51Z"
        },
        {
          "tag": "v1.1.7",
          "kind": "patch",
          "published_at": "2026-05-04T04:56:41Z"
        },
        {
          "tag": "v1.1.6",
          "kind": "patch",
          "published_at": "2026-05-04T04:53:55Z"
        },
        {
          "tag": "v1.1.5",
          "kind": "patch",
          "published_at": "2026-05-04T04:47:00Z"
        },
        {
          "tag": "v1.1.4",
          "kind": "patch",
          "published_at": "2026-05-04T04:28:10Z"
        },
        {
          "tag": "v1.1.3",
          "kind": "patch",
          "published_at": "2026-05-04T04:24:36Z"
        },
        {
          "tag": "v1.1.2",
          "kind": "patch",
          "published_at": "2026-05-04T01:20:25Z"
        },
        {
          "tag": "v1.1.1",
          "kind": "patch",
          "published_at": "2026-05-04T01:08:51Z"
        },
        {
          "tag": "v1.0.32",
          "kind": "patch",
          "published_at": "2026-05-04T01:05:59Z"
        },
        {
          "tag": "v1.0.31",
          "kind": "patch",
          "published_at": "2026-05-04T00:58:48Z"
        },
        {
          "tag": "v1.0.28",
          "kind": "patch",
          "published_at": "2026-05-04T00:50:43Z"
        },
        {
          "tag": "v1.0.27",
          "kind": "patch",
          "published_at": "2026-05-04T00:41:14Z"
        },
        {
          "tag": "v1.0.26",
          "kind": "patch",
          "published_at": "2026-05-04T00:31:41Z"
        },
        {
          "tag": "v1.0.25",
          "kind": "patch",
          "published_at": "2026-05-03T22:41:49Z"
        },
        {
          "tag": "v1.0.24",
          "kind": "patch",
          "published_at": "2026-05-03T22:18:58Z"
        },
        {
          "tag": "v1.0.23",
          "kind": "patch",
          "published_at": "2026-05-03T22:12:56Z"
        },
        {
          "tag": "v1.0.22",
          "kind": "patch",
          "published_at": "2026-05-03T22:10:13Z"
        },
        {
          "tag": "v1.0.21",
          "kind": "patch",
          "published_at": "2026-05-03T22:06:49Z"
        },
        {
          "tag": "v1.0.20",
          "kind": "patch",
          "published_at": "2026-05-03T22:02:48Z"
        },
        {
          "tag": "v1.0.19",
          "kind": "patch",
          "published_at": "2026-05-03T21:56:58Z"
        },
        {
          "tag": "v1.0.18",
          "kind": "patch",
          "published_at": "2026-05-03T21:51:15Z"
        },
        {
          "tag": "v1.0.17",
          "kind": "patch",
          "published_at": "2026-05-03T21:09:31Z"
        }
      ],
      "recent_commits": [
        {
          "oid": "7c44a5cdf5d70d1e33243123b2c04b9c8607adbe",
          "body": null,
          "is_bot": false,
          "headline": "docs: add back-to-top links to each README section",
          "author_name": "ctrlcmdshft",
          "author_login": "ctrlcmdshft",
          "committed_at": "2026-05-28T19:06:01Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "b2c508e8e59a08e8f19587e419b7e7ade090688e",
          "body": null,
          "is_bot": false,
          "headline": "docs: center and balance README nav menu",
          "author_name": "ctrlcmdshft",
          "author_login": "ctrlcmdshft",
          "committed_at": "2026-05-28T19:03:56Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "42deee438adca290c5f18555ccfd5053b16b81b8",
          "body": null,
          "is_bot": false,
          "headline": "docs: add inline nav menu to README",
          "author_name": "ctrlcmdshft",
          "author_login": "ctrlcmdshft",
          "committed_at": "2026-05-28T19:02:23Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "9ec8e1ba75de259600cfb5079b6e58b386e7c17a",
          "body": "Guard setRawMode for Windows CMD/non-TTY with visible fallback.\nRename USERNAME/PASSWORD env vars to HUBSPACE_EMAIL/HUBSPACE_PASS\nto avoid Windows system variable collision.\n\nAdd Windows PowerShell commands (curl.exe and Invoke-WebRequest\nfallback) with requirements list to README Option A section.",
          "is_bot": false,
          "headline": "fix: Windows compatibility for dump script + README commands",
          "author_name": "ctrlcmdshft",
          "author_login": "ctrlcmdshft",
          "committed_at": "2026-05-28T18:57:49Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "2fdd6804b75619691dc6837a981d96445f961176",
          "body": "…cript\n\nThe TS version lacked 2FA support and compiled to dist/dump-devices.js,\nwhich shipped in the npm tarball unnecessarily. npm run dump now runs\nscripts/dump-devices.js directly — no build step required, 2FA included.\n\nResolves ISS-016.",
          "is_bot": false,
          "headline": "chore: remove src/dump-devices.ts, point npm run dump at standalone s…",
          "author_name": "ctrlcmdshft",
          "author_login": "ctrlcmdshft",
          "committed_at": "2026-05-25T13:55:31Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "899a8d604ad7ebfa1d051c2d03311240aabbee3c",
          "body": null,
          "is_bot": false,
          "headline": "chore: release 2.0.3",
          "author_name": "ctrlcmdshft",
          "author_login": "ctrlcmdshft",
          "committed_at": "2026-05-24T21:31:48Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "66da660e8d7e0d90076aaf4496b6e04f8b6bdefe",
          "body": "Switches from the simple password grant (hubspace_android) to the same\nhubspace_ios PKCE flow used by the plugin's custom UI. Accounts with 2FA\nenabled now receive an email code prompt; accounts without 2FA flow\nthrough transparently.",
          "is_bot": false,
          "headline": "feat: add 2FA support to dump-devices.js via PKCE flow",
          "author_name": "ctrlcmdshft",
          "author_login": "ctrlcmdshft",
          "committed_at": "2026-05-24T21:25:52Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "9f03488593c8b22c780a57d6ac28966023e2cb20",
          "body": "…structions",
          "is_bot": false,
          "headline": "docs: expand dump script section with full example output and copy in…",
          "author_name": "ctrlcmdshft",
          "author_login": "ctrlcmdshft",
          "committed_at": "2026-05-24T21:09:49Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "fd8b75164a43716a2851ad30f62fc5ea6c1e253e",
          "body": null,
          "is_bot": false,
          "headline": "fix: add copy marker so credentials stay outside paste area",
          "author_name": "ctrlcmdshft",
          "author_login": "ctrlcmdshft",
          "committed_at": "2026-05-24T21:07:10Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "d429219a8f6bc85cdecffb6cdb41508ed0d705b3",
          "body": null,
          "is_bot": false,
          "headline": "fix: use raw stdin for password prompt so label stays visible",
          "author_name": "ctrlcmdshft",
          "author_login": "ctrlcmdshft",
          "committed_at": "2026-05-24T21:04:25Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "10afaaf5ad6d291f0cc2ac4450b92f2c1b7ccfd7",
          "body": null,
          "is_bot": false,
          "headline": "fix: clarify password prompt — explain nothing will show",
          "author_name": "ctrlcmdshft",
          "author_login": "ctrlcmdshft",
          "committed_at": "2026-05-24T21:02:01Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "76e755f79ccae44a268aae49c7435cef5ff914ef",
          "body": null,
          "is_bot": false,
          "headline": "chore: bust GitHub CDN cache for dump-devices.js",
          "author_name": "ctrlcmdshft",
          "author_login": "ctrlcmdshft",
          "committed_at": "2026-05-24T20:59:35Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "22faa198b896ecaf0666fa0d7c0740fc689fdb15",
          "body": "The temp-file run approach (curl -o /tmp/... && node /tmp/...) attaches\nstdin to the terminal normally — the /dev/tty workaround was unnecessary\nand caused EBADF on the second prompt.",
          "is_bot": false,
          "headline": "fix: remove /dev/tty workaround, use plain readline with process.stdin",
          "author_name": "ctrlcmdshft",
          "author_login": "ctrlcmdshft",
          "committed_at": "2026-05-24T20:57:13Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "44156838099693e83fa0db1614d39fc2e04ea845",
          "body": "node -e \"$(curl ...)\" breaks interactive stdin in all shells.\nDownload to /tmp first then run with node so stdin stays attached\nto the terminal and prompts work correctly.",
          "is_bot": false,
          "headline": "fix: replace node -e curl one-liner with temp-file approach",
          "author_name": "ctrlcmdshft",
          "author_login": "ctrlcmdshft",
          "committed_at": "2026-05-24T20:55:42Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "83c58e4bb6e1320ac27fbf31a9bafa56349b8758",
          "body": "readline echo fails when node -e detaches stdin from the TTY.\nOpening /dev/tty directly bypasses stdin and restores visible input\nfor email and hidden input for password. Falls back to stdin/stdout\nwhen no controlling terminal is available.",
          "is_bot": false,
          "headline": "fix: open /dev/tty directly for reliable prompts under node -e",
          "author_name": "ctrlcmdshft",
          "author_login": "ctrlcmdshft",
          "committed_at": "2026-05-24T20:54:37Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "2b90f9fac5e1b940fa3ce928b25088d1917068ca",
          "body": "Hidden-only input gave no feedback causing accidental empty submissions.\nEmail now uses standard visible readline; password remains suppressed.",
          "is_bot": false,
          "headline": "fix: show email visibly, hide only password in dump script",
          "author_name": "ctrlcmdshft",
          "author_login": "ctrlcmdshft",
          "committed_at": "2026-05-24T20:52:29Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "ab93a5a05cb6a6c2a08623e805c7715b243ae17c",
          "body": "Raw mode was unreliable across terminal environments. Switch to the\nreadline _writeToOutput suppression approach used by npm/yarn — works\nconsistently whether run interactively or via node -e + curl.",
          "is_bot": false,
          "headline": "fix: suppress credential echo using readline _writeToOutput override",
          "author_name": "ctrlcmdshft",
          "author_login": "ctrlcmdshft",
          "committed_at": "2026-05-24T20:50:46Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "450543bee41368681a247f6006a8a346338c3da4",
          "body": "Both credentials now use raw-mode input (no echo) so neither appears\nin the terminal output or scroll-back buffer when copy-pasting results.",
          "is_bot": false,
          "headline": "fix: hide email and password input in dump script",
          "author_name": "ctrlcmdshft",
          "author_login": "ctrlcmdshft",
          "committed_at": "2026-05-24T20:46:55Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "3a0f0fc38ba7c57b6035fa3de5fb2d9168410a98",
          "body": "…logs\n\n- getStatusFault() now also fires GENERAL_FAULT when any error-flag\n  value is true (acz-error, storage-error), not only when offline\n- Redact geo-coordinates, wifi-ssid, wifi-mac-address, ble-mac-address\n  from debug logs and dump script output — values replaced with\n  [redacted] so the field name is preserved for capability analysis",
          "is_bot": false,
          "headline": "fix: fan error-flag triggers StatusFault; redact private fields from …",
          "author_name": "ctrlcmdshft",
          "author_login": "ctrlcmdshft",
          "committed_at": "2026-05-24T20:42:47Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "0ae03d83d90c77ab76a49c58477f38f3046fce74",
          "body": "Replaces the verbose-log-only flow with two options: the standalone\ndump script (Option A, no restart) and the debug log (Option B).\nFixes stale verbose reference in troubleshooting section.",
          "is_bot": false,
          "headline": "docs: update README device support section with dump script option",
          "author_name": "ctrlcmdshft",
