Open-source sandboxes where coding agents build and deploy. Spin up isolated environments where Claude Code, Cursor, and other agents code and deploy software.
runtm-ai/runtm має індекс здоров’я 70 зі 100, що відповідає смузі «Добрий». Найвищий показник — Engineering Quality (96/100), найнижчий — Sustainability & Governance (46/100). Останнє оновлення було 2 дні тому. Більшість нещодавньої роботи виконує один учасник.
70
загалом / 100
Добрий
Індекс здоров'я програмного забезпечення
Метрики згруповано у зважені категорії на шкалі 1–100. Загальна оцінка починається як їхнє середнє; коли публічні дані активують Політику юрисдикцій високого ризику, рейтинг коригується й отримує верхню межу 49 («Під ризиком»). Готовність до ШІ не входить до індексу.
70
Відмінний85-100Зразковий; відповідає практично всім перевіреним критеріям
Добрий70-84Здоровий; незначні прогалини
Помірний50-69Прийнятний, але з помітними прогалинами; рекомендовано перевірку
У зоні ризику30-49Суттєві слабкі місця; впровадження потребує обережності
Критичний1-29Серйозні проблеми (покинутий, єдиний мейнтейнер, без базової гігієни)
Профіль оцінок
Кожна вісь — окрема категорія. Форма важить більше, ніж середнє: здоровий об'єкт заповнює всю фігуру, тоді як профіль із піками та провалами означає, що сила в одному вимірі маскує ризик в іншому.
Прямі залежності без відомих сповіщень — жодна пряма залежність не має відомих сповіщень
25/25
Непрямі залежності без відомих сповіщень — жодна непряма залежність не має відомих сповіщень
0/40
Немає задавнених сповіщень — жодне сповіщення не має дати публікації
Використані вхідні дані
source
osv
advisories
0
affected_packages
0
assessed_packages
35
unassessed_packages
0
affected_by_severity
none
direct_affected_packages
0
Виключено з оцінювання (немає даних або не застосовно): Немає задавнених сповіщень. Залишкові ваги перенормовано. Звірено з runtime-замиканням залежностей pypi:runtm@0.2.132 — тим, що тягне за собою встановлення опублікованого пакета, — 35 пакетів. Досяжність не аналізується.
Наскільки репозиторій оснащений для розробки та супроводу за участі ШІ-агентів? Незалежний, експериментальний бейдж — вага 0.0, тож він подається окремо і не впливає на загальний індекс здоров'я.
Типізований код — Python з конфігурацією перевірки типів (templates/static-site/tsconfig.json, templates/web-app/frontend/tsconfig.json)
55/55
Керовані розміри файлів — 0/260 файлів вихідного коду понад 60 КБ
Використані вхідні дані
primary_language
Python
largest_source_bytes
57 346
source_files_sampled
260
oversized_source_files
0
Ключові факти
286зірок GitHub
3контриб'юторів
94комітів за останні 12 місяців
2днів від останнього пушу
13релізів
1бас-фактор
8відкритих issue
PyPIпакетних екосистем
Попередження щодо збору даних
Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token
GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository
Докладніше
Історія зірок і форків 0 ★ / 31 ⇿
0Зірки
31Форки
12Релізи
Коли додано кожну зірку й форк — зібрано з GitHub і згруповано за днями. Кумулятивне зростання розміщено просто над денними додаваннями, з яких воно складається, тож їх видно одне проти одного: рівномірне органічне накопичення виглядає зовсім інакше, ніж різкий короткочасний сплеск. Там, де цю різницю можна виміряти, її подано як автентичність росту.
Мажорні 0Мінорні 0Патчі 0
OpenSSF Scorecard 4.8 / 10
4.8сукупно
Незалежна, не прив'язана до інструментів оцінка безпеки від відкритого проєкту OpenSSF Scorecard. Кожна перевірка винагороджує практику безпеки, а не інструмент конкретного постачальника. Перевірки, які Scorecard не зміг визначити, позначено н/д і виключено з оцінки безпеки (вони ніколи не зараховуються як нуль).Scorecard v5.5.0 · 2026-07-27 12:55 UTC
Не вдалося зібрати розв'язаний набір залежностей для цього звіту: GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository
Сповіщення про залежності 0
Встановлення pypi:runtm@0.2.132 тягне 35 пакетів, прямих і транзитивних: 0 мають відомі сповіщення, з них 0 — прямі залежності.
Жодне відоме сповіщення не стосується оцінених залежностей.
Сповіщення означає, що версія, записана в графі залежностей, потрапляє в уражений діапазон. Досяжність не аналізується, а граф містить піниї розробки й тестування — знахідка може стосуватися інструментів, а не поставленого коду.
Звіт у форматі JSON машиночитний
{
"data": {
"repo": {
"topics": [
"ai-agents",
"agent-runtime",
"agentic",
"control-plane",
"ephemeral-environments",
"infra",
"llm-tools",
"llmops",
"observability",
"open-source",
"serverless",
"app-runtime",
"anthropic",
"claude",
"cursor",
"openai",
"claude-code",
"sandbox"
],
"is_fork": false,
"size_kb": 7517,
"has_wiki": true,
"homepage": "https://www.runtm.com/",
"languages": {
"Go": 244556,
"CSS": 2929,
"Mako": 1943,
"Shell": 8382,
"Python": 1191410,
"Makefile": 2801,
"Dockerfile": 8951,
"JavaScript": 3639,
"TypeScript": 94278
},
"pushed_at": "2026-07-24T22:35:44Z",
"created_at": "2026-01-02T21:37:04Z",
"owner_type": "Organization",
"updated_at": "2026-07-24T22:35:38Z",
"description": "Open-source sandboxes where coding agents build and deploy. Spin up isolated environments where Claude Code, Cursor, and other agents code and deploy software.",
"is_archived": false,
"is_disabled": false,
"license_spdx": null,
"default_branch": "main",
"license_spdx_raw": "NOASSERTION",
"primary_language": "Python",
"significant_languages": [
"Python",
"Go"
]
},
"owner": {
"blog": "https://www.runtm.com/",
"name": "runtm",
"type": "Organization",
"login": "runtm-ai",
"company": null,
"location": "United States of America",
"followers": 14,
"avatar_url": "https://avatars.githubusercontent.com/u/249835438?v=4",
"created_at": "2025-12-15T22:15:52Z",
"is_verified": null,
"public_repos": 4,
"account_age_days": 223
},
"license": {
"state": "custom",
"spdx_id": null,
"raw_spdx": "NOASSERTION",
"file_present": true,
"scorecard_found": true,
"profile_has_license": true
},
"activity": {
"releases": [
{
"tag": "packages/agent/v0.0.13",
"kind": "other",
"published_at": "2026-07-24T22:36:50Z"
},
{
"tag": "packages/agent/v0.0.12",
"kind": "other",
"published_at": "2026-07-09T23:38:12Z"
},
{
"tag": "packages/agent/v0.0.11",
"kind": "other",
"published_at": "2026-07-09T23:23:16Z"
},
{
"tag": "packages/agent/v0.0.10",
"kind": "other",
"published_at": "2026-07-01T20:54:51Z"
},
{
"tag": "packages/agent/v0.0.9",
"kind": "other",
"published_at": "2026-07-01T04:35:47Z"
},
{
"tag": "packages/agent/v0.0.8",
"kind": "other",
"published_at": "2026-06-24T23:47:05Z"
},
{
"tag": "packages/agent/v0.0.7",
"kind": "other",
"published_at": "2026-06-17T23:00:29Z"
},
{
"tag": "packages/agent/v0.0.6",
"kind": "other",
"published_at": "2026-06-17T20:50:19Z"
},
{
"tag": "packages/agent/v0.0.5",
"kind": "other",
"published_at": "2026-06-17T16:14:41Z"
},
{
"tag": "packages/agent/v0.0.4",
"kind": "other",
"published_at": "2026-06-16T04:53:51Z"
},
{
"tag": "packages/agent/v0.0.3",
"kind": "other",
"published_at": "2026-06-15T23:22:55Z"
},
{
"tag": "packages/agent/v0.0.2",
"kind": "other",
"published_at": "2026-05-28T02:51:30Z"
},
{
"tag": "packages/agent/v0.0.1",
"kind": "other",
"published_at": "2026-05-16T01:04:40Z"
}
],
"recent_commits": [
{
"oid": "02aea30518314b41688bf59a4717a710a993158d",
"body": "…#45)\n\nEvery org-scoped command (templates, skills, MCP, guardrails, team\ntelemetry) reported \"the API key has no org\" even when the key was\norg-bound, forcing users to set RUNTM_ORG_ID by hand.\n\nThe bootstrap in requireOrgClient called GET /auth/verify. That route is\nmounted at the backend root, bu\n[…]\nn organization_id on personal keys; it now shares the same\nresolution and is applied after the payload copy so a null\norganization_id can't clobber it.\n\nCo-authored-by: Cursor <cursoragent@cursor.com>",
"is_bot": false,
"headline": "fix(agent): resolve org context from /v1/me so org-scoped keys work (…",
"author_name": "Gus Trigos",
"author_login": "Gustrigos",
"committed_at": "2026-07-24T22:35:33Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "51a4fc358a88d21d03afae4b47fe2c6f5d1fb2e8",
"body": "Lint has failed on every PR since 2026-07-23 with no code change to\nexplain it. Ruff 0.16.0 published at 19:10 UTC that day; the first\nfailure was 19:40. Both workflows installed Ruff unpinned -- `uvx ruff`\nin lint.yml and `pip install ruff` in ci.yml -- so CI silently adopted\nthe new major the mome\n[…]\nthing. Adopting 0.16.0 should be its own PR that\napplies the reformat alongside the bump, so the change is reviewable\nrather than arriving unannounced.\n\nCo-authored-by: Cursor <cursoragent@cursor.com>",
"is_bot": false,
"headline": "ci: pin Ruff to 0.15.22 so a new release can't red every PR (#46)",
"author_name": "Gus Trigos",
"author_login": "Gustrigos",
"committed_at": "2026-07-24T22:28:36Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "39ef7fd2f5979b2db4655d1908fe19b29a3e1615",
"body": "…ning upgrades (#43)\n\n* fix(agent): resolve gosec G301/G304/G306 code-security findings\n\nOneleet's gosec scan flags 9 findings in packages/agent:\n\n- G301 (3): skill install/pull created directories 0755; tightened to\n 0750 (skills_cmd.go, skills_pull_cmd.go x2)\n- G306 (2): skill files written 0644;\n[…]\ner pytest 9.1.1 with the\nupgraded deps; go build/test pass in packages/agent.\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>\n\n---------\n\nCo-authored-by: Claude Fable 5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "fix(security): resolve gosec code-security findings + dependency-scan…",
"author_name": "cvolante54",
"author_login": "cvolante54",
"committed_at": "2026-07-11T02:03:47Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "3b59ea9f545d769b9f82f09cba491ba3bfb9ecbd",
"body": "'1.25' resolved to 1.25.11 on the runner, leaving one HIGH stdlib CVE\n(CVE-2026-39822, fixed in 1.25.12) in the released binaries.\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "ci(release-agent): pin Go 1.25.12 (CVE-2026-39822 stdlib fix)",
"author_name": "Charlie",
"author_login": null,
"committed_at": "2026-07-09T23:37:04Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "85be065fb3cfd20bddd8c1eb6f997849621da684",
"body": "The v0.0.10 runtm-api release binaries embed the Go 1.23.12 stdlib, which\nArtifact Registry scanning flags with 2 CRITICAL + 22 HIGH CVEs\n(CVE-2025-68121, CVE-2026-27143 et al) in every sandbox image that bakes\nthe CLI. Go 1.25.9+ carries the fixes.\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "ci(release-agent): build releases with Go 1.25 (patched stdlib)",
"author_name": "Charlie",
"author_login": null,
"committed_at": "2026-07-09T23:22:04Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "62408384dc4953aadefdb136f3bcdf52affa359f",
"body": "The `runtm-api integrations` command only ever managed LLM provider API\nkeys (Anthropic/OpenAI). Naming it \"integrations\" collided with the\nexternal-integration surface (MCP servers, skills, tools, CLIs, APIs)\ndocumented in the `runtm-integrations` skill, so a prompt about\n\"integrations\" was ambiguo\n[…]\nling.\n\nBREAKING CHANGE: `runtm-api integrations …` is now `runtm-api providers …`.\n\nCo-authored-by: Charlie <charlie@Charlies-MacBook-Pro.local>\nCo-authored-by: Claude Opus 4.8 <noreply@anthropic.com>",
