公开记录中等
软件健康报告模式 0.26.0 · 指标 1.13.0 · 2026-07-22 04:27 UTC
ChristopherDavenport / unblink
Pure-Go browser for AI: fetch pages, optionally render JS (no Chromium), get clean token-budgeted Markdown over MCP
ChristopherDavenport/unblink 的健康指数为 100 分中的 62 分，处于「中等」区间。 其得分最高的类别是Engineering Quality（84/100），最低的是Community & Adoption（43/100）。 最近一次更新在 4 天前。 近期的大部分工作由 1 位贡献者完成。
62
总分 / 100软件健康指数
指标归入加权类别，统一采用 1–100 量表。总体分先取类别加权平均；当公开证据触发高风险司法辖区政策时，评级会按政策调整，并设置 49（有风险）的上限。AI 就绪度不计入总体分。
62
优秀85-100堪称典范；基本满足所有检验标准
良好70-84健康；仅有轻微不足
中等50-69可接受，但存在明显不足；建议进行审查
存在风险30-49存在重大薄弱环节；采用时应保持审慎
危急1-29问题严重（项目被弃置、仅有单一维护者、缺乏基本工程规范）
评分画像
每条轴代表一个类别。形状比平均值更重要——健康的对象会填满整个图形，而“一峰一谷”式画像意味着某一维度的优势正掩盖另一维度的风险。
所有权
软件包生态系统
| 注册表 | 软件包 | 版本 | 月下载量 | 版本数 | 最近发布 |
|---|---|---|---|---|---|
| Go | github.com/christopherdavenport/unblink | v0.24.0 | - | 11 | 15 天前 |
按类别列示的指标
活力
项目是否仍有生命——是否仍在编写代码，是否仍在发布版本？
69
开发活跃度
55中等
评分方式
| 36/36 | 推送新近度 — 最近一次推送于 4 天前 |
| 0.7/36 | 提交节奏 — 52 周中有 1 周有提交 |
| 18/18 | 提交量 — 最近一年 143 次提交 |
| 0/10 | OpenSSF Scorecard：Maintained — project was created within the last 90 days. Please review its contents carefully |
所用输入
| commits_last_year | 143 |
| human_commit_share | 0.95 |
| days_since_last_push | 4 |
| active_weeks_last_year | 1 |
发布纪律
90优秀
评分方式
| 27/27 | 有发布版本 — 已发布 11 个发布版本 |
| 36/36 | 发布时效 — 最近一次发布版本于 15 天前 |
| 27/27 | 发布节奏 — 约每 0.4 天发布一次 |
| 0/10 | OpenSSF Scorecard：Signed-Releases — Project has not signed or included provenance with any releases. |
所用输入
| releases_count | 11 |
| latest_release_tag | v0.24.0 |
| releases_from_tags | 否 |
| days_since_latest_release | 15 |
| mean_days_between_releases | 0.4 |
社区与采用
项目是否拥有用户、下载量与关注度，并具备欢迎贡献者参与的配置？
43
流行度与采用
13危急
评分方式
| 12.6/60 | 星标 — 7 个星标 |
| 0/25 | 复刻 — 1 个复刻 |
| 0/15 | 关注者 — 1 位关注者 |
所用输入
| forks | 1 |
| stars | 7 |
| watchers | 1 |
| growth_state | unverified |
| growth_factor_pct | 100 |
| growth_unverified_reason | below_threshold |
社区健康
77良好
评分方式
| 22.5/22.5 | README |
| 22.5/22.5 | 许可证 — 可识别的许可证（MIT） |
| 18/18 | CONTRIBUTING 指南 |
| 0/13.5 | 行为准则 |
| 0/7.2 | 议题模板 |
| 6.3/6.3 | PR 模板 |
所用输入
| has_readme | 是 |
| has_license | 是 |
| has_contributing | 是 |
| has_issue_template | 否 |
| has_code_of_conduct | 否 |
| has_pull_request_template | 是 |
可持续性与治理
项目能否在其成员之外延续——巴士系数、响应能力、由谁支持，以及软件包的维护状况？
59
维护者韧性（巴士系数）
20危急
评分方式
| 9/54 | 巴士系数 — 1 位贡献者贡献了半数提交 |
| 0/22.5 | 提交分布 — 头号贡献者编写了 100% 的提交 |
| 1.4/13.5 | 贡献者广度 — 1 位贡献者 |
| 10/10 | OpenSSF Scorecard：Contributors — project has 9 contributing companies or organizations |
所用输入
| bus_factor | 1 |
| contributors_sampled | 1 |
| top_contributor_share | 1 |
议题与 PR 响应能力
66中等
评分方式
| 0/46.8 | 议题解决 — 没有议题或无数据 |
| 35.3/38.3 | PR 接受 — 已裁定的 PR 中 48/52 已合并 |
| 0/15 | OpenSSF Scorecard：Code-Review — Found 0/14 approved changesets -- score normalized to 0 |
所用输入
| merged_prs | 48 |
| open_issues | 0 |
| closed_issues | 0 |
| issue_closed_ratio | — |
| closed_unmerged_prs | 4 |
已排除计分（无数据或不适用）：议题解决。 其余权重已重新归一化。
所有权与托管责任
66中等
评分方式
| 10/30 | 所有权背书 — 个人（用户）账户 |
| 0/20 | 已验证域名 — 不适用于个人账户 |
| 17.7/25 | 所有者影响力 — ChristopherDavenport 有 289 位关注者 |
| 25/25 | 既往记录 — 304 个公开仓库，账户约 11 年 |
所用输入
| followers | 289 |
| owner_type | User |
| is_verified | — |
| owner_login | ChristopherDavenport |
| public_repos | 304 |
| account_age_days | 4,229 |
已排除计分（无数据或不适用）：已验证域名。 其余权重已重新归一化。
软件包维护
100优秀
评分方式
| 25/25 | 已发布且可解析 — go 上有 1 个软件包 |
| 35/35 | 发布时效 — 最近一次发布于 15 天前 |
| 20/20 | 版本历史 — 11 个已发布版本 |
| 20/20 | 未被弃用 — 活跃，未被弃用或撤回 |
所用输入
| packages | github.com/christopherdavenport/unblink |
| ecosystems | go |
| any_deprecated | 否 |
| min_days_since_publish | 15 |
工程质量
基础的工程与文档实践是否到位？
84
工程实践
84良好
评分方式
| 24/24 | CI 工作流 — 3 个工作流 |
| 24/24 | 存在测试 |
| 16/16 | Linter 配置 — .golangci.yml |
| 0/9.6 | Pre-commit 钩子 |
| 0/6.4 | .editorconfig |
| 20/20 | OpenSSF Scorecard：CI-Tests — 9 out of 9 merged PRs checked by a CI test -- score normalized to 10 |
所用输入
| has_ci | 是 |
| has_tests | 是 |
| has_editorconfig | 否 |
| has_linter_config | 是 |
| has_precommit_config | 否 |
文档
85优秀
评分方式
| 30/30 | README |
| 25/25 | 文档目录 |
| 0/15 | 文档 / 主页站点 |
| 10/10 | 仓库描述 |
| 10/10 | 主题标签 — 8 个主题标签 |
| 10/10 | Wiki |
所用输入
| topics | ai, browser, golang, markdown, mcp, mcp-server, model-context-protocol, web-scraping |
| has_wiki | 是 |
| homepage | — |
| has_readme | 是 |
| has_docs_dir | 是 |
| has_description | 是 |
安全
可见的安全与供应链实践是否稳固，且不存在未解决的高风险司法辖区暴露？
50
安全态势
50中等
评分方式
| 7.5/7.5 | Binary-Artifacts — no binaries found in the repo |
| 0/7.5 | Branch-Protection — branch protection not enabled on development/release branches |
| 2.5/2.5 | CI-Tests — 9 out of 9 merged PRs checked by a CI test -- score normalized to 10 |
| 0/2.5 | CII-Best-Practices — no effort to earn an OpenSSF best practices badge detected |
| 0/7.5 | Code-Review — Found 0/14 approved changesets -- score normalized to 0 |
| 2.5/2.5 | Contributors — project has 9 contributing companies or organizations |
| 10/10 | Dangerous-Workflow — no dangerous workflow patterns detected |
| 7.5/7.5 | Dependency-Update-Tool — update tool detected |
| 5/5 | Fuzzing — project is fuzzed |
| 2.5/2.5 | 许可证 — license file detected |
| 0/7.5 | Maintained — project was created within the last 90 days. Please review its contents carefully |
| 5/5 | Packaging — packaging workflow detected |
