sysread/fnord має індекс здоров’я 51 зі 100, що відповідає смузі «Помірний». Найвищий показник — Engineering Quality (70/100), найнижчий — Security (31/100). Останнє оновлення було 36 днів тому. Більшість нещодавньої роботи виконує один учасник.
51
загалом / 100
Помірний
Індекс здоров'я програмного забезпечення
Метрики згруповано у зважені категорії на шкалі 1–100. Загальна оцінка починається як їхнє зважене середнє, відкаліброване за розподілом публічного реєстру, тож діапазони мають перцентильний зміст; коли публічні дані активують Політику юрисдикцій високого ризику, рейтинг коригується й отримує верхню межу 34 («У зоні ризику»).
51
Винятковий93-100Верхній щабель реєстру (≈ топ-5%); відповідає практично всім перевіреним критеріям
Відмінний80-92Сильний за всіма напрямами; незначні прогалини
Добрий65-79Здоровий; прогалини обмежені та керовані
Помірний50-64Прийнятний, але з помітними прогалинами; рекомендовано перевірку
Слабкий35-49Суттєві недоліки в кількох сферах
У зоні ризику20-34Суттєві слабкі місця; впровадження потребує обережності
Критичний1-19Серйозні проблеми (покинутий, єдиний мейнтейнер, без базової гігієни)
Профіль оцінок
Кожна вісь — окрема категорія. Форма важить більше, ніж середнє: здоровий об'єкт заповнює всю фігуру, тоді як профіль із піками та провалами означає, що сила в одному вимірі маскує ризик в іншому.
Зважений загальний бал 51 калібровано до 51 за шкалою опублікованого індексу (калібрування реєстру 2026-08-02).
Наскільки репозиторій оснащений для розробки та супроводу за участі ШІ-агентів? Має свідомо малу вагу (4%): агентний інструментарій — реальний сигнал супроводу, але репозиторій без нього все одно може отримати 100/100.
Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token
Докладніше
Історія зірок і форків 0 ★ / 5 ⇿
0Зірки
5Форки
Коли додано кожну зірку й форк — зібрано з GitHub і згруповано за днями. Кумулятивне зростання розміщено просто над денними додаваннями, з яких воно складається, тож їх видно одне проти одного: рівномірне органічне накопичення виглядає зовсім інакше, ніж різкий короткочасний сплеск. Там, де цю різницю можна виміряти, її подано як автентичність росту.
OpenSSF Scorecard 3.1 / 10
3.1сукупно
Незалежна, не прив'язана до інструментів оцінка безпеки від відкритого проєкту OpenSSF Scorecard. Кожна перевірка винагороджує практику безпеки, а не інструмент конкретного постачальника. Перевірки, які Scorecard не зміг визначити, позначено н/д і виключено з оцінки безпеки (вони ніколи не зараховуються як нуль).Scorecard v5.5.0 · 2026-07-30 15:46 UTC
Повний розв'язаний набір залежностей із графа залежностей GitHub: 0 прямих і 0 непрямих (транзитивних) пакетів. Транзитивне замикання є повним, коли в репозиторії закомічено lockfile.
Реєстр
Пакет
Версія
Зв'язок
Сповіщення про залежності не оцінено
Звірка сповіщень не відбулася для цього звіту: No resolved dependencies to assess
Звіт у форматі JSON машиночитний
{
"data": {
"repo": {
"topics": [
"ai",
"code",
"database",
"elixir",
"embedding",
"gpt",
"index",
"llm",
"openai",
"search",
"vector",
"vectordb"
],
"is_fork": false,
"size_kb": 27642,
"has_wiki": true,
"homepage": null,
"languages": {
"Elixir": 3065393,
"Makefile": 5166
},
"pushed_at": "2026-06-23T21:39:59Z",
"created_at": "2024-09-27T16:17:34Z",
"owner_type": "User",
"updated_at": "2026-06-23T21:40:02Z",
"description": "Fnord is an AI code archaeologist.",
"is_archived": false,
"is_disabled": false,
"license_spdx": "MIT",
"default_branch": "main",
"license_spdx_raw": "MIT",
"primary_language": "Elixir",
"significant_languages": [
"Elixir"
]
},
"owner": {
"blog": null,
"name": "Jeff Ober",
"type": "User",
"login": "sysread",
"company": "Papa",
"location": "Colorado",
"followers": 37,
"avatar_url": "https://avatars.githubusercontent.com/u/83381?v=4",
"created_at": "2009-05-11T19:28:33Z",
"is_verified": null,
"public_repos": 82,
"account_age_days": 6288
},
"license": {
"state": "standard",
"spdx_id": "MIT",
"raw_spdx": "MIT",
"file_present": true,
"scorecard_found": true,
"profile_has_license": true
},
"activity": {
"releases": [],
"recent_commits": [
{
"oid": "b81ab166d346bedfd8290d15d173990dfff79839",
"body": null,
"is_bot": false,
"headline": "version bump",
"author_name": "Jeff Ober",
"author_login": "sysread",
"committed_at": "2026-06-23T21:39:56Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5016d168a1ddc2839daadb608546d9822831a740",
"body": null,
"is_bot": false,
"headline": "Keep tool-call reindex quiet mode local to Cmd.Index",
"author_name": "Jeff Ober",
"author_login": "sysread",
"committed_at": "2026-06-23T21:38:08Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "6a7685f74b937f1fce9a7e870595d9aece35e33e",
"body": null,
"is_bot": false,
"headline": "Fix MCP dynamic tool registration race",
"author_name": "Jeff Ober",
"author_login": "sysread",
"committed_at": "2026-06-23T21:08:16Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "905e5787ebebc5c248a52424ac1238f30864ecb5",
"body": null,
"is_bot": false,
"headline": "version bump",
"author_name": "Jeff Ober",
"author_login": "sysread",
"committed_at": "2026-06-23T19:10:03Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "968aeb54e054da6b81e730813ffb3adc9c4a3c0b",
"body": null,
"is_bot": false,
"headline": "Fix reviewer base selection for branch reviews",
"author_name": "Jeff Ober",
"author_login": "sysread",
"committed_at": "2026-06-23T19:00:32Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5478db3dfe66d8c3c3e24c235618acc916b83f37",
"body": null,
"is_bot": false,
"headline": "version bump",
"author_name": "Jeff Ober",
"author_login": "sysread",
"committed_at": "2026-06-23T15:22:47Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e4b17f1460f7a8972384743d37dae06d779119ef",
"body": null,
"is_bot": false,
"headline": "Handle nil recall query fields in coordinator memory bootstrap",
"author_name": "Jeff Ober",
"author_login": "sysread",
"committed_at": "2026-06-23T15:16:11Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0bc5eb593eac6631b67e58331d86f9d5365c0ff8",
"body": null,
"is_bot": false,
"headline": "version bump",
"author_name": "Jeff Ober",
"author_login": "sysread",
"committed_at": "2026-06-17T22:01:52Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "286f3d9123263c7821128b6fdd4b365f4c77610c",
"body": "A file path resolved through the cwd (Path.absname, File.cwd!) is\nOS-canonical - on macOS /tmp resolves to /private/tmp - but a project's\nsource_root is stored as a plain Path.expand with symlinks intact. When\nthe two differ only by a symlinked ancestor, Path.relative_to/2 can't\nstrip the root prefi\n[…]\nvize with no extra filesystem calls. Normalizing at the comparison\nrather than canonicalizing source_root at storage avoids reintroducing\nthe same asymmetry for paths threaded in from non-cwd sources.",
"is_bot": false,
"headline": "Fix file lookups when project root differs by a symlinked ancestor",
"author_name": "Jeff Ober",
"author_login": "sysread",
"committed_at": "2026-06-17T19:10:54Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "fae29aa60e90012d2b336e06fc93ea298650eeea",
"body": "Adds docs/use-cases/ - workflow runbooks (get-started, project\ninstructions, cross-tool integration, safe edit mode, review, context\ntroubleshooting) - as a third user-facing docs lane alongside\ndocs/user/ and docs/dev/.\n\nThe self-help tool and hexdocs extras globs now span both docs/user/\nand docs/\n[…]\ngotcha #43.\n\nAdds a root CLAUDE.md for cross-tool orientation (FNORD.md remains the\nauthoritative, always-injected source) and sharpens the FNORD.md vs\nCLAUDE.md role split in ai-tool-integrations.md.",
"is_bot": false,
"headline": "Add use-cases docs lane, root CLAUDE.md, wire docs globs",
"author_name": "Jeff Ober",
"author_login": "sysread",
"committed_at": "2026-06-17T18:31:50Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "beeccda92aceabb249a13092cd4e3178368375f5",
"body": "… approvals",
"is_bot": false,
"headline": "Fix shell approval customize matching for persisted literal and regex…",
"author_name": "Jeff Ober",
"author_login": "sysread",
"committed_at": "2026-06-17T17:42:56Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5f8f38cf70025c4248f092817919ea86aa50d524",
"body": null,
"is_bot": false,
"headline": "reviewer: require reachability and producer-chain proof for findings",
"author_name": "Jeff Ober",
"author_login": "sysread",
"committed_at": "2026-06-17T16:43:14Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "635f1ff13c763bf76505b322f7e901568b6dea7a",
"body": null,
"is_bot": false,
"headline": "version bump",
"author_name": "Jeff Ober",
"author_login": "sysread",
"committed_at": "2026-06-17T16:04:11Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e220d74c5911e4e71433aca92f2bc98f9b6d5457",
"body": null,
"is_bot": false,
"headline": "Add explicit Fonz coordinator prompt",
"author_name": "Jeff Ober",
"author_login": "sysread",
"committed_at": "2026-06-17T15:59:21Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "77939a51cfa59970fe19154709cc040c9ba511c4",
"body": null,
"is_bot": false,
"headline": "Add coverage for Fonz prompt injection path",
"author_name": "Jeff Ober",
"author_login": "sysread",
"committed_at": "2026-06-17T15:23:49Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5d3eb608a12d144ad0445d33c277902c01f0f91c",
"body": null,
"is_bot": false,
"headline": "Restore hidden ask --eyyyy fonz flag",
"author_name": "Jeff Ober",
"author_login": "sysread",
"committed_at": "2026-06-17T14:52:29Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "8e54e09c588bb6fbe151d0e0f5054c0e5b36875b",
"body": null,
"is_bot": false,
"headline": "ignore .pi",
"author_name": "Jeff Ober",
"author_login": "sysread",
"committed_at": "2026-06-12T21:41:08Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e43692611f1f902309317e78e92ea7c9da035653",
"body": "Every async: false now carries a comment at the use line naming the\nVM-global mechanism that pins it (stderr capture via capture_all,\nLogger level/capture_log, real PATH/env for subprocesses, ad-hoc\nGenServer init hitting Mox facades, VM-globally named processes), so\nsync is visibly intentional rather than an unswept default.",
"is_bot": false,
"headline": "tests: document why each remaining sync file is pinned",
"author_name": "Jeff Ober",
"author_login": "sysread",
"committed_at": "2026-06-12T19:49:16Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "fc066d8d76140ace50666a015f4a24ee7d884007",
"body": "Audited the 15 sync files with no detectable async blocker. Twelve are\ngenuinely isolated (per-test instance/tmpdir, tree-scoped config,\nFileLock'd settings writes, ETS queries filtered to the test's own\nGlobals root) and flip cleanly. The three indexer tests stay sync:\ncommit/conversation indexers \n[…]\nr file gains the explanatory comment the other two\nalready had.\n\nSuite: 30.7s -> 18.1s since track C started; sync tail now 5.8s.\nVerified: make check + 8 stress runs at --max-cases 64, zero warnings.",
"is_bot": false,
"headline": "tests: flip 12 audited sync files async",
"author_name": "Jeff Ober",
"author_login": "sysread",
"committed_at": "2026-06-12T19:42:57Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "db3e04f9876e3019dc70166f8689ae6a4737f972",
"body": "…acades\n\nCloses the raw-subprocess seam holes outside lib/git_cli:\n- decomposer's git ops move onto new GitCli callbacks (merge_base,\n diff_stat, log_oneline, verify_commit, fetch_ref); its gh calls route\n through Util.Exec\n- Validation.Rules.execute_validation_command routes through Util.Exec;\n \n[…]\ns git's relative --git-common-dir answer against the\n queried dir rather than the process cwd\n- skills_generate_test drops the last File.cd! in the suite for the\n override; stays sync on capture_all",
"is_bot": false,
"headline": "seams: route decomposer, validation, and project resolution through f…",
"author_name": "Jeff Ober",
"author_login": "sysread",
"committed_at": "2026-06-12T19:08:00Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "ae27c93c1199d331c09129af37b14ab026c3e2c7",