"is_bot": false,
"headline": "refactor(agent)!: rename `integrations` CLI command to `providers` (#40)",
"author_name": "cvolante54",
"author_login": "cvolante54",
"committed_at": "2026-07-01T20:46:42Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "4f6391fa29661fe2636aa4ed6f6fe7d85f606498",
"body": "…d integration decision process (#39)\n\n* docs(agent): rename runtm-directives skill to runtm-integrations + add integration process\n\nRename the bundled `runtm-directives` skill (and its embedded copy) to\n`runtm-integrations`, and rewrite its \"adding an integration\" guidance into a\nstructured 5-step \n[…]\n build passes.\n\nCo-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>\n\n---------\n\nCo-authored-by: Charlie <charlie@Charlies-MacBook-Pro.local>\nCo-authored-by: Claude Opus 4.8 <noreply@anthropic.com>",
"is_bot": false,
"headline": "docs(agent): rename runtm-directives skill to runtm-integrations + ad…",
"author_name": "cvolante54",
"author_login": "cvolante54",
"committed_at": "2026-07-01T04:32:04Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "7e0f6b48c0ec348917339cdffad50087266ca524",
"body": "…iling (#38)\n\n`runtm-api skills install` reported \"No AI agent skills directory found\n(~/.claude or ~/.cursor)\" even when ~/.claude existed, because detection\nstat'd the ~/.claude/skills *subdir* (the parent of the runtm target) rather\nthan the agent root. A fresh agent has ~/.claude (settings.json \n[…]\n up.\n\nAdds tests for resolveSkillTargets (root-dir detection, no-agent, override).\n\nCo-authored-by: Charlie <charlie@Charlies-MacBook-Pro.local>\nCo-authored-by: Claude Opus 4.8 <noreply@anthropic.com>",
"is_bot": false,
"headline": "fix(agent): skills install creates the agent skills dir instead of fa…",
"author_name": "cvolante54",
"author_login": "cvolante54",
"committed_at": "2026-06-24T23:40:53Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "030a0affc8c8e678549257ef5d0948760f9e2060",
"body": "…ally (#35)\n\nAdd `runtm-api skills pull <template-id>`, which downloads every skill\nthat materializes into a template and writes it to disk in the same\nlayout a session gets at launch:\n\n ~/.claude/skills/<name>/SKILL.md (claude-code)\n ~/.agents/skills/<name>/SKILL.md (codex)\n\nIt lists the org'\n[…]\nx pulls\nits own skills instead of the worker shuffling every blob through its RAM.\n\nCo-authored-by: Charlie <charlie@Charlies-MacBook-Pro.local>\nCo-authored-by: Claude Opus 4.8 <noreply@anthropic.com>",
"is_bot": false,
"headline": "feat(agent): add `skills pull` to materialize a template's skills loc…",
"author_name": "cvolante54",
"author_login": "cvolante54",
"committed_at": "2026-06-17T22:53:22Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "6f813f2336f70680a2fcf0b58b3715519ac076f0",
"body": "Adds the attachment surface the dashboard already has, so sessions launched\nfrom a template can load org skills/MCP servers without the UI.\n\n- skills|mcp attach|detach|attachments <id> — scope a directive to templates\n (--template), repos (--repo), or all repos (--all). attach/detach read the\n cur\n[…]\n API vs CLI vs MCP and auth methods and\n let the user choose before implementing.\n\nCo-authored-by: Charlie <charlie@Charlies-MacBook-Pro.local>\nCo-authored-by: Claude Opus 4.8 <noreply@anthropic.com>",
"is_bot": false,
"headline": "feat(agent): attach skills & MCP servers to templates from the CLI (#34)",
"author_name": "cvolante54",
"author_login": "cvolante54",
"committed_at": "2026-06-17T19:49:57Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "a4c30db6bdad0d6275e80caee3bc85a523fec9e4",
"body": "…xes (#33)\n\n* feat(agent): manage Slack/GitHub agents from the CLI + URL output fixes\n\nAdd `runtm-api agents` (create/list/get/update/delete) for Slack and GitHub\nintegration agents, normalize RUNTM_API_URL to the cloud proxy, and stop\nHTML-escaping URLs in JSON output.\n\n- agents create --type slack\n[…]\nnded `--logo`.\n\nCo-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>\n\n---------\n\nCo-authored-by: Charlie <charlie@Charlies-MacBook-Pro.local>\nCo-authored-by: Claude Opus 4.8 <noreply@anthropic.com>",
"is_bot": false,
"headline": "feat(agent): agents + custom tool providers in the CLI, URL output fi…",
"author_name": "cvolante54",
"author_login": "cvolante54",
"committed_at": "2026-06-17T16:09:48Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "7aca30771557793436878fcd87d53148f5f3e143",
"body": "Add `runtm-api skills`, `runtm-api mcp`, and `runtm-api tools` with full\ncreate/get/list/update/delete against the cloud API, so agents can author\nskills, wire up MCP servers, and store provider tool credentials without the\ndashboard.\n\n- skills: cloud CRUD alongside the existing `install`; `skills l\n[…]\nands; SKILL.md bumped\n to 0.7.0 with a Quick Reference row and a More Skills link\n\nCo-authored-by: Charlie <charlie@Charlies-MacBook-Pro.local>\nCo-authored-by: Claude Opus 4.8 <noreply@anthropic.com>",
"is_bot": false,
"headline": "feat(agent): CRUD skills, MCP servers, and tools from the CLI (#32)",
"author_name": "cvolante54",
"author_login": "cvolante54",
"committed_at": "2026-06-16T04:49:20Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "ab7714a1f650fe11b4b6a094a54bb0893f542864",
"body": "Newer uv (via setup-uv@v5) re-locks and syncs the project as a side\neffect of `uv version`. Resolving packages/cli pulls in its dev extra\nwhich depends on runtm-agents and runtm-sandbox, workspace-only packages\nthat are never published to PyPI, so resolution fails and the Publish to\nPyPI job exits 1\n[…]\n-frozen so `uv version` only edits pyproject.toml without\nre-locking or resolving.\n\nCo-authored-by: Charlie <charlie@Charlies-MacBook-Pro.local>\nCo-authored-by: Claude Opus 4.8 <noreply@anthropic.com>",
"is_bot": false,
"headline": "fix(ci): pass --frozen to uv version in publish workflow (#31)",
"author_name": "cvolante54",
"author_login": "cvolante54",
"committed_at": "2026-06-15T23:15:15Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "029bc4be6c6e8089741000966d042d2b065ea375",
"body": "…ent (#30)\n\n* feat(cli): add interactive SSH/terminal sessions and org template management\n\nAdds an interactive terminal/SSH attach command for sandbox sessions\n(Go agent) and a `runtm template` command group for managing org\ntemplates and their session arguments, mirrored in the Go agent.\nUpdates t\n[…]\nmplate command\n\nCo-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>\n\n---------\n\nCo-authored-by: Charlie <charlie@Charlies-MacBook-Pro.local>\nCo-authored-by: Claude Opus 4.8 <noreply@anthropic.com>",
"is_bot": false,
"headline": "feat(cli): interactive SSH/terminal sessions and org template managem…",
"author_name": "cvolante54",
"author_login": "cvolante54",
"committed_at": "2026-06-15T23:00:06Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "c8cc57e2b6af16583ac3f7a7d08f1b816c56400b",
"body": "…#29)\n\nStop recurring \"SSL connection has been closed unexpectedly\" errors\nbehind Fly MPG's PgBouncer:\n- Lower pool_recycle 1800s -> 300s so connections recycle before the\n upstream pooler closes idle server connections (~1/3 of pre-ping\n probes were hitting dead connections)\n- Add TCP keepalives \n[…]\na joinedload, since\nDeploymentResponse.from_db() reads provider_resource.app_name.\n\nCo-authored-by: Charlie <charlie@Charlies-MacBook-Pro.local>\nCo-authored-by: Claude Opus 4.8 <noreply@anthropic.com>",
"is_bot": false,
"headline": "fix(api): rework DB pool config for PgBouncer + fix deployments N+1 (…",
"author_name": "cvolante54",
"author_login": "cvolante54",
"committed_at": "2026-06-12T20:18:26Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "000cbb88fe37c4f45a3fb22b167d328fea27ce46",
"body": "Co-authored-by: Charlie <charlie@Charlies-MacBook-Pro.local>",
"is_bot": false,
"headline": "imrpve docs and fix cli issue (#22)",
"author_name": "cvolante54",
"author_login": "cvolante54",
"committed_at": "2026-05-25T05:13:50Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "351f87780e5063e8ef0fe3272c9e5c5a35dfe2c5",
"body": null,
"is_bot": false,
"headline": "Merge runtm-api goreleaser installer changes",
"author_name": "Gus Trigos",
"author_login": "Gustrigos",
"committed_at": "2026-05-16T00:54:39Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "6c08bdcc7d492c337f2f9f2393b23cb754913df0",
"body": "Add a GitHub release workflow, hosted installer docs, and skill sync hooks so agents can install runtm-api without a local Go toolchain.\n\nCo-authored-by: Cursor <cursoragent@cursor.com>",
"is_bot": false,
"headline": "feat(agent): publish runtm-api binaries with goreleaser",
"author_name": "Gus Trigos",
"author_login": "Gustrigos",
"committed_at": "2026-05-16T00:54:11Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "1ce961ae08239c742367ed9befef711459987539",
"body": "Org-scoped commands (templates, team telemetry, team secrets, org\ninstructions, guardrails) previously errored when RUNTM_ORG_ID wasn't\nset even if the API key was already bound to an org. Now the CLI calls\n/auth/verify lazily on first need (memoized per process) and uses the\nkey's embedded organiza\n[…]\ns can confirm before running mutating commands.\n\nAdds runtime_test.go covering verify success, personal-key empty path,\nand verify failure propagation.\n\nCo-authored-by: Cursor <cursoragent@cursor.com>",
"is_bot": false,
"headline": "fix(cli): auto-discover org from API key for org-scoped commands",
"author_name": "Gus Trigos",
"author_login": "Gustrigos",
"committed_at": "2026-05-12T20:07:29Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "50747fce84bcecc0a142cb8df3e0359003c98abd",
"body": "All canonical endpoint examples (sessions, templates, secrets, user,\norganizations, deploy, auth/verify) now use the /api/cloud/* namespace\nwhich proxies through Next.js to the FastAPI backend without colliding\nwith dashboard BFF routes.\n\nAlso updated mint.json baseUrl from /api to /api/cloud.\n\nv0/v1 endpoint docs are unchanged (already proxied directly).\n\nCo-authored-by: Cursor <cursoragent@cursor.com>",
"is_bot": false,
"headline": "docs: update API reference URLs to use /api/cloud proxy namespace",
"author_name": "Gus Trigos",
"author_login": "Gustrigos",
"committed_at": "2026-05-12T01:40:23Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "d9e9038fbdc74be755f4f443d8fa32efc64fff31",
"body": "Use https://app.runtm.com/api/cloud as the production default so the CLI can\nreach FastAPI canonical /api/* routes without colliding with dashboard BFF\nroutes. Local development continues to use RUNTM_API_URL=http://localhost:8081/api.\n\nUpdate README and embedded skill docs to explain the proxy namespace.\n\nCo-authored-by: Cursor <cursoragent@cursor.com>",