| 0/5 | Pinned-Dependencies — dependency not pinned by hash detected -- score normalized to 0 |
| 0/5 | SAST — SAST tool is not run on all commits -- score normalized to 0 |
| 5/5 | Security-Policy — security policy file detected |
| 0/7.5 | Signed-Releases — Project has not signed or included provenance with any releases. |
| 0/7.5 | Token-Permissions — detected GitHub workflow tokens with excessive permissions |
| 5.2/7.5 | Vulnerabilities — 3 existing vulnerabilities detected |
所用输入
| source | openssf_scorecard |
| checks_evaluated | 18 |
| scorecard_version | v5.5.0 |
| checks_inconclusive | 0 |
| scorecard_aggregate | 5 |
AI 就绪度
该仓库在多大程度上具备与 AI 编码代理协同开发与维护的条件？这是一枚独立的实验性徽章——权重为 0.0，因此单独呈现，不影响总体健康评分。
79
AI 代理上下文与指引
85优秀
评分方式
| 45/45 | 代理指令 — CLAUDE.md |
| 0/15 | 机器可读文档（llms.txt） |
| 40/40 | 可读的提交历史 — 95 次人类提交中有 91 次说明了意图（结构化标题或解释性正文） |
所用输入
| has_llms_txt | 否 |
| legible_history_share | 0.958 |
| agent_instruction_files | CLAUDE.md |
| agent_instruction_max_bytes | 22,109 |
评分方式
| 18/18 | 一条命令的引导启动 — Makefile |
| 22/22 | 自动化测试 |
| 11/11 | Lint / 格式化配置 — .golangci.yml |
| 11/11 | 静态类型检查 — Go（静态类型） |
| 10/10 | 可复现环境 — Dockerfile, lockfile |
| 10/10 | 已体现的代理实践 — 最近 100 次提交中有 61 次由代理编写或署名代理 |
| 8/8 | 自动化维护 — 最近 100 次提交中有 1 次为自动依赖更新 |
| 0/10 | OpenSSF Scorecard：Pinned-Dependencies — dependency not pinned by hash detected -- score normalized to 0 |
所用输入
| has_nix | 否 |
| has_tests | 是 |
| lockfiles | go.sum |
| has_dockerfile | 是 |
| typed_language | 是 |
| bootstrap_files | Makefile |
| has_devcontainer | 否 |
| has_linter_config | 是 |
| typecheck_configs | — |
| agent_commit_share | 0.61 |
| toolchain_manifests | go.mod, scripts/membench/go.mod |
| dependency_bot_commit_share | 0.01 |
面向模型的代码可读性
99优秀
评分方式
| 45/45 | 可类型检查的代码 — Go（静态类型） |
| 54.3/55 | 可控的文件大小 — 采样的 300 个源文件中有 4 个超过 60KB |
所用输入
| primary_language | Go |
| largest_source_bytes | 146,843 |
| source_files_sampled | 300 |
| oversized_source_files | 4 |
机器可读接口
20危急
评分方式
| 0/40 | API 模式（OpenAPI/GraphQL/proto） |
| 20/20 | MCP 服务器 |
| 0/40 | 可运行示例 |
所用输入
| example_dirs | — |
| has_mcp_signal | 是 |
| api_schema_files | — |
关键数据
7GitHub 星标
1贡献者
143最近 12 个月提交数
4距最近推送天数
11发布版本数
1巴士系数（bus factor）
0开放议题
Go软件包生态系统数
数据采集警告
- GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository
更多细节
Star 与 Fork 历史 7 ★ / 1 ⇿
7Star
1Fork
1发布
每颗 star 和每个 fork 的添加时间，来自 GitHub 并按天汇总。累计增长位于其构成来源——每日新增——的正上方，二者可相互对照：稳定的自然增长与短暂的突增形态截然不同。当这一差别可被衡量时，它会作为增长真实性予以报告。
主版本 0次版本 1修订 0
OpenSSF Scorecard 5.0 / 10
5.0综合
来自开源项目 OpenSSF Scorecard 的独立、工具无关的安全评估。每项检查奖励的是安全实践本身，而非特定供应商的工具。Scorecard 无法判定的检查项标记为 不适用，并从安全评分中剔除（绝不按零分计）。
| 10 | Binary-Artifacts | no binaries found in the repo |
| 0 | Branch-Protection | branch protection not enabled on development/release branches |
| 10 | CI-Tests | 9 out of 9 merged PRs checked by a CI test -- score normalized to 10 |
| 0 | CII-Best-Practices | no effort to earn an OpenSSF best practices badge detected |
| 0 | Code-Review | Found 0/14 approved changesets -- score normalized to 0 |
| 10 | Contributors | project has 9 contributing companies or organizations |
| 10 | Dangerous-Workflow | no dangerous workflow patterns detected |
| 10 | Dependency-Update-Tool | update tool detected |
| 10 | Fuzzing | project is fuzzed |
| 10 | License | license file detected |
| 0 | Maintained | project was created within the last 90 days. Please review its contents carefully |
| 10 | Packaging | packaging workflow detected |
| 0 | Pinned-Dependencies | dependency not pinned by hash detected -- score normalized to 0 |
| 0 | SAST | SAST tool is not run on all commits -- score normalized to 0 |
| 10 | Security-Policy | security policy file detected |
| 0 | Signed-Releases | Project has not signed or included provenance with any releases. |
| 0 | Token-Permissions | detected GitHub workflow tokens with excessive permissions |
| 7 | Vulnerabilities | 3 existing vulnerabilities detected |
直接依赖 16
| 注册表 | 软件包 | 版本约束 | 清单文件 |
|---|---|---|---|
| Go | codeberg.org/readeck/go-readability/v2 | v2.1.2 | go.mod |
| Go | github.com/JohannesKaufmann/html-to-markdown/v2 | v2.5.2 | go.mod |
| Go | github.com/andybalholm/brotli | v1.2.2 | go.mod |
| Go | github.com/andybalholm/cascadia | v1.3.4 | go.mod |
| Go | github.com/dop251/goja | v0.0.0-20260629171413-2a84ae0cf10d | go.mod |
| Go | github.com/dop251/goja_nodejs | v0.0.0-20260212111938-1f56ff5bcf14 | go.mod |
| Go | github.com/evanw/esbuild | v0.28.1 | go.mod |
| Go | github.com/microcosm-cc/bluemonday | v1.0.27 | go.mod |
| Go | github.com/mmcdole/gofeed | v1.3.0 | go.mod |
| Go | github.com/modelcontextprotocol/go-sdk | v1.6.1 | go.mod |
| Go | github.com/nlnwa/whatwg-url | v0.6.2 | go.mod |
| Go | github.com/refraction-networking/utls | v1.8.2 | go.mod |
| Go | golang.org/x/image | v0.43.0 | go.mod |
| Go | golang.org/x/net | v0.56.0 | go.mod |
| Go | golang.org/x/text | v0.38.0 | go.mod |
| Go | golang.org/x/time | v0.15.0 | go.mod |
全部依赖 未采集
本报告未能采集到解析后的依赖集合：GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository
原始 JSON 报告 机器可读
{
"data": {
"repo": {
"topics": [
"ai",
"browser",
"golang",
"markdown",
"mcp",
"mcp-server",
"model-context-protocol",
"web-scraping"
],
"is_fork": false,
"size_kb": 1400,
"has_wiki": true,
"homepage": null,
"languages": {
