公开记录中等
软件健康报告模式 0.27.0 · 指标 1.13.0 · 2026-07-27 08:27 UTC
AccessLint / accesslint
Accessibility testing tools monorepo — core, CLI, MCP, Playwright, Storybook, Vitest
AccessLint/accesslint 的健康指数为 100 分中的 61 分，处于「中等」区间。 其得分最高的类别是Vitality（81/100），最低的是Community & Adoption（34/100）。 最近一次更新在今天。 近期的大部分工作由 1 位贡献者完成。
61
总分 / 100软件健康指数
指标归入加权类别，统一采用 1–100 量表。总体分先取类别加权平均；当公开证据触发高风险司法辖区政策时，评级会按政策调整，并设置 49（有风险）的上限。AI 就绪度不计入总体分。
61
优秀85-100堪称典范；基本满足所有检验标准
良好70-84健康；仅有轻微不足
中等50-69可接受，但存在明显不足；建议进行审查
存在风险30-49存在重大薄弱环节；采用时应保持审慎
危急1-29问题严重（项目被弃置、仅有单一维护者、缺乏基本工程规范）
评分画像
每条轴代表一个类别。形状比平均值更重要——健康的对象会填满整个图形，而“一峰一谷”式画像意味着某一维度的优势正掩盖另一维度的风险。
所有权
软件包生态系统
| 注册表 | 软件包 | 版本 | 月下载量 | 版本数 | 最近发布 | 标签 |
|---|---|---|---|---|---|---|
| npm | @accesslint/cli | 0.12.0 | 2,932 | 26 | 6 天前 | — |
| npm | @accesslint/mcp | 0.10.0 | 2,163 | 22 | 52 天前 | — |
| npm | @accesslint/core | 0.16.0 | 32,895 | 56 | 6 天前 | — |
| npm | @accesslint/jest | 0.1.3 | 52 | 4 | 0 天前 | jestaccessibilitya11ywcagariaaccesslintmatchertestingjest-axe-alternativereact-testing-librarytesting-libraryjsdom |
| npm | @accesslint/chrome | 0.2.0 | 1,296 | 4 | 55 天前 | — |
| npm | @accesslint/report | 0.1.1 | 49 | 2 | 99 天前 | — |
| npm | @accesslint/vitest | 0.3.2 | 24,978 | 11 | 0 天前 | vitestaccessibilitya11ywcagariaaccesslintmatchertesting |
| npm | @accesslint/codemod | 0.1.2 | 52 | 3 | 99 天前 | accesslintcodemodjscodeshiftjest-axemigrationaccessibilitya11yjest |
按类别列示的指标
活力
项目是否仍有生命——是否仍在编写代码，是否仍在发布版本？
81
开发活跃度
68中等
评分方式
| 36/36 | 推送新近度 — 最近一次推送于 0 天前 |
| 4.2/36 | 提交节奏 — 52 周中有 6 周有提交 |
| 18/18 | 提交量 — 最近一年 226 次提交 |
| 10/10 | OpenSSF Scorecard：Maintained — 30 commit(s) and 1 issue activity found in the last 90 days -- score normalized to 10 |
所用输入
| commits_last_year | 226 |
| human_commit_share | 1 |
| days_since_last_push | 0 |
| active_weeks_last_year | 6 |
发布纪律
100优秀
评分方式
| 27/27 | 有发布版本 — 已发布 65 个发布版本 |
| 36/36 | 发布时效 — 最近一次发布版本于 0 天前 |
| 27/27 | 发布节奏 — 约每 0.8 天发布一次 |
| 0/10 | OpenSSF Scorecard：Signed-Releases — 无数据 |
所用输入
| releases_count | 65 |
| latest_release_tag | playwright/v0.8.0 |
| releases_from_tags | 否 |
| days_since_latest_release | 0 |
| mean_days_between_releases | 0.8 |
已排除计分（无数据或不适用）：OpenSSF Scorecard：Signed-Releases。 其余权重已重新归一化。
社区与采用
项目是否拥有用户、下载量与关注度，并具备欢迎贡献者参与的配置？
34
流行度与采用
12危急
评分方式
| 9.8/60 | 星标 — 5 个星标 |
| 2.5/25 | 复刻 — 3 个复刻 |
| 0/15 | 关注者 — 2 位关注者 |
所用输入
| forks | 3 |
| stars | 5 |
| watchers | 2 |
| growth_state | unverified |
| growth_factor_pct | 100 |
| growth_unverified_reason | no_history |
社区健康
25危急
评分方式
| 22.5/22.5 | README |
| 0/22.5 | 许可证 — 未检测到许可证文件 |
| 0/18 | CONTRIBUTING 指南 |
| 0/13.5 | 行为准则 |
| 0/7.2 | 议题模板 |
| 0/6.3 | PR 模板 |
所用输入
| has_readme | 是 |
| has_license | 否 |
| has_contributing | 否 |
| has_issue_template | 否 |
| has_code_of_conduct | 否 |
| has_pull_request_template | 否 |
生态采用（下载量）
80良好
评分方式
| 64.1/80 | 月度下载量 — npm 合计每月 64,417 次下载 |
| 0/20 | 注册表被依赖数 — 该生态系统不报告此项 |
所用输入
| packages | @accesslint/cli, @accesslint/mcp, @accesslint/core, @accesslint/jest, @accesslint/chrome, @accesslint/report, @accesslint/vitest, @accesslint/codemod |
| dependents | — |
| ecosystems | npm |
| total_downloads | — |
| monthly_downloads | 64,417 |
已排除计分（无数据或不适用）：注册表被依赖数。 其余权重已重新归一化。
可持续性与治理
项目能否在其成员之外延续——巴士系数、响应能力、由谁支持，以及软件包的维护状况？
63
维护者韧性（巴士系数）
22危急
评分方式
| 9/54 | 巴士系数 — 1 位贡献者贡献了半数提交 |
| 0.3/22.5 | 提交分布 — 头号贡献者编写了 99% 的提交 |
| 2.7/13.5 | 贡献者广度 — 2 位贡献者 |
| 10/10 | OpenSSF Scorecard：Contributors — project has 4 contributing companies or organizations |
所用输入
| bus_factor | 1 |
| contributors_sampled | 2 |
| top_contributor_share | 0.987 |
议题与 PR 响应能力
79良好
评分方式
| 46.8/46.8 | 议题解决 — 100% 的议题已关闭 |
| 31.9/38.3 | PR 接受 — 已裁定的 PR 中 5/6 已合并 |
| 0/15 | OpenSSF Scorecard：Code-Review — Found 1/18 approved changesets -- score normalized to 0 |
所用输入
| merged_prs | 5 |
| open_issues | 0 |
| closed_issues | 2 |
| issue_closed_ratio | 1 |
| closed_unmerged_prs | 1 |
所有权与托管责任
65中等
评分方式
| 30/30 | 所有权背书 — 组织持有 |
| 0/20 | 已验证域名 |
| 12.9/25 | 所有者影响力 — AccessLint 有 61 位关注者 |
| 22.2/25 | 既往记录 — 24 个公开仓库，账户约 11 年 |
所用输入
| followers | 61 |
| owner_type | Organization |
| is_verified | — |
| owner_login | AccessLint |
| public_repos | 24 |
| account_age_days | 4,245 |
软件包维护
100优秀
评分方式
| 25/25 | 已发布且可解析 — npm 上有 8 个软件包 |
| 35/35 | 发布时效 — 最近一次发布于 0 天前 |
| 20/20 | 版本历史 — 56 个已发布版本 |
| 20/20 | 未被弃用 — 活跃，未被弃用或撤回 |
所用输入
| packages | @accesslint/cli, @accesslint/mcp, @accesslint/core, @accesslint/jest, @accesslint/chrome, @accesslint/report, @accesslint/vitest, @accesslint/codemod |
| ecosystems | npm |
| any_deprecated | 否 |
| min_days_since_publish | 0 |
工程质量
基础的工程与文档实践是否到位？
70
工程实践
84良好
评分方式
| 24/24 | CI 工作流 — 14 个工作流 |
| 24/24 | 存在测试 |
| 16/16 | Linter 配置 — eslint.config.js |
| 0/9.6 | Pre-commit 钩子 |
| 0/6.4 | .editorconfig |
| 20/20 | OpenSSF Scorecard：CI-Tests — 4 out of 4 merged PRs checked by a CI test -- score normalized to 10 |
所用输入
| has_ci | 是 |
| has_tests | 是 |
| has_editorconfig | 否 |
| has_linter_config | 是 |
| has_precommit_config | 否 |
文档
50中等
评分方式
| 30/30 | README |
| 0/25 | 文档目录 |
| 0/15 | 文档 / 主页站点 |
| 10/10 | 仓库描述 |
| 0/10 | 主题标签 |
| 10/10 | Wiki |
所用输入
| topics | — |
| has_wiki | 是 |
| homepage | — |
| has_readme | 是 |
| has_docs_dir | 否 |
| has_description | 是 |
安全
可见的安全与供应链实践是否稳固，且不存在未解决的高风险司法辖区暴露？
49
安全态势
36存在风险
评分方式
| 7.5/7.5 | Binary-Artifacts — no binaries found in the repo |
| 0/7.5 | Branch-Protection — branch protection not enabled on development/release branches |
| 2.5/2.5 | CI-Tests — 4 out of 4 merged PRs checked by a CI test -- score normalized to 10 |
| 0/2.5 | CII-Best-Practices — no effort to earn an OpenSSF best practices badge detected |
| 0/7.5 | Code-Review — Found 1/18 approved changesets -- score normalized to 0 |
| 2.5/2.5 | Contributors — project has 4 contributing companies or organizations |
| 10/10 | Dangerous-Workflow — no dangerous workflow patterns detected |
| 0/7.5 | Dependency-Update-Tool — no update tool detected |
| 0/5 | Fuzzing — project is not fuzzed |
| 0/2.5 | 许可证 — license file not detected |
| 7.5/7.5 | Maintained — 30 commit(s) and 1 issue activity found in the last 90 days -- score normalized to 10 |
| 5/5 | Packaging — packaging workflow detected |
| 0/5 | Pinned-Dependencies — dependency not pinned by hash detected -- score normalized to 0 |
| 0/5 | SAST — SAST tool is not run on all commits -- score normalized to 0 |
| 0/5 | Security-Policy — security policy file not detected |
| 0/7.5 | Signed-Releases — 无数据 |
| 0/7.5 | Token-Permissions — detected GitHub workflow tokens with excessive permissions |
| 0/7.5 | Vulnerabilities — 47 existing vulnerabilities detected |
所用输入
| source | openssf_scorecard |
| checks_evaluated | 17 |
| scorecard_version | v5.5.0 |
| checks_inconclusive | 1 |
| scorecard_aggregate | 3.6 |
已排除计分（无数据或不适用）：signed_releases。 其余权重已重新归一化。
依赖安全公告
100优秀
评分方式
| 35/35 | 直接依赖不含已知公告 — 没有直接依赖携带已知公告 |
| 25/25 | 间接依赖不含已知公告 — 没有间接依赖携带已知公告 |
| 0/40 | 没有长期未处理的公告 — 没有公告带有发布日期 |
所用输入
| source | osv |
| advisories | 0 |
| affected_packages | 0 |
| assessed_packages | 30 |
| unassessed_packages | 0 |
| affected_by_severity | none |
| direct_affected_packages | 0 |
已排除计分（无数据或不适用）：没有长期未处理的公告。 其余权重已重新归一化。 比对的是 npm:@accesslint/cli@0.12.0 的运行时依赖闭包——安装已发布的软件包时真正被拉取进来的内容——共 30 个软件包。 未对可达性进行分析。
AI 就绪度
该仓库在多大程度上具备与 AI 编码代理协同开发与维护的条件？这是一枚独立的实验性徽章——权重为 0.0，因此单独呈现，不影响总体健康评分。
57
AI 代理上下文与指引
34存在风险
评分方式
| 0/45 | 代理指令 — 没有 CLAUDE.md / AGENTS.md / 编辑器规则 |
| 0/15 | 机器可读文档（llms.txt） |
| 34.1/40 | 可读的提交历史 — 100 次人类提交中有 64 次说明了意图（结构化标题或解释性正文） |
所用输入
| has_llms_txt | 否 |
| legible_history_share | 0.64 |
| agent_instruction_files | — |
| agent_instruction_max_bytes | — |
评分方式
| 18/18 | 一条命令的引导启动 — .mise.toml, cli/.mise.toml |
| 22/22 | 自动化测试 |
| 11/11 | Lint / 格式化配置 — eslint.config.js |
| 11/11 | 静态类型检查 — bench/tsconfig.json, chrome/tsconfig.json, cli/tsconfig.json, codemod/tsconfig.json, core/tsconfig.json, heal-diff/tsconfig.json, jest/tsconfig.json, matchers-internal/tsconfig.json, mcp/tsconfig.json, playwright/tsconfig.json, report/tsconfig.json, storybook-addon/tsconfig.json, vitest/tsconfig.json |
| 0/10 | 可复现环境 |
| 10/10 | 已体现的代理实践 — 最近 100 次提交中有 13 次由代理编写或署名代理 |
| 0/8 | 自动化维护 — 未观察到自动依赖更新 |
| 0/10 | OpenSSF Scorecard：Pinned-Dependencies — dependency not pinned by hash detected -- score normalized to 0 |
所用输入
| has_nix | 否 |
| has_tests | 是 |
| lockfiles | — |
| has_dockerfile | 否 |
| typed_language | 是 |
| bootstrap_files | .mise.toml, cli/.mise.toml |
| has_devcontainer | 否 |
| has_linter_config | 是 |
| typecheck_configs | bench/tsconfig.json, chrome/tsconfig.json, cli/tsconfig.json, codemod/tsconfig.json, core/tsconfig.json, heal-diff/tsconfig.json, jest/tsconfig.json, matchers-internal/tsconfig.json, mcp/tsconfig.json, playwright/tsconfig.json, report/tsconfig.json, storybook-addon/tsconfig.json, vitest/tsconfig.json |
| agent_commit_share | 0.13 |
| toolchain_manifests | — |
| dependency_bot_commit_share | 0 |
面向模型的代码可读性
100优秀
评分方式
| 45/45 | 可类型检查的代码 — TypeScript（静态类型） |
| 54.9/55 | 可控的文件大小 — 采样的 394 个源文件中有 1 个超过 60KB |
所用输入
| primary_language | TypeScript |
| largest_source_bytes | 65,374 |
| source_files_sampled | 394 |
| oversized_source_files | 1 |
机器可读接口
20危急
评分方式
| 0/40 | API 模式（OpenAPI/GraphQL/proto） |
| 20/20 | MCP 服务器 |
| 0/40 | 可运行示例 |
所用输入
| example_dirs | — |
| has_mcp_signal | 是 |
| api_schema_files | — |
关键数据
5GitHub 星标
2贡献者
226最近 12 个月提交数
0距最近推送天数
65发布版本数
1巴士系数（bus factor）
0开放议题
npm软件包生态系统数
数据采集警告
- Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token
- GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository
更多细节
Star 与 Fork 历史 0 ★ / 3 ⇿
0Star
3Fork
每颗 star 和每个 fork 的添加时间，来自 GitHub 并按天汇总。累计增长位于其构成来源——每日新增——的正上方，二者可相互对照：稳定的自然增长与短暂的突增形态截然不同。当这一差别可被衡量时，它会作为增长真实性予以报告。
OpenSSF Scorecard 3.6 / 10
3.6综合
来自开源项目 OpenSSF Scorecard 的独立、工具无关的安全评估。每项检查奖励的是安全实践本身，而非特定供应商的工具。Scorecard 无法判定的检查项标记为 不适用，并从安全评分中剔除（绝不按零分计）。
| 10 | Binary-Artifacts | no binaries found in the repo |
| 0 | Branch-Protection | branch protection not enabled on development/release branches |
| 10 | CI-Tests | 4 out of 4 merged PRs checked by a CI test -- score normalized to 10 |
| 0 | CII-Best-Practices | no effort to earn an OpenSSF best practices badge detected |
| 0 | Code-Review | Found 1/18 approved changesets -- score normalized to 0 |
| 10 | Contributors | project has 4 contributing companies or organizations |
| 10 | Dangerous-Workflow | no dangerous workflow patterns detected |
| 0 | Dependency-Update-Tool | no update tool detected |
| 0 | Fuzzing | project is not fuzzed |
| 0 | License | license file not detected |
| 10 | Maintained | 30 commit(s) and 1 issue activity found in the last 90 days -- score normalized to 10 |
| 10 | Packaging | packaging workflow detected |
| 0 | Pinned-Dependencies | dependency not pinned by hash detected -- score normalized to 0 |
| 0 | SAST | SAST tool is not run on all commits -- score normalized to 0 |
| 0 | Security-Policy | security policy file not detected |
| 不适用 | Signed-Releases | no releases found |
| 0 | Token-Permissions | detected GitHub workflow tokens with excessive permissions |
| 0 | Vulnerabilities | 47 existing vulnerabilities detected |
直接依赖 22
| 注册表 | 软件包 | 版本约束 | 清单文件 |
|---|---|---|---|
| npm | @accesslint/core | workspace:* | bench/package.json |
| npm | axe-core | latest | bench/package.json |
| npm | @puppeteer/browsers | ^3.0.4 | chrome/package.json |
| npm | chrome-launcher | ^1.2.1 | chrome/package.json |
| npm | @accesslint/chrome | workspace:* | cli/package.json |
| npm | @accesslint/core | workspace:* | cli/package.json |
| npm | chrome-remote-interface | ^0.34.0 | cli/package.json |
| npm | citty | ^0.1.6 | codemod/package.json |
| npm | jscodeshift | ^17.1.2 | codemod/package.json |
| npm | @accesslint/core | workspace:* | jest/package.json |
| npm | @accesslint/core | workspace:* | matchers-internal/package.json |
| npm | @accesslint/heal-diff | workspace:* | matchers-internal/package.json |
| npm | @accesslint/chrome | workspace:* | mcp/package.json |
| npm | @accesslint/cli | workspace:* | mcp/package.json |
| npm | @accesslint/core | workspace:* | mcp/package.json |
| npm | @modelcontextprotocol/sdk | ^1.12.1 | mcp/package.json |
| npm | zod | ^3.24.0 | mcp/package.json |
| npm | @accesslint/core | workspace:* | playwright/package.json |
| npm | @accesslint/core | workspace:* | report/package.json |
| npm | @accesslint/core | workspace:* | storybook-addon/package.json |
| npm | @accesslint/vitest | workspace:* | storybook-addon/package.json |
| npm | @accesslint/core | workspace:* | vitest/package.json |
全部依赖 未采集
本报告未能采集到解析后的依赖集合：GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository
依赖安全公告 0
安装 npm:@accesslint/cli@0.12.0 会引入 30 个包（直接与传递）：其中 0 个存在已知公告，0 个为直接依赖。
没有已知公告影响已评估的依赖。
公告表示依赖图中记录的版本落入某条公告的受影响范围。可达性未经分析，且依赖图包含开发与测试的版本固定——某项发现可能只涉及工具链而非交付的软件。
原始 JSON 报告 机器可读
{
"data": {
"repo": {
"topics": [],
"is_fork": false,
"size_kb": 1160,
"has_wiki": true,
"homepage": null,
"languages": {
"HTML": 5774,
"Shell": 2764,
"JavaScript": 19055,
"TypeScript": 1457059
},
"pushed_at": "2026-07-26T23:45:28Z",
"created_at": "2026-04-16T22:53:08Z",
"owner_type": "Organization",
"updated_at": "2026-07-26T23:45:33Z",
"description": "Accessibility testing tools monorepo — core, CLI, MCP, Playwright, Storybook, Vitest",
"is_archived": false,
"is_disabled": false,
"license_spdx": null,
"default_branch": "main",
"license_spdx_raw": null,
"primary_language": "TypeScript",
"significant_languages": [
"TypeScript"
]
},
"owner": {
"blog": "https://accesslint.com",
"name": "AccessLint",
"type": "Organization",
"login": "AccessLint",
"company": null,
"location": "United States of America",
"followers": 61,
"avatar_url": "https://avatars.githubusercontent.com/u/10156311?v=4",
"created_at": "2014-12-11T15:32:33Z",
"is_verified": null,
"public_repos": 24,
"account_age_days": 4245
},
"license": {
"state": "absent",
"spdx_id": null,
"raw_spdx": null,
"file_present": false,
"scorecard_found": false,
"profile_has_license": false
},
"activity": {
"releases": [
{
"tag": "playwright/v0.8.0",