"is_bot": false,
"headline": "fix: route runtm-api traffic through cloud proxy namespace",
"author_name": "Gus Trigos",
"author_login": "Gustrigos",
"committed_at": "2026-05-12T01:32:09Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "130e9db9e8d32543e541a9f07523cc69905c598e",
"body": "The pip CLI (runtm v0.2.x) and Go CLI were both called `runtm`, causing\nPATH shadowing when customers had both installed. The Go binary is now\n`runtm-api` so both coexist without conflict.\n\nUpdated: cmd directory, Makefile, install.sh, README, all 4 skill files,\nembedded skill copies, and root cobra command.\n\nInstall: go install github.com/runtm-ai/runtm/packages/agent/cmd/runtm-api@latest\nCo-authored-by: Cursor <cursoragent@cursor.com>",
"is_bot": false,
"headline": "fix: rename binary from runtm to runtm-api to avoid pip CLI collision",
"author_name": "Gus Trigos",
"author_login": "Gustrigos",
"committed_at": "2026-05-12T01:12:59Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "a03d55f861eb81ddd4c17d12c0221be41c7e2777",
"body": "feat: add `runtm skills install` with embedded skill files",
"is_bot": false,
"headline": "Merge pull request #20 from runtm-ai/feat/agent-cli",
"author_name": "Gus Trigos",
"author_login": "Gustrigos",
"committed_at": "2026-05-11T22:44:24Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "23db581ff7a06403164f62e780d55870f408e5b3",
"body": "Skills are now baked into the binary via Go embed. `runtm skills install`\nauto-detects Claude Code and Cursor directories and writes all 4 SKILL.md\nfiles with no network fetch. Customer install is now two commands:\n\n go install github.com/runtm-ai/runtm/packages/agent/cmd/runtm@latest\n runtm skills install\n\nCo-authored-by: Cursor <cursoragent@cursor.com>",
"is_bot": false,
"headline": "feat: add `runtm skills install` with embedded skill files",
"author_name": "Gus Trigos",
"author_login": "Gustrigos",
"committed_at": "2026-05-11T22:15:49Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "1b32f77337414e50385f2edb6e4a83a9e328dcce",
"body": "feat: add Go agent CLI for programmatic cloud API access",
"is_bot": false,
"headline": "Merge pull request #19 from runtm-ai/feat/agent-cli",
"author_name": "Gus Trigos",
"author_login": "Gustrigos",
"committed_at": "2026-05-11T22:12:56Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "64b36ddd730d78b3c4f8c8cf1c39548747fe4abd",
"body": "Thin Go CLI (`runtm`) that wraps the hosted cloud API so AI coding agents\n(Claude Code, Cursor, etc.) can drive Runtime programmatically.\n\nSurface:\n- sessions: full CRUD + files + env + git + deploy + lifecycle + prompt SSE\n- templates: full lifecycle (create/build/fix-session/save-snapshot/secrets)\n[…]\n commands to run, error\nrecovery, and multi-step workflow recipes. Installed via `go install`.\n\nAll endpoints verified end-to-end against live backend.\n\nCo-authored-by: Cursor <cursoragent@cursor.com>",
"is_bot": false,
"headline": "feat: add Go agent CLI for programmatic cloud API access",
"author_name": "Gus Trigos",
"author_login": "Gustrigos",
"committed_at": "2026-05-11T22:11:44Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "15279942d647d1a0ab7ea438bca63f884f0f238f",
"body": "docs: surface v0 programmatic and v2 sandbox-lifecycle session endpoints",
"is_bot": false,
"headline": "Merge pull request #18 from runtm-ai/feat/docs-sessions-v0-v2",
"author_name": "Gus Trigos",
"author_login": "Gustrigos",
"committed_at": "2026-05-11T00:21:21Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e9982895b2dca34a0348a671ea956fd3fbb7e951",
"body": "Large endpoint groups (Sessions 37, Templates 14, Context 17, Activity\n10) are now broken into collapsible subgroups so the sidebar is\nscannable without endless scrolling.\n\nSessions: CRUD at top, then Lifecycle, Prompts, Files, Env Vars,\n Instructions, Git as nested groups\nTemplates: CRUD at top, t\n[…]\n then Personal, Team\nContext: Instructions at top, then Skills\nProvider Keys: Resolved + Plan at top, then User Keys, Org Keys\nActivity: Personal, Team\n\nCo-authored-by: Cursor <cursoragent@cursor.com>",
"is_bot": false,
"headline": "docs: organize API reference sidebar with nested collapsible groups",
"author_name": "Gus Trigos",
"author_login": "Gustrigos",
"committed_at": "2026-05-11T00:19:55Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "b23f9290c8b09857515fc31bed21df8778201197",
"body": "Co-authored-by: Cursor <cursoragent@cursor.com>",
"is_bot": false,
"headline": "docs: fix preview URL to use dev.runtm.com instead of e2b.app",
"author_name": "Gus Trigos",
"author_login": "Gustrigos",
"committed_at": "2026-05-11T00:16:38Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "75cdd68304c5ee9ac2fd39df7d2f5ec08e214e68",
"body": "- Replace all E2B references with generic \"sandbox provider(s)\" phrasing\n so docs are provider-agnostic\n- Replace all em dashes with hyphens across 54 mdx files for consistent\n punctuation\n- Hide Programmatic Agents (v0) and Sandbox Lifecycle (v2) nav groups\n from mint.json (pages kept on disk, just not wired into sidebar)\n\nCo-authored-by: Cursor <cursoragent@cursor.com>",
"is_bot": false,
"headline": "docs: remove E2B branding and em dashes from all doc pages",
"author_name": "Gus Trigos",
"author_login": "Gustrigos",
"committed_at": "2026-05-11T00:15:01Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "a6253459e95c34ea96971e87233b51b762575611",
"body": "The Sessions API reference was missing the v0 (programmatic API-key) and\nv2 (sandbox lifecycle) surfaces — only the launch endpoint existed for\nv0 and it wasn't even wired into the sidebar nav. This makes both\nversions discoverable and labels the legacy v1 endpoints they replace.\n\n- Add 6 v0 referen\n[…]\n- Cross-link launch.mdx to the rest of the v0 surface\n- Add deprecation Warning banners to v1 start.mdx and heartbeat.mdx\n pointing at v2 replacements\n\nCo-authored-by: Cursor <cursoragent@cursor.com>",
"is_bot": false,
"headline": "docs: surface v0 programmatic and v2 sandbox-lifecycle session endpoints",
"author_name": "Gus Trigos",
"author_login": "Gustrigos",
"committed_at": "2026-05-11T00:04:06Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "0dccf75e48b6ce25d0198d3063b9fb41578bac94",
"body": "Restructure docs for cloud API and move OSS docs to open-source/",
"is_bot": false,
"headline": "Merge pull request #17 from runtm-ai/feat/docs-cloud-api-restructure",
"author_name": "Gus Trigos",
"author_login": "Gustrigos",
"committed_at": "2026-05-10T23:40:23Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "98ff371602a256f1485a518d55c6fa2e83ff7543",
"body": "- Add comprehensive cloud-api/ docs covering sessions, auth, websockets,\n templates, secrets, deploy, integrations, and activity endpoints\n- Add concepts/ section explaining sessions, agents, templates, context,\n guardrails, organizations, observability, and real-time features\n- Add new guides for\n[…]\nder open-source/ to separate cloud vs OSS documentation\n- Update mint.json navigation and introduction/quickstart pages\n- Update logos and cursorignore\n\nCo-authored-by: Cursor <cursoragent@cursor.com>",
"is_bot": false,
"headline": "Restructure docs for cloud API and move OSS docs to open-source/",
"author_name": "Gus Trigos",
"author_login": "Gustrigos",
"committed_at": "2026-05-10T19:04:25Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "2ea6c9310ece26d73e47bdc2909a011cd2dea9c3",
"body": null,
"is_bot": false,
"headline": "fix bug with volumes",
"author_name": "Carlos Volante",
"author_login": "cvolante54",
"committed_at": "2026-05-10T05:39:58Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "db8f05043ea372cb4d979a098b5254bd8d4ac891",
"body": "* increase timeouts\n\n* fix linting",
"is_bot": false,
"headline": "increase timeouts (#15)",
"author_name": "cvolante54",
"author_login": "cvolante54",
"committed_at": "2026-05-10T04:30:34Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1adda63c981308348ccd8d0e94a28d7aeb77d387",
"body": null,
"is_bot": false,
"headline": "upgrade versions",
"author_name": "Carlos Volante",
"author_login": "cvolante54",
"committed_at": "2026-05-09T16:51:45Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "9354e9c9ee16f0937558e5dbc0e568f7a4eb4279",
"body": "* add volume functionality\n\n* update versions\n\n* fix linting",
"is_bot": false,
"headline": "Volumes (#14)",
"author_name": "cvolante54",
"author_login": "cvolante54",
"committed_at": "2026-05-09T16:45:44Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "3d63cba4171aed5e69de5f72a0034e83d2d2aeb4",
"body": null,
"is_bot": false,
"headline": "improve connection pooling settings (#13)",
"author_name": "cvolante54",
"author_login": "cvolante54",
"committed_at": "2026-05-03T16:40:53Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "fdf9e73cdafeef36d8fa4c88313bbeae6f9662d1",
"body": "* fix deployment issues + rq upgrade + cleanup\n\n* fix linting\n\n* fix format",
"is_bot": false,
"headline": "Cv/improve worker deploy (#12)",
"author_name": "cvolante54",
"author_login": "cvolante54",
"committed_at": "2026-04-03T05:13:41Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e2d6ba8cb25204d7385f1111d3a3f996b0a0c972",
"body": "* add lint and publish workflows\n\n* update version\n\n* fix ci issues\n\n* fix formatting\n\n* fix ci\n\n* add necessary files\n\n* reformat",
"is_bot": false,
"headline": "add lint and publish workflows (#11)",
"author_name": "cvolante54",
"author_login": "cvolante54",
"committed_at": "2026-04-01T01:10:08Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "3d910ded716c68bd74097c3bc77d01b0de88edc3",
"body": "- DB session: use module-level engine/session singleton to share connection\n pool across requests instead of creating per-request (fixes max_connections\n exhaustion under load)\n- Deploy: reorder custom domain provisioning to add SSL cert first, then\n create DNS records (including ACME challenge CNAME), then poll for\n certificate verification\n\nMade-with: Cursor",
"is_bot": false,
"headline": "fix: singleton DB engine pool and SSL cert-first deploy ordering",
"author_name": "Gus Trigos",
"author_login": "Gustrigos",
"committed_at": "2026-03-24T23:35:20Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "545d148b0f948fc54474534a6ee1845684402bcc",
"body": "…le leaks\n\n- Add get_path() and cleanup_path() to ArtifactStore ABC so all backends\n (including future ones) implement a consistent local-path interface\n- LocalFileStore.cleanup_path() is a no-op (paths are real, not temp)\n- DeployJob now cleans up downloaded artifacts in a finally block to\n prevent temp file accumulation on long-running workers\n\nMade-with: Cursor",
"is_bot": false,
"headline": "fix: add get_path/cleanup_path to ArtifactStore base, prevent temp fi…",
"author_name": "Gus Trigos",
"author_login": "Gustrigos",
"committed_at": "2026-03-19T22:33:35Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "afe0927aa3b2c56df4747048741750f984934cd1",
