ТипІнструмент командного рядкаБібліотекаМережевий сервісВебінтерфейсЧат-ботяк це визначено
realproject7/quadwork має індекс здоров’я 78 зі 100, що відповідає смузі «Добрий». Найвищий показник — Vitality (86/100), найнижчий — Community & Adoption (44/100). Останнє оновлення було 4 дні тому. Більшість нещодавньої роботи виконує один учасник.
78
загалом / 100
Добрий
Індекс здоров'я програмного забезпечення
Метрики згруповано у зважені категорії на шкалі 1–100. Загальна оцінка починається як їхнє зважене середнє, відкаліброване за розподілом публічного реєстру, тож діапазони мають перцентильний зміст; коли публічні дані активують Політику юрисдикцій високого ризику, рейтинг коригується й отримує верхню межу 34 («У зоні ризику»).
78
Винятковий93-100Верхній щабель реєстру (≈ топ-5%); відповідає практично всім перевіреним критеріям
Відмінний80-92Сильний за всіма напрямами; незначні прогалини
Добрий65-79Здоровий; прогалини обмежені та керовані
Помірний50-64Прийнятний, але з помітними прогалинами; рекомендовано перевірку
Слабкий35-49Суттєві недоліки в кількох сферах
У зоні ризику20-34Суттєві слабкі місця; впровадження потребує обережності
Критичний1-19Серйозні проблеми (покинутий, єдиний мейнтейнер, без базової гігієни)
Профіль оцінок
Кожна вісь — окрема категорія. Форма важить більше, ніж середнє: здоровий об'єкт заповнює всю фігуру, тоді як профіль із піками та провалами означає, що сила в одному вимірі маскує ризик в іншому.
Зважений загальний бал 67 калібровано до 78 за шкалою опублікованого індексу (калібрування реєстру 2026-08-02).
Прямі залежності без відомих сповіщень — жодна пряма залежність не має відомих сповіщень
25/25
Непрямі залежності без відомих сповіщень — жодна непряма залежність не має відомих сповіщень
0/40
Немає задавнених сповіщень — жодне сповіщення не має дати публікації
Використані вхідні дані
source
osv
advisories
0
affected_packages
0
assessed_packages
110
unassessed_packages
0
affected_by_severity
none
direct_affected_packages
0
Виключено з оцінювання (немає даних або не застосовно): Немає задавнених сповіщень. Залишкові ваги перенормовано. Звірено з runtime-замиканням залежностей npm:quadwork@2.7.1 — тим, що тягне за собою встановлення опублікованого пакета, — 110 пакетів. Досяжність не аналізується.
Наскільки репозиторій оснащений для розробки та супроводу за участі ШІ-агентів? Має свідомо малу вагу (4%): агентний інструментарій — реальний сигнал супроводу, але репозиторій без нього все одно може отримати 100/100.
Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token
GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository
Докладніше
Історія зірок і форків 0 ★ / 9 ⇿
0Зірки
9Форки
49Релізи
Коли додано кожну зірку й форк — зібрано з GitHub і згруповано за днями. Кумулятивне зростання розміщено просто над денними додаваннями, з яких воно складається, тож їх видно одне проти одного: рівномірне органічне накопичення виглядає зовсім інакше, ніж різкий короткочасний сплеск. Там, де цю різницю можна виміряти, її подано як автентичність росту.
Мажорні 1Мінорні 15Патчі 33
OpenSSF Scorecard 4.4 / 10
4.4сукупно
Незалежна, не прив'язана до інструментів оцінка безпеки від відкритого проєкту OpenSSF Scorecard. Кожна перевірка винагороджує практику безпеки, а не інструмент конкретного постачальника. Перевірки, які Scorecard не зміг визначити, позначено н/д і виключено з оцінки безпеки (вони ніколи не зараховуються як нуль).Scorecard v5.5.0 · 2026-08-05 08:52 UTC
Не вдалося зібрати розв'язаний набір залежностей для цього звіту: GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository
Сповіщення про залежності 0
Встановлення npm:quadwork@2.7.1 тягне 110 пакетів, прямих і транзитивних: 0 мають відомі сповіщення, з них 0 — прямі залежності.
Жодне відоме сповіщення не стосується оцінених залежностей.
Сповіщення означає, що версія, записана в графі залежностей, потрапляє в уражений діапазон. Досяжність не аналізується, а граф містить піниї розробки й тестування — знахідка може стосуватися інструментів, а не поставленого коду.
Звіт у форматі JSON машиночитний
{
"data": {
"icon": {
"bytes": 74427,
"width": 1024,
"height": 1024,
"rejected": [],
"collected": true,
"media_type": "image/png",
"source_url": "https://raw.githubusercontent.com/realproject7/quadwork/main/public/icon.png",
"source_type": "readme",
"content_hash": "365f99e12e2a81079d2ea306c91cfbbc41df4e4e78c3866f5f82f51ed8756584",
"candidates_considered": 1
},
"repo": {
"topics": [],
"is_fork": false,
"size_kb": 5349,
"has_wiki": true,
"homepage": null,
"languages": {
"CSS": 3056,
"JavaScript": 1046373,
"TypeScript": 526302
},
"pushed_at": "2026-08-01T04:15:12Z",
"created_at": "2026-03-31T13:20:19Z",
"owner_type": "User",
"updated_at": "2026-08-01T04:15:24Z",
"description": "4-agent coding team dashboard — terminals, agent chat, GitHub board, Telegram bridge, and shared memory in one local web view.",
"is_archived": false,
"is_disabled": false,
"license_spdx": "MIT",
"default_branch": "main",
"license_spdx_raw": "MIT",
"primary_language": "JavaScript",
"significant_languages": [
"JavaScript",
"TypeScript"
]
},
"owner": {
"blog": "https://mint.club/",
"name": "Project7",
"type": "User",
"login": "realproject7",
"company": "HUNT",
"location": "Seoul, Korea",
"followers": 30,
"avatar_url": "https://avatars.githubusercontent.com/u/15100667?v=4",
"created_at": "2015-10-13T05:45:27Z",
"is_verified": null,
"public_repos": 29,
"account_age_days": 3949
},
"license": {
"state": "standard",
"spdx_id": "MIT",
"raw_spdx": "MIT",
"file_present": true,
"scorecard_found": true,
"profile_has_license": true
},
"activity": {
"releases": [
{
"tag": "v2.7.1",
"kind": "patch",
"published_at": "2026-07-25T01:47:28Z"
},
{
"tag": "v2.7.0",
"kind": "minor",
"published_at": "2026-07-13T03:05:14Z"
},
{
"tag": "v2.6.0",
"kind": "minor",
"published_at": "2026-07-07T03:52:31Z"
},
{
"tag": "v2.5.1",
"kind": "patch",
"published_at": "2026-07-06T23:50:52Z"
},
{
"tag": "v2.5.0",
"kind": "minor",
"published_at": "2026-07-06T12:09:30Z"
},
{
"tag": "v2.4.0",
"kind": "minor",
"published_at": "2026-07-04T03:10:10Z"
},
{
"tag": "v2.3.9",
"kind": "patch",
"published_at": "2026-06-11T07:40:47Z"
},
{
"tag": "v2.3.8",
"kind": "patch",
"published_at": "2026-06-07T21:18:36Z"
},
{
"tag": "v2.3.7",
"kind": "patch",
"published_at": "2026-06-04T07:18:50Z"
},
{
"tag": "v2.3.6",
"kind": "patch",
"published_at": "2026-06-02T08:54:47Z"
},
{
"tag": "v2.3.5",
"kind": "patch",
"published_at": "2026-06-02T01:53:56Z"
},
{
"tag": "v2.3.4",
"kind": "patch",
"published_at": "2026-06-02T01:47:10Z"
},
{
"tag": "v2.3.3",
"kind": "patch",
"published_at": "2026-06-01T21:15:51Z"
},
{
"tag": "v2.3.2",
"kind": "patch",
"published_at": "2026-06-01T11:15:52Z"
},
{
"tag": "v2.3.1",
"kind": "patch",
"published_at": "2026-06-01T07:44:18Z"
},
{
"tag": "v2.3.0",
"kind": "minor",
"published_at": "2026-06-01T05:18:22Z"
},
{
"tag": "v2.2.1",
"kind": "patch",
"published_at": "2026-05-30T13:03:40Z"
},
{
"tag": "v2.2.0",
"kind": "minor",
"published_at": "2026-05-30T11:32:08Z"
},
{
"tag": "v2.1.0",
"kind": "minor",
"published_at": "2026-05-29T12:31:57Z"
},
{
"tag": "v2.0.1",
"kind": "patch",
"published_at": "2026-05-22T00:57:11Z"
},
{
"tag": "v2.0.0",
"kind": "major",
"published_at": "2026-05-21T04:20:51Z"
},
{
"tag": "v1.19.3",
"kind": "patch",
"published_at": "2026-05-19T01:04:19Z"
},
{
"tag": "v1.19.2",
"kind": "patch",
"published_at": "2026-05-15T13:40:41Z"
},
{
"tag": "v1.19.1",
"kind": "patch",
"published_at": "2026-05-15T13:08:13Z"
},
{
"tag": "v1.19.0",
"kind": "minor",
"published_at": "2026-05-06T05:19:00Z"
},
{
"tag": "v1.18.4",
"kind": "patch",
"published_at": "2026-05-06T04:25:46Z"
},
{
"tag": "v1.18.3",
"kind": "patch",
"published_at": "2026-05-06T03:52:54Z"
},
{
"tag": "v1.18.2",
"kind": "patch",
"published_at": "2026-05-06T02:34:41Z"
},
{
"tag": "v1.18.1",
"kind": "patch",
"published_at": "2026-05-04T14:07:27Z"
},
{
"tag": "v1.18.0",
"kind": "minor",
"published_at": "2026-05-04T07:34:40Z"
},
{
"tag": "v1.17.3",
"kind": "patch",
"published_at": "2026-05-04T04:17:46Z"
},
{
"tag": "v1.17.2",
"kind": "patch",
"published_at": "2026-05-04T03:43:43Z"
},
{
"tag": "v1.17.1",
"kind": "patch",
"published_at": "2026-05-04T03:20:30Z"
},
{
"tag": "v1.17.0",
"kind": "minor",
"published_at": "2026-04-30T22:49:51Z"
},
{
"tag": "v1.16.1",
"kind": "patch",
"published_at": "2026-04-30T05:00:42Z"
},
{
"tag": "v1.16.0",
"kind": "minor",
"published_at": "2026-04-30T02:41:46Z"
},
{
"tag": "v1.15.1",
"kind": "patch",
"published_at": "2026-04-29T04:43:26Z"
},
{
"tag": "v1.15.0",
"kind": "minor",
"published_at": "2026-04-29T03:04:09Z"
},
{
"tag": "v1.14.6",
"kind": "patch",
"published_at": "2026-04-28T13:00:07Z"
},
{
"tag": "v1.14.5",
"kind": "patch",
"published_at": "2026-04-28T11:08:54Z"
},
{
"tag": "v1.14.4",
"kind": "patch",
"published_at": "2026-04-28T10:53:12Z"
},
{
"tag": "v1.14.3",
"kind": "patch",
"published_at": "2026-04-28T07:40:26Z"
},
{
"tag": "v1.14.2",
"kind": "patch",
"published_at": "2026-04-28T04:43:42Z"
},
{
"tag": "v1.14.1",
"kind": "patch",
"published_at": "2026-04-28T02:00:06Z"
},
{
"tag": "v1.14.0",
"kind": "minor",
"published_at": "2026-04-28T01:56:17Z"
},
{
"tag": "v1.13.1",
"kind": "patch",
"published_at": "2026-04-27T08:20:45Z"
},
{
"tag": "v1.13.0",
"kind": "minor",
"published_at": "2026-04-27T06:27:17Z"
},
{
"tag": "v1.12.1",
"kind": "patch",
"published_at": "2026-04-27T05:13:44Z"
},
{
"tag": "v1.12.0",
"kind": "minor",
"published_at": "2026-04-21T11:39:22Z"
},
{
"tag": "v1.11.1",
"kind": "patch",
"published_at": "2026-04-20T11:37:03Z"
},
{
"tag": "v1.11.0",
"kind": "minor",
"published_at": "2026-04-20T03:21:21Z"
},
{
"tag": "v1.10.1",
"kind": "patch",
"published_at": "2026-04-19T11:37:34Z"
},
{
"tag": "v1.10.0",
"kind": "minor",
"published_at": "2026-04-19T03:02:04Z"
},
{
"tag": "v1.9.0",
"kind": "minor",
"published_at": "2026-04-16T23:15:20Z"
},
{
"tag": "v1.8.5",
"kind": "patch",
"published_at": "2026-04-13T08:32:52Z"
},
{
"tag": "v1.8.4",
"kind": "patch",
"published_at": "2026-04-13T06:17:12Z"
},
{
"tag": "v1.8.3",
"kind": "patch",
"published_at": "2026-04-12T12:41:16Z"
},
{
"tag": "v1.8.2",
"kind": "patch",
"published_at": "2026-04-12T12:25:39Z"
},
{
"tag": "v1.8.1",
"kind": "patch",
"published_at": "2026-04-12T12:01:55Z"
},
{
"tag": "v1.8.0",
"kind": "minor",
"published_at": "2026-04-12T08:04:26Z"
},
{
"tag": "v1.7.0",
"kind": "minor",
"published_at": "2026-04-11T17:41:41Z"
},
{
"tag": "v1.6.3",
"kind": "patch",
"published_at": "2026-04-11T13:10:46Z"
},
{
"tag": "v1.6.2",
"kind": "patch",
"published_at": "2026-04-11T11:43:33Z"
},
{
"tag": "v1.6.1",
"kind": "patch",
"published_at": "2026-04-11T05:15:15Z"
},
{
"tag": "v1.6.0",
"kind": "minor",
"published_at": "2026-04-11T02:19:02Z"
},
{
"tag": "v1.5.5",
"kind": "patch",
"published_at": "2026-04-10T12:18:25Z"
},
{
"tag": "v1.5.4",
"kind": "patch",
"published_at": "2026-04-10T10:37:00Z"
},
{
"tag": "v1.5.3",
"kind": "patch",
"published_at": "2026-04-09T18:04:06Z"
},
{
"tag": "v1.5.2",
"kind": "patch",
"published_at": "2026-04-09T16:53:47Z"
},
{
"tag": "v1.5.1",
"kind": "patch",
"published_at": "2026-04-09T14:37:29Z"
},
{
"tag": "v1.5.0",
"kind": "minor",
"published_at": "2026-04-09T11:12:50Z"
},
{
"tag": "v1.4.0",
"kind": "minor",
"published_at": "2026-04-09T09:25:08Z"
},
{
"tag": "v1.3.0",
"kind": "minor",
"published_at": "2026-04-09T09:25:06Z"
},
{
"tag": "v1.2.5",
"kind": "patch",
"published_at": "2026-04-09T09:25:05Z"
},
{
"tag": "v1.2.4",
"kind": "patch",
"published_at": "2026-04-09T09:25:03Z"
},
{
"tag": "v1.2.3",
"kind": "patch",
"published_at": "2026-04-09T09:25:02Z"
},
{
"tag": "v1.2.2",
"kind": "patch",
"published_at": "2026-04-09T09:25:01Z"
},
{
"tag": "v1.2.1",
"kind": "patch",
"published_at": "2026-04-09T09:24:59Z"
},
{
"tag": "v1.2.0",
"kind": "minor",
"published_at": "2026-04-09T09:24:58Z"
},
{
"tag": "v1.1.0",
"kind": "minor",
"published_at": "2026-04-09T09:24:57Z"
},
{
"tag": "v1.0.17",
"kind": "patch",
"published_at": "2026-04-09T09:24:55Z"
},
{
"tag": "v1.0.16",
"kind": "patch",
"published_at": "2026-04-09T09:24:54Z"
},
{
"tag": "v1.0.15",
"kind": "patch",
"published_at": "2026-04-09T09:24:52Z"
},
{
"tag": "v1.0.14",
"kind": "patch",
"published_at": "2026-04-09T09:24:51Z"
},
{
"tag": "v1.0.13",
"kind": "patch",
"published_at": "2026-04-09T09:24:50Z"
},
{
"tag": "v1.0.12",
"kind": "patch",
"published_at": "2026-04-09T09:24:49Z"
},
{
"tag": "v1.0.11",
"kind": "patch",
"published_at": "2026-04-09T09:24:47Z"
},
{
"tag": "v1.0.10",
"kind": "patch",
"published_at": "2026-04-09T09:24:46Z"
},
{
"tag": "v1.0.9",
"kind": "patch",
"published_at": "2026-04-09T09:24:45Z"
},
{
"tag": "v1.0.8",
"kind": "patch",
"published_at": "2026-04-09T09:24:44Z"
},
{
"tag": "v1.0.7",
"kind": "patch",
"published_at": "2026-04-09T09:24:43Z"
},
{
"tag": "v1.0.6",
"kind": "patch",
"published_at": "2026-04-09T09:24:42Z"
},
{
"tag": "v1.0.5",
"kind": "patch",
"published_at": "2026-04-09T09:24:40Z"
},
{
"tag": "v1.0.4",
"kind": "patch",
"published_at": "2026-04-09T09:24:39Z"
