metalabel/dfos має індекс здоров’я 57 зі 100, що відповідає смузі «Помірний». Найвищий показник — Vitality (80/100), найнижчий — Security (32/100). Останнє оновлення — сьогодні. Більшість нещодавньої роботи виконує один учасник.
57
загалом / 100
Помірний
Індекс здоров'я програмного забезпечення
Метрики згруповано у зважені категорії на шкалі 1–100. Загальна оцінка починається як їхнє середнє; коли публічні дані активують Політику юрисдикцій високого ризику, рейтинг коригується й отримує верхню межу 49 («Під ризиком»). Готовність до ШІ не входить до індексу.
57
Відмінний85-100Зразковий; відповідає практично всім перевіреним критеріям
Добрий70-84Здоровий; незначні прогалини
Помірний50-69Прийнятний, але з помітними прогалинами; рекомендовано перевірку
У зоні ризику30-49Суттєві слабкі місця; впровадження потребує обережності
Критичний1-29Серйозні проблеми (покинутий, єдиний мейнтейнер, без базової гігієни)
Профіль оцінок
Кожна вісь — окрема категорія. Форма важить більше, ніж середнє: здоровий об'єкт заповнює всю фігуру, тоді як профіль із піками та провалами означає, що сила в одному вимірі маскує ризик в іншому.
Наскільки репозиторій оснащений для розробки та супроводу за участі ШІ-агентів? Незалежний, експериментальний бейдж — вага 0.0, тож він подається окремо і не впливає на загальний індекс здоров'я.
Схема API (OpenAPI/GraphQL/proto) — packages/dfos-web-relay/openapi.yaml
0/20
Сервер MCP
40/40
Придатні до запуску приклади — examples
Використані вхідні дані
example_dirs
examples
has_mcp_signal
ні
api_schema_files
packages/dfos-web-relay/openapi.yaml
Ключові факти
28зірок GitHub
1контриб'юторів
262комітів за останні 12 місяців
0днів від останнього пушу
30релізів
1бас-фактор
0відкритих issue
npmпакетних екосистем
Попередження щодо збору даних
Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token
Could not fetch npm package '@metalabel/dfos' from its registry
GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository
deps.dev does not index npm:@metalabel/dfos-protocol@0.24.0; advisories assessed against the repository dependency graph instead
Докладніше
Історія зірок і форків 0 ★ / 2 ⇿
0Зірки
2Форки
25Релізи
Коли додано кожну зірку й форк — зібрано з GitHub і згруповано за днями. Кумулятивне зростання розміщено просто над денними додаваннями, з яких воно складається, тож їх видно одне проти одного: рівномірне органічне накопичення виглядає зовсім інакше, ніж різкий короткочасний сплеск. Там, де цю різницю можна виміряти, її подано як автентичність росту.
Мажорні 0Мінорні 15Патчі 10
OpenSSF Scorecard 3.2 / 10
3.2сукупно
Незалежна, не прив'язана до інструментів оцінка безпеки від відкритого проєкту OpenSSF Scorecard. Кожна перевірка винагороджує практику безпеки, а не інструмент конкретного постачальника. Перевірки, які Scorecard не зміг визначити, позначено н/д і виключено з оцінки безпеки (вони ніколи не зараховуються як нуль).Scorecard v5.5.0 · 2026-07-22 15:04 UTC
Не вдалося зібрати розв'язаний набір залежностей для цього звіту: GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository
Звіт у форматі JSON машиночитний
{
"data": {
"repo": {
"topics": [],
"is_fork": false,
"size_kb": 5981,
"has_wiki": false,
"homepage": "https://protocol.dfos.com",
"languages": {
"Go": 1271618,
"CSS": 53463,
"HTML": 1314,
"Rust": 35942,
"Astro": 33863,
"Shell": 33893,
"Swift": 34227,
"Python": 26670,
"Makefile": 203,
"Dockerfile": 1265,
"JavaScript": 4447,
"TypeScript": 1468084
},
"pushed_at": "2026-07-21T17:44:43Z",
"created_at": "2026-03-09T17:17:29Z",
"owner_type": "Organization",
"updated_at": "2026-07-21T17:45:00Z",
"description": "Dark Forest OS identity and content protocol, reference implementations, schemas and tests",
"is_archived": false,
"is_disabled": false,
"license_spdx": "MIT",
"default_branch": "main",
"license_spdx_raw": "MIT",
"primary_language": "TypeScript",
"significant_languages": [
"TypeScript",
"Go"
]
},
"owner": {
"blog": "https://metalabel.com",
"name": "Metalabel",
"type": "Organization",
"login": "metalabel",
"company": null,
"location": null,
"followers": 25,
"avatar_url": "https://avatars.githubusercontent.com/u/108232828?v=4",
"created_at": "2022-06-26T16:48:28Z",
"is_verified": null,
"public_repos": 8,
"account_age_days": 1486
},
"license": {
"state": "standard",
"spdx_id": "MIT",
"raw_spdx": "MIT",
"file_present": true,
"scorecard_found": true,
"profile_has_license": true
},
"activity": {
"releases": [
{
"tag": "v0.24.0",
"kind": "minor",
"published_at": "2026-07-17T13:22:49Z"
},
{
"tag": "v0.23.0",
"kind": "minor",
"published_at": "2026-07-09T17:41:14Z"
},
{
"tag": "v0.22.0",
"kind": "minor",
"published_at": "2026-07-08T01:34:51Z"
},
{
"tag": "v0.21.0",
"kind": "minor",
"published_at": "2026-07-07T14:17:20Z"
},
{
"tag": "v0.20.0",
"kind": "minor",
"published_at": "2026-07-06T22:39:26Z"
},
{
"tag": "v0.19.0",
"kind": "minor",
"published_at": "2026-07-05T23:36:59Z"
},
{
"tag": "v0.18.0",
"kind": "minor",
"published_at": "2026-07-05T17:21:03Z"
},
{
"tag": "v0.17.0",
"kind": "minor",
"published_at": "2026-07-05T00:36:49Z"
},
{
"tag": "v0.16.0",
"kind": "minor",
"published_at": "2026-07-03T19:05:38Z"
},
{
"tag": "v0.15.0",
"kind": "minor",
"published_at": "2026-07-01T15:51:38Z"
},
{
"tag": "v0.14.4",
"kind": "patch",
"published_at": "2026-07-01T00:49:14Z"
},
{
"tag": "v0.14.3",
"kind": "patch",
"published_at": "2026-06-30T03:14:35Z"
},
{
"tag": "v0.14.2",
"kind": "patch",
"published_at": "2026-06-29T20:25:48Z"
},
{
"tag": "v0.14.1",
"kind": "patch",
"published_at": "2026-06-29T19:16:06Z"
},
{
"tag": "v0.14.0",
"kind": "minor",
"published_at": "2026-06-29T18:08:41Z"
},
{
"tag": "v0.13.6",
"kind": "patch",
"published_at": "2026-06-28T20:14:07Z"
},
{
"tag": "v0.13.5",
"kind": "patch",
"published_at": "2026-06-26T17:46:49Z"
},
{
"tag": "v0.13.4",
"kind": "patch",
"published_at": "2026-06-26T13:03:38Z"
},
{
"tag": "v0.13.3",
"kind": "patch",
"published_at": "2026-06-26T06:44:32Z"
},
{
"tag": "v0.13.2",
"kind": "patch",
"published_at": "2026-06-25T22:32:38Z"
},
{
"tag": "v0.13.1",
"kind": "patch",
"published_at": "2026-06-25T16:59:36Z"
},
{
"tag": "v0.13.0",
"kind": "minor",
"published_at": "2026-06-24T20:25:31Z"
},
{
"tag": "v0.12.0",
"kind": "minor",
"published_at": "2026-06-23T14:32:34Z"
},
{
"tag": "v0.11.0",
"kind": "minor",
"published_at": "2026-06-20T15:23:33Z"
},
{
"tag": "v0.10.0",
"kind": "minor",
"published_at": "2026-06-16T02:47:44Z"
},
{
"tag": "v0.9.0",
"kind": "minor",
"published_at": "2026-04-15T22:35:36Z"
},
{
"tag": "v0.8.1",
"kind": "patch",
"published_at": "2026-04-15T15:22:49Z"
},
{
"tag": "v0.8.0",
"kind": "minor",
"published_at": "2026-04-15T14:09:11Z"
},
{
"tag": "v0.7.1",
"kind": "patch",
"published_at": "2026-04-06T11:48:47Z"
},
{
"tag": "v0.7.0",
"kind": "minor",
"published_at": "2026-04-05T00:51:54Z"
}
],
"recent_commits": [
{
"oid": "618e1601e4b66c4e0f144b56363a6f1cb88c1207",
"body": "## Problem\n\n`collectIndexDirtyAfterOp` maps every `revocation` op to\n`dirty.allPublicContent = true` — recompute every currently-public-read\ncontent row. That superset is correct but O(all public content) per\nrevocation, and a batch of revocations (e.g. a bulk visibility change)\npays it even though \n[…]\n.\n- Go: `packages/dfos-web-relay-go/index_test.go` — full `go test ./...`\ngreen.\n\n🤖 Generated with [Claude Code](https://claude.com/claude-code)\n\nCo-authored-by: Claude Fable 5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "perf(relay): targeted revocation index maintenance (#198)",
"author_name": "Brandon",
"author_login": "bvalosek",
"committed_at": "2026-07-21T17:44:40Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "5fe87761bd1a0179fac01d29baf140c2c0bd3dac",
"body": null,
"is_bot": false,
"headline": "release: v0.24.0",
"author_name": "Brandon",
"author_login": "bvalosek",
"committed_at": "2026-07-17T13:18:16Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e5a3d9ed5dbe1affd35a599bee395e6a6547514a",
"body": "## What\n\nA chain-scoped **standing public read grant** let *any* caller fetch the\nblob bytes of **any operation in the chain's log**, not just the current\nhead. Operation CIDs are enumerable via the public\n`/proof/v1/content/:id/log` route, so this exposed prior and edited-out\nrevisions — including \n[…]\n137/137, Go relay unit, Go conformance (incl. the\nnew head-only case) all green.\n\n🤖 Generated with [Claude Code](https://claude.com/claude-code)\n\nCo-authored-by: Claude Fable 5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "fix(relay): standing public grants serve head-only blobs (#197)",
"author_name": "Brandon",
"author_login": "bvalosek",
"committed_at": "2026-07-17T13:17:59Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "64798ab4e830c38dbb9a10ca15122fee5f2caedf",
"body": null,
"is_bot": false,
"headline": "release: v0.23.0",
"author_name": "Brandon",
"author_login": "bvalosek",
"committed_at": "2026-07-09T17:36:35Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "86bd1e0bb8aa92223908bac7a6d39388370b8615",
"body": "## Security fix\n\nThe `/index/v0` projections extracted display-name fields (identity\n`profile.name`, content `title`) from relay-held document bytes and\nserved them to anonymous callers without consulting the `publicRead`\nboolean computed right beside them. A relay holding non-public documents\n(an o\n[…]\n so their\ncircuit-breaker assertions isolate what they actually test.\n\n🤖 Generated with [Claude Code](https://claude.com/claude-code)\n\n---------\n\nCo-authored-by: Claude Fable 5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "fix(relay): gate index display-name projections on publicRead (#196)",
"author_name": "Brandon",
"author_login": "bvalosek",
"committed_at": "2026-07-09T17:36:08Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "84ccc9ef6674e990098f0f0ff5a39bbb5122efd5",
"body": "…#195)\n\nHotfix for a #194 regression observed on the live explorer: every\nbrowse/home/identity row stuck on \"verifying…\" while detail pages\nverified fine.\n\n## Root cause\n\n#194 bumped the local index `DB_VERSION` 5→6. `openExplorerDb` handled\n`onupgradeneeded`/`onsuccess`/`onerror` but had **no `onbl\n[…]\naude adversarial pass + codex cross-model review; both\nconfirmed findings fixed.\n\n🤖 Generated with [Claude Code](https://claude.com/claude-code)\n\nCo-authored-by: Claude Fable 5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "fix(explorer): local-index open can no longer hang the verify queue (…",
"author_name": "Brandon",
"author_login": "bvalosek",
"committed_at": "2026-07-09T01:54:08Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "9800d8523915e76e8fa9a79df5ee6c08946df832",
"body": "…dardized doc labels, newest-first browse (#194)\n\nUI polish pass across the explorer, four workstreams:\n\n## JsonView on content + op pages\n- New shared `<JsonView>` Preact component (zero new deps):\nsyntax-colored collapsible tree, multiline strings rendered as\nreal-newline indented blocks, `did:dfo\n[…]\n dead helper, negative-cache TTL) addressed in the final two\ncommits.\n\n🤖 Generated with [Claude Code](https://claude.com/claude-code)\n\n---------\n\nCo-authored-by: Claude Fable 5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "feat(explorer): JsonView tree, authorization credential parsing, stan…",
"author_name": "Brandon",
"author_login": "bvalosek",
"committed_at": "2026-07-08T23:19:13Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "9596ccd827cb261aa5058c2a72995261f4dfcf1c",
"body": null,
"is_bot": false,
"headline": "release: v0.22.0",
"author_name": "Brandon",
"author_login": "bvalosek",
"committed_at": "2026-07-08T01:30:48Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2f5d50a72e3b67c18d13f7e2901ece8c1e3927c5",
"body": "…igner= feature probe) (#193)\n\nFollow-up to #192, found by post-merge probe: relays running web-relay <\n0.22.0 (including the current live relay on 0.21.0) silently ignore\n`order=` and `signer=`. The explorer therefore presented lexical rows\nunder \"newest\" labels and — worse — fabricated the Contrib\n[…]\n Codex cross-review: 1 finding (probe/query timeout mismatch), fixed.\n\n🤖 Generated with [Claude Code](https://claude.com/claude-code)\n\n---------\n\nCo-authored-by: Claude Fable 5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "fix(explorer): honest degradation on pre-iteration-2 relays (order=/s…",
"author_name": "Brandon",
"author_login": "bvalosek",
"committed_at": "2026-07-08T00:45:40Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "e9164fb78a6a225b332c2d16ecb19aff5322f248",
"body": "…rowse, honest projections (#192)\n\nWires the explorer to the index v0 iteration 2 surface (#190 spec, #191\nrelays). PR3 of 3.\n\n## What\n\n- **Server-side name search**: identities browse passes `nameContains=`\nthrough to the relay (deleted the now-false \"relay has no name search\"\ncopy).\n- **Actor ledg\n[…]\nr; the capability null→true transition\nexercised without hook errors.\n\n🤖 Generated with [Claude Code](https://claude.com/claude-code)\n\n---------\n\nCo-authored-by: Claude Fable 5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "feat(explorer): index v0 iteration 2 wiring — actor ledger, recency b…",
"author_name": "Brandon",
"author_login": "bvalosek",
"committed_at": "2026-07-08T00:26:43Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "cfc617b6954e256404900f717f93cdb6d7b0d639",
"body": "…=, signer= (TS + Go + conformance) (#191)\n\nImplements the three index capabilities specified in #190 (\"actor,\nclock, name\") across both relay implementations and the conformance\nsuite.\n\n## What\n\n- **Display-name registry row 2 — `post/v1 → title`**: content rows gain\na nullable `title` projected fr\n[…]\nroof/v1/log` untouched;\nrecent-ops module parked per PR1 resolution).\n\n🤖 Generated with [Claude Code](https://claude.com/claude-code)\n\n---------\n\nCo-authored-by: Claude Fable 5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "feat(relay): implement index v0 iteration 2 — title projection, order…",
"author_name": "Brandon",
"author_login": "bvalosek",
"committed_at": "2026-07-07T23:42:11Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "19ba018b3669c5d266803c08f6ffd295181cc947",
"body": "Amends the `/index/v0` contract (unfrozen 0.x clock — WEB-RELAY\nterritory only, no PROTOCOL.md touch) with the second iteration of the\nindex surface. Spec-only; TS + Go + conformance implementation follows\nin the next PR, explorer wiring in the one after.\n\n## The fence\n\nThe Structural Seam gains its\n[…]\neiling — relocation candidate into `/search` when that family\nexists.\n\n🤖 Generated with [Claude Code](https://claude.com/claude-code)\n\n---------\n\nCo-authored-by: Claude Fable 5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "feat(spec): index v0 iteration 2 — actor, clock, name (#190)",