"body": "Move LocalFileStore and get_artifact_store() factory to shared package so both API and worker can use them without cross-package dependencies. Add a registry pattern (register_backend) so cloud extensions can plug in S3/Tigris without modifying OSS code.\n\n- shared/storage/ now owns: ArtifactStore AB\n[…]\nbecomes a backwards-compat re-export shim\n- Remove S3FileStore and boto3 from OSS (moved to runtm-cloud)\n- Fix API route import: runtm_shared.storage instead of runtm_worker.storage\n\nMade-with: Cursor",
"is_bot": false,
"headline": "refactor: move S3FileStore out of OSS, keep storage layer lean",
"author_name": "jjpd777",
"author_login": "jjpd777",
"committed_at": "2026-03-19T21:41:20Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "19addf2ff1c37c56f63c8d52c8c528d95551bdce",
"body": "Add a pluggable storage backend so the worker can fetch deployment\nartifacts from S3-compatible storage (Tigris on Fly.io) instead of\nrequiring a shared Docker volume or HTTP fallback between machines.\n\n- Add S3FileStore implementation using boto3\n- Add get_artifact_store() factory to select backend\n[…]\neployment route to store artifacts via the backend\n- Add ARTIFACT_STORAGE_BACKEND config (local/s3) across packages\n- Add comprehensive tests for both LocalFileStore and S3FileStore\n\nMade-with: Cursor",
"is_bot": false,
"headline": "feat: add S3/Tigris artifact storage backend",
"author_name": "jjpd777",
"author_login": "jjpd777",
"committed_at": "2026-03-19T21:41:16Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "be50968597f97016dc659bb733f3b62e92b5477b",
"body": "- Add exclude_dirs set to validate_python_syntax calls so .venv, node_modules,\n __pycache__, dist, build, etc. are skipped during syntax checking\n- Move pathspec import to module level in api_client.py (fixes UP037 + F821\n from quoted return type annotation on build_ignore_spec)\n- Bump CLI to 0.2.15\n\nCo-authored-by: Cursor <cursoragent@cursor.com>",
"is_bot": false,
"headline": "fix: validate python syntax excludes dirs, fix pathspec import lint",
"author_name": "Gus Trigos",
"author_login": "Gustrigos",
"committed_at": "2026-02-24T06:28:45Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "7bfc890fe98eb85e4f976614d5700d9e6a6f2e89",
"body": null,
"is_bot": false,
"headline": "new changelog",
"author_name": "Gus Trigos",
"author_login": "Gustrigos",
"committed_at": "2026-02-24T06:28:45Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "462569f0a887e2f087ad954aff64c5dcbe3be77f",
"body": "The default 60s httpx timeout is too short for the deploy upload\nrequest, which goes through Cloud Backend → OSS API → Fly.io build\nqueue. This chain regularly exceeds 60s, causing ReadTimeout errors.\n\nThe auth-check client keeps the default timeout since it only\nneeds a quick round trip.\n\nCo-authored-by: Cursor <cursoragent@cursor.com>",
"is_bot": false,
"headline": "fix: increase deploy upload timeout from 60s to 300s",
"author_name": "Gus Trigos",
"author_login": "Gustrigos",
"committed_at": "2026-02-24T06:24:27Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "34f739cdf28ddd622fef8ab4d43ea1ff041ca112",
"body": "The validate command had a hardcoded exclude_dirs set with only 7 entries\n(.git, node_modules, etc.) for its artifact size check, while\ncreate_artifact_zip used pathspec with .runtmignore/.gitignore support.\nThis caused validate to report \"project too large\" for projects with\nsandbox caches (.npm, .\n[…]\nec() and\nALWAYS_EXCLUDE_PATTERNS so both validate and deploy use the same\nmatching. The error message now points to .runtmignore instead of\n.gitignore.\n\nCo-authored-by: Cursor <cursoragent@cursor.com>",
"is_bot": false,
"headline": "fix: validate command now respects .runtmignore for size checks",
"author_name": "Gus Trigos",
"author_login": "Gustrigos",
"committed_at": "2026-02-24T05:24:02Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "fba758001c06fb4676c82a00c5e64af979cc343a",
"body": "Removed the old standard tier. Renamed standard (2GB) to starter\nas the default tier. Three tiers now:\n- starter: 2GB RAM, 2 CPUs (default for all projects)\n- performance: 4GB RAM, 4 CPUs\n- pro: 8GB RAM, 4 CPUs\n\nFullstack validation no longer rejects starter since all tiers\nhave enough RAM (2GB+) for Node.js + Python.\n\nCo-authored-by: Cursor <cursoragent@cursor.com>",
"is_bot": false,
"headline": "refactor: simplify to 3 deployment tiers (starter, performance, pro)",
"author_name": "Gus Trigos",
"author_login": "Gustrigos",
"committed_at": "2026-02-23T03:51:34Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "41b306ec4c7f27cad587d4db3e58b2d38dde6886",
"body": "Updated all deployment tiers with more resources:\n- starter: 256MB -> 512MB RAM, 1 shared CPU\n- standard: 512MB -> 2GB RAM, 2 shared CPUs\n- performance: 1GB -> 4GB RAM, 4 shared CPUs\n- pro (new): 8GB RAM, 4 shared CPUs\n\nUpdated VM size mapping in docker builder for shared-cpu-4x\nat 4GB+ RAM. All tiers continue to use auto-stop for cost savings.\n\nCo-authored-by: Cursor <cursoragent@cursor.com>",
"is_bot": false,
"headline": "feat: upgrade deployment tiers and add PRO tier (8GB RAM)",
"author_name": "Gus Trigos",
"author_login": "Gustrigos",
"committed_at": "2026-02-23T03:43:09Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "da36a9e7d856d53759950c69c84b7a5072a66b28",
"body": "…stroy\n\nWhen destroying a deployment, the code sets is_latest=False on the current\ndeployment and is_latest=True on the previous one in the same transaction.\nSQLAlchemy may flush the SET is_latest=True UPDATE before the SET is_latest=False,\nviolating the ix_deployments_unique_active_name partial unique constraint.\n\nAdding db.flush() between the two changes ensures the database sees the\ndemotion before the promotion.\n\nCo-authored-by: Cursor <cursoragent@cursor.com>",
"is_bot": false,
"headline": "fix: flush is_latest=False before promoting previous deployment on de…",
"author_name": "Gus Trigos",
"author_login": "Gustrigos",
"committed_at": "2026-02-15T22:00:34Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "2c607c86607673e47916040ea9e8328b90dab4e3",
"body": null,
"is_bot": false,
"headline": "fixed formatting errors",
"author_name": "Gus Trigos",
"author_login": "Gustrigos",
"committed_at": "2026-01-24T01:38:14Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ca0c7fd390b0c7323a1eb3729f7cd03c089bbd06",
"body": null,
"is_bot": false,
"headline": "fix: skip lockfile check for docker template",
"author_name": "Gus Trigos",
"author_login": "Gustrigos",
"committed_at": "2026-01-24T01:30:10Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "83112a54080e0676993044b4436db56a99d787b5",
"body": null,
"is_bot": false,
"headline": "increased versioning",
"author_name": "Gus Trigos",
"author_login": "Gustrigos",
"committed_at": "2026-01-22T03:34:39Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "868d283b7ae8b4e41e1691d771a90fc201bcc97e",
"body": null,
"is_bot": false,
"headline": "added new version + changelog update",
"author_name": "Gus Trigos",
"author_login": "Gustrigos",
"committed_at": "2026-01-21T03:22:11Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "97b0b8d36b70607f2a5e3b1dc4c08e0c1a4e176d",
"body": null,
"is_bot": false,
"headline": "fixed type and lint issues",
"author_name": "Gus Trigos",
"author_login": "Gustrigos",
"committed_at": "2026-01-21T02:33:50Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5a2d0a432148ef7e8f588efcac2ecd573ac3bb63",
"body": null,
"is_bot": false,
"headline": "lint fixes",
"author_name": "Gus Trigos",
"author_login": "Gustrigos",
"committed_at": "2026-01-14T08:39:10Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "43cf57ab6990b262992d9477e07331a90593c081",
"body": null,
"is_bot": false,
"headline": "fixed ruff and lint errors",
"author_name": "Gus Trigos",
"author_login": "Gustrigos",
"committed_at": "2026-01-13T16:58:20Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "746aeae3f865fd19cd61a8374ee91ad246747f13",
"body": null,
"is_bot": false,
"headline": "updated readme with sandbox quickstart",
"author_name": "Gus Trigos",
"author_login": "Gustrigos",
"committed_at": "2026-01-13T07:12:42Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1d53ee6670ecd79b661d023a8bd7becb04035b1d",
"body": null,
"is_bot": false,
"headline": "added local isolated sandbox environments via sandbox-runtime",
"author_name": "Gus Trigos",
"author_login": "Gustrigos",
"committed_at": "2026-01-13T07:09:09Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0bcd1e379b5e6f236a7b93dbe049062f8e28c270",
"body": null,
"is_bot": false,
"headline": "fixed old-style type annotations",
"author_name": "Gus Trigos",
"author_login": "Gustrigos",
"committed_at": "2026-01-12T05:45:03Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "fbb7068b920d9c27a10f2cfe0081739d5a242aac",
"body": null,
"is_bot": false,
"headline": "improved explanation of runtm",
"author_name": "Gus Trigos",
"author_login": "Gustrigos",
"committed_at": "2026-01-12T05:41:58Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "59dbe0c778e6324cb604d3182e62dd4f60f812ee",
"body": null,
"is_bot": false,
"headline": "updated discord links",
"author_name": "Gus Trigos",
"author_login": "Gustrigos",
"committed_at": "2026-01-08T01:52:15Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d7e807cdf0df8c9059bfa6a3a8496fc1d177fc1f",
"body": null,
"is_bot": false,
"headline": "updated docs links",
"author_name": "Gus Trigos",
"author_login": "Gustrigos",
"committed_at": "2026-01-07T06:48:04Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2d473db901cc35eed2e275f671fbe1221e4f21d2",
"body": null,
"is_bot": false,
"headline": "added docs",
"author_name": "Gus Trigos",
"author_login": "Gustrigos",
"committed_at": "2026-01-07T06:30:54Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a490658c0968c72017cfea52a5b43edc96bb9e66",
"body": null,
"is_bot": false,
"headline": "enhanced wording for readmes",
"author_name": "Gus Trigos",
"author_login": "Gustrigos",
"committed_at": "2026-01-06T06:26:52Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "93ca6ab37dcf907e290b11a580db369276e34eac",
"body": null,
"is_bot": false,
"headline": "updated demo video url",
"author_name": "Gus Trigos",
"author_login": "Gustrigos",
"committed_at": "2026-01-03T01:21:34Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "9ef80bc8a517e374323c37f6a553e74223a3372a",
"body": null,
"is_bot": false,
"headline": "added demo video plus licenses",
"author_name": "Gus Trigos",
"author_login": "Gustrigos",
"committed_at": "2026-01-03T01:15:35Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e35266cddb0a0262c0b067e82cdaa3baae547503",
"body": null,
"is_bot": false,
"headline": "added test update",
"author_name": "Gus Trigos",
"author_login": "Gustrigos",
"committed_at": "2026-01-02T22:34:50Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1ad0e562a6e295cdd4b282baba993e0a09677be9",
"body": null,
"is_bot": false,
"headline": "updated tests",
"author_name": "Gus Trigos",
"author_login": "Gustrigos",