"Go": 1869503,
"HTML": 14526,
"Shell": 3558,
"Makefile": 4722,
"Dockerfile": 359,
"JavaScript": 2791
},
"pushed_at": "2026-07-17T06:54:22Z",
"created_at": "2026-07-01T22:56:30Z",
"owner_type": "User",
"updated_at": "2026-07-14T21:26:07Z",
"description": "Pure-Go browser for AI: fetch pages, optionally render JS (no Chromium), get clean token-budgeted Markdown over MCP",
"is_archived": false,
"is_disabled": false,
"license_spdx": "MIT",
"default_branch": "main",
"license_spdx_raw": "MIT",
"primary_language": "Go",
"significant_languages": [
"Go"
]
},
"owner": {
"blog": null,
"name": "Christopher Davenport",
"type": "User",
"login": "ChristopherDavenport",
"company": null,
"location": "Lake Oswego, Oregon",
"followers": 289,
"avatar_url": "https://avatars.githubusercontent.com/u/10272700?v=4",
"created_at": "2014-12-22T18:25:29Z",
"is_verified": null,
"public_repos": 304,
"account_age_days": 4229
},
"license": {
"state": "standard",
"spdx_id": "MIT",
"raw_spdx": "MIT",
"file_present": true,
"scorecard_found": true,
"profile_has_license": true
},
"activity": {
"releases": [
{
"tag": "v0.24.0",
"kind": "minor",
"published_at": "2026-07-06T20:57:50Z"
},
{
"tag": "v0.23.1",
"kind": "patch",
"published_at": "2026-07-05T16:12:02Z"
},
{
"tag": "v0.23.0",
"kind": "minor",
"published_at": "2026-07-05T15:30:32Z"
},
{
"tag": "v0.22.0",
"kind": "minor",
"published_at": "2026-07-04T22:27:12Z"
},
{
"tag": "v0.21.0",
"kind": "minor",
"published_at": "2026-07-04T04:16:00Z"
},
{
"tag": "v0.20.0",
"kind": "minor",
"published_at": "2026-07-04T02:35:36Z"
},
{
"tag": "v0.19.0",
"kind": "minor",
"published_at": "2026-07-03T23:59:50Z"
},
{
"tag": "v0.18.0",
"kind": "minor",
"published_at": "2026-07-03T20:01:43Z"
},
{
"tag": "v0.17.1",
"kind": "patch",
"published_at": "2026-07-03T03:58:07Z"
},
{
"tag": "v0.17.0",
"kind": "minor",
"published_at": "2026-07-03T03:45:04Z"
},
{
"tag": "v0.16.0",
"kind": "minor",
"published_at": "2026-07-01T23:03:23Z"
}
],
"recent_commits": [
{
"oid": "d8372b8ccb93f9d0e1e6d9dae8a15aca7fca2606",
"body": "…unication\n\ndocs: sell the value proposition + refresh head-to-head numbers",
"is_bot": false,
"headline": "Merge pull request #52 from ChristopherDavenport/docs/value-prop-comm…",
"author_name": "Christopher Davenport",
"author_login": "ChristopherDavenport",
"committed_at": "2026-07-06T22:31:23Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "cd060cb27ef5cfa1f9cc71f1f515059a789aeb87",
"body": "The engineering was strong and honest but the README buried its three best\nclaims in a dense Status paragraph. Restructure the pitch so a reader gets it\nin one screen, and re-measure so the numbers are current and sharper.\n\nREADME:\n- Scannable \"Why unblink\" hero: ~100× fewer tokens on real pages, no\n[…]\nthe flag is `--disable-js`, JS is on by default).\n\nVerified: make test eval 48/48; membench module builds + vets; manifests valid.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "docs: sell the value proposition + refresh head-to-head numbers",
"author_name": "Christopher Davenport",
"author_login": "ChristopherDavenport",
"committed_at": "2026-07-06T22:29:50Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "89a78d90220f510f20dbf37aac2f410079b4fb78",
"body": null,
"is_bot": true,
"headline": "chore: sync release metadata to v0.24.0",
"author_name": "github-actions[bot]",
"author_login": "github-actions[bot]",
"committed_at": "2026-07-06T20:58:01Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "08acbf95513f0f2698273522f7c85b59daa8842a",
"body": "…l/resource-types\n\nMinor release bundling the two PRs merged since v0.23.1:\n\n- #50 goja regex-class-hyphen rewrite (ADR 0017) + per-render module-instance\n registry (ADR 0018): client:only Astro/React islands now hydrate.\n- #51 requests tail-keeping ring buffer + devtools resource-type classification\n and types=[...] filter.\n\nplugin.json + README Status are synced by the sync-release-metadata job after\ngoreleaser.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "chore(release): v0.24.0 — Astro/React island hydration + requests tai…",
"author_name": "Christopher Davenport",
"author_login": "ChristopherDavenport",
"committed_at": "2026-07-06T20:53:41Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "fba6253a5fff66a7a37056d247ef5089a38e0241",
"body": "…ce-type\n\nfeat(requests): tail-keeping ring buffer + devtools resource types",
"is_bot": false,
"headline": "Merge pull request #51 from ChristopherDavenport/feat/requests-resour…",
"author_name": "Christopher Davenport",
"author_login": "ChristopherDavenport",
"committed_at": "2026-07-06T20:50:41Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2a938cee537d542a42e2800e360aef5d77076358",
"body": "…-hyphen\n\nfix(js): make Astro/React islands render — two goja-engine gaps",
"is_bot": false,
"headline": "Merge pull request #50 from ChristopherDavenport/fix/goja-regex-class…",
"author_name": "Christopher Davenport",
"author_login": "ChristopherDavenport",
"committed_at": "2026-07-06T20:50:23Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c5fb0c42265477de4e276c659f3063ffd93ed509",