"body": "endpoint_discovery now resolves the settings path via Settings.settings_file\ninstead of raw System.user_home!, honoring the test home override.\n\nformatter_test, output_test, edit_test, and mcp_test stop mutating real VM\nenv (edit_test was already async and racing); output_test flips async.\nformatter_test and mcp_test stay sync: both mutate VM-global logger state.",
"is_bot": false,
"headline": "tests: migrate formatter/fitting/mcp-debug env vars to put_override",
"author_name": "Jeff Ober",
"author_login": "sysread",
"committed_at": "2026-06-12T18:34:13Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0ce724c0ed26eba00463a8870e5a34d823d4735d",
"body": "…on async\n\nFile.cd! in notes_test and worktree_test becomes the Globals-scoped project\nroot override (GitCli's effective_git_dir prefers it over cwd). FNORD_TOOL_-\nROUND_CAP and FNORD_LOGGER_LINES mutations become Util.Env.put_override.\nutil_test's capture_all silencers were dead (UI.debug is suppre\n[…]\n wait_until; save_test's poll fallback was latently broken (reduce_while\nreturn). skills_generate_test keeps its File.cd!: ResolveProject resolves raw\ncwd and is not override-aware (future seam work).",
"is_bot": false,
"headline": "tests: cd/env/sleep conversions; flip notes, worktree, util, completi…",
"author_name": "Jeff Ober",
"author_login": "sysread",
"committed_at": "2026-06-12T18:05:08Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "ce91fb3f96faf1bc51e7deb14b9e8b37cf67739e",
"body": "Util.Env reads now consult a Services.Globals-scoped override (put_override/2)\nbefore the real environment, so tests can vary env-driven behavior per process\ntree instead of racing async siblings with VM-global put_env. nil overrides\nexpress 'pretend unset'. Lookup goes through Globals.get_override \n[…]\nerver starts (escript startup reads\nenv ahead of Fnord.Instance) by treating the missing table as 'no root'.\nwait_until/1-3 in Fnord.TestCase replaces ad-hoc sleep/poll loops. Documented\nas gotcha 42.",
"is_bot": false,
"headline": "tests: Util.Env override seam + wait_until helper",
"author_name": "Jeff Ober",
"author_login": "sysread",
"committed_at": "2026-06-12T18:05:06Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "249a052d3c9033eafb8222873375861f4dc5d9b8",
"body": "HOME race gone, so the git-fixture files no longer need serialization:\ngit_cli, index, file/notes, decomposer, worktree_ignored_files,\nsource_fallback, and the store/project fixture files. index_test's two\ncapture_all wrappers discarded their output (silencers from when index\noutput bypassed the UI mock); deleted. ai/notes_test and\ngit_cli/worktree_test stay sync - their File.cd! covers prod cwd\nresolution and needs the project_root_override seam instead.",
"is_bot": false,
"headline": "tests: flip git-fixture files async",
"author_name": "Jeff Ober",
"author_login": "sysread",
"committed_at": "2026-06-12T15:50:47Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0147095223c423f4fd2f4a4cbf8c26410df2715e",
"body": "Per-test put_env(\"HOME\") was a VM-global write racing async tests, and\nmock_git_project wrote global gitconfig under it. HOME now points at one\nsuite-lifetime temp dir set in test_helper; per-test isolation rides the\n:test_home_override Globals key that Settings.get_user_home already\nconsults. init.defaultBranch comes from the static GIT_CONFIG_* env.",
"is_bot": false,
"headline": "tests: suite-static HOME; per-test home via Globals only",
"author_name": "Jeff Ober",
"author_login": "sysread",
"committed_at": "2026-06-12T15:50:36Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "7fa05a8f4cb6d84b0fcc38c722397adf525ec912",
"body": "No test uses meck anymore. Drop the dep, the safe_meck machinery and\nper-test defensive unloads in Fnord.TestCase, and the test_helper\nstartup. Gotcha 15 becomes the no-meck policy; stale meck analogies in\nGitCli docstrings and dev docs reworded.",
"is_bot": false,
"headline": "remove meck",
"author_name": "Jeff Ober",
"author_login": "sysread",
"committed_at": "2026-06-12T15:31:47Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "95892fb710dff2f18c6a700f0b53f5ee1fda2bfc",
"body": "Offload tests use the tree's real Services.TempFile; failure injection\nre-registers the instance entry with a dead pid (whereis nil-checks\nliveness, so fetch! raises into the offload rescue). Indexer e2e runs\nthe real AI.Tools.LongTermMemory against the mock project store; the\ntool-failure case injects a title that passes ScopePolicy but fails\nMemory.new validation. Both files now async.",
"is_bot": false,
"headline": "tests: convert completion offload and session indexer e2e off meck",
"author_name": "Jeff Ober",
"author_login": "sysread",
"committed_at": "2026-06-12T15:31:34Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "267b276b2882782b06b6f91805c95613e74a3ee0",
"body": "Production.confirm probed :prim_tty directly, duplicating UI.is_tty?'s\n:auto path on the same device while ignoring its tree-scoped override.\nRouting through UI.is_tty? is behavior-identical in production and lets\ntests dictate interactivity via set_config(:is_tty, ...) - the old meck\non IO.gets onl\n[…]\nen by real stdin fed through a fresh UI.Queue started\ninside capture_io (gotcha 40); the Owl.Box and Logger mecks were\nvestigial - the facade routed to the output mock before reaching\nproduction code.",
"is_bot": false,
"headline": "ui output: confirm tty gate via UI.is_tty?; notification tests off meck",
"author_name": "Jeff Ober",
"author_login": "sysread",
"committed_at": "2026-06-11T23:10:40Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "1806e4ff2d6bc744c6b80598f3c84bf2d0746415",
"body": "The Owl.Spinner meck tested the quiet-skipped path artificially; the\nquiet posture exercises the same defensive rescue/catch wrapping for\nreal. The Owl.IO meck is replaced by starting a fresh UI.Queue inside\ncapture_io so its real rendered output is assertable. The UI.Queue meck\nforced an error shape that is unreachable through the real queue\n(rescue normalizes the :error class); the test is dropped with a\ncomment. ui_test and production_test flip to async.",
"is_bot": false,
"headline": "tests: convert ui/queue/production tests off meck",
"author_name": "Jeff Ober",
"author_login": "sysread",
"committed_at": "2026-06-11T23:10:28Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1bbfd54dd998fe124f822d198bd7fc1b9503551e",
"body": "get_tools posture moves from meck-on-UI to the Globals config the UI\nfacade reads; the worktree gate scripts git state through the GitCli\nfacade. The validation describe drops its meck pile (Services.\nConversation, Interrupts, AI.Agent, Validation.Rules) for the real\nthing: a real conversation server, the real completion loop driven by\na canned file_edit_tool turn at the completion-API boundary, and a\nreal Validation.Rules run against changed-file state scripted via\nGitCli.status_short.",
"is_bot": false,
"headline": "tests: convert coordinator glue tools/validation to real flow",
"author_name": "Jeff Ober",
"author_login": "sysread",
"committed_at": "2026-06-11T22:54:34Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "60bf37194daf7a63e5645e8b2dbf92db8d6b87f3",
"body": "Notifier (osascript/notify-send/dunstify) and Cmd.Upgrade (escript\ninstall) shelled out via System directly - external mutations with no\nseam, testable only by mecking System itself. Util.Exec mirrors\nSystem.cmd/find_executable behind the :exec Globals key; tests get the\nloud unstubbed mock (same po\n[…]\ntify/upgrade tests convert to the new seam; upgrade\ndrops its Util/UI mecks too (real version from the app spec, scripted\nhex response at the HTTP boundary, confirm at the Output seam) and\ngoes async.",
"is_bot": false,
"headline": "exec: route outward-facing subprocess calls through Util.Exec seam",
"author_name": "Jeff Ober",
"author_login": "sysread",
"committed_at": "2026-06-11T22:54:22Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "a516d734ee2332f3c655e428a3b78b08401afd5b",
"body": "…facade\n\ngit status --short in validation/rules.ex was a raw System.cmd seam\nhole; the subprocess call and line splitting move into GitCli.Default\nbehind a status_short/1 callback, letting tests script changed-file\nstate through the existing git facade.",
"is_bot": false,
"headline": "git_cli: status_short; validation changed-file discovery through the …",
"author_name": "Jeff Ober",
"author_login": "sysread",
"committed_at": "2026-06-11T22:54:10Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5f3fbcb78a5cf17ebe3333062702b58267a4f41b",
"body": "… dispatch\n\nask_test, ask/worktree_test, git_cli/worktree_test, prime_test, and\nglue_completion_test drop :meck for real Services.Conversation and\nServices.Task GenServers, with the coordinator canned at the existing\n:agent_dispatcher seam. Worktree-flow tests seed real conversation\nfiles with worktree metadata and run --follow instead of mocking\nget_conversation_meta. Tests default the clipboard to an inert success\nstub so the ask flow never touches the developer's clipboard.",
"is_bot": false,
"headline": "tests: convert Services.Conversation cluster to real servers + canned…",
"author_name": "Jeff Ober",
"author_login": "sysread",
"committed_at": "2026-06-11T22:23:48Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "efe84d0f6d38824c6c953514c397175d1e803eba",
"body": "The Clipboard hex dep shells out to pbcopy/xclip, so a copy is an\noutward-facing side effect. Narrow seam on the :clipboard Globals key,\ndefaulting to the passthrough in Util.Clipboard.Default.",
"is_bot": false,
"headline": "clipboard: route system clipboard writes through Util.Clipboard seam",
"author_name": "Jeff Ober",
"author_login": "sysread",
"committed_at": "2026-06-11T22:23:47Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ce227d89f93ce7a95a23ef4cdc05c53290f14277",
"body": "Removes the suite-global :meck block in test_helper (MCP.Supervisor /\nHermes.Client.Base) and the per-file mecks it enabled:\n\n- services/mcp_test: the two self-mocking test/0 cases become real\n assertions over check_server_status assembly (facade-scripted runtime,\n real settings, real credentials \n[…]\na configured server (non-vacuous).\n- conversations_test flips async.\n\nmock_mcp_client/0 passes through to Default except start_supervisor,\nwhich must never boot the VM-global hermes stack from a test.",
"is_bot": false,
"headline": "tests: convert MCP cluster to Mox via MCP.Client facade",
"author_name": "Jeff Ober",
"author_login": "sysread",
"committed_at": "2026-06-11T21:40:25Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "1aaafe3917d190df92eb33c806ce5fcc58feec8d",
"body": "The VM-global MCP.Supervisor and per-server hermes client calls now go\nthrough an MCP.Client behaviour (Globals key :mcp_client) with the real\nimplementation in MCP.Client.Default: registration/aliveness checks,\nrescue/catch around hermes invocations, response unwrapping, and the\nstart-then-unlink supervisor dance. Services.MCP keeps orchestration;\nMCP.Tools-generated modules invoke tools through the facade. Replaces\nthe suite-global :meck on MCP.Supervisor and Hermes.Client.Base.",
"is_bot": false,
"headline": "mcp: route hermes runtime through MCP.Client facade",
"author_name": "Jeff Ober",
"author_login": "sysread",
"committed_at": "2026-06-11T21:40:10Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ad8d726b14afec7941f5ce4468fb116833106e48",
"body": "…tion",
"is_bot": false,
"headline": "docs: gotchas for init-time mock calls and empty-store project resolu…",
"author_name": "Jeff Ober",
"author_login": "sysread",
"committed_at": "2026-06-11T20:28:55Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "24efa349fac8b8a6ca53077ba0640b156c7384ec",
"body": "conversations_test: the UI meck blanket (which redirected info/error to\nstderr for capture and scripted confirm) becomes Mox stubs at the\nUI.Output seam doing the same. The MCP.Supervisor test is untouched: it\nmanipulates the global meck installed by test_helper, which is the MCP\nstartup seam's problem, so the file stays sync.\n\ngate_test: async now; policy is configured by writing the real settings\nfile (per-test HOME) via Settings.update/4 instead of mocking the\nsettings reader.",
"is_bot": false,