"committed_at": "2026-01-02T22:05:39Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "10cd1f4abd45de0accd62ac664b2611ae8debdeb",
"body": null,
"is_bot": false,
"headline": "ignored certain patterns with ruff",
"author_name": "Gus Trigos",
"author_login": "Gustrigos",
"committed_at": "2026-01-02T21:52:39Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "3ab497e4df3bb683961bf5f6bac8cd1f6ae138e7",
"body": null,
"is_bot": false,
"headline": "redacted readme",
"author_name": "Gus Trigos",
"author_login": "Gustrigos",
"committed_at": "2026-01-02T21:43:53Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "64d88bb855025dd1aba6489ddcc386e482d3ffb5",
"body": null,
"is_bot": false,
"headline": "new readme",
"author_name": "Gus Trigos",
"author_login": "Gustrigos",
"committed_at": "2026-01-02T21:36:07Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2e68789cde1354b3fb7b1f95bba001a30606e6a3",
"body": null,
"is_bot": false,
"headline": "updated policy tests",
"author_name": "Gus Trigos",
"author_login": "Gustrigos",
"committed_at": "2026-01-02T20:36:41Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2c88db320b5bbc70e9e79d3785b42f48d985cd44",
"body": null,
"is_bot": false,
"headline": "added policy to allow redeploys",
"author_name": "Gus Trigos",
"author_login": "Gustrigos",
"committed_at": "2026-01-02T20:33:05Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c51e838fe4a0c3711904361b105c2149a03c971d",
"body": null,
"is_bot": false,
"headline": "modified comments",
"author_name": "Gus Trigos",
"author_login": "Gustrigos",
"committed_at": "2026-01-02T19:09:48Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2602312c891f6820216b9f11cb05cef9eb8e2143",
"body": "…nancy\n\nWhen trust_tenant_header=true (single-tenant mode), the API reads\nX-Tenant-Id and X-User-Id headers from requests authenticated with\nthe service token. This enables multi-tenant data isolation when\nthe API runs behind a trusted internal proxy that validates user auth.\n\nSECURITY: Only enable when the API is network-isolated behind a\ntrusted proxy. The proxy must validate user authentication before\nforwarding requests with tenant headers.",
"is_bot": false,
"headline": "feat(api): add trusted tenant header support for proxy-based multi-te…",
"author_name": "Gus Trigos",
"author_login": "Gustrigos",
"committed_at": "2026-01-02T18:48:55Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a69f6959b78dc1aae4e48427762d2a021bff4abd",
"body": null,
"is_bot": false,
"headline": "added trust tenant fix",
"author_name": "Gus Trigos",
"author_login": "Gustrigos",
"committed_at": "2026-01-02T18:45:59Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "cbffa76a491561d9612f134549e16718def3dfeb",
"body": null,
"is_bot": false,
"headline": "improved ready at status",
"author_name": "Gus Trigos",
"author_login": "Gustrigos",
"committed_at": "2026-01-02T08:02:27Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d20f9159233ce662a3acf3a6ed7987b2a566ec9f",
"body": null,
"is_bot": false,
"headline": "improved telemetry cli handle",
"author_name": "Gus Trigos",
"author_login": "Gustrigos",
"committed_at": "2026-01-02T07:46:28Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ec9ea9702816460d4c5e2704bd55987141a04abb",
"body": null,
"is_bot": false,
"headline": "fixed urls",
"author_name": "Gus Trigos",
"author_login": "Gustrigos",
"committed_at": "2026-01-02T07:13:35Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4adc341a5fc40550b19493e0ab178b8c898f10af",
"body": null,
"is_bot": false,
"headline": "fixed telemetry endpoint",
"author_name": "Gus Trigos",
"author_login": "Gustrigos",
"committed_at": "2026-01-02T07:12:12Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "077db2f989fc88e5ea54de9fc228465e42fd981e",
"body": null,
"is_bot": false,
"headline": "added suspend mode instead of stop",
"author_name": "Gus Trigos",
"author_login": "Gustrigos",
"committed_at": "2026-01-02T06:48:29Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1acca9bf6afc93dbb0e11eeafe881a4bb69614cb",
"body": null,
"is_bot": false,
"headline": "improved deployment versioning",
"author_name": "Gus Trigos",
"author_login": "Gustrigos",
"committed_at": "2026-01-02T06:44:04Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "63901f666089cee37fbf4f688db71a12c406967e",
"body": null,
"is_bot": false,
"headline": "added flyctl",
"author_name": "Gus Trigos",
"author_login": "Gustrigos",
"committed_at": "2026-01-02T05:59:20Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "7cdf26c3fbfdd41f46dbc86b7db825127684e974",
"body": null,
"is_bot": false,
"headline": "fixed docker bugs",
"author_name": "Gus Trigos",
"author_login": "Gustrigos",
"committed_at": "2026-01-02T05:26:07Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "bc8e06dda325bddc256c88cd1ec1609db2767fd1",
"body": null,
"is_bot": false,
"headline": "fix: fail fast if FLY_API_TOKEN missing for remote builder",
"author_name": "Gus Trigos",
"author_login": "Gustrigos",
"committed_at": "2026-01-02T05:21:08Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "6f73568c1958e3149ae9605109ccad79dd412675",
"body": null,
"is_bot": false,
"headline": "fix: rename build/ to builder/ to avoid Python packaging conflict",
"author_name": "Gus Trigos",
"author_login": "Gustrigos",
"committed_at": "2026-01-02T05:08:39Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b18dfd78aa9a3ee9671115ca151737aa20ce7bad",
"body": "- Fix .gitignore to use /build/ instead of build/ to not ignore worker's build module\n- Add packages/worker/runtm_worker/build/ which was incorrectly gitignored\n- Fix SQLAlchemy filter-after-limit bug in telemetry service",
"is_bot": false,
"headline": "fix: add missing build module and fix gitignore",
"author_name": "Gus Trigos",
"author_login": "Gustrigos",
"committed_at": "2026-01-02T04:46:51Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "91b4320adf74e07df0ec462191319b330e6b9ca5",
"body": null,
"is_bot": false,
"headline": "added policy enforcement for usage",
"author_name": "Gus Trigos",
"author_login": "Gustrigos",
"committed_at": "2026-01-02T02:19:09Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "98a3eeec8d8a58c532c98edb266a9447c2945151",
"body": null,
"is_bot": false,
"headline": "preparing for OSS release",
"author_name": "Gus Trigos",
"author_login": "Gustrigos",
"committed_at": "2026-01-02T00:17:27Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "349e17c6e43d025147830e0814b95531037cc0f6",
"body": null,
"is_bot": false,
"headline": "feat: config-only deploys with src_hash validation",
"author_name": "Gus Trigos",
"author_login": "Gustrigos",
"committed_at": "2026-01-01T03:31:46Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c35edaf4f5aec4bcdffee6b2ec3a7fc9062c101b",
"body": null,
"is_bot": false,
"headline": "chore: update default api_url to use Cloud Backend proxy",
"author_name": "Gus Trigos",
"author_login": "Gustrigos",
"committed_at": "2026-01-01T00:29:23Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "7c43423d07b0d681abdaa0c7d8a8a77cdeb6433c",
"body": null,
"is_bot": false,
"headline": "Initial commit - runtm OSS",
"author_name": "Gus Trigos",
"author_login": "Gustrigos",
"committed_at": "2025-12-30T23:58:04Z",
"body_truncated": false,
"is_coding_agent": false
}
],
"releases_count": 13,
"commits_last_year": 94,
"latest_release_at": "2026-07-24T22:36:50Z",
"latest_release_tag": "packages/agent/v0.0.13",
"releases_from_tags": false,
"days_since_last_push": 2,
"active_weeks_last_year": 19,
"days_since_latest_release": 2,
"mean_days_between_releases": 4.3
},
"community": {
"has_readme": true,
"has_license": true,
"has_description": true,
"has_contributing": true,
"health_percentage": 100,
"has_issue_template": false,
"has_code_of_conduct": true,
"has_pull_request_template": true
},
"ecosystem": {
"packages": [
{
"name": "runtm",
"exists": true,
"license": "Apache-2.0",
"keywords": [
"ai",
"cli",
"deployment",
"devops",
"fly.io",
"serverless",
"Development Status :: 4 - Beta",
"Environment :: Console",
"Intended Audience :: Developers",
"License :: OSI Approved :: Apache Software License",
"Operating System :: OS Independent",
"Programming Language :: Python :: 3",
"Programming Language :: Python :: 3.10",
"Programming Language :: Python :: 3.11",
"Programming Language :: Python :: 3.12",
"Programming Language :: Python :: 3.9",
"Topic :: Software Development :: Build Tools",
"Topic :: System :: Software Distribution"
],
"ecosystem": "pypi",
"matches_repo": true,
"registry_url": "https://pypi.org/project/runtm/",
"is_deprecated": false,
"latest_version": "0.2.132",
"repository_url": "https://github.com/runtm-ai/runtm",
"versions_count": 34,
"total_downloads": null,
"dependents_count": null,
"deprecation_note": null,
"maintainers_count": null,
"monthly_downloads": null,
"first_published_at": "2026-01-02T03:23:12.428096Z",
"latest_published_at": "2026-07-24T22:35:54.128473Z",
"latest_version_yanked": null,
"days_since_latest_publish": 2
}
]
},
"popularity": {
"forks": 31,
"stars": 286,
"watchers": 2,
"fork_history": {
"days": [
{
"date": "2026-03-19",
"count": 1
},
{
"date": "2026-03-20",
"count": 1
},
{
"date": "2026-03-21",
"count": 1
},
{
"date": "2026-03-26",
"count": 2
},
{
"date": "2026-04-02",
"count": 1
},
{
"date": "2026-04-04",
"count": 1
},
{
"date": "2026-04-15",
"count": 1
},
{
"date": "2026-04-17",
"count": 1
},
{
"date": "2026-05-08",
"count": 1
},
{
"date": "2026-05-15",
"count": 1
},
{
"date": "2026-05-20",
"count": 1
},
{
"date": "2026-05-21",
"count": 3
},
{
"date": "2026-05-22",
"count": 1
},
{
"date": "2026-05-23",
"count": 3
},
{
"date": "2026-05-25",
"count": 2
},
{
"date": "2026-05-26",
"count": 1
},
{
"date": "2026-05-27",
"count": 1
},
{
"date": "2026-05-30",
"count": 1
},
{
"date": "2026-06-02",
"count": 1
},
{
"date": "2026-06-05",
"count": 2
},
{
"date": "2026-06-13",
"count": 1
},
{
"date": "2026-06-20",
"count": 1
},
{
"date": "2026-07-05",
"count": 1
},
{
"date": "2026-07-17",
"count": 1
}
],
"complete": true,
"collected": 31,
"total_forks": 31
},
"star_history": null,
"open_issues_and_prs": 21
},
"ai_readiness": {
"has_nix": false,
"example_dirs": [],
"has_llms_txt": false,
"has_dockerfile": true,
"has_mcp_signal": false,
"bootstrap_files": [
"packages/agent/Makefile"
],
"api_schema_files": [],
"has_devcontainer": false,
"typecheck_configs": [
"templates/static-site/tsconfig.json",
"templates/web-app/frontend/tsconfig.json"
],
"toolchain_manifests": [
"packages/agent/go.mod"
],
"largest_source_bytes": 57346,
"source_files_sampled": 260,
"oversized_source_files": 0,
"agent_instruction_files": [
"CLAUDE.md",
"templates/backend-service/AGENT.md",
"templates/backend-service/CLAUDE.md",
"templates/docker/AGENT.md",
"templates/docker/CLAUDE.md",
"templates/static-site/AGENT.md",
"templates/static-site/CLAUDE.md",
"templates/web-app/AGENT.md",
"templates/web-app/CLAUDE.md"
],
"agent_instruction_max_bytes": 16673
},
"dependencies": {
"manifests": [
"pyproject.toml"
],
"advisories": {
"error": null,
"scope": "published_package",
