pockebot/openpocket має індекс здоров’я 54 зі 100, що відповідає смузі «Помірний». Найвищий показник — Engineering Quality (77/100), найнижчий — Vitality (38/100). Останнє оновлення було 11 днів тому. Більшість нещодавньої роботи виконує один учасник.
54
загалом / 100
Помірний
Індекс здоров'я програмного забезпечення
Метрики згруповано у зважені категорії на шкалі 1–100. Загальна оцінка починається як їхнє середнє; коли публічні дані активують Політику юрисдикцій високого ризику, рейтинг коригується й отримує верхню межу 49 («Під ризиком»). Готовність до ШІ не входить до індексу.
54
Відмінний85-100Зразковий; відповідає практично всім перевіреним критеріям
Добрий70-84Здоровий; незначні прогалини
Помірний50-69Прийнятний, але з помітними прогалинами; рекомендовано перевірку
У зоні ризику30-49Суттєві слабкі місця; впровадження потребує обережності
Критичний1-29Серйозні проблеми (покинутий, єдиний мейнтейнер, без базової гігієни)
Профіль оцінок
Кожна вісь — окрема категорія. Форма важить більше, ніж середнє: здоровий об'єкт заповнює всю фігуру, тоді як профіль із піками та провалами означає, що сила в одному вимірі маскує ризик в іншому.
Прямі залежності без відомих сповіщень — уражено 1: @mariozechner/pi-coding-agent 0.54.2 (high 7.3)
7.6/25
Непрямі залежності без відомих сповіщень — уражено 3: undici 6.24.1 (high 7.5), uuid 8.3.2 (high 7.5), qs 6.14.2 (moderate 5.3)
40/40
Немає задавнених сповіщень — жодне сповіщення не є публічним довше за 90 дн.
Використані вхідні дані
source
osv
advisories
9
affected_packages
4
assessed_packages
508
unassessed_packages
0
affected_by_severity
high 3, moderate 1
direct_affected_packages
1
Звірено з runtime-замиканням залежностей npm:openpocket@0.2.3 — тим, що тягне за собою встановлення опублікованого пакета, — 508 пакетів. Досяжність не аналізується.
Наскільки репозиторій оснащений для розробки та супроводу за участі ШІ-агентів? Незалежний, експериментальний бейдж — вага 0.0, тож він подається окремо і не впливає на загальний індекс здоров'я.
npm package 'openpocket' points at a different repository (https://github.com/SergioChan/openpocket); excluded from ecosystem scoring
GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository
Докладніше
Історія зірок і форків 834 ★ / 6 ⇿
834Зірки
6Форки
Коли додано кожну зірку й форк — зібрано з GitHub і згруповано за днями. Кумулятивне зростання розміщено просто над денними додаваннями, з яких воно складається, тож їх видно одне проти одного: рівномірне органічне накопичення виглядає зовсім інакше, ніж різкий короткочасний сплеск. Там, де цю різницю можна виміряти, її подано як автентичність росту.
OpenSSF Scorecard 4.3 / 10
4.3сукупно
Незалежна, не прив'язана до інструментів оцінка безпеки від відкритого проєкту OpenSSF Scorecard. Кожна перевірка винагороджує практику безпеки, а не інструмент конкретного постачальника. Перевірки, які Scorecard не зміг визначити, позначено н/д і виключено з оцінки безпеки (вони ніколи не зараховуються як нуль).Scorecard v5.5.0 · 2026-07-21 15:48 UTC
Не вдалося зібрати розв'язаний набір залежностей для цього звіту: GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository
Сповіщення про залежності 4
Встановлення npm:openpocket@0.2.3 тягне 508 пакетів, прямих і транзитивних: 4 мають відомі сповіщення, з них 1 — прямі залежності.
Пакет
Версія
Зв'язок
Критичність
Сповіщень
Виправлено в
@mariozechner/pi-coding-agent
0.54.2
пряма
висока
3
0.78.1
undici
6.24.1
непряма
висока
4
8.5.0
uuid
8.3.2
непряма
висока
1
13.0.1
qs
6.14.2
непряма
помірна
1
6.15.2
Сповіщення означає, що версія, записана в графі залежностей, потрапляє в уражений діапазон. Досяжність не аналізується, а граф містить піниї розробки й тестування — знахідка може стосуватися інструментів, а не поставленого коду.
Звіт у форматі JSON машиночитний
{
"data": {
"repo": {
"topics": [],
"is_fork": false,
"size_kb": 38965,
"has_wiki": true,
"homepage": "https://openpocket.ai",
"languages": {
"CSS": 42633,
"Vue": 6459,
"Java": 4627,
"Shell": 8081,
"Makefile": 33,
"Dockerfile": 1907,
"JavaScript": 2750886,
"TypeScript": 1813314
},
"pushed_at": "2026-07-09T21:52:04Z",
"created_at": "2026-02-18T21:51:23Z",
"owner_type": "Organization",
"updated_at": "2026-07-15T09:07:50Z",
"description": "🐹 An Intelligent Phone That Never Sleeps.",
"is_archived": false,
"is_disabled": false,
"license_spdx": "MIT",
"default_branch": "main",
"license_spdx_raw": "MIT",
"primary_language": "JavaScript",
"significant_languages": [
"JavaScript",
"TypeScript"
]
},
"owner": {
"blog": "openpocket.ai",
"name": "openpocket",
"type": "Organization",
"login": "pockebot",
"company": null,
"location": "United States of America",
"followers": 4,
"avatar_url": "https://avatars.githubusercontent.com/u/262933667?v=4",
"created_at": "2026-02-21T03:26:02Z",
"is_verified": null,
"public_repos": 2,
"account_age_days": 150
},
"license": {
"state": "standard",
"spdx_id": "MIT",
"raw_spdx": "MIT",
"file_present": true,
"scorecard_found": true,
"profile_has_license": true
},
"activity": {
"releases": [],
"recent_commits": [
{
"oid": "d4dae3d30d6f7c9f6d004a377cf1f1d3400d0685",
"body": "## Summary\n- Add one-command installation for Codex CLI/Desktop and Claude Code\nCLI/Desktop.\n- Add native, self-contained Codex and Claude Code phone-use adapters\nunder one `plugins/openpocket-phone/` integration root.\n- Generate both adapters from one canonical skill and one 23-tool\nAndroid MCP imp\n[…]\nnt tests, or the Testing section explains why I did\nnot.\n- [x] I updated docs, or confirmed no doc changes were needed.\n- [x] I confirmed the PR does not include secrets, credentials, or\nprivate data.",
"is_bot": false,
"headline": "Add native Codex and Claude Code phone-use plugins (#119)",
"author_name": "Sergio",
"author_login": "SergioChan",
"committed_at": "2026-07-09T21:52:04Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "eb017f66e637ec19ecd648964dc084d1a1ada8eb",
"body": null,
"is_bot": false,
"headline": "docs: add phone use environment setup steps",
"author_name": "Yuheng",
"author_login": "SergioChan",
"committed_at": "2026-07-09T21:45:45Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "905c22427422cc1a305d2c6ee4fa67c7c1dd7bdb",
"body": null,
"is_bot": false,
"headline": "docs: clarify phone use host prerequisites",
"author_name": "Yuheng",
"author_login": "SergioChan",
"committed_at": "2026-07-09T21:36:55Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "371e6757013e2bf7aaa41c8400925a053a6705c3",
"body": null,
"is_bot": false,
"headline": "Consolidate phone plugins under one integration root",
"author_name": "Yuheng",
"author_login": "SergioChan",
"committed_at": "2026-07-09T21:11:36Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "67e1d77b97e45dfbcd5219476b43f43133a857a4",
"body": null,
"is_bot": false,
"headline": "Document native phone plugin onboarding",
"author_name": "Yuheng",
"author_login": "SergioChan",
"committed_at": "2026-07-09T20:22:58Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2c87cf2889d0eae1d03abe9b4cd8904a01985fab",
"body": null,
"is_bot": false,
"headline": "Bundle Codex phone plugin runtime",
"author_name": "Yuheng",
"author_login": "SergioChan",
"committed_at": "2026-07-09T20:05:08Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "bad154d68c02ac4c9feb948d142fe69aea9ac421",
"body": null,
"is_bot": false,
"headline": "Add native Claude Code phone plugin",
"author_name": "Yuheng",
"author_login": "SergioChan",
"committed_at": "2026-07-09T19:18:49Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "eb5da7c2ec1dca6f18ae3fcbcfd68a3a9df0755f",
"body": null,
"is_bot": false,
"headline": "Add one-command phone use installer",
"author_name": "Yuheng",
"author_login": "SergioChan",
"committed_at": "2026-07-09T18:36:26Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f638c71b0b310f3f31d1a000e743f22eb8c4898d",
"body": "## Summary\n\n- Adds the local `openpocket-phone` Codex plugin bundle under\n`plugins/openpocket-phone/`.\n- Expands the shared OpenPocket Phone MCP server with ergonomic Android\nphone-use tools for Codex, Claude Code, and other MCP clients.\n- Adds Claude Code MCP registration and standalone setup docum\n[…]\nnt tests, or the Testing section explains why I did\nnot.\n- [x] I updated docs, or confirmed no doc changes were needed.\n- [x] I confirmed the PR does not include secrets, credentials, or\nprivate data.",
"is_bot": false,
"headline": "Add Codex and Claude Code phone-use integrations (#118)",
"author_name": "Sergio",
"author_login": "SergioChan",
"committed_at": "2026-07-09T04:11:44Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "f455cc76d1d17107f112d7e16c2e5ad88d233386",
"body": null,
"is_bot": false,
"headline": "Document plugin install flows",
"author_name": "Yuheng",
"author_login": "SergioChan",
"committed_at": "2026-07-09T03:50:58Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "af59819dda57260bece11f20725f440676541f59",
"body": null,
"is_bot": false,
"headline": "Document Codex and Claude Code phone use",
"author_name": "Yuheng",
"author_login": "SergioChan",
"committed_at": "2026-07-09T03:20:09Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f0fb98fbea9a8ea33fbe277c806cda91eb553405",
"body": null,
"is_bot": false,
"headline": "Improve Codex phone-use plugin ergonomics",
"author_name": "Yuheng",
"author_login": "SergioChan",
"committed_at": "2026-07-09T03:20:09Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2755d236b6815a59c8de8c7934dc234e46cad925",
"body": null,
"is_bot": false,
"headline": "Document fresh Codex plugin session requirement",
"author_name": "Yuheng",
"author_login": "SergioChan",
"committed_at": "2026-07-09T03:20:09Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ce60f31b028f8c185e604653b9a97a1a69075806",
"body": null,
"is_bot": false,
"headline": "Fix Codex plugin MCP startup",
"author_name": "Yuheng",
"author_login": "SergioChan",
"committed_at": "2026-07-09T03:20:09Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b33f51adedfa2273e43d14b9eabaa8228c8a711e",
"body": null,
"is_bot": false,
"headline": "Add Codex phone-use plugin MVP",
"author_name": "Yuheng",
"author_login": "SergioChan",
"committed_at": "2026-07-09T03:20:09Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f1d18ba9300766217b43cac16398e30fb477b78a",
"body": "## Summary\n- Add a data-heavy workflow boundary to x-twitter-play.\n- Point agents to configured X/Twitter tools such as TweetClaw for bulk\nsearch, follower export, media, monitoring, webhooks, giveaway draws,\nand broad DM inspection.\n\n## Why\nOpenPocket's phone skill is best for visible app actions. \n[…]\nnt tests, or the Testing section explains why I did\nnot.\n- [x] I updated docs, or confirmed no doc changes were needed.\n- [x] I confirmed the PR does not include secrets, credentials, or\nprivate data.",
"is_bot": false,
"headline": "Add X data tool boundary (#117)",
"author_name": "Sergio",
"author_login": "SergioChan",
"committed_at": "2026-07-09T01:28:27Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "6cb9d178db409c9250221dcb647c6391c4dea292",
"body": null,
"is_bot": false,
"headline": "Add X data tool boundary",
"author_name": "kriptoburak",
"author_login": "kriptoburak",