},
{
"tag": "v1.0.3",
"kind": "patch",
"published_at": "2026-04-09T09:24:38Z"
},
{
"tag": "v1.0.2",
"kind": "patch",
"published_at": "2026-04-09T09:24:30Z"
},
{
"tag": "v1.0.1",
"kind": "patch",
"published_at": "2026-04-09T09:24:12Z"
}
],
"recent_commits": [
{
"oid": "44d820ce0c135b274ab0aa6abb720af3190746ca",
"body": "[#1023] Add Grok (xAI Grok Build CLI) as a fourth agent backend",
"is_bot": false,
"headline": "Merge pull request #1024 from realproject7/task/1023-grok-backend",
"author_name": "Project7",
"author_login": "realproject7",
"committed_at": "2026-08-01T04:15:12Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b03aa60a6b2e94c8531c61e88d9b52379f72d27b",
"body": "… mirror test\n\nThree PO/@re1 items in one push.\n\n1. macOS fixture defect. os.tmpdir() is a symlink on macOS\n (/var/folders -> /private/var/folders); git canonicalizes the paths it\n reports, so the common-dir equality never matched and the suite was\n red for every Mac operator while staying gre\n[…]\neting\n that class of test. The grok-only/gemini-only ACs move to post-merge\n local-Mac verification by the PO, as the amended ticket records.\n\nCo-Authored-By: Claude Opus 5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "[#1023] Fix macOS fixture path, cite grok queueing evidence, drop the…",
"author_name": "Cho Young-Hwi",
"author_login": "realproject7",
"committed_at": "2026-08-01T04:05:38Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "f2877fb702a5b0f3d26a674e9cc1a4d03162bbb7",
"body": "@re1 on PR #1024:\n\n- pty-dispatcher.js still justified the cap re-arm's residual injection\n with \"safe because the cap is Claude-only\", which stopped being true\n the moment grok became eligible. The rationale now states what it\n actually rests on — a cap-eligible TUI queuing input received mid-tu\n[…]\nettingsPage.tsx alone is\n reverted.\n\nNo behavior change from the previous head: the inlined expression is the\nextracted helper's logic verbatim.\n\nCo-Authored-By: Claude Opus 5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "[#1023] Correct the cap re-arm rationale and inline the backend fallback",
"author_name": "Cho Young-Hwi",
"author_login": "realproject7",
"committed_at": "2026-08-01T04:00:19Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "65add1fca0ce296fdcf3fa9118afedff163e3fc3",
"body": "Extends the existing claude/codex/gemini seams to grok, plus the one\ngenuinely new mechanism grok requires: a project-scoped TOML MCP config\nand folder trust, since grok has no --mcp-config-style flag.\n\n- injectMode: grok -> \"project_toml\"\n- PERMISSION_FLAGS: grok -> --always-approve\n- buildAgentArg\n[…]\native \".git\". The write is append-if-absent because\nthe common-dir exclude is shared and arg-build runs on every spawn and\nrespawn.\n\nCloses #1023\n\nCo-Authored-By: Claude Opus 5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "[#1023] Add Grok (xAI Grok Build CLI) as a fourth agent backend",
"author_name": "Cho Young-Hwi",
"author_login": "realproject7",
"committed_at": "2026-08-01T03:50:24Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "59198955480c2224e1980e1645690d34a8ec0db3",
"body": "[#1021] 2.7.1",
"is_bot": false,
"headline": "Merge pull request #1022 from realproject7/task/1021-release-v2-7-1",
"author_name": "Project7",
"author_login": "realproject7",
"committed_at": "2026-07-25T01:39:45Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "7ea62768e97dde18916e559a6dcad628e18d8712",
"body": "Patch bump 2.7.0 -> 2.7.1 from main 31708d5. npm `latest` is 2.7.0, so a\npublish without this release-source bump would fail as a duplicate.\n\nVersion strings only, edited by path rather than global replacement:\npackage.json.version, package-lock.json.version, and\npackage-lock.json.packages[\"\"].versi\n[…]\nint, PR #1020), #1018 (claude-opus-5 pinned model,\nPR #1019), #1003-#1009 (governed-batch + installation/operator docs\nrefresh, PRs #1011-#1017).\n\nCo-Authored-By: Claude Opus 5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "[#1021] 2.7.1",
"author_name": "Cho Young-Hwi",
"author_login": "realproject7",
"committed_at": "2026-07-25T01:35:19Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "31708d52232fa7058e8648ea0710da4490bead42",
"body": "…-wake\n\n[#1010] Bound Claude deferred-wake delivery under continuous TUI repaint",
"is_bot": false,
"headline": "Merge pull request #1020 from realproject7/task/1010-claude-file-chat…",
"author_name": "Project7",
"author_login": "realproject7",
"committed_at": "2026-07-25T01:03:50Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "01c2c12a1f5367cce4c957c376067052322b7e97",
"body": "re2 on PR #1020: test 18b asserted the \"a stale callback cannot affect a\nsubsequent cycle\" contract but could not discriminate it — by the time\nthe cap drain returns, cleanupDrainListener has already cleared both\nhandles, so no stale timer ever exists. Replacing the guard with\n`() => true` left the \n[…]\nrming per post is\ndeliberately not done since a chatty agent could then extend deferral\nindefinitely — recreating the starvation this cap bounds.\n\nCo-Authored-By: Claude Opus 5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "[#1010] Pin the stale-cycle guard with a discriminating test",
"author_name": "Cho Young-Hwi",
"author_login": "realproject7",
"committed_at": "2026-07-25T00:49:31Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "a9dadab88e688222ee2d903a4dab02a4afd0892e",
"body": "The Claude Code TUI repaints its status line ~5x/sec while idle, so the\ndeferred-wake drain's idle timer — reset on every onData — never saw the\n5s gap and a queued wake was starved indefinitely. Claude agents in\nfile-chat mode were therefore never woken, while codex agents (whose TUI\ngoes quiet bet\n[…]\nCap timings are\noverridable so the regressions run at millisecond scale. Verified the\ncore case fails with the cap disabled (11 assertions fail).\n\nCo-Authored-By: Claude Opus 5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "[#1010] Bound Claude deferred-wake delivery under continuous TUI repaint",
"author_name": "Cho Young-Hwi",
"author_login": "realproject7",
"committed_at": "2026-07-25T00:34:04Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "7c4830ee1e2ee41e78afe20b1abc5812692c7aeb",
"body": "[#1018] Add Claude Opus 5 as a pinned selectable model",
"is_bot": false,
"headline": "Merge pull request #1019 from realproject7/task/1018-claude-opus-5",
"author_name": "Project7",
"author_login": "realproject7",
"committed_at": "2026-07-25T00:21:07Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ef8715c2b22793ff6af28965e62c6a97ed4618f8",
"body": "Append `claude-opus-5` to MODEL_OPTIONS.claude immediately after\nclaude-fable-5 and before the 4.x pins (newest pin first, never first),\nso modelsForBackend(\"claude\")[0] stays \"opus\" — the #931 default/heal\ntarget. Pure data addition: buildAgentArgs already forwards any concrete\nClaude slug as `--mo\n[…]\nuard, since that surface is React-only), and\na launch case asserting `--model claude-opus-5` alongside the permission\nand --mcp-config arguments.\n\nCo-Authored-By: Claude Opus 5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "[#1018] Add Claude Opus 5 as a pinned selectable model",
"author_name": "Cho Young-Hwi",
"author_login": "realproject7",
"committed_at": "2026-07-25T00:14:18Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "caf94e2b4d687ab02be00a35a62706f28a791256",
"body": "…resh\n\n[#1009] docs(operator-mcp): Make the Operator MCP guide backend-neutral and remote-safe",
"is_bot": false,
"headline": "Merge pull request #1017 from realproject7/task/1009-operator-mcp-ref…",
"author_name": "Project7",
"author_login": "realproject7",
"committed_at": "2026-07-18T00:08:30Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "64ce6b8f2ea297d36ee254a9e8fe6724b270cf82",
"body": "…ard support\n\nAddress @re1: the \"MCP client must run on the same machine\" note (line 7)\ncontradicted the SSH local-forward path documented under Remote / VPS. Restate\nit as a shared-loopback requirement that explicitly allows either same-host\noperation or the documented SSH tunnel.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "[#1009] docs(operator-mcp): Reconcile same-machine note with SSH-forw…",
"author_name": "project7",
"author_login": null,
"committed_at": "2026-07-18T00:06:24Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "24fcb8ba12d63e63d8f1a2e438478a98f73085ac",
"body": "…al and remote-safe\n\n- Backend-neutral: retitle \"from a Claude agent\" → \"from an MCP client\"; the\n operator server is a generic stdio MCP server usable by any MCP-capable\n client. Add a generic registration framing (every client launches the same\n `quadwork-mcp-operator --port <port>` bin) and a \n[…]\nsurface. Docs-only; no backend/runtime code, packages, tests,\nlegacy migration implementation, other docs, or other repos touched.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "[#1009] docs(operator-mcp): Make the Operator MCP guide backend-neutr…",
"author_name": "project7",
"author_login": null,
"committed_at": "2026-07-18T00:03:06Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "11b4e0a2a96ff84331a923c9da47c9284111b9b8",
"body": "…refresh\n\n[#1008] docs(troubleshooting): Refresh current runtime recovery guidance",
"is_bot": false,
"headline": "Merge pull request #1016 from realproject7/task/1008-troubleshooting-…",
"author_name": "Project7",
"author_login": "realproject7",
"committed_at": "2026-07-17T23:58:10Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "761e06ac5f4642e0c2aa07323073003c9510dd89",
"body": "…lar agents\n\nAddress @re1: the onData trust listener at server/index.js:1182 is Butler-only\n(butlerSession.term). The four agents (head/dev/re1/re2) are pre-trusted at\nproject creation by running `claude -p` in each Claude-backed worktree\n(server/routes.js:3924-3940, #599; #975 made it async, did no\n[…]\nuadWork runs at creation), then restart the agent — instead of the\nincorrect \"a per-agent listener auto-answers on restart\" claim.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "[#1008] docs(troubleshooting): Correct trust-prompt recovery for regu…",
"author_name": "project7",
"author_login": null,
"committed_at": "2026-07-17T23:54:24Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "f9556489d8f3a1d4231ba7453a74f1bf094662ac",
"body": "Tie the stale entries to current behavior; no runtime changes.\n\n- Trust prompt: drop the manual `claude -p \"echo ok\"` pre-trust and the\n \"QuadWork v1.14.5+ pre-trusts during project creation\" wording (both removed\n by #975). Describe the current behavior — an onData listener auto-confirms the\n Cl\n[…]\nresent or added. Docs-only; no runtime code,\ntests, package versions, legacy migration implementation, or other documents\ntouched.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "[#1008] docs(troubleshooting): Refresh current runtime recovery guidance",
"author_name": "project7",
"author_login": null,
"committed_at": "2026-07-17T23:50:22Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "d65d35646496f0268960c546571cb9ae53293947",
"body": "[#1007] docs(install-vps): Modernize VPS installation and remove legacy chat migration prose",
"is_bot": false,
"headline": "Merge pull request #1015 from realproject7/task/1007-install-vps-refresh",
"author_name": "Project7",
"author_login": "realproject7",
"committed_at": "2026-07-17T23:46:32Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c388f47310b3ed2f35bb120802f03d3c39ebd6d0",
"body": "…at migration prose\n\n- Remove the obsolete \"Migrating from Older Versions (AgentChattr cleanup)\"\n section from the public install guide (pm2 agentchattr-* cleanup, config\n key removal) — no longer relevant to a current install.\n- Add a Remote Access section that keeps control local-forward based:\n\n[…]\nbin/quadwork.js:864). Docs-only; no runtime\ncode, package versions, tests, legacy cleanup implementation, or quadwork-web\ntouched.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "[#1007] docs(install-vps): Modernize VPS install and remove legacy ch…",
"author_name": "project7",
"author_login": null,
"committed_at": "2026-07-17T23:44:05Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "fbc870d3c499e4bcf2cedeef80b4b8893904571c",
"body": "…refresh\n\n[#1006] docs(install-windows): Bring the WSL2 guide to current setup parity",
"is_bot": false,
"headline": "Merge pull request #1014 from realproject7/task/1006-install-windows-…",
"author_name": "Project7",
"author_login": "realproject7",
"committed_at": "2026-07-17T23:38:13Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a4a35ee2526cd7362214ef06534009b0860a574e",