"body": "The requests tool's log capped at 256 head-kept records and reported only\nmethod/url/status. Two problems for the tool's actual job — finding the JSON/API\nendpoint a data-driven page fetched:\n\n- A code-split SPA loads its scripts first and fires its data (fetch/XHR) calls\n last, so a head-keeping c\n[…]\nst-to-newest across the ring wrap. Tests cover the\nclassification table, ring tail-retention at/over the cap, and the type filter.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "feat(requests): tail-keeping ring buffer + devtools resource types",
"author_name": "Christopher Davenport",
"author_login": "ChristopherDavenport",
"committed_at": "2026-07-06T20:48:31Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "4698a139365060a58520f84464001425593300a3",
"body": "…stry\n\nRecord the two engine-policy decisions behind this PR: the goja regex-class\nworkaround (0017) and the dynamic-import module registry (0018), and index both\nin CLAUDE.md's ADR list.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "docs(adr): 0017 regex-class hyphen rewrite, 0018 module-instance regi…",
"author_name": "Christopher Davenport",
"author_login": "ChristopherDavenport",
"committed_at": "2026-07-06T20:46:17Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "82ee41abfcf324b449a69d71e7d71bb4d690dafe",
"body": "… islands)\n\nDynamic import() bundled each call's whole static graph independently (esbuild\nIIFE), so a dependency shared by two import()s was duplicated. An Astro\nclient:only island imports its component chunk and its renderer chunk as two\nseparate import()s that each statically import React, so Rea\n[…]\ny shell. Tests cover dedup across imports and the exact\nshared-singleton-dispatcher shape; make test/vet/eval and -race all clean.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "fix(js): share one module instance across import() calls (fixes React…",
"author_name": "Christopher Davenport",
"author_login": "ChristopherDavenport",
"committed_at": "2026-07-06T18:51:06Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "9fc9de8f81c95edd6b5712799ebe4c601d10b72a",
"body": "A regex character class with a hyphen immediately after a \\s/\\S/\\d/\\D/\\w/\\W\nshorthand — e.g. the ubiquitous camelCase/slugify helper /[\\s-_]+/ — is valid\nECMAScript but goja rejects it at compile time. Its parser.TransformRegExp\nexpands the shorthand to a character set ending in U+FEFF and leaves th\n[…]\nnd), astro_island_test.go (the full astro-island runtime + cross-origin\ndynamic import + the regex). make test/vet/eval all green.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "fix(js): escape shorthand-then-hyphen regex classes goja rejects",
"author_name": "Christopher Davenport",
"author_login": "ChristopherDavenport",
"committed_at": "2026-07-06T18:15:41Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "5d88dadea85d0271f8037cc786ddfe8b5c14c098",
"body": null,
"is_bot": true,
"headline": "chore: sync release metadata to v0.23.1",
"author_name": "github-actions[bot]",
"author_login": "github-actions[bot]",
"committed_at": "2026-07-05T16:12:12Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "11b594cf075900940d237fd392a5cd2dff171452",
"body": "Patch release: `Version()` derives from build info so `go install …@vX.Y.Z`\nreports its real module version, and the release workflow auto-stamps the README\nStatus headline from the tag. plugin.json + README are synced by the\nsync-release-metadata job after goreleaser.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "chore(release): v0.23.1 — version reporting correct by construction",
"author_name": "Christopher Davenport",
"author_login": "ChristopherDavenport",
"committed_at": "2026-07-05T16:08:06Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "7e5640d90b435313d60f13d015d4e135258d5c9e",
"body": "…ruction\n\nfix(version): derive server version from build info (correct by construction)",
"is_bot": false,
"headline": "Merge pull request #49 from ChristopherDavenport/fix/version-by-const…",
"author_name": "Christopher Davenport",
"author_login": "ChristopherDavenport",
"committed_at": "2026-07-05T16:07:16Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "6a406eea0228398f07957d7f08f8ca7b5885f208",
"body": "…ining it\n\nThe advertised version was a hardcoded `var version = \"0.17.1\"` overridden only\nby the Makefile/goreleaser `-ldflags` stamp. A `go install …@vX.Y.Z` build runs\nno ldflags, so it reported the stale constant (0.17.1) despite being built from a\ncurrent module — the version string lied about \n[…]\ntag alongside plugin.json (renamed the sync job to\n sync-release-metadata; full releases only, prereleases keep the last stable).\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "fix(version): derive server version from build info, stop hand-mainta…",
"author_name": "Christopher Davenport",
"author_login": "ChristopherDavenport",
"committed_at": "2026-07-05T16:06:10Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "70729caa594beae951ca35d3d5f4a495649d923b",
"body": "…t-fidelity gap-closure\n\nWPT conformance harness (make wpt, ADR 0016) + the gaps it surfaced: native WHATWG\nURL parser (url 0.11->0.98), TextDecoder/TextEncoder correctness (encoding\n0.50->0.87), DOM conformance (dom 0.49->0.65), plus a Same-Origin-Policy audit +\nhardening (CSP nonce hiding, redirect-CORS revalidation).\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>\nClaude-Session: https://claude.ai/code/session_017bTB27JfmYZxp1AUqf2ZBf",