"committed_at": "2026-06-16T14:55:58Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "200a97975df60e7878f7cf3bd46abe488326cf53",
"body": "* Fix cron channel metadata and timezone handling\n\n* Confirm default cron timezones with the user\n\n---------\n\nCo-authored-by: stablegenius49 <185121704+stablegenius49@users.noreply.github.com>",
"is_bot": false,
"headline": "Fix cron channel metadata and timezone handling (#115)",
"author_name": "Stable Genius",
"author_login": "stablegenius49",
"committed_at": "2026-03-23T03:12:19Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "8c482baba7e4fbaed407edbeb946ef973cff8b27",
"body": "… (#114)\n\nPreviously, transient 5xx server errors were only retried for OpenAI-like\nmodels. This caused tasks using other providers (e.g. Google Gemini) to\nfail immediately on temporary outages like 503 high-demand errors.\n\nCo-authored-by: Claude Opus 4.6 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "Extend model error retry logic to all providers, not just OpenAI-like…",
"author_name": "Frank",
"author_login": "tsubasakong",
"committed_at": "2026-03-17T17:36:56Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "294fb0a29460f397e45f7bc20d96ca3cf73f3b07",
"body": "* Use agent.maxSteps for cron step budget instead of hardcoded 30\n\nCron tasks were aborting mid-execution because the step budget defaulted\nto 30 (clamped 20-60), far below the configured agent.maxSteps of 100.\nThis caused tasks like \"comment on 10 posts\" to fail after only 6.\n\n- Default cron stepBu\n[…]\nn step budget test to match new 80-maxSteps range\n\nCo-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>\n\n---------\n\nCo-authored-by: Claude Opus 4.6 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "Use agent.maxSteps for cron step budget instead of hardcoded 30 (#113)",
"author_name": "Frank",
"author_login": "tsubasakong",
"committed_at": "2026-03-17T15:51:44Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "a7feb54916367566b0a49362cec9043a66f5acd3",
"body": "* Add Aliyun GUI-OWL coordinate fix and GUI-Plus model support (#111)\n\n- Fix GUI-OWL (pre-gui_owl_7b) coordinate rescaling from 1000x1000\n normalized space to actual device pixel dimensions\n- Add GUI-Plus model client with smart_resize coordinate conversion\n- Add aliyun_gui_plus backend type and mo\n[…]\noting for Aliyun models\n- Tests for all the above\n\nCo-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>\n\n---------\n\nCo-authored-by: Claude Opus 4.6 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "Add Aliyun GUI-OWL coordinate fix and GUI-Plus model support (#112)",
"author_name": "Frank",
"author_login": "tsubasakong",
"committed_at": "2026-03-16T01:52:48Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "a5db5b2731a708e9c364318d5b128cd9077525c1",
"body": "## Summary\n- Fix the OpenPocket helper IME causing a full-screen black overlay when\nactivated during Unicode text input on physical devices.\n- Replace the ineffective 1px-transparent-view approach with\n`onEvaluateInputViewShown() → false`, which prevents the system from\ncreating a keyboard window en\n[…]\ns why I did\nnot.\n- [x] I updated docs, or confirmed no doc changes were needed.\n- [x] I confirmed the PR does not include secrets, credentials, or\nprivate data.\n\nMade with [Cursor](https://cursor.com)",
"is_bot": false,
"headline": "Fix helper IME black screen by suppressing keyboard window (#109)",
"author_name": "Sergio",
"author_login": "SergioChan",
"committed_at": "2026-03-14T03:59:54Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "80ad44473a07c29c5939fc02862d8939e18f1e64",
"body": null,
"is_bot": false,
"headline": "Merge branch 'main' into dev-sergio",
"author_name": "Sergio",
"author_login": "SergioChan",
"committed_at": "2026-03-14T03:59:42Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e5a0a97111995b3903e0e63be147cb91300c5146",
"body": null,
"is_bot": false,
"headline": "Add retries for transient Codex server errors (#110)",
"author_name": "Frank",
"author_login": "tsubasakong",
"committed_at": "2026-03-13T18:57:51Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "00906f9ddd60743307d85b7aae569a1e4c91bbc5",
"body": null,
"is_bot": false,
"headline": "Merge branch 'main' into dev-sergio",
"author_name": "Sergio",
"author_login": "SergioChan",
"committed_at": "2026-03-12T23:22:25Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b663762a4e17b62b75df26321afb658975ebdac6",
"body": "The previous 1px-transparent-view approach did not work because\nAndroid's IME window manager ignores View LayoutParams and enforces\na minimum keyboard window size, resulting in a full-screen black\noverlay whenever the helper IME was activated.\n\nReplace with onEvaluateInputViewShown() returning false\n[…]\nthodService still binds to the focused input field, so\ngetCurrentInputConnection() works normally for text injection via\nbroadcast — verified on-device with screenshot confirmation.\n\nMade-with: Cursor",
"is_bot": false,
"headline": "Fix helper IME black screen by suppressing keyboard window entirely",
"author_name": "Sergio",
"author_login": "SergioChan",
"committed_at": "2026-03-12T23:11:13Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "570b4ddc2158f94dbe4d9f9ffaf6e31d50b22631",
"body": "## Summary\n- fix skill file reads in the pi coding backend when the model emits\nhome-relative paths like `.openpocket/skills/...`\n- add a regression test for skill-root path resolution so the read flow\nstays pinned to the real skill location\n- let a second Ctrl+C force-exit the gateway so shutdown i\n[…]\ns why I did\nnot.\n- [x] I updated docs, or confirmed no doc changes were needed.\n- [x] I confirmed the PR does not include secrets, credentials, or\nprivate data.\n\nMade with [Cursor](https://cursor.com)",
"is_bot": false,
"headline": "Fix skill path reads and gateway shutdown interrupts (#108)",
"author_name": "Sergio",
"author_login": "SergioChan",
"committed_at": "2026-03-12T17:56:19Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "b7e837302b6969563b49987643f23dc766f047a9",
"body": "…own.\n\nResolve home-relative skill reads before passing paths into the pi coding read tool, and let a second Ctrl+C force exit while graceful shutdown is in progress.\n\nMade-with: Cursor",
"is_bot": false,
"headline": "Fix skill path reads in pi coding executor and speed up gateway shutd…",
"author_name": "Sergio",
"author_login": "SergioChan",
"committed_at": "2026-03-12T17:50:02Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0426ffd7a1099ba4a2de2d485e3f3e9304a9935b",
"body": "…gs (#107)\n\n## Summary\n- Add ANSI color-coded agent step logs and truncate verbose result\noutput\n- Fix skill path resolution to use absolute paths instead of tilde\nshorthand\n- Add x-twitter-play skill\n\n## Why\nAgent step logs (`[thought]`, `[decision]`, `[result]`, `[start]`,\n`[end]`) were all plain \n[…]\nnt tests, or the Testing section explains why I did\nnot.\n- [x] I updated docs, or confirmed no doc changes were needed.\n- [x] I confirmed the PR does not include secrets, credentials, or\nprivate data.",
"is_bot": false,
"headline": "Add cron bounded planning, skill path fixes, and color-coded agent lo…",
"author_name": "Sergio",
"author_login": "SergioChan",
"committed_at": "2026-03-12T04:36:19Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "2324997b67eac2f6e26b4d4d7083d5d11c4db2e6",
"body": null,
"is_bot": false,
"headline": "Merge branch 'main' into feat/cron-bounded-plan-and-hide-package-names",
"author_name": "Sergio",
"author_login": "SergioChan",
"committed_at": "2026-03-12T04:33:08Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "7688a8114a0df64764fdb1b58ffbf694d36067bc",
"body": "Agent step logs ([thought], [decision], [result], etc.) were all plain\nwhite, making it hard to scan terminal output for important information.\n\n- Add colorizeAgentLog() that applies per-section ANSI colors: cyan for\n thought, yellow for decision, green/dim/red for result variants, dim\n for metada\n[…]\nwith an omission summary,\n preventing skill reads and large outputs from flooding the terminal\n- Update runtimeTone to classify agent/model lines for the gateway log\n path as well\n\nMade-with: Cursor",
"is_bot": false,
"headline": "Add color-coded agent step logs and truncate verbose results",
"author_name": "Sergio",
"author_login": "SergioChan",
"committed_at": "2026-03-12T04:30:23Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "7b19bb60f387a53e49fa39bcea6a245c4a4cc3fc",
"body": "The model was stripping or misinterpreting the ~ prefix in skill paths,\nusing .openpocket/skills/... instead of ~/.openpocket/skills/..., which\nresolved to workspace/.openpocket/... and caused ENOENT. Using absolute\npaths eliminates the ambiguity entirely.\n\nMade-with: Cursor",
"is_bot": false,
"headline": "Use absolute paths for skill locations instead of tilde shorthand",
"author_name": "Sergio",
"author_login": "SergioChan",
"committed_at": "2026-03-12T03:49:35Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "93956da871b454341d1d1de7d8538b78a5ed6a48",
"body": null,
"is_bot": false,
"headline": "Create SKILL.md",
"author_name": "Sergio",
"author_login": "SergioChan",
"committed_at": "2026-03-12T03:47:15Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d962efcc6aeb8a84bcb60381221e36c747b65dcc",
"body": "The skill loader compacts absolute paths to ~/... notation via\ncompactSkillPath, but path.resolve does not expand ~, causing the\nagent's read tool to resolve ~/.openpocket/skills/... relative to the\nworkspace directory instead of the home directory. This resulted in\nENOENT when the agent tried to read local skill files.\n\nAdded expandTilde helper in resolveWorkspacePathPolicy so ~ paths\nresolve correctly to os.homedir().\n\nMade-with: Cursor",
"is_bot": false,
"headline": "Expand tilde in workspace path resolution for skill read access",
"author_name": "Sergio",
"author_login": "SergioChan",
"committed_at": "2026-03-12T03:46:18Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d6e61844f0fef8254625d284b560455626eb05d4",
"body": "## Summary\n- guard SkillLoader’s local skills path with a try/catch so CI/sandbox\nruns\n\n don’t crash when OPENPOCKET_HOME isn’t writable\n- keep bundled and workspace skills loading unchanged\n\n## Why\nfound this problem while setting up the project on my machine\n\n## Changes\n\nAdded a try/catch around \n[…]\nnt tests, or the Testing section explains why I did\nnot.\n- [x] I updated docs, or confirmed no doc changes were needed.\n- [x] I confirmed the PR does not include secrets, credentials, or\nprivate data.",
"is_bot": false,
"headline": "Avoid creating unwritable HOME skills dir in SkillLoader (#103)",
"author_name": "Sergio",
"author_login": "SergioChan",
"committed_at": "2026-03-12T03:02:53Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "8c8a8b971529a4bf21c7637adbd88fb1d7aedebe",
"body": null,
"is_bot": false,
"headline": "Merge branch 'main' into startup-fix",
"author_name": "Sergio",
"author_login": "SergioChan",
"committed_at": "2026-03-12T03:02:32Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c00ce022c8b1dac71b9388d06eb67941e4f4649b",
"body": null,
"is_bot": false,