"headline": "tests: convert conversations and approvals gate tests off meck",
"author_name": "Jeff Ober",
"author_login": "sysread",
"committed_at": "2026-06-11T20:28:17Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d6090dd9182f26ba0fe6afb1abd5974f5cc182fd",
"body": "Flips async. Cleanup prompts are scripted at the UI.Output seam (puts\nand confirm carry the say/confirm traffic; warning_banner bypasses the\nseam and is asserted via captured stderr). The File.rm meck becomes a\nreal :eacces - removing write permission from the backup's directory -\nand the Store.get_project meck becomes a real unselected project via\nset_config(:project, nil).",
"is_bot": false,
"headline": "tests: convert backup_file_test to Mox and real failure modes",
"author_name": "Jeff Ober",
"author_login": "sysread",
"committed_at": "2026-06-11T20:21:02Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f1d1b7b3b011073f24ffba5877d8633ace3fa848",
"body": "…laborators\n\nAll three drop their meck blankets (AI.Tools, Services.BackupFile,\nSearch.Files, Store, Store.Project) and flip async.\n\nsearch_test runs the real pipeline end to end: files written to the\nproject source, indexed through Cmd.Index with MockIndexer-canned\none-hot embeddings, ranked by the\n[…]\nhaped session (root override +\n:original_project_root) with only the gitignore check scripted at the\nGitCli.Worktree facade. AI.Tools.get_project/0 rejects empty store\ndirs, so setups seed files_root.",
"is_bot": false,
"headline": "tests: convert file search, contents, and info tool tests to real col…",
"author_name": "Jeff Ober",
"author_login": "sysread",
"committed_at": "2026-06-11T20:14:54Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "cd4bf3c767e058379a43d7fda7a2d0511df08278",
"body": "commit_indexer_test: git enumeration is canned at the GitCli facade; the\nindex_status-once regression now counts rev-list invocations via a\nsentinel, which observes the actual O(M)-forks cost the regression\nguards against. index_status, build_metadata, and write_embeddings run\nreal against the tmpdi\n[…]\n vector.\nThe index footer reflects real classification (no source repo, so\nindexed entries report as deleted). The fabricated index-state error is\nreplaced by a real :project_not_set propagation test.",
"is_bot": false,
"headline": "tests: convert commit indexer and commit search tests to Mox",
"author_name": "Jeff Ober",
"author_login": "sysread",
"committed_at": "2026-06-11T20:07:13Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "ec6ec5fb502683d222e6d2bf98b40a6483102c54",
"body": "Moves the rev-list / commit-meta / numstat subprocess calls (and their\noutput parsing) from Store.Project.CommitIndex into the GitCli facade as\ncommit_shas/2, commit_meta/2, and commit_numstat/2. CommitIndex keeps\ncandidate assembly: model stamping, drop logging, and the async fan-out.\n\nCloses the raw System.cmd seam hole that forced tests to meck System to\nscript commit history.",
"is_bot": false,
"headline": "git: route commit enumeration through GitCli",
"author_name": "Jeff Ober",
"author_login": "sysread",
"committed_at": "2026-06-11T20:07:12Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5ab7f4d097f9056dc500c3f587d757ab817617b0",
"body": "Adds GitCli.repo_root_at/1 and routes Cmd.Worktrees' view-path repo\nresolution through it - that was a raw System.cmd(\"git\", ...) outside\nthe GitCli boundary, and the reason two tests had to meck System\nitself.\n\nworktrees_test is now meck-free and async: conversations are written to\nthe real per-tes\n[…]\nits Services.Conversation meck (it scripts the\nconversation server; that layer has its own conversion track) but its\nGitCli.Worktree/Review mecks become facade mocks and the vestigial UI\nmeck is gone.",
"is_bot": false,
"headline": "tests: convert worktrees and ask-worktree tests to git mocks",
"author_name": "Jeff Ober",
"author_login": "sysread",
"committed_at": "2026-06-11T19:06:24Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "3f2c0a21852b94f2502c2fc06b26ed2995b3659e",
"body": "… mocks\n\nFirst consumers of the GitCli facade seams. edit_test and index_test are\nnow meck-free (edit_test flips async; index_test stays sync on the\nmock_git_project global-gitconfig write). commit_indexer_test keeps its\nCommitIndex/BgIndexingControl mecks for the Store track. The\nworktree_test roll\n[…]\nnversation stays mecked to produce the\nGenServer.call exit under test.\n\nAlso deletes index_test's leaked ':meck.new(Cmd.Index)' (created\nwithout expectations and never unloaded - the gotcha 15 shape).",
"is_bot": false,
"headline": "tests: convert edit, index, commit-indexer, and worktree tests to git…",
"author_name": "Jeff Ober",
"author_login": "sysread",
"committed_at": "2026-06-11T18:56:04Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "5ea6b59aff0bd5ddc217402c1411b6ac48f8a1cd",
"body": "GitCli, GitCli.Worktree, and GitCli.Worktree.Review become behaviours\nwhose public functions delegate through impl/0 (Globals keys :git_cli,\n:git_worktree, :git_review); the real System.cmd wrappers move to\nsibling Default modules. Facade delegation (vs the caller-side impl()\nconvention of the narro\n[…]\nls, preserving the\n:meck passthrough semantics the existing tests rely on. Tests opt in\nper test via mock_git_cli/mock_git_worktree/mock_git_review, which\npre-stub the mock to pass through to Default.",
"is_bot": false,
"headline": "git: facade seams over GitCli, Worktree, and Review",
"author_name": "Jeff Ober",
"author_login": "sysread",
"committed_at": "2026-06-11T18:45:32Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "10be60ad23120579b29c68e6d3b0f54dce2db4a2",
"body": "All three drop to canned_completion with real collaborators and flip\nasync. Patcher runs against the real AI.Tools.get_file_contents (the\nfile exists in the mock project) with messages asserted at the wire,\nwhere the loop's agent-name message adds one to the counts. Accumulator\nruns the real AI.Spli\n[…]\n-test store - its happy-path 'returns :ok' assertion was a\nmeck fantasy (the real function returns the completion state), replaced\nwith assertions on the rebuilt state and the replayed stdout content.",
"is_bot": false,
"headline": "tests: convert patcher, accumulator, and replay tests off meck",
"author_name": "Jeff Ober",
"author_login": "sysread",
"committed_at": "2026-06-11T17:42:23Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "fa378ed8eab472a0f9874635e1d67477cfa23312",
"body": "AI.Agent.get_response/2's inner impl invocation now routes through\nAI.Agent.Dispatcher.impl().dispatch/2 (the :agent_dispatcher Globals\nkey). Tests canned-respond per agent module with canned_agent/1 while\nthe wrapper's bookkeeping (name checkout, task wrapping) runs for real.\nUnlike the http/comple\n[…]\n\nindex, session indexer e2e, file info, and glue completion tests -\nglue's verbosity regression now asserts at the wire layer, proving the\nflag survives the full trip through the real completion loop.",
"is_bot": false,
"headline": "ai: agent-dispatch boundary behind an injectable seam",
"author_name": "Jeff Ober",
"author_login": "sysread",
"committed_at": "2026-06-11T17:30:02Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "4937e8a1ef4ef478784753ffa54d0ed82a20c2b1",
"body": "The bare assert_receive flaked under --max-cases 64: a loaded scheduler\ndelays the spawned migration's file I/O past the default window. Every\nsibling DOWN-wait in the suite already carries an explicit timeout.",
"is_bot": false,
"headline": "tests: widen migration DOWN wait beyond the default 100ms",
"author_name": "Jeff Ober",
"author_login": "sysread",
"committed_at": "2026-06-11T16:44:25Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "31df49fb74278b927cbc87f5f4eb3310023df9ec",
"body": "tersify_msg's inner completion runs with compact?: false, so a message\ntoo large to tersify in one shot surfaces as the three-element\n{:error, :context_length_exceeded, usage} - a shape its case had no\nclause for. The tersify task crashed with CaseClauseError and took down\nthe completion that compac\n[…]\nching the tool's error mapping. Its\n'passes errors through unchanged' test asserted a bare\n{:error, :api_unavailable} the loop never produces; it now asserts the\nloop's actual unavailable-API message.",
"is_bot": false,
"headline": "compaction: tolerate context-length error when tersifying a message",
"author_name": "Jeff Ober",
"author_login": "sysread",
"committed_at": "2026-06-11T16:44:07Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "d9fe7f488be466f746ab307ca4230ce26e6717d0",
"body": "AI.CompletionAPI.get/6 is the model-call boundary: below it is wire\nconcerns (payload, auth, retry, transport), above it is the completion\nloop. The loop now calls through impl(), resolved per process tree via\nthe :completion_api Globals key. Fnord.TestCase routes the key to a Mox\nmock with no defau\n[…]\nrning the originals - which the assertions tolerated\n('tersified OR unchanged'). They now drive the real tersify and\nsummarize paths with canned responses and assert what compaction\nactually produces.",
"is_bot": false,
"headline": "ai: completion-api boundary behind an injectable seam",
"author_name": "Jeff Ober",
"author_login": "sysread",
"committed_at": "2026-06-11T16:43:46Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "ae1c52254e19192051e6b5646eceb37ae845d8f4",
"body": "…ller\n\nMCP.Tools lazily started a VM-globally-named Agent linked to whichever\nprocess called it first. Under per-test instances that owner is an\narbitrary test process, so the \"global\" registry died when that test\nfinished and concurrent tests crashed with no-process mid-call\n(seed-dependent; caught\n[…]\nded-check keeps\nre-registration idempotent.\n\ngotchas.md item 34 generalizes the rule: lazy whereis-then-start_link\nof a named process is item 33's check-then-create race plus a\ndied-with-creator link.",
"is_bot": false,
"headline": "mcp tools: boot with the instance roster, not lazily linked to the ca…",
"author_name": "Jeff Ober",
"author_login": "sysread",
"committed_at": "2026-06-11T16:15:37Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "264d6123355a1a114f00efa426a7a8c5707bc0ff",
"body": "Http's retrying JSON helpers and the MCP OAuth/discovery modules called\nHTTPoison directly, so tests could only intercept the network by mecking\nHTTPoison VM-wide - forcing those files sync and leaving the network\nreachable from any unmocked path.\n\nHttp.Client is the single transport boundary: a beh\n[…]\ntration/client); 7 flip\nasync. discovery_test's Registration meck becomes a wire-level stub of\nthe RFC 7591 POST. endpoint_catchall drops a vestigial Store.APIUsage\nmeck that never set an expectation.",
"is_bot": false,
"headline": "http: route all transport through the injectable Http.Client seam",
"author_name": "Jeff Ober",
"author_login": "sysread",
"committed_at": "2026-06-11T16:07:18Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "3c4926d481da8690df2a29f6064a749b7a370794",
"body": "The UI.Output behaviour existed for exactly this, but 12 files mocked\nthe UI module itself via :meck - above the seam instead of at it. Tests\nnow expect/stub on UI.Output.Mock (Mox): choose/prompt/confirm map\none-to-one; info/error/report_from/feedback assertions match formatted\ncontent on log/2. TT\n[…]\nure (is_tty true, quiet false) that the bypass hid.\n\nNine of the twelve flip async; formatter/output tests stay sync (env\nmutation) and ui_tools stays sync (global logger level). meck files:\n66 -> 55.",
"is_bot": false,
"headline": "tests: convert UI mecks to the UI.Output seam",
"author_name": "Jeff Ober",
"author_login": "sysread",
"committed_at": "2026-06-10T22:19:27Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "b3456421457a2454b619eb0d195b35b47d853516",
"body": "stale_lock_age_ms treated a failed stat as 'stale', but under healthy\ncontention ENOENT is routine: the holder renames the lock dir away on\nrelease, right between a contender's mkdir EEXIST and its staleness\ncheck. The contender then entered attempt_stale_takeover, whose rename\nsteals whatever sits \n[…]\nc6, 7a231f6a). A\nmissing lock dir means the lock is free: report fresh and let the retry\nloop's mkdir win it honestly. The takeover path now fires only on\ngenuinely old lock dirs, i.e. crash recovery.",