"is_bot": false,
"headline": "chore(release): v0.23.0 — WPT conformance harness + security & conten…",
"author_name": "Christopher Davenport",
"author_login": "ChristopherDavenport",
"committed_at": "2026-07-05T15:26:07Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "473201d05fae1c1ce5d9060eb03c92aa639b00e3",
"body": "…-harness\n\nWPT conformance harness + security & content-fidelity gap-closure",
"is_bot": false,
"headline": "Merge pull request #48 from ChristopherDavenport/feat/wpt-conformance…",
"author_name": "Christopher Davenport",
"author_login": "ChristopherDavenport",
"committed_at": "2026-07-05T15:23:31Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "32f07759a212d6d44dbd129aa9aea679edaea040",
"body": "url 0.115 -> 0.979, encoding 0.504 -> 0.873, dom 0.488 -> 0.648 (cheap subset;\npassive-by-default + reflected token-lists deferred). Updates the priority\nat-a-glance table with per-directory before/after and status.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>\nClaude-Session: https://claude.ai/code/session_017bTB27JfmYZxp1AUqf2ZBf",
"is_bot": false,
"headline": "docs(wpt): record P1-P3 conformance deltas in the roadmap",
"author_name": "Christopher Davenport",
"author_login": "ChristopherDavenport",
"committed_at": "2026-07-05T15:14:11Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "ea54a8488f6a2290312d809bd6abb3fd121197e5",
"body": "…ance (P3)\n\nClose the high-yield DOM gaps the WPT dom/ suite surfaced, lifting conformance\n0.488 -> 0.648. These are conformance/robustness fixes (they don't change extracted\nMarkdown), so the pass is scoped to the cheap high-value items; passive-by-default\nand the dispatch-ordering refactor are del\n[…]\nr/sizes), and out-of-scope WebIDL interface-object checks.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>\nClaude-Session: https://claude.ai/code/session_017bTB27JfmYZxp1AUqf2ZBf",
"is_bot": false,
"headline": "feat(dom): DOMException + CharacterData/DOMTokenList/dispatch conform…",
"author_name": "Christopher Davenport",
"author_login": "ChristopherDavenport",
"committed_at": "2026-07-05T15:12:37Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "31a29cb148509095652708fda203598a53280051",
"body": "… gap roadmap)\n\nFix the four content-relevant TextDecoder/TextEncoder gaps the WPT encoding/ suite\nsurfaced, lifting conformance 0.504 -> 0.873. All in the prelude JS, plus one native\nlabel helper.\n\n- TextEncoder: encode a lone surrogate as U+FFFD (EF BF BD) instead of WTF-8\n (utf8Encode; also fixe\n[…]\nbpart/streaming-flush tail — all out of this pass's scope.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>\nClaude-Session: https://claude.ai/code/session_017bTB27JfmYZxp1AUqf2ZBf",
"is_bot": false,
"headline": "feat(encoding): WHATWG TextDecoder/TextEncoder correctness (P2 of the…",
"author_name": "Christopher Davenport",
"author_login": "ChristopherDavenport",
"committed_at": "2026-07-05T14:52:50Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "efba4d12261c0e127fe537d4fecdcd818a5e68b1",
"body": "Replace the pure-JS regex URL/URLSearchParams with the native Go WHATWG parser\n(github.com/nlnwa/whatwg-url), bound via the subtle.go native-primitive pattern.\nLifts WPT url/ conformance 0.115 -> 0.979 and removes the per-call interpreter\ncost that timed out the corpus.\n\n- internal/js/urlnative.go: \n[…]\nval + frameworks/spa/nav/history; new TestURLNativeParser.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>\nClaude-Session: https://claude.ai/code/session_017bTB27JfmYZxp1AUqf2ZBf",
"is_bot": false,
"headline": "feat(url): native WHATWG URL parser (P1 of the WPT gap roadmap)",
"author_name": "Christopher Davenport",
"author_login": "ChristopherDavenport",
"committed_at": "2026-07-05T14:43:39Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "945abbfc72f2b72b5f3d3d18746677942d478461",
"body": "Add an offline web-platform-tests conformance harness and, from what it\nsurfaced, audit and close six security-posture gaps.\n\nWPT harness (wpt/, build tag `wpt`, `make wpt`; ADR 0016):\n- Drives the JS engine directly (parse test HTML -> Render -> recover the\n results a custom testharnessreport.js w\n[…]\nst / make vet / make eval all pass; 13 new security tests.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>\nClaude-Session: https://claude.ai/code/session_017bTB27JfmYZxp1AUqf2ZBf",
"is_bot": false,
"headline": "feat(wpt): WPT conformance harness + security-posture audit/gap-closure",
"author_name": "Christopher Davenport",
"author_login": "ChristopherDavenport",
"committed_at": "2026-07-05T13:57:20Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "a7544f0476d12e0cfb8ebd6574e2f510334061b0",
"body": "…tition\n\nfeat(session): origin-partition Web Storage + consolidate security posture (SOP)",
"is_bot": false,
"headline": "Merge pull request #47 from ChristopherDavenport/feat/sop-storage-par…",
"author_name": "Christopher Davenport",
"author_login": "ChristopherDavenport",
"committed_at": "2026-07-05T01:47:35Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "dc1a8793d95a68f3240c2cd25853422d86ba145a",