          "author_login": "ctrlcmdshft",
          "committed_at": "2026-05-24T20:36:32Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "6e9a76b40683eabf2351b1736352f7b4b4aaa56c",
          "body": "Adds Option A (standalone dump script) alongside the existing debug log\napproach. Removes stale \"verbose\" config reference that no longer exists.",
          "is_bot": false,
          "headline": "docs: update device-support issue template with dump script instructions",
          "author_name": "ctrlcmdshft",
          "author_login": "ctrlcmdshft",
          "committed_at": "2026-05-24T20:30:22Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "dd9f0ccf3f8ddb0f69516cc6fb6406c8a5e714c5",
          "body": "Adds scripts/dump-devices.js — a standalone Node 18+ script users can\ncurl and run without installing anything to dump all Hubspace device\ncapabilities. Useful for requesting support for new device types by\npasting output into a GitHub issue. Also adds src/dump-devices.ts for\nlocal dev use via `npm run dump`. Both excluded from npm via .npmignore.",
          "is_bot": false,
          "headline": "feat: add device capability dump script for community support",
          "author_name": "ctrlcmdshft",
          "author_login": "ctrlcmdshft",
          "committed_at": "2026-05-24T20:28:40Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "1ede695759322689594f478b6cfb3e24ad4dfbd7",
          "body": "- Add [Auth], [Conclave], [Device], [Poll] log prefixes via createLogger()\n- Debug-gate Conclave noise (quick-polls, sweeps, device ID resolution)\n- Fix this.config.debug bug — poll debug gates were silently never firing\n- Fix unsupported device warning column alignment\n- Correct pollingInterval schema description (remove false 300s floor claim)\n- Update debug toggle description to match actual logged output",
          "is_bot": false,
          "headline": "chore: release 2.0.2 — structured log categories, Conclave log cleanup",
          "author_name": "ctrlcmdshft",
          "author_login": "ctrlcmdshft",
          "committed_at": "2026-05-24T14:20:41Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "d5b386409c0bf35c433b01fea9946b25ee66ed6c",
          "body": null,
          "is_bot": false,
          "headline": "chore: merge alpha into main for 2.0.1 release",
          "author_name": "ctrlcmdshft",
          "author_login": "ctrlcmdshft",
          "committed_at": "2026-05-23T16:46:43Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "228173822f3ff092134a6e2842500a070347940d",
          "body": "- Custom login UI with PKCE/OTP flow for 2FA accounts\n- Conclave push overhauled: private envelopes, BLE-MAC resolution, hub/app-open sweeps\n- No Response in HomeKit when device is offline; poll-failure offline detection\n- Fan rotation direction via RotationDirection characteristic\n- N-speed fan sup\n[…]\nn-speed-N-VVV format)\n- Multi-outlet support for surge taps and outdoor plugs\n- Login hang fix, color temp clamp, outlet StatusFault HAP warning fixed\n- CHANGELOG and README updated for stable release",
          "is_bot": false,
          "headline": "chore: release 2.0.1 — 2FA, Conclave overhaul, fan rotation direction",
          "author_name": "ctrlcmdshft",
          "author_login": "ctrlcmdshft",
          "committed_at": "2026-05-23T16:42:37Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "fd3bfa90d457f16cf44b3b6f8e5cd57bd67c3fd8",
          "body": "Drop Conclave quick-poll delay from 1500ms to 0ms for external\nstate changes. The deduplication guard in scheduleQuickPoll means\nplugin-initiated PUT commands still use the 3000ms poll (scheduled\nfirst), so the race condition fix is preserved.\n\nBumps to 1.2.3-alpha.14.",
          "is_bot": false,
          "headline": "fix: reflect Hubspace app changes in HomeKit immediately",
          "author_name": "ctrlcmdshft",
          "author_login": "ctrlcmdshft",
          "committed_at": "2026-05-18T17:38:31Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "06fa471a5eda6b6c9757ab683ea4e6efc65ed459",
          "body": "Adds requireAvailable() to all onGet handlers — throws\nHapStatusError(SERVICE_COMMUNICATION_FAILURE) when the Hubspace\ncloud reports available=false, triggering HomeKit's native\n\"No Response\" indicator on lights, outlets, and fans.\n\nBumps to 1.2.3-alpha.13.",
          "is_bot": false,
          "headline": "feat: show \"No Response\" in HomeKit when device is offline",
          "author_name": "ctrlcmdshft",
          "author_login": "ctrlcmdshft",
          "committed_at": "2026-05-18T17:36:40Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "1c2d602ebcf0e070f2764cd6a54b070774303e02",
          "body": null,
          "is_bot": false,
          "headline": "chore: bump to 1.2.3-alpha.12",
          "author_name": "ctrlcmdshft",
          "author_login": "ctrlcmdshft",
          "committed_at": "2026-05-18T17:28:08Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "3c2f4cd081f4601c0066ec3e74a05c6b9961368f",
          "body": "- Hampton Bay 76278 universal fan controller (retrofit kit)\n- Defiant HPPA11AWB indoor smart plug\n- Defiant HPPA52CWB outdoor smart plug (2 outlets)\n- Commercial Electric LA-12A-C surge protector (4 smart outlets)\n- EcoSmart 12A19060WRGBWH1 A19 color bulb\n- EcoSmart AL-HSTL-RGBICTW RGBWIC LED strip light\n- Note that all EcoSmart/Hubspace A19 variants work out of the box\n- Fix 2FA requirement (now supported via custom UI)\n- Remove generic unverified light entry",
          "is_bot": false,
          "headline": "docs: update supported devices table with verified model numbers",
          "author_name": "ctrlcmdshft",
          "author_login": "ctrlcmdshft",
          "committed_at": "2026-05-18T17:27:30Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "3aed760d3f4df624c2fab5075d9f36a4cbb87557",
          "body": "Adds MultiOutletAccessory for power-outlet devices with multiple\ntoggle[outlet-N] instances (surge wall taps, dual outdoor plugs).\nEach outlet is exposed as an independent HomeKit Outlet service.\nAlso removes invalid StatusFault characteristic from Outlet services.\n\nTested with:\n- Commercial Electric Smart Surge Protector LA-12A-C (4 outlets)\n- Defiant Smart Wi-Fi Outdoor Plug HPPA52CWB (2 outlets)\n\nBumps to 1.2.3-alpha.11.",
          "is_bot": false,
          "headline": "feat: add multi-outlet support for surge taps and outdoor plugs",
          "author_name": "ctrlcmdshft",
          "author_login": "ctrlcmdshft",
          "committed_at": "2026-05-18T17:07:46Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "a10020ac57322867f255ded7b42d9b28ad597b44",
          "body": null,
          "is_bot": false,
          "headline": "chore: merge test into main for 1.2.2 release",
          "author_name": "ctrlcmdshft",
          "author_login": "ctrlcmdshft",
          "committed_at": "2026-05-17T14:23:48Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "5ef9381030f564ad66e2ff36792b0300fcf73df1",
          "body": "…g fix, docs",
          "is_bot": false,
          "headline": "chore: release 1.2.2 — diagnostics, pollingInterval fix, Model warnin…",
          "author_name": "ctrlcmdshft",
          "author_login": "ctrlcmdshft",
          "committed_at": "2026-05-17T14:23:39Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "7264ad903a2c07390823026ae4946d51e8a6ab72",
          "body": null,
          "is_bot": false,
          "headline": "fix: guard Model and Manufacturer against empty/single-char API values",
          "author_name": "ctrlcmdshft",
          "author_login": "ctrlcmdshft",
          "committed_at": "2026-05-17T14:14:32Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "eed07e6c6f23ff6f5e78f874ca752ff2111f9296",
          "body": null,
          "is_bot": false,
          "headline": "chore: bump to 1.2.2-test.2",
          "author_name": "ctrlcmdshft",
          "author_login": "ctrlcmdshft",
          "committed_at": "2026-05-17T14:12:01Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "360d68a473303b713e545e4b80c89cbeb37a306e",
          "body": "…hen Conclave active",
          "is_bot": false,
          "headline": "fix: change pollingInterval default to 300s and clamp to 300s floor w…",
          "author_name": "ctrlcmdshft",
          "author_login": "ctrlcmdshft",
          "committed_at": "2026-05-17T14:11:28Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "2cac5e959273086f07cb9eff9e3494623ce6f157",
          "body": null,
          "is_bot": false,
          "headline": "docs: fill out unreleased changelog section for 1.2.2",
          "author_name": "ctrlcmdshft",
          "author_login": "ctrlcmdshft",
          "committed_at": "2026-05-17T14:07:29Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "4b780186221a53f92436bab420c50935c2916b9c",
          "body": "…TING",
          "is_bot": false,
          "headline": "docs: move Development section to wiki, link from README and CONTRIBU…",
          "author_name": "ctrlcmdshft",
          "author_login": "ctrlcmdshft",
          "committed_at": "2026-05-17T13:57:51Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "acae62d3b80a01f43fc09d99a91d0c4f1e7229e8",
          "body": "- Unsupported device warning now includes hardware model, capability\n  list, and GitHub issues link; debug mode dumps raw state values\n- pollingInterval clamped in code (10–600s; 300s floor when Conclave active)\n- README: requesting-support guide, install section restructured,\n  tokenCachePath + exp\n[…]\nons corrected\n- config.schema.json: debug description synced with README\n- GitHub issue templates: device-support and bug-report\n- CONTRIBUTING.md added\n- Homebridge engine updated from beta to ^2.0.0",
          "is_bot": false,
          "headline": "chore: bump to 1.2.2-test.1 — diagnostics, docs, issue templates",
          "author_name": "ctrlcmdshft",
          "author_login": "ctrlcmdshft",
          "committed_at": "2026-05-17T13:42:11Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "df88f62de907f92db674b890b48746588b36ecdc",
          "body": null,
          "is_bot": false,
          "headline": "chore: merge test into main for 1.2.1 release",
          "author_name": "ctrlcmdshft",
          "author_login": "ctrlcmdshft",
          "committed_at": "2026-05-16T18:36:55Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "d9ab15c62df9882e52496947dd4a45d0d672dc9b",
          "body": "…e-and-forget onSet",
          "is_bot": false,
          "headline": "chore: release 1.2.1 — LED strip color-rgb, power-outlet support, fir…",
          "author_name": "ctrlcmdshft",
          "author_login": "ctrlcmdshft",
          "committed_at": "2026-05-16T18:36:21Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "12a7e2a60021da1401e95f199eeca6c2c6d6ba1d",
          "body": "…-verified",
          "is_bot": false,
          "headline": "docs: add 1.2.1 changelog entry and mark LED strip + plug as hardware…",
          "author_name": "ctrlcmdshft",
          "author_login": "ctrlcmdshft",
          "committed_at": "2026-05-16T18:36:17Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "ec21be7efaf1ffca4c87577043041832614c5765",
          "body": null,
          "is_bot": false,
          "headline": "feat: support power-outlet deviceClass",
          "author_name": "ctrlcmdshft",
          "author_login": "ctrlcmdshft",
          "committed_at": "2026-05-16T02:58:05Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "35d45941348a60d52433712fae81baebf1b251c1",
          "body": null,
          "is_bot": false,
          "headline": "fix: log unsupported deviceClass at warn level so it is always visible",
          "author_name": "ctrlcmdshft",
          "author_login": "ctrlcmdshft",
          "committed_at": "2026-05-16T02:56:43Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "e06dc5d14fe5ad25dc07d7ea04452818b03a43f7",
          "body": "…e to 150ms",
          "is_bot": false,
          "headline": "fix: debounce color-temperature setter and increase color-rgb debounc…",
          "author_name": "ctrlcmdshft",
          "author_login": "ctrlcmdshft",