"is_bot": false,
"headline": "file_lock: missing lock dir is free, not stale",
"author_name": "Jeff Ober",
"author_login": "sysread",
"committed_at": "2026-06-10T22:19:26Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "cc79498881ba5359e188976f9667dddfb8367843",
"body": "Eligibility: no meck, no subprocess/git fixtures, no File.cd, no\ncapture_log assertions, no Process.sleep, no env mutation, no\ncapture_all/stderr capture, no Logger.configure, no persistent_term.\nVerified across five randomized seeds plus make check.\n\nWall-clock is barely moved (the flipped files we\n[…]\ncoped\nisolation under real concurrency. Remaining sync population: meck users\n(pending the Mox conversion track), subprocess/git tests (pending\nper-call env), and a handful of global-state stragglers.",
"is_bot": false,
"headline": "tests: flip 81 conservatively-eligible files to async: true",
"author_name": "Jeff Ober",
"author_login": "sysread",
"committed_at": "2026-06-10T21:17:06Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "62d4d41bb9924888962bb4993f9f3eef67893bc5",
"body": "Check-then-:ets.new on a named table races under concurrent tests (both\ncallers see :undefined; the loser raises, and under max_restarts: 0 that\nkills the whole instance and fails an unrelated test). The table is also\nowned by whichever process created it, vanishing when that process exits -\nunder p\n[…]\noth offenders:\nServices.Notes' :notes_status pending counter and AI.Tools.Cmd's\ntool-availability memo. Surfaced by the first concurrent suite runs as\nseed-dependent failures in rotating victim tests.",
"is_bot": false,
"headline": "globals: race-free shared ETS tables via ensure_shared_table",
"author_name": "Jeff Ober",
"author_login": "sysread",
"committed_at": "2026-06-10T21:17:04Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "86354be2ba2e476c6a1f7ef4f89d6c6fab6ae78f",
"body": "The suite cannot catch a broken production boot: test_helper starts\nfoundational services for the whole VM, so a missing start in the prod\npath passes every test and crashes the binary on any invocation. Boot the\nbuilt escript once (HOME-isolated) and require exit 0; -h is sufficient\nbecause main/1 boots the instance before CLI parsing. Mirrored as a CI\nstep since CI invokes mix directly rather than make check.",
"is_bot": false,
"headline": "make check: boot-check guard for prod boot regressions",
"author_name": "Jeff Ober",
"author_login": "sysread",
"committed_at": "2026-06-10T20:57:37Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d71c9a9b74aa7537200c1938fe7cfe7713e9b70c",
"body": "Three changes gate async: (1) the using-block's bare 'use ExUnit.Case'\ndiscarded the caller's async option (ExUnit.CaseTemplate already forwards\nit) - removed; (2) static env vars move to test_helper, set once per VM\nwith no restore, because per-test on_exit deletes would yank VM-global env\nout from\n[…]\ns allowances\nautomatically after boot.\n\nThe seven bare-ExUnit.Case files convert to Fnord.TestCase: five\nhazard-free ones run async (the canaries for this plumbing); the two\nmeck-using ones stay sync.",
"is_bot": false,
"headline": "tests: async-capable Fnord.TestCase",
"author_name": "Jeff Ober",
"author_login": "sysread",
"committed_at": "2026-06-10T20:57:26Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "516624cb4f7830f8e71804329ea313e5ed6c3257",
"body": "The session-indexer tests carried whereis/already_started/on_exit dances\nfrom the era of one VM-global MemoryIndexer shared across the suite. With\nper-test trees, the indexer is never running at test start and dies with\nthe test process; each defensive block collapses to a plain start_link.",
"is_bot": false,
"headline": "tests: drop lifecycle scaffolding obsoleted by per-test services",
"author_name": "Jeff Ober",
"author_login": "sysread",
"committed_at": "2026-06-10T20:57:25Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "7e17ac2640468986db4738c4bf4ddf0729196edc",
"body": "Fnord.Instance.start_link/1 is the single boot path: it starts Globals\n(the one legitimately VM-global service), installs the caller as the tree\nroot, applies config overrides, and supervises the full service roster\nwith max_restarts: 0 (any service death kills the instance and its owner,\nmatching t\n[…]\nt institutionalized in gotchas: the suite cannot catch prod boot\nregressions because test_helper boots Globals for the VM. Verified by\nescript smoke test, which caught exactly that during this change.",
"is_bot": false,
"headline": "boot: unify prod and test startup through Fnord.Instance",
"author_name": "Jeff Ober",
"author_login": "sysread",
"committed_at": "2026-06-10T20:57:06Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "6e56534fe1e3439fdfa96ca6034c5f67a7620b1c",
"body": "The coordinator restarted the Approvals GenServer 'to pick up edit mode',\nbut Approvals.init reads no config - the impl is resolved at confirm-time.\nThe restart's only real effect was discarding session-scoped grants, which\nis a legitimate session-boundary operation. Make it explicit:\nreset_session/\n[…]\n the same stop/start dance.\n\nProcess restarts of roster services are about to become fatal (the\ninstance supervisor runs with max_restarts: 0), so state resets must be\nAPI calls, not lifecycle events.",
"is_bot": false,
"headline": "approvals: session reset API replaces restart hack",
"author_name": "Jeff Ober",
"author_login": "sysread",
"committed_at": "2026-06-10T20:56:18Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "de807ba3fa5e0820c473d49788181b5c428efb61",
"body": "Every service that registered under name: __MODULE__ now starts unnamed\nand registers via Services.Instance; module APIs resolve their instance\nthrough the caller's process tree. Instance.call preserves crash-on-missing\nsemantics; Instance.cast preserves cast-to-unregistered silent no-op.\nNotes' pen\n[…]\n tests\nspawning service-calling processes use Task.start so the child carries\n$ancestors. Per-test service resets (NamePool.reset, BackupFile.reset)\ndropped where per-test freshness makes them no-ops.",
"is_bot": false,
"headline": "services: convert named singletons to tree-scoped registration",
"author_name": "Jeff Ober",
"author_login": "sysread",
"committed_at": "2026-06-10T20:56:04Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "fb7da30904d4d732cf7d98f4a832c6e787b0321c",
"body": "Services register their pid under the current Globals root instead of a\nVM-global atom name, so process trees (tests, instance checkouts) each get\ntheir own copy. Registry entries ride the Globals data table and are wiped\non root death. get_override/3 reads tree-local-only (Application.get_env\ndepre\n[…]\ns;\nget_all_env/1 filters to atom keys to keep Keyword semantics. put_all_env's\nunused list-shape clause deleted (its spec didn't cover the surviving\nshape, which dialyzer flagged as a contract break).",
"is_bot": false,
"headline": "globals: tree-scoped service registry (Services.Instance)",
"author_name": "Jeff Ober",
"author_login": "sysread",
"committed_at": "2026-06-10T20:55:44Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "c48c1ab7c19626be586d4b6aefec0b838086a7df",
"body": null,
"is_bot": false,
"headline": "version bump",
"author_name": "Jeff Ober",
"author_login": "sysread",
"committed_at": "2026-06-10T16:30:02Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ed089831f7acf468d53f3f1038e51b4d3add8814",
"body": "… sent for websocket too",
"is_bot": false,
"headline": "mcp oauth: comment matched neither behavior nor RFC 8707; resource is…",
"author_name": "Jeff Ober",
"author_login": "sysread",
"committed_at": "2026-06-10T16:16:58Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "31d282e7947d2b31406d30b0c04065da8179bacb",
"body": null,
"is_bot": false,
"headline": "heal warning: composed heal covers more than tool arguments",
"author_name": "Jeff Ober",
"author_login": "sysread",
"committed_at": "2026-06-10T16:16:56Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5b7c0ba7806f050cc981c2355525476f32d015de",
"body": null,
"is_bot": false,
"headline": "skill agent: model=web must attach the web_search tool entry",
"author_name": "Jeff Ober",
"author_login": "sysread",
"committed_at": "2026-06-10T16:16:53Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d33a3afb5ecf444de2d09b695f298f75b9ae8b6a",
"body": null,
"is_bot": false,
"headline": "make bump: patch-bump mix.exs and commit it as 'version bump'",
"author_name": "Jeff Ober",
"author_login": "sysread",
"committed_at": "2026-06-09T20:50:50Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "dfda0f0224175587a8bd797e20762af41bf7949d",
"body": "…completions leftover",
"is_bot": false,
"headline": "models: restore gpt-5.4 reasoning levels; ignored-arg pin was a chat-…",
"author_name": "Jeff Ober",
"author_login": "sysread",
"committed_at": "2026-06-09T19:43:00Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "377db92ddf24d21857e1ae0235064a095106f3e0",
"body": null,
"is_bot": false,
"headline": "docs: FNORD_NO_LOWFAT and the lowfat auto-wrap behavior",
"author_name": "Jeff Ober",
"author_login": "sysread",
"committed_at": "2026-06-09T19:42:58Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "49c0ec5a4bfbf22e07f423546f97c7d6ee8fae19",
"body": "…ith the v1 writer",
"is_bot": false,
"headline": "conversation format: per-writer tmp names; sync heal docs and tests w…",
"author_name": "Jeff Ober",
"author_login": "sysread",
"committed_at": "2026-06-09T19:42:57Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "bfaaa85c932c433762aabde8d7b354c502dcd639",
"body": "…o the queue",
"is_bot": false,
"headline": "ui_queue: nested interact from the queued path must not call back int…",
"author_name": "Jeff Ober",
"author_login": "sysread",
"committed_at": "2026-06-09T19:42:55Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d25c37116246716e084d6f55f1bc83d1d4b9a597",
"body": null,
"is_bot": false,
"headline": "mcp http transport: request base_url verbatim when no mcp_path set",
"author_name": "Jeff Ober",
"author_login": "sysread",
"committed_at": "2026-06-09T18:33:55Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "bc08228394012a5a11897e3f2865f7c89c0a488b",
"body": "…t_uri host form",
"is_bot": false,
"headline": "mcp oauth: send RFC 8707 resource param; align token-exchange redirec…",
"author_name": "Jeff Ober",
"author_login": "sysread",
"committed_at": "2026-06-09T18:33:53Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "9014d563cdd6b542df587b47a0e1a567d2bb8635",
"body": null,
"is_bot": false,
"headline": "gotchas: update #28 now that docs-check is in make check",
"author_name": "Jeff Ober",
"author_login": "sysread",
"committed_at": "2026-06-09T16:54:28Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4c895555706515aa985addf586fb77cf6741c61a",
"body": "…roken autolinks",
"is_bot": false,
"headline": "make check: add docs-check (mix docs --warnings-as-errors) to catch b…",
"author_name": "Jeff Ober",
"author_login": "sysread",
"committed_at": "2026-06-09T16:54:04Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4dadcf2dba609aa3e7fa71823c91d1b01e763cc3",
"body": "…o CI",
"is_bot": false,
"headline": "gotchas: note make check skips mix docs, doc autolink failures slip t…",
"author_name": "Jeff Ober",
"author_login": "sysread",
"committed_at": "2026-06-09T16:50:12Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "6e4c22795bd4c02620404a794257db822c01304c",
"body": "…/0 callback",
"is_bot": false,
"headline": "params: fix doc autolink to nonexistent Frobs.spec/1 -> AI.Tools spec…",
"author_name": "Jeff Ober",
"author_login": "sysread",
"committed_at": "2026-06-09T16:49:42Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0cfd5769610ee7034c5aaebb2cf2e882ce9129f6",
"body": "…both)",
"is_bot": false,
"headline": "external-configs nudge: name where detected files live (home/project/…",
"author_name": "Jeff Ober",
"author_login": "sysread",
"committed_at": "2026-06-09T16:36:14Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d5bb6c7837ca5201e9e29da344b1a2156f953bf9",