"kind": "other",
"published_at": "2026-07-26T23:38:48Z"
},
{
"tag": "storybook-addon/v0.8.13",
"kind": "other",
"published_at": "2026-07-26T23:35:23Z"
},
{
"tag": "vitest/v0.3.2",
"kind": "other",
"published_at": "2026-07-26T23:35:18Z"
},
{
"tag": "jest/v0.1.3",
"kind": "other",
"published_at": "2026-07-26T23:35:18Z"
},
{
"tag": "core/v0.16.0",
"kind": "other",
"published_at": "2026-07-20T17:59:34Z"
},
{
"tag": "playwright/v0.7.0",
"kind": "other",
"published_at": "2026-07-20T17:59:22Z"
},
{
"tag": "cli/v0.12.0",
"kind": "other",
"published_at": "2026-07-20T17:59:10Z"
},
{
"tag": "core/v0.15.0",
"kind": "other",
"published_at": "2026-07-20T17:23:28Z"
},
{
"tag": "cli/v0.11.1",
"kind": "other",
"published_at": "2026-07-20T16:21:51Z"
},
{
"tag": "heal-diff/v0.2.0",
"kind": "other",
"published_at": "2026-07-20T03:03:23Z"
},
{
"tag": "core/v0.14.1",
"kind": "other",
"published_at": "2026-07-20T16:46:49Z"
},
{
"tag": "core/v0.14.0",
"kind": "other",
"published_at": "2026-07-20T03:04:07Z"
},
{
"tag": "cli/v0.11.0",
"kind": "other",
"published_at": "2026-07-20T03:03:43Z"
},
{
"tag": "playwright/v0.6.0",
"kind": "other",
"published_at": "2026-07-20T03:03:42Z"
},
{
"tag": "mcp/v0.10.0",
"kind": "other",
"published_at": "2026-06-05T01:46:23Z"
},
{
"tag": "cli/v0.10.0",
"kind": "other",
"published_at": "2026-06-05T01:43:00Z"
},
{
"tag": "mcp/v0.9.0",
"kind": "other",
"published_at": "2026-06-04T01:43:19Z"
},
{
"tag": "cli/v0.9.0",
"kind": "other",
"published_at": "2026-06-04T01:22:55Z"
},
{
"tag": "cli/v0.8.0",
"kind": "other",
"published_at": "2026-06-04T01:08:43Z"
},
{
"tag": "cli/v0.7.5",
"kind": "other",
"published_at": "2026-06-02T17:05:57Z"
},
{
"tag": "cli/v0.7.4",
"kind": "other",
"published_at": "2026-06-02T15:50:26Z"
},
{
"tag": "cli/v0.7.3",
"kind": "other",
"published_at": "2026-06-02T15:40:36Z"
},
{
"tag": "cli/v0.7.2",
"kind": "other",
"published_at": "2026-06-02T15:30:49Z"
},
{
"tag": "cli/v0.7.1",
"kind": "other",
"published_at": "2026-06-02T15:11:14Z"
},
{
"tag": "core/v0.13.0",
"kind": "other",
"published_at": "2026-06-02T15:04:56Z"
},
{
"tag": "cli/v0.7.0",
"kind": "other",
"published_at": "2026-06-02T15:04:34Z"
},
{
"tag": "playwright/v0.5.0",
"kind": "other",
"published_at": "2026-06-02T15:04:33Z"
},
{
"tag": "cli/v0.6.0",
"kind": "other",
"published_at": "2026-06-02T14:38:50Z"
},
{
"tag": "chrome/v0.2.0",
"kind": "other",
"published_at": "2026-06-02T02:33:00Z"
},
{
"tag": "chrome/v0.1.2",
"kind": "other",
"published_at": "2026-06-02T02:15:53Z"
},
{
"tag": "mcp/v0.8.1",
"kind": "other",
"published_at": "2026-06-02T01:56:31Z"
},
{
"tag": "cli/v0.5.2",
"kind": "other",
"published_at": "2026-06-02T01:56:28Z"
},
{
"tag": "cli/v0.5.1",
"kind": "other",
"published_at": "2026-06-02T01:29:06Z"
},
{
"tag": "cli/v0.5.0",
"kind": "other",
"published_at": "2026-06-02T01:10:09Z"
},
{
"tag": "chrome/v0.1.1",
"kind": "other",
"published_at": "2026-06-02T01:08:51Z"
},
{
"tag": "chrome/v0.1.0",
"kind": "other",
"published_at": "2026-06-02T00:37:15Z"
},
{
"tag": "mcp/v0.8.0",
"kind": "other",
"published_at": "2026-05-02T16:16:52Z"
},
{
"tag": "mcp/v0.7.2",
"kind": "other",
"published_at": "2026-05-02T16:07:50Z"
},
{
"tag": "mcp/v0.7.1",
"kind": "other",
"published_at": "2026-05-01T23:16:45Z"
},
{
"tag": "mcp/v0.7.0",
"kind": "other",
"published_at": "2026-05-01T15:42:30Z"
},
{
"tag": "core/v0.12.1",
"kind": "other",
"published_at": "2026-04-27T22:03:23Z"
},
{
"tag": "core/v0.12.0",
"kind": "other",
"published_at": "2026-04-26T22:59:01Z"
},
{
"tag": "mcp/v0.6.1",
"kind": "other",
"published_at": "2026-04-26T19:50:31Z"
},
{
"tag": "core/v0.11.1",
"kind": "other",
"published_at": "2026-04-26T19:50:51Z"
},
{
"tag": "mcp/v0.6.0",
"kind": "other",
"published_at": "2026-04-26T19:31:19Z"
},
{
"tag": "core/v0.11.0",
"kind": "other",
"published_at": "2026-04-26T19:31:40Z"
},
{
"tag": "mcp/v0.5.0",
"kind": "other",
"published_at": "2026-04-26T18:42:53Z"
},
{
"tag": "core/v0.10.0",
"kind": "other",
"published_at": "2026-04-26T18:38:49Z"
},
{
"tag": "mcp/v0.4.2",
"kind": "other",
"published_at": "2026-04-26T00:56:43Z"
},
{
"tag": "mcp/v0.4.1",
"kind": "other",
"published_at": "2026-04-25T21:45:37Z"
},
{
"tag": "mcp/v0.4.0",
"kind": "other",
"published_at": "2026-04-25T21:15:31Z"
},
{
"tag": "mcp/v0.3.0",
"kind": "other",
"published_at": "2026-04-25T20:44:17Z"
},
{
"tag": "report/v0.1.1",
"kind": "other",
"published_at": "2026-04-18T19:17:42Z"
},
{
"tag": "codemod/v0.1.2",
"kind": "other",
"published_at": "2026-04-18T15:19:37Z"
},
{
"tag": "codemod/v0.1.1",
"kind": "other",
"published_at": "2026-04-18T15:02:41Z"
},
{
"tag": "storybook-addon/v0.8.12",
"kind": "other",
"published_at": "2026-04-18T02:49:23Z"
},
{
"tag": "vitest/v0.3.1",
"kind": "other",
"published_at": "2026-04-18T02:49:16Z"
},
{
"tag": "playwright/v0.4.0",
"kind": "other",
"published_at": "2026-04-18T02:49:11Z"
},
{
"tag": "jest/v0.1.2",
"kind": "other",
"published_at": "2026-04-18T02:09:03Z"
},
{
"tag": "mcp/v0.2.6",
"kind": "other",
"published_at": "2026-04-17T22:05:51Z"
},
{
"tag": "storybook-addon/v0.8.11",
"kind": "other",
"published_at": "2026-04-17T22:05:16Z"
},
{
"tag": "vitest/v0.3.0",
"kind": "other",
"published_at": "2026-04-17T22:04:29Z"
},
{
"tag": "playwright/v0.3.7",
"kind": "other",
"published_at": "2026-04-17T22:04:28Z"
},
{
"tag": "cli/v0.4.0",
"kind": "other",
"published_at": "2026-04-17T22:04:19Z"
},
{
"tag": "core/v0.9.0",
"kind": "other",
"published_at": "2026-04-17T22:01:43Z"
}
],
"recent_commits": [
{
"oid": "f1aab190fb8cf050969823589ca731568eaa56f4",
"body": "…e-healing-b7417a\n\nfix(heal-diff): pair refusal memory, closing the data-testid silent false heal",
"is_bot": false,
"headline": "Merge pull request #8 from AccessLint/claude/accesslint-playwright-e2…",
"author_name": "Cameron Cundiff",
"author_login": "ckundo",
"committed_at": "2026-07-26T23:45:28Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0ccd291bd0e015931bf3105818db4b86f1a7263b",
"body": "The root entry runs `expect.extend` when it loads, which makes the audit layer\nunimportable from code driving raw `playwright` rather than `@playwright/test`\n— a scanning service, a crawler, any non-test consumer. Those callers had to\nreimplement injection, traversal, and settle themselves.\n\n`@acces\n[…]\nted there) so the new entry doesn't drag snapshot file I/O along.\n\n`@playwright/test` becomes an optional peer — audit.ts uses it for types only.\n\nCo-Authored-By: Claude Opus 5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "Add a side-effect-free @accesslint/playwright/audit entry point",
"author_name": "Cameron Cundiff",
"author_login": "ckundo",
"committed_at": "2026-07-26T23:37:41Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "412b2cc8d07a756566202ebbb35042fdd526c41a",
"body": "`HistoryEvent` here listed only created / ratchet-down / force-update, and\n`isValid` hard-filtered on those three, so every `healed` and `refreshed`\nrecord written since the RFC landed was silently discarded at parse time.\nThe report has never shown a heal.\n\nWiden both, carry `healedTier` and `refre\n[…]\n for the refusal work, and confirmed as\nin-scope for this branch rather than its own change. Prettier reflow in\nemit-html.ts is pre-existing and unrelated; it is here only because the file\nis touched.",
"is_bot": false,
"headline": "fix(report): stop dropping healed and refreshed history records",
"author_name": "Cameron Cundiff",
"author_login": "ckundo",
"committed_at": "2026-07-26T23:37:21Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "39c707abbf7100e7e2e71bbe0cf6a6254650da01",
"body": "The diff engine was deliberately org-scoped on GitHub Packages. It now has\nan outside consumer — the AccessLint runner and app both need the tiered\nmatcher and the HTML normalizer — so it moves to public npm alongside core,\ncli, and playwright.\n\nSwaps the `publishConfig.registry` override for `acces\n[…]\nted-publishing pattern the\nother public packages use (registry.npmjs.org, `--provenance`, id-token\npermission, tests gated ahead of the publish).\n\nCo-Authored-By: Claude Opus 5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "Publish @accesslint/heal-diff to public npm",
"author_name": "Cameron Cundiff",
"author_login": "ckundo",
"committed_at": "2026-07-26T23:36:09Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "77ed513ee1cae395936cee2e1cff1ec9822fc481",
"body": "The end-to-end regression test for pair refusal memory. Both versions carry\nthe same `data-testid`, so both normalize to `getByTestId('hero')` and the\nanchor signal is a strict function of the selector, the exact shape where\nT1's verification used to buy nothing. The `src` change moves the\nhtmlFinge\n[…]\nted it: run with ACCESSLINT_UPDATE=1\n baseline screenshot: impostor-screenshots/..._data-testid-hero_e8dcdd1c.png\n current screenshot: impostor-screenshots/..._data-testid-hero_ce5cb175.png",
"is_bot": false,
"headline": "test(playwright): impostor reusing a data-testid through a live page",
"author_name": "Cameron Cundiff",
"author_login": "ckundo",
"committed_at": "2026-07-26T23:34:49Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "d8b6c8d4ca0140344b9e3d71e296b850dc9ff2a5",
"body": "Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "Release @accesslint/jest v0.1.3",
"author_name": "Cameron Cundiff",
"author_login": "ckundo",
"committed_at": "2026-07-26T23:34:35Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "f18ae2b41554aff519fb8bf243830054f2ec27c9",
"body": "Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "Release @accesslint/vitest v0.3.2",
"author_name": "Cameron Cundiff",
"author_login": "ckundo",
"committed_at": "2026-07-26T23:34:35Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "7bbd56617e21915da0f51eaa87c00b45212a7e14",
"body": "Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "Release @accesslint/storybook-addon v0.8.13",
"author_name": "Cameron Cundiff",
"author_login": "ckundo",
"committed_at": "2026-07-26T23:34:35Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "474cd249b4f6489375503eaed58428a15e47b7bd",
"body": "`screenshotFilename` derived its discriminator from the anchor whenever one\nexisted, so an element's baseline and impostor images computed the same\npath, and `captureScreenshots` starts each run with a fresh in-use set:\n\n files after run 1: [[\"text-alternatives_img-alt_data-testid-hero.png\", 144]\n[…]\nanchorSlug>_<fp8>.png`. It is already read here, so this\ncosts nothing. Unanchored names are unchanged, and orphans are still GC'd on\nsave, so a passing run keeps exactly one image per baseline entry.",
"is_bot": false,
"headline": "fix(playwright): content-address screenshot filenames",
"author_name": "Cameron Cundiff",
"author_login": "ckundo",
"committed_at": "2026-07-26T23:33:48Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "4574c2d077781bc23d2e81e15f63a5fbf1b701c5",
"body": "…ved\"\n\nClosing the silent false heal converts a passing run into a failing one, so\nthe failure has to say something true. The hint layer did not: a refused\npair usually shares `tag` and `relativeLocation`, clearing the likely-moved\nthreshold, and every line it produced was wrong:\n\n likely moved f\n[…]\n block is\nrendered in three places (cli, jest/vitest, playwright); only the update\nhint differs, so the cli passes its own. That also collapses the duplicated\nliteral in the cli's likely-moved branch.",
"is_bot": false,
"headline": "feat(matchers): explain a refused heal instead of guessing \"likely mo…",
"author_name": "Cameron Cundiff",
"author_login": "ckundo",
"committed_at": "2026-07-26T23:31:20Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "f40600c7414d2af8995cc04d5441705332565e09",
"body": "…impostor\n\nT1 verifies candidate pairs with `htmlFingerprint` and refuses the pair when\nthe values disagree, releasing both items to the tiers below. Release alone\nwas not enough. `data-testid` is both the `anchor` signal and, since it is\nPlaywright's default testIdAttribute, the `selector`, so for \n[…]\nlativeLocation` often enough\nto clear the hint threshold, and every line of that hint is false: it claims\nthe element moved from its own selector and coaches the developer into\naccepting the impostor.",
"is_bot": false,
"headline": "fix(heal-diff): remember refusals so a weaker tier cannot re-pair an …",
"author_name": "Cameron Cundiff",
"author_login": "ckundo",
"committed_at": "2026-07-26T23:26:43Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "926d34aeecf0745927bcbffac8a5441253e003a4",
"body": "Implements validation strategy item 1 of the multi-signal healing RFC\n(heal-diff/docs/RFC-multi-signal-healing.md, \"synthetic fixture corpus\")\nat the browser level. Until now the heal chain was only tested in\nsegments: browser signal capture in @accesslint/playwright, tier\nsemantics in @accesslint/h\n[…]\nests: commenting out the anchor tier drops\nT2 to healedTier \"role\" and commenting out the htmlFingerprint tier drops\nT5 to \"relativeLocation\". Both failures are caught. No production code\nwas changed.",
"is_bot": false,
"headline": "test(playwright): end-to-end healing tests through a live Chromium page",
"author_name": "Cameron Cundiff",
"author_login": "ckundo",
"committed_at": "2026-07-26T22:30:13Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "4100beb6fc48696fb263f89d5d909efa009131b6",
"body": null,
"is_bot": false,
"headline": "Release @accesslint/playwright v0.7.0",
"author_name": "Cameron Cundiff",
"author_login": "ckundo",
"committed_at": "2026-07-20T17:53:36Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "13487e4a87010c706308b1a451cb3fb7c23cb871",
"body": null,
"is_bot": false,
"headline": "Release @accesslint/cli v0.12.0",
"author_name": "Cameron Cundiff",
"author_login": "ckundo",
"committed_at": "2026-07-20T17:53:36Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2e870b41a82f90af01973b813c484c1bae37b5bb",
"body": null,
"is_bot": false,
"headline": "Release @accesslint/core v0.16.0",
"author_name": "Cameron Cundiff",