"body": "…parity\n\nMake docs/install-windows.md independently usable instead of deferring to the\nMac guide, and align every command with the current code / the corrected\ninstall-mac.md (#1005).\n\n- Inline the full flow inside WSL2: install agent CLIs (Claude Code / Codex /\n Gemini CLI), authenticate, install \n[…]\nuide\" pointers.\n\nDocs-only; no runtime code, tests, package versions, legacy migration\nimplementation, or other documents touched.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "[#1006] docs(install-windows): Bring the WSL2 guide to current setup …",
"author_name": "project7",
"author_login": null,
"committed_at": "2026-07-17T23:35:44Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "b1b70b6071f69d388add36e416a3f1b07e3ccb82",
"body": "[#1005] docs(install-mac): Update macOS installation for the current QuadWork release",
"is_bot": false,
"headline": "Merge pull request #1013 from realproject7/task/1005-install-mac-refresh",
"author_name": "Project7",
"author_login": "realproject7",
"committed_at": "2026-07-17T23:33:00Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "6a44dc5b8287f8d8bf1f01d2aa52b01931300991",
"body": "Reconcile docs/install-mac.md with the current CLI, SetupWizard, README, and\npackage metadata (v2.7.0), removing stale v1.14.5-era wording.\n\n- Verify step: `quadwork --version` is not a subcommand (falls through to the\n usage help); use `npm list -g quadwork`, and bump the example version from\n 1.\n[…]\nhat auto-answers the prompt\n (server/index.js:1182).\n\nDocs-only; no runtime code, package versions, tests, or other docs touched.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "[#1005] docs(install-mac): Update macOS guide for the current release",
"author_name": "project7",
"author_login": null,
"committed_at": "2026-07-17T23:27:52Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "5f16c0a5afa613ca4f41c38b27a18e37bd4c8b48",
"body": "…tr-claims\n\n[#1004] docs: Remove stale AgentChattr claims from repository guidance and README credits",
"is_bot": false,
"headline": "Merge pull request #1012 from realproject7/task/1004-remove-agentchat…",
"author_name": "Project7",
"author_login": "realproject7",
"committed_at": "2026-07-17T23:22:52Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "cc5d3eaafcdb9a53ba52aaf50edad44a82c5ecba",
"body": "…README credits\n\nRemove references portraying AgentChattr / agentchattr-telegram as current\nQuadWork dependencies and describe the verified current arrangement.\n\n- README.md: drop the AgentChattr External Tools credit (no credit implies a\n current dependency).\n- CLAUDE.md: replace \"AgentChattr chat\n[…]\ntion\nimplementation, or quadwork-web touched. AGENTS.md already contains no\nAgentChattr text (rg over the three files finds none).\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "[#1004] docs: Remove stale AgentChattr claims from repo guidance and …",
"author_name": "project7",
"author_login": null,
"committed_at": "2026-07-17T23:19:26Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "ce8f30b32732a0496e21b9ef87d20be5f93f9096",
"body": "…batch\n\n[#1003] docs(readme): Reframe QuadWork around governed batch delivery",
"is_bot": false,
"headline": "Merge pull request #1011 from realproject7/task/1003-readme-governed-…",
"author_name": "Project7",
"author_login": "realproject7",
"committed_at": "2026-07-17T23:15:08Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "bfadf2bb694e0399f9a0d443230d2ec597bbc23c",
"body": "Rewrite the README narrative around governed, one-ticket-at-a-time batch\ndelivery. Name all four roles accurately (@head, @dev, @re1, @re2) and\ndescribe the Issue → Branch → PR → Review × 2 → Merge pipeline they run.\n\nRemove unsupported claims (production-grade, ship 24/7, high code quality\nwithout \n[…]\nackend mentions with the actually-supported\nCodex, Claude, and Gemini CLIs. External Tools credits, commands, and\nlinks unchanged.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "[#1003] docs(readme): Reframe QuadWork around governed batch delivery",
"author_name": "project7",
"author_login": null,
"committed_at": "2026-07-17T23:05:11Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "853716246a18f628d592b42da063ca141323c1c1",
"body": "[#1001] 2.7.0",
"is_bot": false,
"headline": "Merge pull request #1002 from realproject7/task/1001-release-v2-7-0",
"author_name": "Project7",
"author_login": "realproject7",
"committed_at": "2026-07-13T03:03:10Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ad0e163d0e28dac11458d223372793993871e2fc",
"body": "Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>",
"is_bot": false,
"headline": "[#1001] 2.7.0",
"author_name": "Cho Young-Hwi",
"author_login": "realproject7",
"committed_at": "2026-07-13T03:00:25Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "f280d579d5af01e854334e7e9cbfc6adaf1ecb4f",
"body": "[#999] Add GPT-5.6 Sol/Terra/Luna to codex model dropdown",
"is_bot": false,
"headline": "Merge pull request #1000 from realproject7/task/999-gpt56-models",
"author_name": "Project7",
"author_login": "realproject7",
"committed_at": "2026-07-13T02:46:25Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c29d5ade690e9a75454c8dbd021be676c15ede4c",
"body": "Append gpt-5.6-sol/terra/luna to MODEL_OPTIONS.codex after the existing\nconcrete rows so modelsForBackend(\"codex\")[0] stays \"gpt-5.4\" (#931\ndefault/heal target). Pure data addition; effectiveModel/sanitizeModel\nalready handle any concrete slug. Adds a test asserting optionsForBackend(\n\"codex\") includes the 3 new slugs.\n\nCloses #999\n\nCo-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>",
"is_bot": false,
"headline": "[#999] Add GPT-5.6 Sol/Terra/Luna to codex model dropdown",
"author_name": "Cho Young-Hwi",
"author_login": "realproject7",
"committed_at": "2026-07-13T02:42:53Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "21eac479c0a12fc796858b31eaacf12536b5d615",
"body": "[#997] 2.6.0",
"is_bot": false,
"headline": "Merge pull request #998 from realproject7/task/997-release-v2-6-0",
"author_name": "Project7",
"author_login": "realproject7",
"committed_at": "2026-07-07T03:52:27Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "7bd527d11500fd2a2744735681299252cb754289",
"body": "Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>",
"is_bot": false,
"headline": "[#997] 2.6.0",
"author_name": "Cho Young-Hwi",
"author_login": "realproject7",
"committed_at": "2026-07-07T03:49:01Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "dd06e2c748ad8a29ada3110dacaabddf2bdbb906",
"body": "[#961] Clarify Operator MCP VPS loopback and SSH forwarding troubleshooting",
"is_bot": false,
"headline": "Merge pull request #996 from realproject7/task/961-operator-mcp-docs",
"author_name": "Project7",
"author_login": "realproject7",
"committed_at": "2026-07-07T01:23:12Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "39d0723c581fe30660f45ba70b90187126ab16f4",
"body": "…ooting\n\nDocs-only. The VPS path in operator-mcp.md was technically correct but easy to\nmisread while troubleshooting. Adds a focused \"Remote / VPS troubleshooting\"\nsubsection under the existing Registration section (references it, no\nduplication):\n- restates the loopback rule (client always hits 12\n[…]\n examples carry a trailing `sleep` (keep stdin open so\nthe MCP server can flush responses before the pipe closes).\n\nNo code or behavior change.\n\nCo-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>",
"is_bot": false,
"headline": "[#961] Clarify Operator MCP VPS loopback and SSH forwarding troublesh…",
"author_name": "Cho Young-Hwi",
"author_login": "realproject7",
"committed_at": "2026-07-07T01:18:29Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "ac199ce0cffc9851545e07e4716f188e56f1a868",
"body": "[#992] Auto-respawn agents on server restart when a batch is active",
"is_bot": false,
"headline": "Merge pull request #995 from realproject7/task/992-restart-respawn",
"author_name": "Project7",
"author_login": "realproject7",
"committed_at": "2026-07-07T01:16:34Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "38c78780503237b14674500fb1376d018d75cc35",
"body": "#972's clean shutdown kills agent PTYs on pm2/local restart, but nothing\nrespawned them — a project mid-batch silently stalled (no dev progress, no\nreviews) until an operator manually restarted head/dev/re1/re2. This bit every\nv2.5.x upgrade.\n\nrespawnActiveBatchAgents(cfg) runs once in the startup c\n[…]\nartRespawn.test.js: active→4 restored, idle→none, unknown/throw→\nnone, opt-out→none, idempotent-skip, failing-spawn logged, malformed projects.\n\nCo-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>",
"is_bot": false,
"headline": "[#992] Auto-respawn agents on server restart when a batch is active",
"author_name": "Cho Young-Hwi",
"author_login": "realproject7",
"committed_at": "2026-07-07T01:10:07Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "49d50e57c8f14f31c6acca81f15a971800b13a8d",
"body": "[#957] Lifecycle-aware cleanup of agent backend temp dirs",
"is_bot": false,
"headline": "Merge pull request #994 from realproject7/task/957-temp-cleanup",
"author_name": "Project7",
"author_login": "realproject7",
"committed_at": "2026-07-07T01:02:33Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "995d94ec98bbd0dea1d2c364fe80493f625ca53f",
"body": "Claude Code keeps temp under /tmp/claude-{uid} and never bounds it. On Linux\nhosts where /tmp has a per-user quota, that dir grows until the quota is\nexhausted, after which every Claude bash call fails silently (exit 1, no\noutput). QuadWork owns the agent lifecycle, so it cleans at known-safe moment\n[…]\n1 post-mortem) + install-vps.md note.\n\nReimplemented fresh against current main (old PR #960 bitrotted after\n#968/#972/#975 reworked index.js).\n\nCo-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>",
"is_bot": false,
"headline": "[#957] Lifecycle-aware cleanup of agent backend temp dirs",
"author_name": "Cho Young-Hwi",
"author_login": "realproject7",
"committed_at": "2026-07-07T00:56:51Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "cb9963ea43672b4db479d84d176e68eb81a44f43",
"body": "[#966] Reseed worktree CLAUDE.md alongside AGENTS.md",
"is_bot": false,
"headline": "Merge pull request #993 from realproject7/task/966-reseed-claude-md",
"author_name": "Project7",
"author_login": "realproject7",
"committed_at": "2026-07-07T00:49:47Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "24160df828049189221b95bce8537434fc84227d",
"body": "Auto-reseed refreshed worktree AGENTS.md on template upgrade but never\nCLAUDE.md, so the two instruction files drifted. _performReseedWrites now\nalso refreshes CLAUDE.md via the same reseedAgentsMd merge (fresh template\nwins per-H2, operator-added H2 sections preserved).\n\nGuard: only a provably Quad\n[…]\nroject's own hand-authored\nCLAUDE.md, or a missing one, is left byte-identical and recorded in skipped.\nAGENTS.md reseed behavior is unchanged.\n\nCo-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>",
"is_bot": false,
"headline": "[#966] Reseed worktree CLAUDE.md alongside AGENTS.md",
"author_name": "Cho Young-Hwi",
"author_login": "realproject7",
"committed_at": "2026-07-07T00:44:25Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "1d1b020ae5214e21ea3b20cb8bdfd7b33b97d8ff",
"body": "[#990] 2.5.1",
"is_bot": false,
"headline": "Merge pull request #991 from realproject7/task/990-release-v2-5-1",
"author_name": "Project7",
"author_login": "realproject7",
"committed_at": "2026-07-06T23:50:48Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "af59d36034b758ff816ad7b13397fa2a25ac7072",
"body": "Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>",
"is_bot": false,
"headline": "[#990] 2.5.1",
"author_name": "Cho Young-Hwi",
"author_login": "realproject7",
"committed_at": "2026-07-06T23:47:22Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "7bf9fc14e9ecae8af7c1af15564c32ef5d8a197f",
"body": "[#988] Reverse-proxy dashboard token allowlist (v2.5.1 hotfix)",
"is_bot": false,
"headline": "Merge pull request #989 from realproject7/task/988-proxy-token-allowlist",
"author_name": "Project7",
"author_login": "realproject7",
"committed_at": "2026-07-06T23:46:56Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "777d9857a1a0a4c8be6ddc0d3c8167f6a2234d2d",
"body": "REQUEST CHANGES: isAllowedWsOrigin's #968 same-host fallback\n(u.host === req.headers.host) fired even for a LOOPBACK socket carrying a\nnon-loopback, non-allowlisted Host+Origin — so a forged/foreign matched pair\n(untrusted on-box proxy, DNS-rebinding page) with a valid token slipped\nthrough, violati\n[…]\ner.\n\nAdds the requested regression test: matched foreign Host+Origin + valid token\n→ WS 403 (not opened). Full suite still 61 passed, 0 failed.\n\nCo-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>",
"is_bot": false,
"headline": "[#988] Close WS same-host fallback for forged foreign Host+Origin (re1)",
"author_name": "Cho Young-Hwi",
"author_login": "realproject7",
"committed_at": "2026-07-06T23:42:52Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "ccffe682e3c4a2b7cd0b8adec4a1c83ea84c397c",