"body": null,
"is_bot": false,
"headline": "embeddings: reframe cold-start build noise as benign, not warnings",
"author_name": "Jeff Ober",
"author_login": "sysread",
"committed_at": "2026-06-09T16:06:32Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d3fc145d26a88092028e61de214140b5561773bc",
"body": null,
"is_bot": false,
"headline": "fix: clear Elixir 1.20 type warnings; bump meck for OTP 29",
"author_name": "Jeff Ober",
"author_login": "sysread",
"committed_at": "2026-06-09T15:53:41Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "244576d2fa95e047d6be5b2b0aa9419272307fed",
"body": null,
"is_bot": false,
"headline": "cmd_tool: optionally filter output through lowfat when installed",
"author_name": "Jeff Ober",
"author_login": "sysread",
"committed_at": "2026-06-09T15:36:55Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "86cb90796c6f81ec25d2aadd0c866fa0e66eec63",
"body": null,
"is_bot": false,
"headline": "Tighten README and OAuth discovery docs",
"author_name": "Jeff Ober",
"author_login": "sysread",
"committed_at": "2026-06-05T23:01:40Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "7f278403d7d3d7dd0482f34d9baa1ca260f06f06",
"body": null,
"is_bot": false,
"headline": "Update stale user docs and code comments",
"author_name": "Jeff Ober",
"author_login": "sysread",
"committed_at": "2026-06-05T22:36:11Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "db37f613008388bac06f142f0c1bca9d7f99475f",
"body": "Real bug surfaced by a follow-up reviewer pass: when a v0 file needed\nBOTH heals (legacy task list shape + tool-call args stored as decoded\nmap), each pass persisted independently. The second write built its\nJSON from data the first pass had repaired in memory but NOT threaded\nforward, so the second\n[…]\nAND map-\n shaped tool args persists v1 with both repairs intact (the case\n that would have clobbered before).\n- clean-v0 no-op: a fully-canonical v0 file stays v0 on disk - no\n spurious heal-write.",
"is_bot": false,
"headline": "heal-on-read: compose passes purely, persist once",
"author_name": "Jeff Ober",
"author_login": "sysread",
"committed_at": "2026-06-05T21:17:47Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "7869dd4fec2828f5254e15f5e8901acebd428dd3",
"body": "A code-review pass surfaced four \"high confidence\" findings that all\ndissolved on inspection: 429 binary-body guard, raw-map message catch-all,\ntool-spec contract shape, and timeout_ms not being in `required`. Each\nsite is correct as written, but the implicit contract that makes it\ncorrect wasn't vi\n[…]\nmeters: notes tool-spec schemas are NOT strict-validated\n unless we opt in with strict: true (we don't), unlike agent\n @response_format schemas which ARE strict (gotchas.md #24)\n\nNo behavior change.",
"is_bot": false,
"headline": "clarify intent at the false-positive sites a reviewer flagged",
"author_name": "Jeff Ober",
"author_login": "sysread",
"committed_at": "2026-06-05T21:05:45Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "3c6affa5ede9637cd91defcea17a335e5adc5101",
"body": "TaskListStatusMigration.heal_and_maybe_write/3 previously rewrote\nhealed v0 files BACK as v0 (keeping the <ts>: prefix), while the\nsibling heal_tool_call_arguments/3 emitted v1. Result: on-disk\nformat after heal was non-deterministic depending on which pass\nfired. Surface area was small (both readab\n[…]\nath now lives in Format.\n\nRegression test in format_test.exs parallels the existing\ntool-call-args heal test: v0 file with legacy bare-list tasks is\nrewritten as v1, in-memory data hydrates correctly.",
"is_bot": false,
"headline": "heal-on-read writes are deterministically v1 across both passes",
"author_name": "Jeff Ober",
"author_login": "sysread",
"committed_at": "2026-06-05T21:05:30Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "84b23ca3b6dfb9971636653c9674c806ba42c523",
"body": null,
"is_bot": false,
"headline": "tune models again",
"author_name": "Jeff Ober",
"author_login": "sysread",
"committed_at": "2026-06-05T20:21:21Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "68ffc2c545f190c8b58d3eefdb812b9b028eee5a",
"body": "AI.Tools.perform_tool_call/3 JSON-encodes any structured (list/map)\nreturn from call/1 before propagating to the rest of the pipeline,\nso the `result` arg passed to ui_note_on_result/2 is a string, not\nthe raw list. ListProjects.ui_note_on_result/2 was calling length/1\non it, crashing with ArgumentE\n[…]\necode the result and count. Defensive fallbacks for\nnon-list-shaped JSON and outright invalid JSON.\n\nTest updated to use the actual production-shaped string, plus two\nnew tests for the fallback paths.",
"is_bot": false,
"headline": "list_projects_tool: ui_note_on_result handles the JSON-encoded result",
"author_name": "Jeff Ober",
"author_login": "sysread",
"committed_at": "2026-06-05T20:19:40Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "54eb51f576a5146d62ce96ae75fae7f6eac90c36",
"body": "When a caller is already in a UI context (Services.Approvals takes\nthis path via run_from_genserver), UI.Queue.interact/3 runs the\ninteraction inline in the caller's process instead of going through\nthe GenServer. The inline branch never set paused_logs: true on the\nGenServer state, so concurrent {:\n[…]\nh on the outermost\n unpause.\n\nTests use :error level - OTP Logger's default primary level is\n:notice in test runs, which would otherwise filter :info/:debug\nbefore the custom capture handler sees it.",
"is_bot": false,
"headline": "ui_queue: fast-path interact must pause logs too",
"author_name": "Jeff Ober",
"author_login": "sysread",
"committed_at": "2026-06-05T20:07:38Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "cbfaec32f76daf540e6f1f52e10dcdfa2aa41258",
"body": "…mode\n\nOpenAI's /v1/responses structured-output validator rejects any\njson_schema where `required` doesn't list every key in `properties`.\nChat Completions used to silently accept partial-required schemas;\nResponses surfaces it as:\n\n Invalid schema for response_format 'X': In context=(), 'require\n[…]\nin arrays\ntoo). New agents with schemas register in the test's @single_accessor\nor @multi_accessor list.\n\ngotchas.md #24 captures the rule and the nullable-union pattern for\ngenuinely-optional fields.",
"is_bot": false,
"headline": "schemas: every property must be in `required` under Responses strict …",
"author_name": "Jeff Ober",
"author_login": "sysread",
"committed_at": "2026-06-05T19:31:18Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "b27cd5fd7a874a4c28c1f7f06c29962db04c7cce",
"body": "Each retry honors OpenAI's \"try again in X\" hint; on a saturated 60s\nrolling TPM window with a jumbo single request (20%+ of cap), 3\nattempts spread across ~10-12s can't outwait the bucket draining.\n8 attempts give us ~30-60s of envelope, which covers the worst case\nwithout changing per-attempt behavior. No-op if retries succeed earlier.",
"is_bot": false,
"headline": "endpoint: raise retry cap from 3 to 8",
"author_name": "Jeff Ober",
"author_login": "sysread",
"committed_at": "2026-06-05T19:31:04Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "6621d343b0fac61e46f85b2526e35160114dc743",
"body": "The module docstring still narrated the rollout in present tense as if\nthis build were Phase 1b (\"Ship a build (this one - Phase 1b)\" /\n\"writer continues to emit v0\"). The writer flipped to v1 in fbfca94f\ntwo phases ago. The \"Heal-on-read\" section also claimed heal \"persists\nthe repaired v0 shape ba\n[…]\nnse, mark Phase 2c as current,\nand explain why heal rewrites as v1. No code change.\n\nSurfaced by a code-review pass that read the stale doc against current\ncode and flagged the apparent contradiction.",
"is_bot": false,
"headline": "format.ex: docstring describes Phase 2c reality, not Phase 1b",
"author_name": "Jeff Ober",
"author_login": "sysread",
"committed_at": "2026-06-05T18:57:37Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "c2f17e157e00a3645771c1fdcb12db44e0e3e6a9",
"body": "Was: count %AI.Message.FunctionCall{} structs + legacy nested tool_calls.\n\nProblem: the canonical tool round emits a FunctionCall (request) +\nFunctionCallOutput (result) pair, both carrying the same call_id. The\nold code only recognized one half (the request). The pair is appended\natomically today, \n[…]\ners don't\nsilently drop the signal. Legacy nested-tool_calls counting unchanged.\n\n5 new tests covering paired, request-only, output-only, multi-call_id\nsame-function, and canonical+legacy mixed cases.",
"is_bot": false,
"headline": "completion: tools_used/1 dedupes by call_id, not by struct kind",
"author_name": "Jeff Ober",
"author_login": "sysread",
"committed_at": "2026-06-05T18:39:21Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "05c1dc2906d4a67ea5686285143ca441216956b9",
"body": null,
"is_bot": false,
"headline": "coordinator: note the terminal-UI runtime in the base prompt",
"author_name": "Jeff Ober",
"author_login": "sysread",
"committed_at": "2026-06-05T18:29:43Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "991a38e90645a2b0324756e947d5ecec8142e1c5",
"body": "The mutex check on branch/pr/range used Enum.filter on bare Elixir\ntruthiness. In Elixir, \"\" and 0 are truthy - only nil and false are\nfalsy. OpenAI's tool-call generator emits type-default placeholders\n(\"\" for strings, 0 for integers) for optional params instead of\nomitting them, so calls like {bra\n[…]\n (e.g. branch=\"X\",\npr=0, range=\"\") so the retry loop can self-correct if a real\nmulti-set ever happens.\n\nAdd gotcha #24 - this is exactly the kind of non-obvious failure\nthat will re-trip future devs.",
"is_bot": false,
"headline": "reviewer_tool: treat LLM-style placeholder values as absent",
"author_name": "Jeff Ober",
"author_login": "sysread",
"committed_at": "2026-06-05T18:28:09Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "627155b1428042cfc918bd2c0d1e5dd89449f312",
"body": "Deduplicator does binary classification (merge yes/no) on ~1-2k token\ninputs. AI.Model.large_context() routed it to gpt-4.1, whose 30k TPM\ncap is too tight for the deep-sleep burst: even with max_concurrency: 2,\nthe rolling window saturates and the 3-attempt retry budget can't\noutwait it.\n\nAI.Model.fast() (gpt-5.4-mini) sits on a much higher TPM quota and is\nplenty for the task. Eliminates the \"Deduplication failed\" warnings at\nshutdown.",
"is_bot": false,
"headline": "memory dedup: use the fast tier, not the flagship",
"author_name": "Jeff Ober",
"author_login": "sysread",
"committed_at": "2026-06-05T17:03:46Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "9634730aef0ef057de23181c48f3a3b29ea6bf3f",
"body": "OpenAI's Responses API exposes web search via {type: \"web_search\"}; the\nold {type: \"web_search_preview\"} stays around as a legacy form only.\nSwitch the tool entry to the canonical name. Point AI.Model.web_search()\nat gpt-5.4-nano - the SKU-style \"model that does web search\" pattern is\ndead under Responses, any normal model + the tool works.\n\nDrop the now-redundant gpt5_web/0 factory (only web_search/0 called it).\nAdd a gotcha entry documenting the model-plus-switch contract for future\ncallers.",
"is_bot": false,
"headline": "web search: use canonical web_search tool + gpt-5.4-nano",
"author_name": "Jeff Ober",
"author_login": "sysread",
"committed_at": "2026-06-05T16:53:54Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "025ba9440b5c97da19e61c03ed1d66c95a1f1016",
"body": null,
"is_bot": false,
"headline": "tune model choices",
"author_name": "Jeff Ober",
"author_login": "sysread",
"committed_at": "2026-06-05T16:40:01Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "13de43434a673699eeac75da2a067656c29e4f74",
"body": "Default async_stream concurrency (schedulers_online) × @deep_sleep_passes\ngenerated TPM storms on gpt-4.1 that the 3-attempt retry budget couldn't\nabsorb, leaking as \"Deduplication failed\" warnings. Dedup is background;\ntrade a few seconds of wall time for actually completing the merges.",
"is_bot": false,
"headline": "memory_indexer: cap deep-sleep dedup concurrency at 2",
"author_name": "Jeff Ober",
"author_login": "sysread",