"author_login": "ckundo",
"committed_at": "2026-07-20T17:53:36Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5f14dd735e230fc1b36f26447aa3a3ccbc7e419d",
"body": "Harden audit metadata contract and expose engine version",
"is_bot": false,
"headline": "Merge pull request #7 from AccessLint/feat/audit-metadata-follow-ups",
"author_name": "Cameron Cundiff",
"author_login": "ckundo",
"committed_at": "2026-07-20T17:50:35Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d57d6cb8158df49e73a7353739da79770bfe35f0",
"body": "The browser EARL reporter now imports metadata.ts, which runs under\nPlaywright's Node ESM loader in the ACT conformance gate. Node requires\n'with { type: \"json\" }' on JSON module imports there; bundler paths\n(Vite, tsdown, Vitest) transform the import either way.",
"is_bot": false,
"headline": "fix(core): add JSON import attribute for Node ESM consumers",
"author_name": "Cameron Cundiff",
"author_login": "ckundo",
"committed_at": "2026-07-20T17:45:49Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "23c69c1523b45b70a541deda577268d918c06e5d",
"body": "Follow-ups to #5 (testEngine/testEnvironment metadata):\n\n- playwright: forward testEngine, testEnvironment, and skippedRules\n across the page.evaluate boundary so accesslintAudit results match the\n core contract; normalize with engine-version and sentinel-environment\n fallbacks when the page carr\n[…]\npoints; reuse it in the browser EARL reporter instead of reading\n package.json off disk\n- cli: report the engine version alongside the CLI version in --version\n output, e.g. \"0.11.1 (engine 0.14.1)\"",
"is_bot": false,
"headline": "feat: harden audit metadata contract and expose engine version",
"author_name": "Cameron Cundiff",
"author_login": "ckundo",
"committed_at": "2026-07-20T17:31:38Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "cfd61fda118eb52adf48c2417d24973826f98399",
"body": "The category/rule-name rename (12b1b83) changed the alphabetical order of\nthe two rule IDs in the saveSnapshot round-trip test but the expected\narray kept the old order, breaking the suite on main. Also applies\nPrettier to lines the rename left overlong.",
"is_bot": false,
"headline": "fix(playwright): correct expected sort order after rule ID rename",
"author_name": "Cameron Cundiff",
"author_login": "ckundo",
"committed_at": "2026-07-20T17:31:27Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "15f4343956c3390359743cbe4b8828e16a57d5a6",
"body": null,
"is_bot": false,
"headline": "Release @accesslint/core v0.15.0",
"author_name": "Cameron Cundiff",
"author_login": "ckundo",
"committed_at": "2026-07-20T17:22:23Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ce2799062d032c7a9dc54cb84c889150c2420d56",
"body": "Rules can now declare deprecation via an optional deprecated field:\nmessage, deprecatedSince, availableUntil, and replacedBy (rule IDs).\nModeled on ESLint's DeprecatedInfo, trimmed to a single-registry\nengine. No rule sets it yet; consumers such as the docs site can\nsurface banners once a rule is deprecated.",
"is_bot": false,
"headline": "feat(core): add deprecated lifecycle metadata to the Rule interface",
"author_name": "Cameron Cundiff",
"author_login": "ckundo",
"committed_at": "2026-07-20T17:17:53Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "44f43e3df23fd1d0aced85898d42995b0599d978",
"body": "Include engine and environment metadata in audit results",
"is_bot": false,
"headline": "Merge pull request #5 from jaimeiniesta/codex/audit-result-metadata",
"author_name": "Cameron Cundiff",
"author_login": "ckundo",
"committed_at": "2026-07-20T17:08:15Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "12b1b83fc3836853fa457ad602ea0f04e766d913",
"body": "Replace legacy accesslint-NNN rule IDs with the current\ncategory/rule-name schema emitted by @accesslint/core:\n\n- storybook-addon: fix disabledRules to use landmarks/region\n (accesslint-045 matched no current rule, so the landmark-region\n suppression was silently a no-op)\n- playwright: update stale explanatory comments and snapshot\n test fixtures to the new IDs",
"is_bot": false,
"headline": "Update rule ID references to category/rule-name schema",
"author_name": "Cameron Cundiff",
"author_login": "ckundo",
"committed_at": "2026-07-20T16:22:40Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "835e4dbb03d91dbcb3fd304590ab85fce972d32f",
"body": null,
"is_bot": false,
"headline": "Release @accesslint/cli v0.11.1",
"author_name": "Cameron Cundiff",
"author_login": "ckundo",
"committed_at": "2026-07-20T16:21:16Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ef7c19784f24cb93c3de7a8020a71b47211e67a7",
"body": "Fix Windows path-separator bug in loadCoreIIFE (#4)",
"is_bot": false,
"headline": "Merge pull request #6 from AccessLint/claude/accesslint-issue-4-291c06",
"author_name": "Cameron Cundiff",
"author_login": "ckundo",
"committed_at": "2026-07-20T16:19:22Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "15657b7ac0689167f0a456cc70de642f0c7bb786",
"body": "require.resolve returns backslash-separated paths on Windows, so the\nforward-slash regex that derived core's package.json from the IIFE path\nwas a no-op there, leaving pkgPath pointing at the IIFE bundle itself.\nJSON.parse of `var AccessLint=(...)` then threw and surfaced as a\nmisleading \"CDP error\" on every scan.\n\nDerive the path with path.dirname/join so it is separator-agnostic, and\nextract corePkgPath as a pure helper covered by POSIX and win32 tests.",
"is_bot": false,
"headline": "Fix Windows path-separator bug in loadCoreIIFE (#4)",
"author_name": "Cameron Cundiff",
"author_login": "ckundo",
"committed_at": "2026-07-20T16:15:38Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "69379e402d3ec86ea76fb4ba5f5ffca4ce695efd",
"body": "Extend the public AuditResult contract with Axe-compatible testEngine and\ntestEnvironment metadata. Source the engine version from the Core package,\nread browser details from the audited document's own realm, and use stable\nfallbacks when DOM implementations expose missing, malformed, or throwing\nho\n[…]\nry,\nexport the new public types, update the Core API documentation, and cover the\nresult contract, fallback behavior, and CLI transport with regression tests.\n\nCo-authored-by: Codex <codex@openai.com>",
"is_bot": false,
"headline": "feat(core): include engine and environment in audit results",
"author_name": "Jaime Iniesta",
"author_login": "jaimeiniesta",
"committed_at": "2026-07-20T11:13:06Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "20d43a675f94284cd2d2ee26c411ae15faffa58b",
"body": "Add .worktrees/ to the repository ignore rules so isolated checkouts can\nlive inside the project without appearing as untracked content. This keeps\nfeature development separated from main and prevents nested worktree files\nfrom being staged accidentally.\n\nCo-authored-by: Codex <codex@openai.com>",
"is_bot": false,
"headline": "chore(repo): ignore local Git worktrees",
"author_name": "Jaime Iniesta",
"author_login": "jaimeiniesta",
"committed_at": "2026-07-20T11:13:06Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "3c9955c04c19f55a239d344df9e98a5dfecacc08",
"body": "…ckage",
"is_bot": false,
"headline": "build(heal-diff): publish to GitHub Packages as a private registry pa…",
"author_name": "Cameron Cundiff",
"author_login": "ckundo",
"committed_at": "2026-07-20T02:16:41Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f7455700766f9ddd953b2c60f81db11f8d3f9cca",
"body": null,
"is_bot": false,
"headline": "Release @accesslint/core v0.14.1",
"author_name": "Cameron Cundiff",
"author_login": "ckundo",
"committed_at": "2026-07-20T02:07:42Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "60f107a75b18f0ef705f0380786c005a5b484015",
"body": null,
"is_bot": false,
"headline": "Merge remote-tracking branch 'origin/main'",
"author_name": "Cameron Cundiff",
"author_login": "ckundo",
"committed_at": "2026-07-20T02:02:57Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c9a1f4c88b75e7905ed7549c1fe448c946e0bfc3",
"body": null,
"is_bot": false,
"headline": "Release @accesslint/core v0.14.0",
"author_name": "Cameron Cundiff",
"author_login": "ckundo",
"committed_at": "2026-07-20T02:01:46Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "032e3e7037ce65203288724a0c3800f48d02d73f",
"body": "…y-content-pseudo-backgrounds\n\nfix(core): honor backgrounds on empty-content pseudo-elements",
"is_bot": false,
"headline": "Merge pull request #3 from jaimeiniesta/codex/fix-color-contrast-empt…",
"author_name": "Cameron Cundiff",
"author_login": "ckundo",
"committed_at": "2026-07-20T01:59:22Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "48595234de0d22754997e2c058c5c63392a8d58e",
"body": "Integrates the two parallel identity slices. The overlap was in\nmapInPageToSnapshot (cli) and violationToDiffItem (matchers-internal),\nwhere both branches rewrote the same functions. Reconciled so both survive:\n\n- selector identity uses getResilientLocator (from main's resilient-locator\n slice), no\n[…]\na reused selector are refused.\n\nBrings in the browser-safe canonicalizer (pure-JS sha1, NORMALIZE_VERSION,\nURL query stripping), the verifiedBy tier option, and the playwright\ninjected-script cleanup.",
"is_bot": false,
"headline": "Merge heal-diff verifiedBy engine into resilient-locator identity",
"author_name": "Cameron Cundiff",
"author_login": "ckundo",
"committed_at": "2026-07-20T01:56:44Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "32fb322c324f0e3c3b393b9d9929517fbf4a5362",
"body": "Add getResilientLocator(), a Playwright-style locator ladder (test id →\nrole + accessible name → text → positional CSS floor) that produces a\nstable, human-readable identity string surviving DOM refactors. Add\nisGeneratedId / isStableId heuristics for framework-generated ids (React\nuseId, emotion, R\n[…]\n address as\nseparate concerns; duplicates match by count.\n\nPin the ladder against Playwright's locator.normalize() with a CI oracle\ntest, and raise the core d.ts size budget for the three new exports.",
"is_bot": false,
"headline": "feat(core): resilient human-readable locators for stable identity",
"author_name": "Cameron Cundiff",
"author_login": "ckundo",
"committed_at": "2026-07-20T01:53:50Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "1961679ac751950a8f1b52c1a48906a6b23ff91a",
"body": null,
"is_bot": false,
"headline": "Release @accesslint/playwright v0.6.0",
"author_name": "Cameron Cundiff",
"author_login": "ckundo",
"committed_at": "2026-07-20T01:35:54Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "573f97c0711d162657186d7212ca3ea7635c96f4",
"body": null,
"is_bot": false,
"headline": "Release @accesslint/cli v0.11.0",
"author_name": "Cameron Cundiff",
"author_login": "ckundo",
"committed_at": "2026-07-20T01:35:54Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "11329b2928feff5806402634b67b2d3c35f90b4d",
"body": "Apply isFingerprintableTag when mapping in-page violations, so page-scoped\nhtml/body snippets no longer mint a churny htmlFingerprint signal.",
"is_bot": false,
"headline": "feat(cli): skip html/body fingerprints in snapshot identity",
"author_name": "Cameron Cundiff",
"author_login": "ckundo",
"committed_at": "2026-07-20T01:35:47Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "10c7cdf5a10d1990f2b452d0eb02ba2c54299c2c",
"body": "… stable\n\nThe AccessLint bundle was left in the DOM after injection, but only on runs that\nhad to inject (the global survives setContent, so re-runs skip it). That made the\nhtml element's snippet differ run to run and refused its exact match. Remove the\nscript tag once the bundle has executed, and skip fingerprinting page-scoped\nhtml/body snippets in signal capture.",
"is_bot": false,
"headline": "fix(playwright): remove injected script tag so html fingerprints stay…",
"author_name": "Cameron Cundiff",
"author_login": "ckundo",
"committed_at": "2026-07-20T01:35:40Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "fe2a667b77e93c18763affac5f0b9c60c6a137fb",
"body": "…prints\n\nSet verifiedBy: htmlFingerprint on the exact tier so an impostor at a reused\nselector no longer silently matches. Stop minting htmlFingerprint for html/body\nelements (their snippets serialize the whole page); missing-signal leniency then\nkeeps their exact matches standing under verifiedBy.\n\nBump to 0.1.0.",
"is_bot": false,
"headline": "feat(matchers-internal): adopt verifiedBy and skip page-scoped finger…",
"author_name": "Cameron Cundiff",
"author_login": "ckundo",
"committed_at": "2026-07-20T01:35:31Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "733e15138d22943698bac372755ce9feeb6632bf",
"body": "…ze version\n\nReplace node:crypto with an inline pure-JS SHA-1 (byte-identical output,\nverified against node:crypto in tests) so the fingerprint path has no node\nbuiltins and bundles for the browser. Build as platform: neutral.\n\nAdd URL query/fragment stripping to normalizeHtml and export NORMALIZE_V\n[…]\no later tiers; either side\nlacking the signal leaves the match standing (missing-signal leniency). Catches\nimpostors and swaps at the address tier, healing back to true partners later.\n\nBump to 0.2.0.",
"is_bot": false,
"headline": "feat(heal-diff): browser-safe canonicalizer, verifiedBy tier, normali…",
"author_name": "Cameron Cundiff",
"author_login": "ckundo",
"committed_at": "2026-07-20T01:35:23Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "d4d0b46e411b060dc9e4a7acf98c8df8e472053b",
"body": "Pseudo-elements can paint a visual background with content: \"\". The contrast helper treated those pseudo-elements as absent, then used the underlying ancestor or body color and produced false 1:1 failures, as seen on 404 Media.\n\nLet the existing background, image, and geometry checks inspect empty-c\n[…]\nckground is unreliable. Add real-browser regressions for both rules plus a control proving non-visual empty pseudo-elements still report genuine low contrast.\n\nCo-authored-by: Codex <codex@openai.com>",
"is_bot": false,