"author_name": "Brandon",
"author_login": "bvalosek",
"committed_at": "2026-07-07T18:05:05Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "fd13eb81b8e4ecdf33f5734dfd175c60e4b61188",
"body": null,
"is_bot": false,
"headline": "release: v0.21.0",
"author_name": "Brandon",
"author_login": "bvalosek",
"committed_at": "2026-07-07T14:12:52Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "975d92255e14d287c557c4ea3190164871c31ab7",
"body": "…ons (#189)\n\nReleases 0.17–0.20 never rolled the `[Unreleased]` heading, so it\naccumulated four releases' worth of entries. This attributes each entry\nto its actual tag (#165 → 0.17.0, index namespace → 0.18.0/0.19.0,\n#182/#183/#184 → 0.20.0) and stages the 0.21.0 section: the second\n`post/v1` pre-a\n[…]\nredentialRow` re-export fix\n(#186).\n\nDocs-only; staged ahead of cutting v0.21.0.\n\n🤖 Generated with [Claude Code](https://claude.com/claude-code)\n\nCo-authored-by: Claude Fable 5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "docs(changelog): roll accumulated Unreleased into 0.17.0–0.21.0 secti…",
"author_name": "Brandon",
"author_login": "bvalosek",
"committed_at": "2026-07-07T14:12:14Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "8ce5bd0a7552fde360022dce124a0240a644c40d",
"body": "…ow format, add publishedAt (#188)\n\n## Why now\n\nPost chains exist only on shadowed (never-served) chains being wiped and\nre-anchored under this shape — no external observer can hold the old\nform, so this is a free in-place amendment. **The pre-adoption breaking\nwindow closes for good at first public\n[…]\n*73/73** · Python:\n**74/74** · dfos-cli Go: pass · mirror diff: empty\n\n🤖 Generated with [Claude Code](https://claude.com/claude-code)\n\n---------\n\nCo-authored-by: Claude Fable 5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "feat(spec): post/v1 second pre-adoption amendment — drop topics, narr…",
"author_name": "Brandon",
"author_login": "bvalosek",
"committed_at": "2026-07-07T03:06:50Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "930a5eab65dfe76f2cec6d487b00375dd963c641",
"body": "…x (#187)\n\n## What\n\nAdds `?nameContains=` to `GET /index/v0/identities` — a\n**case-insensitive substring filter** over the already-projected\n`profile.name`.\n\n- **Amber / non-authoritative** — a discovery hint, re-derivable from\nthe proof plane; never authority.\n- **Dumb & deterministic** — true subs\n[…]\nive, opt-in param) → ships in the next npm release; not auto-live.\n\n🤖 Generated with [Claude Code](https://claude.com/claude-code)\n\nCo-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "feat(index): add ?nameContains= substring filter on the identity inde…",
"author_name": "Brandon",
"author_login": "bvalosek",
"committed_at": "2026-07-07T01:26:30Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "527d56e6bd4e709fb857cfd6ce706b9759a715cd",
"body": "`IndexCredentialRow` is defined in `index-routes.ts` alongside its\nsibling index-row types, but was the only one missing from the\npackage-root re-export block in `src/index.ts`. Its siblings —\n`IndexContentRow`, `IndexCountersignatureRow`, `IndexIdentityRow`,\n`IndexProfile` — are all exported, so co\n[…]\nport.\n- `pnpm --filter @metalabel/dfos-web-relay typecheck` clean.\n\n🤖 Generated with [Claude Code](https://claude.com/claude-code)\n\nCo-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "fix(web-relay): re-export IndexCredentialRow from package root (#186)",
"author_name": "Brandon",
"author_login": "bvalosek",
"committed_at": "2026-07-07T00:14:03Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "19f994fbbfa87dcd7ee1f328373dc45cd644838d",
"body": null,
"is_bot": false,
"headline": "release: v0.20.0",
"author_name": "Brandon",
"author_login": "bvalosek",
"committed_at": "2026-07-06T22:35:05Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2f796d4c7b11bc8906b9592829b077887bbc0470",
"body": "…s, Media object, Authorship lattice (#183)\n\nThe final pre-adoption breaking amendment to `post/v1`, made **in\nplace** — deliberately, while zero `post/v1` documents exist on any\nchain. This closes the breaking window: from here `post/v1` evolves\nadditively only, and any further breaking change is a\n[…]\ntaged for review before merge — release (`./scripts/release.sh` →\n0.20.0) after.\n\n🤖 Generated with [Claude Code](https://claude.com/claude-code)\n\nCo-authored-by: Claude Fable 5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "spec(content-model): post/v1 pre-adoption breaking amendment — credit…",
"author_name": "Brandon",
"author_login": "bvalosek",
"committed_at": "2026-07-06T21:31:34Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "bcc1b0bf609796e7a16a7b87c35f6fd887f40ad3",
"body": "…s violation) (#185)\n\n## What\n\nRewires the two credential panels to the new `/index/v0/credentials`\nroute (#2a) so they populate **on a fresh browser with no deep sync** —\nclosing the \"index-always violation\" (the last place the explorer's\nindex-always model broke).\n\n- **`identity.tsx` \"credentials \n[…]\nasync-per-row fold genuinely needs browser\nobservation.\n\n🤖 Generated with [Claude Code](https://claude.com/claude-code)\n\n---------\n\nCo-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "feat(explorer): index-native credential panels (kills the index-alway…",
"author_name": "Brandon",
"author_login": "bvalosek",
"committed_at": "2026-07-06T19:38:31Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "ff908d69fbfb46d76829cc7e17729428b870f3dc",
"body": "…uer + resource, chain:* union) (#184)\n\n## What\n\nAdds a 4th index route, `GET /index/v0/credentials`, enumerating the\nrelay's held **public** credentials, filterable by `issuer` (exact DID)\nand/or `resource`, keyset-paginated by `cid`. Closes item #2 of the\nrelay-indexer architecture review — the on\n[…]\nfied clean (no verification\nhelpers in the query path).\n\n🤖 Generated with [Claude Code](https://claude.com/claude-code)\n\n---------\n\nCo-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "feat(index): /index/v0/credentials — public-credential discovery (iss…",
"author_name": "Brandon",
"author_login": "bvalosek",
"committed_at": "2026-07-06T18:37:23Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "a71cbcf653841b1f1dee93082225b84206789e30",
"body": "## What\n\nAdds a `?documentCID=<cid>` exact-equality filter to `GET\n/index/v0/content`, matching the projected `currentDocumentCID`. This\nvalue was already projected into every content row but wasn't queryable\n— so \"who published document X\", \"editions of this document\", and\ndedup-by-hash were unansw\n[…]\nlaude reviewed the diff +\nran the live dual-relay + parity suites.\n\n🤖 Generated with [Claude Code](https://claude.com/claude-code)\n\nCo-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "feat(index): documentCID exact-match filter on /index/v0/content (#182)",
"author_name": "Brandon",
"author_login": "bvalosek",
"committed_at": "2026-07-06T18:05:37Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "e3325c64ff3cd74aacc15624c5faf18b241b4b63",
"body": "… (3-way parity) (#181)\n\n## What\n\nExtends the shared relay conformance suite (`conformance_index_test.go`)\nto lock the `/index/v0` **filter + keyset-pagination + 400** surface\nthat was previously only covered by each implementation's *private* unit\ntests.\n\nBefore this PR, conformance nailed only hap\n[…]\nrun-conformance.sh` (vs Go `dfos\nserve`) → all 11 index tests PASS\n\n🤖 Generated with [Claude Code](https://claude.com/claude-code)\n\nCo-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "test(relay-conformance): lock /index/v0 filters, pagination, and 400s…",
"author_name": "Brandon",
"author_login": "bvalosek",
"committed_at": "2026-07-06T17:36:59Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "aeee77a5e207b04dd6b0359e3f8395d61e6624f1",
"body": "…ma facet + witness reverse-lookup) (#180)\n\nLights up two already-built relay `/index/v0` capabilities the explorer\nnever consumed. Both **FE-only, pure-consume** (no relay / protocol /\nclient-package change), amber-hint-then-fold, matching the existing\nindex-browse conventions.\n\n## 1 — `$schema` fa\n[…]\nen\non the single-schema corpus. No regressions, no error boundary.\n\n🤖 Generated with [Claude Code](https://claude.com/claude-code)\n\nCo-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "feat(dfos-explorer): consume two latent /index/v0 capabilities ($sche…",
"author_name": "Brandon",
"author_login": "bvalosek",
"committed_at": "2026-07-06T12:55:52Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "ccf38c0558be65df29b4e4221b0b93a70e6220a9",
"body": "… authorization (#179)\n\n## What\n\nArtifacts, countersignatures, and revocations are **standalone signed\nstatements** — they carry no container chain, so the op view dead-ended\nthem at an amber:\n\n> signer authorization unproven standalone — *a key signed this — fold\nthe owning chain to prove authoriza\n[…]\nk.\n\nSingle-file change: `packages/dfos-explorer/src/views/op.tsx`.\n\n🤖 Generated with [Claude Code](https://claude.com/claude-code)\n\nCo-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "feat(dfos-explorer): JIT-fold owning chain to prove standalone signer…",
"author_name": "Brandon",
"author_login": "bvalosek",
"committed_at": "2026-07-06T02:33:00Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "8dd219cdd8595e37020fdedf996cc229505f44bc",
"body": "…ally (#178)\n\n## Summary\n\nThe home **NETWORK** panel flipped binary between a green \"local\nverified index\" and an amber \"relay-asserted — nothing synced\". In the\nnew index-always world you're never in a degraded \"nothing synced\" state\n— you're always browsing the relay index and verifying sparsely a\n[…]\nTest plan\n- typecheck clean · 95 tests · build ok · prettier clean\n\n🤖 Generated with [Claude Code](https://claude.com/claude-code)\n\nCo-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "feat(dfos-explorer): home hero stats — relay-asserted vs verified-loc…",
"author_name": "Brandon",
"author_login": "bvalosek",
"committed_at": "2026-07-06T01:40:22Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "77bb28f3e1a67594e88a09f533582407d2ce306c",
"body": "…IFIED (#177)\n\n## Summary\n\nCollapses the light-mode / local-mode phase machine into **one** model:\nwhen a relay advertises `capabilities.index`, browse and home **always**\nenumerate from `/index/v0` (even after a full deep sync — the live index\nis always fresher than a past sync). Every row renders \n[…]\nplorer build` — ok\n- Live browser verification as above\n\n🤖 Generated with [Claude Code](https://claude.com/claude-code)\n\n---------\n\nCo-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "feat(dfos-explorer): index-always browse + durable real-time ATTR/VER…",
"author_name": "Brandon",
"author_login": "bvalosek",
"committed_at": "2026-07-06T01:24:27Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "66487ef6a4b8ff52b1de8dc2a330aa9a8b7193a1",
"body": "…(#176)\n\n## Summary\n\nThe relay `/.well-known/dfos-relay` already advertises\n`capabilities.index` (since 0.18), and `client.health()` spreads the raw\nper-relay capability object straight into the relay browser's `Caps`\nchip row. The `index` flag was simply missing from the curated\n`CAP_LABELS` allowl\n[…]\nelays` against live relays, index chip renders\ncorrectly per-relay\n\n🤖 Generated with [Claude Code](https://claude.com/claude-code)\n\nCo-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "feat(dfos-explorer): surface index capability chip on the relay list …",
"author_name": "Brandon",
"author_login": "bvalosek",
"committed_at": "2026-07-06T00:14:32Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "67895535fd30b7a20abec76dd7e31c9de164d0d1",
"body": null,
"is_bot": false,
"headline": "release: v0.19.0",
"author_name": "Brandon",
"author_login": "bvalosek",
"committed_at": "2026-07-05T23:32:23Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "391d7607d3556dbf22287f477d28a27c01178b7b",
"body": "…(#175)\n\n## Why\n\nThe `/index/v0` query family shipped in #173 recomputes its projection\nfrom the full corpus on every request: the store hands back **every**\nchain, and the routes hydrate each one (content-chain + blob +\nstanding-auth sub-reads per row) before slicing to `limit`. Measured on\na live \n[…]\n15s to\nlow ms (will be validated live on the lark mesh post-release).\n\n🤖 Generated with [Claude Code](https://claude.com/claude-code)\n\n---------\n\nCo-authored-by: Claude Fable 5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "feat(web-relay): materialized O(page) /index/v0 projection (TS + Go) …",
"author_name": "Brandon",
"author_login": "bvalosek",
"committed_at": "2026-07-05T20:27:45Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "44048a76267eefeba96a528fe504172f92a00009",
"body": null,
"is_bot": false,
"headline": "release: v0.18.0",
"author_name": "Brandon",
"author_login": "bvalosek",
"committed_at": "2026-07-05T17:16:33Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ec6cb1e1bb4b05e8e124c11b016dd3afaa486e78",
"body": "…rified in view (3/3) (#174)\n\n## Summary\n\nFinal PR of the /index/v0 arc (#172 spec, #173 dual-relay\nimplementation) — the explorer now works instantly against an\nindex-capable relay with **no full chain sync required**, while keeping\nthe full-corpus IndexedDB path as the audit stance.\n\n### `@metalab\n[…]\nser verification as above (Playwright against `dfos serve` from\n#173)\n\n🤖 Generated with [Claude Code](https://claude.com/claude-code)\n\n---------\n\nCo-authored-by: Claude Fable 5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "feat(dfos-explorer): index light mode — instant attributed browse, ve…",
"author_name": "Brandon",
"author_login": "bvalosek",
"committed_at": "2026-07-05T16:52:14Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "47c28cd5c7a0442588357bea912cd17a8e194047",
"body": "## Summary\n\nImplements the **Index (v0)** contract merged in #172 — in **both\nreference relays**, keeping the dual-relay parity harness in lockstep.\n\n### TypeScript relay (`packages/dfos-web-relay`)\n- **Routes** (all 501-gated on `capabilities.index`, cursor paradigm\n`after`/`limit`(100/1000)/`next`\n[…]\n- Conformance index tests skip cleanly against capability-less relays\n\n🤖 Generated with [Claude Code](https://claude.com/claude-code)\n\n---------\n\nCo-authored-by: Claude Fable 5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "feat(web-relay): implement /index/v0 query routes (2/3) (#173)",