          "committed_at": "2026-05-16T02:46:22Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "18e4d7494334a65ddf733e137a2aa4454a9d20a5",
          "body": "…ithout waiting for API round-trip",
          "is_bot": false,
          "headline": "fix: fire-and-forget onSet handlers so HomeKit responds immediately w…",
          "author_name": "ctrlcmdshft",
          "author_login": "ctrlcmdshft",
          "committed_at": "2026-05-16T02:40:56Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "3a90f9cd734896b068f1ef35036f7c20e67470fc",
          "body": null,
          "is_bot": false,
          "headline": "fix: parse color-rgb object format from Hubspace API for LED strips",
          "author_name": "ctrlcmdshft",
          "author_login": "ctrlcmdshft",
          "committed_at": "2026-05-16T01:15:21Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "885dcfaf05ca91d5d57f749af951d1f033955c14",
          "body": "…state fields",
          "is_bot": false,
          "headline": "chore: bump to 1.2.1-test.1 — verbose log JSON fix for object-valued …",
          "author_name": "ctrlcmdshft",
          "author_login": "ctrlcmdshft",
          "committed_at": "2026-05-16T00:52:51Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "4f3eb7cef5b60c4bb7cab632f7031e5631718cbf",
          "body": null,
          "is_bot": false,
          "headline": "chore: merge test into main for 1.2.0 release",
          "author_name": "ctrlcmdshft",
          "author_login": "ctrlcmdshft",
          "committed_at": "2026-05-14T23:11:45Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "c66d219d064ca6678bd6831858591ea08d5d167c",
          "body": null,
          "is_bot": false,
          "headline": "chore: merge alpha into test for 1.2.0 release",
          "author_name": "ctrlcmdshft",
          "author_login": "ctrlcmdshft",
          "committed_at": "2026-05-14T23:11:41Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "5621ea1cb7d2ae7bcddcfdca55cab4afc602286d",
          "body": "…ions\n\nUpdate version, CHANGELOG, README config table and Conclave section.",
          "is_bot": false,
          "headline": "chore: release 1.2.0 — Conclave push, fan UX overhaul, new device opt…",
          "author_name": "ctrlcmdshft",
          "author_login": "ctrlcmdshft",
          "committed_at": "2026-05-14T23:11:36Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "5f0f7903b2f3fe55cbb88373935a484fd9f1d9c1",
          "body": "…p to 1.1.22-alpha.17",
          "is_bot": false,
          "headline": "fix: respect configured pollingInterval when Conclave is active — bum…",
          "author_name": "ctrlcmdshft",
          "author_login": "ctrlcmdshft",
          "committed_at": "2026-05-14T02:25:55Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "7c61f83a8a3606243f192d93c78d8721d961b14b",
          "body": "… — bump to 1.1.22-alpha.16",
          "is_bot": false,
          "headline": "feat: invertOutletStatus config toggle for inverted-reporting outlets…",
          "author_name": "ctrlcmdshft",
          "author_login": "ctrlcmdshft",
          "committed_at": "2026-05-14T02:15:43Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "428a9b098ce8fc8742b780f3661b78a7ded691be",
          "body": "…o 1.1.22-alpha.15",
          "is_bot": false,
          "headline": "revert: restore updateValue-before-setProps on RotationSpeed — bump t…",
          "author_name": "ctrlcmdshft",
          "author_login": "ctrlcmdshft",
          "committed_at": "2026-05-14T01:46:36Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "8e5e13f9448e6663f1378f2e619f8a5fcdc2caec",
          "body": "…d minValue=25 warning — bump to 1.1.22-alpha.14",
          "is_bot": false,
          "headline": "fix: call setProps before updateValue on RotationSpeed to avoid cache…",
          "author_name": "ctrlcmdshft",
          "author_login": "ctrlcmdshft",
          "committed_at": "2026-05-14T01:40:50Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "4ce883356d9b692920c17f07137e2363953d1a6a",
          "body": "…ha.13\n\nThe server expects outgoing data to also be zlib-compressed. Pipe a\ncreateDeflate (Z_SYNC_FLUSH) stream into the socket for all writes so the\nlogin and heartbeats are compressed. Also fix inflate error double-reconnect:\nguard with socket identity check so EOF-on-teardown doesn't trigger a second\nscheduleReconnect after socket close already handled it.",
          "is_bot": false,
          "headline": "fix: bidirectional zlib compression for Conclave — bump to 1.1.22-alp…",
          "author_name": "ctrlcmdshft",
          "author_login": "ctrlcmdshft",
          "committed_at": "2026-05-10T14:31:01Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "a82c1c83540aaed1b6df96648c2528f36f909b3c",
          "body": "….22-alpha.12\n\nPer-chunk inflate (inflateSync) failed because compressed data contains 0x0a\nbytes that our newline-split was treating as message delimiters, producing\ntruncated chunks that can't be inflated. Fix: pipe the TLS socket through\nzlib.createInflate() and split the decompressed output on newlines instead.",
          "is_bot": false,
          "headline": "fix: stream-based zlib inflate for Conclave compression — bump to 1.1…",
          "author_name": "ctrlcmdshft",
          "author_login": "ctrlcmdshft",
          "committed_at": "2026-05-10T14:16:32Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "515929285ebb08f52443e6e439c1948542ca4647",
          "body": "…ump to 1.1.22-alpha.11\n\nThree root causes of broken Conclave push:\n- Token was at tokens[0].token (array), not res.data.token — we were connecting\n  with undefined, causing the server to time us out after ~90s (not token expiry)\n- Host must come from conclave.host in the response (conclave-stream1.\n[…]\nsion:true means each line is zlib-deflated; added tryDecompress() to\n  inflate 0x78-prefixed chunks before JSON parsing\n- Token lifetime is ~25 hours (expiresTimestamp delta), calculated correctly now",
          "is_bot": false,
          "headline": "fix: parse real Conclave token/host/compression from API response — b…",
          "author_name": "ctrlcmdshft",
          "author_login": "ctrlcmdshft",
          "committed_at": "2026-05-10T14:13:27Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "4f7b6f5b14b1a35d40bd4e12e1cb8f9327bcdf57",
          "body": "….1.22-alpha.10\n\nlog.debug() is suppressed by Homebridge unless global debug mode is on.\nMessages gated by our own debug/verbose config flags now use log.info()\nso users only need the plugin setting, not Homebridge's own debug mode.",
          "is_bot": false,
          "headline": "fix: use log.info for plugin-gated debug/verbose messages — bump to 1…",
          "author_name": "ctrlcmdshft",
          "author_login": "ctrlcmdshft",
          "committed_at": "2026-05-10T14:06:44Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "ef424a92c9cfddc57f9cfa579f9346b3a5adba18",
          "body": "…lag propagation to client — bump to 1.1.22-alpha.9",
          "is_bot": false,
          "headline": "fix: prevent duplicate reconnect on intentional teardown, fix debug f…",
          "author_name": "ctrlcmdshft",
          "author_login": "ctrlcmdshft",
          "committed_at": "2026-05-10T14:00:52Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "ae6fc9a9f574d9ae1314f34d1dfe4c46a0f6b546",
          "body": "…ry field absent — bump to 1.1.22-alpha.8",
          "is_bot": false,
          "headline": "fix: log raw Conclave token response fields, assume 90s TTL when expi…",
          "author_name": "ctrlcmdshft",
          "author_login": "ctrlcmdshft",
          "committed_at": "2026-05-10T13:55:24Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "344ea14d0c54ddfa233dae472c690b9101d9e57e",
          "body": "…en TTL — bump to 1.1.22-alpha.7",
          "is_bot": false,
          "headline": "fix: proactive Conclave reconnect before token expiry, log actual tok…",
          "author_name": "ctrlcmdshft",
          "author_login": "ctrlcmdshft",
          "committed_at": "2026-05-10T13:49:42Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "eb9777ad530ece265dc8f2da8312e3d3a2e96fd1",
          "body": "…ut — bump to 1.1.22-alpha.6",
          "is_bot": false,
          "headline": "fix: cap Conclave heartbeat at 55s to prevent NAT/firewall idle timeo…",
          "author_name": "ctrlcmdshft",
          "author_login": "ctrlcmdshft",
          "committed_at": "2026-05-10T13:46:59Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "9e6e50836dc3ad42bc014cb1c81fa6090cf56c34",
          "body": "…ump to 1.1.22-alpha.5",
          "is_bot": false,
          "headline": "chore: clean up log prefixes, add verbose mode for state payloads — b…",
          "author_name": "ctrlcmdshft",
          "author_login": "ctrlcmdshft",
          "committed_at": "2026-05-10T13:42:42Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "a1a37f5df98c14fd45d67212b0e897ae4d5a486e",
          "body": "…ump to 1.1.22-alpha.4",
          "is_bot": false,
          "headline": "chore: update config schema — Conclave toggle, polling description, b…",
          "author_name": "ctrlcmdshft",
          "author_login": "ctrlcmdshft",
          "committed_at": "2026-05-10T13:38:26Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "f202c06a24fcb4bfd72546de2aea223ccd1787ae",
          "body": "…eout — bump to 1.1.22-alpha.3",
          "is_bot": false,
          "headline": "fix: send Conclave heartbeat at 80% of server interval to prevent tim…",
          "author_name": "ctrlcmdshft",
          "author_login": "ctrlcmdshft",
          "committed_at": "2026-05-10T13:37:09Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "65f8ec277935a219bc00ca3d8b8e881ed96f9b6e",
          "body": "…r when Conclave active — bump to 1.1.22-alpha.2",
          "is_bot": false,
          "headline": "fix: debounce Conclave quick-polls per device, enforce 300s poll floo…",
          "author_name": "ctrlcmdshft",
          "author_login": "ctrlcmdshft",
          "committed_at": "2026-05-10T13:35:17Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "cac66737c35f18ede994133051e79567b6741b57",
          "body": "…push, slow-poll fallback — bump to 1.1.22-alpha.1",
          "is_bot": false,
          "headline": "feat: Conclave push integration (Option A) — real-time state via TLS …",
          "author_name": "ctrlcmdshft",
          "author_login": "ctrlcmdshft",
          "committed_at": "2026-05-10T13:27:18Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "56c892ed8044662ca9c49eab8b0d4b1e5c0cfbe0",
          "body": "…nalCharacteristic — bump to 1.1.22-test.14",
          "is_bot": false,
          "headline": "fix: suppress HAP StatusFault warning on Fanv2/Lightbulb via addOptio…",
          "author_name": "ctrlcmdshft",
          "author_login": "ctrlcmdshft",
          "committed_at": "2026-05-10T13:03:15Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "36ef4482d6ae6584ed85aa8194084d63b5363efd",
          "body": "…gle — bump to 1.1.22-test.13",
          "is_bot": false,
          "headline": "feat: StatusFault on fans and lights via exposeStatusFault config tog…",
          "author_name": "ctrlcmdshft",
          "author_login": "ctrlcmdshft",
          "committed_at": "2026-05-10T12:35:34Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "d9d04708f1561aa6e91900a6497876b14b0e2166",
          "body": "…MasterPowerSwitch) — bump to 1.1.22-test.12",
          "is_bot": false,
          "headline": "feat: expose ceiling-fan master power as optional switch tile (expose…",
          "author_name": "ctrlcmdshft",
          "author_login": "ctrlcmdshft",
          "committed_at": "2026-05-10T03:40:43Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "648062e0d5205d4507107b7082297ebbe6620b23",
          "body": "….1.22-test.11",
          "is_bot": false,
          "headline": "chore: move exposeComfortBreeze to Device Options section — bump to 1…",
          "author_name": "ctrlcmdshft",
          "author_login": "ctrlcmdshft",