"headline": "fix(core): honor backgrounds on empty-content pseudo-elements",
"author_name": "Jaime Iniesta",
"author_login": "jaimeiniesta",
"committed_at": "2026-07-18T08:05:17Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "bdd9d100a01f596bfa1b88326a6146fe33efd0c3",
"body": "Add --format sarif emitting SARIF 2.1.0 for GitHub code scanning and\nother static-analysis tooling. Each violation maps to a result with\nimpact-derived severity (critical/serious -> error, moderate -> warning,\nminor -> note), axe-style WCAG tags, and a rules[] table deduped by\nruleId with ruleIndex \n[…]\nsnippet. Empty audits emit a valid run with results: [].\n\nEnrich in-page violations with rule.description (reusing the getRuleById\njoin) to populate rules[].fullDescription. Covered by format.test.ts.",
"is_bot": false,
"headline": "feat(cli): add SARIF output format",
"author_name": "Cameron Cundiff",
"author_login": "ckundo",
"committed_at": "2026-06-05T02:31:24Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "0385b849c98cc0f07cc81b40680e218f247e5dc3",
"body": "Enrich live-audit violations in-page via getRuleById, attaching each\nrule's wcag criteria and conformance level. Text output prints a WCAG\nline per violation (or \"Best practice\" for rules with no criterion);\nJSON output carries wcag/level fields. Snapshot identity is unchanged.",
"is_bot": false,
"headline": "feat(cli): surface WCAG criteria and level in audit output",
"author_name": "Cameron Cundiff",
"author_login": "ckundo",
"committed_at": "2026-06-05T02:07:56Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "cb72b9fd1c9afba4ed2341c92129eb9c24f9be13",
"body": "Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "Release @accesslint/mcp v0.10.0",
"author_name": "Cameron Cundiff",
"author_login": "ckundo",
"committed_at": "2026-06-05T01:42:26Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "21ec721aa4956dd28985fd7be5eb6ba5bf103d16",
"body": "audit_html now ensures Chrome and shells `accesslint scan --stdin` through cli-runner instead of the in-process jsdom auditor, mirroring audit_live. Drops the in-process audit_html unit tests (now a Chrome subprocess); adds scanHtml arg-building tests.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "feat(mcp): audit_html audits via Chrome (cli-runner scanHtml)",
"author_name": "Cameron Cundiff",
"author_login": "ckundo",
"committed_at": "2026-06-05T01:41:28Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "20428c0aff64edcb3b45bff89a77f6555147a99d",
"body": "Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "Release @accesslint/cli v0.10.0",
"author_name": "Cameron Cundiff",
"author_login": "ckundo",
"committed_at": "2026-06-05T01:41:28Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "a8db3b1baae422c24f4778fc2d73f560d86949c4",
"body": "scan now loads file/stdin/--stdin HTML into a blank Chrome tab (Page.setDocumentContent) and audits the real DOM via the same IIFE the URL path uses, auto-launching Chrome through @accesslint/chrome when no CDP session is reachable. Adds --stdin and --component-mode.\n\nBREAKING CHANGE: removes the in-process jsdom audit() export (the \".\" entry is now a utility module) and ./inline-css; static HTML audits now require Chrome.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "feat(cli)!: audit HTML via Chrome; drop jsdom",
"author_name": "Cameron Cundiff",
"author_login": "ckundo",
"committed_at": "2026-06-05T01:41:03Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "37427ea4e503a295a1c6f26e5422ed8a6b9bbe17",
"body": null,
"is_bot": false,
"headline": "Release @accesslint/mcp v0.9.0",
"author_name": "Cameron Cundiff",
"author_login": "ckundo",
"committed_at": "2026-06-04T01:42:31Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4a0d227068a88c5dd19f60a195603b699a71159a",
"body": "Strip the MCP's own Chrome/CDP/diff engine, which duplicated and lagged\n@accesslint/chrome (lifecycle) and @accesslint/cli (CDP audit, JSDOM\naudit, snapshots). The server now delegates instead of reimplementing.\n\n- audit_live: shell out to accesslint-chrome ensure + accesslint scan\n via the new lib\n[…]\nccesslint/chrome\n- repoint mcp/bench audit imports to @accesslint/cli\n\nTools 7 to 4: audit_live, audit_html, list_rules, explain_rule. Diffing\nnow lives in CLI snapshots and the accesslint diff skill.",
"is_bot": false,
"headline": "refactor(mcp): thin subprocess adapter over @accesslint/chrome and cli",
"author_name": "Cameron Cundiff",
"author_login": "ckundo",
"committed_at": "2026-06-04T01:35:29Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "b46b5cbfc06103239354e345221764ff66e99696",
"body": "Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "Release @accesslint/cli v0.9.0",
"author_name": "Cameron Cundiff",
"author_login": "ckundo",
"committed_at": "2026-06-04T01:22:16Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "a50d9d2801f97c938baf3251515e87f439cff11d",
"body": "scan resolves a target name, or the default target when no source is given (non-interactively), from accesslint.config.json plus its local overlay, merging the target options under explicit CLI flags. --stdin forces reading stdin in a configured project.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "feat(cli): resolve named targets from accesslint.config.json",
"author_name": "Cameron Cundiff",
"author_login": "ckundo",
"committed_at": "2026-06-04T01:22:16Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "c22e30328f71e1d0befb414d7c8fd0e1cc20cb56",
"body": "Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "Release @accesslint/cli v0.8.0",
"author_name": "Cameron Cundiff",
"author_login": "ckundo",
"committed_at": "2026-06-04T01:00:30Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "649e8e6f4884c78634cc6e3a5fb5784e8e696ba3",
"body": "BREAKING CHANGE: the audit now runs as \"accesslint scan <source>\" instead of \"accesslint <source>\". \"accesslint init\" scaffolds accesslint.config.json with framework-aware named targets (dev/storybook/prod), committed base plus a gitignored local overlay.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "feat(cli)!: add init command; move audit under scan subcommand",
"author_name": "Cameron Cundiff",
"author_login": "ckundo",
"committed_at": "2026-06-04T01:00:29Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "0df624d0144755150bff5edeaf37e4e44fc83dad",
"body": null,
"is_bot": false,
"headline": "chore: remove @accesslint/diff package from monorepo",
"author_name": "Cameron Cundiff",
"author_login": "ckundo",
"committed_at": "2026-06-03T00:53:31Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e91f721bff3266a099c18bf59b37cb7b31c7db2f",
"body": "Reframe the attachReactFiberSource docs around which debug metadata the fiber\ncarries (_debugSource vs _debugStack) rather than the React version: Vite's\n__source transform emits _debugSource for both React 18 and 19, and its\nper-module preamble offsets the reported line/column (file and component stay\ncorrect). The _debugStack path (e.g. Next.js dev) resolves through the\nsourcemap and is unaffected. Also condense the README section.",
"is_bot": false,
"headline": "docs(core): clarify React source-attribution limitation",
"author_name": "Cameron Cundiff",
"author_login": "ckundo",
"committed_at": "2026-06-02T23:25:32Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2b1e58544498cc36bd1162e9b631af14e12e2d9b",
"body": "Diffs accessibility violations of a set of routes between two running builds\n(baseline vs candidate) over CDP: warms each origin, audits routes through a\npool of reusable tabs, and compares via matchers-internal's tiered snapshot\ndiff. Reports new/fixed/pre-existing and exits 1 on new violations. In\n[…]\nt-expression + SnapshotViolation identity mapping\nfrom cli/src/cdp.ts into cli/src/cdp-audit.ts (exported as\n@accesslint/cli/cdp-audit) so the CLI and diff produce byte-identical\nviolation identities.",
"is_bot": false,
"headline": "feat(diff): add @accesslint/diff package for route-level a11y diffing",
"author_name": "Cameron Cundiff",
"author_login": "ckundo",
"committed_at": "2026-06-02T21:22:35Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "bd7140a43918800086598a26dfd788a5c22b1bee",
"body": null,
"is_bot": false,
"headline": "Release @accesslint/cli v0.7.5",
"author_name": "Cameron Cundiff",
"author_login": "ckundo",
"committed_at": "2026-06-02T17:05:17Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d0512fbbd94e6c0c67c38db131d2f5b66c5221c7",
"body": "Switch examples from dev invocations to `npx -y @accesslint/cli`. Add\n--selector, --snapshot, --snapshot-dir, --update-snapshot, and\nACCESSLINT_UPDATE=1 which were missing from the options reference.",
"is_bot": false,
"headline": "docs(cli): update README with npx usage and missing options",
"author_name": "Cameron Cundiff",
"author_login": "ckundo",
"committed_at": "2026-06-02T15:50:43Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "891115ff12845392b9cfe49de2a45cab978de45a",
"body": "When --snapshot and --format json are combined, output full violation JSON filtered to new violations (with impact, message, source) plus fixed and preExisting counts — instead of the sparse text-only snapshot result. Enables skill-level diffing without a shell script.",
"is_bot": false,
"headline": "Release @accesslint/cli v0.7.4",
"author_name": "Cameron Cundiff",
"author_login": "ckundo",
"committed_at": "2026-06-02T15:49:52Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "59449bc400c6ef3be070b636d5ff1b69500fb68d",
"body": "Use attw profile: \"esm-only\" for ESM-only packages (chrome, cli, mcp)\nto suppress expected node10/CJS resolution failures, and\nexcludeEntrypoints for sub-paths that intentionally lack node10 support\n(vitest/fixture, storybook-addon/manager). Switch mcp from pkg.main to\npkg.exports to resolve the publint ESM-main warning.",
"is_bot": false,
"headline": "fix: silence build warnings across packages",
"author_name": "Cameron Cundiff",
"author_login": "ckundo",
"committed_at": "2026-06-02T15:48:18Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "dacaea9c0f5f3f3b9ada2552571a6f2b3a9594fc",
"body": "Fix about:blank audit bug — create tab without URL then navigate explicitly via Page.navigate so the load event is always owned and awaited, eliminating the race where about:blank's readyState \"complete\" was mistaken for the target page being ready.",
"is_bot": false,
"headline": "Release @accesslint/cli v0.7.3",
"author_name": "Cameron Cundiff",
"author_login": "ckundo",
"committed_at": "2026-06-02T15:37:19Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "58505f96299fce59598c555c792eeaed4c8d0f77",
"body": "Fix SyntaxError in in-page expression: backslash-escaped quotes inside a\ntemplate literal are processed by JS escape rules, turning \"...\" into \"\"\n(two adjacent string literals). Use single quotes for the role signal string.",
"is_bot": false,
"headline": "Release @accesslint/cli v0.7.2",
"author_name": "Cameron Cundiff",
"author_login": "ckundo",
"committed_at": "2026-06-02T15:30:18Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "03924fea6cdac887fc3dbf75b7c653236998e92f",
"body": null,
"is_bot": false,
"headline": "Release @accesslint/cli v0.7.1",
"author_name": "Cameron Cundiff",
"author_login": "ckundo",
"committed_at": "2026-06-02T15:10:35Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c1a03296f595bd3cdb1255812161685a837e19fb",
"body": "…esslint/cli v0.7.0",
"is_bot": false,
"headline": "Release @accesslint/core v0.13.0, @accesslint/playwright v0.5.0, @acc…",
"author_name": "Cameron Cundiff",
"author_login": "ckundo",
"committed_at": "2026-06-02T15:03:48Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "86f5b496a2f9ef1bcc51f306f2e52a228b11224a",
"body": "Move buildRelativeLocation into @accesslint/core so it's available in the\nIIFE (window.AccessLint.buildRelativeLocation) for any in-page signal\nextraction — CLI, Playwright, and future consumers — without duplicating\nthe implementation.\n\n- core: add buildRelativeLocation + helpers to selector.ts, ex\n[…]\nlFingerprint in Node.js; add --snapshot, --snapshot-dir,\n --update-snapshot flags backed by evaluateSnapshot from matchers-internal;\n add @accesslint/heal-diff and @accesslint/matchers-internal deps",
"is_bot": false,
"headline": "refactor: move buildRelativeLocation to core; add CLI snapshot support",
"author_name": "Cameron Cundiff",
"author_login": "ckundo",
"committed_at": "2026-06-02T14:58:11Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "556eca1e1366aa0c87d5af248eac7a15754695a1",
"body": "Add --selector flag to scope live audits to a CSS selector. Auto-waits for the element (respecting --wait-timeout) and post-filters violations by DOM containment across all matched nodes.",
"is_bot": false,
"headline": "Release @accesslint/cli v0.6.0",
"author_name": "Cameron Cundiff",
"author_login": "ckundo",
"committed_at": "2026-06-02T14:38:14Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2f9d9f0dd4bf504b33b4d9784f5f6edc7a4b6579",
"body": null,
"is_bot": false,
"headline": "Release @accesslint/chrome v0.2.0",
"author_name": "Cameron Cundiff",
"author_login": "ckundo",
"committed_at": "2026-06-02T02:32:34Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "94ac8e178619424d5d78e86884fa8884954acede",
"body": "… found\n\nensure now resolves the system Chrome first (CHROME_PATH / platform search) and,\nonly when none is found and --download (or ACCESSLINT_CHROME_DOWNLOAD=1) is set,\nfetches a pinned Chrome for Testing via @puppeteer/browsers into a cache dir\n(ACCESSLINT_CHROME_CACHE_DIR, default ~/.cache/accesslint-chrome). The cache is\nreused before any network call and progress is logged to stderr so the JSON on\nstdout stays parseable. A system Chrome always wins; the download is a fallback.",
"is_bot": false,
"headline": "chrome: optional Chrome for Testing download when no system Chrome is…",
"author_name": "Cameron Cundiff",
"author_login": "ckundo",