"author_name": "Brandon",
"author_login": "bvalosek",
"committed_at": "2026-07-05T16:10:13Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "8f2b2cee6cac2b42db4f4906f2ae0ae1f395d5e2",
"body": "…(#172)\n\n## Summary\n\n- Adds the **Index (v0)** section to `specs/WEB-RELAY.md`: an optional,\nnon-authoritative, cursor-paginated query surface over the current-state\nprojections the relay already folds — following the same\noptional-capability pattern as the content plane and `/revocations/v1`.\n- **N\n[…]\nve.\n- Contract/conformance tests land with PR 2 alongside the routes.\n\n🤖 Generated with [Claude Code](https://claude.com/claude-code)\n\n---------\n\nCo-authored-by: Claude Fable 5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "spec(web-relay): /index/v0 — non-authoritative query namespace (1/3) …",
"author_name": "Brandon",
"author_login": "bvalosek",
"committed_at": "2026-07-05T15:35:03Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "34d5f8d2482915e59a7f84cab9b995075a832c10",
"body": "…nk, IA pass (#170)\n\nLane RS — the subjective homepage-rethink + restyle + IA pass for the\nexplorer (D1, D2, D3-IA, D8 from the 2026-07-04 redesign brief). Builds\non Lane CF (#169). **No auto-merge** — this is a visual/subjective lane\nfor review.\n\n## Scope\n\n### D1 — dark-default theme + toggle\n- `st\n[…]\ne + detail; no JS console errors\n(only pre-existing gated-blob 401s).\n\n🤖 Generated with [Claude Code](https://claude.com/claude-code)\n\n---------\n\nCo-authored-by: Claude Fable 5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "feat(dfos-explorer): dark-default observatory restyle, homepage rethi…",
"author_name": "Brandon",
"author_login": "bvalosek",
"committed_at": "2026-07-05T03:53:58Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "81d384a9bd9f3caebdb13495326082dab5451e25",
"body": "…d pool) (#171)\n\nPhase 2 (\"resolving public projections\") resolved one content chain at a\ntime, each turn gated on a full network blob fetch — a 9.5k-chain corpus\ntook tens of minutes serially.\n\n## Change\n- `resolvePublicProjections` now runs a **bounded worker pool (8)** over\nthe eligible chains. E\n[…]\n`profileSource`.\n- 73/73 explorer tests pass; scoped typecheck clean.\n\n🤖 Generated with [Claude Code](https://claude.com/claude-code)\n\n---------\n\nCo-authored-by: Claude Fable 5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "perf(dfos-explorer): parallelize public-projection resolution (bounde…",
"author_name": "Brandon",
"author_login": "bvalosek",
"committed_at": "2026-07-05T03:49:48Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "b75fc8e480c1d9ab8a99f20d890bb6a571e08163",
"body": "…idebar fixes (#169)\n\nLane CF — the objective \"clear fixes\" pass over the explorer (decisions\nD5, D6, D4-existing-projections, D7, and the mechanical parts of D3).\nSingle package, additive UI + one data-bug fix. No\nhomepage/restyle/IA-relocation (separate lane).\n\n## Fixes\n\n**1. Credential active/rev\n[…]\nexplorer build` — clean\n- `prettier --check` on touched files — clean\n\n🤖 Generated with [Claude Code](https://claude.com/claude-code)\n\n---------\n\nCo-authored-by: Claude Fable 5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "feat(dfos-explorer): credential status, parsed titles, relay stats, s…",
"author_name": "Brandon",
"author_login": "bvalosek",
"committed_at": "2026-07-05T02:07:49Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "8e5ddc32b95e8db93da63e7cfebb18925b6cd7a5",
"body": "The new openapi version tripwire (#167) caught its first real bug on its\nfirst release: `version:sync` rewrites `openapi.yaml` `info.version`,\nbut `release.sh` staged only the package manifests — v0.17.0 was tagged\nwith openapi.yaml still at 0.16.0, the tripwire failed `test / ci` on\nthe tag run, an\n[…]\nt missed. The v0.17.0 tag will be deleted and re-cut at\nthis commit once merged.\n\n🤖 Generated with [Claude Code](https://claude.com/claude-code)\n\nCo-authored-by: Claude Fable 5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "fix(release): stage openapi.yaml in the release commit (#168)",
"author_name": "Brandon",
"author_login": "bvalosek",
"committed_at": "2026-07-05T00:32:16Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "582aa3015e3a8d4e094918e44e5006c6ee7daee2",
"body": null,
"is_bot": false,
"headline": "release: v0.17.0",
"author_name": "Brandon",
"author_login": "bvalosek",
"committed_at": "2026-07-05T00:27:16Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a981c0383c75f67ec2a47b372ea56310c44960cd",
"body": "…ge (#167)\n\n## What\n\nFollow-through on the docs-sync audit (#166) process-gap finding, plus\nfull Go/TS parity verification of the #165 amendment, via an ultracode\nworkflow (2 Opus auditors, 2 builders — codex authored the guardrails\nlane one-shot).\n\n### Guardrails (openapi.yaml can never silently dr\n[…]\ned (only `info.version` rewrites).\n\nThis is the last gate before the 0.17.0 cut.\n\n🤖 Generated with [Claude Code](https://claude.com/claude-code)\n\nCo-authored-by: Claude Fable 5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "chore(relay): openapi drift guardrails + amendment conformance covera…",
"author_name": "Brandon",
"author_login": "bvalosek",
"committed_at": "2026-07-05T00:26:13Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "9ac3f5926ce1281a37482cb95728a5fb747e2fe4",
"body": "## What\n\nAn ultracode docs-sync audit (11 parallel auditors + adversarial\nverification, 30 agents, 0 refuted findings) checked every prose surface\n— specs, package READMEs, site copy, CLI docs, examples — against the\ncode as it stands after #163 (explorer browse) and #165 (the last\npre-adoption brea\n[…]\nase. Worth folding into\nversion:sync at some point; set to 0.16.0 manually here.\n\n🤖 Generated with [Claude Code](https://claude.com/claude-code)\n\nCo-authored-by: Claude Fable 5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "docs: sync all prose surfaces with the pre-adoption amendment (#166)",
"author_name": "Brandon",
"author_login": "bvalosek",
"committed_at": "2026-07-04T22:15:34Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "39dcd0cd1b3b67ee29f9326d69c81e8328852f3c",
"body": "## The last pre-adoption breaking amendment\n\nOne PR, five sequential commits, that closes the window on breaking\nchanges to the reference relay's **non-frozen** surfaces before there\nare any external adopters. The proof plane (`/proof/v1/*`) stays frozen\nwith Protocol v1 throughout; everything here \n[…]\n4, which was cut before #163 landed\nand could not build a merge ref.)\n\n🤖 Generated with [Claude Code](https://claude.com/claude-code)\n\n---------\n\nCo-authored-by: Claude Fable 5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "feat(dfos-web-relay): the last pre-adoption breaking amendment (#165)",
"author_name": "Brandon",
"author_login": "bvalosek",
"committed_at": "2026-07-04T21:20:34Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "045a5882a5c19d265ab872fd93628e2a149b5bbd",
"body": "…ts (#163)\n\nTwo-phase sync + three browse sections over the explorer's local\nIndexedDB index — enumeration stays sync-local (never a query-for-list\nagainst a relay), per the explorer-relay decision ledger (A1/B/C/D).\n\n## What ships\n- **Phase 2 \"resolve public projections\"** (`sync-projections.ts`) —\n[…]\nangles → verify) run;\nconfirmed findings fixed in the second commit.\n\n🤖 Generated with [Claude Code](https://claude.com/claude-code)\n\n---------\n\nCo-authored-by: Claude Opus 4.8 <noreply@anthropic.com>",
"is_bot": false,
"headline": "feat(dfos-explorer): browse public identities, documents, and artifac…",
"author_name": "Brandon",
"author_login": "bvalosek",
"committed_at": "2026-07-04T20:21:48Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "29a17ff092ba2a7ee267e3378dc678cdcf41367d",
"body": "…browser (#162)\n\n## What\nRelays on 0.16.0 advertise `capabilities.revocations` (the\n`/revocations/v1` query routes the credential view consults). The\nrelay-browser capability chips hardcoded the original four\n(`proof/content/log/write`), so a 0.16.0 relay's revocation-feed\ncapability was invisible i\n[…]\n; prettier clean.\n- Verified live: relay.dfos.com card renders `revocations ✓`.\n\n🤖 Generated with [Claude Code](https://claude.com/claude-code)\n\nCo-authored-by: Claude Opus 4.8 <noreply@anthropic.com>",
"is_bot": false,
"headline": "feat(dfos-explorer): surface the revocations capability in the relay …",
"author_name": "Brandon",
"author_login": "bvalosek",
"committed_at": "2026-07-03T21:35:33Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "566cafac3e13587bdf568a56aa5f341c80acfaa0",
"body": null,
"is_bot": false,
"headline": "release: v0.16.0",
"author_name": "Brandon",
"author_login": "bvalosek",
"committed_at": "2026-07-03T19:01:22Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ac18d4f25532f72ebfe580b634c4f04c601bdb7b",
"body": "Convert the [Unreleased] block to [0.16.0] (2026-07-03) ahead of the release\ncut, add a fresh [Unreleased] placeholder, and repair the footer compare\nlinks. Extends the dfos-explorer bullet to the full in-window PR span\n(#155–#161: sync engine, auto-sync, JIT indexing, verified profiles + relay\nbrow\n[…]\ntorage stats, related-credential surfacing) and clarifies that the\nclient/explorer ride the published protocol + web-relay pair (both private).\n\nCo-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>",
"is_bot": false,
"headline": "docs(changelog): 0.16.0 release notes",
"author_name": "Brandon",
"author_login": "bvalosek",
"committed_at": "2026-07-03T19:00:47Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "ff9da6595901aa780a218021aa35a1c2f00c8269",
"body": "## What\n\n`.kv .v` carried `word-break: break-all` — correct for long identifiers,\nbut it also applied to the glossary and \"what this is\" **prose**,\nbreaking words mid-word (\"t he atom\", \"cont ent chains\", \"credential\ns\").\n\n## Fix\n\nSwap to `overflow-wrap: anywhere` + `word-break: normal`: prose wraps\n[…]\nty DIDs/CIDs still wrap with **zero horizontal overflow**\n\nOne-line CSS change.\n\n🤖 Generated with [Claude Code](https://claude.com/claude-code)\n\nCo-authored-by: Claude Opus 4.8 <noreply@anthropic.com>",
"is_bot": false,
"headline": "fix(dfos-explorer): wrap prose on word boundaries, not mid-word (#161)",
"author_name": "Brandon",
"author_login": "bvalosek",
"committed_at": "2026-07-03T16:14:44Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "57c3a031cf9cb94ada07843498fcfcec9748be0e",
"body": "…ge (#160)\n\n## What\n\nThe content chain page now surfaces the **public-read (and any scoped)\ngrants** that name it as a resource — a direct answer to \"what makes\nthis public?\" with a link to the credential.\n\n## How\n\nThe relay has no \"grants for this chain\" endpoint\n(`hasPublicStandingAuth` is interna\n[…]\nlocal index …\nbytes are gated.\"\n\nNothing deployed — local `dfos-explorer` only.\n\n🤖 Generated with [Claude Code](https://claude.com/claude-code)\n\nCo-authored-by: Claude Opus 4.8 <noreply@anthropic.com>",
"is_bot": false,
"headline": "feat(dfos-explorer): show related credentials on the content chain pa…",
"author_name": "Brandon",
"author_login": "bvalosek",
"committed_at": "2026-07-03T16:12:28Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "f4572a44e30aca2824f6f0b337a113f1c271d1ec",
"body": "…159)\n\n## What\n\nTwo fixes prompted by a real \"why only 55 credentials?\" investigation.\n\n### 1. Credential count was a rollup artifact\nCredentials chain under their **issuer DID**, colliding with that\nidentity's chain. The explorer's per-chain rollup keeps one `kind` per\n`chainId` (last-writer-wins),\n[…]\n identity chain). **51 green.**\n\nNothing deployed — local `dfos-explorer` only.\n\n🤖 Generated with [Claude Code](https://claude.com/claude-code)\n\nCo-authored-by: Claude Opus 4.8 <noreply@anthropic.com>",
"is_bot": false,
"headline": "fix(dfos-explorer): correct credential count + show IndexedDB size (#…",
"author_name": "Brandon",
"author_login": "bvalosek",
"committed_at": "2026-07-03T15:59:50Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "09e81bb2f306d232656f33f9f661d257359ddf4f",
"body": "## What\n\nRender profiles clearly — and **honestly**. A profile is \"verified\" only\nwhen its carrier proved out; a relay describing itself is a claim until\nits artifact signature checks against its self-certifying DID.\n\n## Changes\n\n- **`lib/profile.ts`** — `decodeRelayProfile` (beat-1 unsafe decode,\nf\n[…]\ns diff before merge.\n\nNothing deployed — local `dfos-explorer` only.\n\n🤖 Generated with [Claude Code](https://claude.com/claude-code)\n\n---------\n\nCo-authored-by: Claude Opus 4.8 <noreply@anthropic.com>",
"is_bot": false,
"headline": "feat(dfos-explorer): verified profile rendering + relay browser (#158)",
"author_name": "Brandon",
"author_login": "bvalosek",
"committed_at": "2026-07-03T14:39:27Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "e05bde542571933ec407690cb92a8d43cb749140",
"body": "…ntity (#157)\n\n## What\n\nNavigating straight to a chain now **populates the local index\nincrementally** — no full sync required. The detail view has already\nfetched and **verified** the op log via the client, so landing those ops\nin the index is free, and a later full sync skips them (idempotent by\nC\n[…]\nnd keys\" behavior from the\nask.\n\nNothing deployed — local `dfos-explorer` only.\n\n🤖 Generated with [Claude Code](https://claude.com/claude-code)\n\nCo-authored-by: Claude Opus 4.8 <noreply@anthropic.com>",
"is_bot": false,
"headline": "feat(dfos-explorer): JIT index chains on visit + prefetch creator ide…",
"author_name": "Brandon",
"author_login": "bvalosek",
"committed_at": "2026-07-03T14:18:23Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "3a012ef19e1202f9b135d630ce8f9cf00f71c7e0",
"body": "## What\n\nOpt-in periodic **background sync**. Stacked on #155 (base will retarget\nto `main` once #155 merges).\n\nA single 30s heartbeat in the sync store fires a background sync\nwhenever the local index is older than the configured cadence — setting\nchanges, load-time staleness, and post-run reschedu\n[…]\nnav-resilient store from #155).\n\nNothing deployed — local `dfos-explorer` only.\n\n🤖 Generated with [Claude Code](https://claude.com/claude-code)\n\nCo-authored-by: Claude Opus 4.8 <noreply@anthropic.com>",