          "committed_at": "2026-05-09T19:17:25Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "402b3c93874d5b3038f4ae4bb983777da1a54595",
          "body": "…onfig) — bump to 1.1.22-test.10",
          "is_bot": false,
          "headline": "feat: Comfort Breeze as optional separate tile (exposeComfortBreeze c…",
          "author_name": "ctrlcmdshft",
          "author_login": "ctrlcmdshft",
          "committed_at": "2026-05-09T19:13:16Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "3ed02609372a2961b2eb318518dc9c3f9936abc3",
          "body": null,
          "is_bot": false,
          "headline": "fix: restore Comfort Breeze as Switch service — bump to 1.1.22-test.9",
          "author_name": "ctrlcmdshft",
          "author_login": "ctrlcmdshft",
          "committed_at": "2026-05-09T18:59:37Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "a6ec0e842b14ed3cb8594b6093532d50318ad422",
          "body": "…ve — bump to 1.1.22-test.8",
          "is_bot": false,
          "headline": "fix: fan speed 0-100 range, speed=0 powers off, returns 0 when inacti…",
          "author_name": "ctrlcmdshft",
          "author_login": "ctrlcmdshft",
          "committed_at": "2026-05-09T18:52:15Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "be2ce9efae6769b15f638cca5b5b2ff9654d9641",
          "body": null,
          "is_bot": false,
          "headline": "chore: bump to 1.1.22-test.7",
          "author_name": "ctrlcmdshft",
          "author_login": "ctrlcmdshft",
          "committed_at": "2026-05-09T18:32:47Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "67cada8aea864567217af7889b03316b02170e6d",
          "body": "… bump to 1.1.22-test.6",
          "is_bot": false,
          "headline": "fix: Comfort Breeze as SwingMode on Fanv2 — restores tile tap on/off,…",
          "author_name": "ctrlcmdshft",
          "author_login": "ctrlcmdshft",
          "committed_at": "2026-05-09T17:42:35Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "8bd7a760d8408255f2a690d39dd39ec8793e57f1",
          "body": "…o 1.1.22-test.5",
          "is_bot": false,
          "headline": "fix: set Fanv2 as primary service to restore tile tap on/off — bump t…",
          "author_name": "ctrlcmdshft",
          "author_login": "ctrlcmdshft",
          "committed_at": "2026-05-09T17:25:48Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "31f80cc3e3413a382a778ce0db49d974e70881e7",
          "body": "…mp to 1.1.22-test.4\n\n- Fan: expose toggle[comfort-breeze] as a HomeKit Switch service (only appears if device reports capability)\n- Outlet: add StatusFault backed by available field; getStatusFault() hoisted to BaseHubspaceAccessory\n- Types: add FC.AVAILABLE constant\n- socket.dev: acknowledge urlStrings alert (required Afero API endpoints)\n- gitignore: add coverage/, api-dump.txt, discover.mjs, .story/\n- Tests: add accessory and hubspace-client unit test suites",
          "is_bot": false,
          "headline": "feat: Comfort Breeze switch, outlet StatusFault, socket.dev acks — bu…",
          "author_name": "ctrlcmdshft",
          "author_login": "ctrlcmdshft",
          "committed_at": "2026-05-08T03:15:51Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "9ba9ac35c0e5a5ae51633b20d06a7b348a465edb",
          "body": "…, bump to 1.1.21",
          "is_bot": false,
          "headline": "fix: fan RotationSpeed initialised before setProps, async token cache…",
          "author_name": "ctrlcmdshft",
          "author_login": "ctrlcmdshft",
          "committed_at": "2026-05-07T23:16:52Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "c4dbf8e796f92915294e1e34eeca94641035a5be",
          "body": "… ack",
          "is_bot": false,
          "headline": "chore: async fs.promises for token cache, socket.dev filesystemAccess…",
          "author_name": "ctrlcmdshft",
          "author_login": "ctrlcmdshft",
          "committed_at": "2026-05-07T22:13:41Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "1af449ede1804a7bae513efefd03a5468a0ac059",
          "body": null,
          "is_bot": false,
          "headline": "chore: drop Node 20 (EOL), update engines to ^22 || ^24, bump to 1.1.20",
          "author_name": "ctrlcmdshft",
          "author_login": "ctrlcmdshft",
          "committed_at": "2026-05-06T00:12:49Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "fba304632c24a3e23bcd106dde0c291d2832e8ac",
          "body": null,
          "is_bot": false,
          "headline": "chore: bump to 1.1.19 (1.1.18 version poisoned by bad publish)",
          "author_name": "ctrlcmdshft",
          "author_login": "ctrlcmdshft",
          "committed_at": "2026-05-05T23:07:47Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "02cf4cd9704f2224e6826021a73a79717171e0f7",
          "body": null,
          "is_bot": false,
          "headline": "chore: exclude .env and api-dump.txt from npm package",
          "author_name": "ctrlcmdshft",
          "author_login": "ctrlcmdshft",
          "committed_at": "2026-05-05T23:06:57Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "dbacba315e3cdd2ac0ca9d90dd003a5ad4bfadfd",
          "body": "- set-state failures now log one line (HTTP status, error, requestId)\n  instead of the full Axios object, keeping JWT tokens out of logs\n- poll errors suppress after 3 consecutive all-fail cycles with a single\n  warning; recovery is logged when the API becomes reachable again",
          "is_bot": false,
          "headline": "fix: concise error logging and poll suppression during API outages",
          "author_name": "ctrlcmdshft",
          "author_login": "ctrlcmdshft",
          "committed_at": "2026-05-05T23:05:54Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "f7998b7746e9629eb6b39c93e7d98becf8e4aea4",
          "body": "Matches the Hubspace app's 4-step model (1/2/3/4 = 25/50/75/100%).\nPower is controlled exclusively by the Active toggle, not the slider.",
          "is_bot": false,
          "headline": "fix: fan speed slider 25-100 only, on/off via Active toggle",
          "author_name": "ctrlcmdshft",
          "author_login": "ctrlcmdshft",
          "committed_at": "2026-05-04T19:29:02Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "9cbfa7993fc3b78263f471754b9f087b584c26eb",
          "body": null,
          "is_bot": false,
          "headline": "chore: normalize repository URL in package.json",
          "author_name": "ctrlcmdshft",
          "author_login": "ctrlcmdshft",
          "committed_at": "2026-05-04T19:15:58Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "8f0bca117807c689cc6bcb301e45cbd3f39b1c86",
          "body": null,
          "is_bot": false,
          "headline": "chore: release v1.1.16",
          "author_name": "ctrlcmdshft",
          "author_login": "ctrlcmdshft",
          "committed_at": "2026-05-04T19:14:51Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "ba506f554a6fe7e31599b7ad81f54706c01e3436",
          "body": "…y HomeKit response\n\nImmediately apply command patches to local state and push to HomeKit\nso the UI reflects changes without waiting for the next poll cycle.\nSchedules a targeted re-poll 3s after each command to reconcile with\ncloud state; polls immediately on failure to revert.",
          "is_bot": false,
          "headline": "fix: optimistic state updates and quick-poll reconciliation for snapp…",
          "author_name": "ctrlcmdshft",
          "author_login": "ctrlcmdshft",
          "committed_at": "2026-05-04T19:13:07Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "1459ce49c4a83c1b59064a1a51342eef14696c42",
          "body": null,
          "is_bot": false,
          "headline": "fix: extend fan speed slider to 100% and map 0 to fan off",
          "author_name": "ctrlcmdshft",
          "author_login": "ctrlcmdshft",
          "committed_at": "2026-05-04T18:21:08Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "6137019e62925bb5aa3395ebe25cd3c4d3c08938",
          "body": null,
          "is_bot": false,
          "headline": "docs: add placeholder to password field in config schema",
          "author_name": "ctrlcmdshft",
          "author_login": "ctrlcmdshft",
          "committed_at": "2026-05-04T16:35:10Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "8f47e66b066fb603234e97cb706f67ac3743b1ae",
          "body": "…als not configured",
          "is_bot": false,
          "headline": "fix: disable gracefully and clean up cached accessories when credenti…",
          "author_name": "ctrlcmdshft",
          "author_login": "ctrlcmdshft",
          "committed_at": "2026-05-04T16:15:40Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "a165b185d39bde704333c22e5b053b9d7d2aa14f",
          "body": "…color status",
          "is_bot": false,
          "headline": "fix: remove fan direction, add outlet toggle fallback, clarify light …",
          "author_name": "ctrlcmdshft",
          "author_login": "ctrlcmdshft",
          "committed_at": "2026-05-04T16:09:30Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "9f69c8a0b6e84e8bed013bbdda69174df8ea04c3",
          "body": null,
          "is_bot": false,
          "headline": "docs: simplify inline disclaimer to link to footer section",
          "author_name": "ctrlcmdshft",
          "author_login": "ctrlcmdshft",
          "committed_at": "2026-05-04T15:53:17Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "5cfefef0af346459be665d56b57fe276febb00df",
          "body": null,
          "is_bot": false,
          "headline": "docs: note 2FA limitation and ongoing investigation in requirements",
          "author_name": "ctrlcmdshft",
          "author_login": "ctrlcmdshft",
          "committed_at": "2026-05-04T15:42:31Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "f95a1c1d59ad0d31fbccaa36a7ae493f8336e85e",
          "body": "…ring language",
          "is_bot": false,
          "headline": "docs: strengthen disclaimer with standard open-source reverse-enginee…",
          "author_name": "ctrlcmdshft",
          "author_login": "ctrlcmdshft",
          "committed_at": "2026-05-04T15:36:30Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "31e0cb6db6e451f5dfa7441b153c496f999afd8c",
          "body": "npm v7+ auto-installs peerDependencies when a package is installed,\ncausing homebridge and hap-nodejs to appear in node_modules and fail\nthe Homebridge verified dependency check. Homebridge is now declared\nonly in devDependencies (for local TypeScript builds) and engines\n(for the version requirement), matching the verified plugin standard.",
          "is_bot": false,
          "headline": "fix: remove homebridge from peerDependencies to pass plugin verifier",
          "author_name": "ctrlcmdshft",
          "author_login": "ctrlcmdshft",
          "committed_at": "2026-05-04T13:09:21Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "5bc20f065dd93940c9c3af377eb4c125da982994",
          "body": "…evDependencies\n\nJSON Schema does not support required as a boolean on individual\nproperties; the array form at the object level already declares\nusername and password as required. The boolean property caused the\nHomebridge plugin verifier to reject the schema.\n\nHomebridge is a peerDependency and does not belong in devDependencies;\nnpm v7+ installs peers automatically so TypeScript types remain\navailable without listing it twice.",
          "is_bot": false,
          "headline": "fix: remove required boolean from schema fields and homebridge from d…",
          "author_name": "ctrlcmdshft",
          "author_login": "ctrlcmdshft",
          "committed_at": "2026-05-04T12:58:59Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "9f276d96682557e92dd53099836d4143d5b211cc",
          "body": null,
          "is_bot": false,
          "headline": "docs: add changelog entries for v1.1.8, v1.1.9, v1.1.10",
          "author_name": "ctrlcmdshft",
          "author_login": "ctrlcmdshft",
          "committed_at": "2026-05-04T12:35:40Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "f91001b76ce81b5a5ce174f4b6d918a169103d55",