"committed_at": "2026-06-02T02:32:17Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2abed8f67a052a2322e66b1ae78741370ce97c55",
"body": null,
"is_bot": false,
"headline": "Release @accesslint/chrome v0.1.2",
"author_name": "Cameron Cundiff",
"author_login": "ckundo",
"committed_at": "2026-06-02T02:15:20Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "37d30f2cbae72ab1366e68413b6fefe74b03ce3a",
"body": "A pinned port (--port or ACCESSLINT_CDP_PORT) that is occupied but does not\nanswer CDP discovery now fails with an actionable error instead of silently\nstepping to the next free port, which left callers (e.g. @accesslint/cli) still\npointed at the original port. Unpinned ensure keeps stepping past squatters.",
"is_bot": false,
"headline": "chrome: fail ensure on a pinned port held by a non-CDP process",
"author_name": "Cameron Cundiff",
"author_login": "ckundo",
"committed_at": "2026-06-02T02:15:20Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "eaf1a10e41d0bde83db30d370b58b71617e59c5e",
"body": null,
"is_bot": false,
"headline": "Release @accesslint/mcp v0.8.1",
"author_name": "Cameron Cundiff",
"author_login": "ckundo",
"committed_at": "2026-06-02T01:55:51Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "6f8e31904c6649d68235d350f742a0426b16ff3c",
"body": null,
"is_bot": false,
"headline": "Release @accesslint/cli v0.5.2",
"author_name": "Cameron Cundiff",
"author_login": "ckundo",
"committed_at": "2026-06-02T01:55:51Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2fc5c6ab8820df7514ca63d39336a6e1c20af396",
"body": "… from package.json\n\nThe CLI's 'no debug session' error, --port help, and README now direct users to\n'npx @accesslint/chrome ensure' instead of a raw --remote-debugging-port command\nthat launches on the default profile and often won't serve CDP discovery.\n\nBoth CLIs read their version from package.j\n[…]\n had drifted (cli was at 0.5.1, mcp at 0.8.0).\n\nThe cli README drops the nonexistent --component-mode flag (component mode is\nauto-detected from HTML fragments) and documents the real URL/CDP options.",
"is_bot": false,
"headline": "cli, mcp: point Chrome guidance at @accesslint/chrome; derive version…",
"author_name": "Cameron Cundiff",
"author_login": "ckundo",
"committed_at": "2026-06-02T01:54:06Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "4f3b7b2cbe25a3185c17eac942f1dd677c865e23",
"body": null,
"is_bot": false,
"headline": "Release @accesslint/cli v0.5.1",
"author_name": "Cameron Cundiff",
"author_login": "ckundo",
"committed_at": "2026-06-02T01:28:33Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "526c17b811337baf10954a6353c028b875858e1c",
"body": "JSON output is now emitted on a single line by default for easier\npiping and parsing. Pass --pretty to restore indented output.",
"is_bot": false,
"headline": "cli: add --pretty flag for json output, default to single-line",
"author_name": "Cameron Cundiff",
"author_login": "ckundo",
"committed_at": "2026-06-02T01:28:12Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "38caf51a1fd64b6aa2914cb725f1bcaac1e9870e",
"body": null,
"is_bot": false,
"headline": "Release @accesslint/chrome v0.1.1",
"author_name": "Cameron Cundiff",
"author_login": "ckundo",
"committed_at": "2026-06-02T00:38:42Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b8778c608ba2ffb97e5f46b5afd3b8bf89be1e2e",
"body": "Ensures a CDP-driveable Chrome (HTTP /json/version discovery, not bare TCP)\nand manages its lifecycle. Launches detached so Chrome outlives a one-shot\nnpx launcher; exposes ensure/stop/status and an accesslint-chrome CLI.",
"is_bot": false,
"headline": "chrome: add @accesslint/chrome package for debuggable Chrome lifecycle",
"author_name": "Cameron Cundiff",
"author_login": "ckundo",
"committed_at": "2026-06-02T00:30:11Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "12c73ad0ec10468417b076b468ce767827e60b36",
"body": null,
"is_bot": false,
"headline": "Release @accesslint/cli v0.5.0",
"author_name": "Cameron Cundiff",
"author_login": "ckundo",
"committed_at": "2026-06-02T00:26:35Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "483e72990c4127032e3c02792c19e95cf04ac19d",
"body": null,
"is_bot": false,
"headline": "cli: add Chrome CDP audit path for URLs, drop chrome-launcher",
"author_name": "Cameron Cundiff",
"author_login": "ckundo",
"committed_at": "2026-06-02T00:24:49Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a31e2d1c2b5b3c7555b698dee7a7cf24d03e43ce",
"body": null,
"is_bot": false,
"headline": "Release @accesslint/mcp v0.8.0",
"author_name": "Cameron Cundiff",
"author_login": "ckundo",
"committed_at": "2026-05-02T16:16:22Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "cf9d265fb89833e9d23d6d3e1bcbd73088a9f97a",
"body": "…t_diff\n\nTwo more tools off the surface:\n\n- diff_html — folded into audit_diff via a new optional `before: string`\n param that names a stored baseline to diff against. With `before` set,\n audit_diff skips auto-baseline storage and produces a direct diff —\n same behavior diff_html had, exposed thr\n[…]\n quick_check's tests dropped wholesale.\n\ndist/index.js: 54 KB → 52 KB.\n\nStale references scrubbed from audit-browser-collect and audit-live-page\ndescriptions, the filters.ts comment, and both READMEs.",
"is_bot": false,
"headline": "mcp: drop diff_html and quick_check; fold explicit-baseline into audi…",
"author_name": "Cameron Cundiff",
"author_login": "ckundo",
"committed_at": "2026-05-02T16:16:09Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "ad2c7429acb271272dc43cbb0434ec3ddaa50d7e",
"body": null,
"is_bot": false,
"headline": "Release @accesslint/mcp v0.7.2",
"author_name": "Cameron Cundiff",
"author_login": "ckundo",
"committed_at": "2026-05-02T16:07:18Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "9027d9d6f1d4c712e429972b5da58521f62608b5",
"body": "Several spots were stale relative to the chrome-launcher work in 0.7.1:\naudit_live no longer requires `--remote-debugging-port=9222`, the\nexisting-session path is the right framing for audit_browser_script\n(not \"CDP unreachable\"), and the live-page auditing section still\nreferenced audit_url as a final fallback. Setup section now mentions\nthat a Chrome install must be discoverable on the system and points\nexisting-session users at chrome-devtools-mcp.",
"is_bot": false,
"headline": "mcp: refresh README for v0.7.x auto-launch flow",
"author_name": "Cameron Cundiff",
"author_login": "ckundo",
"committed_at": "2026-05-02T16:06:53Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "9e447da2d35e10dfcf6a12e0b8f1f5b7a04b7a79",
"body": null,
"is_bot": false,
"headline": "Release @accesslint/mcp v0.7.1",
"author_name": "Cameron Cundiff",
"author_login": "ckundo",
"committed_at": "2026-05-01T23:16:13Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5907f6417ddc346453f0907af5c259be2c7ce910",
"body": "…rowser MCP\n\n- Add chrome-launcher dep; auto-launch Chrome minimized in runLiveAudit\n when no CDP endpoint is reachable instead of erroring\n- Reuse the managed Chrome instance for the MCP process lifetime\n- Remove all user-facing instructions to start Chrome with --remote-debugging-port\n- Reframe audit_browser_script / audit-live-page as existing-session paths,\n not general fallbacks\n- Trim verbose descriptions on audit_live and audit_browser_script schemas",
"is_bot": false,
"headline": "mcp: auto-launch Chrome via chrome-launcher; prefer audit_live over b…",
"author_name": "Cameron Cundiff",
"author_login": "ckundo",
"committed_at": "2026-05-01T16:17:51Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "dabdcc174b0d2d66fef5be25d0ec454b9fd01bc2",
"body": null,
"is_bot": false,
"headline": "Release @accesslint/mcp v0.7.0",
"author_name": "Cameron Cundiff",
"author_login": "ckundo",
"committed_at": "2026-05-01T15:40:31Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d8800f60d8c5f011bc37c18959523fb444bdfc31",
"body": "Live-DOM auditing now has two paths instead of three. The new audit_live\ntool attaches to Chrome over the DevTools Protocol and pushes\n@accesslint/core into the page through Runtime.evaluate — privileged\ncontext, so no CSP wrangling and no IIFE round-trip through agent\ncontext. The audit_browser_scr\n[…]\nonged in the CLI's own suite).\n153 → 114 total.\n\ndist/index.js: 62 KB → 54 KB.\n\nEnd-to-end smoke against headless Chrome confirmed audit_live finds\nviolations on a test page through the full CDP flow.",
"is_bot": false,
"headline": "mcp: add audit_live (direct CDP) and drop static URL/file audits",
"author_name": "Cameron Cundiff",
"author_login": "ckundo",
"committed_at": "2026-05-01T15:40:05Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "ce39a2739f81aa80d899c1b35e557955957b04bd",
"body": "Fix frame-focusable-content rule to correctly evaluate srcdoc iframes:\n- Parse srcdoc attribute via DOMParser when contentDocument is not yet\n populated (srcdoc loads asynchronously in the ACT test environment)\n- Detect the HTML hidden attribute via frame.hidden in isHiddenFrame\n- Exclude inner ele\n[…]\ns with tabindex=\"-1\" from the focusable check\n- Skip iframes outside an open modal dialog (focus is trapped inside)\n\nAll 531 ACT browser tests now pass (7 skipped for Shadow DOM/external\nstylesheets).",
"is_bot": false,
"headline": "Release @accesslint/core v0.12.1",
"author_name": "Cameron Cundiff",
"author_login": "ckundo",
"committed_at": "2026-04-27T22:02:29Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "cabddbbe68d7c095b0b3cd57b267930079aee1cf",
"body": "Add applicable() guards to 33 rules so the ACT runner emits earl:inapplicable\ninstead of earl:passed when no test targets exist in a fixture, fixing ~165\nwrong EARL outcomes that were causing 28 rules to show as \"partial\" on the\nW3C ACT implementations page.\n\nAlso adds the new frame-focusable-content rule (ACT akn7bn) and wires up\nactRuleIds for frame-title-unique (ACT 4b1c6c).",
"is_bot": false,
"headline": "Release @accesslint/core v0.12.0",
"author_name": "Cameron Cundiff",
"author_login": "ckundo",
"committed_at": "2026-04-26T22:58:01Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d647fe7ba1ded6369de6b266734bd90544a8e4de",
"body": null,
"is_bot": false,
"headline": "Add root README note linking to @accesslint/mcp and Claude Code plugin",
"author_name": "Cameron Cundiff",
"author_login": "ckundo",
"committed_at": "2026-04-26T21:45:18Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4e7446d7965c39fedf38ec0550d4adc2c81f4da6",
"body": null,
"is_bot": false,
"headline": "core: add README note linking to @accesslint/mcp and Claude Code plugin",
"author_name": "Cameron Cundiff",
"author_login": "ckundo",
"committed_at": "2026-04-26T21:40:49Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0feaad61131e34ebc8aec3d684597316df0e1acd",
"body": "Adds an entry under API for the React fiber source-mapping\npost-processor, expands the `Violation` type to show the optional\n`source` field, and documents `SourceLocation`. Updates the IIFE\ngzipped-size figure (43 KB → 46 KB) to match the current build.",
"is_bot": false,
"headline": "core: document attachReactFiberSource and Violation.source in README",
"author_name": "Cameron Cundiff",
"author_login": "ckundo",
"committed_at": "2026-04-26T21:35:21Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b769f9b01c33d643b9de6b08c23bf0a22f41d594",
"body": "Workflow rewrites `workspace:*` to `^X.Y.Z` instead of an exact pin.\nFuture patch releases of @accesslint/core (0.11.x) flow through to\nfresh `npm install @accesslint/mcp` runs without needing an MCP\nrepublish — the runtime CDN URL is built from whatever core version\nnpm resolved at install time.",
"is_bot": false,
"headline": "mcp: release v0.6.1; publish core dep as caret range",
"author_name": "Cameron Cundiff",
"author_login": "ckundo",
"committed_at": "2026-04-26T19:49:52Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "68f6d4c5947172a66b9e3980428aef9b9fcf2beb",
"body": null,
"is_bot": false,
"headline": "Release @accesslint/core v0.11.1",
"author_name": "Cameron Cundiff",
"author_login": "ckundo",
"committed_at": "2026-04-26T19:49:50Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e6ee385e8b61ec76a6500257feb4377af6d23d15",
"body": "Switch attachReactFiberSource over to the in-house parser added in the\nprevious commit. Resolves the silent failure on Turbopack/Next 16 dev\nbuilds where trace-mapping@0.3.30+ throws on sectioned (indexed) source\nmaps with `\"TraceMap passed sectioned source map, please use FlattenMap\nexport instead\"\n[…]\nr building test fixtures\n\n@accesslint/core now has zero runtime dependencies.\n\nVerified end-to-end on a Next 16 / React 19 / Turbopack dev build:\n182/182 violations resolved to real source-file paths.",
"is_bot": false,
"headline": "core: drop @jridgewell/trace-mapping; use in-house source-map parser",
"author_name": "Cameron Cundiff",
"author_login": "ckundo",
"committed_at": "2026-04-26T19:47:11Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "67b1020bbc80d6c36a2dc64dc493a0545f82573c",
"body": "Implements the subset of the V3 source-map spec needed to resolve a\ngenerated (line, column) to an original (source, line, column, name).\nHandles both flat maps (single `mappings` string) and sectioned/indexed\nmaps (top-level `sections[]`, emitted by Turbopack and some Vite plugins).\n\nPure functions\n[…]\nlution, segment selection, sectioned\ndispatch with line/column offset translation, sourceRoot prefixing, and\nmalformed input.\n\nNot yet wired into react-fiber.ts — that swap follows in the next commit.",
"is_bot": false,
"headline": "core: add in-house V3 source-map parser",
"author_name": "Cameron Cundiff",
"author_login": "ckundo",
"committed_at": "2026-04-26T19:46:27Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "332933f4972a5eb96c7ef160287588d4d5ccea3a",
"body": null,
"is_bot": false,
"headline": "Release @accesslint/mcp v0.6.0",
"author_name": "Cameron Cundiff",
"author_login": "ckundo",
"committed_at": "2026-04-26T19:30:38Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e30545ea77f58e1bbf02f307cf73feaf69e55e0e",