"is_bot": false,
"headline": "feat(dfos-explorer): auto-sync setting + background scheduler (#156)",
"author_name": "Brandon",
"author_login": "bvalosek",
"committed_at": "2026-07-03T14:11:31Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "e371fe9fd12b27850529d8c829e4fcd190aeda37",
"body": "… (#155)\n\n## What\n\nLifts sync from the `LocalIndex` component into a **module singleton**\n(`lib/sync-store.ts`), observable like `relays.ts`. This is the\nfoundation for the requested homepage/auto-sync improvements: one sync\nruns at a time, progress broadcasts to every subscriber, and the run\n**surv\n[…]\nNothing deployed — local `dfos-explorer` only. Foundation for auto-sync\n(next).\n\n🤖 Generated with [Claude Code](https://claude.com/claude-code)\n\nCo-authored-by: Claude Opus 4.8 <noreply@anthropic.com>",
"is_bot": false,
"headline": "feat(dfos-explorer): global nav-resilient sync engine + live progress…",
"author_name": "Brandon",
"author_login": "bvalosek",
"committed_at": "2026-07-03T14:08:01Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "16d8d3c990a0ee8f205f31c1eb2716d1ef4bc8e9",
"body": "…ng (chain/id binding) (#154)\n\nTwo related changes on the dfos-client/explorer surface, both driven by\nthe explorer being the client's first real consumer.\n\n## 1. Global-log read ergonomics\n- **`PeerLogEntry` / `LogOp` gain optional `kind` + `chainId`** — the\nglobal `/log` always served them; the ty\n[…]\ntly since it\ntouches the verification path. Worth a glance in the AM.\n\n🤖 Generated with [Claude Code](https://claude.com/claude-code)\n\n---------\n\nCo-authored-by: Claude Fable 5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "feat(dfos-client): global-log ergonomics + adversarial-review hardeni…",
"author_name": "Brandon",
"author_login": "bvalosek",
"committed_at": "2026-07-03T04:40:37Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "2ba230183ed5e00352ceac70f6ccad70cf23ab40",
"body": "…sh (#153)\n\n## What (PR 5 of tonight's explorer series)\n\n- **Mobile index drawer** — below 900px the local index becomes a\nslide-in drawer toggled from the header (☰ index), with an in-drawer\nclose affordance; navigating from an index row auto-closes it\n- **Stacked kv grids** below 480px (caps-label\n[…]\npens/closes/auto-dismisses on\nnavigation, sync + filters usable from the drawer.\n\n🤖 Generated with [Claude Code](https://claude.com/claude-code)\n\nCo-authored-by: Claude Fable 5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "feat(dfos-explorer): mobile UX — index drawer, stacked kv grids, poli…",
"author_name": "Brandon",
"author_login": "bvalosek",
"committed_at": "2026-07-03T04:09:31Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "8097fb75a5e78997d0948b0bcc93a2bfb7672587",
"body": "…ering (#152)\n\n## What (PR 4 of tonight's explorer series)\n\nThe wave-1 protocol features, now visible:\n\n- **Index state panel** — detects \\`index/v1\\` chains and runs the\n**canonical fold in the tab**: every op's committed document fetched by\nref (\\`/content/{id}/blob/{opCID}\\`), integrity-checked (\n[…]\netection\n(never folds + gap), null docs, media parse, rawCidOf shape/determinism\n\n🤖 Generated with [Claude Code](https://claude.com/claude-code)\n\nCo-authored-by: Claude Fable 5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "feat(dfos-explorer): index/v1 canonical fold view + Media object rend…",
"author_name": "Brandon",
"author_login": "bvalosek",
"committed_at": "2026-07-03T04:06:07Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "872eb171eaf07ac17468a77b8f4e1d4bb5f5f944",
"body": "…quorum + provenance panel (#151)\n\n## What (PR 3 of tonight's explorer series)\n\n- **Credential view** — full verification ladder via\n\\`client.credential\\` (signature, CID integrity, issuer resolution,\nrevocation checker), root-authority check (single \\`chain:<id>\\` grant →\nissuer must own the chain,\n[…]\n live\nfeeds at the next platform deploy — the explorer is already wired for\nit).\n\n🤖 Generated with [Claude Code](https://claude.com/claude-code)\n\nCo-authored-by: Claude Fable 5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "feat(dfos-explorer): credential view — delegation, revocation feeds, …",
"author_name": "Brandon",
"author_login": "bvalosek",
"committed_at": "2026-07-03T03:55:16Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "2f4c0a80176747e77a4c0befbea186c3f4e7918e",
"body": "…in-tab verification (#150)\n\n## What (PR 2 of tonight's explorer series, stacks on #149)\n\nThe two-beat spine, now real: render the relay's **claim** instantly\n(marked relay-asserted), then \\`dfos-client\\` re-folds the whole chain\nin the tab and every section flips to **verified** — or drifts loudly.\n[…]\nal index, annotated payload,\nhonest empty countersig state\n- zero console errors\n\n🤖 Generated with [Claude Code](https://claude.com/claude-code)\n\nCo-authored-by: Claude Fable 5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "feat(dfos-explorer): chain detail views — identity, content, op with …",
"author_name": "Brandon",
"author_login": "bvalosek",
"committed_at": "2026-07-03T03:52:07Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "eb9fcbf0aae8d4da8e7870d72f68d799a421b1de",
"body": "…cal IndexedDB index (#149)\n\n## What\n\nNew **private** package \\`@metalabel/dfos-explorer\\` — the proper app\nbuilt from the single-file relay-explorer spike\n(\\`notes.local/prototypes/dfos-relay-explorer.html\\`), and the first\nfull consumer of \\`@metalabel/dfos-client\\`. Vite + Preact, client-side\nonl\n[…]\nl), revocations, provenance\npanel, and index/v1 fold views land in the next PRs.\n\n🤖 Generated with [Claude Code](https://claude.com/claude-code)\n\nCo-authored-by: Claude Fable 5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "feat(dfos-explorer): client-side chain explorer — scaffold, shell, lo…",
"author_name": "Brandon",
"author_login": "bvalosek",
"committed_at": "2026-07-03T03:37:12Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "259344fdcc4ed3b8b5c8ce3d58847609be839ad4",
"body": "…ys (#147)\n\n## What\n\nScaffolds `packages/dfos-client` — the missing high-level TS read\nclient. The protocol library owns the crypto truth (CID re-derivation,\nsignature verification, chain folding); this package owns the four\nthings it deliberately refuses to do: **fetch, resolve,\nverify-orchestratio\n[…]\nbuild` / `typecheck` / `test` / `lint` all green locally\n(repo-wide).\n\n🤖 Generated with [Claude Code](https://claude.com/claude-code)\n\n---------\n\nCo-authored-by: Claude Fable 5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "feat(dfos-client): v1 read + verify orchestration over untrusted rela…",
"author_name": "Brandon",
"author_login": "bvalosek",
"committed_at": "2026-07-03T01:36:32Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "71d9844c9933d0a1f6f49e61e6de8fb4d3ab112e",
"body": "## Summary\n\nDefines the canonical **Media object** shape in the content model and\nlands its first consumer: an OPTIONAL, strictly **additive** `avatar`\nfield on `profile/v1` (deliberately not a `profile/v2` — existing\navatar-less documents remain valid, verified by tests).\n\n## Media object (`{ uri, \n[…]\ncol + 163 relay),\n`pnpm lint`, `pnpm lint:specs` — all green locally.\n\n🤖 Generated with [Claude Code](https://claude.com/claude-code)\n\n---------\n\nCo-authored-by: Claude Fable 5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "feat(protocol): Media object + profile/v1 additive avatar (#148)",
"author_name": "Brandon",
"author_login": "bvalosek",
"committed_at": "2026-07-03T01:29:58Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "728df915c50703f2f497a296f4bb044672699a40",
"body": "## Summary\n\nIntroduces the **canonical fold** — a deterministic total order over\n**all** operations in a content chain's log (every branch, not just the\nselected-head branch) — and the first schema built on it, **`index/v1`**\n(an LWW-Map).\n\nThe linearization is the web relay's deterministic head-sel\n[…]\n `pnpm lint`, `pnpm\nlint:specs` — all green locally (442 tests pass).\n\n🤖 Generated with [Claude Code](https://claude.com/claude-code)\n\n---------\n\nCo-authored-by: Claude Fable 5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "feat(protocol): index/v1 spec + canonical fold (#146)",
"author_name": "Brandon",
"author_login": "bvalosek",
"committed_at": "2026-07-03T00:50:11Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "9e4bbda8ac992affbc3691f6b595290ff1192388",
"body": "…inks (#145)\n\nThe 0.15.0 release (#141 universal resolver) was never documented in the\nchangelog and the `[Unreleased]` compare link still pointed at\n`v0.14.4...HEAD`. Backfills a `[0.15.0]` section in house voice and\nrepairs the footer links (`[Unreleased]` → `v0.15.0...HEAD`, adds\n`[0.15.0]`). Docs only.\n\nSurfaced by the #144 tidy pass; staged ahead of the next release cut.\n\n🤖 Generated with [Claude Code](https://claude.com/claude-code)\n\nCo-authored-by: Claude Fable 5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "docs(changelog): backfill 0.15.0 (universal resolver) + fix compare l…",
"author_name": "Brandon",
"author_login": "bvalosek",
"committed_at": "2026-07-02T03:27:59Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "1cac8ecac4a0b7468d18cf252da949f54fb85130",
"body": "…capability cleanup (#144)\n\nPost-0.15.0 housekeeping. Three small, additive tidies atop\n`origin/main` (which already carries #142 and #143).\n\n## Items\n\n1. **Changelog** — stage the merged #142 (documentation drift pass) and\n#143 (relay revocation-status query routes) under `[Unreleased]` in\n`@metala\n[…]\nations` in TS and Go,\nso the OpenAPI `required` addition is accurate.\n\n🤖 Generated with [Claude Code](https://claude.com/claude-code)\n\n---------\n\nCo-authored-by: Claude Fable 5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "chore: post-0.15.0 tidy — changelog, parity-script timeouts, openapi …",
"author_name": "Brandon",
"author_login": "bvalosek",
"committed_at": "2026-07-02T03:23:57Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "e00b21b4db0579501fae7fab5b24326ee161b5fe",
"body": "… twin) (#143)\n\nAdds a revocation-status query route family (`/revocations/v1`) to the\nweb relay, implemented in both the TypeScript relay and the Go twin,\nwith conformance and dual-relay parity coverage.\n\n## Design\n\n- **Own-clock additive route family.** `/revocations/v1` is versioned\nindependently\n[…]\n- `./scripts/run-parity.sh` — all revocation-status parity cases pass\n\n🤖 Generated with [Claude Code](https://claude.com/claude-code)\n\n---------\n\nCo-authored-by: Claude Fable 5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "feat(relay): revocation-status query routes (/revocations/v1, TS + Go…",
"author_name": "Brandon",
"author_login": "bvalosek",
"committed_at": "2026-07-02T02:37:26Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "c15b454e642463d4384e0c0590357c3b3631e4fe",
"body": "Post-0.15.0 documentation drift pass. Every change was verified against\nthe reference relay (`packages/dfos-web-relay/src/relay.ts`) before\nbeing applied. No normative spec semantics were altered.\n\n## OpenAPI (`packages/dfos-web-relay/openapi.yaml`)\n- Removed the stale `documents` capability flag fr\n[…]\nesolver at `GET /1.0/identifiers/:did`\nas a convenience layer, not a dependency.\n\n🤖 Generated with [Claude Code](https://claude.com/claude-code)\n\nCo-authored-by: Claude Fable 5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "docs: prose drift pass post-0.15.0 (#142)",
"author_name": "Brandon",
"author_login": "bvalosek",
"committed_at": "2026-07-02T02:06:03Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "332af69dfdb92f9ae502e88cf7db992f18fb4d48",
"body": null,
"is_bot": false,
"headline": "release: v0.15.0",
"author_name": "Brandon",
"author_login": "bvalosek",
"committed_at": "2026-07-01T15:47:02Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b839382055e53384bb9368c4f4135c50b121e795",
"body": "…sted) (#141)\n\n## Summary\n\nAdds a **universal DID resolver** endpoint to\n`@metalabel/dfos-web-relay`:\n\n- **`GET /1.0/identifiers/:did`** — mounts at the relay ROOT on its own\n`1.0` clock (off the frozen `/proof/v1` proof-plane base path),\npublic/unauthenticated. This is the [DIF Universal\nResolver](\n[…]\ng\nthe §4.5 doc-gateway example, vs. drop-unrecognized).\n\n🤖 Generated with [Claude Code](https://claude.com/claude-code)\n\n---------\n\nCo-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "feat(web-relay): universal did:dfos resolver (TS + Go twin, parity-te…",
"author_name": "Brandon",
"author_login": "bvalosek",
"committed_at": "2026-07-01T15:45:36Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "cb0876b833d6d640ffb0d2290de4487dc90f0009",
"body": "… (#140)\n\nRenames every reference to the **clear.txt** discussion space to just\n**DFOS**, and repoints its link from `https://clear.dfos.com` →\n`https://nce.dfos.com`.\n\n**Scope** — 13 replacements across 12 files: the 8 specs (status/footer\n\"Discuss\" lines), root `README.md`, `packages/dfos-cli/CLI.\n[…]\nept verbatim. Happy to relabel\nit \"DFOS space\" there if preferred.\n\n🤖 Generated with [Claude Code](https://claude.com/claude-code)\n\nCo-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "docs: rename clear.txt discussion space to \"DFOS\" (link nce.dfos.com)…",
"author_name": "Brandon",
"author_login": "bvalosek",
"committed_at": "2026-07-01T02:01:43Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "afcfed3d7384db574a6c16b77a0cb3047425edf2",
"body": "…gelog backfill (#139)\n\nFull audit of all human-facing content in this public repo — 9 specs, 16\nsite pages, CLI docs, the 3 SKILL.md files, and every README — driven by\na multi-reviewer sweep (leak hygiene, accuracy-vs-implementation,\nterminology, versions, working examples). **The repo was already\n[…]\nreal \"Getting started\" stanza (currently\npointer-only).\n\n🤖 Generated with [Claude Code](https://claude.com/claude-code)\n\n---------\n\nCo-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "docs: public-repo prose audit — leak fix, accuracy, consistency, chan…",
"author_name": "Brandon",
"author_login": "bvalosek",
"committed_at": "2026-07-01T01:48:35Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "308bca7d9350884d9e7fd629a20b28c1bd3a8367",
"body": null,
"is_bot": false,