"body": "feat(js): enforce Content-Security-Policy over untrusted page JS",
"is_bot": false,
"headline": "Merge pull request #45 from ChristopherDavenport/feat/csp-enforcement",
"author_name": "Christopher Davenport",
"author_login": "ChristopherDavenport",
"committed_at": "2026-07-05T01:44:56Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "9bc4f5e4e0b7b4271ca8496908cf2a1aabdafbb0",
"body": "feat(js): enforce CORS + Subresource Integrity over untrusted page JS",
"is_bot": false,
"headline": "Merge pull request #43 from ChristopherDavenport/feat/cors-sri",
"author_name": "Christopher Davenport",
"author_login": "ChristopherDavenport",
"committed_at": "2026-07-05T01:43:24Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1ce19750f53bb31dd59c390a1b861b2ff8cf0072",
"body": "Add a dedicated \"Security posture\" section stating the coherent model — unblink\nexecutes untrusted page JS and applies browser-parity protections as defaults\nover it (\"gate the page, not the operator\"): SSRF, SOP (CORS + cookies + origin-\npartitioned storage), CORS, CSP, SRI, credential scoping, Sec\n[…]\nd of leaving the stance implicit across scattered bullets.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>\nClaude-Session: https://claude.ai/code/session_017bTB27JfmYZxp1AUqf2ZBf",
"is_bot": false,
"headline": "docs: consolidate the security posture in CLAUDE.md",
"author_name": "Christopher Davenport",
"author_login": "ChristopherDavenport",
"committed_at": "2026-07-05T01:42:55Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "c4dc680dd3d726fa83240482609ce38b7c713b7f",
"body": "Completes the Same-Origin Policy posture (ADR 0015). An audit found SOP is already\nunblink's default in all but one respect: CORS (#43) gives the network-read half,\nand the single-document / one-runtime-per-render architecture makes the entire\ncross-document DOM half moot (no reachable foreign windo\n[…]\ntest still passes. Race-clean; make eval 48/48.\n\nADR 0015.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>\nClaude-Session: https://claude.ai/code/session_017bTB27JfmYZxp1AUqf2ZBf",
"is_bot": false,
"headline": "feat(session): origin-partition Web Storage (Same-Origin Policy default)",
"author_name": "Christopher Davenport",
"author_login": "ChristopherDavenport",
"committed_at": "2026-07-05T01:42:55Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "68fb162af46372e9debfad73890136c052596484",
"body": "CI's golangci-lint staticcheck (QF category) flagged `!(r >= '0' && r <= '9')`;\nrewrite as `(r < '0' || r > '9')`. Behavior-identical.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>\nClaude-Session: https://claude.ai/code/session_017bTB27JfmYZxp1AUqf2ZBf",
"is_bot": false,
"headline": "fix(csp): satisfy golangci-lint QF1001 (De Morgan) in isBareScheme",
"author_name": "Christopher Davenport",
"author_login": "ChristopherDavenport",
"committed_at": "2026-07-05T01:42:28Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "62e006b2f505d1daecc2f140d8af9417099f8040",
"body": "Full CSP enforcement, on by default (escape hatch --no-csp). Continues the\nsecurity-header parity series (CORS/SRI #43, Sec-Fetch/isolation #44) and reuses\nthat stack's Env.ResponseHeaders wire and SRI hash helpers.\n\nParser (internal/js/csp.go, pure + fuzzed): each Content-Security-Policy header\n(an\n[…]\nowser_test.go e2e. Race-clean; make eval 48/48.\n\nADR 0014.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>\nClaude-Session: https://claude.ai/code/session_017bTB27JfmYZxp1AUqf2ZBf",
"is_bot": false,
"headline": "feat(js): enforce Content-Security-Policy over untrusted page JS",
"author_name": "Christopher Davenport",
"author_login": "ChristopherDavenport",
"committed_at": "2026-07-05T01:15:29Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "778fec22275aec55ef2a58f2f4645b9b5538d784",
"body": "…isolation\n\nfeat(js): Sec-Fetch metadata + cross-origin isolation fidelity",
"is_bot": false,
"headline": "Merge pull request #44 from ChristopherDavenport/feat/fetch-metadata-…",
"author_name": "Christopher Davenport",
"author_login": "ChristopherDavenport",
"committed_at": "2026-07-05T01:02:11Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f02a2edae6e152786a0d3094b42a3aebefbfc602",
"body": "Two browser-parity fidelity features (no render regressions), plus the shared\nresponse-header plumbing the CSP work will also use. Continues CORS/SRI (#43).\n\nShared plumbing: thread the document's HTTP response headers into the engine —\nEnv.ResponseHeaders, populated from page.Page.Header at both En\n[…]\n48.\n\nADR 0013. See ADR 0014 (next PR) for CSP enforcement.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>\nClaude-Session: https://claude.ai/code/session_017bTB27JfmYZxp1AUqf2ZBf",
"is_bot": false,
"headline": "feat(js): Sec-Fetch metadata + cross-origin isolation fidelity",
"author_name": "Christopher Davenport",
"author_login": "ChristopherDavenport",
"committed_at": "2026-07-05T01:00:20Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "909e1f499ccef551d258ee4aad678216efe3abaa",