          "body": "HomeKit fires setBrightness on every drag tick. Without debouncing,\neach tick fires a PUT to the Hubspace API and the light lags behind\nchasing intermediate values. Now waits 300ms after the last tick\nbefore sending a single write with the final value.",
          "is_bot": false,
          "headline": "fix: debounce brightness slider writes to reduce API chatter",
          "author_name": "ctrlcmdshft",
          "author_login": "ctrlcmdshft",
          "committed_at": "2026-05-04T12:34:04Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "94434b1d09ccfc462b20bb58be9ba6477c95c74a",
          "body": null,
          "is_bot": false,
          "headline": "chore: ignore .npmrc",
          "author_name": "ctrlcmdshft",
          "author_login": "ctrlcmdshft",
          "committed_at": "2026-05-04T12:29:03Z",
          "body_truncated": false,
          "is_coding_agent": false
        }
      ],
      "releases_count": 40,
      "commits_last_year": 163,
      "latest_release_at": "2026-05-24T21:32:37Z",
      "latest_release_tag": "v2.0.3",
      "releases_from_tags": false,
      "days_since_last_push": 5,
      "active_weeks_last_year": 5,
      "days_since_latest_release": 58,
      "mean_days_between_releases": 2.2
    },
    "community": {
      "has_readme": true,
      "has_license": true,
      "has_description": true,
      "has_contributing": true,
      "health_percentage": 71,
      "has_issue_template": false,
      "has_code_of_conduct": false,
      "has_pull_request_template": false
    },
    "ecosystem": {
      "packages": [
        {
          "name": "homebridge-hubspace-platform",
          "exists": true,
          "license": "MIT",
          "keywords": [
            "homebridge-plugin",
            "homebridge",
            "hubspace",
            "afero",
            "smart-home",
            "home-depot",
            "light",
            "fan",
            "outlet",
            "switch"
          ],
          "ecosystem": "npm",
          "matches_repo": true,
          "registry_url": "https://www.npmjs.com/package/homebridge-hubspace-platform",
          "is_deprecated": false,
          "latest_version": "2.0.3",
          "repository_url": "https://github.com/ctrlcmdshft/homebridge-hubspace-platform",
          "versions_count": 87,
          "total_downloads": null,
          "dependents_count": null,
          "deprecation_note": null,
          "maintainers_count": 1,
          "monthly_downloads": 2707,
          "first_published_at": "2026-05-03T20:13:02.196000Z",
          "latest_published_at": "2026-05-24T21:32:11.623000Z",
          "latest_version_yanked": null,
          "days_since_latest_publish": 58
        }
      ]
    },
    "popularity": {
      "forks": 1,
      "stars": 4,
      "watchers": 0,
      "fork_history": {
        "days": [
          {
            "date": "2026-05-30",
            "count": 1
          }
        ],
        "complete": true,
        "collected": 1,
        "total_forks": 1
      },
      "star_history": null,
      "open_issues_and_prs": 8
    },
    "ai_readiness": {
      "has_nix": false,
      "example_dirs": [],
      "has_llms_txt": false,
      "has_dockerfile": false,
      "has_mcp_signal": false,
      "bootstrap_files": [],
      "api_schema_files": [],
      "has_devcontainer": false,
      "typecheck_configs": [
        "tsconfig.json"
      ],
      "toolchain_manifests": [],
      "largest_source_bytes": 34322,
      "source_files_sampled": 13,
      "oversized_source_files": 0,
      "agent_instruction_files": [],
      "agent_instruction_max_bytes": null
    },
    "dependencies": {
      "manifests": [
        "package.json"
      ],
      "advisories": {
        "error": null,
        "scope": "published_package",
        "source": "osv",
        "findings": [],
        "collected": true,
        "malicious": [],
        "truncated": false,
        "by_severity": {},
        "advisory_count": 0,
        "affected_count": 0,
        "assessed_count": 30,
        "malicious_count": 0,
        "assessed_package": "npm:homebridge-hubspace-platform@2.0.3",
        "unassessed_count": 0,
        "direct_affected_count": 0
      },
      "ecosystems": [
        "npm"
      ],
      "dependencies": [
        {
          "name": "axios",
          "manifest": "package.json",
          "ecosystem": "npm",
          "version_constraint": "^1.7.2"
        }
      ],
      "all_dependencies": {
        "error": "GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository",
        "source": null,
        "packages": [],
        "collected": false,
        "truncated": false,
        "total_count": null,
        "direct_count": null,
        "indirect_count": null
      }
    },
    "maintainership": {
      "issues": {
        "open_prs": 0,
        "merged_prs": 0,
        "open_issues": 8,
        "closed_ratio": 0.273,
        "closed_issues": 3,
        "closed_unmerged_prs": 0
      },
      "bus_factor": 1,
      "bot_contributors": 0,
      "top_contributors": [
        {
          "type": "User",
          "login": "ctrlcmdshft",
          "commits": 163,
          "avatar_url": "https://avatars.githubusercontent.com/u/61129128?v=4"
        }
      ],
      "contributors_sampled": 1,
      "top_contributor_share": 1
    },
    "quality_signals": {
      "has_ci": true,
      "has_tests": true,
      "ci_workflows": [
        "build.yml"
      ],
      "has_docs_dir": false,
      "linter_configs": [
        ".eslintrc.json"
      ],
      "has_editorconfig": false,
      "has_linter_config": true,
      "has_precommit_config": false
    },
    "security_signals": {
      "lockfiles": [
        "package-lock.json"
      ],
      "scorecard": {
        "checks": [
          {
            "name": "Binary-Artifacts",
            "score": 10,
            "reason": "no binaries found in the repo",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#binary-artifacts"
          },
          {
            "name": "Branch-Protection",
            "score": 0,
            "reason": "branch protection not enabled on development/release branches",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#branch-protection"
          },
          {
            "name": "CI-Tests",
            "score": null,
            "reason": "no pull request found",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#ci-tests"
          },
          {
            "name": "CII-Best-Practices",
            "score": 0,
            "reason": "no effort to earn an OpenSSF best practices badge detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#cii-best-practices"
          },
          {
            "name": "Code-Review",
            "score": 0,
            "reason": "Found 0/30 approved changesets -- score normalized to 0",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#code-review"
          },
          {
            "name": "Contributors",
            "score": 0,
            "reason": "project has 0 contributing companies or organizations -- score normalized to 0",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#contributors"
          },
          {
            "name": "Dangerous-Workflow",
            "score": 10,
            "reason": "no dangerous workflow patterns detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dangerous-workflow"
          },
          {
            "name": "Dependency-Update-Tool",
            "score": 0,
            "reason": "no update tool detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dependency-update-tool"
          },
          {
            "name": "Fuzzing",
            "score": 0,
            "reason": "project is not fuzzed",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#fuzzing"
          },
          {
            "name": "License",
            "score": 10,
            "reason": "license file detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#license"
          },
          {
            "name": "Maintained",
            "score": 0,
            "reason": "project was created within the last 90 days. Please review its contents carefully",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#maintained"
          },
          {
            "name": "Packaging",
            "score": null,
            "reason": "packaging workflow not detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#packaging"
          },
          {
            "name": "Pinned-Dependencies",
            "score": 3,
            "reason": "dependency not pinned by hash detected -- score normalized to 3",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#pinned-dependencies"
          },
          {
            "name": "SAST",
            "score": 0,
            "reason": "no SAST tool detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#sast"
          },
          {
            "name": "Security-Policy",
            "score": 0,
            "reason": "security policy file not detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#security-policy"
          },
          {
            "name": "Signed-Releases",
            "score": null,
            "reason": "no releases found",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#signed-releases"
          },
          {
            "name": "Token-Permissions",
            "score": 0,
            "reason": "detected GitHub workflow tokens with excessive permissions",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#token-permissions"
          },
          {
            "name": "Vulnerabilities",
            "score": 0,
            "reason": "15 existing vulnerabilities detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#vulnerabilities"
          }
        ],
        "commit": "7c44a5cdf5d70d1e33243123b2c04b9c8607adbe",
        "ran_at": "2026-07-22T19:20:32Z",
        "aggregate_score": 2.4,
        "scorecard_version": "v5.5.0"
      },
      "has_codeql_workflow": false,
      "has_security_policy": false,
      "has_dependabot_config": false
    },
    "contribution_flow": {
      "collected": true,
      "ci_last_run_at": "2026-05-28T19:06:36Z",
      "oldest_open_prs": [],
      "last_merged_pr_at": null,
      "ci_last_conclusion": "SUCCESS",
      "oldest_open_issues": [
        {
          "number": 3,
          "created_at": "2026-05-24T20:34:10Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 4,
          "created_at": "2026-05-24T20:34:23Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 5,
          "created_at": "2026-05-24T20:34:34Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 6,
          "created_at": "2026-05-24T20:35:05Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 8,
          "created_at": "2026-05-31T22:55:57Z",
          "last_comment_at": "2026-06-01T16:51:34Z",
          "last_comment_author": "mysticalhider"
        },
        {
          "number": 9,
          "created_at": "2026-06-28T22:36:29Z",
          "last_comment_at": "2026-07-08T00:48:59Z",
          "last_comment_author": "copenlc"
        },
        {
          "number": 10,
          "created_at": "2026-07-09T03:38:27Z",
          "last_comment_at": "2026-07-15T00:53:30Z",
          "last_comment_author": "ctrlcmdshft"
        },
        {
          "number": 11,
          "created_at": "2026-07-13T10:56:46Z",
          "last_comment_at": "2026-07-17T14:51:22Z",
          "last_comment_author": "ctrlcmdshft"
        }
      ]
    }
  },
  "config": {
    "disabled_metrics": [],
    "disabled_categories": [],
    "disabled_components": {}
  },
  "source": {
    "url": "https://github.com/ctrlcmdshft/homebridge-hubspace-platform",
    "host": "github.com",
    "name": "homebridge-hubspace-platform",
    "owner": "ctrlcmdshft"
  },
  "metrics": {
    "overall": {
      "key": "overall",
      "band": "moderate",
      "name": "Overall health",
      "note": null,
      "notes": [],
      "value": 54,
      "inputs": {
        "security": 39,
        "vitality": 75,
        "community": 42,
        "governance": 40,
        "engineering": 72
      },
      "components": []
    },
    "categories": [
      {
        "key": "vitality",
        "band": "good",
        "name": "Vitality",