"headline": "release: v0.14.4",
"author_name": "Brandon",
"author_login": "bvalosek",
"committed_at": "2026-07-01T00:44:42Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "cca0766f9325faa20a11f8efa39a18b62a50fc90",
"body": "… lock (#138)\n\n## Problem\n\nConcurrent `dfos` processes race on shared local state — surfaced by\nstress-testing parallel `identity create` (the agent-driven batch\nworkflow `dfos skill` is built for):\n\n- **config.toml clobber (silent data loss):** every mutating command\ndoes `load → modify → save` wit\n[…]\n.\n- Full CLI module `go test ./...` green; `gofmt`/`go vet` clean.\n\n🤖 Generated with [Claude Code](https://claude.com/claude-code)\n\nCo-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "fix(cli): serialize concurrent invocations with a cross-process state…",
"author_name": "Brandon",
"author_login": "bvalosek",
"committed_at": "2026-07-01T00:44:12Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "63760bd83621679dc4b8177adf935ae2d9544595",
"body": null,
"is_bot": false,
"headline": "release: v0.14.3",
"author_name": "Brandon",
"author_login": "bvalosek",
"committed_at": "2026-06-30T03:10:09Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b08ef1c7938d178fdae8da0a51165102d95e51a4",
"body": "…ntropy re-pull) (#137)\n\n## The chatter\n\n`ReadLog` returned a pagination cursor **only when a page was full**\n(`len == limit`). The final partial page returned an empty cursor →\nnull, so a caught-up puller never advanced past it: every sync cycle it\nresumed from the prior checkpoint and **re-fetched\n[…]\nboth\nbackends. Full relay-go suite green under `-race`.\n\n🤖 Generated with [Claude Code](https://claude.com/claude-code)\n\n---------\n\nCo-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "fix(relay): return a resume cursor on the final log page (kill anti-e…",
"author_name": "Brandon",
"author_login": "bvalosek",
"committed_at": "2026-06-30T03:10:02Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "c01aca495debb3cd411c871d4faaba6c6cf02d98",
"body": null,
"is_bot": false,
"headline": "release: v0.14.2",
"author_name": "Brandon",
"author_login": "bvalosek",
"committed_at": "2026-06-29T20:21:14Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "11aeb3081872891fe05a6858de88b7d7adc19062",
"body": "…h propagation) (#136)\n\n## The bug (surfaced by meshing the lark fleet)\n\nFollow-up to #134. In a peer mesh, a write to one relay reached the\nothers' **proof plane** (chain + grant gossiped fine) but its **bytes\nnever materialized** until the slow reconcile backstop (~minutes). So a\nwrite to atx took\n[…]\nFollowDirty` pins gap #1. Full relay-go\nsuite green under `-race`.\n\n🤖 Generated with [Claude Code](https://claude.com/claude-code)\n\nCo-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "fix(relay): materialize gossip-pushed + directly-written content (mes…",
"author_name": "Brandon",
"author_login": "bvalosek",
"committed_at": "2026-06-29T20:21:07Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "8ff4b3a5b16d77b27829546355c8b09906320154",
"body": null,
"is_bot": false,
"headline": "release: v0.14.1",
"author_name": "Brandon",
"author_login": "bvalosek",
"committed_at": "2026-06-29T19:11:45Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "152291a9103cd8a316c0082cf6ab61e416b0882b",
"body": "…t never sent) (#135)\n\n## The bug\n\n`dfos credential grant` minted a credential, printed it, and returned —\nit **never ingested it locally or pushed it to a peer**, and the global\n`--peer` flag was silently ignored. For a **public standing grant**\n(`aud: \"*\"`) that's inert: the grant only authorizes \n[…]\nthe content's `blob/head` flips **401 → 200**\nwith no manual POST.\n\n🤖 Generated with [Claude Code](https://claude.com/claude-code)\n\nCo-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "fix(cli): publish the credential on `credential grant` (was minted bu…",
"author_name": "Brandon",
"author_login": "bvalosek",
"committed_at": "2026-06-29T19:10:53Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "8d56b920c1c161cc8004625fac5a015f7ac97a40",
"body": "…tate CPU peg (#134)\n\n## The bug\n\nAn eager content follower (`CONTENT_FOLLOW=eager`, shipped in 0.14.0)\nre-scanned **every** content chain and re-verified **every** public-read\ngrant's Ed25519 signature on **every sync tick** — a 5s timer sweep\n*plus* a trigger-kick on any sequenced op. On a small n\n[…]\nuting, GC gated on dirty. Full relay-go suite\ngreen under `-race`.\n\n🤖 Generated with [Claude Code](https://claude.com/claude-code)\n\nCo-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "perf(relay): event-driven content materialization — kill the steady-s…",
"author_name": "Brandon",
"author_login": "bvalosek",
"committed_at": "2026-06-29T19:09:18Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "0bcc2e57ac28028551c9dd08f4b8eed997a4ec8a",
"body": null,
"is_bot": false,
"headline": "release: v0.14.0",
"author_name": "Brandon",
"author_login": "bvalosek",
"committed_at": "2026-06-29T18:04:26Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0777d7d6d7d0530e85ce9ba382acf09c0a196e1c",
"body": "…tion (#133)\n\n## What\n\nPhase 3 of the content-plane arc: lock the follower behavior with a\n**real-wire conformance test** and write the **spec** down so `main`\nmatches the code. No release here — 0.14.0 is the next step.\n\n## Conformance test (Go, in-package, race-tested)\n`http_following_test.go` — t\n[…]\no `CONTENT_FOLLOW=eager` — both deploy-class, on Brandon's signal.\n\n🤖 Generated with [Claude Code](https://claude.com/claude-code)\n\nCo-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "test(relay): real-HTTP content-following conformance + spec formaliza…",
"author_name": "Brandon",
"author_login": "bvalosek",
"committed_at": "2026-06-29T17:44:48Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "c1a86965ab6f63ec1ba0f458f1a922d2911ca6c1",
"body": "… (#132)\n\n## What\n\nProduction-hardens the eager content materializer (#131) along the three\naxes that matter before the larks run it for real: **latency**, **fetch\nrobustness**, and **storage reclamation**. The convergent sweep stays\nthe correctness backbone; this makes it fast, kind to a dead origi\n[…]\ndential resource-index for `hasPublicStandingAuth` at posts scale.\n\n🤖 Generated with [Claude Code](https://claude.com/claude-code)\n\nCo-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "feat(relay): harden content following — triggers, circuit breaker, GC…",
"author_name": "Brandon",
"author_login": "bvalosek",
"committed_at": "2026-06-29T17:34:36Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "c98bdfe53029d14578e182da62db479827eadca3",
"body": "…T_FOLLOW) (#131)\n\n## What\n\nAdds the **content-plane transport** that's been missing from\nfederation: a follower relay that **pulls the document bytes it's\ngranted to read**, content-addressed and grant-gated.\n\nToday the operation log federates the **authz plane** (identity chains,\ncontent chains, p\n[…]\nse-2 low-latency triggers + GC-on-revoke also deferred.\n\n🤖 Generated with [Claude Code](https://claude.com/claude-code)\n\n---------\n\nCo-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "feat(relay): eager content-byte materialization for followers (CONTEN…",
"author_name": "Brandon",
"author_login": "bvalosek",
"committed_at": "2026-06-29T00:46:42Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "d6f5ef3677a9b408a8226925c9d6d13b8eb8c735",
"body": "… front page (#130)\n\n## Why\n\nThe protocol site's meta flow had rotted: the nav felt sprawly and the\nfront-page content architecture had drifted. Concretely:\n\n- **Four** hand-maintained, mutually-divergent nav lists (Base header 10\n· hero 11 · closing-nav 14 · footer 17) that no longer agreed on\nmemb\n[…]\nnd-authored (its per-link\ndescriptions are content, not nav data).\n\n🤖 Generated with [Claude Code](https://claude.com/claude-code)\n\nCo-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "refactor(site): unify nav into one source; trim header sprawl; de-dup…",
"author_name": "Brandon",
"author_login": "bvalosek",
"committed_at": "2026-06-29T00:36:46Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "c7501d82389cde0a0ddb5c5e80ad7904543cb921",
"body": "…oke (#129)\n\nFixes from a cold-start usability test of `protocol.dfos.com/skill` (a\nfresh agent with no DFOS context drove the whole CLI from the page\nalone). Verdict was \"mostly clean\"; two real issues:\n\n### 1. `credential revoke` was unreachable from documented output\n`credential revoke <credentia\n[…]\n-to-end grant→revoke in a\nsandbox; `pnpm lint` clean; site builds.\n\n🤖 Generated with [Claude Code](https://claude.com/claude-code)\n\nCo-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "fix(cli,skill): surface credentialCID on grant; correct skill log/rev…",
"author_name": "Brandon",
"author_login": "bvalosek",
"committed_at": "2026-06-28T20:54:05Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "dc10a4f372e50281b473ef2acfe913937b8a4db9",
"body": "Two small site changes:\n\n1. **Discoverability** — add **Skill** to the top nav (`Base.astro` +\n`index.astro`), between Deploy and FAQ. It was previously only in the\nfooter + home card.\n2. **De-brand** — rename the home-page card and the `/skill` page title\nfrom \"Claude Code Skill\" to **\"Agent Skill\"\n[…]\nllms.txt` entry\nupdated to match.\n\nSite builds; `pnpm lint` clean.\n\n🤖 Generated with [Claude Code](https://claude.com/claude-code)\n\nCo-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "feat(site): surface skill in nav, generalize to \"Agent Skill\" (#128)",
"author_name": "Brandon",
"author_login": "bvalosek",
"committed_at": "2026-06-28T20:33:03Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "3cd15256d47c98f90bcca4920241010be3f09f2c",
"body": null,
"is_bot": false,
"headline": "release: v0.13.6",
"author_name": "Brandon",
"author_login": "bvalosek",
"committed_at": "2026-06-28T20:09:54Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "561d027e828d1e5642511db8b7579b05ce385263",
"body": "… (#127)\n\n## The bug\n\n`deploy.yml` runs `pnpm --filter X run deploy -- --branch <b>`, which\nresolves to:\n\n```\nwrangler pages deploy dist -- --branch main\n```\n\nWrangler reads the stray `--` as end-of-options and **ignores\n`--branch`**. It then\nauto-detects the branch from the detached-HEAD CI checkou\n[…]\nalidate`),\nbut worth wiring separately for instant edge freshness.\n\n🤖 Generated with [Claude Code](https://claude.com/claude-code)\n\nCo-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "fix(ci): wrangler dropped --branch — deploys never reached production…",
"author_name": "Brandon",
"author_login": "bvalosek",
"committed_at": "2026-06-28T19:45:22Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "3bf54668cda4c409508ce7fde7f52c5f9cd760c1",
"body": "## Summary\n\nVerified clear-wins from a **fan-out ground-truth ergonomics audit** —\nagents drove the real `dfos` binary against prod (read-only) and scratch\nconfigs, surfaced friction, and each finding was adversarially verified\nas a *clear win* (taste calls and product decisions parked). 16 changes\n\n[…]\nig `defaults:{}`) — **all 4 fixed in\nthis branch and re-verified**\n\n🤖 Generated with [Claude Code](https://claude.com/claude-code)\n\nCo-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "feat(cli): ground-truth ergonomics audit wins (16 changes) (#126)",
"author_name": "Brandon",
"author_login": "bvalosek",
"committed_at": "2026-06-28T19:26:31Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "753e95360becde2b7118718fa88c87f2fb265164",
"body": "## What\n\nConsolidates the Claude Code skill into **one canonical source** —\n`skills/dfos/SKILL.md` — and wires it into every major skill-ingress\nchannel, all\nfed from that single file.\n\nThe old `specs/CLAUDE-SKILL.md` was a 435-line monolith that (a) leaked\nprivate\ndev-env tooling in its \"three simi\n[…]\nuthor→adversarial-review pass;\nrebased on\n current `main` (#124).\n\n🤖 Generated with [Claude Code](https://claude.com/claude-code)\n\nCo-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "feat(skill): single DFOS skill, all major install channels (#125)",
"author_name": "Brandon",
"author_login": "bvalosek",
"committed_at": "2026-06-28T16:16:47Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "5df0fcc06cb478aba1286afd110f2b302a1b0357",
"body": "…ics (#124)\n\n## Summary\n\nDeferred CLI ergonomics follow-ups from the Go CLI audit\n(`notes.local/2026-06-28-cli-ergo-followups.md`). All CLI/HTTP-only — no\nwire, protocol, or DID-derivation changes.\n\n- **`operation show <cid>`** (alias `op`) — new command. Inspect a\nsingle operation by CID: local sto\n[…]\n `--peer` reads) was fixed to local-first fallback\nbefore this PR.\n\n🤖 Generated with [Claude Code](https://claude.com/claude-code)\n\nCo-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "feat(cli): operation show, --peer-aware reads, quieter relay, ergonom…",
"author_name": "Brandon",
"author_login": "bvalosek",
"committed_at": "2026-06-28T15:53:39Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "b07dd82f016eaf76ea3022215fa169ed858538d7",
"body": "…gs) (#123)\n\n## Summary\n\nCLI ergonomics pass from a hands-on shakedown against the prod relay\n(`relay.dfos.com`).\n\n**Extension**\n- Add **`dfos identity log <name|did>`** — view an identity's operation\nhistory (genesis, updates, key rotations). The relay already serves\n`/proof/v1/identities/{did}/log\n[…]\n-DID error is\nsingle-mention; `content remove --help` is truthful.\n\n🤖 Generated with [Claude Code](https://claude.com/claude-code)\n\nCo-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "feat(cli): add `identity log`; ergonomics fixes (help, --json, warnin…",
"author_name": "Brandon",
"author_login": "bvalosek",
"committed_at": "2026-06-27T20:07:34Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "2a1af72873bd01fdb8aa21cc3a57388de288db81",
"body": "…al-width DIDs (#122)\n\n## Summary\n\nThere was **no DID-format validation anywhere** in the codebase — DIDs\nwere *derived* (always the canonical 31-char width) but never *checked*\non the way in from peer sync or external operations. Consequence: a\nrelay running a stale / half-migrated derivation can s\n[…]\ngainst the\nconformant TS reference relay, including the new tests.\n\n🤖 Generated with [Claude Code](https://claude.com/claude-code)\n\nCo-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "feat(protocol): validate did:dfos well-formedness; reject non-canonic…",