"body": "Core's React fiber probe is async (sourcemap resolution happens in-page\nvia fetch). The bootstrap was already async, so adding `await` is\nmechanical. Format-test fixtures drop the removed `strategy` /\n`confidence` fields and add `ownerDepth`; rendered output is unchanged.",
"is_bot": false,
"headline": "mcp: await the now-async attachReactFiberSource; align fixtures",
"author_name": "Cameron Cundiff",
"author_login": "ckundo",
"committed_at": "2026-04-26T19:30:29Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5ac599961d70c788b791f605e43eae8fb25092c8",
"body": null,
"is_bot": false,
"headline": "Release @accesslint/core v0.11.0",
"author_name": "Cameron Cundiff",
"author_login": "ckundo",
"committed_at": "2026-04-26T19:30:21Z",
"body_truncated": false,
"is_coding_agent": false
}
],
"releases_count": 65,
"commits_last_year": 226,
"latest_release_at": "2026-07-26T23:38:48Z",
"latest_release_tag": "playwright/v0.8.0",
"releases_from_tags": false,
"days_since_last_push": 0,
"active_weeks_last_year": 6,
"days_since_latest_release": 0,
"mean_days_between_releases": 0.8
},
"community": {
"has_readme": true,
"has_license": false,
"has_description": true,
"has_contributing": false,
"health_percentage": 37,
"has_issue_template": false,
"has_code_of_conduct": false,
"has_pull_request_template": false
},
"ecosystem": {
"packages": [
{
"name": "@accesslint/cli",
"exists": true,
"license": "MIT",
"keywords": [],
"ecosystem": "npm",
"matches_repo": true,
"registry_url": "https://www.npmjs.com/package/@accesslint/cli",
"is_deprecated": false,
"latest_version": "0.12.0",
"repository_url": "https://github.com/AccessLint/accesslint",
"versions_count": 26,
"total_downloads": null,
"dependents_count": null,
"deprecation_note": null,
"maintainers_count": 1,
"monthly_downloads": 2932,
"first_published_at": "2026-02-24T02:02:42.526000Z",
"latest_published_at": "2026-07-20T17:59:08.874000Z",
"latest_version_yanked": null,
"days_since_latest_publish": 6
},
{
"name": "@accesslint/mcp",
"exists": true,
"license": "MIT",
"keywords": [],
"ecosystem": "npm",
"matches_repo": true,
"registry_url": "https://www.npmjs.com/package/@accesslint/mcp",
"is_deprecated": false,
"latest_version": "0.10.0",
"repository_url": "https://github.com/AccessLint/accesslint",
"versions_count": 22,
"total_downloads": null,
"dependents_count": null,
"deprecation_note": null,
"maintainers_count": 1,
"monthly_downloads": 2163,
"first_published_at": "2025-11-05T23:42:19.262000Z",
"latest_published_at": "2026-06-05T01:46:22.001000Z",
"latest_version_yanked": null,
"days_since_latest_publish": 52
},
{
"name": "@accesslint/core",
"exists": true,
"license": "MIT",
"keywords": [],
"ecosystem": "npm",
"matches_repo": true,
"registry_url": "https://www.npmjs.com/package/@accesslint/core",
"is_deprecated": false,
"latest_version": "0.16.0",
"repository_url": "https://github.com/AccessLint/accesslint",
"versions_count": 56,
"total_downloads": null,
"dependents_count": null,
"deprecation_note": null,
"maintainers_count": 1,
"monthly_downloads": 32895,
"first_published_at": "2026-02-05T01:09:13.656000Z",
"latest_published_at": "2026-07-20T17:59:32.541000Z",
"latest_version_yanked": null,
"days_since_latest_publish": 6
},
{
"name": "@accesslint/jest",
"exists": true,
"license": "MIT",
"keywords": [
"jest",
"accessibility",
"a11y",
"wcag",
"aria",
"accesslint",
"matcher",
"testing",
"jest-axe-alternative",
"react-testing-library",
"testing-library",
"jsdom"
],
"ecosystem": "npm",
"matches_repo": true,
"registry_url": "https://www.npmjs.com/package/@accesslint/jest",
"is_deprecated": false,
"latest_version": "0.1.3",
"repository_url": "https://github.com/AccessLint/accesslint",
"versions_count": 4,
"total_downloads": null,
"dependents_count": null,
"deprecation_note": null,
"maintainers_count": 1,
"monthly_downloads": 52,
"first_published_at": "2026-04-18T01:58:41.242000Z",
"latest_published_at": "2026-07-26T23:35:15.161000Z",
"latest_version_yanked": null,
"days_since_latest_publish": 0
},
{
"name": "@accesslint/chrome",
"exists": true,
"license": "MIT",
"keywords": [],
"ecosystem": "npm",
"matches_repo": true,
"registry_url": "https://www.npmjs.com/package/@accesslint/chrome",
"is_deprecated": false,
"latest_version": "0.2.0",
"repository_url": "https://github.com/AccessLint/accesslint",
"versions_count": 4,
"total_downloads": null,
"dependents_count": null,
"deprecation_note": null,
"maintainers_count": 1,
"monthly_downloads": 1296,
"first_published_at": "2026-06-02T00:34:33.153000Z",
"latest_published_at": "2026-06-02T02:32:58.971000Z",
"latest_version_yanked": null,
"days_since_latest_publish": 55
},
{
"name": "@accesslint/report",
"exists": true,
"license": "MIT",
"keywords": [],
"ecosystem": "npm",
"matches_repo": true,
"registry_url": "https://www.npmjs.com/package/@accesslint/report",
"is_deprecated": false,
"latest_version": "0.1.1",
"repository_url": "https://github.com/AccessLint/accesslint",
"versions_count": 2,
"total_downloads": null,
"dependents_count": null,
"deprecation_note": null,
"maintainers_count": 1,
"monthly_downloads": 49,
"first_published_at": "2026-04-18T19:02:42.746000Z",
"latest_published_at": "2026-04-18T19:17:40.880000Z",
"latest_version_yanked": null,
"days_since_latest_publish": 99
},
{
"name": "@accesslint/vitest",
"exists": true,
"license": "MIT",
"keywords": [
"vitest",
"accessibility",
"a11y",
"wcag",
"aria",
"accesslint",
"matcher",
"testing"
],
"ecosystem": "npm",
"matches_repo": true,
"registry_url": "https://www.npmjs.com/package/@accesslint/vitest",
"is_deprecated": false,
"latest_version": "0.3.2",
"repository_url": "https://github.com/AccessLint/accesslint",
"versions_count": 11,
"total_downloads": null,
"dependents_count": null,
"deprecation_note": null,
"maintainers_count": 1,
"monthly_downloads": 24978,
"first_published_at": "2026-02-17T03:04:04.729000Z",
"latest_published_at": "2026-07-26T23:35:17.216000Z",
"latest_version_yanked": null,
"days_since_latest_publish": 0
},
{
"name": "@accesslint/codemod",
"exists": true,
"license": "MIT",
"keywords": [
"accesslint",
"codemod",
"jscodeshift",
"jest-axe",
"migration",
"accessibility",
"a11y",
"jest"
],
"ecosystem": "npm",
"matches_repo": true,
"registry_url": "https://www.npmjs.com/package/@accesslint/codemod",
"is_deprecated": false,
"latest_version": "0.1.2",
"repository_url": "https://github.com/AccessLint/accesslint",
"versions_count": 3,
"total_downloads": null,
"dependents_count": null,
"deprecation_note": null,
"maintainers_count": 1,
"monthly_downloads": 52,
"first_published_at": "2026-04-18T14:59:26.877000Z",
"latest_published_at": "2026-04-18T15:19:35.834000Z",
"latest_version_yanked": null,
"days_since_latest_publish": 99
}
]
},
"popularity": {
"forks": 3,
"stars": 5,
"watchers": 2,
"fork_history": {
"days": [
{
"date": "2026-06-09",
"count": 1
},
{
"date": "2026-06-20",
"count": 1
},
{
"date": "2026-07-17",
"count": 1
}
],
"complete": true,
"collected": 3,
"total_forks": 3
},
"star_history": null,
"open_issues_and_prs": 0
},
"ai_readiness": {
"has_nix": false,
"example_dirs": [],
"has_llms_txt": false,
"has_dockerfile": false,
"has_mcp_signal": true,
"bootstrap_files": [
".mise.toml",
"cli/.mise.toml"
],
"api_schema_files": [],
"has_devcontainer": false,
"typecheck_configs": [
"bench/tsconfig.json",
"chrome/tsconfig.json",
"cli/tsconfig.json",
"codemod/tsconfig.json",
"core/tsconfig.json",
"heal-diff/tsconfig.json",
"jest/tsconfig.json",
"matchers-internal/tsconfig.json",
"mcp/tsconfig.json",
"playwright/tsconfig.json",
"report/tsconfig.json",
"storybook-addon/tsconfig.json",
"vitest/tsconfig.json"
],
"toolchain_manifests": [],
"largest_source_bytes": 65374,
"source_files_sampled": 394,
"oversized_source_files": 1,
"agent_instruction_files": [],
"agent_instruction_max_bytes": null
},
"dependencies": {
"manifests": [
"bench/package.json",
"chrome/package.json",
"cli/package.json",
"codemod/package.json",
"core/package.json",
"heal-diff/package.json",
"jest/package.json",
"matchers-internal/package.json",
"mcp/package.json",
"package.json",
"playwright/package.json",
"report/package.json",
"storybook-addon/package.json",
"vitest/package.json"
],
"advisories": {
"error": null,
"scope": "published_package",
"source": "osv",
"findings": [],
"collected": true,
"malicious": [],
"truncated": false,
"by_severity": {},
"advisory_count": 0,
"affected_count": 0,
"assessed_count": 30,
"malicious_count": 0,
"assessed_package": "npm:@accesslint/cli@0.12.0",
"unassessed_count": 0,
"direct_affected_count": 0
},
"ecosystems": [
"npm"
],
"dependencies": [
{
"name": "@accesslint/core",
"manifest": "bench/package.json",
"ecosystem": "npm",
"version_constraint": "workspace:*"
},
{
"name": "axe-core",
"manifest": "bench/package.json",
"ecosystem": "npm",
"version_constraint": "latest"
},
{
"name": "@puppeteer/browsers",
"manifest": "chrome/package.json",
"ecosystem": "npm",
"version_constraint": "^3.0.4"
},
{
"name": "chrome-launcher",
"manifest": "chrome/package.json",
"ecosystem": "npm",
"version_constraint": "^1.2.1"
},
{
"name": "@accesslint/chrome",
"manifest": "cli/package.json",
"ecosystem": "npm",
"version_constraint": "workspace:*"
},
{
"name": "@accesslint/core",
"manifest": "cli/package.json",
"ecosystem": "npm",
"version_constraint": "workspace:*"
},
{
"name": "chrome-remote-interface",
"manifest": "cli/package.json",
"ecosystem": "npm",
"version_constraint": "^0.34.0"
},
{
"name": "citty",
"manifest": "codemod/package.json",
"ecosystem": "npm",
"version_constraint": "^0.1.6"
},
{
"name": "jscodeshift",
"manifest": "codemod/package.json",
"ecosystem": "npm",
"version_constraint": "^17.1.2"
},
{
"name": "@accesslint/core",
"manifest": "jest/package.json",
"ecosystem": "npm",
"version_constraint": "workspace:*"
},
{
"name": "@accesslint/core",
"manifest": "matchers-internal/package.json",
"ecosystem": "npm",
"version_constraint": "workspace:*"
},
{
"name": "@accesslint/heal-diff",
"manifest": "matchers-internal/package.json",
"ecosystem": "npm",
"version_constraint": "workspace:*"
},
{
"name": "@accesslint/chrome",
"manifest": "mcp/package.json",
"ecosystem": "npm",
"version_constraint": "workspace:*"
},
{
"name": "@accesslint/cli",
"manifest": "mcp/package.json",
"ecosystem": "npm",
"version_constraint": "workspace:*"
},
{
"name": "@accesslint/core",
"manifest": "mcp/package.json",
"ecosystem": "npm",
"version_constraint": "workspace:*"
},
{
"name": "@modelcontextprotocol/sdk",
"manifest": "mcp/package.json",
"ecosystem": "npm",
"version_constraint": "^1.12.1"
},
{
"name": "zod",
"manifest": "mcp/package.json",
"ecosystem": "npm",
"version_constraint": "^3.24.0"
},
{
"name": "@accesslint/core",
"manifest": "playwright/package.json",
"ecosystem": "npm",
"version_constraint": "workspace:*"
},
{
"name": "@accesslint/core",
"manifest": "report/package.json",
"ecosystem": "npm",
"version_constraint": "workspace:*"
},
{
"name": "@accesslint/core",
"manifest": "storybook-addon/package.json",
"ecosystem": "npm",
"version_constraint": "workspace:*"
},
{
"name": "@accesslint/vitest",
"manifest": "storybook-addon/package.json",
"ecosystem": "npm",
"version_constraint": "workspace:*"
},
{
"name": "@accesslint/core",
"manifest": "vitest/package.json",
"ecosystem": "npm",
"version_constraint": "workspace:*"
}
],
"all_dependencies": {
"error": "GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository",
"source": null,
"packages": [],
"collected": false,
"truncated": false,
"total_count": null,
"direct_count": null,
"indirect_count": null
}
},
"maintainership": {
"issues": {
"open_prs": 0,
"merged_prs": 5,
"open_issues": 0,
"closed_ratio": 1,
"closed_issues": 2,
"closed_unmerged_prs": 1
},
"bus_factor": 1,
"bot_contributors": 0,
"top_contributors": [
{
"type": "User",
"login": "ckundo",
"commits": 223,
"avatar_url": "https://avatars.githubusercontent.com/u/108163?v=4"
},
{
"type": "User",
"login": "jaimeiniesta",
"commits": 3,
"avatar_url": "https://avatars.githubusercontent.com/u/2629?v=4"
}
],
"contributors_sampled": 2,
"top_contributor_share": 0.987
},
"quality_signals": {
"has_ci": true,
"has_tests": true,
"ci_workflows": [
"publish-chrome.yml",
"publish-cli.yml",
"publish-codemod.yml",
"publish-core.yml",
"publish-heal-diff.yml",
"publish-jest.yml",
"publish-mcp.yml",
"publish-playwright.yml",
"publish-report.yml",
"publish-storybook-addon.yml",
"publish-vitest.yml",
"test-core.yml",
"test-mcp.yml",
"web-bench.yml"
],
"has_docs_dir": false,
"linter_configs": [
"eslint.config.js"
],
"has_editorconfig": false,
"has_linter_config": true,
"has_precommit_config": false
},
"security_signals": {
"lockfiles": [],
"scorecard": {
"checks": [
{
"name": "Binary-Artifacts",
"score": 10,
"reason": "no binaries found in the repo",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#binary-artifacts"
},
{
"name": "Branch-Protection",
"score": 0,
"reason": "branch protection not enabled on development/release branches",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#branch-protection"
},
{
"name": "CI-Tests",
"score": 10,
"reason": "4 out of 4 merged PRs checked by a CI test -- score normalized to 10",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#ci-tests"
},
{
"name": "CII-Best-Practices",
"score": 0,
"reason": "no effort to earn an OpenSSF best practices badge detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#cii-best-practices"
},
{
"name": "Code-Review",
"score": 0,
"reason": "Found 1/18 approved changesets -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#code-review"
},
{
"name": "Contributors",
"score": 10,
"reason": "project has 4 contributing companies or organizations",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#contributors"
},
{
"name": "Dangerous-Workflow",
"score": 10,
"reason": "no dangerous workflow patterns detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dangerous-workflow"
},
{
"name": "Dependency-Update-Tool",
"score": 0,
"reason": "no update tool detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dependency-update-tool"