"headline": "feat: expose installed app labels to runtime prompts (#106)",
"author_name": "Frank",
"author_login": "tsubasakong",
"committed_at": "2026-03-12T02:01:51Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "9f0ff5529d196a4d6d27b76db53f6c9ec8057440",
"body": null,
"is_bot": false,
"headline": "Merge branch 'main' into startup-fix",
"author_name": "Sergio",
"author_login": "SergioChan",
"committed_at": "2026-03-11T23:02:13Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "63f15763948cb2c7b0b7b9fb25911f8f4d874b4d",
"body": "…ges (#105)\n\n## Summary\n- Cron-triggered tasks now generate a structured **CronTaskPlan**\n(summary, steps, step budget, completion criteria) before execution,\nensuring bounded single-pass runs.\n- When the step budget is exhausted, the run completes **normally**\ninstead of failing with \"Max steps rea\n[…]\n why I did\nnot.\n- [x] I updated docs, or confirmed no doc changes were needed.\n- [x] I confirmed the PR does not include secrets, credentials, or\nprivate data.\n\n\nMade with [Cursor](https://cursor.com)",
"is_bot": false,
"headline": "Add bounded cron task planning and hide package names from user messa…",
"author_name": "Sergio",
"author_login": "SergioChan",
"committed_at": "2026-03-11T23:01:47Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "374d7fdeef60078683b80166608b65a25ae54fdc",
"body": "When a user amends a cron task, the system now calls the LLM to\nintelligently merge the amendment into the original task, producing a\nclean consolidated description. This replaces the naive \"Additional\ninstruction:\" string append that caused task text to grow unboundedly\nwith repeated updates.\n\nBoth\n[…]\nent prefix), calls consolidateCronTaskUpdate\nfor an LLM rewrite, and falls back to simple append if the LLM is\nunavailable or fails. The consolidated result is capped at 2000 chars.\n\nMade-with: Cursor",
"is_bot": false,
"headline": "Use LLM consolidation for cron task updates instead of simple append",
"author_name": "Sergio",
"author_login": "SergioChan",
"committed_at": "2026-03-11T22:55:14Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "df0a2b5b1de8de2151ecfb8041777c9e78b8fc30",
"body": "The classify prompt previously instructed the model to reproduce the\nCOMPLETE merged task text in patch.task, but the 1024-token output\nlimit caused long tasks to be silently truncated.\n\nNow the prompt asks the model to output only the user's amendment (delta),\nand the server merges it into the orig\n[…]\n\nboth a length ratio (<70% of original) and prefix check to distinguish\ndeltas from full replacements. The classify maxTokens limit is also\nraised from 1024 to 2048 as a safety net.\n\nMade-with: Cursor",
"is_bot": false,
"headline": "Fix cron task update truncation by switching to delta-based merge",
"author_name": "Sergio",
"author_login": "SergioChan",
"committed_at": "2026-03-11T22:47:50Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "b8ff62c7a964e8adebbd2d9a52d07381dfa72714",
"body": null,
"is_bot": false,
"headline": "Merge branch 'main' into feat/cron-bounded-plan-and-hide-package-names",
"author_name": "Sergio",
"author_login": "SergioChan",
"committed_at": "2026-03-11T22:27:54Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0d4342910e7fffb41d81a394892dd8532b1d8393",
"body": "Cron-triggered tasks now go through a planning phase that produces a\nstructured CronTaskPlan (summary, steps, step budget, completion criteria).\nThe plan is injected into the agent system prompt to guide execution and\nenforce a bounded single-pass run. When the step budget is exhausted the\nrun compl\n[…]\n The fallback wording is simplified to generic phrases (\"Still\nworking on it\") and the LLM prompts explicitly instruct the model to\nnever reveal package names or bundle identifiers.\n\nMade-with: Cursor",
"is_bot": false,
"headline": "Add bounded cron task planning and hide package names from user messages",
"author_name": "Sergio",
"author_login": "SergioChan",
"committed_at": "2026-03-11T22:18:32Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "2fc3035384b37228f7fdd8b1c94a811ff604c499",
"body": null,
"is_bot": false,
"headline": "Merge branch 'main' into startup-fix",
"author_name": "Sergio",
"author_login": "SergioChan",
"committed_at": "2026-03-11T21:20:50Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "883e8e7f685d509296065e1a4372080b47f73858",
"body": "…UX (#104)\n\n## Summary\n- Fix cron job management routing so users can refer to tasks\nconversationally (\"update the task\") without getting \"No scheduled jobs\nmatched\"\n- Prevent regex-based profile update from hijacking schedule management\nintents\n- Replace hardcoded cron start notification with model\n[…]\nnt tests, or the Testing section explains why I did\nnot.\n- [x] I updated docs, or confirmed no doc changes were needed.\n- [x] I confirmed the PR does not include secrets, credentials, or\nprivate data.",
"is_bot": false,
"headline": "Improve cron management routing, error reporting, and scheduled task …",
"author_name": "Sergio",
"author_login": "SergioChan",
"committed_at": "2026-03-11T21:20:30Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "0fbdda2e578ab3043398c2f92b65baff3ba69ee4",
"body": "Parse raw JSON bodies embedded in error message strings to extract\nstructured metadata (request_id, error code, type) and include a\nraw_response snippet in formatted output.\n\nMade-with: Cursor",
"is_bot": false,
"headline": "Improve error reporting for embedded JSON in provider responses",
"author_name": "Sergio",
"author_login": "SergioChan",
"committed_at": "2026-03-11T20:49:10Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d7d599aceea12241626c8107f171c7647f27c668",
"body": "- Inject existing job catalog into LLM prompts so the model can resolve\n anaphoric references (\"the task\", \"this job\") to actual job IDs\n- Add single-job fallback in executeCronManagementIntent when selector\n matches nothing but only one enabled job exists\n- Append \"Scheduled task started\" message\n[…]\nth model-generated natural\n language via narrateScheduledTaskStart\n- Remove all Chinese regex patterns from chat-assistant; non-English\n intent detection is now fully model-driven\n\nMade-with: Cursor",
"is_bot": false,
"headline": "Improve cron job management routing and scheduled task UX",
"author_name": "Sergio",
"author_login": "SergioChan",
"committed_at": "2026-03-11T20:47:48Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "9b3ce9763c1fd7b8acb892f1191c3b510e35bd43",
"body": "Physical devices lack a reliable way to input Unicode text (emoji,\nCJK, etc.) via ADB. The clipboard path fails when `adb shell cmd\nclipboard` is unimplemented, and the third-party ADB Keyboard is\nrarely pre-installed.\n\nThis adds a minimal Android InputMethodService (`ai.openpocket.ime`)\nthat recei\n[…]\n auto-installs helper IME on physical devices\n- test/adb-runtime.test.mjs: 10 new unit tests covering the full\n fallback chain, base64 encoding, IME restore, and exported utilities\n\nMade-with: Cursor",
"is_bot": false,
"headline": "Add OpenPocket helper IME for reliable Unicode text input",
"author_name": "Sergio",
"author_login": "SergioChan",
"committed_at": "2026-03-11T17:06:24Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "de4c8fe5b08efba842611d54441e36dabb101978",
"body": "Preserve upstream model error details in CLI, runtime logs, and chat fallbacks so request IDs are shown alongside the actual failure reason for debugging.\n\nMade-with: Cursor",
"is_bot": false,
"headline": "Improve provider error reporting",
"author_name": "Sergio",
"author_login": "SergioChan",
"committed_at": "2026-03-11T04:47:18Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0000227df715e845c557ccbcd75cb6ee2b1bc5a2",
"body": "…x runs\n\n don’t crash when OPENPOCKET_HOME isn’t writable\n- keep bundled and workspace skills loading unchanged",
"is_bot": false,
"headline": "- guard SkillLoader’s local skills path with a try/catch so CI/sandbo…",
"author_name": "shrey",
"author_login": "shrey32",
"committed_at": "2026-03-10T21:34:53Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e278643c8358f101be24711ad9ce6176e551bf2c",
"body": "## Summary\n- add the Reddit community link to the README top link row\n- change the docs-site header to show GitHub, Discord, and Reddit as\ntop-right social icons\n- replace the temporary text-based Discord nav item with icon-based\ncommunity links\n\n## Why\nThe project now needs both Discord and Reddit \n[…]\nnt tests, or the Testing section explains why I did\nnot.\n- [x] I updated docs, or confirmed no doc changes were needed.\n- [x] I confirmed the PR does not include secrets, credentials, or\nprivate data.",
"is_bot": false,
"headline": "docs: add Reddit community links (#102)",
"author_name": "Sergio",
"author_login": "SergioChan",
"committed_at": "2026-03-10T18:32:39Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "0660d19a34c27c90a25fad4550018309473f0a73",
"body": null,
"is_bot": false,
"headline": "docs: add Reddit community links",
"author_name": "Yuheng",
"author_login": "SergioChan",
"committed_at": "2026-03-10T18:27:02Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "105984f940c138b002017afeb03fba5505fbc4cf",
"body": "## Summary\n- add the Discord invite link to the website top-right navigation\n- add the same Discord invite link to the README top link row\n- keep the change scoped to website discovery and README community\nnavigation\n\n## Why\nUsers need a visible path to the community Discord from both the docs\nsite \n[…]\nnt tests, or the Testing section explains why I did\nnot.\n- [x] I updated docs, or confirmed no doc changes were needed.\n- [x] I confirmed the PR does not include secrets, credentials, or\nprivate data.",
"is_bot": false,
"headline": "docs: add Discord community links (#101)",
"author_name": "Sergio",
"author_login": "SergioChan",
"committed_at": "2026-03-10T18:02:58Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "283809bca82d8694ebb2c570369f09c02575a834",
"body": null,
"is_bot": false,
"headline": "docs: add Discord community links",
"author_name": "Yuheng",
"author_login": "SergioChan",
"committed_at": "2026-03-10T17:57:55Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "bf0c80531e42d09ac1181117e312a3c06903441c",
"body": null,
"is_bot": false,
"headline": "Update video sources in README.md",
"author_name": "Sergio",
"author_login": "SergioChan",
"committed_at": "2026-03-10T17:09:37Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "734655f3acbe58b2cae9035e29bd1473ae136bcf",
"body": null,
"is_bot": false,
"headline": "Update README.md",
"author_name": "Sergio",
"author_login": "SergioChan",
"committed_at": "2026-03-10T17:06:14Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4ba3ce3ada05529d7d79d93a5f397eece12c543a",
"body": "## Summary\n- replace the README Social demo video source with the stable public\ndemo asset URL\n- avoid committing expiring GitHub `private-user-images` signed URLs\ninto the README\n- keep the fix scoped to the current uncommitted README video-source\nchange\n\n## Why\nThe current uncommitted README edit \n[…]\nnt tests, or the Testing section explains why I did\nnot.\n- [x] I updated docs, or confirmed no doc changes were needed.\n- [x] I confirmed the PR does not include secrets, credentials, or\nprivate data.",