"committed_at": "2026-06-05T16:30:28Z",
"body_truncated": false,
"is_coding_agent": false
}
],
"releases_count": 0,
"commits_last_year": 1434,
"latest_release_at": null,
"latest_release_tag": null,
"releases_from_tags": false,
"days_since_last_push": 36,
"active_weeks_last_year": 46,
"days_since_latest_release": null,
"mean_days_between_releases": null
},
"community": {
"has_readme": true,
"has_license": true,
"has_description": true,
"has_contributing": false,
"health_percentage": 42,
"has_issue_template": false,
"has_code_of_conduct": false,
"has_pull_request_template": false
},
"ecosystem": {
"packages": [
{
"name": "fnord",
"exists": true,
"license": "MIT",
"keywords": [],
"ecosystem": "hex",
"matches_repo": true,
"registry_url": "https://hex.pm/packages/fnord",
"is_deprecated": false,
"latest_version": "0.9.40",
"repository_url": "https://github.com/sysread/fnord",
"versions_count": 221,
"total_downloads": 26117,
"dependents_count": null,
"deprecation_note": null,
"maintainers_count": null,
"monthly_downloads": 2008,
"first_published_at": "2024-09-27T21:48:15.366880Z",
"latest_published_at": "2026-06-23T21:40:32.110875Z",
"latest_version_yanked": null,
"days_since_latest_publish": 36
}
]
},
"popularity": {
"forks": 5,
"stars": 41,
"watchers": 3,
"fork_history": {
"days": [
{
"date": "2024-12-06",
"count": 1
},
{
"date": "2025-01-21",
"count": 1
},
{
"date": "2025-05-07",
"count": 1
},
{
"date": "2025-06-21",
"count": 1
},
{
"date": "2025-08-03",
"count": 1
}
],
"complete": true,
"collected": 5,
"total_forks": 5
},
"star_history": null,
"open_issues_and_prs": 0
},
"ai_readiness": {
"has_nix": false,
"example_dirs": [],
"has_llms_txt": false,
"has_dockerfile": false,
"has_mcp_signal": true,
"bootstrap_files": [
"Makefile"
],
"api_schema_files": [],
"has_devcontainer": false,
"typecheck_configs": [],
"toolchain_manifests": [
"mix.exs"
],
"largest_source_bytes": 55653,
"source_files_sampled": 490,
"oversized_source_files": 0,
"agent_instruction_files": [
"CLAUDE.md"
],
"agent_instruction_max_bytes": 2050
},
"dependencies": {
"manifests": [
"mix.exs"
],
"advisories": {
"error": "No resolved dependencies to assess",
"scope": "repository_graph",
"source": null,
"findings": [],
"collected": false,
"malicious": [],
"truncated": false,
"by_severity": {},
"advisory_count": 0,
"affected_count": 0,
"assessed_count": 0,
"malicious_count": 0,
"assessed_package": null,
"unassessed_count": 0,
"direct_affected_count": 0
},
"ecosystems": [
"hex"
],
"dependencies": [
{
"name": "briefly",
"manifest": "mix.exs",
"ecosystem": "hex",
"version_constraint": "~> 0.5.1"
},
{
"name": "clipboard",
"manifest": "mix.exs",
"ecosystem": "hex",
"version_constraint": "~> 0.2.1"
},
{
"name": "finch",
"manifest": "mix.exs",
"ecosystem": "hex",
"version_constraint": ">= 0.19.0 and < 0.22.0"
},
{
"name": "hermes_mcp",
"manifest": "mix.exs",
"ecosystem": "hex",
"version_constraint": "~> 0.14"
},
{
"name": "httpoison",
"manifest": "mix.exs",
"ecosystem": "hex",
"version_constraint": "~> 2.2.1"
},
{
"name": "jason",
"manifest": "mix.exs",
"ecosystem": "hex",
"version_constraint": "~> 1.4"
},
{
"name": "optimus",
"manifest": "mix.exs",
"ecosystem": "hex",
"version_constraint": "~> 0.2"
},
{
"name": "owl",
"manifest": "mix.exs",
"ecosystem": "hex",
"version_constraint": "~> 0.12"
},
{
"name": "stemmer",
"manifest": "mix.exs",
"ecosystem": "hex",
"version_constraint": "~> 1.2"
},
{
"name": "toml",
"manifest": "mix.exs",
"ecosystem": "hex",
"version_constraint": "~> 0.7"
},
{
"name": "uniq",
"manifest": "mix.exs",
"ecosystem": "hex",
"version_constraint": "~> 0.1"
},
{
"name": "yaml_elixir",
"manifest": "mix.exs",
"ecosystem": "hex",
"version_constraint": "~> 2.9"
},
{
"name": "plug_cowboy",
"manifest": "mix.exs",
"ecosystem": "hex",
"version_constraint": "~> 2.7"
}
],
"all_dependencies": {
"error": null,
"source": "github-sbom",
"packages": [],
"collected": true,
"truncated": false,
"total_count": 0,
"direct_count": 0,
"indirect_count": 0
}
},
"maintainership": {
"issues": {
"open_prs": 0,
"merged_prs": 6,
"open_issues": 0,
"closed_ratio": 1,
"closed_issues": 3,
"closed_unmerged_prs": 4
},
"bus_factor": 1,
"bot_contributors": 0,
"top_contributors": [
{
"type": "User",
"login": "sysread",
"commits": 2374,
"avatar_url": "https://avatars.githubusercontent.com/u/83381?v=4"
},
{
"type": "User",
"login": "martinlocklear",
"commits": 2,
"avatar_url": "https://avatars.githubusercontent.com/u/59375704?v=4"
},
{
"type": "User",
"login": "claude",
"commits": 1,
"avatar_url": "https://avatars.githubusercontent.com/u/81847?v=4"
}
],
"contributors_sampled": 3,
"top_contributor_share": 0.999
},
"quality_signals": {
"has_ci": true,
"has_tests": true,
"ci_workflows": [
"run-tests.yml"
],
"has_docs_dir": true,
"linter_configs": [],
"has_editorconfig": false,
"has_linter_config": false,
"has_precommit_config": false
},
"security_signals": {
"lockfiles": [
"mix.lock"
],
"scorecard": {
"checks": [
{
"name": "Binary-Artifacts",
"score": 10,
"reason": "no binaries found in the repo",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#binary-artifacts"
},
{
"name": "Branch-Protection",
"score": 0,
"reason": "branch protection not enabled on development/release branches",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#branch-protection"
},
{
"name": "CI-Tests",
"score": null,
"reason": "no pull request found",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#ci-tests"
},
{
"name": "CII-Best-Practices",
"score": 0,
"reason": "no effort to earn an OpenSSF best practices badge detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#cii-best-practices"
},
{
"name": "Code-Review",
"score": 0,
"reason": "Found 0/30 approved changesets -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#code-review"
},
{
"name": "Contributors",
"score": 3,
"reason": "project has 1 contributing companies or organizations -- score normalized to 3",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#contributors"
},
{
"name": "Dangerous-Workflow",
"score": 10,
"reason": "no dangerous workflow patterns detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dangerous-workflow"
},
{
"name": "Dependency-Update-Tool",
"score": 0,
"reason": "no update tool detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dependency-update-tool"
},
{
"name": "Fuzzing",
"score": 0,
"reason": "project is not fuzzed",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#fuzzing"
},
{
"name": "License",
"score": 10,
"reason": "license file detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#license"
},
{
"name": "Maintained",
"score": 10,
"reason": "30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#maintained"
},
{
"name": "Packaging",
"score": null,
"reason": "packaging workflow not detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#packaging"
},
{
"name": "Pinned-Dependencies",
"score": 0,
"reason": "dependency not pinned by hash detected -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#pinned-dependencies"
},
{
"name": "SAST",
"score": 0,
"reason": "no SAST tool detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#sast"
},
{
"name": "Security-Policy",
"score": 0,
"reason": "security policy file not detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#security-policy"
},
{
"name": "Signed-Releases",
"score": null,
"reason": "no releases found",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#signed-releases"
},
{
"name": "Token-Permissions",
"score": 0,
"reason": "detected GitHub workflow tokens with excessive permissions",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#token-permissions"
},
{
"name": "Vulnerabilities",
"score": 0,
"reason": "26 existing vulnerabilities detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#vulnerabilities"
}
],
"commit": "b81ab166d346bedfd8290d15d173990dfff79839",
"ran_at": "2026-07-30T15:46:37Z",
"aggregate_score": 3.1,
"scorecard_version": "v5.5.0"
},
"has_codeql_workflow": false,
"has_security_policy": false,
"has_dependabot_config": false
},
"contribution_flow": {
"collected": true,
"ci_last_run_at": "2026-06-23T21:41:31Z",
"oldest_open_prs": [],
"last_merged_pr_at": "2026-02-03T00:07:43Z",
"ci_last_conclusion": "SUCCESS",
"oldest_open_issues": []
}
},
"config": {
"disabled_metrics": [],
"disabled_categories": [],
"disabled_components": {}
},
"source": {
"url": "https://github.com/sysread/fnord",
"host": "github.com",
"name": "fnord",
"owner": "sysread"
},
"metrics": {
"overall": {
"key": "overall",
"band": "moderate",
"name": "Overall health",
"note": "The weighted overall 51 is calibrated to 51 on the published index scale (record calibration 2026-08-02).",
"notes": [
{
"code": "overall_calibration",
"params": {
"raw": 51,
"calibrated": 51,
"calibration": "2026-08-02"
}
}
],
"value": 51,
"inputs": {
"security": 31,
"vitality": 47,
"community": 44,
"governance": 57,
"calibration": "2026-08-02",
"engineering": 70,
"ai_readiness": 56,
"weighted_overall_raw": 51
},
"components": []
},
"categories": [
{
"key": "vitality",
"band": "weak",
"name": "Vitality",
"value": 47,
"weight": 0.21,
"metrics": [
{
"key": "development_activity",
"band": "good",
"name": "Development activity",
"note": null,
"notes": [],
"value": 78,
"inputs": {
"commits_last_year": 1434,
"human_commit_share": 1,
"days_since_last_push": 36,
"active_weeks_last_year": 46
},
"components": [
{
"key": "push_recency",
"name": "Push recency",
"detail": "last push 36 days ago",
"points": 18,
"status": "partial",
"details": [
{
"code": "push_recency",
"params": {
"days": 36
}
}
],
"max_points": 36
},
{
"key": "commit_cadence",
"name": "Commit cadence",
"detail": "46/52 weeks with commits",
"points": 31.8,
"status": "partial",
"details": [
{
"code": "commit_cadence_weeks",
"params": {
"weeks": 46
}
}
],
"max_points": 36
},
{
"key": "commit_volume",
"name": "Commit volume",
"detail": "1434 commits in the last year",
"points": 18,
"status": "met",
"details": [
{
"code": "commits_last_year",
"params": {
"count": 1434
}
}
],
"max_points": 18
},
{
"key": "openssf_scorecard_maintained",
"name": "OpenSSF Scorecard: Maintained",
"detail": "30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10",
"points": 10,
"status": "met",
"details": [],
"max_points": 10
}
]
},
{
"key": "release_discipline",
"band": "critical",
"name": "Release discipline",
"note": "Excluded from scoring (no data or not applicable): OpenSSF Scorecard: Signed-Releases. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"openssf_scorecard_signed_releases"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 1,
"inputs": {
"releases_count": 0
},
"components": [
{
"key": "ships_releases",
"name": "Ships releases",
"detail": "no releases published",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_releases_published",
"params": {}
}
],
"max_points": 27
},
{
"key": "release_recency",
"name": "Release recency",
"detail": "no releases",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_releases",
"params": {}
}
],
"max_points": 36
},
{
"key": "release_cadence",
"name": "Release cadence",
"detail": "no releases",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_releases",
"params": {}
}
],
"max_points": 27
},
{
"key": "openssf_scorecard_signed_releases",
"name": "OpenSSF Scorecard: Signed-Releases",
"detail": "no releases found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 10
}
]
},
{
"key": "abandonment",
"band": "exceptional",
"name": "Abandonment",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"cap": null,
"state": "maintained",
"guards": [],
"signals": [],
"red_flag": false,
"multiplier_pct": 100,
"declared_reason": null,
"unverified_reason": null,
"unanswered_open_prs": null,
"unanswered_open_issues": null,
"days_since_last_merged_pr": null,
"days_since_last_human_commit": 41,
"days_since_last_human_commit_is_floor": false
},
"components": [
{
"key": "project_is_still_maintained",
"name": "Project is still maintained",
"detail": "last human commit 41 days ago",
"points": 100,
"status": "met",
"details": [
{
"code": "abandonment_maintained",
"params": {
"days": 41
}
}
],
"max_points": 100
}
]
}
],
"description": "Is the project alive — is code being written and are releases shipping?"