"body": "The #968 loopback-only gate on /api/session-token 403s a dashboard served\nthrough an on-box authenticated reverse proxy (nginx forwards a public\nHost/Origin), so the terminal WS never gets a token and closes 1006.\n\nAdd opt-in config.trusted_dashboard_hosts: when the socket is loopback AND\nthe forwar\n[…]\nrusted) → 403. wsPtyAuth.test.js\n(no-allowlist case) still passes. docs/troubleshooting.md documents the\nauthenticated-nginx + allowlist setup.\n\nCo-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>",
"is_bot": false,
"headline": "[#988] Reverse-proxy dashboard token allowlist (v2.5.1 hotfix)",
"author_name": "Cho Young-Hwi",
"author_login": "realproject7",
"committed_at": "2026-07-06T23:36:23Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "ddb3e434fe16c5e7979a5a71e431c548c5995054",
"body": "[#986] 2.5.0",
"is_bot": false,
"headline": "Merge pull request #987 from realproject7/task/986-release-v2-5-0",
"author_name": "Project7",
"author_login": "realproject7",
"committed_at": "2026-07-06T12:09:09Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "8bb55d0d57a9540e2affa484b291f9621351889e",
"body": "Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>",
"is_bot": false,
"headline": "[#986] 2.5.0",
"author_name": "Cho Young-Hwi",
"author_login": "realproject7",
"committed_at": "2026-07-06T12:05:22Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "f6533e992d8926b72dd358ed95493a9a20f828f5",
"body": "[#975] De-block the event loop",
"is_bot": false,
"headline": "Merge pull request #985 from realproject7/task/975-deblock-event-loop",
"author_name": "Project7",
"author_login": "realproject7",
"committed_at": "2026-07-06T12:00:50Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "8d1b61dfb40863b899d2080178faf61eed3bab56",
"body": "QuadWork is single-process, so any synchronous block on the main thread\nfreezes every agent's WS/HTTP/timers. Removes the 3 confirmed stalls,\nbehavior-preservingly (only the blocking removed).\n\n1. file-chat.js appendMessage — the retry loop slept via\n Atomics.wait(...,100), a synchronous 100ms blo\n[…]\nfailed. Server boots + shuts down cleanly on this branch.\n\nNote (not implemented here, per ticket): JSONL rotation is a separate\nfuture ticket.\n\nCo-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>",
"is_bot": false,
"headline": "[#975] De-block the event loop (EPIC #967 Phase 3)",
"author_name": "Cho Young-Hwi",
"author_login": "realproject7",
"committed_at": "2026-07-06T11:54:33Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "ce7fc0cc5e419e3b2c3471f6794ea7bf1f81b2e2",
"body": "[#974] Setup hardening",
"is_bot": false,
"headline": "Merge pull request #984 from realproject7/task/974-setup-hardening",
"author_name": "Project7",
"author_login": "realproject7",
"committed_at": "2026-07-06T11:41:55Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "3f7b3cc7feffd91d030a27204e72c67872e3dae4",
"body": "Fixes 5 confirmed setup/start defects + 2 folded lows. Changes confined\nto setup/start paths (bin/quadwork.js, server setup route, server listen);\nno steady-state runtime or agent-spawn behavior changes.\n\n1. Stale-branch brick — if a `worktree-<agent>` branch survives after its\n dir was deleted, s\n[…]\ndetached). Full\nsuite 60 passed / 0 failed. EADDRINUSE + stale-branch reuse also verified\nend-to-end against a live server and a real git repo.\n\nCo-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>",
"is_bot": false,
"headline": "[#974] Setup hardening (EPIC #967 Phase 3)",
"author_name": "Cho Young-Hwi",
"author_login": "realproject7",
"committed_at": "2026-07-06T11:33:32Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "d7cf39f654645759041c919206f1a9a005f14ac2",
"body": "[#973] Frontend correctness bundle",
"is_bot": false,
"headline": "Merge pull request #983 from realproject7/task/973-frontend-correctness",
"author_name": "Project7",
"author_login": "realproject7",
"committed_at": "2026-07-06T11:20:45Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "000b5d4bc5cbde115b6ba7302fee8cd7b6833fdf",
"body": "Fixes 7 confirmed frontend-only bugs + 3 folded lows across the\ndashboard components. No server changes.\n\nChatPanel:\n- 403 auth banner was dead code (authRetryRef read, never incremented);\n now counts failures and clears the tally on a clean poll / project switch.\n- project-switch poll race: an in-\n[…]\nager:\n- bootstrap WebSocket was never closed (leak); closes it after use and polls\n /api/sessions for liveness instead of a fixed spawn sleep.\n\nCo-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>",
"is_bot": false,
"headline": "[#973] Frontend correctness bundle (EPIC #967 Phase 3)",
"author_name": "Cho Young-Hwi",
"author_login": "realproject7",
"committed_at": "2026-07-06T11:08:17Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "a33f427d658fa7b6c0a4f9c7595f675880864fb2",
"body": "[#971] Atomic config writes + field-scoped flag endpoint",
"is_bot": false,
"headline": "Merge pull request #982 from realproject7/task/971-atomic-config",
"author_name": "Project7",
"author_login": "realproject7",
"committed_at": "2026-07-06T10:54:52Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c52f246a26ceccb10c6c7ba7bb4756308105d782",
"body": "…view)\n\n@re1 (re-review): the section-merge PATCH intentionally never drops projects, so\na Settings \"Remove\" (which filtered the project from local state and relied on\nsave) no longer persisted — the project stayed on disk.\n\n- routes.js: new DELETE /api/projects/:id — removes the project atomically \n[…]\nwaway port): Settings \"Remove\" → Confirm\nfires DELETE /api/projects/:id; the project is gone from disk, others intact.\nSuite 59/0/2, tsc clean.\n\nCo-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>",
"is_bot": false,
"headline": "[#971] Add DELETE /api/projects/:id so Settings \"Remove\" persists (re…",
"author_name": "Cho Young-Hwi",
"author_login": "realproject7",
"committed_at": "2026-07-06T05:06:28Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "6b3aa60731044ac54be5f7ecfa8c5b90aeae3ffb",
"body": "@re1: SettingsPage.save was the last frontend caller PUTting the whole config,\nwhich the #971 AC forbids. Add a section-merge PATCH /api/config backed by\nupdateConfig and move the Settings save to it.\n\n- routes.js: new PATCH /api/config — merges the provided sections into the\n freshest on-disk conf\n[…]\nowser (throwaway port): a Settings save fires\nPATCH /api/config (no PUT); operator_name persists, idle flag preserved. Suite\n59/0/2, tsc clean.\n\nCo-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>",
"is_bot": false,
"headline": "[#971] Migrate SettingsPage.save off whole-config PUT (review)",
"author_name": "Cho Young-Hwi",
"author_login": "realproject7",
"committed_at": "2026-07-06T04:59:51Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "53274b7d9df2db1339ba701fd47646656a409037",
"body": "EPIC #967 Phase 2 — make config the single serialization point, killing the\nwhole-config read-modify-write races.\n\nconfig.js:\n- writeConfig is now ATOMIC (write a `${pid}.tmp` file, then renameSync onto\n config.json — the migrate-ac.js pattern). The old in-place writeFileSync\n could truncate confi\n[…]\n /api/projects/:id/flags (no whole-config PUT); the flag persists, unrelated\nfields + raw operator_name are unchanged. Never touched port 8400.\n\nCo-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>",
"is_bot": false,
"headline": "[#971] Atomic config writes + field-scoped flag endpoint",
"author_name": "Cho Young-Hwi",
"author_login": "realproject7",
"committed_at": "2026-07-06T04:49:47Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "3b2d415d5adadf52dd3b38d6184c655031746c53",
"body": "[#972] Clean shutdown() + fix quadwork stop PID handling",
"is_bot": false,
"headline": "Merge pull request #981 from realproject7/task/972-shutdown-cleanup",
"author_name": "Project7",
"author_login": "realproject7",
"committed_at": "2026-07-06T04:32:07Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "82fcc90c93e24678c06851652881aa0ae3ce6f07",
"body": "EPIC #967 Phase 2. Two lifecycle defects, isolated to the shutdown/stop paths.\n\nshutdown() (server/index.js) only stopped butler + file-chat, so Ctrl+C:\n- orphaned the detached+unref caffeinate (no -t) → the Mac never slept again,\n- left agent PTYs (and CLI children holding worktree locks) alive,\n- \n[…]\nd-to-end (throwaway\nport): server.pid written, stop → clean shutdown, no orphan, pid removed.\nSuite 57/0/2, tsc clean; never touched port 8400.\n\nCo-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>",
"is_bot": false,
"headline": "[#972] Clean shutdown() + fix `quadwork stop` PID handling",
"author_name": "Cho Young-Hwi",
"author_login": "realproject7",
"committed_at": "2026-07-06T03:49:55Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "d741026761257483f4f875ed81fb33e2ef2b3f1a",
"body": "[#968] Auth the terminal WS + PTY-write endpoints (Origin + session token)",
"is_bot": false,
"headline": "Merge pull request #980 from realproject7/task/968-ws-pty-auth",
"author_name": "Project7",
"author_login": "realproject7",
"committed_at": "2026-07-06T03:32:19Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c55c0661b54f89eee25c36af4267b85a5c14b139",
"body": "Review (@re1): the token endpoint gated on req.ip alone, so a DNS-rebound\npage (attacker domain → 127.0.0.1) or a same-host reverse proxy keeps the\nsocket on loopback while the browser's Host/Origin is a REMOTE name, and\ncould pull the session token to a non-local origin — then authenticate\n/ws/term\n[…]\nas documented.\n\nLocal dashboard on 127.0.0.1/localhost is unaffected (re-verified: attach +\ntype on a throwaway port). Suite 55/0/2, tsc clean.\n\nCo-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>",
"is_bot": false,
"headline": "[#968] Harden /api/session-token against DNS rebinding / reverse proxy",
"author_name": "Cho Young-Hwi",
"author_login": "realproject7",
"committed_at": "2026-07-06T03:26:02Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "3d11b6676c4d703ed6e10bc6c6123b92d895c21b",
"body": "…oken)\n\nEPIC #967 Phase 1 — close the top security hole: the terminal WebSocket\nand PTY-write endpoints had no auth or Origin check, so any web page the\noperator visited could open ws://127.0.0.1:8400/ws/terminal and inject\nkeystrokes into an agent PTY (remote shell over tailnet).\n\nBackend (server/i\n[…]\nand asserts foreign-origin/no-token WS rejected, valid token accepted,\nREST token gate, /api/config redaction + PUT preservation. Suite 55/0/2.\n\nCo-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>",
"is_bot": false,
"headline": "[#968] Auth the terminal WS + PTY-write endpoints (Origin + session t…",
"author_name": "Cho Young-Hwi",
"author_login": "realproject7",
"committed_at": "2026-07-06T03:18:34Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "48f78922f2464c3813918be706ce23b7c80e7a2b",
"body": "…ards\n\n[#970] Guard activity/log, bridge sender, reviewer-token path",
"is_bot": false,
"headline": "Merge pull request #979 from realproject7/task/970-routes-security-gu…",
"author_name": "Project7",
"author_login": "realproject7",
"committed_at": "2026-07-06T02:48:59Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4bb9e94b73fee28f462c2a8b4d0544a29c482ef7",
"body": "EPIC #967 Phase 1 security — three isolated local-attack-surface gaps in\nserver/routes.js, each with a test.\n\n1. POST /api/activity/log: `project` had only a non-empty-string check but\n flows into path.join(CONFIG_DIR, project, \"activity.jsonl\") → mkdir +\n appendFileSync, i.e. an arbitrary-path \n[…]\nt.js fixtures moved to\nin-root worktree paths to match the now-restricted behavior (intent preserved).\nSuite: 54 passed / 0 failed / 2 skipped.\n\nCo-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>",
"is_bot": false,
"headline": "[#970] Guard activity/log, bridge sender, reviewer-token path",
"author_name": "Cho Young-Hwi",
"author_login": "realproject7",
"committed_at": "2026-07-05T03:14:14Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "97b9d9fd106a96a0bbd20872818266f65354576e",
"body": "[#969] Fix QueueManager markdown XSS via react-markdown",
"is_bot": false,
"headline": "Merge pull request #978 from realproject7/task/969-queuemanager-xss",
"author_name": "Project7",
"author_login": "realproject7",
"committed_at": "2026-07-05T02:59:51Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "3a74bdbbcd3284cfde21e09f4ccd84660d0e085c",
"body": "Add a react-markdown `components.a` override so preview links keep the\nprior `target=\"_blank\" rel=\"noopener noreferrer\"` behavior — clicking a\nlink no longer navigates the SPA away from (and discards) the queue\neditor. react-markdown still sanitizes the href, so this is styling/UX\nparity only, no security change.\n\nCo-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>",
"is_bot": false,
"headline": "[#969] Preserve preview links' new-tab behavior",
"author_name": "Cho Young-Hwi",
"author_login": "realproject7",
"committed_at": "2026-07-05T02:54:06Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "4793c6858d7fd5d2b98dba34ec143f6a394b6ace",