"is_bot": false,
"headline": "docs: restore stable README demo video URL (#100)",
"author_name": "Sergio",
"author_login": "SergioChan",
"committed_at": "2026-03-10T16:56:41Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "0a76e3e2a9623af2bf962aa073821ec6cdd71b7a",
"body": null,
"is_bot": false,
"headline": "docs: restore stable README demo video URL",
"author_name": "Yuheng",
"author_login": "SergioChan",
"committed_at": "2026-03-10T16:51:57Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "38cb326c84475d094094855662be85b61bdee51e",
"body": "Replaced video source for the Social section in README.md.\n\n## Summary\n<!-- Describe the change in 2-5 bullets. Focus on what changed. -->\n\n## Why\n<!-- Explain the problem, motivation, or product need behind the change.\n-->\n\n## Changes\n<!-- List the key implementation points, migrations, or rollout \n[…]\nnt tests, or the Testing section explains why I did\nnot.\n- [ ] I updated docs, or confirmed no doc changes were needed.\n- [ ] I confirmed the PR does not include secrets, credentials, or\nprivate data.",
"is_bot": false,
"headline": "Update video source for Social media section (#99)",
"author_name": "Sergio",
"author_login": "SergioChan",
"committed_at": "2026-03-10T16:45:15Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "6203e02f118760a108cba3388d620d5ac441a252",
"body": "Replaced video source for the Social section in README.md.",
"is_bot": false,
"headline": "Update video source for Social media section",
"author_name": "Sergio",
"author_login": "SergioChan",
"committed_at": "2026-03-10T16:42:07Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c222922d0bb0af5a3acd237cb960b150c73f6b15",
"body": "## Summary\n- refresh the README demos section into a media-rich grid layout\n- embed the demo videos directly in the README instead of only listing\nremote links\n- keep the change scoped to the uncommitted README edits currently in\nthe working tree\n\n## Why\nThe current working tree included another REA\n[…]\nnt tests, or the Testing section explains why I did\nnot.\n- [x] I updated docs, or confirmed no doc changes were needed.\n- [x] I confirmed the PR does not include secrets, credentials, or\nprivate data.",
"is_bot": false,
"headline": "docs: enrich README demo section (#98)",
"author_name": "Sergio",
"author_login": "SergioChan",
"committed_at": "2026-03-10T16:37:07Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "e4eef1d2e31748c1adfbe01bbb78b019daaa4419",
"body": null,
"is_bot": false,
"headline": "docs: enrich README demo section",
"author_name": "Yuheng",
"author_login": "SergioChan",
"committed_at": "2026-03-10T16:32:34Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1625766cb1c2c8af5460452411ebebde6463d9be",
"body": "## Summary\n- refresh the README positioning and structure for a clearer landing\npage experience\n- update the README CI badge and source clone command to the new\n`pockebot/openpocket` repository path\n- keep the README contribution and product overview sections aligned\nwith the current docs site\n\n## W\n[…]\nnt tests, or the Testing section explains why I did\nnot.\n- [x] I updated docs, or confirmed no doc changes were needed.\n- [x] I confirmed the PR does not include secrets, credentials, or\nprivate data.",
"is_bot": false,
"headline": "docs: refresh README landing page (#97)",
"author_name": "Sergio",
"author_login": "SergioChan",
"committed_at": "2026-03-10T16:16:47Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "3c883180af6ad7b558bdc96e9331b9fd192ef6e2",
"body": null,
"is_bot": false,
"headline": "docs: refresh README landing page",
"author_name": "Yuheng",
"author_login": "SergioChan",
"committed_at": "2026-03-10T16:11:44Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0555bf0ba1fdd8caec4b3cd67aec73d593c0a468",
"body": "## Summary\n- update VitePress GitHub links to point at the pockebot organization\nrepo\n- update the frontend quickstart clone command to the new SSH remote\n- keep the frontend documentation aligned with the repository move\n\n## Why\nThe repository moved under the `pockebot` organization, so frontend\nli\n[…]\nnt tests, or the Testing section explains why I did\nnot.\n- [x] I updated docs, or confirmed no doc changes were needed.\n- [x] I confirmed the PR does not include secrets, credentials, or\nprivate data.",
"is_bot": false,
"headline": "docs(frontend): update GitHub repository links (#96)",
"author_name": "Sergio",
"author_login": "SergioChan",
"committed_at": "2026-03-10T15:51:34Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "cacd4d11e2f799aa0d699fd9980d8397d43a3075",
"body": null,
"is_bot": false,
"headline": "docs(frontend): update GitHub repository links",
"author_name": "Yuheng",
"author_login": "SergioChan",
"committed_at": "2026-03-10T15:42:25Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ef93ba7c584fae0ad9d9d5119006c98d641942d8",
"body": null,
"is_bot": false,
"headline": "Use chat context for contextual schedule updates (#95)",
"author_name": "Frank",
"author_login": "tsubasakong",
"committed_at": "2026-03-09T18:13:04Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b9a6c6a0f0a44a878be7574795e1c340d36bf2c6",
"body": "…ermission-dialogs\n\nfix(agent): correct permission dialog handling — evaluate task relevance instead of blind escalation",
"is_bot": false,
"headline": "Merge pull request #94 from SergioChan/fix/auto-dismiss-unnecessary-p…",
"author_name": "Sergio",
"author_login": "SergioChan",
"committed_at": "2026-03-09T16:15:11Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f85a2dd7747864389cbca81304aa28b2b6895651",
"body": null,
"is_bot": false,
"headline": "test(ci): align permission dialog expectations",
"author_name": "Yuheng",
"author_login": "SergioChan",
"committed_at": "2026-03-09T16:07:23Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "9b8c1a60e86957d9491029939e1029facc323c16",
"body": "…nce instead of blind escalation\n\nPreviously, when an Android permission dialog appeared (e.g., Chrome requesting\nmicrophone on first launch), two mechanisms caused incorrect behavior:\n\n1. The capability probe auto-escalated ANY detected permission signal to Human\n Auth without considering whether\n[…]\nstill calls request_human_auth while a permission\n dialog is showing, return corrective feedback guiding it to handle the\n dialog locally instead of auto-rejecting and escalating.\n\nMade-with: Cursor",
"is_bot": false,
"headline": "fix(agent): correct permission dialog handling — evaluate task releva…",
"author_name": "travis.wang",
"author_login": "wowill",
"committed_at": "2026-03-09T15:03:28Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "928de542100e44f8b12f878f0d98dba0fdfcecfb",
"body": "…argets\"\n\nThis reverts commit de780e8963a85f8742023ae78f4320da44afcb3f.",
"is_bot": false,
"headline": "Revert \"fix(agent): auto-approve all permission dialogs on emulator t…",
"author_name": "travis.wang",
"author_login": "wowill",
"committed_at": "2026-03-09T14:13:49Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "de780e8963a85f8742023ae78f4320da44afcb3f",
"body": "On emulator targets, Android permission dialogs (microphone, camera,\nlocation, photos, etc.) should be auto-approved locally since there is\nno real user data to protect. Previously, only capability=\"permission\"\nwas auto-approved; other capabilities like \"microphone\" or \"camera\"\nwould auto-reject the\n[…]\n (camera/microphone surfaces are safe to use locally)\n\nPhysical device behavior is unchanged — non-permission capabilities\nstill reject locally and delegate to human auth as before.\n\nMade-with: Cursor",
"is_bot": false,
"headline": "fix(agent): auto-approve all permission dialogs on emulator targets",
"author_name": "travis.wang",
"author_login": "wowill",
"committed_at": "2026-03-09T14:12:03Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "18533437368da0da1486e597d905fee222095bb8",
"body": null,
"is_bot": false,
"headline": "Improve cron schedule management routing and matching (#93)",
"author_name": "Frank",
"author_login": "tsubasakong",
"committed_at": "2026-03-09T08:07:37Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0fa1c10ce0397947658cdecaf4cef63c6c88bf46",
"body": "Generalize language handling and switch skills to model-driven routing",
"is_bot": false,
"headline": "Merge pull request #91 from SergioChan/codex/doc-language-cleanup",
"author_name": "Sergio",
"author_login": "SergioChan",
"committed_at": "2026-03-09T05:23:08Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "6b7201680e4ea61c5fc632218f7e70911179c473",
"body": null,
"is_bot": false,
"headline": "agent: remove default skill index item cap",
"author_name": "Yuheng",
"author_login": "SergioChan",
"committed_at": "2026-03-09T05:04:32Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "060ea1c90adcb30ba7378670d90c237bebb57c02",
"body": null,
"is_bot": false,
"headline": "fix: restore chinese particle trimming for assistant names",
"author_name": "Yuheng",
"author_login": "SergioChan",
"committed_at": "2026-03-09T04:49:00Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "9f184cb57762198220b03edab8c7c73274e00f66",
"body": null,
"is_bot": false,
"headline": "chore: clean locale plumbing and adb endpoint helpers",
"author_name": "Yuheng",
"author_login": "SergioChan",
"committed_at": "2026-03-09T04:40:55Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "7b5fd23154aa7825b5a0b121abdda406dd028913",
"body": null,
"is_bot": false,
"headline": "agent: align skill routing with openclaw",
"author_name": "Yuheng",
"author_login": "SergioChan",
"committed_at": "2026-03-09T04:25:25Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a838582d133cb8d68561beb0d2553be32f6ddc2a",
"body": null,
"is_bot": false,
"headline": "agent: switch skills to model-driven selection",
"author_name": "Yuheng",
"author_login": "SergioChan",
"committed_at": "2026-03-09T04:08:49Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "cf50afa2bdeedb6fef5195ed2f0dc8e75f9a6059",
"body": "… and readable triggers\n\n- Remove dangling semicolon in capabilityLabel left from zhMap deletion\n- Remove 8 void-locale dead parameters from function signatures and\n update all call sites (questionForStep, pickFallback,\n personaPresetFromAnswer, buildScheduledJobName, humanAuthSecurityNote,\n play\n[…]\nmat in BARE_SESSION_RESET_PROMPT.md\n- Fix downgradeShoppingClaimsWhenUnverified to use same-language\n replacement text for Chinese regex matches, preventing mixed-language\n output\n\nMade-with: Cursor",
"is_bot": false,
"headline": "fix: complete language cleanup with dead-param removal, compat fixes,…",
"author_name": "Yuheng",
"author_login": "SergioChan",
"committed_at": "2026-03-09T04:03:38Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "744e6b2de5d5d172b8b0ce2b5003ee905861eeda",
"body": null,
"is_bot": false,
"headline": "chore: doc language cleanup locale follow-up",
"author_name": "Yuheng",
"author_login": "SergioChan",