"author_name": "Brandon",
"author_login": "bvalosek",
"committed_at": "2026-06-27T19:59:16Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "87ba913d24071ea327a7cbf4ad67e61580ba6d86",
"body": "…field (#121)\n\n## Summary\n\n- `dfos identity fetch` and `dfos content fetch` were silently ingesting\n**0 operations**. They read a `log` field off `GET\n/proof/v1/identities/{did}` (and `/content/{id}`), but those endpoints\nreturn *resolved state* with no `log` field. Result: fetch appeared to\nsucceed\n[…]\nund\").\n - The resolved `state.did` is the correct full-width DID.\n\n🤖 Generated with [Claude Code](https://claude.com/claude-code)\n\nCo-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "fix(cli): fetch op chain from /log endpoint, not a nonexistent \"log\" …",
"author_name": "Brandon",
"author_login": "bvalosek",
"committed_at": "2026-06-27T19:58:11Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "16dac7626c268f90a74084996d4da6c12f86348c",
"body": null,
"is_bot": false,
"headline": "release: v0.13.5",
"author_name": "Brandon",
"author_login": "bvalosek",
"committed_at": "2026-06-26T17:42:24Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b35e3e5f198125a12a31eb4d33270ba7372d762d",
"body": "…crubber (#120)\n\n## Summary\n\nThe lark mirrors (OSS Go relay) pulling from `relay.dfos.com` all froze\nat **exactly 29,606 ops** with zero pull errors. Root cause, in two\nlayers:\n\n### Primary — bare-CID cursor fabrication (the cure)\n`relay.dfos.com` pages an opaque `createdAt|cid` cursor, returns a\n**\n[…]\n9,606 climbed to current (29,673) within one scrub lap.\n\n🤖 Generated with [Claude Code](https://claude.com/claude-code)\n\n---------\n\nCo-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "fix(relay): cure bare-CID cursor fabrication + bounded anti-entropy s…",
"author_name": "Brandon",
"author_login": "bvalosek",
"committed_at": "2026-06-26T17:42:15Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "f14ead945b0a063fe5ad117b50ceaf8b190117b7",
"body": null,
"is_bot": false,
"headline": "release: v0.13.4",
"author_name": "Brandon",
"author_login": "bvalosek",
"committed_at": "2026-06-26T12:57:26Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c329639c300a44dfea1d42655dd2da1920e64104",
"body": "… (#119)\n\n## Summary\n\n- Expose the `raw_ops` sequencing backlog as `stats.pendingOps` on\n`/.well-known/dfos-relay`, turning the otherwise-invisible\nsequencer-wedge failure mode into a single `curl` (no on-box `sqlite3`\nneeded).\n- Nested under a `stats` object so the protocol contract\n(`did`/`capabil\n[…]\nonformance shards validate the public well-known shape.\n\n🤖 Generated with [Claude Code](https://claude.com/claude-code)\n\n---------\n\nCo-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "feat(relay): expose raw_ops backlog as stats.pendingOps in well-known…",
"author_name": "Brandon",
"author_login": "bvalosek",
"committed_at": "2026-06-26T12:56:47Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "dd255484d00c2ab0b0646471e623a97bb5bdcd0c",
"body": "…#117) (#118)\n\n## Summary\n\nCompletes #117. That fix changed the raw_ops drain **key** to the\nrecomputed storage CID, but both drain loops still **gated** on `if\nres.CID == \"\" { continue }`.\n\n`res.CID` is the JWS-header-claimed CID, which is **empty** for a\ndecodable-but-malformed credential — `inges\n[…]\nit of the #117 fix. Ships alongside #116/#117 in the next\nrelease.\n\n🤖 Generated with [Claude Code](https://claude.com/claude-code)\n\nCo-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "fix(relay): gate raw_ops drain on storage CID, not res.CID (complete …",
"author_name": "Brandon",
"author_login": "bvalosek",
"committed_at": "2026-06-26T07:35:19Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "c26fb84ba18c35a9d2d65d11b8e62afe97ba0149",
"body": null,
"is_bot": false,
"headline": "release: v0.13.3",
"author_name": "Brandon",
"author_login": "bvalosek",
"committed_at": "2026-06-26T06:39:23Z",
"body_truncated": false,
"is_coding_agent": false
}
],
"releases_count": 30,
"commits_last_year": 262,
"latest_release_at": "2026-07-17T13:22:49Z",
"latest_release_tag": "v0.24.0",
"releases_from_tags": false,
"days_since_last_push": 0,
"active_weeks_last_year": 14,
"days_since_latest_release": 5,
"mean_days_between_releases": 1.8
},
"community": {
"has_readme": true,
"has_license": true,
"has_description": true,
"has_contributing": false,
"health_percentage": 50,
"has_issue_template": false,
"has_code_of_conduct": false,
"has_pull_request_template": false
},
"ecosystem": {
"packages": [
{
"name": "github.com/metalabel/dfos",
"exists": true,
"license": null,
"keywords": [],
"ecosystem": "go",
"matches_repo": true,
"registry_url": "https://pkg.go.dev/github.com/metalabel/dfos",
"is_deprecated": false,
"latest_version": "v0.24.0",
"repository_url": "https://github.com/metalabel/dfos",
"versions_count": 38,
"total_downloads": null,
"dependents_count": null,
"deprecation_note": null,
"maintainers_count": null,
"monthly_downloads": null,
"first_published_at": null,
"latest_published_at": "2026-07-17T13:18:16Z",
"latest_version_yanked": null,
"days_since_latest_publish": 5
},
{
"name": "@metalabel/dfos-protocol",
"exists": true,
"license": "MIT",
"keywords": [
"dfos",
"protocol",
"ed25519",
"jws",
"did",
"verifiable",
"identity",
"content-addressing",
"dag-cbor",
"cid",
"metalabel"
],
"ecosystem": "npm",
"matches_repo": true,
"registry_url": "https://www.npmjs.com/package/@metalabel/dfos-protocol",
"is_deprecated": false,
"latest_version": "0.24.0",
"repository_url": "https://github.com/metalabel/dfos",
"versions_count": 40,
"total_downloads": null,
"dependents_count": null,
"deprecation_note": null,
"maintainers_count": 2,
"monthly_downloads": 5012,
"first_published_at": "2026-03-12T10:42:11.702000Z",
"latest_published_at": "2026-07-17T13:20:46.564000Z",
"latest_version_yanked": null,
"days_since_latest_publish": 5
},
{
"name": "@metalabel/dfos-web-relay",
"exists": true,
"license": "MIT",
"keywords": [
"dfos",
"relay",
"web-relay",
"hono",
"ed25519",
"jws",
"did",
"verifiable",
"identity",
"content-addressing",
"metalabel"
],
"ecosystem": "npm",
"matches_repo": true,
"registry_url": "https://www.npmjs.com/package/@metalabel/dfos-web-relay",
"is_deprecated": false,
"latest_version": "0.24.0",
"repository_url": "https://github.com/metalabel/dfos",
"versions_count": 36,
"total_downloads": null,
"dependents_count": null,
"deprecation_note": null,
"maintainers_count": 2,
"monthly_downloads": 4794,
"first_published_at": "2026-03-22T23:29:13.323000Z",
"latest_published_at": "2026-07-17T13:20:53.209000Z",
"latest_version_yanked": null,
"days_since_latest_publish": 5
}
]
},
"popularity": {
"forks": 2,
"stars": 28,
"watchers": 1,
"fork_history": {
"days": [
{
"date": "2026-04-29",
"count": 1
},
{
"date": "2026-07-19",
"count": 1
}
],
"complete": true,
"collected": 2,
"total_forks": 2
},
"star_history": null,
"open_issues_and_prs": 0
},
"ai_readiness": {
"has_nix": false,
"example_dirs": [
"examples"
],
"has_llms_txt": false,
"has_dockerfile": true,
"has_mcp_signal": false,
"bootstrap_files": [
"packages/dfos-cli/Makefile"
],
"api_schema_files": [
"packages/dfos-web-relay/openapi.yaml"
],
"has_devcontainer": false,
"typecheck_configs": [
"packages/dfos-client/tsconfig.json",
"packages/dfos-explorer/tsconfig.json",
"packages/dfos-protocol/tsconfig.json",
"packages/dfos-web-relay/tsconfig.json",
"packages/site-protocol/tsconfig.json",
"packages/site-schemas/tsconfig.json"
],
"toolchain_manifests": [
"packages/dfos-cli/go.mod",
"packages/dfos-protocol-go/go.mod",
"packages/dfos-web-relay-go/go.mod",
"packages/protocol-verify/go/go.mod",
"packages/protocol-verify/rust/Cargo.toml",
"packages/relay-conformance/go.mod"
],
"largest_source_bytes": 156997,
"source_files_sampled": 302,
"oversized_source_files": 2,
"agent_instruction_files": [],
"agent_instruction_max_bytes": null
},
"dependencies": {
"manifests": [
"package.json"
],
"advisories": {
"error": null,
"scope": null,
"source": null,
"findings": [],
"collected": false,
"malicious": [],
"truncated": false,
"by_severity": {},
"advisory_count": 0,
"affected_count": 0,
"assessed_count": 0,
"malicious_count": 0,
"assessed_package": null,
"unassessed_count": 0,
"direct_affected_count": 0
},
"ecosystems": [
"npm"
],
"dependencies": [
{
"name": "github.com/mattn/go-isatty",
"manifest": "packages/dfos-cli/go.mod",
"ecosystem": "go",
"version_constraint": "v0.0.22"
},
{
"name": "github.com/metalabel/dfos/packages/dfos-protocol-go",
"manifest": "packages/dfos-cli/go.mod",
"ecosystem": "go",
"version_constraint": "v0.0.0"
},
{
"name": "github.com/metalabel/dfos/packages/dfos-web-relay-go",
"manifest": "packages/dfos-cli/go.mod",
"ecosystem": "go",
"version_constraint": "v0.0.0"
},
{
"name": "github.com/pelletier/go-toml/v2",
"manifest": "packages/dfos-cli/go.mod",
"ecosystem": "go",
"version_constraint": "v2.3.1"
},
{
"name": "github.com/spf13/cobra",
"manifest": "packages/dfos-cli/go.mod",
"ecosystem": "go",
"version_constraint": "v1.10.2"
},
{
"name": "github.com/zalando/go-keyring",
"manifest": "packages/dfos-cli/go.mod",
"ecosystem": "go",
"version_constraint": "v0.2.8"
},
{
"name": "golang.org/x/sys",
"manifest": "packages/dfos-cli/go.mod",
"ecosystem": "go",
"version_constraint": "v0.46.0"
},
{
"name": "@metalabel/dfos-client",
"manifest": "packages/dfos-explorer/package.json",
"ecosystem": "npm",
"version_constraint": "workspace:*"
},
{
"name": "@metalabel/dfos-protocol",
"manifest": "packages/dfos-explorer/package.json",
"ecosystem": "npm",
"version_constraint": "workspace:*"
},
{
"name": "@metalabel/dfos-web-relay",
"manifest": "packages/dfos-explorer/package.json",
"ecosystem": "npm",
"version_constraint": "workspace:*"
},
{
"name": "multiformats",
"manifest": "packages/dfos-explorer/package.json",
"ecosystem": "npm",
"version_constraint": "^14.0.0"
},
{
"name": "preact",
"manifest": "packages/dfos-explorer/package.json",
"ecosystem": "npm",
"version_constraint": "^10.28.2"
},
{
"name": "github.com/fxamacker/cbor/v2",
"manifest": "packages/dfos-protocol-go/go.mod",
"ecosystem": "go",
"version_constraint": "v2.9.2"
},
{
"name": "github.com/mr-tron/base58",
"manifest": "packages/dfos-protocol-go/go.mod",
"ecosystem": "go",
"version_constraint": "v1.3.0"
},
{
"name": "@ipld/dag-cbor",
"manifest": "packages/dfos-protocol/package.json",
"ecosystem": "npm",
"version_constraint": "^10.0.1"
},
{
"name": "@noble/curves",
"manifest": "packages/dfos-protocol/package.json",
"ecosystem": "npm",
"version_constraint": "^2.2.0"
},
{
"name": "@noble/hashes",
"manifest": "packages/dfos-protocol/package.json",
"ecosystem": "npm",
"version_constraint": "^2.2.0"
},
{
"name": "multiformats",
"manifest": "packages/dfos-protocol/package.json",
"ecosystem": "npm",
"version_constraint": "^14.0.0"
},
{
"name": "zod",
"manifest": "packages/dfos-protocol/package.json",
"ecosystem": "npm",
"version_constraint": "^4.4.3"
},
{
"name": "github.com/metalabel/dfos/packages/dfos-protocol-go",
"manifest": "packages/dfos-web-relay-go/go.mod",
"ecosystem": "go",
"version_constraint": "v0.0.0"
},
{
"name": "modernc.org/sqlite",
"manifest": "packages/dfos-web-relay-go/go.mod",
"ecosystem": "go",
"version_constraint": "v1.52.0"
},
{
"name": "hono",
"manifest": "packages/dfos-web-relay/package.json",
"ecosystem": "npm",
"version_constraint": "^4.12.23"
},
{
"name": "zod",
"manifest": "packages/dfos-web-relay/package.json",
"ecosystem": "npm",
"version_constraint": "^4.4.3"
},
{
"name": "github.com/metalabel/dfos/packages/dfos-protocol-go",
"manifest": "packages/relay-conformance/go.mod",
"ecosystem": "go",
"version_constraint": "v0.0.0"
},
{
"name": "@astrojs/sitemap",
"manifest": "packages/site-protocol/package.json",
"ecosystem": "npm",
"version_constraint": "^3.3.0"
},
{
"name": "@metalabel/dfos-protocol",
"manifest": "packages/site-protocol/package.json",
"ecosystem": "npm",
"version_constraint": "workspace:*"
},
{
"name": "astro",
"manifest": "packages/site-protocol/package.json",
"ecosystem": "npm",
"version_constraint": "^5.7.0"
},
{
"name": "github-slugger",
"manifest": "packages/site-protocol/package.json",
"ecosystem": "npm",
"version_constraint": "^2.0.0"
},
{
"name": "marked",
"manifest": "packages/site-protocol/package.json",
"ecosystem": "npm",
"version_constraint": "^15.0.0"
},
{
"name": "shiki",
"manifest": "packages/site-protocol/package.json",
"ecosystem": "npm",
"version_constraint": "^4.2.0"
},
{
"name": "@metalabel/dfos-protocol",
"manifest": "packages/site-schemas/package.json",
"ecosystem": "npm",
"version_constraint": "workspace:*"
},
{
"name": "hono",
"manifest": "packages/site-schemas/package.json",
"ecosystem": "npm",
"version_constraint": "^4.12.23"
}
],
"all_dependencies": {
"error": "GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository",
"source": null,
"packages": [],
"collected": false,
"truncated": false,
"total_count": null,
"direct_count": null,
"indirect_count": null
}
},
"maintainership": {
"issues": {
"open_prs": 0,
"merged_prs": 194,
"open_issues": 0,
"closed_ratio": null,
"closed_issues": 0,
"closed_unmerged_prs": 4
},
"bus_factor": 1,
"bot_contributors": 0,
"top_contributors": [
{
"type": "User",
"login": "bvalosek",
"commits": 262,
"avatar_url": "https://avatars.githubusercontent.com/u/644088?v=4"
}
],
"contributors_sampled": 1,
"top_contributor_share": 1
},
"quality_signals": {
"has_ci": true,
"has_tests": true,
"ci_workflows": [
"ci.yml",
"deploy.yml",
"release.yml",
"test-matrix.yml"
],
"has_docs_dir": false,
"linter_configs": [],
"has_editorconfig": false,
"has_linter_config": false,
"has_precommit_config": false
},
"security_signals": {
"lockfiles": [
"Cargo.lock",
"go.sum",
"package-lock.json",
"pnpm-lock.yaml"
],
"scorecard": {
"checks": [
{
"name": "Binary-Artifacts",
"score": 10,
"reason": "no binaries found in the repo",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#binary-artifacts"
},
{
"name": "Branch-Protection",
"score": 1,
"reason": "branch protection is not maximal on development and all release branches",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#branch-protection"
},
{
"name": "CI-Tests",
"score": 10,
"reason": "24 out of 24 merged PRs checked by a CI test -- score normalized to 10",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#ci-tests"
},
{
"name": "CII-Best-Practices",
"score": 0,
"reason": "no effort to earn an OpenSSF best practices badge detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#cii-best-practices"