},
{
"name": "Fuzzing",
"score": 0,
"reason": "project is not fuzzed",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#fuzzing"
},
{
"name": "License",
"score": 0,
"reason": "license file not detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#license"
},
{
"name": "Maintained",
"score": 10,
"reason": "30 commit(s) and 1 issue activity found in the last 90 days -- score normalized to 10",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#maintained"
},
{
"name": "Packaging",
"score": 10,
"reason": "packaging workflow detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#packaging"
},
{
"name": "Pinned-Dependencies",
"score": 0,
"reason": "dependency not pinned by hash detected -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#pinned-dependencies"
},
{
"name": "SAST",
"score": 0,
"reason": "SAST tool is not run on all commits -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#sast"
},
{
"name": "Security-Policy",
"score": 0,
"reason": "security policy file not detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#security-policy"
},
{
"name": "Signed-Releases",
"score": null,
"reason": "no releases found",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#signed-releases"
},
{
"name": "Token-Permissions",
"score": 0,
"reason": "detected GitHub workflow tokens with excessive permissions",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#token-permissions"
},
{
"name": "Vulnerabilities",
"score": 0,
"reason": "47 existing vulnerabilities detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#vulnerabilities"
}
],
"commit": "f1aab190fb8cf050969823589ca731568eaa56f4",
"ran_at": "2026-07-27T08:27:33Z",
"aggregate_score": 3.6,
"scorecard_version": "v5.5.0"
},
"has_codeql_workflow": false,
"has_security_policy": false,
"has_dependabot_config": false
},
"contribution_flow": {
"collected": true,
"ci_last_run_at": "2026-07-26T23:46:23Z",
"oldest_open_prs": [],
"last_merged_pr_at": "2026-07-26T23:45:29Z",
"ci_last_conclusion": "SUCCESS",
"oldest_open_issues": []
}
},
"config": {
"disabled_metrics": [],
"disabled_categories": [],
"disabled_components": {}
},
"source": {
"url": "https://github.com/AccessLint/accesslint",
"host": "github.com",
"name": "accesslint",
"owner": "AccessLint"
},
"metrics": {
"overall": {
"key": "overall",
"band": "moderate",
"name": "Overall health",
"note": null,
"notes": [],
"value": 61,
"inputs": {
"security": 49,
"vitality": 81,
"community": 34,
"governance": 63,
"engineering": 70
},
"components": []
},
"categories": [
{
"key": "vitality",
"band": "good",
"name": "Vitality",
"value": 81,
"weight": 0.22,
"metrics": [
{
"key": "development_activity",
"band": "moderate",
"name": "Development activity",
"note": null,
"notes": [],
"value": 68,
"inputs": {
"commits_last_year": 226,
"human_commit_share": 1,
"days_since_last_push": 0,
"active_weeks_last_year": 6
},
"components": [
{
"key": "push_recency",
"name": "Push recency",
"detail": "last push 0 days ago",
"points": 36,
"status": "met",
"details": [
{
"code": "push_recency",
"params": {
"days": 0
}
}
],
"max_points": 36
},
{
"key": "commit_cadence",
"name": "Commit cadence",
"detail": "6/52 weeks with commits",
"points": 4.2,
"status": "partial",
"details": [
{
"code": "commit_cadence_weeks",
"params": {
"weeks": 6
}
}
],
"max_points": 36
},
{
"key": "commit_volume",
"name": "Commit volume",
"detail": "226 commits in the last year",
"points": 18,
"status": "met",
"details": [
{
"code": "commits_last_year",
"params": {
"count": 226
}
}
],
"max_points": 18
},
{
"key": "openssf_scorecard_maintained",
"name": "OpenSSF Scorecard: Maintained",
"detail": "30 commit(s) and 1 issue activity found in the last 90 days -- score normalized to 10",
"points": 10,
"status": "met",
"details": [],
"max_points": 10
}
]
},
{
"key": "release_discipline",
"band": "excellent",
"name": "Release discipline",
"note": "Excluded from scoring (no data or not applicable): OpenSSF Scorecard: Signed-Releases. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"openssf_scorecard_signed_releases"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 100,
"inputs": {
"releases_count": 65,
"latest_release_tag": "playwright/v0.8.0",
"releases_from_tags": false,
"days_since_latest_release": 0,
"mean_days_between_releases": 0.8
},
"components": [
{
"key": "ships_releases",
"name": "Ships releases",
"detail": "65 releases published",
"points": 27,
"status": "met",
"details": [
{
"code": "releases_published",
"params": {
"count": 65
}
}
],
"max_points": 27
},
{
"key": "release_recency",
"name": "Release recency",
"detail": "latest release 0 days ago",
"points": 36,
"status": "met",
"details": [
{
"code": "release_recency",
"params": {
"days": 0
}
}
],
"max_points": 36
},
{
"key": "release_cadence",
"name": "Release cadence",
"detail": "a release every ~0.8 days",
"points": 27,
"status": "met",
"details": [
{
"code": "release_cadence",
"params": {
"gap": 0.8
}
}
],
"max_points": 27
},
{
"key": "openssf_scorecard_signed_releases",
"name": "OpenSSF Scorecard: Signed-Releases",
"detail": "no releases found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 10
}
]
},
{
"key": "abandonment",
"band": "excellent",
"name": "Abandonment",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"cap": null,
"state": "unverified",
"guards": [],
"signals": [],
"red_flag": false,
"multiplier_pct": 100,
"declared_reason": null,
"unverified_reason": "repository_too_young",
"unanswered_open_prs": null,
"unanswered_open_issues": null,
"days_since_last_merged_pr": null,
"days_since_last_human_commit": null,
"days_since_last_human_commit_is_floor": false
},
"components": [
{
"key": "project_is_still_maintained",
"name": "Project is still maintained",
"detail": "maintenance record not established from the collected data",
"points": 100,
"status": "met",
"details": [
{
"code": "abandonment_unverified",
"params": {}
}
],
"max_points": 100
}
]
}
],
"description": "Is the project alive — is code being written and are releases shipping?"
},
{
"key": "community",
"band": "at_risk",
"name": "Community & Adoption",
"value": 34,
"weight": 0.18,
"metrics": [
{
"key": "popularity",
"band": "critical",
"name": "Popularity & adoption",
"note": null,
"notes": [],
"value": 12,
"inputs": {
"forks": 3,
"stars": 5,
"watchers": 2,
"growth_state": "unverified",
"growth_factor_pct": 100,
"growth_unverified_reason": "no_history"
},
"components": [
{
"key": "stars",
"name": "Stars",
"detail": "5 stars",
"points": 9.8,
"status": "partial",
"details": [
{
"code": "stars",
"params": {
"count": 5
}
}
],
"max_points": 60
},
{
"key": "forks",
"name": "Forks",
"detail": "3 forks",
"points": 2.5,
"status": "partial",
"details": [
{
"code": "forks",
"params": {
"count": 3
}
}
],
"max_points": 25
},
{
"key": "watchers",
"name": "Watchers",
"detail": "2 watchers",
"points": 0,
"status": "missed",
"details": [
{
"code": "watchers",
"params": {
"count": 2
}
}
],
"max_points": 15
}
]
},
{
"key": "community_health",
"band": "critical",
"name": "Community health",
"note": null,
"notes": [],
"value": 25,
"inputs": {
"has_readme": true,
"has_license": false,
"has_contributing": false,
"has_issue_template": false,
"has_code_of_conduct": false,
"has_pull_request_template": false
},
"components": [
{
"key": "readme",
"name": "README",
"detail": null,
"points": 22.5,
"status": "met",
"details": [],
"max_points": 22.5
},
{
"key": "license",
"name": "License",
"detail": "no license file detected",
"points": 0,
"status": "missed",
"details": [
{
"code": "license_absent",
"params": {}
}
],
"max_points": 22.5
},
{
"key": "contributing_guide",
"name": "CONTRIBUTING guide",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 18
},
{
"key": "code_of_conduct",
"name": "Code of conduct",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 13.5
},
{
"key": "issue_template",
"name": "Issue template",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.2
},
{
"key": "pr_template",
"name": "PR template",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 6.3
}
]
},
{
"key": "ecosystem_adoption",
"band": "good",
"name": "Ecosystem adoption (downloads)",
"note": "Excluded from scoring (no data or not applicable): Registry dependents. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"registry_dependents"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 80,
"inputs": {
"packages": [
"@accesslint/cli",
"@accesslint/mcp",
"@accesslint/core",
"@accesslint/jest",
"@accesslint/chrome",
"@accesslint/report",
"@accesslint/vitest",
"@accesslint/codemod"
],
"dependents": null,
"ecosystems": "npm",
"total_downloads": null,
"monthly_downloads": 64417
},
"components": [
{
"key": "monthly_downloads",
"name": "Monthly downloads",
"detail": "64,417 downloads/month across npm",
"points": 64.1,
"status": "partial",
"details": [
{
"code": "downloads_monthly",
"params": {
"count": 64417,
"ecosystems": "npm"
}
}
],
"max_points": 80
},
{
"key": "registry_dependents",
"name": "Registry dependents",
"detail": "not reported by this ecosystem",
"points": 0,
"status": "excluded",
"details": [
{
"code": "not_reported_by_this_ecosystem",
"params": {}
}
],
"max_points": 20
}
]
}
],
"description": "Does the project have users, downloads, attention, and a welcoming setup for contributors?"
},
{
"key": "governance",
"band": "moderate",
"name": "Sustainability & Governance",
"value": 63,
"weight": 0.24,
"metrics": [
{
"key": "maintainer_resilience",
"band": "critical",
"name": "Maintainer resilience (bus factor)",
"note": null,
"notes": [],
"value": 22,
"inputs": {
"bus_factor": 1,
"contributors_sampled": 2,
"top_contributor_share": 0.987
},
"components": [
{
"key": "bus_factor",
"name": "Bus factor",
"detail": "1 contributor(s) cover half of all commits",
"points": 9,
"status": "partial",
"details": [
{
"code": "bus_factor",
"params": {
"count": 1
}
}
],
"max_points": 54
},
{
"key": "commit_distribution",
"name": "Commit distribution",
"detail": "top contributor authored 99% of commits",
"points": 0.3,
"status": "partial",
"details": [
{
"code": "top_contributor_share",
"params": {
"share": 99
}
}
],
"max_points": 22.5
},
{
"key": "contributor_breadth",
"name": "Contributor breadth",
"detail": "2 contributors",
"points": 2.7,
"status": "partial",
"details": [
{
"code": "contributors_sampled",
"params": {
"count": 2
}
}
],
"max_points": 13.5
},
{
"key": "openssf_scorecard_contributors",
"name": "OpenSSF Scorecard: Contributors",
"detail": "project has 4 contributing companies or organizations",
"points": 10,
"status": "met",
"details": [],
"max_points": 10
}
]
},
{
"key": "responsiveness",
"band": "good",
"name": "Issue & PR responsiveness",
"note": null,
"notes": [],
"value": 79,
"inputs": {
"merged_prs": 5,
"open_issues": 0,
"closed_issues": 2,
"issue_closed_ratio": 1,
"closed_unmerged_prs": 1
},
"components": [
{
"key": "issue_resolution",
"name": "Issue resolution",
"detail": "100% of issues closed",
"points": 46.8,
"status": "met",
"details": [
{
"code": "issues_closed_share",
"params": {
"share": 100
}
}
],
"max_points": 46.75
},
{
"key": "pr_acceptance",
"name": "PR acceptance",
"detail": "5/6 decided PRs merged",
"points": 31.9,
"status": "partial",
"details": [
{
"code": "decided_prs_merged",
"params": {
"merged": 5,
"decided": 6
}
}
],
"max_points": 38.25
},
{
"key": "openssf_scorecard_code_review",
"name": "OpenSSF Scorecard: Code-Review",
"detail": "Found 1/18 approved changesets -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
}
]
},
{
"key": "stewardship",
"band": "moderate",
"name": "Ownership & stewardship",
"note": null,
"notes": [],
"value": 65,
"inputs": {
"followers": 61,
"owner_type": "Organization",
"is_verified": null,
"owner_login": "AccessLint",
"public_repos": 24,
"account_age_days": 4245
},
"components": [
{
"key": "ownership_backing",
"name": "Ownership backing",
"detail": "organization-owned",
"points": 30,
"status": "met",
"details": [
{
"code": "owner_organization",
"params": {}
}
],
"max_points": 30
},
{
"key": "verified_domain",
"name": "Verified domain",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 20
},
{
"key": "owner_reach",
"name": "Owner reach",
"detail": "61 followers of AccessLint",
"points": 12.9,
"status": "partial",
"details": [
{
"code": "owner_followers",
"params": {
"count": 61,
"login": "AccessLint"
}
}
],
"max_points": 25
},
{
"key": "track_record",
"name": "Track record",
"detail": "24 public repos, account ~11 yr old",
"points": 22.2,
"status": "partial",
"details": [
{
"code": "public_repos",
"params": {
"count": 24
}
},
{
"code": "account_age_years",
"params": {
"years": 11
}
}
],
"max_points": 25
}
]
},
{
"key": "package_maintenance",
"band": "excellent",
"name": "Package maintenance",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"packages": [
"@accesslint/cli",
"@accesslint/mcp",
"@accesslint/core",
"@accesslint/jest",
"@accesslint/chrome",
"@accesslint/report",
"@accesslint/vitest",
"@accesslint/codemod"
],
"ecosystems": "npm",
"any_deprecated": false,
"min_days_since_publish": 0
},
"components": [
{
"key": "published_resolvable",
"name": "Published & resolvable",
"detail": "8 package(s) on npm",
"points": 25,
"status": "met",
"details": [
{
"code": "packages_published",
"params": {
"count": 8,
"ecosystems": "npm"
}
}
],
"max_points": 25
},
{
"key": "publish_recency",
"name": "Publish recency",
"detail": "latest publish 0 days ago",
"points": 35,
"status": "met",
"details": [
{
"code": "publish_recency",
"params": {
"days": 0
}
}
],
"max_points": 35
},
{
"key": "version_history",
"name": "Version history",
"detail": "56 published versions",
"points": 20,
"status": "met",
"details": [
{
"code": "published_versions",
"params": {
"count": 56
}
}
],
"max_points": 20
},
{
"key": "not_deprecated",
"name": "Not deprecated",
"detail": "active, not deprecated or yanked",
"points": 20,
"status": "met",
"details": [
{
"code": "package_not_deprecated",
"params": {}
}
],
"max_points": 20
}
]
}
],
"description": "Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?"