"committed_at": "2026-03-08T18:48:07Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "7855377a3833fe0eeec622fe190126099a39f1e2",
"body": null,
"is_bot": false,
"headline": "chore: doc language cleanup",
"author_name": "Yuheng",
"author_login": "SergioChan",
"committed_at": "2026-03-08T18:28:23Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c76ad9d8aa839aa9b2cbbd893bf2113d0068793d",
"body": "* docs: add telegram schedule cron plan\n\n* feat: add schedule intent routing\n\n* feat: add cron registry and schema\n\n* fix: harden cron registry compatibility\n\n* feat: add cron cli commands\n\n* feat: add schedule confirmation flow\n\n* feat: support wall-clock cron schedules\n\n* feat: add agent cron management tools\n\n* feat: add model-driven scheduled cron flow\n\n* fix: harden schedule extraction and cron DST handling\n\n* chore: drop docs artifacts from schedule PR",
"is_bot": false,
"headline": "Add model-driven scheduled cron flow for Telegram tasks (#90)",
"author_name": "Frank",
"author_login": "tsubasakong",
"committed_at": "2026-03-08T07:51:49Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c650fffaba537259f7a038da3629422ba89448a4",
"body": "…ording\n\ndocs: tighten multi-agent compliance wording",
"is_bot": false,
"headline": "Merge pull request #89 from SergioChan/codex/multi-agent-compliance-w…",
"author_name": "Sergio",
"author_login": "SergioChan",
"committed_at": "2026-03-07T18:02:59Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "65c4ad50a7d75d84af8374b2225bef02dfd13809",
"body": null,
"is_bot": false,
"headline": "docs: tighten multi-agent compliance wording",
"author_name": "Yuheng",
"author_login": "SergioChan",
"committed_at": "2026-03-07T17:57:44Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "600c4400cd0a82ef0995c04c9a70f81f5396eaf0",
"body": null,
"is_bot": false,
"headline": "docs: add contribution guide and PR template enforcement",
"author_name": "Yuheng",
"author_login": "SergioChan",
"committed_at": "2026-03-07T17:52:07Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "8deb9269de4414b599f0619ad63a7117073bf518",
"body": null,
"is_bot": false,
"headline": "Merge pull request #87 from SergioChan/feature/slack-channel-support",
"author_name": "Yuheng",
"author_login": "SergioChan",
"committed_at": "2026-03-07T17:42:09Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "99b65ee2979a4e20eb1aaa2f08ec4de1dc255fd2",
"body": null,
"is_bot": false,
"headline": "test(setup): stabilize optional channel prompts",
"author_name": "Yuheng",
"author_login": "SergioChan",
"committed_at": "2026-03-07T17:36:28Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "51263cc5b5619daae3f4cf843315a2503912dba7",
"body": "…i-target\n\nAdd multi-agent instance management and shared relay hub",
"is_bot": false,
"headline": "Merge pull request #88 from SergioChan/codex/orchestrator-worker-mult…",
"author_name": "Sergio",
"author_login": "SergioChan",
"committed_at": "2026-03-07T17:29:59Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "454e918af119cebaa5a2a78e75b8876f970f326e",
"body": null,
"is_bot": false,
"headline": "docs: add multi-agent deployment patterns guide",
"author_name": "Yuheng",
"author_login": "SergioChan",
"committed_at": "2026-03-07T17:08:56Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "dc6777dbd01a2d2c1d15dd066257e82f1239485f",
"body": null,
"is_bot": false,
"headline": "docs: update multi-agent and CLI documentation",
"author_name": "Yuheng",
"author_login": "SergioChan",
"committed_at": "2026-03-07T06:43:48Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f1f94eb784ae7eed1e9b1dd842bb9bb2eca6657d",
"body": null,
"is_bot": false,
"headline": "fix(manager): harden multi-agent metadata handling",
"author_name": "Yuheng",
"author_login": "SergioChan",
"committed_at": "2026-03-07T06:24:30Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "fc15c64887d3c61ace2ece9e0c9b890f3a397275",
"body": "Add full Slack channel integration as a new channel adapter, following\nthe same pattern as Telegram, Discord, WhatsApp, and iMessage adapters.\n\n- Implement SlackAdapter using @slack/bolt with Socket Mode\n- Support DM messages, @mention in channels, slash commands, interactive buttons\n- Add proxy sup\n[…]\nding setup wizard with Slack configuration flow\n- Add Slack capabilities (markdown, threads, buttons, file upload)\n- Increase Socket Mode ping timeout to 30s for proxy compatibility\n\nMade-with: Cursor",
"is_bot": false,
"headline": "feat(channel): add Slack channel adapter with Socket Mode support",
"author_name": "travis.wang",
"author_login": "wowill",
"committed_at": "2026-03-07T05:39:06Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "5313e538fc2b17a620771a81d05f62d4a26ac253",
"body": null,
"is_bot": false,
"headline": "feat(human-auth): add shared relay hub for agents",
"author_name": "Yuheng",
"author_login": "SergioChan",
"committed_at": "2026-03-07T03:14:30Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "041443ab4b37190e9123bd25225a0ffed2017a27",
"body": null,
"is_bot": false,
"headline": "feat(dashboard): add manager dashboard overview",
"author_name": "Yuheng",
"author_login": "SergioChan",
"committed_at": "2026-03-07T03:03:10Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "13f863e99a275d33d1927add1ed5f27db0af2883",
"body": null,
"is_bot": false,
"headline": "feat(cli): add multi-agent registry and selection",
"author_name": "Yuheng",
"author_login": "SergioChan",
"committed_at": "2026-03-07T02:58:51Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "6c607911a6ec37aa5986792235e2429368c260f8",
"body": null,
"is_bot": false,
"headline": "fix(chat): remove visible [truncated] marker from progress updates",
"author_name": "Yuheng",
"author_login": "SergioChan",
"committed_at": "2026-03-06T05:59:45Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "9ed6b478db3affbcf256e06c78f714af7479a08b",
"body": "…tadata",
"is_bot": false,
"headline": "feat(agent): add runtime_info tool for authoritative runtime model me…",
"author_name": "Yuheng",
"author_login": "SergioChan",
"committed_at": "2026-03-06T05:53:37Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d6bb6b4f6bcd76a1262910ccbd2c53d98044a534",
"body": null,
"is_bot": false,
"headline": "chore(gateway): log task execution plan at info level",
"author_name": "Yuheng",
"author_login": "SergioChan",
"committed_at": "2026-03-06T05:53:20Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c55ffcac66182f9f0b1abdb9538642dfef68811b",
"body": null,
"is_bot": false,
"headline": "feat: add model-routed coding vs phone execution planning",
"author_name": "Yuheng",
"author_login": "SergioChan",
"committed_at": "2026-03-06T05:37:13Z",
"body_truncated": false,
"is_coding_agent": false
}
],
"releases_count": 0,
"commits_last_year": 573,
"latest_release_at": null,
"latest_release_tag": null,
"releases_from_tags": false,
"days_since_last_push": 11,
"active_weeks_last_year": 7,
"days_since_latest_release": null,
"mean_days_between_releases": null
},
"community": {
"has_readme": true,
"has_license": true,
"has_description": true,
"has_contributing": true,
"health_percentage": 62,
"has_issue_template": false,
"has_code_of_conduct": false,
"has_pull_request_template": true
},
"ecosystem": {
"packages": [
{
"name": "openpocket",
"exists": true,
"license": "MIT",
"keywords": [],
"ecosystem": "npm",
"matches_repo": false,
"registry_url": "https://www.npmjs.com/package/openpocket",
"is_deprecated": false,
"latest_version": "0.2.3",
"repository_url": "https://github.com/SergioChan/openpocket",
"versions_count": 4,
"total_downloads": null,
"dependents_count": null,
"deprecation_note": null,
"maintainers_count": 1,
"monthly_downloads": 37,
"first_published_at": "2026-02-18T22:34:09.367000Z",
"latest_published_at": "2026-03-02T18:25:57.122000Z",
"latest_version_yanked": null,
"days_since_latest_publish": 140
}
]
},
"popularity": {
"forks": 6,
"stars": 834,
"watchers": 3,
"fork_history": {
"days": [
{
"date": "2026-03-10",
"count": 1
},
{
"date": "2026-03-11",
"count": 1
},
{
"date": "2026-03-13",
"count": 1
},
{
"date": "2026-03-16",
"count": 1
},
{
"date": "2026-03-21",
"count": 1
},
{
"date": "2026-06-16",
"count": 1
}
],
"complete": true,
"collected": 6,
"total_forks": 6
},
"star_history": {
"days": [
{
"date": "2026-02-18",
"count": 1
},
{
"date": "2026-03-10",
"count": 2
},
{
"date": "2026-03-11",
"count": 40
},
{
"date": "2026-03-12",
"count": 128
},
{
"date": "2026-03-13",
"count": 96
},
{
"date": "2026-03-14",
"count": 39
},
{
"date": "2026-03-15",
"count": 36
},
{
"date": "2026-03-16",
"count": 35
},
{
"date": "2026-03-17",
"count": 40
},
{
"date": "2026-03-18",
"count": 29
},
{
"date": "2026-03-19",
"count": 33
},
{
"date": "2026-03-20",
"count": 33
},
{
"date": "2026-03-21",
"count": 32
},
{
"date": "2026-03-22",
"count": 30
},
{
"date": "2026-03-23",
"count": 29
},
{
"date": "2026-03-24",
"count": 35
},
{
"date": "2026-03-25",
"count": 36
},
{
"date": "2026-03-26",
"count": 39
},
{
"date": "2026-03-27",
"count": 42
},
{
"date": "2026-03-28",
"count": 27
},
{
"date": "2026-03-29",
"count": 28
},
{
"date": "2026-03-30",
"count": 13
},
{
"date": "2026-04-09",
"count": 1
},
{
"date": "2026-04-23",
"count": 1
},
{
"date": "2026-04-24",
"count": 2
},
{
"date": "2026-04-28",
"count": 1
},
{
"date": "2026-05-03",
"count": 1
},
{
"date": "2026-05-05",
"count": 2
},
{
"date": "2026-06-05",
"count": 1
},
{
"date": "2026-06-29",
"count": 1
},
{
"date": "2026-07-15",
"count": 1
}
],
"complete": true,
"collected": 834,
"total_stars": 834
},
"open_issues_and_prs": 14
},
"ai_readiness": {
"has_nix": false,
"example_dirs": [],
"has_llms_txt": false,
"has_dockerfile": true,
"has_mcp_signal": true,
"bootstrap_files": [
"Makefile"
],
"api_schema_files": [],
"has_devcontainer": false,
"typecheck_configs": [
"tsconfig.json"
],
"toolchain_manifests": [],
"largest_source_bytes": 841710,
"source_files_sampled": 189,
"oversized_source_files": 14,
"agent_instruction_files": [
"docs/reference/templates/AGENTS.md"
],
"agent_instruction_max_bytes": 3535
},
"dependencies": {
"manifests": [
"package.json"
],
"advisories": {
"error": null,
"scope": "published_package",
"source": "osv",
"findings": [
{
"name": "@mariozechner/pi-coding-agent",
"direct": true,
"version": "0.54.2",
"severity": "high",
"ecosystem": "npm",
"cvss_score": 7.3,
"advisory_ids": [
"GHSA-7v5m-pr3q-6453",
"GHSA-jfgx-wxx8-mp94",
"GHSA-r95r-rj6r-c39x"
],
"fixed_version": "0.78.1",
"advisory_count": 3,
"oldest_advisory_days": 34
},
{
"name": "undici",
"direct": false,
"version": "6.24.1",
"severity": "high",
"ecosystem": "npm",
"cvss_score": 7.5,
"advisory_ids": [
"GHSA-35p6-xmwp-9g52",
"GHSA-g8m3-5g58-fq7m",
"GHSA-p88m-4jfj-68fv",
"GHSA-vxpw-j846-p89q"
],
"fixed_version": "8.5.0",
"advisory_count": 4,
"oldest_advisory_days": 32
},
{
"name": "uuid",
"direct": false,
"version": "8.3.2",
"severity": "high",
"ecosystem": "npm",
"cvss_score": 7.5,
"advisory_ids": [
"GHSA-w5hq-g745-h8pq"
],
"fixed_version": "13.0.1",
"advisory_count": 1,
"oldest_advisory_days": 89
},
{
"name": "qs",
"direct": false,
"version": "6.14.2",
"severity": "moderate",
"ecosystem": "npm",
"cvss_score": 5.3,
"advisory_ids": [
"GHSA-q8mj-m7cp-5q26"
],
"fixed_version": "6.15.2",
"advisory_count": 1,
"oldest_advisory_days": 59