"body": "EPIC #967 Phase 1 (security). QueueManager's preview built HTML with a\nhand-rolled renderMarkdown and injected it via dangerouslySetInnerHTML.\nGitHub issue titles flow into that markdown (generateTemplate line ~50),\nso a title like `[x](javascript:alert(1))` or an attribute-breakout\n(`\" onmouseover=\n[…]\nl for normal\n markdown. Runs in the plain-node suite via react-dom/server.\n\nNo new dependency. tsc + eslint clean; suite 53 passed / 0 failed.\n\nCo-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>",
"is_bot": false,
"headline": "[#969] Fix QueueManager markdown XSS via react-markdown",
"author_name": "Cho Young-Hwi",
"author_login": "realproject7",
"committed_at": "2026-07-05T02:49:21Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "f6aead0bf2b440ee3e22b6236cd2f6ea3e4509f2",
"body": "[#976] Add CI test-gate, release gate, and pack-smoke asset coverage",
"is_bot": false,
"headline": "Merge pull request #977 from realproject7/task/976-ci-test-gate",
"author_name": "Project7",
"author_login": "realproject7",
"committed_at": "2026-07-05T02:42:04Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "95c8016ff5925c8bafe2d1e14e0f1aea7256efb7",
"body": "Phase 0 of EPIC #967: PRs and pushes to main had no CI, so the\npack-smoke crash-loop guard (#937/#939) only ran on manual `npm test`,\nand the release scripts published with no test step.\n\n- .github/workflows/ci.yml: run the server discovery suite on PRs and\n push-to-main (Node 24.x, matching the VP\n[…]\nI\" claim to reference the new\n workflow now that CI actually exists.\n\nNo runtime code changes. Existing suite (52 runnable, 2 skipped) passes.\n\nCo-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>",
"is_bot": false,
"headline": "[#976] Add CI test-gate, release gate, and pack-smoke asset coverage",
"author_name": "Cho Young-Hwi",
"author_login": "realproject7",
"committed_at": "2026-07-05T02:33:26Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "a344307b677175ac1eb4138e4ea43228bf06f7e5",
"body": "[#964] 2.4.0",
"is_bot": false,
"headline": "Merge pull request #965 from realproject7/task/964-release-v2-4-0",
"author_name": "Project7",
"author_login": "realproject7",
"committed_at": "2026-07-04T03:09:50Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "341198502a4d6047d908aeb03a8c737d8fa1fe7e",
"body": "Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "[#964] 2.4.0",
"author_name": "Cho Young-Hwi",
"author_login": "realproject7",
"committed_at": "2026-07-04T03:06:44Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "354b90f5531cf1376ed16379eb0bc1d2aca0139e",
"body": "[#962] Agent guidelines v7 — EPIC alignment, design fidelity, kill-list review, evidence-bound reporting",
"is_bot": false,
"headline": "Merge pull request #963 from realproject7/task/962-agent-guidelines-v7",
"author_name": "Project7",
"author_login": "realproject7",
"committed_at": "2026-07-04T03:05:38Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d23c62e81568dd64a514c361e6b7ecb968fe821b",
"body": "Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "[#962] Allow reviewer memory-card writes as sole no-write exception",
"author_name": "Cho Young-Hwi",
"author_login": "realproject7",
"committed_at": "2026-07-04T03:01:58Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "df60faac0473677be11a81c234d9e2fda7be0400",
"body": "…st review, evidence-bound reporting\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "[#962] Agent guidelines v7 — EPIC alignment, design fidelity, kill-li…",
"author_name": "Cho Young-Hwi",
"author_login": "realproject7",
"committed_at": "2026-07-03T04:55:59Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "8638a531dcbbe4d7b2794c1ccc95280284e8b2ba",
"body": null,
"is_bot": false,
"headline": "2.3.9",
"author_name": "Cho Young-Hwi",
"author_login": "realproject7",
"committed_at": "2026-06-11T07:40:44Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0fbd4d609c7fb63608b7b2a8fd51b1f816fb5106",
"body": "[#958] Add Fable 5 (claude-fable-5) to the agent model catalog",
"is_bot": false,
"headline": "Merge pull request #959 from realproject7/task/958-fable5-model-catalog",
"author_name": "Project7",
"author_login": "realproject7",
"committed_at": "2026-06-11T07:40:29Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1657297c1d1cb74b6456c1902227b3b8edbdf245",
"body": "Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>",
"is_bot": false,
"headline": "[#958] Add Fable 5 (claude-fable-5) to the claude model catalog",
"author_name": "Cho Young-Hwi",
"author_login": "realproject7",
"committed_at": "2026-06-11T07:29:09Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "a91b908366fbc6cf5538a37355b4c8964d470924",
"body": null,
"is_bot": false,
"headline": "2.3.8",
"author_name": "Cho Young-Hwi",
"author_login": "realproject7",
"committed_at": "2026-06-07T21:18:17Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "37d9576e42be62708d72a57d10779770597752a2",
"body": "…stdio\n\n[#948] Document operator MCP stdio JSON-RPC",
"is_bot": false,
"headline": "Merge pull request #956 from realproject7/task/948-docs-operator-mcp-…",
"author_name": "Project7",
"author_login": "realproject7",
"committed_at": "2026-06-07T13:02:42Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "cc26b5e8c549fd253ef040097c5ee307679fb9d9",
"body": null,
"is_bot": false,
"headline": "[#948] Document operator MCP stdio JSON-RPC",
"author_name": "Cho Young-Hwi",
"author_login": "realproject7",
"committed_at": "2026-06-07T13:00:30Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "69ce351b43251401e6f32527eaa5ce6850180312",
"body": "…token\n\n[#949] Add reviewer account settings",
"is_bot": false,
"headline": "Merge pull request #955 from realproject7/task/949-settings-reviewer-…",
"author_name": "Project7",
"author_login": "realproject7",
"committed_at": "2026-06-07T12:57:40Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "811595271a9dddf2afa07f08e35119d16c9ef789",
"body": null,
"is_bot": false,
"headline": "[#949] Preserve reviewer user on config saves",
"author_name": "Cho Young-Hwi",
"author_login": "realproject7",
"committed_at": "2026-06-07T12:56:15Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "19b66c2a7ed44d21c37913d29deb7e0b654a95c7",
"body": null,
"is_bot": false,
"headline": "[#949] Use neutral reviewer token fixture",
"author_name": "Cho Young-Hwi",
"author_login": "realproject7",
"committed_at": "2026-06-07T12:54:17Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "01aae55a93000a397becce5737692d76730cd67f",
"body": null,
"is_bot": false,
"headline": "[#949] Add reviewer account settings",
"author_name": "Cho Young-Hwi",
"author_login": "realproject7",
"committed_at": "2026-06-07T12:51:59Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "468abd838cb05b50b4123d158341635fd1b8010f",
"body": "…-clone\n\n[#947] Refresh setup clones before worktrees",
"is_bot": false,
"headline": "Merge pull request #954 from realproject7/task/947-setup-wizard-empty…",
"author_name": "Project7",
"author_login": "realproject7",
"committed_at": "2026-06-07T12:45:21Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "400640bc0f055b009241448bbfac0a7348579a7d",
"body": null,
"is_bot": false,
"headline": "[#947] Refresh setup clones before worktrees",
"author_name": "Cho Young-Hwi",
"author_login": "realproject7",
"committed_at": "2026-06-07T12:42:31Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "3337c4b0aae504b99e69b57fc896f3a6009e92c2",
"body": "…ive-close-link\n\n[#951] Link batch progress via native close events",
"is_bot": false,
"headline": "Merge pull request #953 from realproject7/task/951-batch-progress-nat…",
"author_name": "Project7",
"author_login": "realproject7",
"committed_at": "2026-06-07T12:36:17Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "28a2c7fd6ed78ff7a3ed3a388b4a2394531fa8ce",
"body": null,
"is_bot": false,
"headline": "[#951] Link batch progress via native close events",
"author_name": "Cho Young-Hwi",
"author_login": "realproject7",
"committed_at": "2026-06-07T12:34:10Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ae49f67398c85d5d9b053126233f102069577a73",
"body": "…minal-cache\n\n[#950] Cache terminal batch progress rows",
"is_bot": false,
"headline": "Merge pull request #952 from realproject7/task/950-batch-progress-ter…",
"author_name": "Project7",
"author_login": "realproject7",
"committed_at": "2026-06-07T12:29:16Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e2d08bad7329b069b2092dece79516da8017e085",
"body": null,
"is_bot": false,
"headline": "[#950] Let fresh progress override terminal cache",
"author_name": "Cho Young-Hwi",
"author_login": "realproject7",
"committed_at": "2026-06-07T12:27:30Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1e87723c0f26259a7a0c1c7225f416d62296c8d0",
"body": null,
"is_bot": false,
"headline": "[#950] Cache terminal batch progress rows",
"author_name": "Cho Young-Hwi",
"author_login": "realproject7",
"committed_at": "2026-06-07T12:23:31Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "bc13d536048db2439ad807264556c153e7c372c7",
"body": "…ED for batch tracking\n\nA PR titled without [#<issue>] (even with \"Closes #N\" in the body) isn't linked by\nQuadWork's title-based tracker, so the closed item flaps queued(retrying)<->closed and\nburns GitHub API re-checking it (live repro: plotlink-ows #488 / PR #491). Reinforces the\nexisting convention pending the proper #951 fix (use GitHub's native close-link).\n\nCo-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>",
"is_bot": false,
"headline": "[#951] dev seed: stress that the [#<issue>] PR title prefix is REQUIR…",
"author_name": "Cho Young-Hwi",
"author_login": "realproject7",
"committed_at": "2026-06-07T12:04:20Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "7b7531fbfb092f1e0a5ed443dabfb3957fd0503b",
"body": null,
"is_bot": false,
"headline": "2.3.7",
"author_name": "Cho Young-Hwi",
"author_login": "realproject7",
"committed_at": "2026-06-04T07:18:46Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "40c835616c443b2da4901d14bdf74fea27b612b4",
"body": "…pshot\n\n[#943] Read persisted GITHUB.md for code-batch progress on cold cache; cap + soft-fail fallback",
"is_bot": false,
"headline": "Merge pull request #946 from realproject7/task/943-batch-progress-sna…",
"author_name": "Project7",
"author_login": "realproject7",
"committed_at": "2026-06-04T07:13:52Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "6fb40fedf00da5826d65844c88a5553eac333077",
"body": "…; cap + soft-fail fallback\n\nCode-batch progress read the in-memory _graphqlCache, which is empty after a\nrestart until the next board refresh. Every item then fell through to the #828\nper-item live fallback (gh issues/N + Search) which (a) fired ALL items\nconcurrently with no cap and (b) rendered a\n[…]\nrency-capped (observed max ≤ GH_MAX_CONCURRENT) and\nsoft-fails every transient error to \"queued (retrying)\", never \"fetch failed\".\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "[#943] Read persisted GITHUB.md for code-batch progress on cold cache…",
"author_name": "Cho Young-Hwi",
"author_login": "realproject7",
"committed_at": "2026-06-04T07:09:17Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "18268188e0791101b41ffe85984597591f6882f0",
"body": "[#944] Persist pinned_projects & sidebar_groups via field-scoped endpoints",
"is_bot": false,
"headline": "Merge pull request #945 from realproject7/task/944-persist-pins",
"author_name": "Project7",
"author_login": "realproject7",
"committed_at": "2026-06-04T06:55:06Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "610586462fd12b574a2b7f0eb4229144a401c438",
"body": "…oints\n\nPins/groups reset on server restart because all persistence went through the\nwhole-config GET→mutate→PUT path. Any writer holding a stale snapshot (and a\nrestart fires several at once: settings, idle, bridge/queue/trigger widgets)\nsilently dropped pins/groups on its next full PUT.\n\nFix:\n- Ad\n[…]\noups; malformed payloads\n→ 400 leaving config unchanged; pins/groups survive the startup config rewrite\nand a version-bump reseed.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "[#944] Persist pinned_projects & sidebar_groups via field-scoped endp…",
"author_name": "Cho Young-Hwi",
"author_login": "realproject7",
"committed_at": "2026-06-04T06:50:30Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "befeb2338b126e94c128d9c2823e859ee93f1fb6",
"body": null,
"is_bot": false,
"headline": "2.3.6",
"author_name": "Cho Young-Hwi",
"author_login": "realproject7",
"committed_at": "2026-06-02T08:54:33Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "30ee89691eef1e5579082fcfede07ebace5318ae",
"body": "[#939] Add pack-smoke CI guard against runtime requires missing from the tarball",
"is_bot": false,
"headline": "Merge pull request #942 from realproject7/task/939-pack-smoke",
"author_name": "Project7",
"author_login": "realproject7",