"source": "osv",
"findings": [],
"collected": true,
"malicious": [],
"truncated": false,
"by_severity": {},
"advisory_count": 0,
"affected_count": 0,
"assessed_count": 35,
"malicious_count": 0,
"assessed_package": "pypi:runtm@0.2.132",
"unassessed_count": 0,
"direct_affected_count": 0
},
"ecosystems": [
"pypi"
],
"dependencies": [],
"all_dependencies": {
"error": "GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository",
"source": null,
"packages": [],
"collected": false,
"truncated": false,
"total_count": null,
"direct_count": null,
"indirect_count": null
}
},
"maintainership": {
"issues": {
"open_prs": 13,
"merged_prs": 23,
"open_issues": 8,
"closed_ratio": 0,
"closed_issues": 0,
"closed_unmerged_prs": 2
},
"bus_factor": 1,
"bot_contributors": 0,
"top_contributors": [
{
"type": "User",
"login": "Gustrigos",
"commits": 71,
"avatar_url": "https://avatars.githubusercontent.com/u/39495859?v=4"
},
{
"type": "User",
"login": "cvolante54",
"commits": 19,
"avatar_url": "https://avatars.githubusercontent.com/u/28110819?v=4"
},
{
"type": "User",
"login": "jjpd777",
"commits": 2,
"avatar_url": "https://avatars.githubusercontent.com/u/29438288?v=4"
}
],
"contributors_sampled": 3,
"top_contributor_share": 0.772
},
"quality_signals": {
"has_ci": true,
"has_tests": true,
"ci_workflows": [
"ci.yml",
"lint.yml",
"publish.yml",
"release-agent.yml"
],
"has_docs_dir": true,
"linter_configs": [
".eslintrc.json",
"ruff.toml"
],
"has_editorconfig": false,
"has_linter_config": true,
"has_precommit_config": true
},
"security_signals": {
"lockfiles": [
"go.sum",
"uv.lock"
],
"scorecard": {
"checks": [
{
"name": "Binary-Artifacts",
"score": 10,
"reason": "no binaries found in the repo",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#binary-artifacts"
},
{
"name": "Branch-Protection",
"score": null,
"reason": "internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#branch-protection"
},
{
"name": "CI-Tests",
"score": 10,
"reason": "17 out of 17 merged PRs checked by a CI test -- score normalized to 10",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#ci-tests"
},
{
"name": "CII-Best-Practices",
"score": 0,
"reason": "no effort to earn an OpenSSF best practices badge detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#cii-best-practices"
},
{
"name": "Code-Review",
"score": 1,
"reason": "Found 3/25 approved changesets -- score normalized to 1",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#code-review"
},
{
"name": "Contributors",
"score": 0,
"reason": "project has 0 contributing companies or organizations -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#contributors"
},
{
"name": "Dangerous-Workflow",
"score": 10,
"reason": "no dangerous workflow patterns detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dangerous-workflow"
},
{
"name": "Dependency-Update-Tool",
"score": 0,
"reason": "no update tool detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dependency-update-tool"
},
{
"name": "Fuzzing",
"score": 0,
"reason": "project is not fuzzed",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#fuzzing"
},
{
"name": "License",
"score": 9,
"reason": "license file detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#license"
},
{
"name": "Maintained",
"score": 10,
"reason": "30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#maintained"
},
{
"name": "Packaging",
"score": 10,
"reason": "packaging workflow detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#packaging"
},
{
"name": "Pinned-Dependencies",
"score": 0,
"reason": "dependency not pinned by hash detected -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#pinned-dependencies"
},
{
"name": "SAST",
"score": 0,
"reason": "SAST tool is not run on all commits -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#sast"
},
{
"name": "Security-Policy",
"score": 10,
"reason": "security policy file detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#security-policy"
},
{
"name": "Signed-Releases",
"score": 0,
"reason": "Project has not signed or included provenance with any releases.",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#signed-releases"
},
{
"name": "Token-Permissions",
"score": 0,
"reason": "detected GitHub workflow tokens with excessive permissions",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#token-permissions"
},
{
"name": "Vulnerabilities",
"score": 9,
"reason": "1 existing vulnerabilities detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#vulnerabilities"
}
],
"commit": "02aea30518314b41688bf59a4717a710a993158d",
"ran_at": "2026-07-27T12:55:21Z",
"aggregate_score": 4.8,
"scorecard_version": "v5.5.0"
},
"has_codeql_workflow": false,
"has_security_policy": true,
"has_dependabot_config": false
},
"contribution_flow": {
"collected": true,
"ci_last_run_at": "2026-07-24T22:36:58Z",
"oldest_open_prs": [
{
"number": 2,
"created_at": "2026-03-19T20:44:13Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 3,
"created_at": "2026-03-20T04:15:13Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 6,
"created_at": "2026-03-23T01:42:01Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 7,
"created_at": "2026-03-23T01:53:53Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 8,
"created_at": "2026-03-23T02:56:58Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 9,
"created_at": "2026-03-23T19:11:21Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 10,
"created_at": "2026-03-26T16:11:47Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 25,
"created_at": "2026-05-27T05:08:35Z",
"last_comment_at": "2026-06-08T07:42:03Z",
"last_comment_author": "eunseo9311"
},
{
"number": 36,
"created_at": "2026-06-20T15:13:07Z",
"last_comment_at": "2026-06-21T10:54:56Z",
"last_comment_author": "kunaldhongade"
},
{
"number": 37,
"created_at": "2026-06-22T08:08:08Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 41,
"created_at": "2026-07-05T16:02:00Z",
"last_comment_at": "2026-07-05T16:02:04Z",
"last_comment_author": "cursor"
},
{
"number": 42,
"created_at": "2026-07-05T16:36:43Z",
"last_comment_at": "2026-07-05T16:36:46Z",
"last_comment_author": "cursor"
},
{
"number": 44,
"created_at": "2026-07-23T19:40:41Z",
"last_comment_at": null,
"last_comment_author": null
}
],
"last_merged_pr_at": "2026-07-24T22:35:33Z",
"ci_last_conclusion": "SUCCESS",
"oldest_open_issues": [
{
"number": 4,
"created_at": "2026-03-21T14:21:26Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 5,
"created_at": "2026-03-21T14:24:41Z",
"last_comment_at": "2026-05-06T15:15:12Z",
"last_comment_author": "Himanshu-370"
},
{
"number": 16,
"created_at": "2026-05-10T12:34:42Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 21,
"created_at": "2026-05-24T20:09:58Z",
"last_comment_at": "2026-07-01T12:30:46Z",
"last_comment_author": "Dharshan2004"
},
{
"number": 24,
"created_at": "2026-05-26T19:33:24Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 26,
"created_at": "2026-05-28T10:17:31Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 27,
"created_at": "2026-05-28T19:33:55Z",
"last_comment_at": "2026-05-30T17:56:56Z",
"last_comment_author": "RishiGoswami-code"
},
{
"number": 28,
"created_at": "2026-06-02T10:59:26Z",
"last_comment_at": "2026-06-15T10:41:10Z",
"last_comment_author": "sanchal-coder"
}
]
}
},
"config": {
"disabled_metrics": [],
"disabled_categories": [],
"disabled_components": {}
},
"source": {
"url": "https://github.com/runtm-ai/runtm",
"host": "github.com",
"name": "runtm",
"owner": "runtm-ai"
},
"metrics": {
"overall": {
"key": "overall",
"band": "good",
"name": "Overall health",
"note": null,
"notes": [],
"value": 70,
"inputs": {
"security": 59,
"vitality": 82,
"community": 68,
"governance": 46,
"engineering": 96
},
"components": []
},
"categories": [
{
"key": "vitality",
"band": "good",
"name": "Vitality",
"value": 82,
"weight": 0.22,
"metrics": [
{
"key": "development_activity",
"band": "good",
"name": "Development activity",
"note": null,
"notes": [],
"value": 77,
"inputs": {
"commits_last_year": 94,
"human_commit_share": 1,
"days_since_last_push": 2,
"active_weeks_last_year": 19
},
"components": [
{
"key": "push_recency",
"name": "Push recency",
"detail": "last push 2 days ago",
"points": 36,
"status": "met",
"details": [
{
"code": "push_recency",
"params": {
"days": 2
}
}
],
"max_points": 36
},
{
"key": "commit_cadence",
"name": "Commit cadence",
"detail": "19/52 weeks with commits",
"points": 13.2,
"status": "partial",
"details": [
{
"code": "commit_cadence_weeks",
"params": {
"weeks": 19
}
}
],
"max_points": 36
},
{
"key": "commit_volume",
"name": "Commit volume",
"detail": "94 commits in the last year",
"points": 17.8,
"status": "partial",
"details": [
{
"code": "commits_last_year",
"params": {
"count": 94
}
}
],
"max_points": 18
},
{
"key": "openssf_scorecard_maintained",
"name": "OpenSSF Scorecard: Maintained",
"detail": "30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10",
"points": 10,
"status": "met",
"details": [],
"max_points": 10
}
]
},
{
"key": "release_discipline",
"band": "excellent",
"name": "Release discipline",
"note": null,
"notes": [],
"value": 90,
"inputs": {
"releases_count": 13,
"latest_release_tag": "packages/agent/v0.0.13",
"releases_from_tags": false,
"days_since_latest_release": 2,
"mean_days_between_releases": 4.3
},
"components": [
{
"key": "ships_releases",
"name": "Ships releases",
"detail": "13 releases published",
"points": 27,
"status": "met",
"details": [
{
"code": "releases_published",
"params": {
"count": 13
}
}
],
"max_points": 27
},
{
"key": "release_recency",
"name": "Release recency",
"detail": "latest release 2 days ago",
"points": 36,
"status": "met",
"details": [
{
"code": "release_recency",
"params": {
"days": 2
}
}
],
"max_points": 36
},
{
"key": "release_cadence",
"name": "Release cadence",
"detail": "a release every ~4.3 days",
"points": 27,
"status": "met",
"details": [
{
"code": "release_cadence",
"params": {
"gap": 4.3
}
}
],
"max_points": 27
},
{
"key": "openssf_scorecard_signed_releases",
"name": "OpenSSF Scorecard: Signed-Releases",
"detail": "Project has not signed or included provenance with any releases.",
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
}
]
},
{
"key": "abandonment",
"band": "excellent",
"name": "Abandonment",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"cap": null,
"state": "maintained",
"guards": [],
"signals": [],
"red_flag": false,
"multiplier_pct": 100,
"declared_reason": null,
"unverified_reason": null,
"unanswered_open_prs": null,
"unanswered_open_issues": null,
"days_since_last_merged_pr": null,
"days_since_last_human_commit": 2,
"days_since_last_human_commit_is_floor": false
},
"components": [
{
"key": "project_is_still_maintained",
"name": "Project is still maintained",
"detail": "last human commit 2 days ago",
"points": 100,
"status": "met",
"details": [
{
"code": "abandonment_maintained",
"params": {
"days": 2
}
}
],
"max_points": 100
}
]
}
],
"description": "Is the project alive — is code being written and are releases shipping?"