"body": "Both were completely absent: page JS could read any cross-origin response\nunconditionally, and the `integrity` attribute was never checked. unblink runs\nthe page's untrusted JavaScript, so both are added as a security posture over\nthat code, on by default — while the agent keeps full visibility of t\n[…]\ned stub so they stay about DNR, not CORS. make eval 48/48.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>\nClaude-Session: https://claude.ai/code/session_017bTB27JfmYZxp1AUqf2ZBf",
"is_bot": false,
"headline": "feat(js): enforce CORS + Subresource Integrity over untrusted page JS",
"author_name": "Christopher Davenport",
"author_login": "ChristopherDavenport",
"committed_at": "2026-07-04T23:34:27Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "44c37fefd95868995666d334497c62d371d3eb31",
"body": "docs: refresh README/CLAUDE/docs + manifests for v0.22.0",
"is_bot": false,
"headline": "Merge pull request #42 from ChristopherDavenport/docs/refresh-v0.22.0",
"author_name": "Christopher Davenport",
"author_login": "ChristopherDavenport",
"committed_at": "2026-07-04T22:22:27Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4aeb0f5957610050725a078a753e81377078035e",
"body": "Bring the documentation to the current repo state and lead the v0.22.0 tag\n(WebExtensions runtime loading / ADR 0010; resource-based JS byte budgets +\nconcurrent module-graph warming / ADR 0009).\n\n- CLAUDE.md: add internal/{webext,content,ratelimit,sitemap,search} to the\n package list; complete the\n[…]\notated).\n- server.json: v0.22.0, drop the deprecated --js arg.\n- CHANGELOG.md + plugin.json: v0.22.0 release entry + version bump.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "docs: refresh README/CLAUDE/docs + manifests for v0.22.0",
"author_name": "Christopher Davenport",
"author_login": "ChristopherDavenport",
"committed_at": "2026-07-04T22:20:42Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "9bd9492e967efa781289945aa923e95b76c46e71",
"body": "feat(webext): WebExtensions runtime — load uBlock Origin at runtime (Phases 1–5)",
"is_bot": false,
"headline": "Merge pull request #41 from ChristopherDavenport/feat/webextensions",
"author_name": "Christopher Davenport",
"author_login": "ChristopherDavenport",
"committed_at": "2026-07-04T19:02:32Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5eda6cbb6167effbaa51cb74fbe5d39fb6b41c32",
"body": "…s — the answer\n\nThe gorhill/uBlock GitHub releases (both .xpi and chromium .zip) are *full* uBO, MV2 —\nsame architecture that doesn't compile in goja. uBlock Origin *Lite* is the separate\nuBlockOrigin/uBOL-home project (MV3, declarativeNetRequest).\n\nVerified: loading uBOLite_*.chromium.zip compiles\n[…]\n gofmt clean. Extensions remain gitignored (not vendored).\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>\nClaude-Session: https://claude.ai/code/session_01XvSmg4gm76cedsF2rZ9YWZ",
"is_bot": false,
"headline": "docs(webext): verify uBlock Origin Lite (MV3/DNR) blocks real tracker…",
"author_name": "Christopher Davenport",
"author_login": "ChristopherDavenport",
"committed_at": "2026-07-04T18:51:47Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "fffa97fdd43378477ef61068a948e6d7070f37f2",
"body": "…; scope full-uBO\n\nPursuing fully-functional uBlock Origin surfaced a real bug and several correct\nimprovements to the MV2 webRequest path, plus a firm scoping conclusion. See ADR 0010.\n\n- Fix (real bug, any extension): the chrome-extension:// URL scheme was rejected by\n ParseMatchPattern, so uBO's\n[…]\nke test/vet/eval (48/48) green; gofmt + staticcheck clean.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>\nClaude-Session: https://claude.ai/code/session_01XvSmg4gm76cedsF2rZ9YWZ",
"is_bot": false,
"headline": "feat(webext): per-tab webRequest context; fix WAR-guard match-all bug…",
"author_name": "Christopher Davenport",
"author_login": "ChristopherDavenport",
"committed_at": "2026-07-04T18:39:20Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "f6d65c9e91997c6775de695c0ea8713f5cbe9563",
"body": "…rsisted storage)\n\nThe apparent non-deterministic uBO background hang was NOT an inherent\nincompatibility and NOT triggered by webRequest documentUrl (a red herring). By\ninterrupting the wedged background and dumping the goja stack + esbuild bundle, the\nloop was traced to uBO's cacheStorage read pat\n[…]\nke test/vet/eval (48/48) green; gofmt + staticcheck clean.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>\nClaude-Session: https://claude.ai/code/session_01XvSmg4gm76cedsF2rZ9YWZ",
"is_bot": false,
"headline": "fix(webext): root-cause the uBlock Origin \"infinite loop\" (corrupt pe…",
"author_name": "Christopher Davenport",
"author_login": "ChristopherDavenport",
"committed_at": "2026-07-04T17:44:36Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "b2d184accbe757f90dfbffecaf1f4fcd40e773ad",
"body": "Validated the runtime against unmodified real extensions (uBlock Origin 1.72.0 and\nPrivacy Badger, both MV2 with a background *page*), closing the gaps that surfaced.\nSee ADR 0010 (real-extension bring-up amendment). Extensions are never vendored; an\nenv-gated, CI-skipped smoke test (internal/js/rea\n[…]\nke test/vet/eval (48/48) green; gofmt +\nstaticcheck clean.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>\nClaude-Session: https://claude.ai/code/session_01XvSmg4gm76cedsF2rZ9YWZ",
"is_bot": false,