"committed_at": "2026-06-02T08:48:30Z",
"body_truncated": false,
"is_coding_agent": false
}
],
"releases_count": 97,
"commits_last_year": 1404,
"latest_release_at": "2026-07-25T01:47:28Z",
"latest_release_tag": "v2.7.1",
"releases_from_tags": false,
"days_since_last_push": 4,
"active_weeks_last_year": 17,
"days_since_latest_release": 11,
"mean_days_between_releases": 5.9
},
"artifacts": {
"collected": true,
"structure": [],
"declarations": [
{
"name": "quadwork",
"path": "package.json",
"tokens": [
"npm.bin"
],
"ecosystem": "npm"
}
]
},
"community": {
"has_readme": true,
"has_license": true,
"readme_badges": {
"hosts": [
"shields.io"
],
"total": 6,
"header": 0,
"collected": true,
"has_inspect_badge": false
},
"has_description": true,
"has_contributing": false,
"health_percentage": 42,
"has_issue_template": false,
"has_code_of_conduct": false,
"has_pull_request_template": false
},
"ecosystem": {
"packages": [
{
"name": "quadwork",
"exists": true,
"license": "MIT",
"keywords": [
"ai",
"agents",
"multi-agent",
"coding",
"dashboard",
"terminal",
"claude",
"codex",
"quadwork"
],
"ecosystem": "npm",
"categories": [],
"matches_repo": true,
"registry_url": "https://www.npmjs.com/package/quadwork",
"declared_type": null,
"is_deprecated": false,
"latest_version": "2.7.1",
"repository_url": "https://github.com/realproject7/quadwork",
"versions_count": 101,
"total_downloads": null,
"dependents_count": null,
"deprecation_note": null,
"maintainers_count": 1,
"monthly_downloads": 2426,
"first_published_at": "2026-04-01T13:17:10.574000Z",
"latest_published_at": "2026-07-25T01:54:02.442000Z",
"latest_version_yanked": null,
"days_since_latest_publish": 11
}
]
},
"popularity": {
"forks": 9,
"stars": 29,
"watchers": 0,
"fork_history": {
"days": [
{
"date": "2026-04-21",
"count": 4
},
{
"date": "2026-04-24",
"count": 3
},
{
"date": "2026-04-30",
"count": 1
},
{
"date": "2026-07-30",
"count": 1
}
],
"complete": true,
"collected": 9,
"total_forks": 9
},
"star_history": null,
"open_issues_and_prs": 3
},
"ai_readiness": {
"has_nix": false,
"example_dirs": [],
"has_llms_txt": false,
"has_dockerfile": false,
"has_mcp_signal": true,
"bootstrap_files": [],
"api_schema_files": [],
"has_devcontainer": false,
"typecheck_configs": [
"tsconfig.json"
],
"toolchain_manifests": [],
"largest_source_bytes": 243846,
"source_files_sampled": 148,
"oversized_source_files": 3,
"agent_instruction_files": [
"CLAUDE.md",
"templates/CLAUDE.md"
],
"agent_instruction_max_bytes": 3586
},
"dependencies": {
"manifests": [
"package.json"
],
"advisories": {
"error": null,
"scope": "published_package",
"source": "osv",
"findings": [],
"collected": true,
"malicious": [],
"truncated": false,
"by_severity": {},
"advisory_count": 0,
"affected_count": 0,
"assessed_count": 110,
"malicious_count": 0,
"assessed_package": "npm:quadwork@2.7.1",
"unassessed_count": 0,
"direct_affected_count": 0
},
"ecosystems": [
"npm"
],
"dependencies": [
{
"name": "discord.js",
"manifest": "package.json",
"ecosystem": "npm",
"version_constraint": "^14.18.0"
},
{
"name": "express",
"manifest": "package.json",
"ecosystem": "npm",
"version_constraint": "^5.2.1"
},
{
"name": "multer",
"manifest": "package.json",
"ecosystem": "npm",
"version_constraint": "^2.1.1"
},
{
"name": "node-pty",
"manifest": "package.json",
"ecosystem": "npm",
"version_constraint": "^1.2.0-beta.12"
},
{
"name": "ws",
"manifest": "package.json",
"ecosystem": "npm",
"version_constraint": "^8.20.0"
}
],
"all_dependencies": {
"error": "GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository",
"source": null,
"packages": [],
"collected": false,
"truncated": false,
"total_count": null,
"direct_count": null,
"indirect_count": null
}
},
"maintainership": {
"issues": {
"open_prs": 0,
"merged_prs": 478,
"open_issues": 3,
"closed_ratio": 0.995,
"closed_issues": 543,
"closed_unmerged_prs": 3
},
"bus_factor": 1,
"bot_contributors": 0,
"top_contributors": [
{
"type": "User",
"login": "realproject7",
"commits": 1302,
"avatar_url": "https://avatars.githubusercontent.com/u/15100667?v=4"
},
{
"type": "User",
"login": "gracefully91",
"commits": 1,
"avatar_url": "https://avatars.githubusercontent.com/u/133555466?v=4"
},
{
"type": "User",
"login": "ggomaeng",
"commits": 1,
"avatar_url": "https://avatars.githubusercontent.com/u/18402191?v=4"
}
],
"contributors_sampled": 3,
"top_contributor_share": 0.998
},
"quality_signals": {
"has_ci": true,
"has_tests": true,
"ci_workflows": [
"ci.yml"
],
"has_docs_dir": true,
"linter_configs": [
"eslint.config.mjs"
],
"has_editorconfig": false,
"has_linter_config": true,
"has_precommit_config": false
},
"security_signals": {
"lockfiles": [
"package-lock.json"
],
"scorecard": {
"checks": [
{
"name": "Binary-Artifacts",
"score": 10,
"reason": "no binaries found in the repo",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#binary-artifacts"
},
{
"name": "Branch-Protection",
"score": 0,
"reason": "branch protection not enabled on development/release branches",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#branch-protection"
},
{
"name": "CI-Tests",
"score": 10,
"reason": "13 out of 13 merged PRs checked by a CI test -- score normalized to 10",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#ci-tests"
},
{
"name": "CII-Best-Practices",
"score": 0,
"reason": "no effort to earn an OpenSSF best practices badge detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#cii-best-practices"
},
{
"name": "Code-Review",
"score": 10,
"reason": "all changesets reviewed",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#code-review"
},
{
"name": "Contributors",
"score": 6,
"reason": "project has 2 contributing companies or organizations -- score normalized to 6",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#contributors"
},
{
"name": "Dangerous-Workflow",
"score": 10,
"reason": "no dangerous workflow patterns detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dangerous-workflow"
},
{
"name": "Dependency-Update-Tool",
"score": 0,
"reason": "no update tool detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dependency-update-tool"
},
{
"name": "Fuzzing",
"score": 0,
"reason": "project is not fuzzed",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#fuzzing"
},
{
"name": "License",
"score": 10,
"reason": "license file detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#license"
},
{
"name": "Maintained",
"score": 10,
"reason": "30 commit(s) and 30 issue activity found in the last 90 days -- score normalized to 10",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#maintained"
},
{
"name": "Packaging",
"score": null,
"reason": "packaging workflow not detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#packaging"
},
{
"name": "Pinned-Dependencies",
"score": 3,
"reason": "dependency not pinned by hash detected -- score normalized to 3",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#pinned-dependencies"
},
{
"name": "SAST",
"score": 0,
"reason": "SAST tool is not run on all commits -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#sast"
},
{
"name": "Security-Policy",
"score": 0,
"reason": "security policy file not detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#security-policy"
},
{
"name": "Signed-Releases",
"score": null,
"reason": "no releases found",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#signed-releases"
},
{
"name": "Token-Permissions",
"score": 0,
"reason": "detected GitHub workflow tokens with excessive permissions",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#token-permissions"
},
{
"name": "Vulnerabilities",
"score": 0,
"reason": "34 existing vulnerabilities detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#vulnerabilities"
}
],
"commit": "44d820ce0c135b274ab0aa6abb720af3190746ca",
"ran_at": "2026-08-05T08:52:11Z",
"aggregate_score": 4.4,
"scorecard_version": "v5.5.0"
},
"has_codeql_workflow": false,
"has_security_policy": false,
"has_dependabot_config": false
},
"contribution_flow": {
"collected": true,
"recent_prs": {
"merged_7d": 1,
"decided_7d": 1,
"merged_30d": 25,
"authors_30d": 1,
"decided_30d": 26,
"sample_size": 60,
"window_days": 30,
"sample_exhausted": false,
"authors_probed_30d": 1,
"newcomer_merged_30d": 0,
"bot_prs_excluded_30d": 0,
"newcomer_authors_30d": 0,
"newcomer_decided_30d": 0
},
"ci_last_run_at": "2026-08-01T04:16:40Z",
"oldest_open_prs": [],
"last_merged_pr_at": "2026-08-01T04:15:13Z",
"ci_last_conclusion": "SUCCESS",
"oldest_open_issues": [
{
"number": 1025,
"created_at": "2026-08-01T04:10:16Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 1026,
"created_at": "2026-08-01T04:33:45Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 1027,
"created_at": "2026-08-01T04:34:05Z",
"last_comment_at": null,
"last_comment_author": null
}
]
}
},
"config": {
"disabled_metrics": [],
"disabled_categories": [],
"disabled_components": {}
},
"source": {
"url": "https://github.com/realproject7/quadwork",
"host": "github.com",
"name": "quadwork",
"owner": "realproject7"
},
"metrics": {
"overall": {
"key": "overall",
"band": "good",
"name": "Overall health",
"note": "The weighted overall 67 is calibrated to 78 on the published index scale (record calibration 2026-08-02).",
"notes": [
{
"code": "overall_calibration",
"params": {
"raw": 67,
"calibrated": 78,
"calibration": "2026-08-02"
}
}
],
"value": 78,
"inputs": {
"security": 55,
"vitality": 86,
"community": 44,
"governance": 64,
"calibration": "2026-08-02",
"engineering": 80,
"ai_readiness": 67,
"weighted_overall_raw": 67
},
"components": []
},
"categories": [
{
"key": "vitality",
"band": "excellent",
"name": "Vitality",
"value": 86,
"weight": 0.21,
"metrics": [
{
"key": "development_activity",
"band": "good",
"name": "Development activity",
"note": null,
"notes": [],
"value": 76,
"inputs": {
"commits_last_year": 1404,
"human_commit_share": 1,
"days_since_last_push": 4,
"active_weeks_last_year": 17
},
"components": [
{
"key": "push_recency",
"name": "Push recency",
"detail": "last push 4 days ago",
"points": 36,
"status": "met",
"details": [
{
"code": "push_recency",
"params": {
"days": 4
}
}
],
"max_points": 36
},
{
"key": "commit_cadence",
"name": "Commit cadence",
"detail": "17/52 weeks with commits",
"points": 11.8,
"status": "partial",
"details": [
{
"code": "commit_cadence_weeks",
"params": {
"weeks": 17
}
}
],
"max_points": 36
},
{
"key": "commit_volume",
"name": "Commit volume",
"detail": "1404 commits in the last year",
"points": 18,
"status": "met",
"details": [
{
"code": "commits_last_year",
"params": {
"count": 1404
}
}
],
"max_points": 18
},
{
"key": "openssf_scorecard_maintained",
"name": "OpenSSF Scorecard: Maintained",
"detail": "30 commit(s) and 30 issue activity found in the last 90 days -- score normalized to 10",
"points": 10,
"status": "met",
"details": [],
"max_points": 10
}
]
},
{
"key": "release_discipline",
"band": "exceptional",
"name": "Release discipline",
"note": "Excluded from scoring (no data or not applicable): OpenSSF Scorecard: Signed-Releases. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"openssf_scorecard_signed_releases"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 100,
"inputs": {
"releases_count": 97,
"latest_release_tag": "v2.7.1",
"releases_from_tags": false,
"days_since_latest_release": 11,
"mean_days_between_releases": 5.9
},
"components": [
{
"key": "ships_releases",
"name": "Ships releases",
"detail": "97 releases published",
"points": 27,
"status": "met",
"details": [
{
"code": "releases_published",
"params": {
"count": 97
}
}
],
"max_points": 27
},
{
"key": "release_recency",
"name": "Release recency",
"detail": "latest release 11 days ago",
"points": 36,
"status": "met",
"details": [
{
"code": "release_recency",
"params": {
"days": 11
}
}
],
"max_points": 36
},
{
"key": "release_cadence",
"name": "Release cadence",
"detail": "a release every ~5.9 days",
"points": 27,
"status": "met",
"details": [
{
"code": "release_cadence",
"params": {
"gap": 5.9
}
}
],
"max_points": 27
},
{
"key": "openssf_scorecard_signed_releases",
"name": "OpenSSF Scorecard: Signed-Releases",
"detail": "no releases found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 10
}
]
},
{
"key": "abandonment",
"band": "exceptional",
"name": "Abandonment",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"cap": null,
"state": "unverified",
"guards": [],
"signals": [],
"red_flag": false,
"multiplier_pct": 100,
"declared_reason": null,
"unverified_reason": "repository_too_young",
"unanswered_open_prs": null,
"unanswered_open_issues": null,
"days_since_last_merged_pr": null,
"days_since_last_human_commit": null,
"days_since_last_human_commit_is_floor": false
},
"components": [
{
"key": "project_is_still_maintained",
"name": "Project is still maintained",
"detail": "maintenance record not established from the collected data",
"points": 100,
"status": "met",
"details": [
{
"code": "abandonment_unverified",
"params": {}
}
],
"max_points": 100
}
]
}
],
"description": "Is the project alive — is code being written and are releases shipping?"