},
{
"key": "community",
"band": "moderate",
"name": "Community & Adoption",
"value": 68,
"weight": 0.18,
"metrics": [
{
"key": "popularity",
"band": "moderate",
"name": "Popularity & adoption",
"note": null,
"notes": [],
"value": 52,
"inputs": {
"forks": 31,
"stars": 286,
"watchers": 2,
"growth_state": "unverified",
"growth_factor_pct": 100,
"growth_unverified_reason": "no_history"
},
"components": [
{
"key": "stars",
"name": "Stars",
"detail": "286 stars",
"points": 39.8,
"status": "partial",
"details": [
{
"code": "stars",
"params": {
"count": 286
}
}
],
"max_points": 60
},
{
"key": "forks",
"name": "Forks",
"detail": "31 forks",
"points": 12.3,
"status": "partial",
"details": [
{
"code": "forks",
"params": {
"count": 31
}
}
],
"max_points": 25
},
{
"key": "watchers",
"name": "Watchers",
"detail": "2 watchers",
"points": 0,
"status": "missed",
"details": [
{
"code": "watchers",
"params": {
"count": 2
}
}
],
"max_points": 15
}
]
},
{
"key": "community_health",
"band": "excellent",
"name": "Community health",
"note": null,
"notes": [],
"value": 86,
"inputs": {
"has_readme": true,
"has_license": true,
"has_contributing": true,
"has_issue_template": false,
"has_code_of_conduct": true,
"has_pull_request_template": true
},
"components": [
{
"key": "readme",
"name": "README",
"detail": null,
"points": 22.5,
"status": "met",
"details": [],
"max_points": 22.5
},
{
"key": "license",
"name": "License",
"detail": "license file present, not a recognized license",
"points": 16.9,
"status": "partial",
"details": [
{
"code": "license_custom",
"params": {}
}
],
"max_points": 22.5
},
{
"key": "contributing_guide",
"name": "CONTRIBUTING guide",
"detail": null,
"points": 18,
"status": "met",
"details": [],
"max_points": 18
},
{
"key": "code_of_conduct",
"name": "Code of conduct",
"detail": null,
"points": 13.5,
"status": "met",
"details": [],
"max_points": 13.5
},
{
"key": "issue_template",
"name": "Issue template",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.2
},
{
"key": "pr_template",
"name": "PR template",
"detail": null,
"points": 6.3,
"status": "met",
"details": [],
"max_points": 6.3
}
]
}
],
"description": "Does the project have users, downloads, attention, and a welcoming setup for contributors?"
},
{
"key": "governance",
"band": "at_risk",
"name": "Sustainability & Governance",
"value": 46,
"weight": 0.24,
"metrics": [
{
"key": "maintainer_resilience",
"band": "critical",
"name": "Maintainer resilience (bus factor)",
"note": null,
"notes": [],
"value": 18,
"inputs": {
"bus_factor": 1,
"contributors_sampled": 3,
"top_contributor_share": 0.772
},
"components": [
{
"key": "bus_factor",
"name": "Bus factor",
"detail": "1 contributor(s) cover half of all commits",
"points": 9,
"status": "partial",
"details": [
{
"code": "bus_factor",
"params": {
"count": 1
}
}
],
"max_points": 54
},
{
"key": "commit_distribution",
"name": "Commit distribution",
"detail": "top contributor authored 77% of commits",
"points": 5.1,
"status": "partial",
"details": [
{
"code": "top_contributor_share",
"params": {
"share": 77
}
}
],
"max_points": 22.5
},
{
"key": "contributor_breadth",
"name": "Contributor breadth",
"detail": "3 contributors",
"points": 4.1,
"status": "partial",
"details": [
{
"code": "contributors_sampled",
"params": {
"count": 3
}
}
],
"max_points": 13.5
},
{
"key": "openssf_scorecard_contributors",
"name": "OpenSSF Scorecard: Contributors",
"detail": "project has 0 contributing companies or organizations -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
}
]
},
{
"key": "responsiveness",
"band": "at_risk",
"name": "Issue & PR responsiveness",
"note": null,
"notes": [],
"value": 37,
"inputs": {
"merged_prs": 23,
"open_issues": 8,
"closed_issues": 0,
"issue_closed_ratio": 0,
"closed_unmerged_prs": 2
},
"components": [
{
"key": "issue_resolution",
"name": "Issue resolution",
"detail": "0% of issues closed",
"points": 0,
"status": "missed",
"details": [
{
"code": "issues_closed_share",
"params": {
"share": 0
}
}
],
"max_points": 46.75
},
{
"key": "pr_acceptance",
"name": "PR acceptance",
"detail": "23/25 decided PRs merged",
"points": 35.2,
"status": "partial",
"details": [
{
"code": "decided_prs_merged",
"params": {
"merged": 23,
"decided": 25
}
}
],
"max_points": 38.25
},
{
"key": "openssf_scorecard_code_review",
"name": "OpenSSF Scorecard: Code-Review",
"detail": "Found 3/25 approved changesets -- score normalized to 1",
"points": 1.5,
"status": "partial",
"details": [],
"max_points": 15
}
]
},
{
"key": "stewardship",
"band": "at_risk",
"name": "Ownership & stewardship",
"note": null,
"notes": [],
"value": 45,
"inputs": {
"followers": 14,
"owner_type": "Organization",
"is_verified": null,
"owner_login": "runtm-ai",
"public_repos": 4,
"account_age_days": 223
},
"components": [
{
"key": "ownership_backing",
"name": "Ownership backing",
"detail": "organization-owned",
"points": 30,
"status": "met",
"details": [
{
"code": "owner_organization",
"params": {}
}
],
"max_points": 30
},
{
"key": "verified_domain",
"name": "Verified domain",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 20
},
{
"key": "owner_reach",
"name": "Owner reach",
"detail": "14 followers of runtm-ai",
"points": 8.5,
"status": "partial",
"details": [
{
"code": "owner_followers",
"params": {
"count": 14,
"login": "runtm-ai"
}
}
],
"max_points": 25
},
{
"key": "track_record",
"name": "Track record",
"detail": "4 public repos, account ~0 yr old",
"points": 6.3,
"status": "partial",
"details": [
{
"code": "public_repos",
"params": {
"count": 4
}
},
{
"code": "account_age_years",
"params": {
"years": 0
}
}
],
"max_points": 25
}
]
},
{
"key": "package_maintenance",
"band": "excellent",
"name": "Package maintenance",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"packages": [
"runtm"
],
"ecosystems": "pypi",
"any_deprecated": false,
"min_days_since_publish": 2
},
"components": [
{
"key": "published_resolvable",
"name": "Published & resolvable",
"detail": "1 package(s) on pypi",
"points": 25,
"status": "met",
"details": [
{
"code": "packages_published",
"params": {
"count": 1,
"ecosystems": "pypi"
}
}
],
"max_points": 25
},
{
"key": "publish_recency",
"name": "Publish recency",
"detail": "latest publish 2 days ago",
"points": 35,
"status": "met",
"details": [
{
"code": "publish_recency",
"params": {
"days": 2
}
}
],
"max_points": 35
},
{
"key": "version_history",
"name": "Version history",
"detail": "34 published versions",
"points": 20,
"status": "met",
"details": [
{
"code": "published_versions",
"params": {
"count": 34
}
}
],
"max_points": 20
},
{
"key": "not_deprecated",
"name": "Not deprecated",
"detail": "active, not deprecated or yanked",
"points": 20,
"status": "met",
"details": [
{
"code": "package_not_deprecated",
"params": {}
}
],
"max_points": 20
}
]
}
],
"description": "Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?"
},
{
"key": "engineering",
"band": "excellent",
"name": "Engineering Quality",
"value": 96,
"weight": 0.2,
"metrics": [
{
"key": "engineering_practices",
"band": "excellent",
"name": "Engineering practices",
"note": null,
"notes": [],
"value": 94,
"inputs": {
"has_ci": true,
"has_tests": true,
"has_editorconfig": false,
"has_linter_config": true,
"has_precommit_config": true
},
"components": [
{
"key": "ci_workflows",
"name": "CI workflows",
"detail": "4 workflow(s)",
"points": 24,
"status": "met",
"details": [
{
"code": "ci_workflows",
"params": {
"count": 4
}
}
],
"max_points": 24
},
{
"key": "tests_present",
"name": "Tests present",
"detail": null,
"points": 24,
"status": "met",
"details": [],
"max_points": 24
},
{
"key": "linter_config",
"name": "Linter config",
"detail": ".eslintrc.json, ruff.toml",
"points": 16,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": ".eslintrc.json, ruff.toml"
}
}
],
"max_points": 16
},
{
"key": "pre_commit_hooks",
"name": "Pre-commit hooks",
"detail": null,
"points": 9.6,
"status": "met",
"details": [],
"max_points": 9.6
},
{
"key": "editorconfig",
"name": ".editorconfig",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 6.4
},
{
"key": "openssf_scorecard_ci_tests",
"name": "OpenSSF Scorecard: CI-Tests",
"detail": "17 out of 17 merged PRs checked by a CI test -- score normalized to 10",
"points": 20,
"status": "met",
"details": [],
"max_points": 20
}
]
},
{
"key": "documentation",
"band": "excellent",
"name": "Documentation",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"topics": [
"ai-agents",
"agent-runtime",
"agentic",
"control-plane",
"ephemeral-environments",
"infra",
"llm-tools",
"llmops",
"observability",
"open-source",
"serverless",
"app-runtime",
"anthropic",
"claude",
"cursor",
"openai",
"claude-code",
"sandbox"
],
"has_wiki": true,
"homepage": "https://www.runtm.com/",
"has_readme": true,
"has_docs_dir": true,
"has_description": true
},
"components": [
{
"key": "readme",
"name": "README",
"detail": null,
"points": 30,
"status": "met",
"details": [],
"max_points": 30
},
{
"key": "documentation_directory",
"name": "Documentation directory",
"detail": null,
"points": 25,
"status": "met",
"details": [],
"max_points": 25
},
{
"key": "documentation_homepage_site",
"name": "Documentation / homepage site",
"detail": "https://www.runtm.com/",
"points": 15,
"status": "met",
"details": [],
"max_points": 15
},
{
"key": "repository_description",
"name": "Repository description",
"detail": null,
"points": 10,
"status": "met",
"details": [],
"max_points": 10
},
{
"key": "topics",
"name": "Topics",
"detail": "18 topics",
"points": 10,
"status": "met",
"details": [
{
"code": "topics_count",
"params": {
"count": 18
}
}
],
"max_points": 10
},
{
"key": "wiki",
"name": "Wiki",
"detail": null,
"points": 10,
"status": "met",
"details": [],
"max_points": 10
}
]
}
],
"description": "Are baseline engineering and documentation practices in place?"