        "value": 75,
        "weight": 0.22,
        "metrics": [
          {
            "key": "development_activity",
            "band": "moderate",
            "name": "Development activity",
            "note": null,
            "notes": [],
            "value": 58,
            "inputs": {
              "commits_last_year": 163,
              "human_commit_share": 1,
              "days_since_last_push": 5,
              "active_weeks_last_year": 5
            },
            "components": [
              {
                "key": "push_recency",
                "name": "Push recency",
                "detail": "last push 5 days ago",
                "points": 36,
                "status": "met",
                "details": [
                  {
                    "code": "push_recency",
                    "params": {
                      "days": 5
                    }
                  }
                ],
                "max_points": 36
              },
              {
                "key": "commit_cadence",
                "name": "Commit cadence",
                "detail": "5/52 weeks with commits",
                "points": 3.5,
                "status": "partial",
                "details": [
                  {
                    "code": "commit_cadence_weeks",
                    "params": {
                      "weeks": 5
                    }
                  }
                ],
                "max_points": 36
              },
              {
                "key": "commit_volume",
                "name": "Commit volume",
                "detail": "163 commits in the last year",
                "points": 18,
                "status": "met",
                "details": [
                  {
                    "code": "commits_last_year",
                    "params": {
                      "count": 163
                    }
                  }
                ],
                "max_points": 18
              },
              {
                "key": "openssf_scorecard_maintained",
                "name": "OpenSSF Scorecard: Maintained",
                "detail": "project was created within the last 90 days. Please review its contents carefully",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "release_discipline",
            "band": "excellent",
            "name": "Release discipline",
            "note": "Excluded from scoring (no data or not applicable): OpenSSF Scorecard: Signed-Releases. Remaining weights renormalized.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "openssf_scorecard_signed_releases"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              }
            ],
            "value": 100,
            "inputs": {
              "releases_count": 40,
              "latest_release_tag": "v2.0.3",
              "releases_from_tags": false,
              "days_since_latest_release": 58,
              "mean_days_between_releases": 2.2
            },
            "components": [
              {
                "key": "ships_releases",
                "name": "Ships releases",
                "detail": "40 releases published",
                "points": 27,
                "status": "met",
                "details": [
                  {
                    "code": "releases_published",
                    "params": {
                      "count": 40
                    }
                  }
                ],
                "max_points": 27
              },
              {
                "key": "release_recency",
                "name": "Release recency",
                "detail": "latest release 58 days ago",
                "points": 36,
                "status": "met",
                "details": [
                  {
                    "code": "release_recency",
                    "params": {
                      "days": 58
                    }
                  }
                ],
                "max_points": 36
              },
              {
                "key": "release_cadence",
                "name": "Release cadence",
                "detail": "a release every ~2.2 days",
                "points": 27,
                "status": "met",
                "details": [
                  {
                    "code": "release_cadence",
                    "params": {
                      "gap": 2.2
                    }
                  }
                ],
                "max_points": 27
              },
              {
                "key": "openssf_scorecard_signed_releases",
                "name": "OpenSSF Scorecard: Signed-Releases",
                "detail": "no releases found",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_data",
                    "params": {}
                  }
                ],
                "max_points": 10
              }
            ]
          },
          {
            "key": "abandonment",
            "band": "excellent",
            "name": "Abandonment",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "cap": null,
              "state": "unverified",
              "guards": [],
              "signals": [],
              "red_flag": false,
              "multiplier_pct": 100,
              "declared_reason": null,
              "unverified_reason": "repository_too_young",
              "unanswered_open_prs": null,
              "unanswered_open_issues": null,
              "days_since_last_merged_pr": null,
              "days_since_last_human_commit": null,
              "days_since_last_human_commit_is_floor": false
            },
            "components": [
              {
                "key": "project_is_still_maintained",
                "name": "Project is still maintained",
                "detail": "maintenance record not established from the collected data",
                "points": 100,
                "status": "met",
                "details": [
                  {
                    "code": "abandonment_unverified",
                    "params": {}
                  }
                ],
                "max_points": 100
              }
            ]
          }
        ],
        "description": "Is the project alive — is code being written and are releases shipping?"
      },
      {
        "key": "community",
        "band": "at_risk",
        "name": "Community & Adoption",
        "value": 42,
        "weight": 0.18,
        "metrics": [
          {
            "key": "popularity",
            "band": "critical",
            "name": "Popularity & adoption",
            "note": null,
            "notes": [],
            "value": 8,
            "inputs": {
              "forks": 1,
              "stars": 4,
              "watchers": 0,
              "growth_state": "unverified",
              "growth_factor_pct": 100,
              "growth_unverified_reason": "no_history"
            },
            "components": [
              {
                "key": "stars",
                "name": "Stars",
                "detail": "4 stars",
                "points": 7.7,
                "status": "partial",
                "details": [
                  {
                    "code": "stars",
                    "params": {
                      "count": 4
                    }
                  }
                ],
                "max_points": 60
              },
              {
                "key": "forks",
                "name": "Forks",
                "detail": "1 forks",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "forks",
                    "params": {
                      "count": 1
                    }
                  }
                ],
                "max_points": 25
              },
              {
                "key": "watchers",
                "name": "Watchers",
                "detail": "0 watchers",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "watchers",
                    "params": {
                      "count": 0
                    }
                  }
                ],
                "max_points": 15
              }
            ]
          },
          {
            "key": "community_health",
            "band": "good",
            "name": "Community health",
            "note": null,
            "notes": [],
            "value": 70,
            "inputs": {
              "has_readme": true,
              "has_license": true,
              "has_contributing": true,
              "has_issue_template": false,
              "has_code_of_conduct": false,
              "has_pull_request_template": false
            },
            "components": [
              {
                "key": "readme",
                "name": "README",
                "detail": null,
                "points": 22.5,
                "status": "met",
                "details": [],
                "max_points": 22.5
              },
              {
                "key": "license",
                "name": "License",
                "detail": "recognized license (MIT)",
                "points": 22.5,
                "status": "met",
                "details": [
                  {
                    "code": "license_standard",
                    "params": {}
                  },
                  {
                    "code": "license_spdx",
                    "params": {
                      "spdx": "MIT"
                    }
                  }
                ],
                "max_points": 22.5
              },
              {
                "key": "contributing_guide",
                "name": "CONTRIBUTING guide",
                "detail": null,
                "points": 18,
                "status": "met",
                "details": [],
                "max_points": 18
              },
              {
                "key": "code_of_conduct",
                "name": "Code of conduct",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 13.5
              },
              {
                "key": "issue_template",
                "name": "Issue template",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.2
              },
              {
                "key": "pr_template",
                "name": "PR template",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 6.3
              }
            ]
          },
          {
            "key": "ecosystem_adoption",
            "band": "moderate",
            "name": "Ecosystem adoption (downloads)",
            "note": "Excluded from scoring (no data or not applicable): Registry dependents. Remaining weights renormalized.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "registry_dependents"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              }
            ],
            "value": 57,
            "inputs": {
              "packages": [
                "homebridge-hubspace-platform"
              ],
              "dependents": null,
              "ecosystems": "npm",
              "total_downloads": null,
              "monthly_downloads": 2707
            },
            "components": [
              {
                "key": "monthly_downloads",
                "name": "Monthly downloads",
                "detail": "2,707 downloads/month across npm",
                "points": 45.8,
                "status": "partial",
                "details": [
                  {
                    "code": "downloads_monthly",
                    "params": {
                      "count": 2707,
                      "ecosystems": "npm"
                    }
                  }
                ],
                "max_points": 80
              },
              {
                "key": "registry_dependents",
                "name": "Registry dependents",
                "detail": "not reported by this ecosystem",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "not_reported_by_this_ecosystem",
                    "params": {}
                  }
                ],
                "max_points": 20
              }
            ]
          }
        ],
        "description": "Does the project have users, downloads, attention, and a welcoming setup for contributors?"