},
{
"name": "Code-Review",
"score": 0,
"reason": "Found 0/30 approved changesets -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#code-review"
},
{
"name": "Contributors",
"score": 10,
"reason": "project has 3 contributing companies or organizations -- score normalized to 10",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#contributors"
},
{
"name": "Dangerous-Workflow",
"score": 0,
"reason": "dangerous workflow patterns detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dangerous-workflow"
},
{
"name": "Dependency-Update-Tool",
"score": 0,
"reason": "no update tool detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dependency-update-tool"
},
{
"name": "Fuzzing",
"score": 0,
"reason": "project is not fuzzed",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#fuzzing"
},
{
"name": "License",
"score": 10,
"reason": "license file detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#license"
},
{
"name": "Maintained",
"score": 10,
"reason": "30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#maintained"
},
{
"name": "Packaging",
"score": 10,
"reason": "packaging workflow detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#packaging"
},
{
"name": "Pinned-Dependencies",
"score": 0,
"reason": "dependency not pinned by hash detected -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#pinned-dependencies"
},
{
"name": "SAST",
"score": 0,
"reason": "SAST tool is not run on all commits -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#sast"
},
{
"name": "Security-Policy",
"score": 10,
"reason": "security policy file detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#security-policy"
},
{
"name": "Signed-Releases",
"score": 0,
"reason": "Project has not signed or included provenance with any releases.",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#signed-releases"
},
{
"name": "Token-Permissions",
"score": 0,
"reason": "detected GitHub workflow tokens with excessive permissions",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#token-permissions"
},
{
"name": "Vulnerabilities",
"score": 0,
"reason": "58 existing vulnerabilities detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#vulnerabilities"
}
],
"commit": "618e1601e4b66c4e0f144b56363a6f1cb88c1207",
"ran_at": "2026-07-22T15:04:47Z",
"aggregate_score": 3.2,
"scorecard_version": "v5.5.0"
},
"has_codeql_workflow": false,
"has_security_policy": true,
"has_dependabot_config": false
},
"contribution_flow": {
"collected": true,
"ci_last_run_at": "2026-07-21T17:47:02Z",
"oldest_open_prs": [],
"last_merged_pr_at": "2026-07-21T17:44:41Z",
"ci_last_conclusion": "SUCCESS",
"oldest_open_issues": []
}
},
"config": {
"disabled_metrics": [],
"disabled_categories": [],
"disabled_components": {}
},
"source": {
"url": "https://github.com/metalabel/dfos",
"host": "github.com",
"name": "dfos",
"owner": "metalabel"
},
"metrics": {
"overall": {
"key": "overall",
"band": "moderate",
"name": "Overall health",
"note": null,
"notes": [],
"value": 57,
"inputs": {
"security": 32,
"vitality": 80,
"community": 43,
"governance": 57,
"engineering": 63
},
"components": []
},
"categories": [
{
"key": "vitality",
"band": "good",
"name": "Vitality",
"value": 80,
"weight": 0.22,
"metrics": [
{
"key": "development_activity",
"band": "good",
"name": "Development activity",
"note": null,
"notes": [],
"value": 74,
"inputs": {
"commits_last_year": 262,
"human_commit_share": 1,
"days_since_last_push": 0,
"active_weeks_last_year": 14
},
"components": [
{
"key": "push_recency",
"name": "Push recency",
"detail": "last push 0 days ago",
"points": 36,
"status": "met",
"details": [
{
"code": "push_recency",
"params": {
"days": 0
}
}
],
"max_points": 36
},
{
"key": "commit_cadence",
"name": "Commit cadence",
"detail": "14/52 weeks with commits",
"points": 9.7,
"status": "partial",
"details": [
{
"code": "commit_cadence_weeks",
"params": {
"weeks": 14
}
}
],
"max_points": 36
},
{
"key": "commit_volume",
"name": "Commit volume",
"detail": "262 commits in the last year",
"points": 18,
"status": "met",
"details": [
{
"code": "commits_last_year",
"params": {
"count": 262
}
}
],
"max_points": 18
},
{
"key": "openssf_scorecard_maintained",
"name": "OpenSSF Scorecard: Maintained",
"detail": "30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10",
"points": 10,
"status": "met",
"details": [],
"max_points": 10
}
]
},
{
"key": "release_discipline",
"band": "excellent",
"name": "Release discipline",
"note": null,
"notes": [],
"value": 90,
"inputs": {
"releases_count": 30,
"latest_release_tag": "v0.24.0",
"releases_from_tags": false,
"days_since_latest_release": 5,
"mean_days_between_releases": 1.8
},
"components": [
{
"key": "ships_releases",
"name": "Ships releases",
"detail": "30 releases published",
"points": 27,
"status": "met",
"details": [
{
"code": "releases_published",
"params": {
"count": 30
}
}
],
"max_points": 27
},
{
"key": "release_recency",
"name": "Release recency",
"detail": "latest release 5 days ago",
"points": 36,
"status": "met",
"details": [
{
"code": "release_recency",
"params": {
"days": 5
}
}
],
"max_points": 36
},
{
"key": "release_cadence",
"name": "Release cadence",
"detail": "a release every ~1.8 days",
"points": 27,
"status": "met",
"details": [
{
"code": "release_cadence",
"params": {
"gap": 1.8
}
}
],
"max_points": 27
},
{
"key": "openssf_scorecard_signed_releases",
"name": "OpenSSF Scorecard: Signed-Releases",
"detail": "Project has not signed or included provenance with any releases.",
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
}
]
},
{
"key": "abandonment",
"band": "excellent",
"name": "Abandonment",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"cap": null,
"state": "unverified",
"guards": [],
"signals": [],
"red_flag": false,
"multiplier_pct": 100,
"declared_reason": null,
"unverified_reason": "repository_too_young",
"unanswered_open_prs": null,
"unanswered_open_issues": null,
"days_since_last_merged_pr": null,
"days_since_last_human_commit": null,
"days_since_last_human_commit_is_floor": false
},
"components": [
{
"key": "project_is_still_maintained",
"name": "Project is still maintained",
"detail": "maintenance record not established from the collected data",
"points": 100,
"status": "met",
"details": [
{
"code": "abandonment_unverified",
"params": {}
}
],
"max_points": 100
}
]
}
],
"description": "Is the project alive — is code being written and are releases shipping?"
},
{
"key": "community",
"band": "at_risk",
"name": "Community & Adoption",
"value": 43,
"weight": 0.18,
"metrics": [
{
"key": "popularity",
"band": "critical",
"name": "Popularity & adoption",
"note": null,
"notes": [],
"value": 23,
"inputs": {
"forks": 2,
"stars": 28,
"watchers": 1,
"growth_state": "unverified",
"growth_factor_pct": 100,
"growth_unverified_reason": "no_history"
},
"components": [
{
"key": "stars",
"name": "Stars",
"detail": "28 stars",
"points": 23.2,
"status": "partial",
"details": [
{
"code": "stars",
"params": {
"count": 28
}
}
],
"max_points": 60
},
{
"key": "forks",
"name": "Forks",
"detail": "2 forks",
"points": 0,
"status": "missed",
"details": [
{
"code": "forks",
"params": {
"count": 2
}
}
],
"max_points": 25
},
{
"key": "watchers",
"name": "Watchers",
"detail": "1 watchers",
"points": 0,
"status": "missed",
"details": [
{
"code": "watchers",
"params": {
"count": 1
}
}
],
"max_points": 15
}
]
},
{
"key": "community_health",
"band": "moderate",
"name": "Community health",
"note": null,
"notes": [],
"value": 50,
"inputs": {
"has_readme": true,
"has_license": true,
"has_contributing": false,
"has_issue_template": false,
"has_code_of_conduct": false,
"has_pull_request_template": false
},
"components": [
{
"key": "readme",
"name": "README",
"detail": null,
"points": 22.5,
"status": "met",
"details": [],
"max_points": 22.5
},
{
"key": "license",
"name": "License",
"detail": "recognized license (MIT)",
"points": 22.5,
"status": "met",
"details": [
{
"code": "license_standard",
"params": {}
},
{
"code": "license_spdx",
"params": {
"spdx": "MIT"
}
}
],
"max_points": 22.5
},
{
"key": "contributing_guide",
"name": "CONTRIBUTING guide",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 18
},
{
"key": "code_of_conduct",
"name": "Code of conduct",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 13.5
},
{
"key": "issue_template",
"name": "Issue template",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.2
},
{
"key": "pr_template",
"name": "PR template",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 6.3
}
]
},
{
"key": "ecosystem_adoption",
"band": "moderate",
"name": "Ecosystem adoption (downloads)",
"note": "Excluded from scoring (no data or not applicable): Registry dependents. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"registry_dependents"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 66,
"inputs": {
"packages": [
"github.com/metalabel/dfos",
"@metalabel/dfos-protocol",
"@metalabel/dfos-web-relay"
],
"dependents": null,
"ecosystems": "go, npm",
"total_downloads": null,
"monthly_downloads": 9806
},
"components": [
{
"key": "monthly_downloads",
"name": "Monthly downloads",
"detail": "9,806 downloads/month across go, npm",
"points": 53.2,
"status": "partial",
"details": [
{
"code": "downloads_monthly",
"params": {
"count": 9806,
"ecosystems": "go, npm"
}
}
],
"max_points": 80
},
{
"key": "registry_dependents",
"name": "Registry dependents",
"detail": "not reported by this ecosystem",
"points": 0,
"status": "excluded",
"details": [
{
"code": "not_reported_by_this_ecosystem",
"params": {}
}
],
"max_points": 20
}
]
}
],
"description": "Does the project have users, downloads, attention, and a welcoming setup for contributors?"
},
{
"key": "governance",
"band": "moderate",
"name": "Sustainability & Governance",
"value": 57,
"weight": 0.24,
"metrics": [
{
"key": "maintainer_resilience",
"band": "critical",
"name": "Maintainer resilience (bus factor)",
"note": null,
"notes": [],
"value": 20,
"inputs": {
"bus_factor": 1,
"contributors_sampled": 1,
"top_contributor_share": 1
},
"components": [
{
"key": "bus_factor",
"name": "Bus factor",
"detail": "1 contributor(s) cover half of all commits",
"points": 9,
"status": "partial",
"details": [
{
"code": "bus_factor",
"params": {
"count": 1
}
}
],
"max_points": 54
},
{
"key": "commit_distribution",
"name": "Commit distribution",
"detail": "top contributor authored 100% of commits",
"points": 0,
"status": "missed",
"details": [
{
"code": "top_contributor_share",
"params": {
"share": 100
}
}
],
"max_points": 22.5
},
{
"key": "contributor_breadth",
"name": "Contributor breadth",
"detail": "1 contributors",
"points": 1.4,
"status": "partial",
"details": [
{
"code": "contributors_sampled",
"params": {
"count": 1
}
}
],
"max_points": 13.5
},
{
"key": "openssf_scorecard_contributors",
"name": "OpenSSF Scorecard: Contributors",
"detail": "project has 3 contributing companies or organizations -- score normalized to 10",
"points": 10,
"status": "met",
"details": [],
"max_points": 10
}
]
},
{
"key": "responsiveness",
"band": "good",
"name": "Issue & PR responsiveness",
"note": "Excluded from scoring (no data or not applicable): Issue resolution. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"issue_resolution"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 70,
"inputs": {
"merged_prs": 194,
"open_issues": 0,
"closed_issues": 0,
"issue_closed_ratio": null,
"closed_unmerged_prs": 4
},
"components": [
{
"key": "issue_resolution",
"name": "Issue resolution",
"detail": "no issues or no data",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_issues_or_data",
"params": {}
}
],
"max_points": 46.75
},
{
"key": "pr_acceptance",
"name": "PR acceptance",
"detail": "194/198 decided PRs merged",
"points": 37.5,
"status": "partial",
"details": [
{
"code": "decided_prs_merged",
"params": {
"merged": 194,
"decided": 198
}
}
],
"max_points": 38.25
},
{
"key": "openssf_scorecard_code_review",
"name": "OpenSSF Scorecard: Code-Review",
"detail": "Found 0/30 approved changesets -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
}
]
},
{
"key": "stewardship",
"band": "moderate",
"name": "Ownership & stewardship",
"note": null,
"notes": [],
"value": 55,
"inputs": {
"followers": 25,
"owner_type": "Organization",
"is_verified": null,
"owner_login": "metalabel",
"public_repos": 8,
"account_age_days": 1486
},
"components": [
{
"key": "ownership_backing",
"name": "Ownership backing",
"detail": "organization-owned",
"points": 30,
"status": "met",
"details": [
{
"code": "owner_organization",
"params": {}
}
],
"max_points": 30
},
{
"key": "verified_domain",
"name": "Verified domain",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 20
},
{
"key": "owner_reach",
"name": "Owner reach",
"detail": "25 followers of metalabel",
"points": 10.2,
"status": "partial",
"details": [
{
"code": "owner_followers",
"params": {
"count": 25,
"login": "metalabel"
}
}
],
"max_points": 25
},
{
"key": "track_record",
"name": "Track record",
"detail": "8 public repos, account ~4 yr old",
"points": 15.1,
"status": "partial",
"details": [
{
"code": "public_repos",
"params": {
"count": 8
}
},
{
"code": "account_age_years",
"params": {
"years": 4
}
}
],
"max_points": 25
}
]
},
{
"key": "package_maintenance",
"band": "excellent",
"name": "Package maintenance",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"packages": [
"github.com/metalabel/dfos",
"@metalabel/dfos-protocol",
"@metalabel/dfos-web-relay"
],
"ecosystems": "go, npm",
"any_deprecated": false,
"min_days_since_publish": 5
},
"components": [
{
"key": "published_resolvable",
"name": "Published & resolvable",
"detail": "3 package(s) on go, npm",
"points": 25,
"status": "met",
"details": [
{
"code": "packages_published",
"params": {
"count": 3,
"ecosystems": "go, npm"
}
}
],
"max_points": 25
},
{
"key": "publish_recency",
"name": "Publish recency",
"detail": "latest publish 5 days ago",
"points": 35,
"status": "met",
"details": [
{
"code": "publish_recency",
"params": {
"days": 5
}
}
],
"max_points": 35
},
{
"key": "version_history",
"name": "Version history",
"detail": "40 published versions",
"points": 20,
"status": "met",
"details": [
{
"code": "published_versions",
"params": {
"count": 40
}
}
],
"max_points": 20
},
{
"key": "not_deprecated",
"name": "Not deprecated",
"detail": "active, not deprecated or yanked",
"points": 20,
"status": "met",
"details": [
{
"code": "package_not_deprecated",
"params": {}
}
],
"max_points": 20
}
]
}
],
"description": "Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?"