}
],
"collected": true,
"truncated": false,
"by_severity": {
"high": 3,
"moderate": 1
},
"advisory_count": 9,
"affected_count": 4,
"assessed_count": 508,
"assessed_package": "npm:openpocket@0.2.3",
"unassessed_count": 0,
"direct_affected_count": 1
},
"ecosystems": [
"npm"
],
"dependencies": [
{
"name": "@mariozechner/pi-agent-core",
"manifest": "package.json",
"ecosystem": "npm",
"version_constraint": "^0.54.1"
},
{
"name": "@mariozechner/pi-ai",
"manifest": "package.json",
"ecosystem": "npm",
"version_constraint": "^0.54.1"
},
{
"name": "@mariozechner/pi-coding-agent",
"manifest": "package.json",
"ecosystem": "npm",
"version_constraint": "^0.54.1"
},
{
"name": "@modelcontextprotocol/sdk",
"manifest": "package.json",
"ecosystem": "npm",
"version_constraint": "^1.26.0"
},
{
"name": "@sinclair/typebox",
"manifest": "package.json",
"ecosystem": "npm",
"version_constraint": "^0.34.48"
},
{
"name": "@slack/bolt",
"manifest": "package.json",
"ecosystem": "npm",
"version_constraint": "^4.6.0"
},
{
"name": "@slack/web-api",
"manifest": "package.json",
"ecosystem": "npm",
"version_constraint": "^7.14.1"
},
{
"name": "@types/qrcode",
"manifest": "package.json",
"ecosystem": "npm",
"version_constraint": "^1.5.6"
},
{
"name": "baileys",
"manifest": "package.json",
"ecosystem": "npm",
"version_constraint": "^6.7.21"
},
{
"name": "cron-parser",
"manifest": "package.json",
"ecosystem": "npm",
"version_constraint": "^5.5.0"
},
{
"name": "discord.js",
"manifest": "package.json",
"ecosystem": "npm",
"version_constraint": "^14.25.1"
},
{
"name": "node-telegram-bot-api",
"manifest": "package.json",
"ecosystem": "npm",
"version_constraint": "^0.66.0"
},
{
"name": "openai",
"manifest": "package.json",
"ecosystem": "npm",
"version_constraint": "^6.10.0"
},
{
"name": "qrcode",
"manifest": "package.json",
"ecosystem": "npm",
"version_constraint": "^1.5.4"
},
{
"name": "qrcode-terminal",
"manifest": "package.json",
"ecosystem": "npm",
"version_constraint": "^0.12.0"
},
{
"name": "sharp",
"manifest": "package.json",
"ecosystem": "npm",
"version_constraint": "^0.34.5"
},
{
"name": "zod",
"manifest": "package.json",
"ecosystem": "npm",
"version_constraint": "^3.25.76"
}
],
"all_dependencies": {
"error": "GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository",
"source": null,
"packages": [],
"collected": false,
"truncated": false,
"total_count": null,
"direct_count": null,
"indirect_count": null
}
},
"maintainership": {
"issues": {
"open_prs": 2,
"merged_prs": 84,
"open_issues": 12,
"closed_ratio": 0.478,
"closed_issues": 11,
"closed_unmerged_prs": 3
},
"bus_factor": 1,
"bot_contributors": 0,
"top_contributors": [
{
"type": "User",
"login": "SergioChan",
"commits": 436,
"avatar_url": "https://avatars.githubusercontent.com/u/10103766?v=4"
},
{
"type": "User",
"login": "tsubasakong",
"commits": 34,
"avatar_url": "https://avatars.githubusercontent.com/u/97429702?v=4"
},
{
"type": "User",
"login": "wowill",
"commits": 28,
"avatar_url": "https://avatars.githubusercontent.com/u/18542410?v=4"
},
{
"type": "User",
"login": "baryhuang",
"commits": 20,
"avatar_url": "https://avatars.githubusercontent.com/u/3003873?v=4"
},
{
"type": "User",
"login": "juntoku9",
"commits": 19,
"avatar_url": "https://avatars.githubusercontent.com/u/92097440?v=4"
},
{
"type": "User",
"login": "YingjingLu",
"commits": 15,
"avatar_url": "https://avatars.githubusercontent.com/u/17891021?v=4"
},
{
"type": "User",
"login": "rogerint54",
"commits": 7,
"avatar_url": "https://avatars.githubusercontent.com/u/214940240?v=4"
},
{
"type": "User",
"login": "flashclub",
"commits": 5,
"avatar_url": "https://avatars.githubusercontent.com/u/30818149?v=4"
},
{
"type": "User",
"login": "tt67890",
"commits": 4,
"avatar_url": "https://avatars.githubusercontent.com/u/262873253?v=4"
},
{
"type": "User",
"login": "reneehuang1",
"commits": 1,
"avatar_url": "https://avatars.githubusercontent.com/u/100229782?v=4"
}
],
"contributors_sampled": 13,
"top_contributor_share": 0.762
},
"quality_signals": {
"has_ci": true,
"has_tests": true,
"ci_workflows": [
"issue-fix.lock.yml",
"issue-plan.lock.yml",
"node-tests.yml",
"pr-template.yml"
],
"has_docs_dir": true,
"linter_configs": [],
"has_editorconfig": false,
"has_linter_config": false,
"has_precommit_config": false
},
"security_signals": {
"lockfiles": [
"package-lock.json"
],
"scorecard": {
"checks": [
{
"name": "Binary-Artifacts",
"score": 10,
"reason": "no binaries found in the repo",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#binary-artifacts"
},
{
"name": "Branch-Protection",
"score": null,
"reason": "internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#branch-protection"
},
{
"name": "CI-Tests",
"score": 10,
"reason": "11 out of 11 merged PRs checked by a CI test -- score normalized to 10",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#ci-tests"
},
{
"name": "CII-Best-Practices",
"score": 0,
"reason": "no effort to earn an OpenSSF best practices badge detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#cii-best-practices"
},
{
"name": "Code-Review",
"score": 1,
"reason": "Found 2/11 approved changesets -- score normalized to 1",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#code-review"
},
{
"name": "Contributors",
"score": 10,
"reason": "project has 10 contributing companies or organizations",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#contributors"
},
{
"name": "Dangerous-Workflow",
"score": 10,
"reason": "no dangerous workflow patterns detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dangerous-workflow"
},
{
"name": "Dependency-Update-Tool",
"score": 0,
"reason": "no update tool detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dependency-update-tool"
},
{
"name": "Fuzzing",
"score": 0,
"reason": "project is not fuzzed",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#fuzzing"
},
{
"name": "License",
"score": 10,
"reason": "license file detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#license"
},
{
"name": "Maintained",
"score": 10,
"reason": "17 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#maintained"
},
{
"name": "Packaging",
"score": null,
"reason": "packaging workflow not detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#packaging"
},
{
"name": "Pinned-Dependencies",
"score": 7,
"reason": "dependency not pinned by hash detected -- score normalized to 7",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#pinned-dependencies"
},
{
"name": "SAST",
"score": 0,
"reason": "SAST tool is not run on all commits -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#sast"
},
{
"name": "Security-Policy",
"score": 0,
"reason": "security policy file not detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#security-policy"
},
{
"name": "Signed-Releases",
"score": null,
"reason": "no releases found",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#signed-releases"
},
{
"name": "Token-Permissions",
"score": 0,
"reason": "detected GitHub workflow tokens with excessive permissions",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#token-permissions"
},
{
"name": "Vulnerabilities",
"score": 0,
"reason": "144 existing vulnerabilities detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#vulnerabilities"
}
],
"commit": "d4dae3d30d6f7c9f6d004a377cf1f1d3400d0685",
"ran_at": "2026-07-21T15:48:35Z",
"aggregate_score": 4.3,
"scorecard_version": "v5.5.0"
},
"has_codeql_workflow": false,
"has_security_policy": false,
"has_dependabot_config": false
}
},
"config": {
"disabled_metrics": [],
"disabled_categories": [],
"disabled_components": {}
},
"source": {
"url": "https://github.com/pockebot/openpocket",
"host": "github.com",
"name": "openpocket",
"owner": "pockebot"
},
"metrics": {
"overall": {
"key": "overall",
"band": "moderate",
"name": "Overall health",
"note": null,
"notes": [],
"value": 54,
"inputs": {
"security": 47,
"vitality": 38,
"community": 65,
"governance": 45,
"engineering": 77
},
"components": []
},
"categories": [
{
"key": "vitality",
"band": "at_risk",
"name": "Vitality",
"value": 38,
"weight": 0.22,
"metrics": [
{
"key": "development_activity",
"band": "moderate",
"name": "Development activity",
"note": null,
"notes": [],
"value": 62,
"inputs": {
"commits_last_year": 573,
"human_commit_share": 1,
"days_since_last_push": 11,
"active_weeks_last_year": 7
},
"components": [
{
"key": "push_recency",
"name": "Push recency",
"detail": "last push 11 days ago",
"points": 28.8,
"status": "partial",
"details": [
{
"code": "push_recency",
"params": {
"days": 11
}
}
],
"max_points": 36
},
{
"key": "commit_cadence",
"name": "Commit cadence",
"detail": "7/52 weeks with commits",
"points": 4.8,
"status": "partial",
"details": [
{
"code": "commit_cadence_weeks",
"params": {
"weeks": 7
}
}
],
"max_points": 36
},
{
"key": "commit_volume",
"name": "Commit volume",
"detail": "573 commits in the last year",
"points": 18,
"status": "met",
"details": [
{
"code": "commits_last_year",
"params": {
"count": 573
}
}
],
"max_points": 18
},
{
"key": "openssf_scorecard_maintained",
"name": "OpenSSF Scorecard: Maintained",
"detail": "17 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10",
"points": 10,
"status": "met",
"details": [],
"max_points": 10
}
]
},
{
"key": "release_discipline",
"band": "critical",
"name": "Release discipline",
"note": "Excluded from scoring (no data or not applicable): OpenSSF Scorecard: Signed-Releases. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"openssf_scorecard_signed_releases"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 1,
"inputs": {
"releases_count": 0
},
"components": [
{
"key": "ships_releases",
"name": "Ships releases",
"detail": "no releases published",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_releases_published",
"params": {}
}
],
"max_points": 27
},
{
"key": "release_recency",
"name": "Release recency",
"detail": "no releases",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_releases",
"params": {}
}
],
"max_points": 36
},
{
"key": "release_cadence",
"name": "Release cadence",
"detail": "no releases",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_releases",
"params": {}
}
],
"max_points": 27
},
{
"key": "openssf_scorecard_signed_releases",
"name": "OpenSSF Scorecard: Signed-Releases",
"detail": "no releases found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 10
}
]
},
{
"key": "abandonment",
"band": "excellent",
"name": "Abandonment",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"cap": null,
"state": "unverified",
"guards": [],
"signals": [],
"red_flag": false,
"multiplier_pct": 100,
"declared_reason": null,
"unverified_reason": "repository_too_young",
"unanswered_open_prs": null,
"unanswered_open_issues": null,
"days_since_last_merged_pr": null,
"days_since_last_human_commit": null,
"days_since_last_human_commit_is_floor": false
},
"components": [
{
"key": "project_is_still_maintained",
"name": "Project is still maintained",
"detail": "maintenance record not established from the collected data",
"points": 100,
"status": "met",
"details": [
{
"code": "abandonment_unverified",
"params": {}
}
],
"max_points": 100
}
]
}
],
"description": "Is the project alive — is code being written and are releases shipping?"