},
{
"key": "community",
"band": "weak",
"name": "Community & Adoption",
"value": 44,
"weight": 0.17,
"metrics": [
{
"key": "popularity",
"band": "at_risk",
"name": "Popularity & adoption",
"note": null,
"notes": [],
"value": 33,
"inputs": {
"forks": 5,
"stars": 41,
"watchers": 3,
"growth_state": "unverified",
"growth_factor_pct": 100,
"growth_unverified_reason": "no_history"
},
"components": [
{
"key": "stars",
"name": "Stars",
"detail": "41 stars",
"points": 26,
"status": "partial",
"details": [
{
"code": "stars",
"params": {
"count": 41
}
}
],
"max_points": 60
},
{
"key": "forks",
"name": "Forks",
"detail": "5 forks",
"points": 5,
"status": "partial",
"details": [
{
"code": "forks",
"params": {
"count": 5
}
}
],
"max_points": 25
},
{
"key": "watchers",
"name": "Watchers",
"detail": "3 watchers",
"points": 1.7,
"status": "partial",
"details": [
{
"code": "watchers",
"params": {
"count": 3
}
}
],
"max_points": 15
}
]
},
{
"key": "community_health",
"band": "moderate",
"name": "Community health",
"note": null,
"notes": [],
"value": 50,
"inputs": {
"has_readme": true,
"has_license": true,
"readme_badges": null,
"has_contributing": false,
"has_issue_template": false,
"has_code_of_conduct": false,
"readme_badge_services": [],
"has_pull_request_template": false
},
"components": [
{
"key": "readme",
"name": "README",
"detail": null,
"points": 22.5,
"status": "met",
"details": [],
"max_points": 22.5
},
{
"key": "license",
"name": "License",
"detail": "recognized license (MIT)",
"points": 22.5,
"status": "met",
"details": [
{
"code": "license_standard",
"params": {}
},
{
"code": "license_spdx",
"params": {
"spdx": "MIT"
}
}
],
"max_points": 22.5
},
{
"key": "contributing_guide",
"name": "CONTRIBUTING guide",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 18
},
{
"key": "code_of_conduct",
"name": "Code of conduct",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 13.5
},
{
"key": "issue_template",
"name": "Issue template",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.2
},
{
"key": "pr_template",
"name": "PR template",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 6.3
}
]
},
{
"key": "ecosystem_adoption",
"band": "moderate",
"name": "Ecosystem adoption (downloads)",
"note": "Excluded from scoring (no data or not applicable): Registry dependents. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"registry_dependents"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 55,
"inputs": {
"packages": [
"fnord"
],
"dependents": null,
"ecosystems": "hex",
"total_downloads": 26117,
"monthly_downloads": 2008
},
"components": [
{
"key": "monthly_downloads",
"name": "Monthly downloads",
"detail": "2,008 downloads/month across hex",
"points": 44,
"status": "partial",
"details": [
{
"code": "downloads_monthly",
"params": {
"count": 2008,
"ecosystems": "hex"
}
}
],
"max_points": 80
},
{
"key": "registry_dependents",
"name": "Registry dependents",
"detail": "not reported by this ecosystem",
"points": 0,
"status": "excluded",
"details": [
{
"code": "not_reported_by_this_ecosystem",
"params": {}
}
],
"max_points": 20
}
]
}
],
"description": "Does the project have users, downloads, attention, and a welcoming setup for contributors?"
},
{
"key": "governance",
"band": "moderate",
"name": "Sustainability & Governance",
"value": 57,
"weight": 0.23,
"metrics": [
{
"key": "maintainer_resilience",
"band": "critical",
"name": "Maintainer resilience (bus factor)",
"note": null,
"notes": [],
"value": 16,
"inputs": {
"bus_factor": 1,
"contributors_sampled": 3,
"top_contributor_share": 0.999
},
"components": [
{
"key": "bus_factor",
"name": "Bus factor",
"detail": "1 contributor(s) cover half of all commits",
"points": 9,
"status": "partial",
"details": [
{
"code": "bus_factor",
"params": {
"count": 1
}
}
],
"max_points": 54
},
{
"key": "commit_distribution",
"name": "Commit distribution",
"detail": "top contributor authored 100% of commits",
"points": 0,
"status": "partial",
"details": [
{
"code": "top_contributor_share",
"params": {
"share": 100
}
}
],
"max_points": 22.5
},
{
"key": "contributor_breadth",
"name": "Contributor breadth",
"detail": "3 contributors",
"points": 4.1,
"status": "partial",
"details": [
{
"code": "contributors_sampled",
"params": {
"count": 3
}
}
],
"max_points": 13.5
},
{
"key": "openssf_scorecard_contributors",
"name": "OpenSSF Scorecard: Contributors",
"detail": "project has 1 contributing companies or organizations -- score normalized to 3",
"points": 3,
"status": "partial",
"details": [],
"max_points": 10
}
]
},
{
"key": "responsiveness",
"band": "good",
"name": "Issue & PR responsiveness",
"note": "Excluded from scoring (no data or not applicable): Newcomer PR acceptance. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"newcomer_pr_acceptance"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 69,
"inputs": {
"merged_prs": 6,
"open_issues": 0,
"closed_issues": 3,
"prs_merged_7d": null,
"prs_decided_7d": null,
"prs_merged_30d": null,
"prs_decided_30d": null,
"issue_closed_ratio": 1,
"closed_unmerged_prs": 4,
"first_time_authors_30d": null,
"first_time_prs_merged_30d": null,
"first_time_prs_decided_30d": null
},
"components": [
{
"key": "issue_resolution",
"name": "Issue resolution",
"detail": "100% of issues closed",
"points": 42,
"status": "met",
"details": [
{
"code": "issues_closed_share",
"params": {
"share": 100
}
}
],
"max_points": 42
},
{
"key": "pr_acceptance",
"name": "PR acceptance",
"detail": "6/10 decided PRs merged",
"points": 18,
"status": "partial",
"details": [
{
"code": "decided_prs_merged",
"params": {
"merged": 6,
"decided": 10
}
}
],
"max_points": 30
},
{
"key": "newcomer_pr_acceptance",
"name": "Newcomer PR acceptance",
"detail": "no first-time contributor's PR decided in 30d",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_newcomer_prs",
"params": {
"days": 30
}
}
],
"max_points": 13
},
{
"key": "openssf_scorecard_code_review",
"name": "OpenSSF Scorecard: Code-Review",
"detail": "Found 0/30 approved changesets -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
}
]
},
{
"key": "stewardship",
"band": "moderate",
"name": "Ownership & stewardship",
"note": "Excluded from scoring (no data or not applicable): Verified domain. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"verified_domain"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 58,
"inputs": {
"followers": 37,
"owner_type": "User",
"is_verified": null,
"owner_login": "sysread",
"public_repos": 82,
"account_age_days": 6288
},
"components": [
{
"key": "ownership_backing",
"name": "Ownership backing",
"detail": "personal (user) account",
"points": 10,
"status": "partial",
"details": [
{
"code": "owner_personal",
"params": {}
}
],
"max_points": 30
},
{
"key": "verified_domain",
"name": "Verified domain",
"detail": "not applicable to user accounts",
"points": 0,
"status": "excluded",
"details": [
{
"code": "not_applicable_to_user_accounts",
"params": {}
}
],
"max_points": 20
},
{
"key": "owner_reach",
"name": "Owner reach",
"detail": "37 followers of sysread",
"points": 11.4,
"status": "partial",
"details": [
{
"code": "owner_followers",
"params": {
"count": 37,
"login": "sysread"
}
}
],
"max_points": 25
},
{
"key": "track_record",
"name": "Track record",
"detail": "82 public repos, account ~17 yr old",
"points": 25,
"status": "met",
"details": [
{
"code": "public_repos",
"params": {
"count": 82
}
},
{
"code": "account_age_years",
"params": {
"years": 17
}
}
],
"max_points": 25
}
]
},
{
"key": "package_maintenance",
"band": "exceptional",
"name": "Package maintenance",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"packages": [
"fnord"
],
"ecosystems": "hex",
"any_deprecated": false,
"min_days_since_publish": 36
},
"components": [
{
"key": "published_resolvable",
"name": "Published & resolvable",
"detail": "1 package(s) on hex",
"points": 25,
"status": "met",
"details": [
{
"code": "packages_published",
"params": {
"count": 1,
"ecosystems": "hex"
}
}
],
"max_points": 25
},
{
"key": "publish_recency",
"name": "Publish recency",
"detail": "latest publish 36 days ago",
"points": 35,
"status": "met",
"details": [
{
"code": "publish_recency",
"params": {
"days": 36
}
}
],
"max_points": 35
},
{
"key": "version_history",
"name": "Version history",
"detail": "221 published versions",
"points": 20,
"status": "met",
"details": [
{
"code": "published_versions",
"params": {
"count": 221
}
}
],
"max_points": 20
},
{
"key": "not_deprecated",
"name": "Not deprecated",
"detail": "active, not deprecated or yanked",
"points": 20,
"status": "met",
"details": [
{
"code": "package_not_deprecated",
"params": {}
}
],
"max_points": 20
}
]
}
],
"description": "Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?"