},
{
"key": "engineering",
"band": "moderate",
"name": "Engineering Quality",
"value": 63,
"weight": 0.2,
"metrics": [
{
"key": "engineering_practices",
"band": "moderate",
"name": "Engineering practices",
"note": null,
"notes": [],
"value": 68,
"inputs": {
"has_ci": true,
"has_tests": true,
"has_editorconfig": false,
"has_linter_config": false,
"has_precommit_config": false
},
"components": [
{
"key": "ci_workflows",
"name": "CI workflows",
"detail": "4 workflow(s)",
"points": 24,
"status": "met",
"details": [
{
"code": "ci_workflows",
"params": {
"count": 4
}
}
],
"max_points": 24
},
{
"key": "tests_present",
"name": "Tests present",
"detail": null,
"points": 24,
"status": "met",
"details": [],
"max_points": 24
},
{
"key": "linter_config",
"name": "Linter config",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 16
},
{
"key": "pre_commit_hooks",
"name": "Pre-commit hooks",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 9.6
},
{
"key": "editorconfig",
"name": ".editorconfig",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 6.4
},
{
"key": "openssf_scorecard_ci_tests",
"name": "OpenSSF Scorecard: CI-Tests",
"detail": "24 out of 24 merged PRs checked by a CI test -- score normalized to 10",
"points": 20,
"status": "met",
"details": [],
"max_points": 20
}
]
},
{
"key": "documentation",
"band": "moderate",
"name": "Documentation",
"note": null,
"notes": [],
"value": 55,
"inputs": {
"topics": [],
"has_wiki": false,
"homepage": "https://protocol.dfos.com",
"has_readme": true,
"has_docs_dir": false,
"has_description": true
},
"components": [
{
"key": "readme",
"name": "README",
"detail": null,
"points": 30,
"status": "met",
"details": [],
"max_points": 30
},
{
"key": "documentation_directory",
"name": "Documentation directory",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 25
},
{
"key": "documentation_homepage_site",
"name": "Documentation / homepage site",
"detail": "https://protocol.dfos.com",
"points": 15,
"status": "met",
"details": [],
"max_points": 15
},
{
"key": "repository_description",
"name": "Repository description",
"detail": null,
"points": 10,
"status": "met",
"details": [],
"max_points": 10
},
{
"key": "topics",
"name": "Topics",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
},
{
"key": "wiki",
"name": "Wiki",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
}
]
}
],
"description": "Are baseline engineering and documentation practices in place?"
},
{
"key": "security",
"band": "at_risk",
"name": "Security",
"value": 32,
"weight": 0.16,
"metrics": [
{
"key": "security_posture",
"band": "at_risk",
"name": "Security posture",
"note": null,
"notes": [],
"value": 32,
"inputs": {
"source": "openssf_scorecard",
"checks_evaluated": 18,
"scorecard_version": "v5.5.0",
"checks_inconclusive": 0,
"scorecard_aggregate": 3.2
},
"components": [
{
"key": "binary_artifacts",
"name": "Binary-Artifacts",
"detail": "no binaries found in the repo",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "branch_protection",
"name": "Branch-Protection",
"detail": "branch protection is not maximal on development and all release branches",
"points": 0.8,
"status": "partial",
"details": [],
"max_points": 7.5
},
{
"key": "ci_tests",
"name": "CI-Tests",
"detail": "24 out of 24 merged PRs checked by a CI test -- score normalized to 10",
"points": 2.5,
"status": "met",
"details": [],
"max_points": 2.5
},
{
"key": "cii_best_practices",
"name": "CII-Best-Practices",
"detail": "no effort to earn an OpenSSF best practices badge detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 2.5
},
{
"key": "code_review",
"name": "Code-Review",
"detail": "Found 0/30 approved changesets -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "contributors",
"name": "Contributors",
"detail": "project has 3 contributing companies or organizations -- score normalized to 10",
"points": 2.5,
"status": "met",
"details": [],
"max_points": 2.5
},
{
"key": "dangerous_workflow",
"name": "Dangerous-Workflow",
"detail": "dangerous workflow patterns detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
},
{
"key": "dependency_update_tool",
"name": "Dependency-Update-Tool",
"detail": "no update tool detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "fuzzing",
"name": "Fuzzing",
"detail": "project is not fuzzed",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "license",
"name": "License",
"detail": "license file detected",
"points": 2.5,
"status": "met",
"details": [],
"max_points": 2.5
},
{
"key": "maintained",
"name": "Maintained",
"detail": "30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "packaging",
"name": "Packaging",
"detail": "packaging workflow detected",
"points": 5,
"status": "met",
"details": [],
"max_points": 5
},
{
"key": "pinned_dependencies",
"name": "Pinned-Dependencies",
"detail": "dependency not pinned by hash detected -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "sast",
"name": "SAST",
"detail": "SAST tool is not run on all commits -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "security_policy",
"name": "Security-Policy",
"detail": "security policy file detected",
"points": 5,
"status": "met",
"details": [],
"max_points": 5
},
{
"key": "signed_releases",
"name": "Signed-Releases",
"detail": "Project has not signed or included provenance with any releases.",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "token_permissions",
"name": "Token-Permissions",
"detail": "detected GitHub workflow tokens with excessive permissions",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "vulnerabilities",
"name": "Vulnerabilities",
"detail": "58 existing vulnerabilities detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
}
]
},
{
"key": "high_risk_jurisdiction_exposure",
"band": "excellent",
"name": "High-Risk Jurisdiction Exposure",
"note": "Only high-confidence self-published location evidence affects this multiplier. Ambiguous matches are review-only; country evidence is not proof of nationality, citizenship, legal registration, malicious intent, or sanctions status.",
"notes": [
{
"code": "jurisdiction_evidence_limits",
"params": {}
}
],
"value": 100,
"inputs": {
"meaning": "self-published location evidence; not nationality or citizenship",
"red_flag": false,
"exposures": [],
"policy_countries": [
"Russia",
"Iran",
"North Korea"
],
"review_only_matches": 0,
"assessed_self_published_locations": 1
},
"components": [
{
"key": "policy_exposure_multiplier",
"name": "Policy exposure multiplier",
"detail": "no confirmed policy-scope location match",
"points": 100,
"status": "met",
"details": [
{
"code": "jurisdiction_no_match",
"params": {}
}
],
"max_points": 100
}
]
}
],
"description": "Are visible security and supply-chain practices strong, with no malicious dependency and no unresolved high-risk jurisdiction exposure?"
},
{
"key": "ai_readiness",
"band": "moderate",
"name": "AI Readiness",
"value": 67,
"weight": 0,
"metrics": [
{
"key": "ai_agent_context",
"band": "at_risk",
"name": "Agent context & guidance",
"note": null,
"notes": [],
"value": 40,
"inputs": {
"has_llms_txt": false,
"legible_history_share": 1,
"agent_instruction_files": [],
"agent_instruction_max_bytes": null
},
"components": [
{
"key": "agent_instructions",
"name": "Agent instructions",
"detail": "no CLAUDE.md / AGENTS.md / editor rules",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_agent_instructions",
"params": {}
}
],
"max_points": 45
},
{
"key": "machine_readable_docs_llms_txt",
"name": "Machine-readable docs (llms.txt)",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
},
{
"key": "legible_commit_history",
"name": "Legible commit history",
"detail": "100 of 100 human commits state their intent (structured subject or explanatory body)",
"points": 40,
"status": "met",
"details": [
{
"code": "legible_history",
"params": {
"legible": 100,
"sampled": 100
}
}
],
"max_points": 40
}
]
},
{
"key": "ai_verify_loop",
"band": "good",
"name": "Verify loop (build / test / typecheck)",
"note": null,
"notes": [],
"value": 71,
"inputs": {
"has_nix": false,
"has_tests": true,
"lockfiles": [
"Cargo.lock",
"go.sum",
"package-lock.json",
"pnpm-lock.yaml"
],
"has_dockerfile": true,
"typed_language": true,
"bootstrap_files": [
"packages/dfos-cli/Makefile"
],
"has_devcontainer": false,
"has_linter_config": false,
"typecheck_configs": [
"packages/dfos-client/tsconfig.json",
"packages/dfos-explorer/tsconfig.json",
"packages/dfos-protocol/tsconfig.json",
"packages/dfos-web-relay/tsconfig.json",
"packages/site-protocol/tsconfig.json",
"packages/site-schemas/tsconfig.json"
],
"agent_commit_share": 0.81,
"toolchain_manifests": [
"packages/dfos-cli/go.mod",
"packages/dfos-protocol-go/go.mod",
"packages/dfos-web-relay-go/go.mod",
"packages/protocol-verify/go/go.mod",
"packages/protocol-verify/rust/Cargo.toml",
"packages/relay-conformance/go.mod"
],
"dependency_bot_commit_share": 0
},
"components": [
{
"key": "one_command_bootstrap",
"name": "One-command bootstrap",
"detail": "packages/dfos-cli/Makefile",
"points": 18,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "packages/dfos-cli/Makefile"
}
}
],
"max_points": 18
},
{
"key": "automated_tests",
"name": "Automated tests",
"detail": null,
"points": 22,
"status": "met",
"details": [],
"max_points": 22
},
{
"key": "lint_format_config",
"name": "Lint / format config",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 11
},
{
"key": "static_type_checking",
"name": "Static type checking",
"detail": "packages/dfos-client/tsconfig.json, packages/dfos-explorer/tsconfig.json, packages/dfos-protocol/tsconfig.json, packages/dfos-web-relay/tsconfig.json, packages/site-protocol/tsconfig.json, packages/site-schemas/tsconfig.json",
"points": 11,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "packages/dfos-client/tsconfig.json, packages/dfos-explorer/tsconfig.json, packages/dfos-protocol/tsconfig.json, packages/dfos-web-relay/tsconfig.json, packages/site-protocol/tsconfig.json, packages/site-schemas/tsconfig.json"
}
}
],
"max_points": 11
},
{
"key": "reproducible_environment",
"name": "Reproducible environment",
"detail": "Dockerfile, lockfile",
"points": 10,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "Dockerfile, lockfile"
}
}
],
"max_points": 10
},
{
"key": "demonstrated_agent_practice",
"name": "Demonstrated agent practice",
"detail": "81 of the last 100 commits agent-authored or agent-credited",
"points": 10,
"status": "met",
"details": [
{
"code": "agent_authored_commits",
"params": {
"count": 81,
"sampled": 100
}
}
],
"max_points": 10
},
{
"key": "automated_maintenance",
"name": "Automated maintenance",
"detail": "no automated dependency updates observed",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_dependency_automation",
"params": {}
}
],
"max_points": 8
},
{
"key": "openssf_scorecard_pinned_dependencies",
"name": "OpenSSF Scorecard: Pinned-Dependencies",
"detail": "dependency not pinned by hash detected -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
}
]
},
{
"key": "ai_code_legibility",
"band": "excellent",
"name": "Code legibility for models",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"primary_language": "TypeScript",
"largest_source_bytes": 156997,
"source_files_sampled": 302,
"oversized_source_files": 2
},
"components": [
{
"key": "type_checkable_code",
"name": "Type-checkable code",
"detail": "TypeScript (statically typed)",
"points": 45,
"status": "met",
"details": [
{
"code": "statically_typed_language",
"params": {
"language": "TypeScript"
}
}
],
"max_points": 45
},
{
"key": "manageable_file_sizes",
"name": "Manageable file sizes",
"detail": "2/302 source files over 60KB",
"points": 54.6,
"status": "partial",
"details": [
{
"code": "oversized_source_files",
"params": {
"kb": 60,
"sampled": 302,
"oversized": 2
}
}
],
"max_points": 55
}
]
},
{
"key": "ai_interfaces",
"band": "good",
"name": "Machine-readable interfaces",
"note": null,
"notes": [],
"value": 80,
"inputs": {
"example_dirs": [
"examples"
],
"has_mcp_signal": false,
"api_schema_files": [
"packages/dfos-web-relay/openapi.yaml"
]
},
"components": [
{
"key": "api_schema_openapi_graphql_proto",
"name": "API schema (OpenAPI/GraphQL/proto)",
"detail": "packages/dfos-web-relay/openapi.yaml",
"points": 40,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "packages/dfos-web-relay/openapi.yaml"
}
}
],
"max_points": 40
},
{
"key": "mcp_server",
"name": "MCP server",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 20
},
{
"key": "runnable_examples",
"name": "Runnable examples",
"detail": "examples",
"points": 40,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "examples"
}
}
],
"max_points": 40
}
]
}
],
"description": "How well is the repo equipped to be developed and maintained with AI coding agents? An independent, experimental badge — weight 0.0, so it is surfaced on its own and does not affect the overall health score."
}
],
"metrics_version": "1.13.0"
},
"warnings": [
"Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token",
"Could not fetch npm package '@metalabel/dfos' from its registry",
"GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository",
"deps.dev does not index npm:@metalabel/dfos-protocol@0.24.0; advisories assessed against the repository dependency graph instead"
],
"report_type": "repository",
"generated_at": "2026-07-22T15:05:06.105204Z",
"schema_version": "0.26.0",
"badge_url": "https://raw.githubusercontent.com/inspect-software/badges/main/v1/m/metalabel/dfos.svg",
"full_name": "metalabel/dfos",
"license_state": "standard",
"license_spdx": "MIT"
}
Пов’язані записи
Перевірені репозиторії, що мають спільні каталожні теги або екосистеми з metalabel/dfos. Читати поруч →
Оцінки — це сигнали, а не гарантії. Вони відображають публічно видимі практики на GitHub — це не аудит коду й не гарантія безпеки.
Відсутні дані виключаються, а ваги перенормовуються — нуль за відсутність ніколи не ставиться. Методологія версіонована й відкрита: метрики v1.13.0, схема v0.26.0 — повна методологія · вікі метрик.