},
{
"key": "community",
"band": "weak",
"name": "Community & Adoption",
"value": 44,
"weight": 0.17,
"metrics": [
{
"key": "popularity",
"band": "at_risk",
"name": "Popularity & adoption",
"note": null,
"notes": [],
"value": 31,
"inputs": {
"forks": 9,
"stars": 29,
"watchers": 0,
"growth_state": "unverified",
"growth_factor_pct": 100,
"growth_unverified_reason": "no_history"
},
"components": [
{
"key": "stars",
"name": "Stars",
"detail": "29 stars",
"points": 23.5,
"status": "partial",
"details": [
{
"code": "stars",
"params": {
"count": 29
}
}
],
"max_points": 60
},
{
"key": "forks",
"name": "Forks",
"detail": "9 forks",
"points": 7.5,
"status": "partial",
"details": [
{
"code": "forks",
"params": {
"count": 9
}
}
],
"max_points": 25
},
{
"key": "watchers",
"name": "Watchers",
"detail": "0 watchers",
"points": 0,
"status": "missed",
"details": [
{
"code": "watchers",
"params": {
"count": 0
}
}
],
"max_points": 15
}
]
},
{
"key": "community_health",
"band": "moderate",
"name": "Community health",
"note": null,
"notes": [],
"value": 50,
"inputs": {
"has_readme": true,
"has_license": true,
"readme_badges": 6,
"has_contributing": false,
"has_issue_template": false,
"has_code_of_conduct": false,
"readme_badge_services": [
"shields.io"
],
"has_pull_request_template": false
},
"components": [
{
"key": "readme",
"name": "README",
"detail": null,
"points": 22.5,
"status": "met",
"details": [],
"max_points": 22.5
},
{
"key": "license",
"name": "License",
"detail": "recognized license (MIT)",
"points": 22.5,
"status": "met",
"details": [
{
"code": "license_standard",
"params": {}
},
{
"code": "license_spdx",
"params": {
"spdx": "MIT"
}
}
],
"max_points": 22.5
},
{
"key": "contributing_guide",
"name": "CONTRIBUTING guide",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 18
},
{
"key": "code_of_conduct",
"name": "Code of conduct",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 13.5
},
{
"key": "issue_template",
"name": "Issue template",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.2
},
{
"key": "pr_template",
"name": "PR template",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 6.3
}
]
},
{
"key": "ecosystem_adoption",
"band": "moderate",
"name": "Ecosystem adoption (downloads)",
"note": "Excluded from scoring (no data or not applicable): Registry dependents. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"registry_dependents"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 56,
"inputs": {
"packages": [
"quadwork"
],
"dependents": null,
"ecosystems": "npm",
"total_downloads": null,
"monthly_downloads": 2426
},
"components": [
{
"key": "monthly_downloads",
"name": "Monthly downloads",
"detail": "2,426 downloads/month across npm",
"points": 45.1,
"status": "partial",
"details": [
{
"code": "downloads_monthly",
"params": {
"count": 2426,
"ecosystems": "npm"
}
}
],
"max_points": 80
},
{
"key": "registry_dependents",
"name": "Registry dependents",
"detail": "not reported by this ecosystem",
"points": 0,
"status": "excluded",
"details": [
{
"code": "not_reported_by_this_ecosystem",
"params": {}
}
],
"max_points": 20
}
]
}
],
"description": "Does the project have users, downloads, attention, and a welcoming setup for contributors?"
},
{
"key": "governance",
"band": "moderate",
"name": "Sustainability & Governance",
"value": 64,
"weight": 0.23,
"metrics": [
{
"key": "maintainer_resilience",
"band": "critical",
"name": "Maintainer resilience (bus factor)",
"note": null,
"notes": [],
"value": 19,
"inputs": {
"bus_factor": 1,
"contributors_sampled": 3,
"top_contributor_share": 0.998
},
"components": [
{
"key": "bus_factor",
"name": "Bus factor",
"detail": "1 contributor(s) cover half of all commits",
"points": 9,
"status": "partial",
"details": [
{
"code": "bus_factor",
"params": {
"count": 1
}
}
],
"max_points": 54
},
{
"key": "commit_distribution",
"name": "Commit distribution",
"detail": "top contributor authored 100% of commits",
"points": 0,
"status": "partial",
"details": [
{
"code": "top_contributor_share",
"params": {
"share": 100
}
}
],
"max_points": 22.5
},
{
"key": "contributor_breadth",
"name": "Contributor breadth",
"detail": "3 contributors",
"points": 4.1,
"status": "partial",
"details": [
{
"code": "contributors_sampled",
"params": {
"count": 3
}
}
],
"max_points": 13.5
},
{
"key": "openssf_scorecard_contributors",
"name": "OpenSSF Scorecard: Contributors",
"detail": "project has 2 contributing companies or organizations -- score normalized to 6",
"points": 6,
"status": "partial",
"details": [],
"max_points": 10
}
]
},
{
"key": "responsiveness",
"band": "exceptional",
"name": "Issue & PR responsiveness",
"note": "Excluded from scoring (no data or not applicable): Newcomer PR acceptance. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"newcomer_pr_acceptance"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 100,
"inputs": {
"merged_prs": 478,
"open_issues": 3,
"closed_issues": 543,
"prs_merged_7d": 1,
"prs_decided_7d": 1,
"prs_merged_30d": 25,
"prs_decided_30d": 26,
"issue_closed_ratio": 0.995,
"closed_unmerged_prs": 3,
"first_time_authors_30d": 0,
"first_time_prs_merged_30d": 0,
"first_time_prs_decided_30d": 0
},
"components": [
{
"key": "issue_resolution",
"name": "Issue resolution",
"detail": "100% of issues closed",
"points": 41.8,
"status": "partial",
"details": [
{
"code": "issues_closed_share",
"params": {
"share": 100
}
}
],
"max_points": 42
},
{
"key": "pr_acceptance",
"name": "PR acceptance",
"detail": "478/481 decided PRs merged",
"points": 29.8,
"status": "partial",
"details": [
{
"code": "decided_prs_merged",
"params": {
"merged": 478,
"decided": 481
}
}
],
"max_points": 30
},
{
"key": "newcomer_pr_acceptance",
"name": "Newcomer PR acceptance",
"detail": "no first-time contributor's PR decided in 30d",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_newcomer_prs",
"params": {
"days": 30
}
}
],
"max_points": 13
},
{
"key": "openssf_scorecard_code_review",
"name": "OpenSSF Scorecard: Code-Review",
"detail": "all changesets reviewed",
"points": 15,
"status": "met",
"details": [],
"max_points": 15
}
]
},
{
"key": "stewardship",
"band": "moderate",
"name": "Ownership & stewardship",
"note": "Excluded from scoring (no data or not applicable): Verified domain. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"verified_domain"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 54,
"inputs": {
"followers": 30,
"owner_type": "User",
"is_verified": null,
"owner_login": "realproject7",
"public_repos": 29,
"account_age_days": 3949
},
"components": [
{
"key": "ownership_backing",
"name": "Ownership backing",
"detail": "personal (user) account",
"points": 10,
"status": "partial",
"details": [
{
"code": "owner_personal",
"params": {}
}
],
"max_points": 30
},
{
"key": "verified_domain",
"name": "Verified domain",
"detail": "not applicable to user accounts",
"points": 0,
"status": "excluded",
"details": [
{
"code": "not_applicable_to_user_accounts",
"params": {}
}
],
"max_points": 20
},
{
"key": "owner_reach",
"name": "Owner reach",
"detail": "30 followers of realproject7",
"points": 10.7,
"status": "partial",
"details": [
{
"code": "owner_followers",
"params": {
"count": 30,
"login": "realproject7"
}
}
],
"max_points": 25
},
{
"key": "track_record",
"name": "Track record",
"detail": "29 public repos, account ~10 yr old",
"points": 22.8,
"status": "partial",
"details": [
{
"code": "public_repos",
"params": {
"count": 29
}
},
{
"code": "account_age_years",
"params": {
"years": 10
}
}
],
"max_points": 25
}
]
},
{
"key": "package_maintenance",
"band": "exceptional",
"name": "Package maintenance",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"packages": [
"quadwork"
],
"ecosystems": "npm",
"any_deprecated": false,
"min_days_since_publish": 11
},
"components": [
{
"key": "published_resolvable",
"name": "Published & resolvable",
"detail": "1 package(s) on npm",
"points": 25,
"status": "met",
"details": [
{
"code": "packages_published",
"params": {
"count": 1,
"ecosystems": "npm"
}
}
],
"max_points": 25
},
{
"key": "publish_recency",
"name": "Publish recency",
"detail": "latest publish 11 days ago",
"points": 35,
"status": "met",
"details": [
{
"code": "publish_recency",
"params": {
"days": 11
}
}
],
"max_points": 35
},
{
"key": "version_history",
"name": "Version history",
"detail": "101 published versions",
"points": 20,
"status": "met",
"details": [
{
"code": "published_versions",
"params": {
"count": 101
}
}
],
"max_points": 20
},
{
"key": "not_deprecated",
"name": "Not deprecated",
"detail": "active, not deprecated or yanked",
"points": 20,
"status": "met",
"details": [
{
"code": "package_not_deprecated",
"params": {}
}
],
"max_points": 20
}
]
}
],
"description": "Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?"
},
{
"key": "engineering",
"band": "excellent",
"name": "Engineering Quality",
"value": 80,
"weight": 0.19,
"metrics": [
{
"key": "engineering_practices",
"band": "excellent",
"name": "Engineering practices",
"note": null,
"notes": [],
"value": 84,
"inputs": {
"has_ci": true,
"has_tests": true,
"has_editorconfig": false,
"has_linter_config": true,
"has_precommit_config": false
},
"components": [
{
"key": "ci_workflows",
"name": "CI workflows",
"detail": "1 workflow(s)",
"points": 24,
"status": "met",
"details": [
{
"code": "ci_workflows",
"params": {
"count": 1
}
}
],
"max_points": 24
},
{
"key": "tests_present",
"name": "Tests present",
"detail": null,
"points": 24,
"status": "met",
"details": [],
"max_points": 24
},
{
"key": "linter_config",
"name": "Linter config",
"detail": "eslint.config.mjs",
"points": 16,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "eslint.config.mjs"
}
}
],
"max_points": 16
},
{
"key": "pre_commit_hooks",
"name": "Pre-commit hooks",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 9.6
},
{
"key": "editorconfig",
"name": ".editorconfig",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 6.4
},
{
"key": "openssf_scorecard_ci_tests",
"name": "OpenSSF Scorecard: CI-Tests",
"detail": "13 out of 13 merged PRs checked by a CI test -- score normalized to 10",
"points": 20,
"status": "met",
"details": [],
"max_points": 20
}
]
},
{
"key": "documentation",
"band": "good",
"name": "Documentation",
"note": null,
"notes": [],
"value": 75,
"inputs": {
"topics": [],
"has_wiki": true,
"homepage": null,
"has_readme": true,
"has_docs_dir": true,
"has_description": true
},
"components": [
{
"key": "readme",
"name": "README",
"detail": null,
"points": 30,
"status": "met",
"details": [],
"max_points": 30
},
{
"key": "documentation_directory",
"name": "Documentation directory",
"detail": null,
"points": 25,
"status": "met",
"details": [],
"max_points": 25
},
{
"key": "documentation_homepage_site",
"name": "Documentation / homepage site",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
},
{
"key": "repository_description",
"name": "Repository description",
"detail": null,
"points": 10,
"status": "met",
"details": [],
"max_points": 10
},
{
"key": "topics",
"name": "Topics",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
},
{
"key": "wiki",
"name": "Wiki",
"detail": null,
"points": 10,
"status": "met",
"details": [],
"max_points": 10
}
]
}
],
"description": "Are baseline engineering and documentation practices in place?"