},
{
"key": "security",
"band": "moderate",
"name": "Security",
"value": 59,
"weight": 0.16,
"metrics": [
{
"key": "security_posture",
"band": "at_risk",
"name": "Security posture",
"note": "Excluded from scoring (no data or not applicable): Branch-Protection. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"branch_protection"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 49,
"inputs": {
"source": "openssf_scorecard",
"checks_evaluated": 17,
"scorecard_version": "v5.5.0",
"checks_inconclusive": 1,
"scorecard_aggregate": 4.8
},
"components": [
{
"key": "binary_artifacts",
"name": "Binary-Artifacts",
"detail": "no binaries found in the repo",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "branch_protection",
"name": "Branch-Protection",
"detail": "internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 7.5
},
{
"key": "ci_tests",
"name": "CI-Tests",
"detail": "17 out of 17 merged PRs checked by a CI test -- score normalized to 10",
"points": 2.5,
"status": "met",
"details": [],
"max_points": 2.5
},
{
"key": "cii_best_practices",
"name": "CII-Best-Practices",
"detail": "no effort to earn an OpenSSF best practices badge detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 2.5
},
{
"key": "code_review",
"name": "Code-Review",
"detail": "Found 3/25 approved changesets -- score normalized to 1",
"points": 0.8,
"status": "partial",
"details": [],
"max_points": 7.5
},
{
"key": "contributors",
"name": "Contributors",
"detail": "project has 0 contributing companies or organizations -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 2.5
},
{
"key": "dangerous_workflow",
"name": "Dangerous-Workflow",
"detail": "no dangerous workflow patterns detected",
"points": 10,
"status": "met",
"details": [],
"max_points": 10
},
{
"key": "dependency_update_tool",
"name": "Dependency-Update-Tool",
"detail": "no update tool detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "fuzzing",
"name": "Fuzzing",
"detail": "project is not fuzzed",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "license",
"name": "License",
"detail": "license file detected",
"points": 2.2,
"status": "partial",
"details": [],
"max_points": 2.5
},
{
"key": "maintained",
"name": "Maintained",
"detail": "30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "packaging",
"name": "Packaging",
"detail": "packaging workflow detected",
"points": 5,
"status": "met",
"details": [],
"max_points": 5
},
{
"key": "pinned_dependencies",
"name": "Pinned-Dependencies",
"detail": "dependency not pinned by hash detected -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "sast",
"name": "SAST",
"detail": "SAST tool is not run on all commits -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "security_policy",
"name": "Security-Policy",
"detail": "security policy file detected",
"points": 5,
"status": "met",
"details": [],
"max_points": 5
},
{
"key": "signed_releases",
"name": "Signed-Releases",
"detail": "Project has not signed or included provenance with any releases.",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "token_permissions",
"name": "Token-Permissions",
"detail": "detected GitHub workflow tokens with excessive permissions",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "vulnerabilities",
"name": "Vulnerabilities",
"detail": "1 existing vulnerabilities detected",
"points": 6.8,
"status": "partial",
"details": [],
"max_points": 7.5
}
]
},
{
"key": "dependency_advisories",
"band": "excellent",
"name": "Dependency advisories",
"note": "Excluded from scoring (no data or not applicable): No advisories left outstanding. Remaining weights renormalized. Matched the pypi:runtm@0.2.132 runtime dependency closure — what installing the published package pulls in — 35 packages. Reachability is not analyzed.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"no_advisories_left_outstanding"
]
}
},
{
"code": "weights_renormalized",
"params": {}
},
{
"code": "advisories_scope_published",
"params": {
"package": "pypi:runtm@0.2.132",
"assessed": 35
}
},
{
"code": "advisories_reachability",
"params": {}
}
],
"value": 100,
"inputs": {
"source": "osv",
"advisories": 0,
"affected_packages": 0,
"assessed_packages": 35,
"unassessed_packages": 0,
"affected_by_severity": "none",
"direct_affected_packages": 0
},
"components": [
{
"key": "direct_dependencies_free_of_known_advisories",
"name": "Direct dependencies free of known advisories",
"detail": "no direct dependency carries a known advisory",
"points": 35,
"status": "met",
"details": [
{
"code": "no_direct_advisories",
"params": {}
}
],
"max_points": 35
},
{
"key": "indirect_dependencies_free_of_known_advisories",
"name": "Indirect dependencies free of known advisories",
"detail": "no indirect dependency carries a known advisory",
"points": 25,
"status": "met",
"details": [
{
"code": "no_indirect_advisories",
"params": {}
}
],
"max_points": 25
},
{
"key": "no_advisories_left_outstanding",
"name": "No advisories left outstanding",
"detail": "no advisory carries a publication date",
"points": 0,
"status": "excluded",
"details": [
{
"code": "advisories_no_publication_date",
"params": {}
}
],
"max_points": 40
}
]
},
{
"key": "malicious_dependencies",
"band": "excellent",
"name": "Malicious dependencies",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"source": "osv",
"meaning": "reported as a malicious package by the OpenSSF corpus; the remedy is removal or moving off the compromised name, never an upgrade of the same artifact. Versions the registry has since pulled are listed but not scored",
"packages": [],
"red_flag": false,
"assessed_packages": 35,
"malicious_packages": 0,
"direct_malicious_packages": 0,
"withdrawn_malicious_packages": 0,
"installable_malicious_packages": 0
},
"components": [
{
"key": "no_dependency_reported_as_a_malicious_package",
"name": "No dependency reported as a malicious package",
"detail": "no dependency is reported as a malicious package",
"points": 100,
"status": "met",
"details": [
{
"code": "no_malicious_dependencies",
"params": {}
}
],
"max_points": 100
}
]
},
{
"key": "high_risk_jurisdiction_exposure",
"band": "excellent",
"name": "High-Risk Jurisdiction Exposure",
"note": "Only high-confidence self-published location evidence affects this multiplier. Ambiguous matches are review-only; country evidence is not proof of nationality, citizenship, legal registration, malicious intent, or sanctions status.",
"notes": [
{
"code": "jurisdiction_evidence_limits",
"params": {}
}
],
"value": 100,
"inputs": {
"meaning": "self-published location evidence; not nationality or citizenship",
"red_flag": false,
"exposures": [],
"policy_countries": [
"Russia",
"Iran",
"North Korea"
],
"review_only_matches": 0,
"assessed_self_published_locations": 3
},
"components": [
{
"key": "policy_exposure_multiplier",
"name": "Policy exposure multiplier",
"detail": "no confirmed policy-scope location match",
"points": 100,
"status": "met",
"details": [
{
"code": "jurisdiction_no_match",
"params": {}
}
],
"max_points": 100
}
]
}
],
"description": "Are visible security and supply-chain practices strong, with no malicious dependency and no unresolved high-risk jurisdiction exposure?"
},
{
"key": "ai_readiness",
"band": "good",
"name": "AI Readiness",
"value": 80,
"weight": 0,
"metrics": [
{
"key": "ai_agent_context",
"band": "good",
"name": "Agent context & guidance",
"note": null,
"notes": [],
"value": 76,
"inputs": {
"has_llms_txt": false,
"legible_history_share": 0.574,
"agent_instruction_files": [
"CLAUDE.md",
"templates/backend-service/AGENT.md",
"templates/backend-service/CLAUDE.md",
"templates/docker/AGENT.md",
"templates/docker/CLAUDE.md",
"templates/static-site/AGENT.md",
"templates/static-site/CLAUDE.md",
"templates/web-app/AGENT.md",
"templates/web-app/CLAUDE.md"
],
"agent_instruction_max_bytes": 16673
},
"components": [
{
"key": "agent_instructions",
"name": "Agent instructions",
"detail": "CLAUDE.md, templates/backend-service/AGENT.md, templates/backend-service/CLAUDE.md, templates/docker/AGENT.md, templates/docker/CLAUDE.md, templates/static-site/AGENT.md, templates/static-site/CLAUDE.md, templates/web-app/AGENT.md, templates/web-app/CLAUDE.md",
"points": 45,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "CLAUDE.md, templates/backend-service/AGENT.md, templates/backend-service/CLAUDE.md, templates/docker/AGENT.md, templates/docker/CLAUDE.md, templates/static-site/AGENT.md, templates/static-site/CLAUDE.md, templates/web-app/AGENT.md, templates/web-app/CLAUDE.md"
}
}
],
"max_points": 45
},
{
"key": "machine_readable_docs_llms_txt",
"name": "Machine-readable docs (llms.txt)",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
},
{
"key": "legible_commit_history",
"name": "Legible commit history",
"detail": "54 of 94 human commits state their intent (structured subject or explanatory body)",
"points": 30.6,
"status": "partial",
"details": [
{
"code": "legible_history",
"params": {
"legible": 54,
"sampled": 94
}
}
],
"max_points": 40
}
]
},
{
"key": "ai_verify_loop",
"band": "good",
"name": "Verify loop (build / test / typecheck)",
"note": null,
"notes": [],
"value": 82,
"inputs": {
"has_nix": false,
"has_tests": true,
"lockfiles": [
"go.sum",
"uv.lock"
],
"has_dockerfile": true,
"typed_language": false,
"bootstrap_files": [
"packages/agent/Makefile"
],
"has_devcontainer": false,
"has_linter_config": true,
"typecheck_configs": [
"templates/static-site/tsconfig.json",
"templates/web-app/frontend/tsconfig.json"
],
"agent_commit_share": 0.351,
"toolchain_manifests": [
"packages/agent/go.mod"
],
"dependency_bot_commit_share": 0
},
"components": [
{
"key": "one_command_bootstrap",
"name": "One-command bootstrap",
"detail": "packages/agent/Makefile",
"points": 18,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "packages/agent/Makefile"
}
}
],
"max_points": 18
},
{
"key": "automated_tests",
"name": "Automated tests",
"detail": null,
"points": 22,
"status": "met",
"details": [],
"max_points": 22
},
{
"key": "lint_format_config",
"name": "Lint / format config",
"detail": ".eslintrc.json, ruff.toml",
"points": 11,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": ".eslintrc.json, ruff.toml"
}
}
],
"max_points": 11
},
{
"key": "static_type_checking",
"name": "Static type checking",
"detail": "templates/static-site/tsconfig.json, templates/web-app/frontend/tsconfig.json",
"points": 11,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "templates/static-site/tsconfig.json, templates/web-app/frontend/tsconfig.json"
}
}
],
"max_points": 11
},
{
"key": "reproducible_environment",
"name": "Reproducible environment",
"detail": "Dockerfile, lockfile",
"points": 10,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "Dockerfile, lockfile"
}
}
],
"max_points": 10
},
{
"key": "demonstrated_agent_practice",
"name": "Demonstrated agent practice",
"detail": "33 of the last 94 commits agent-authored or agent-credited",
"points": 10,
"status": "met",
"details": [
{
"code": "agent_authored_commits",
"params": {
"count": 33,
"sampled": 94
}
}
],
"max_points": 10
},
{
"key": "automated_maintenance",
"name": "Automated maintenance",
"detail": "no automated dependency updates observed",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_dependency_automation",
"params": {}
}
],
"max_points": 8
},
{
"key": "openssf_scorecard_pinned_dependencies",
"name": "OpenSSF Scorecard: Pinned-Dependencies",
"detail": "dependency not pinned by hash detected -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
}
]
},
{
"key": "ai_code_legibility",
"band": "good",
"name": "Code legibility for models",
"note": null,
"notes": [],
"value": 82,
"inputs": {
"primary_language": "Python",
"largest_source_bytes": 57346,
"source_files_sampled": 260,
"oversized_source_files": 0
},
"components": [
{
"key": "type_checkable_code",
"name": "Type-checkable code",
"detail": "Python with type-check config (templates/static-site/tsconfig.json, templates/web-app/frontend/tsconfig.json)",
"points": 27,
"status": "partial",
"details": [
{
"code": "typecheck_config_language",
"params": {
"files": "templates/static-site/tsconfig.json, templates/web-app/frontend/tsconfig.json",
"language": "Python"
}
}
],
"max_points": 45
},
{
"key": "manageable_file_sizes",
"name": "Manageable file sizes",
"detail": "0/260 source files over 60KB",
"points": 55,
"status": "met",
"details": [
{
"code": "oversized_source_files",
"params": {
"kb": 60,
"sampled": 260,
"oversized": 0
}
}
],
"max_points": 55
}
]
}
],
"description": "How well is the repo equipped to be developed and maintained with AI coding agents? An independent, experimental badge — weight 0.0, so it is surfaced on its own and does not affect the overall health score."
}
],
"metrics_version": "1.13.0"
},
"warnings": [
"Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token",
"GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository"
],
"report_type": "repository",
"generated_at": "2026-07-27T12:55:37.276985Z",
"schema_version": "0.27.0",
"badge_url": "https://raw.githubusercontent.com/inspect-software/badges/main/v1/r/runtm-ai/runtm.svg",
"full_name": "runtm-ai/runtm",
"license_state": "custom",
"license_spdx": null
}
Пов’язані записи
Перевірені репозиторії, що мають спільні каталожні теги або екосистеми з runtm-ai/runtm. Читати поруч →
Оцінки — це сигнали, а не гарантії. Вони відображають публічно видимі практики на GitHub — це не аудит коду й не гарантія безпеки.
Відсутні дані виключаються, а ваги перенормовуються — нуль за відсутність ніколи не ставиться. Методологія версіонована й відкрита: метрики v1.13.0, схема v0.27.0 — повна методологія · вікі метрик.