      },
      {
        "key": "governance",
        "band": "at_risk",
        "name": "Sustainability & Governance",
        "value": 40,
        "weight": 0.24,
        "metrics": [
          {
            "key": "maintainer_resilience",
            "band": "critical",
            "name": "Maintainer resilience (bus factor)",
            "note": null,
            "notes": [],
            "value": 10,
            "inputs": {
              "bus_factor": 1,
              "contributors_sampled": 1,
              "top_contributor_share": 1
            },
            "components": [
              {
                "key": "bus_factor",
                "name": "Bus factor",
                "detail": "1 contributor(s) cover half of all commits",
                "points": 9,
                "status": "partial",
                "details": [
                  {
                    "code": "bus_factor",
                    "params": {
                      "count": 1
                    }
                  }
                ],
                "max_points": 54
              },
              {
                "key": "commit_distribution",
                "name": "Commit distribution",
                "detail": "top contributor authored 100% of commits",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "top_contributor_share",
                    "params": {
                      "share": 100
                    }
                  }
                ],
                "max_points": 22.5
              },
              {
                "key": "contributor_breadth",
                "name": "Contributor breadth",
                "detail": "1 contributors",
                "points": 1.4,
                "status": "partial",
                "details": [
                  {
                    "code": "contributors_sampled",
                    "params": {
                      "count": 1
                    }
                  }
                ],
                "max_points": 13.5
              },
              {
                "key": "openssf_scorecard_contributors",
                "name": "OpenSSF Scorecard: Contributors",
                "detail": "project has 0 contributing companies or organizations -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "responsiveness",
            "band": "critical",
            "name": "Issue & PR responsiveness",
            "note": "Excluded from scoring (no data or not applicable): PR acceptance. Remaining weights renormalized.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "pr_acceptance"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              }
            ],
            "value": 21,
            "inputs": {
              "merged_prs": 0,
              "open_issues": 8,
              "closed_issues": 3,
              "issue_closed_ratio": 0.273,
              "closed_unmerged_prs": 0
            },
            "components": [
              {
                "key": "issue_resolution",
                "name": "Issue resolution",
                "detail": "27% of issues closed",
                "points": 12.8,
                "status": "partial",
                "details": [
                  {
                    "code": "issues_closed_share",
                    "params": {
                      "share": 27
                    }
                  }
                ],
                "max_points": 46.75
              },
              {
                "key": "pr_acceptance",
                "name": "PR acceptance",
                "detail": "no decided pull requests or no data",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_decided_prs_or_data",
                    "params": {}
                  }
                ],
                "max_points": 38.25
              },
              {
                "key": "openssf_scorecard_code_review",
                "name": "OpenSSF Scorecard: Code-Review",
                "detail": "Found 0/30 approved changesets -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 15
              }
            ]
          },
          {
            "key": "stewardship",
            "band": "at_risk",
            "name": "Ownership & stewardship",
            "note": "Excluded from scoring (no data or not applicable): Verified domain. Remaining weights renormalized.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "verified_domain"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              }
            ],
            "value": 47,
            "inputs": {
              "followers": 3,
              "owner_type": "User",
              "is_verified": null,
              "owner_login": "ctrlcmdshft",
              "public_repos": 37,
              "account_age_days": 2347
            },
            "components": [
              {
                "key": "ownership_backing",
                "name": "Ownership backing",
                "detail": "personal (user) account",
                "points": 10,
                "status": "partial",
                "details": [
                  {
                    "code": "owner_personal",
                    "params": {}
                  }
                ],
                "max_points": 30
              },
              {
                "key": "verified_domain",
                "name": "Verified domain",
                "detail": "not applicable to user accounts",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "not_applicable_to_user_accounts",
                    "params": {}
                  }
                ],
                "max_points": 20
              },
              {
                "key": "owner_reach",
                "name": "Owner reach",
                "detail": "3 followers of ctrlcmdshft",
                "points": 4.3,
                "status": "partial",
                "details": [
                  {
                    "code": "owner_followers",
                    "params": {
                      "count": 3,
                      "login": "ctrlcmdshft"
                    }
                  }
                ],
                "max_points": 25
              },
              {
                "key": "track_record",
                "name": "Track record",
                "detail": "37 public repos, account ~6 yr old",
                "points": 23.5,
                "status": "partial",
                "details": [
                  {
                    "code": "public_repos",
                    "params": {
                      "count": 37
                    }
                  },
                  {
                    "code": "account_age_years",
                    "params": {
                      "years": 6
                    }
                  }
                ],
                "max_points": 25
              }
            ]
          },
          {
            "key": "package_maintenance",
            "band": "excellent",
            "name": "Package maintenance",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "packages": [
                "homebridge-hubspace-platform"
              ],
              "ecosystems": "npm",
              "any_deprecated": false,
              "min_days_since_publish": 58
            },
            "components": [
              {
                "key": "published_resolvable",
                "name": "Published & resolvable",
                "detail": "1 package(s) on npm",
                "points": 25,
                "status": "met",
                "details": [
                  {
                    "code": "packages_published",
                    "params": {
                      "count": 1,
                      "ecosystems": "npm"
                    }
                  }
                ],
                "max_points": 25
              },
              {
                "key": "publish_recency",
                "name": "Publish recency",
                "detail": "latest publish 58 days ago",
                "points": 35,
                "status": "met",
                "details": [
                  {
                    "code": "publish_recency",
                    "params": {
                      "days": 58
                    }
                  }
                ],
                "max_points": 35
              },
              {
                "key": "version_history",
                "name": "Version history",
                "detail": "87 published versions",
                "points": 20,
                "status": "met",
                "details": [
                  {
                    "code": "published_versions",
                    "params": {
                      "count": 87
                    }
                  }
                ],
                "max_points": 20
              },
              {
                "key": "not_deprecated",
                "name": "Not deprecated",
                "detail": "active, not deprecated or yanked",
                "points": 20,
                "status": "met",
                "details": [
                  {
                    "code": "package_not_deprecated",
                    "params": {}
                  }
                ],
                "max_points": 20
              }
            ]
          }
        ],
        "description": "Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?"
      },
      {
        "key": "engineering",
        "band": "good",
        "name": "Engineering Quality",
        "value": 72,
        "weight": 0.2,
        "metrics": [
          {
            "key": "engineering_practices",
            "band": "good",
            "name": "Engineering practices",
            "note": "Excluded from scoring (no data or not applicable): OpenSSF Scorecard: CI-Tests. Remaining weights renormalized.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "openssf_scorecard_ci_tests"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              }
            ],
            "value": 80,
            "inputs": {
              "has_ci": true,
              "has_tests": true,
              "has_editorconfig": false,
              "has_linter_config": true,
              "has_precommit_config": false
            },
            "components": [
              {
                "key": "ci_workflows",
                "name": "CI workflows",
                "detail": "1 workflow(s)",
                "points": 24,
                "status": "met",
                "details": [
                  {
                    "code": "ci_workflows",
                    "params": {
                      "count": 1
                    }
                  }
                ],
                "max_points": 24
              },
              {
                "key": "tests_present",
                "name": "Tests present",
                "detail": null,
                "points": 24,
                "status": "met",
                "details": [],
                "max_points": 24
              },
              {
                "key": "linter_config",
                "name": "Linter config",
                "detail": ".eslintrc.json",
                "points": 16,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": ".eslintrc.json"
                    }
                  }
                ],
                "max_points": 16
              },
              {
                "key": "pre_commit_hooks",
                "name": "Pre-commit hooks",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 9.6
              },
              {
                "key": "editorconfig",
                "name": ".editorconfig",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 6.4
              },
              {
                "key": "openssf_scorecard_ci_tests",
                "name": "OpenSSF Scorecard: CI-Tests",
                "detail": "no pull request found",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_data",
                    "params": {}
                  }
                ],
                "max_points": 20
              }
            ]
          },
          {
            "key": "documentation",
            "band": "moderate",
            "name": "Documentation",
            "note": null,
            "notes": [],
            "value": 60,
            "inputs": {
              "topics": [
                "afero",
                "apple-homekit",
                "home-depot",
                "homebridge",
                "homebridge-plugin",
                "hubspace",
                "smart-home",
                "typescript"
              ],
              "has_wiki": true,
              "homepage": null,
              "has_readme": true,
              "has_docs_dir": false,
              "has_description": true
            },
            "components": [
              {
                "key": "readme",
                "name": "README",
                "detail": null,
                "points": 30,
                "status": "met",
                "details": [],
                "max_points": 30
              },
              {
                "key": "documentation_directory",
                "name": "Documentation directory",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 25
              },
              {
                "key": "documentation_homepage_site",
                "name": "Documentation / homepage site",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 15
              },
              {
                "key": "repository_description",
                "name": "Repository description",
                "detail": null,
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              },
              {
                "key": "topics",
                "name": "Topics",
                "detail": "8 topics",
                "points": 10,
                "status": "met",
                "details": [
                  {
                    "code": "topics_count",
                    "params": {
                      "count": 8
                    }
                  }
                ],
                "max_points": 10
              },
              {
                "key": "wiki",
                "name": "Wiki",
                "detail": null,
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              }
            ]
          }
        ],
        "description": "Are baseline engineering and documentation practices in place?"