},
{
"key": "security",
"band": "moderate",
"name": "Security",
"value": 55,
"weight": 0.16,
"metrics": [
{
"key": "security_posture",
"band": "weak",
"name": "Security posture",
"note": "Excluded from scoring (no data or not applicable): Packaging, Signed-Releases. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"packaging",
"signed_releases"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 44,
"inputs": {
"source": "openssf_scorecard",
"checks_evaluated": 16,
"scorecard_version": "v5.5.0",
"checks_inconclusive": 2,
"scorecard_aggregate": 4.4
},
"components": [
{
"key": "binary_artifacts",
"name": "Binary-Artifacts",
"detail": "no binaries found in the repo",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "branch_protection",
"name": "Branch-Protection",
"detail": "branch protection not enabled on development/release branches",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "ci_tests",
"name": "CI-Tests",
"detail": "13 out of 13 merged PRs checked by a CI test -- score normalized to 10",
"points": 2.5,
"status": "met",
"details": [],
"max_points": 2.5
},
{
"key": "cii_best_practices",
"name": "CII-Best-Practices",
"detail": "no effort to earn an OpenSSF best practices badge detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 2.5
},
{
"key": "code_review",
"name": "Code-Review",
"detail": "all changesets reviewed",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "contributors",
"name": "Contributors",
"detail": "project has 2 contributing companies or organizations -- score normalized to 6",
"points": 1.5,
"status": "partial",
"details": [],
"max_points": 2.5
},
{
"key": "dangerous_workflow",
"name": "Dangerous-Workflow",
"detail": "no dangerous workflow patterns detected",
"points": 10,
"status": "met",
"details": [],
"max_points": 10
},
{
"key": "dependency_update_tool",
"name": "Dependency-Update-Tool",
"detail": "no update tool detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "fuzzing",
"name": "Fuzzing",
"detail": "project is not fuzzed",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "license",
"name": "License",
"detail": "license file detected",
"points": 2.5,
"status": "met",
"details": [],
"max_points": 2.5
},
{
"key": "maintained",
"name": "Maintained",
"detail": "30 commit(s) and 30 issue activity found in the last 90 days -- score normalized to 10",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "packaging",
"name": "Packaging",
"detail": "packaging workflow not detected",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 5
},
{
"key": "pinned_dependencies",
"name": "Pinned-Dependencies",
"detail": "dependency not pinned by hash detected -- score normalized to 3",
"points": 1.5,
"status": "partial",
"details": [],
"max_points": 5
},
{
"key": "sast",
"name": "SAST",
"detail": "SAST tool is not run on all commits -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "security_policy",
"name": "Security-Policy",
"detail": "security policy file not detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "signed_releases",
"name": "Signed-Releases",
"detail": "no releases found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 7.5
},
{
"key": "token_permissions",
"name": "Token-Permissions",
"detail": "detected GitHub workflow tokens with excessive permissions",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "vulnerabilities",
"name": "Vulnerabilities",
"detail": "34 existing vulnerabilities detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
}
]
},
{
"key": "dependency_advisories",
"band": "exceptional",
"name": "Dependency advisories",
"note": "Excluded from scoring (no data or not applicable): No advisories left outstanding. Remaining weights renormalized. Matched the npm:quadwork@2.7.1 runtime dependency closure — what installing the published package pulls in — 110 packages. Reachability is not analyzed.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"no_advisories_left_outstanding"
]
}
},
{
"code": "weights_renormalized",
"params": {}
},
{
"code": "advisories_scope_published",
"params": {
"package": "npm:quadwork@2.7.1",
"assessed": 110
}
},
{
"code": "advisories_reachability",
"params": {}
}
],
"value": 100,
"inputs": {
"source": "osv",
"advisories": 0,
"affected_packages": 0,
"assessed_packages": 110,
"unassessed_packages": 0,
"affected_by_severity": "none",
"direct_affected_packages": 0
},
"components": [
{
"key": "direct_dependencies_free_of_known_advisories",
"name": "Direct dependencies free of known advisories",
"detail": "no direct dependency carries a known advisory",
"points": 35,
"status": "met",
"details": [
{
"code": "no_direct_advisories",
"params": {}
}
],
"max_points": 35
},
{
"key": "indirect_dependencies_free_of_known_advisories",
"name": "Indirect dependencies free of known advisories",
"detail": "no indirect dependency carries a known advisory",
"points": 25,
"status": "met",
"details": [
{
"code": "no_indirect_advisories",
"params": {}
}
],
"max_points": 25
},
{
"key": "no_advisories_left_outstanding",
"name": "No advisories left outstanding",
"detail": "no advisory carries a publication date",
"points": 0,
"status": "excluded",
"details": [
{
"code": "advisories_no_publication_date",
"params": {}
}
],
"max_points": 40
}
]
},
{
"key": "malicious_dependencies",
"band": "exceptional",
"name": "Malicious dependencies",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"source": "osv",
"meaning": "reported as a malicious package by the OpenSSF corpus; the remedy is removal or moving off the compromised name, never an upgrade of the same artifact. Versions the registry has since pulled are listed but not scored",
"packages": [],
"red_flag": false,
"assessed_packages": 110,
"malicious_packages": 0,
"direct_malicious_packages": 0,
"withdrawn_malicious_packages": 0,
"installable_malicious_packages": 0
},
"components": [
{
"key": "no_dependency_reported_as_a_malicious_package",
"name": "No dependency reported as a malicious package",
"detail": "no dependency is reported as a malicious package",
"points": 100,
"status": "met",
"details": [
{
"code": "no_malicious_dependencies",
"params": {}
}
],
"max_points": 100
}
]
},
{
"key": "high_risk_jurisdiction_exposure",
"band": "exceptional",
"name": "High-Risk Jurisdiction Exposure",
"note": "Only high-confidence self-published location evidence affects this multiplier. Ambiguous matches are review-only; country evidence is not proof of nationality, citizenship, legal registration, malicious intent, or sanctions status.",
"notes": [
{
"code": "jurisdiction_evidence_limits",
"params": {}
}
],
"value": 100,
"inputs": {
"meaning": "self-published location evidence; not nationality or citizenship",
"red_flag": false,
"exposures": [],
"policy_countries": [
"Russia",
"Iran",
"North Korea"
],
"commit_weight_rule": {
"min_commits": 50,
"min_commit_share": 0.1
},
"review_only_matches": 0,
"below_threshold_exposures": [],
"assessed_self_published_locations": 4
},
"components": [
{
"key": "policy_exposure_multiplier",
"name": "Policy exposure multiplier",
"detail": "no confirmed policy-scope location match",
"points": 100,
"status": "met",
"details": [
{
"code": "jurisdiction_no_match",
"params": {}
}
],
"max_points": 100
}
]
}
],
"description": "Are visible security and supply-chain practices strong, with no malicious dependency and no unresolved high-risk jurisdiction exposure?"
},
{
"key": "ai_readiness",
"band": "good",
"name": "AI Readiness",
"value": 67,
"weight": 0.04,
"metrics": [
{
"key": "ai_agent_context",
"band": "excellent",
"name": "Agent context & guidance",
"note": null,
"notes": [],
"value": 85,
"inputs": {
"has_llms_txt": false,
"legible_history_share": 0.96,
"agent_instruction_files": [
"CLAUDE.md",
"templates/CLAUDE.md"
],
"agent_instruction_max_bytes": 3586
},
"components": [
{
"key": "agent_instructions",
"name": "Agent instructions",
"detail": "CLAUDE.md, templates/CLAUDE.md",
"points": 45,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "CLAUDE.md, templates/CLAUDE.md"
}
}
],
"max_points": 45
},
{
"key": "machine_readable_docs_llms_txt",
"name": "Machine-readable docs (llms.txt)",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
},
{
"key": "legible_commit_history",
"name": "Legible commit history",
"detail": "96 of 100 human commits state their intent (structured subject or explanatory body)",
"points": 40,
"status": "met",
"details": [
{
"code": "legible_history",
"params": {
"legible": 96,
"sampled": 100
}
}
],
"max_points": 40
}
]
},
{
"key": "ai_verify_loop",
"band": "good",
"name": "Verify loop (build / test / typecheck)",
"note": null,
"notes": [],
"value": 67,
"inputs": {
"has_nix": false,
"has_tests": true,
"lockfiles": [
"package-lock.json"
],
"has_dockerfile": false,
"typed_language": false,
"bootstrap_files": [],
"has_devcontainer": false,
"has_linter_config": true,
"typecheck_configs": [
"tsconfig.json"
],
"agent_commit_share": 0.47,
"toolchain_manifests": [],
"dependency_bot_commit_share": 0
},
"components": [
{
"key": "one_command_bootstrap",
"name": "One-command bootstrap",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 18
},
{
"key": "automated_tests",
"name": "Automated tests",
"detail": null,
"points": 22,
"status": "met",
"details": [],
"max_points": 22
},
{
"key": "lint_format_config",
"name": "Lint / format config",
"detail": "eslint.config.mjs",
"points": 11,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "eslint.config.mjs"
}
}
],
"max_points": 11
},
{
"key": "static_type_checking",
"name": "Static type checking",
"detail": "tsconfig.json",
"points": 11,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "tsconfig.json"
}
}
],
"max_points": 11
},
{
"key": "reproducible_environment",
"name": "Reproducible environment",
"detail": "lockfile",
"points": 10,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "lockfile"
}
}
],
"max_points": 10
},
{
"key": "demonstrated_agent_practice",
"name": "Demonstrated agent practice",
"detail": "47 of the last 100 commits agent-authored or agent-credited",
"points": 10,
"status": "met",
"details": [
{
"code": "agent_authored_commits",
"params": {
"count": 47,
"sampled": 100
}
}
],
"max_points": 10
},
{
"key": "automated_maintenance",
"name": "Automated maintenance",
"detail": "no automated dependency updates observed",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_dependency_automation",
"params": {}
}
],
"max_points": 8
},
{
"key": "openssf_scorecard_pinned_dependencies",
"name": "OpenSSF Scorecard: Pinned-Dependencies",
"detail": "dependency not pinned by hash detected -- score normalized to 3",
"points": 3,
"status": "partial",
"details": [],
"max_points": 10
}
]
},
{
"key": "ai_code_legibility",
"band": "excellent",
"name": "Code legibility for models",
"note": null,
"notes": [],
"value": 81,
"inputs": {
"primary_language": "JavaScript",
"largest_source_bytes": 243846,
"source_files_sampled": 148,
"oversized_source_files": 3
},
"components": [
{
"key": "type_checkable_code",
"name": "Type-checkable code",
"detail": "JavaScript with type-check config (tsconfig.json)",
"points": 27,
"status": "partial",
"details": [
{
"code": "typecheck_config_language",
"params": {
"files": "tsconfig.json",
"language": "JavaScript"
}
}
],
"max_points": 45
},
{
"key": "manageable_file_sizes",
"name": "Manageable file sizes",
"detail": "3/148 source files over 60KB",
"points": 53.9,
"status": "partial",
"details": [
{
"code": "oversized_source_files",
"params": {
"kb": 60,
"sampled": 148,
"oversized": 3
}
}
],
"max_points": 55
}
]
},
{
"key": "ai_interfaces",
"band": "at_risk",
"name": "Machine-readable interfaces",
"note": null,
"notes": [],
"value": 20,
"inputs": {
"example_dirs": [],
"has_mcp_signal": true,
"api_schema_files": []
},
"components": [
{
"key": "api_schema_openapi_graphql_proto",
"name": "API schema (OpenAPI/GraphQL/proto)",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 40
},
{
"key": "mcp_server",
"name": "MCP server",
"detail": null,
"points": 20,
"status": "met",
"details": [],
"max_points": 20
},
{
"key": "runnable_examples",
"name": "Runnable examples",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 40
}
]
}
],
"description": "How well is the repo equipped to be developed and maintained with AI coding agents? Carries a deliberately small weight: agent tooling is a real maintenance signal, but its absence must never gate the top of the scale (calibration saturates at raw 91, so 100/100 remains reachable with AI Readiness at zero)."
}
],
"classification": {
"top": [
"library",
"application"
],
"labels": [
"cli",
"library",
"network-service",
"web-ui",
"chat-bot"
],
"scores": {
"cli": 10,
"web-ui": 4,
"library": 6,
"chat-bot": 4,
"mcp-server": 3,
"network-service": 4
},
"primary": "cli",
"evidence": [
{
"tier": "declared",
"label": "cli",
"source": "npm.bin",
"weight": 10
},
{
"tier": "distribution",
"label": "library",
"source": "registry:npm",
"weight": 6
},
{
"tier": "dependencies",
"label": "chat-bot",
"source": "dep:discord.js",
"weight": 4
},
{
"tier": "dependencies",
"label": "network-service",
"source": "dep:express",
"weight": 4
},
{
"tier": "structure",
"label": "mcp-server",
"source": "mcp_signal",
"weight": 3
},
{
"tier": "description",
"label": "web-ui",
"source": "description:web-ui",
"weight": 2
},
{
"tier": "tags",
"label": "web-ui",
"source": "tag:dashboard",
"weight": 2
}
],
"artifacts": [
{
"path": "package.json",
"labels": [
"cli"
],
"ecosystem": "npm"
}
],
"confidence": "high",
"host_extension": false,
"runs_as_process": true,
"consumed_by_code": true
},
"metrics_version": "2.5.0"
},
"warnings": [
"Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token",
"GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository"
],
"report_type": "repository",
"generated_at": "2026-08-05T08:52:27.142415Z",
"schema_version": "0.31.0",
"badge_url": "https://raw.githubusercontent.com/inspect-software/badges/main/v1/r/realproject7/quadwork.svg",
"full_name": "realproject7/quadwork",
"license_state": "standard",
"license_spdx": "MIT"
}
Пов’язані записи
Перевірені репозиторії, що мають спільні каталожні теги або екосистеми з realproject7/quadwork. Читати поруч →
Оцінки — це сигнали, а не гарантії. Вони відображають публічно видимі практики на GitHub — це не аудит коду й не гарантія безпеки.
Відсутні дані виключаються, а ваги перенормовуються — нуль за відсутність ніколи не ставиться. Методологія версіонована й відкрита: метрики v2.5.0, схема v0.31.0 — повна методологія · вікі метрик.