},
{
"key": "engineering",
"band": "good",
"name": "Engineering Quality",
"value": 70,
"weight": 0.19,
"metrics": [
{
"key": "engineering_practices",
"band": "moderate",
"name": "Engineering practices",
"note": "Excluded from scoring (no data or not applicable): OpenSSF Scorecard: CI-Tests. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"openssf_scorecard_ci_tests"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 60,
"inputs": {
"has_ci": true,
"has_tests": true,
"has_editorconfig": false,
"has_linter_config": false,
"has_precommit_config": false
},
"components": [
{
"key": "ci_workflows",
"name": "CI workflows",
"detail": "1 workflow(s)",
"points": 24,
"status": "met",
"details": [
{
"code": "ci_workflows",
"params": {
"count": 1
}
}
],
"max_points": 24
},
{
"key": "tests_present",
"name": "Tests present",
"detail": null,
"points": 24,
"status": "met",
"details": [],
"max_points": 24
},
{
"key": "linter_config",
"name": "Linter config",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 16
},
{
"key": "pre_commit_hooks",
"name": "Pre-commit hooks",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 9.6
},
{
"key": "editorconfig",
"name": ".editorconfig",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 6.4
},
{
"key": "openssf_scorecard_ci_tests",
"name": "OpenSSF Scorecard: CI-Tests",
"detail": "no pull request found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 20
}
]
},
{
"key": "documentation",
"band": "excellent",
"name": "Documentation",
"note": null,
"notes": [],
"value": 85,
"inputs": {
"topics": [
"ai",
"code",
"database",
"elixir",
"embedding",
"gpt",
"index",
"llm",
"openai",
"search",
"vector",
"vectordb"
],
"has_wiki": true,
"homepage": null,
"has_readme": true,
"has_docs_dir": true,
"has_description": true
},
"components": [
{
"key": "readme",
"name": "README",
"detail": null,
"points": 30,
"status": "met",
"details": [],
"max_points": 30
},
{
"key": "documentation_directory",
"name": "Documentation directory",
"detail": null,
"points": 25,
"status": "met",
"details": [],
"max_points": 25
},
{
"key": "documentation_homepage_site",
"name": "Documentation / homepage site",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
},
{
"key": "repository_description",
"name": "Repository description",
"detail": null,
"points": 10,
"status": "met",
"details": [],
"max_points": 10
},
{
"key": "topics",
"name": "Topics",
"detail": "12 topics",
"points": 10,
"status": "met",
"details": [
{
"code": "topics_count",
"params": {
"count": 12
}
}
],
"max_points": 10
},
{
"key": "wiki",
"name": "Wiki",
"detail": null,
"points": 10,
"status": "met",
"details": [],
"max_points": 10
}
]
}
],
"description": "Are baseline engineering and documentation practices in place?"
},
{
"key": "security",
"band": "at_risk",
"name": "Security",
"value": 31,
"weight": 0.16,
"metrics": [
{
"key": "security_posture",
"band": "at_risk",
"name": "Security posture",
"note": "Excluded from scoring (no data or not applicable): CI-Tests, Packaging, Signed-Releases. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"ci_tests",
"packaging",
"signed_releases"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 31,
"inputs": {
"source": "openssf_scorecard",
"checks_evaluated": 15,
"scorecard_version": "v5.5.0",
"checks_inconclusive": 3,
"scorecard_aggregate": 3.1
},
"components": [
{
"key": "binary_artifacts",
"name": "Binary-Artifacts",
"detail": "no binaries found in the repo",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "branch_protection",
"name": "Branch-Protection",
"detail": "branch protection not enabled on development/release branches",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "ci_tests",
"name": "CI-Tests",
"detail": "no pull request found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 2.5
},
{
"key": "cii_best_practices",
"name": "CII-Best-Practices",
"detail": "no effort to earn an OpenSSF best practices badge detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 2.5
},
{
"key": "code_review",
"name": "Code-Review",
"detail": "Found 0/30 approved changesets -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "contributors",
"name": "Contributors",
"detail": "project has 1 contributing companies or organizations -- score normalized to 3",
"points": 0.8,
"status": "partial",
"details": [],
"max_points": 2.5
},
{
"key": "dangerous_workflow",
"name": "Dangerous-Workflow",
"detail": "no dangerous workflow patterns detected",
"points": 10,
"status": "met",
"details": [],
"max_points": 10
},
{
"key": "dependency_update_tool",
"name": "Dependency-Update-Tool",
"detail": "no update tool detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "fuzzing",
"name": "Fuzzing",
"detail": "project is not fuzzed",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "license",
"name": "License",
"detail": "license file detected",
"points": 2.5,
"status": "met",
"details": [],
"max_points": 2.5
},
{
"key": "maintained",
"name": "Maintained",
"detail": "30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "packaging",
"name": "Packaging",
"detail": "packaging workflow not detected",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 5
},
{
"key": "pinned_dependencies",
"name": "Pinned-Dependencies",
"detail": "dependency not pinned by hash detected -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "sast",
"name": "SAST",
"detail": "no SAST tool detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "security_policy",
"name": "Security-Policy",
"detail": "security policy file not detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "signed_releases",
"name": "Signed-Releases",
"detail": "no releases found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 7.5
},
{
"key": "token_permissions",
"name": "Token-Permissions",
"detail": "detected GitHub workflow tokens with excessive permissions",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "vulnerabilities",
"name": "Vulnerabilities",
"detail": "26 existing vulnerabilities detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
}
]
},
{
"key": "high_risk_jurisdiction_exposure",
"band": "exceptional",
"name": "High-Risk Jurisdiction Exposure",
"note": "Only high-confidence self-published location evidence affects this multiplier. Ambiguous matches are review-only; country evidence is not proof of nationality, citizenship, legal registration, malicious intent, or sanctions status.",
"notes": [
{
"code": "jurisdiction_evidence_limits",
"params": {}
}
],
"value": 100,
"inputs": {
"meaning": "self-published location evidence; not nationality or citizenship",
"red_flag": false,
"exposures": [],
"policy_countries": [
"Russia",
"Iran",
"North Korea"
],
"commit_weight_rule": {
"min_commits": 50,
"min_commit_share": 0.1
},
"review_only_matches": 0,
"below_threshold_exposures": [],
"assessed_self_published_locations": 2
},
"components": [
{
"key": "policy_exposure_multiplier",
"name": "Policy exposure multiplier",
"detail": "no confirmed policy-scope location match",
"points": 100,
"status": "met",
"details": [
{
"code": "jurisdiction_no_match",
"params": {}
}
],
"max_points": 100
}
]
}
],
"description": "Are visible security and supply-chain practices strong, with no malicious dependency and no unresolved high-risk jurisdiction exposure?"
},
{
"key": "ai_readiness",
"band": "moderate",
"name": "AI Readiness",
"value": 56,
"weight": 0.04,
"metrics": [
{
"key": "ai_agent_context",
"band": "excellent",
"name": "Agent context & guidance",
"note": null,
"notes": [],
"value": 82,
"inputs": {
"has_llms_txt": false,
"legible_history_share": 0.7,
"agent_instruction_files": [
"CLAUDE.md"
],
"agent_instruction_max_bytes": 2050
},
"components": [
{
"key": "agent_instructions",
"name": "Agent instructions",
"detail": "CLAUDE.md",
"points": 45,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "CLAUDE.md"
}
}
],
"max_points": 45
},
{
"key": "machine_readable_docs_llms_txt",
"name": "Machine-readable docs (llms.txt)",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
},
{
"key": "legible_commit_history",
"name": "Legible commit history",
"detail": "70 of 100 human commits state their intent (structured subject or explanatory body)",
"points": 37.3,
"status": "partial",
"details": [
{
"code": "legible_history",
"params": {
"legible": 70,
"sampled": 100
}
}
],
"max_points": 40
}
]
},
{
"key": "ai_verify_loop",
"band": "moderate",
"name": "Verify loop (build / test / typecheck)",
"note": null,
"notes": [],
"value": 50,
"inputs": {
"has_nix": false,
"has_tests": true,
"lockfiles": [
"mix.lock"
],
"has_dockerfile": false,
"typed_language": false,
"bootstrap_files": [
"Makefile"
],
"has_devcontainer": false,
"has_linter_config": false,
"typecheck_configs": [],
"agent_commit_share": 0,
"toolchain_manifests": [
"mix.exs"
],
"dependency_bot_commit_share": 0
},
"components": [
{
"key": "one_command_bootstrap",
"name": "One-command bootstrap",
"detail": "Makefile",
"points": 18,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "Makefile"
}
}
],
"max_points": 18
},
{
"key": "automated_tests",
"name": "Automated tests",
"detail": null,
"points": 22,
"status": "met",
"details": [],
"max_points": 22
},
{
"key": "lint_format_config",
"name": "Lint / format config",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 11
},
{
"key": "static_type_checking",
"name": "Static type checking",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 11
},
{
"key": "reproducible_environment",
"name": "Reproducible environment",
"detail": "lockfile",
"points": 10,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "lockfile"
}
}
],
"max_points": 10
},
{
"key": "demonstrated_agent_practice",
"name": "Demonstrated agent practice",
"detail": "no agent-authored commits among the last 100",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_agent_authored_commits",
"params": {
"sampled": 100
}
}
],
"max_points": 10
},
{
"key": "automated_maintenance",
"name": "Automated maintenance",
"detail": "no automated dependency updates observed",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_dependency_automation",
"params": {}
}
],
"max_points": 8
},
{
"key": "openssf_scorecard_pinned_dependencies",
"name": "OpenSSF Scorecard: Pinned-Dependencies",
"detail": "dependency not pinned by hash detected -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
}
]
},
{
"key": "ai_code_legibility",
"band": "moderate",
"name": "Code legibility for models",
"note": null,
"notes": [],
"value": 55,
"inputs": {
"primary_language": "Elixir",
"largest_source_bytes": 55653,
"source_files_sampled": 490,
"oversized_source_files": 0
},
"components": [
{
"key": "type_checkable_code",
"name": "Type-checkable code",
"detail": "Elixir without a type-check config",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_typecheck_config_language",
"params": {
"language": "Elixir"
}
}
],
"max_points": 45
},
{
"key": "manageable_file_sizes",
"name": "Manageable file sizes",
"detail": "0/490 source files over 60KB",
"points": 55,
"status": "met",
"details": [
{
"code": "oversized_source_files",
"params": {
"kb": 60,
"sampled": 490,
"oversized": 0
}
}
],
"max_points": 55
}
]
},
{
"key": "ai_interfaces",
"band": "at_risk",
"name": "Machine-readable interfaces",
"note": null,
"notes": [],
"value": 20,
"inputs": {
"example_dirs": [],
"has_mcp_signal": true,
"api_schema_files": []
},
"components": [
{
"key": "api_schema_openapi_graphql_proto",
"name": "API schema (OpenAPI/GraphQL/proto)",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 40
},
{
"key": "mcp_server",
"name": "MCP server",
"detail": null,
"points": 20,
"status": "met",
"details": [],
"max_points": 20
},
{
"key": "runnable_examples",
"name": "Runnable examples",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 40
}
]
}
],
"description": "How well is the repo equipped to be developed and maintained with AI coding agents? Carries a deliberately small weight: agent tooling is a real maintenance signal, but its absence must never gate the top of the scale (calibration saturates at raw 91, so 100/100 remains reachable with AI Readiness at zero)."
}
],
"classification": {
"top": [
"library"
],
"labels": [
"library"
],
"scores": {
"library": 6,
"mcp-server": 3
},
"primary": "library",
"evidence": [
{
"tier": "distribution",
"label": "library",
"source": "registry:hex",
"weight": 6
},
{
"tier": "structure",
"label": "mcp-server",
"source": "mcp_signal",
"weight": 3
}
],
"artifacts": [],
"confidence": "medium",
"host_extension": false,
"runs_as_process": false,
"consumed_by_code": true
},
"metrics_version": "2.5.0"
},
"warnings": [
"Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token"
],
"report_type": "repository",
"generated_at": "2026-07-30T15:46:43.278343Z",
"schema_version": "0.27.0",
"badge_url": "https://raw.githubusercontent.com/inspect-software/badges/main/v1/s/sysread/fnord.svg",
"full_name": "sysread/fnord",
"license_state": "standard",
"license_spdx": "MIT"
}
Пов’язані записи
Перевірені репозиторії, що мають спільні каталожні теги або екосистеми з sysread/fnord. Читати поруч →
Оцінки — це сигнали, а не гарантії. Вони відображають публічно видимі практики на GitHub — це не аудит коду й не гарантія безпеки.
Відсутні дані виключаються, а ваги перенормовуються — нуль за відсутність ніколи не ставиться. Методологія версіонована й відкрита: метрики v2.5.0, схема v0.27.0 — повна методологія · вікі метрик.