      },
      {
        "key": "security",
        "band": "at_risk",
        "name": "Security",
        "value": 39,
        "weight": 0.16,
        "metrics": [
          {
            "key": "security_posture",
            "band": "critical",
            "name": "Security posture",
            "note": "Excluded from scoring (no data or not applicable): CI-Tests, Packaging, Signed-Releases. Remaining weights renormalized.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "ci_tests",
                    "packaging",
                    "signed_releases"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              }
            ],
            "value": 24,
            "inputs": {
              "source": "openssf_scorecard",
              "checks_evaluated": 15,
              "scorecard_version": "v5.5.0",
              "checks_inconclusive": 3,
              "scorecard_aggregate": 2.4
            },
            "components": [
              {
                "key": "binary_artifacts",
                "name": "Binary-Artifacts",
                "detail": "no binaries found in the repo",
                "points": 7.5,
                "status": "met",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "branch_protection",
                "name": "Branch-Protection",
                "detail": "branch protection not enabled on development/release branches",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "ci_tests",
                "name": "CI-Tests",
                "detail": "no pull request found",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_data",
                    "params": {}
                  }
                ],
                "max_points": 2.5
              },
              {
                "key": "cii_best_practices",
                "name": "CII-Best-Practices",
                "detail": "no effort to earn an OpenSSF best practices badge detected",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "code_review",
                "name": "Code-Review",
                "detail": "Found 0/30 approved changesets -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "contributors",
                "name": "Contributors",
                "detail": "project has 0 contributing companies or organizations -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "dangerous_workflow",
                "name": "Dangerous-Workflow",
                "detail": "no dangerous workflow patterns detected",
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              },
              {
                "key": "dependency_update_tool",
                "name": "Dependency-Update-Tool",
                "detail": "no update tool detected",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "fuzzing",
                "name": "Fuzzing",
                "detail": "project is not fuzzed",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 5
              },
              {
                "key": "license",
                "name": "License",
                "detail": "license file detected",
                "points": 2.5,
                "status": "met",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "maintained",
                "name": "Maintained",
                "detail": "project was created within the last 90 days. Please review its contents carefully",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "packaging",
                "name": "Packaging",
                "detail": "packaging workflow not detected",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_data",
                    "params": {}
                  }
                ],
                "max_points": 5
              },
              {
                "key": "pinned_dependencies",
                "name": "Pinned-Dependencies",
                "detail": "dependency not pinned by hash detected -- score normalized to 3",
                "points": 1.5,
                "status": "partial",
                "details": [],
                "max_points": 5
              },
              {
                "key": "sast",
                "name": "SAST",
                "detail": "no SAST tool detected",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 5
              },
              {
                "key": "security_policy",
                "name": "Security-Policy",
                "detail": "security policy file not detected",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 5
              },
              {
                "key": "signed_releases",
                "name": "Signed-Releases",
                "detail": "no releases found",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_data",
                    "params": {}
                  }
                ],
                "max_points": 7.5
              },
              {
                "key": "token_permissions",
                "name": "Token-Permissions",
                "detail": "detected GitHub workflow tokens with excessive permissions",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "vulnerabilities",
                "name": "Vulnerabilities",
                "detail": "15 existing vulnerabilities detected",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              }
            ]
          },
          {
            "key": "dependency_advisories",
            "band": "excellent",
            "name": "Dependency advisories",
            "note": "Excluded from scoring (no data or not applicable): No advisories left outstanding. Remaining weights renormalized. Matched the npm:homebridge-hubspace-platform@2.0.3 runtime dependency closure — what installing the published package pulls in — 30 packages. Reachability is not analyzed.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "no_advisories_left_outstanding"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              },
              {
                "code": "advisories_scope_published",
                "params": {
                  "package": "npm:homebridge-hubspace-platform@2.0.3",
                  "assessed": 30
                }
              },
              {
                "code": "advisories_reachability",
                "params": {}
              }
            ],
            "value": 100,
            "inputs": {
              "source": "osv",
              "advisories": 0,
              "affected_packages": 0,
              "assessed_packages": 30,
              "unassessed_packages": 0,
              "affected_by_severity": "none",
              "direct_affected_packages": 0
            },
            "components": [
              {
                "key": "direct_dependencies_free_of_known_advisories",
                "name": "Direct dependencies free of known advisories",
                "detail": "no direct dependency carries a known advisory",
                "points": 35,
                "status": "met",
                "details": [
                  {
                    "code": "no_direct_advisories",
                    "params": {}
                  }
                ],
                "max_points": 35
              },
              {
                "key": "indirect_dependencies_free_of_known_advisories",
                "name": "Indirect dependencies free of known advisories",
                "detail": "no indirect dependency carries a known advisory",
                "points": 25,
                "status": "met",
                "details": [
                  {
                    "code": "no_indirect_advisories",
                    "params": {}
                  }
                ],
                "max_points": 25
              },
              {
                "key": "no_advisories_left_outstanding",
                "name": "No advisories left outstanding",
                "detail": "no advisory carries a publication date",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "advisories_no_publication_date",
                    "params": {}
                  }
                ],
                "max_points": 40
              }
            ]
          },
          {
            "key": "malicious_dependencies",
            "band": "excellent",
            "name": "Malicious dependencies",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "source": "osv",
              "meaning": "reported as a malicious package by the OpenSSF corpus; the remedy is removal or moving off the compromised name, never an upgrade of the same artifact. Versions the registry has since pulled are listed but not scored",
              "packages": [],
              "red_flag": false,
              "assessed_packages": 30,
              "malicious_packages": 0,
              "direct_malicious_packages": 0,
              "withdrawn_malicious_packages": 0,
              "installable_malicious_packages": 0
            },
            "components": [
              {
                "key": "no_dependency_reported_as_a_malicious_package",
                "name": "No dependency reported as a malicious package",
                "detail": "no dependency is reported as a malicious package",
                "points": 100,
                "status": "met",
                "details": [
                  {
                    "code": "no_malicious_dependencies",
                    "params": {}
                  }
                ],
                "max_points": 100
              }
            ]
          },
          {
            "key": "high_risk_jurisdiction_exposure",
            "band": "excellent",
            "name": "High-Risk Jurisdiction Exposure",
            "note": "Only high-confidence self-published location evidence affects this multiplier. Ambiguous matches are review-only; country evidence is not proof of nationality, citizenship, legal registration, malicious intent, or sanctions status.",
            "notes": [
              {
                "code": "jurisdiction_evidence_limits",
                "params": {}
              }
            ],
            "value": 100,
            "inputs": {
              "meaning": "self-published location evidence; not nationality or citizenship",
              "red_flag": false,
              "exposures": [],
              "policy_countries": [
                "Russia",
                "Iran",
                "North Korea"
              ],
              "review_only_matches": 0,
              "assessed_self_published_locations": 2
            },
            "components": [
              {
                "key": "policy_exposure_multiplier",
                "name": "Policy exposure multiplier",
                "detail": "no confirmed policy-scope location match",
                "points": 100,
                "status": "met",
                "details": [
                  {
                    "code": "jurisdiction_no_match",
                    "params": {}
                  }
                ],
                "max_points": 100
              }
            ]
          }
        ],
        "description": "Are visible security and supply-chain practices strong, with no malicious dependency and no unresolved high-risk jurisdiction exposure?"
      },
      {
        "key": "ai_readiness",
        "band": "moderate",
        "name": "AI Readiness",
        "value": 59,
        "weight": 0,
        "metrics": [
          {
            "key": "ai_agent_context",
            "band": "at_risk",
            "name": "Agent context & guidance",
            "note": null,
            "notes": [],
            "value": 40,
            "inputs": {
              "has_llms_txt": false,
              "legible_history_share": 1,
              "agent_instruction_files": [],
              "agent_instruction_max_bytes": null
            },
            "components": [
              {
                "key": "agent_instructions",
                "name": "Agent instructions",
                "detail": "no CLAUDE.md / AGENTS.md / editor rules",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "no_agent_instructions",
                    "params": {}
                  }
                ],
                "max_points": 45
              },
              {
                "key": "machine_readable_docs_llms_txt",
                "name": "Machine-readable docs (llms.txt)",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 15
              },
              {
                "key": "legible_commit_history",
                "name": "Legible commit history",
                "detail": "100 of 100 human commits state their intent (structured subject or explanatory body)",
                "points": 40,
                "status": "met",
                "details": [
                  {
                    "code": "legible_history",
                    "params": {
                      "legible": 100,
                      "sampled": 100
                    }
                  }
                ],
                "max_points": 40
              }
            ]
          },
          {
            "key": "ai_verify_loop",
            "band": "moderate",
            "name": "Verify loop (build / test / typecheck)",
            "note": null,
            "notes": [],
            "value": 57,
            "inputs": {
              "has_nix": false,
              "has_tests": true,
              "lockfiles": [
                "package-lock.json"
              ],
              "has_dockerfile": false,
              "typed_language": true,
              "bootstrap_files": [],
              "has_devcontainer": false,
              "has_linter_config": true,
              "typecheck_configs": [
                "tsconfig.json"
              ],
              "agent_commit_share": 0,
              "toolchain_manifests": [],
              "dependency_bot_commit_share": 0
            },
            "components": [
              {
                "key": "one_command_bootstrap",
                "name": "One-command bootstrap",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 18
              },
              {
                "key": "automated_tests",
                "name": "Automated tests",
                "detail": null,
                "points": 22,
                "status": "met",
                "details": [],
                "max_points": 22
              },
              {
                "key": "lint_format_config",
                "name": "Lint / format config",
                "detail": ".eslintrc.json",
                "points": 11,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": ".eslintrc.json"
                    }
                  }
                ],
                "max_points": 11
              },
              {
                "key": "static_type_checking",
                "name": "Static type checking",
                "detail": "tsconfig.json",
                "points": 11,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": "tsconfig.json"
                    }
                  }
                ],
                "max_points": 11
              },
              {
                "key": "reproducible_environment",
                "name": "Reproducible environment",
                "detail": "lockfile",
                "points": 10,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": "lockfile"
                    }
                  }
                ],
                "max_points": 10
              },
              {
                "key": "demonstrated_agent_practice",
                "name": "Demonstrated agent practice",
                "detail": "no agent-authored commits among the last 100",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "no_agent_authored_commits",
                    "params": {
                      "sampled": 100
                    }
                  }
                ],
                "max_points": 10
              },
              {
                "key": "automated_maintenance",
                "name": "Automated maintenance",
                "detail": "no automated dependency updates observed",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "no_dependency_automation",
                    "params": {}
                  }
                ],
                "max_points": 8
              },
              {
                "key": "openssf_scorecard_pinned_dependencies",
                "name": "OpenSSF Scorecard: Pinned-Dependencies",
                "detail": "dependency not pinned by hash detected -- score normalized to 3",
                "points": 3,
                "status": "partial",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "ai_code_legibility",
            "band": "excellent",
            "name": "Code legibility for models",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "primary_language": "TypeScript",
              "largest_source_bytes": 34322,
              "source_files_sampled": 13,
              "oversized_source_files": 0
            },
            "components": [
              {
                "key": "type_checkable_code",
                "name": "Type-checkable code",
                "detail": "TypeScript (statically typed)",
                "points": 45,
                "status": "met",
                "details": [
                  {
                    "code": "statically_typed_language",
                    "params": {
                      "language": "TypeScript"
                    }
                  }
                ],
                "max_points": 45
              },
              {
                "key": "manageable_file_sizes",
                "name": "Manageable file sizes",
                "detail": "0/13 source files over 60KB",
                "points": 55,
                "status": "met",
                "details": [
                  {
                    "code": "oversized_source_files",
                    "params": {
                      "kb": 60,
                      "sampled": 13,
                      "oversized": 0
                    }
                  }
                ],
                "max_points": 55
              }
            ]
          }
        ],
        "description": "How well is the repo equipped to be developed and maintained with AI coding agents? An independent, experimental badge — weight 0.0, so it is surfaced on its own and does not affect the overall health score."
      }
    ],
    "metrics_version": "1.13.0"
  },
  "warnings": [
    "Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token",
    "GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository"
  ],
  "report_type": "repository",
  "generated_at": "2026-07-22T19:20:37.709653Z",
  "schema_version": "0.26.0",
  "badge_url": "https://raw.githubusercontent.com/inspect-software/badges/main/v1/c/ctrlcmdshft/homebridge-hubspace-platform.svg",
  "full_name": "ctrlcmdshft/homebridge-hubspace-platform",
  "license_state": "standard",
  "license_spdx": "MIT"
}