},
{
"key": "community",
"band": "moderate",
"name": "Community & Adoption",
"value": 65,
"weight": 0.18,
"metrics": [
{
"key": "popularity",
"band": "moderate",
"name": "Popularity & adoption",
"note": null,
"notes": [],
"value": 55,
"inputs": {
"forks": 6,
"stars": 834,
"watchers": 3,
"growth_state": "organic",
"growth_factor_pct": 100
},
"components": [
{
"key": "stars",
"name": "Stars",
"detail": "834 stars",
"points": 47.4,
"status": "partial",
"details": [
{
"code": "stars",
"params": {
"count": 834
}
}
],
"max_points": 60
},
{
"key": "forks",
"name": "Forks",
"detail": "6 forks",
"points": 5.8,
"status": "partial",
"details": [
{
"code": "forks",
"params": {
"count": 6
}
}
],
"max_points": 25
},
{
"key": "watchers",
"name": "Watchers",
"detail": "3 watchers",
"points": 1.7,
"status": "partial",
"details": [
{
"code": "watchers",
"params": {
"count": 3
}
}
],
"max_points": 15
}
]
},
{
"key": "community_health",
"band": "good",
"name": "Community health",
"note": null,
"notes": [],
"value": 77,
"inputs": {
"has_readme": true,
"has_license": true,
"has_contributing": true,
"has_issue_template": false,
"has_code_of_conduct": false,
"has_pull_request_template": true
},
"components": [
{
"key": "readme",
"name": "README",
"detail": null,
"points": 22.5,
"status": "met",
"details": [],
"max_points": 22.5
},
{
"key": "license",
"name": "License",
"detail": "recognized license (MIT)",
"points": 22.5,
"status": "met",
"details": [
{
"code": "license_standard",
"params": {}
},
{
"code": "license_spdx",
"params": {
"spdx": "MIT"
}
}
],
"max_points": 22.5
},
{
"key": "contributing_guide",
"name": "CONTRIBUTING guide",
"detail": null,
"points": 18,
"status": "met",
"details": [],
"max_points": 18
},
{
"key": "code_of_conduct",
"name": "Code of conduct",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 13.5
},
{
"key": "issue_template",
"name": "Issue template",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.2
},
{
"key": "pr_template",
"name": "PR template",
"detail": null,
"points": 6.3,
"status": "met",
"details": [],
"max_points": 6.3
}
]
}
],
"description": "Does the project have users, downloads, attention, and a welcoming setup for contributors?"
},
{
"key": "governance",
"band": "at_risk",
"name": "Sustainability & Governance",
"value": 45,
"weight": 0.24,
"metrics": [
{
"key": "maintainer_resilience",
"band": "at_risk",
"name": "Maintainer resilience (bus factor)",
"note": null,
"notes": [],
"value": 38,
"inputs": {
"bus_factor": 1,
"contributors_sampled": 13,
"top_contributor_share": 0.762
},
"components": [
{
"key": "bus_factor",
"name": "Bus factor",
"detail": "1 contributor(s) cover half of all commits",
"points": 9,
"status": "partial",
"details": [
{
"code": "bus_factor",
"params": {
"count": 1
}
}
],
"max_points": 54
},
{
"key": "commit_distribution",
"name": "Commit distribution",
"detail": "top contributor authored 76% of commits",
"points": 5.4,
"status": "partial",
"details": [
{
"code": "top_contributor_share",
"params": {
"share": 76
}
}
],
"max_points": 22.5
},
{
"key": "contributor_breadth",
"name": "Contributor breadth",
"detail": "13 contributors",
"points": 13.5,
"status": "met",
"details": [
{
"code": "contributors_sampled",
"params": {
"count": 13
}
}
],
"max_points": 13.5
},
{
"key": "openssf_scorecard_contributors",
"name": "OpenSSF Scorecard: Contributors",
"detail": "project has 10 contributing companies or organizations",
"points": 10,
"status": "met",
"details": [],
"max_points": 10
}
]
},
{
"key": "responsiveness",
"band": "moderate",
"name": "Issue & PR responsiveness",
"note": null,
"notes": [],
"value": 61,
"inputs": {
"merged_prs": 84,
"open_issues": 12,
"closed_issues": 11,
"issue_closed_ratio": 0.478,
"closed_unmerged_prs": 3
},
"components": [
{
"key": "issue_resolution",
"name": "Issue resolution",
"detail": "48% of issues closed",
"points": 22.3,
"status": "partial",
"details": [
{
"code": "issues_closed_share",
"params": {
"share": 48
}
}
],
"max_points": 46.75
},
{
"key": "pr_acceptance",
"name": "PR acceptance",
"detail": "84/87 decided PRs merged",
"points": 36.9,
"status": "partial",
"details": [
{
"code": "decided_prs_merged",
"params": {
"merged": 84,
"decided": 87
}
}
],
"max_points": 38.25
},
{
"key": "openssf_scorecard_code_review",
"name": "OpenSSF Scorecard: Code-Review",
"detail": "Found 2/11 approved changesets -- score normalized to 1",
"points": 1.5,
"status": "partial",
"details": [],
"max_points": 15
}
]
},
{
"key": "stewardship",
"band": "at_risk",
"name": "Ownership & stewardship",
"note": null,
"notes": [],
"value": 39,
"inputs": {
"followers": 4,
"owner_type": "Organization",
"is_verified": null,
"owner_login": "pockebot",
"public_repos": 2,
"account_age_days": 150
},
"components": [
{
"key": "ownership_backing",
"name": "Ownership backing",
"detail": "organization-owned",
"points": 30,
"status": "met",
"details": [
{
"code": "owner_organization",
"params": {}
}
],
"max_points": 30
},
{
"key": "verified_domain",
"name": "Verified domain",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 20
},
{
"key": "owner_reach",
"name": "Owner reach",
"detail": "4 followers of pockebot",
"points": 5,
"status": "partial",
"details": [
{
"code": "owner_followers",
"params": {
"count": 4,
"login": "pockebot"
}
}
],
"max_points": 25
},
{
"key": "track_record",
"name": "Track record",
"detail": "2 public repos, account ~0 yr old",
"points": 4.3,
"status": "partial",
"details": [
{
"code": "public_repos",
"params": {
"count": 2
}
},
{
"code": "account_age_years",
"params": {
"years": 0
}
}
],
"max_points": 25
}
]
}
],
"description": "Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?"
},
{
"key": "engineering",
"band": "good",
"name": "Engineering Quality",
"value": 77,
"weight": 0.2,
"metrics": [
{
"key": "engineering_practices",
"band": "moderate",
"name": "Engineering practices",
"note": null,
"notes": [],
"value": 68,
"inputs": {
"has_ci": true,
"has_tests": true,
"has_editorconfig": false,
"has_linter_config": false,
"has_precommit_config": false
},
"components": [
{
"key": "ci_workflows",
"name": "CI workflows",
"detail": "4 workflow(s)",
"points": 24,
"status": "met",
"details": [
{
"code": "ci_workflows",
"params": {
"count": 4
}
}
],
"max_points": 24
},
{
"key": "tests_present",
"name": "Tests present",
"detail": null,
"points": 24,
"status": "met",
"details": [],
"max_points": 24
},
{
"key": "linter_config",
"name": "Linter config",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 16
},
{
"key": "pre_commit_hooks",
"name": "Pre-commit hooks",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 9.6
},
{
"key": "editorconfig",
"name": ".editorconfig",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 6.4
},
{
"key": "openssf_scorecard_ci_tests",
"name": "OpenSSF Scorecard: CI-Tests",
"detail": "11 out of 11 merged PRs checked by a CI test -- score normalized to 10",
"points": 20,
"status": "met",
"details": [],
"max_points": 20
}
]
},
{
"key": "documentation",
"band": "excellent",
"name": "Documentation",
"note": null,
"notes": [],
"value": 90,
"inputs": {
"topics": [],
"has_wiki": true,
"homepage": "https://openpocket.ai",
"has_readme": true,
"has_docs_dir": true,
"has_description": true
},
"components": [
{
"key": "readme",
"name": "README",
"detail": null,
"points": 30,
"status": "met",
"details": [],
"max_points": 30
},
{
"key": "documentation_directory",
"name": "Documentation directory",
"detail": null,
"points": 25,
"status": "met",
"details": [],
"max_points": 25
},
{
"key": "documentation_homepage_site",
"name": "Documentation / homepage site",
"detail": "https://openpocket.ai",
"points": 15,
"status": "met",
"details": [],
"max_points": 15
},
{
"key": "repository_description",
"name": "Repository description",
"detail": null,
"points": 10,
"status": "met",
"details": [],
"max_points": 10
},
{
"key": "topics",
"name": "Topics",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
},
{
"key": "wiki",
"name": "Wiki",
"detail": null,
"points": 10,
"status": "met",
"details": [],
"max_points": 10
}
]
}
],
"description": "Are baseline engineering and documentation practices in place?"