},
{
"key": "engineering",
"band": "good",
"name": "Engineering Quality",
"value": 70,
"weight": 0.2,
"metrics": [
{
"key": "engineering_practices",
"band": "good",
"name": "Engineering practices",
"note": null,
"notes": [],
"value": 84,
"inputs": {
"has_ci": true,
"has_tests": true,
"has_editorconfig": false,
"has_linter_config": true,
"has_precommit_config": false
},
"components": [
{
"key": "ci_workflows",
"name": "CI workflows",
"detail": "14 workflow(s)",
"points": 24,
"status": "met",
"details": [
{
"code": "ci_workflows",
"params": {
"count": 14
}
}
],
"max_points": 24
},
{
"key": "tests_present",
"name": "Tests present",
"detail": null,
"points": 24,
"status": "met",
"details": [],
"max_points": 24
},
{
"key": "linter_config",
"name": "Linter config",
"detail": "eslint.config.js",
"points": 16,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "eslint.config.js"
}
}
],
"max_points": 16
},
{
"key": "pre_commit_hooks",
"name": "Pre-commit hooks",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 9.6
},
{
"key": "editorconfig",
"name": ".editorconfig",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 6.4
},
{
"key": "openssf_scorecard_ci_tests",
"name": "OpenSSF Scorecard: CI-Tests",
"detail": "4 out of 4 merged PRs checked by a CI test -- score normalized to 10",
"points": 20,
"status": "met",
"details": [],
"max_points": 20
}
]
},
{
"key": "documentation",
"band": "moderate",
"name": "Documentation",
"note": null,
"notes": [],
"value": 50,
"inputs": {
"topics": [],
"has_wiki": true,
"homepage": null,
"has_readme": true,
"has_docs_dir": false,
"has_description": true
},
"components": [
{
"key": "readme",
"name": "README",
"detail": null,
"points": 30,
"status": "met",
"details": [],
"max_points": 30
},
{
"key": "documentation_directory",
"name": "Documentation directory",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 25
},
{
"key": "documentation_homepage_site",
"name": "Documentation / homepage site",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
},
{
"key": "repository_description",
"name": "Repository description",
"detail": null,
"points": 10,
"status": "met",
"details": [],
"max_points": 10
},
{
"key": "topics",
"name": "Topics",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
},
{
"key": "wiki",
"name": "Wiki",
"detail": null,
"points": 10,
"status": "met",
"details": [],
"max_points": 10
}
]
}
],
"description": "Are baseline engineering and documentation practices in place?"
},
{
"key": "security",
"band": "at_risk",
"name": "Security",
"value": 49,
"weight": 0.16,
"metrics": [
{
"key": "security_posture",
"band": "at_risk",
"name": "Security posture",
"note": "Excluded from scoring (no data or not applicable): Signed-Releases. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"signed_releases"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 36,
"inputs": {
"source": "openssf_scorecard",
"checks_evaluated": 17,
"scorecard_version": "v5.5.0",
"checks_inconclusive": 1,
"scorecard_aggregate": 3.6
},
"components": [
{
"key": "binary_artifacts",
"name": "Binary-Artifacts",
"detail": "no binaries found in the repo",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "branch_protection",
"name": "Branch-Protection",
"detail": "branch protection not enabled on development/release branches",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "ci_tests",
"name": "CI-Tests",
"detail": "4 out of 4 merged PRs checked by a CI test -- score normalized to 10",
"points": 2.5,
"status": "met",
"details": [],
"max_points": 2.5
},
{
"key": "cii_best_practices",
"name": "CII-Best-Practices",
"detail": "no effort to earn an OpenSSF best practices badge detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 2.5
},
{
"key": "code_review",
"name": "Code-Review",
"detail": "Found 1/18 approved changesets -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "contributors",
"name": "Contributors",
"detail": "project has 4 contributing companies or organizations",
"points": 2.5,
"status": "met",
"details": [],
"max_points": 2.5
},
{
"key": "dangerous_workflow",
"name": "Dangerous-Workflow",
"detail": "no dangerous workflow patterns detected",
"points": 10,
"status": "met",
"details": [],
"max_points": 10
},
{
"key": "dependency_update_tool",
"name": "Dependency-Update-Tool",
"detail": "no update tool detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "fuzzing",
"name": "Fuzzing",
"detail": "project is not fuzzed",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "license",
"name": "License",
"detail": "license file not detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 2.5
},
{
"key": "maintained",
"name": "Maintained",
"detail": "30 commit(s) and 1 issue activity found in the last 90 days -- score normalized to 10",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "packaging",
"name": "Packaging",
"detail": "packaging workflow detected",
"points": 5,
"status": "met",
"details": [],
"max_points": 5
},
{
"key": "pinned_dependencies",
"name": "Pinned-Dependencies",
"detail": "dependency not pinned by hash detected -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "sast",
"name": "SAST",
"detail": "SAST tool is not run on all commits -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "security_policy",
"name": "Security-Policy",
"detail": "security policy file not detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "signed_releases",
"name": "Signed-Releases",
"detail": "no releases found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 7.5
},
{
"key": "token_permissions",
"name": "Token-Permissions",
"detail": "detected GitHub workflow tokens with excessive permissions",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "vulnerabilities",
"name": "Vulnerabilities",
"detail": "47 existing vulnerabilities detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
}
]
},
{
"key": "dependency_advisories",
"band": "excellent",
"name": "Dependency advisories",
"note": "Excluded from scoring (no data or not applicable): No advisories left outstanding. Remaining weights renormalized. Matched the npm:@accesslint/cli@0.12.0 runtime dependency closure — what installing the published package pulls in — 30 packages. Reachability is not analyzed.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"no_advisories_left_outstanding"
]
}
},
{
"code": "weights_renormalized",
"params": {}
},
{
"code": "advisories_scope_published",
"params": {
"package": "npm:@accesslint/cli@0.12.0",
"assessed": 30
}
},
{
"code": "advisories_reachability",
"params": {}
}
],
"value": 100,
"inputs": {
"source": "osv",
"advisories": 0,
"affected_packages": 0,
"assessed_packages": 30,
"unassessed_packages": 0,
"affected_by_severity": "none",
"direct_affected_packages": 0
},
"components": [
{
"key": "direct_dependencies_free_of_known_advisories",
"name": "Direct dependencies free of known advisories",
"detail": "no direct dependency carries a known advisory",
"points": 35,
"status": "met",
"details": [
{
"code": "no_direct_advisories",
"params": {}
}
],
"max_points": 35
},
{
"key": "indirect_dependencies_free_of_known_advisories",
"name": "Indirect dependencies free of known advisories",
"detail": "no indirect dependency carries a known advisory",
"points": 25,
"status": "met",
"details": [
{
"code": "no_indirect_advisories",
"params": {}
}
],
"max_points": 25
},
{
"key": "no_advisories_left_outstanding",
"name": "No advisories left outstanding",
"detail": "no advisory carries a publication date",
"points": 0,
"status": "excluded",
"details": [
{
"code": "advisories_no_publication_date",
"params": {}
}
],
"max_points": 40
}
]
},
{
"key": "malicious_dependencies",
"band": "excellent",
"name": "Malicious dependencies",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"source": "osv",
"meaning": "reported as a malicious package by the OpenSSF corpus; the remedy is removal or moving off the compromised name, never an upgrade of the same artifact. Versions the registry has since pulled are listed but not scored",
"packages": [],
"red_flag": false,
"assessed_packages": 30,
"malicious_packages": 0,
"direct_malicious_packages": 0,
"withdrawn_malicious_packages": 0,
"installable_malicious_packages": 0
},
"components": [
{
"key": "no_dependency_reported_as_a_malicious_package",
"name": "No dependency reported as a malicious package",
"detail": "no dependency is reported as a malicious package",
"points": 100,
"status": "met",
"details": [
{
"code": "no_malicious_dependencies",
"params": {}
}
],
"max_points": 100
}
]
},
{
"key": "high_risk_jurisdiction_exposure",
"band": "excellent",
"name": "High-Risk Jurisdiction Exposure",
"note": "Only high-confidence self-published location evidence affects this multiplier. Ambiguous matches are review-only; country evidence is not proof of nationality, citizenship, legal registration, malicious intent, or sanctions status.",
"notes": [
{
"code": "jurisdiction_evidence_limits",
"params": {}
}
],
"value": 100,
"inputs": {
"meaning": "self-published location evidence; not nationality or citizenship",
"red_flag": false,
"exposures": [],
"policy_countries": [
"Russia",
"Iran",
"North Korea"
],
"review_only_matches": 0,
"assessed_self_published_locations": 5
},
"components": [
{
"key": "policy_exposure_multiplier",
"name": "Policy exposure multiplier",
"detail": "no confirmed policy-scope location match",
"points": 100,
"status": "met",
"details": [
{
"code": "jurisdiction_no_match",
"params": {}
}
],
"max_points": 100
}
]
}
],
"description": "Are visible security and supply-chain practices strong, with no malicious dependency and no unresolved high-risk jurisdiction exposure?"
},
{
"key": "ai_readiness",
"band": "moderate",
"name": "AI Readiness",
"value": 57,
"weight": 0,
"metrics": [
{
"key": "ai_agent_context",
"band": "at_risk",
"name": "Agent context & guidance",
"note": null,
"notes": [],
"value": 34,
"inputs": {
"has_llms_txt": false,
"legible_history_share": 0.64,
"agent_instruction_files": [],
"agent_instruction_max_bytes": null
},
"components": [
{
"key": "agent_instructions",
"name": "Agent instructions",
"detail": "no CLAUDE.md / AGENTS.md / editor rules",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_agent_instructions",
"params": {}
}
],
"max_points": 45
},
{
"key": "machine_readable_docs_llms_txt",
"name": "Machine-readable docs (llms.txt)",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
},
{
"key": "legible_commit_history",
"name": "Legible commit history",
"detail": "64 of 100 human commits state their intent (structured subject or explanatory body)",
"points": 34.1,
"status": "partial",
"details": [
{
"code": "legible_history",
"params": {
"legible": 64,
"sampled": 100
}
}
],
"max_points": 40
}
]
},
{
"key": "ai_verify_loop",
"band": "good",
"name": "Verify loop (build / test / typecheck)",
"note": null,
"notes": [],
"value": 72,
"inputs": {
"has_nix": false,
"has_tests": true,
"lockfiles": [],
"has_dockerfile": false,
"typed_language": true,
"bootstrap_files": [
".mise.toml",
"cli/.mise.toml"
],
"has_devcontainer": false,
"has_linter_config": true,
"typecheck_configs": [
"bench/tsconfig.json",
"chrome/tsconfig.json",
"cli/tsconfig.json",
"codemod/tsconfig.json",
"core/tsconfig.json",
"heal-diff/tsconfig.json",
"jest/tsconfig.json",
"matchers-internal/tsconfig.json",
"mcp/tsconfig.json",
"playwright/tsconfig.json",
"report/tsconfig.json",
"storybook-addon/tsconfig.json",
"vitest/tsconfig.json"
],
"agent_commit_share": 0.13,
"toolchain_manifests": [],
"dependency_bot_commit_share": 0
},
"components": [
{
"key": "one_command_bootstrap",
"name": "One-command bootstrap",
"detail": ".mise.toml, cli/.mise.toml",
"points": 18,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": ".mise.toml, cli/.mise.toml"
}
}
],
"max_points": 18
},
{
"key": "automated_tests",
"name": "Automated tests",
"detail": null,
"points": 22,
"status": "met",
"details": [],
"max_points": 22
},
{
"key": "lint_format_config",
"name": "Lint / format config",
"detail": "eslint.config.js",
"points": 11,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "eslint.config.js"
}
}
],
"max_points": 11
},
{
"key": "static_type_checking",
"name": "Static type checking",
"detail": "bench/tsconfig.json, chrome/tsconfig.json, cli/tsconfig.json, codemod/tsconfig.json, core/tsconfig.json, heal-diff/tsconfig.json, jest/tsconfig.json, matchers-internal/tsconfig.json, mcp/tsconfig.json, playwright/tsconfig.json, report/tsconfig.json, storybook-addon/tsconfig.json, vitest/tsconfig.json",
"points": 11,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "bench/tsconfig.json, chrome/tsconfig.json, cli/tsconfig.json, codemod/tsconfig.json, core/tsconfig.json, heal-diff/tsconfig.json, jest/tsconfig.json, matchers-internal/tsconfig.json, mcp/tsconfig.json, playwright/tsconfig.json, report/tsconfig.json, storybook-addon/tsconfig.json, vitest/tsconfig.json"
}
}
],
"max_points": 11
},
{
"key": "reproducible_environment",
"name": "Reproducible environment",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
},
{
"key": "demonstrated_agent_practice",
"name": "Demonstrated agent practice",
"detail": "13 of the last 100 commits agent-authored or agent-credited",
"points": 10,
"status": "met",
"details": [
{
"code": "agent_authored_commits",
"params": {
"count": 13,
"sampled": 100
}
}
],
"max_points": 10
},
{
"key": "automated_maintenance",
"name": "Automated maintenance",
"detail": "no automated dependency updates observed",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_dependency_automation",
"params": {}
}
],
"max_points": 8
},
{
"key": "openssf_scorecard_pinned_dependencies",
"name": "OpenSSF Scorecard: Pinned-Dependencies",
"detail": "dependency not pinned by hash detected -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
}
]
},
{
"key": "ai_code_legibility",
"band": "excellent",
"name": "Code legibility for models",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"primary_language": "TypeScript",
"largest_source_bytes": 65374,
"source_files_sampled": 394,
"oversized_source_files": 1
},
"components": [
{
"key": "type_checkable_code",
"name": "Type-checkable code",
"detail": "TypeScript (statically typed)",
"points": 45,
"status": "met",
"details": [
{
"code": "statically_typed_language",
"params": {
"language": "TypeScript"
}
}
],
"max_points": 45
},
{
"key": "manageable_file_sizes",
"name": "Manageable file sizes",
"detail": "1/394 source files over 60KB",
"points": 54.9,
"status": "partial",
"details": [
{
"code": "oversized_source_files",
"params": {
"kb": 60,
"sampled": 394,
"oversized": 1
}
}
],
"max_points": 55
}
]
},
{
"key": "ai_interfaces",
"band": "critical",
"name": "Machine-readable interfaces",
"note": null,
"notes": [],
"value": 20,
"inputs": {
"example_dirs": [],
"has_mcp_signal": true,
"api_schema_files": []
},
"components": [
{
"key": "api_schema_openapi_graphql_proto",
"name": "API schema (OpenAPI/GraphQL/proto)",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 40
},
{
"key": "mcp_server",
"name": "MCP server",
"detail": null,
"points": 20,
"status": "met",
"details": [],
"max_points": 20
},
{
"key": "runnable_examples",
"name": "Runnable examples",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 40
}
]
}
],
"description": "How well is the repo equipped to be developed and maintained with AI coding agents? An independent, experimental badge — weight 0.0, so it is surfaced on its own and does not affect the overall health score."
}
],
"metrics_version": "1.13.0"
},
"warnings": [
"Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token",
"GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository"
],
"report_type": "repository",
"generated_at": "2026-07-27T08:27:45.589394Z",
"schema_version": "0.27.0",
"badge_url": "https://raw.githubusercontent.com/inspect-software/badges/main/v1/a/AccessLint/accesslint.svg",
"full_name": "AccessLint/accesslint",
"license_state": "absent",
"license_spdx": null
}