},
{
"key": "security",
"band": "at_risk",
"name": "Security",
"value": 47,
"weight": 0.16,
"metrics": [
{
"key": "security_posture",
"band": "at_risk",
"name": "Security posture",
"note": "Excluded from scoring (no data or not applicable): Branch-Protection, Packaging, Signed-Releases. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"branch_protection",
"packaging",
"signed_releases"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 43,
"inputs": {
"source": "openssf_scorecard",
"checks_evaluated": 15,
"scorecard_version": "v5.5.0",
"checks_inconclusive": 3,
"scorecard_aggregate": 4.3
},
"components": [
{
"key": "binary_artifacts",
"name": "Binary-Artifacts",
"detail": "no binaries found in the repo",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "branch_protection",
"name": "Branch-Protection",
"detail": "internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 7.5
},
{
"key": "ci_tests",
"name": "CI-Tests",
"detail": "11 out of 11 merged PRs checked by a CI test -- score normalized to 10",
"points": 2.5,
"status": "met",
"details": [],
"max_points": 2.5
},
{
"key": "cii_best_practices",
"name": "CII-Best-Practices",
"detail": "no effort to earn an OpenSSF best practices badge detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 2.5
},
{
"key": "code_review",
"name": "Code-Review",
"detail": "Found 2/11 approved changesets -- score normalized to 1",
"points": 0.8,
"status": "partial",
"details": [],
"max_points": 7.5
},
{
"key": "contributors",
"name": "Contributors",
"detail": "project has 10 contributing companies or organizations",
"points": 2.5,
"status": "met",
"details": [],
"max_points": 2.5
},
{
"key": "dangerous_workflow",
"name": "Dangerous-Workflow",
"detail": "no dangerous workflow patterns detected",
"points": 10,
"status": "met",
"details": [],
"max_points": 10
},
{
"key": "dependency_update_tool",
"name": "Dependency-Update-Tool",
"detail": "no update tool detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "fuzzing",
"name": "Fuzzing",
"detail": "project is not fuzzed",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "license",
"name": "License",
"detail": "license file detected",
"points": 2.5,
"status": "met",
"details": [],
"max_points": 2.5
},
{
"key": "maintained",
"name": "Maintained",
"detail": "17 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "packaging",
"name": "Packaging",
"detail": "packaging workflow not detected",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 5
},
{
"key": "pinned_dependencies",
"name": "Pinned-Dependencies",
"detail": "dependency not pinned by hash detected -- score normalized to 7",
"points": 3.5,
"status": "partial",
"details": [],
"max_points": 5
},
{
"key": "sast",
"name": "SAST",
"detail": "SAST tool is not run on all commits -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "security_policy",
"name": "Security-Policy",
"detail": "security policy file not detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "signed_releases",
"name": "Signed-Releases",
"detail": "no releases found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 7.5
},
{
"key": "token_permissions",
"name": "Token-Permissions",
"detail": "detected GitHub workflow tokens with excessive permissions",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "vulnerabilities",
"name": "Vulnerabilities",
"detail": "144 existing vulnerabilities detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
}
]
},
{
"key": "dependency_advisories",
"band": "moderate",
"name": "Dependency advisories",
"note": "Matched the npm:openpocket@0.2.3 runtime dependency closure — what installing the published package pulls in — 508 packages. Reachability is not analyzed.",
"notes": [
{
"code": "advisories_scope_published",
"params": {
"package": "npm:openpocket@0.2.3",
"assessed": 508
}
},
{
"code": "advisories_reachability",
"params": {}
}
],
"value": 62,
"inputs": {
"source": "osv",
"advisories": 9,
"affected_packages": 4,
"assessed_packages": 508,
"unassessed_packages": 0,
"affected_by_severity": "high 3, moderate 1",
"direct_affected_packages": 1
},
"components": [
{
"key": "direct_dependencies_free_of_known_advisories",
"name": "Direct dependencies free of known advisories",
"detail": "1 affected: @mariozechner/pi-coding-agent 0.54.2 (high 7.3)",
"points": 14.6,
"status": "partial",
"details": [
{
"code": "advisories_affected",
"params": {
"count": 1,
"packages": "@mariozechner/pi-coding-agent 0.54.2 (high 7.3)"
}
}
],
"max_points": 35
},
{
"key": "indirect_dependencies_free_of_known_advisories",
"name": "Indirect dependencies free of known advisories",
"detail": "3 affected: undici 6.24.1 (high 7.5), uuid 8.3.2 (high 7.5), qs 6.14.2 (moderate 5.3)",
"points": 7.6,
"status": "partial",
"details": [
{
"code": "advisories_affected",
"params": {
"count": 3,
"packages": "undici 6.24.1 (high 7.5), uuid 8.3.2 (high 7.5), qs 6.14.2 (moderate 5.3)"
}
}
],
"max_points": 25
},
{
"key": "no_advisories_left_outstanding",
"name": "No advisories left outstanding",
"detail": "no advisory has been public longer than 90 days",
"points": 40,
"status": "met",
"details": [
{
"code": "advisories_none_stale",
"params": {
"days": 90
}
}
],
"max_points": 40
}
]
},
{
"key": "malicious_dependencies",
"band": "excellent",
"name": "Malicious dependencies",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"source": "osv",
"meaning": "reported as a malicious package by the OpenSSF corpus; the remedy is removal or moving off the compromised name, never an upgrade of the same artifact. Versions the registry has since pulled are listed but not scored",
"packages": [],
"red_flag": false,
"assessed_packages": 508,
"malicious_packages": 0,
"direct_malicious_packages": 0,
"withdrawn_malicious_packages": 0,
"installable_malicious_packages": 0
},
"components": [
{
"key": "no_dependency_reported_as_a_malicious_package",
"name": "No dependency reported as a malicious package",
"detail": "no dependency is reported as a malicious package",
"points": 100,
"status": "met",
"details": [
{
"code": "no_malicious_dependencies",
"params": {}
}
],
"max_points": 100
}
]
},
{
"key": "high_risk_jurisdiction_exposure",
"band": "excellent",
"name": "High-Risk Jurisdiction Exposure",
"note": "Only high-confidence self-published location evidence affects this multiplier. Ambiguous matches are review-only; country evidence is not proof of nationality, citizenship, legal registration, malicious intent, or sanctions status.",
"notes": [
{
"code": "jurisdiction_evidence_limits",
"params": {}
}
],
"value": 100,
"inputs": {
"meaning": "self-published location evidence; not nationality or citizenship",
"red_flag": false,
"exposures": [],
"policy_countries": [
"Russia",
"Iran",
"North Korea"
],
"review_only_matches": 0,
"assessed_self_published_locations": 13
},
"components": [
{
"key": "policy_exposure_multiplier",
"name": "Policy exposure multiplier",
"detail": "no confirmed policy-scope location match",
"points": 100,
"status": "met",
"details": [
{
"code": "jurisdiction_no_match",
"params": {}
}
],
"max_points": 100
}
]
}
],
"description": "Are visible security and supply-chain practices strong, with no malicious dependency and no unresolved high-risk jurisdiction exposure?"
},
{
"key": "ai_readiness",
"band": "good",
"name": "AI Readiness",
"value": 70,
"weight": 0,
"metrics": [
{
"key": "ai_agent_context",
"band": "excellent",
"name": "Agent context & guidance",
"note": null,
"notes": [],
"value": 85,
"inputs": {
"has_llms_txt": false,
"legible_history_share": 0.76,
"agent_instruction_files": [
"docs/reference/templates/AGENTS.md"
],
"agent_instruction_max_bytes": 3535
},
"components": [
{
"key": "agent_instructions",
"name": "Agent instructions",
"detail": "docs/reference/templates/AGENTS.md",
"points": 45,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "docs/reference/templates/AGENTS.md"
}
}
],
"max_points": 45
},
{
"key": "machine_readable_docs_llms_txt",
"name": "Machine-readable docs (llms.txt)",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
},
{
"key": "legible_commit_history",
"name": "Legible commit history",
"detail": "76 of 100 human commits state their intent (structured subject or explanatory body)",
"points": 40,
"status": "met",
"details": [
{
"code": "legible_history",
"params": {
"legible": 76,
"sampled": 100
}
}
],
"max_points": 40
}
]
},
{
"key": "ai_verify_loop",
"band": "good",
"name": "Verify loop (build / test / typecheck)",
"note": null,
"notes": [],
"value": 74,
"inputs": {
"has_nix": false,
"has_tests": true,
"lockfiles": [
"package-lock.json"
],
"has_dockerfile": true,
"typed_language": false,
"bootstrap_files": [
"Makefile"
],
"has_devcontainer": false,
"has_linter_config": false,
"typecheck_configs": [
"tsconfig.json"
],
"agent_commit_share": 0.03,
"toolchain_manifests": [],
"dependency_bot_commit_share": 0
},
"components": [
{
"key": "one_command_bootstrap",
"name": "One-command bootstrap",
"detail": "Makefile",
"points": 18,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "Makefile"
}
}
],
"max_points": 18
},
{
"key": "automated_tests",
"name": "Automated tests",
"detail": null,
"points": 22,
"status": "met",
"details": [],
"max_points": 22
},
{
"key": "lint_format_config",
"name": "Lint / format config",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 11
},
{
"key": "static_type_checking",
"name": "Static type checking",
"detail": "tsconfig.json",
"points": 11,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "tsconfig.json"
}
}
],
"max_points": 11
},
{
"key": "reproducible_environment",
"name": "Reproducible environment",
"detail": "Dockerfile, lockfile",
"points": 10,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "Dockerfile, lockfile"
}
}
],
"max_points": 10
},
{
"key": "demonstrated_agent_practice",
"name": "Demonstrated agent practice",
"detail": "3 of the last 100 commits agent-authored or agent-credited",
"points": 6,
"status": "partial",
"details": [
{
"code": "agent_authored_commits",
"params": {
"count": 3,
"sampled": 100
}
}
],
"max_points": 10
},
{
"key": "automated_maintenance",
"name": "Automated maintenance",
"detail": "no automated dependency updates observed",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_dependency_automation",
"params": {}
}
],
"max_points": 8
},
{
"key": "openssf_scorecard_pinned_dependencies",
"name": "OpenSSF Scorecard: Pinned-Dependencies",
"detail": "dependency not pinned by hash detected -- score normalized to 7",
"points": 7,
"status": "partial",
"details": [],
"max_points": 10
}
]
},
{
"key": "ai_code_legibility",
"band": "good",
"name": "Code legibility for models",
"note": null,
"notes": [],
"value": 78,
"inputs": {
"primary_language": "JavaScript",
"largest_source_bytes": 841710,
"source_files_sampled": 189,
"oversized_source_files": 14
},
"components": [
{
"key": "type_checkable_code",
"name": "Type-checkable code",
"detail": "JavaScript with type-check config (tsconfig.json)",
"points": 27,
"status": "partial",
"details": [
{
"code": "typecheck_config_language",
"params": {
"files": "tsconfig.json",
"language": "JavaScript"
}
}
],
"max_points": 45
},
{
"key": "manageable_file_sizes",
"name": "Manageable file sizes",
"detail": "14/189 source files over 60KB",
"points": 50.9,
"status": "partial",
"details": [
{
"code": "oversized_source_files",
"params": {
"kb": 60,
"sampled": 189,
"oversized": 14
}
}
],
"max_points": 55
}
]
},
{
"key": "ai_interfaces",
"band": "critical",
"name": "Machine-readable interfaces",
"note": null,
"notes": [],
"value": 20,
"inputs": {
"example_dirs": [],
"has_mcp_signal": true,
"api_schema_files": []
},
"components": [
{
"key": "api_schema_openapi_graphql_proto",
"name": "API schema (OpenAPI/GraphQL/proto)",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 40
},
{
"key": "mcp_server",
"name": "MCP server",
"detail": null,
"points": 20,
"status": "met",
"details": [],
"max_points": 20
},
{
"key": "runnable_examples",
"name": "Runnable examples",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 40
}
]
}
],
"description": "How well is the repo equipped to be developed and maintained with AI coding agents? An independent, experimental badge — weight 0.0, so it is surfaced on its own and does not affect the overall health score."
}
],
"metrics_version": "1.13.0"
},
"warnings": [
"npm package 'openpocket' points at a different repository (https://github.com/SergioChan/openpocket); excluded from ecosystem scoring",
"GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository"
],
"report_type": "repository",
"generated_at": "2026-07-21T15:48:57.766390Z",
"schema_version": "0.23.0",
"badge_url": "https://raw.githubusercontent.com/inspect-software/badges/main/v1/p/pockebot/openpocket.svg",
"full_name": "pockebot/openpocket",
"license_state": "standard",
"license_spdx": "MIT"
}
Пов’язані записи
Перевірені репозиторії, що мають спільні каталожні теги або екосистеми з pockebot/openpocket. Читати поруч →
Оцінки — це сигнали, а не гарантії. Вони відображають публічно видимі практики на GitHub — це не аудит коду й не гарантія безпеки.
Відсутні дані виключаються, а ваги перенормовуються — нуль за відсутність ніколи не ставиться. Методологія версіонована й відкрита: метрики v1.13.0, схема v0.23.0 — повна методологія · вікі метрик.