"headline": "feat(webext): real-extension bring-up (uBlock Origin, Privacy Badger)",
"author_name": "Christopher Davenport",
"author_login": "ChristopherDavenport",
"committed_at": "2026-07-04T17:27:07Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "4d4ec33630dad957eafcb5fdf9a16ee667bb025f",
"body": "Manifest-V2 uBlock Origin does its own network filtering in the background: it\nregisters a blocking chrome.webRequest.onBeforeRequest listener and returns\n{cancel:true}/{redirectUrl}. unblink doesn't reimplement that matcher — it delivers\neach subrequest to the background's listeners and honors the \n[…]\n worlds, scriptlets (##+js), IndexedDB/cacheStorage shim.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>\nClaude-Session: https://claude.ai/code/session_01XvSmg4gm76cedsF2rZ9YWZ",
"is_bot": false,
"headline": "feat(webext): MV2 webRequest.onBeforeRequest blocking (Phase 5)",
"author_name": "Christopher Davenport",
"author_login": "ChristopherDavenport",
"committed_at": "2026-07-04T16:51:59Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "ffad81971de3e88f5a93330ca5d9c0c3f4c47100",
"body": "…Phase 4)\n\nFills in the pieces a stock MV3 build (uBlock Origin Lite) leans on. See ADR 0010\n(Phase 4 amendment).\n\n- chrome-extension:// resource serving (internal/js/extresource.go): a content\n script's fetch(chrome.runtime.getURL(...)) now resolves to the packaged file\n instead of the network. e\n[…]\n-script\n worlds, scriptlets, IndexedDB/cacheStorage shim.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>\nClaude-Session: https://claude.ai/code/session_01XvSmg4gm76cedsF2rZ9YWZ",
"is_bot": false,
"headline": "feat(webext): extension resources, storage persistence, dynamic DNR (…",
"author_name": "Christopher Davenport",
"author_login": "ChristopherDavenport",
"committed_at": "2026-07-04T16:45:42Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "2277938a063687645663898ab1aede84786a729d",
"body": "Adds the persistent background context and the message path uBlock Origin's\n*dynamic* cosmetic filtering uses (a content script asks the background which\nselectors apply to the current host, then hides them). See ADR 0010 (Phase 3\namendment).\n\n- Background worker (internal/js/bgworker.go): the exten\n[…]\nDocs: ADR 0010 Phase 3 amendment, README, architecture.md.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>\nClaude-Session: https://claude.ai/code/session_01XvSmg4gm76cedsF2rZ9YWZ",
"is_bot": false,
"headline": "feat(webext): background worker + runtime messaging (Phase 3)",
"author_name": "Christopher Davenport",
"author_login": "ChristopherDavenport",
"committed_at": "2026-07-04T16:08:40Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "3a6ce39a0b971cca83ed0bc6e210d50f58b7176a",
"body": "…ase 2)\n\nAdds the WebExtensions surface that lets an extension modify the page, not just\nblock requests — the biggest Markdown-quality lever, since unblink emits text and\nalready skips image/CSS fetches. See ADR 0010 (Phase 2 amendment).\n\n- Cosmetic filtering (internal/js/cosmetic.go): with no CSSOM\n[…]\ne 2 amendment, README Extensions section, architecture.md.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>\nClaude-Session: https://claude.ai/code/session_01XvSmg4gm76cedsF2rZ9YWZ",
"is_bot": false,
"headline": "feat(webext): content scripts, chrome API, and cosmetic filtering (Ph…",
"author_name": "Christopher Davenport",
"author_login": "ChristopherDavenport",
"committed_at": "2026-07-04T15:50:40Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "7c92e0ba81a2d6f6a46e0506f0070b2bfa1d7dda",
"body": "…twork filtering (Phase 1)\n\nLoad user-supplied browser extensions at runtime (--extension <dir|.xpi|.crx|.zip>,\n--extensions-dir) so best-in-class GPL tooling (uBlock Origin Lite, AdGuard MV3)\nextends unblink without entering the MIT tree — the extension stays a separate\nartifact, like a browser add\n[…]\nE Extensions section + flags, architecture.md phase entry.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>\nClaude-Session: https://claude.ai/code/session_01XvSmg4gm76cedsF2rZ9YWZ",
"is_bot": false,
"headline": "feat(webext): runtime WebExtension loading + declarativeNetRequest ne…",
"author_name": "Christopher Davenport",
"author_login": "ChristopherDavenport",
"committed_at": "2026-07-04T15:33:13Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "3fddf9dbbf568074ee20593418b2e6fadf056c6e",
"body": "…-loading-byte-budgets\n\nfeat(js): resource-based JS budgets + concurrent module-graph warming",
"is_bot": false,
"headline": "Merge pull request #40 from ChristopherDavenport/feat/parallel-module…",
"author_name": "Christopher Davenport",
"author_login": "ChristopherDavenport",
"committed_at": "2026-07-04T13:36:25Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "eb74cd51d21febdd27a0f864a9ac0a01c1f5f135",
"body": "Replace the count-shaped JS network caps with resource-based bounds and\nwarm the code-split module graph concurrently, so heavy code-split SPAs\n(Astro/Vite/webpack chunk graphs) render within budget instead of\ntiming out. See ADR 0009.\n\n- Byte budget replaces the request-count budget: guardedTranspo\n[…]\nhe hits.\n Adds no async primitive, so the ADR 0004 settle proof holds.\n- Surface net_bytes render diagnostic.\n\nValidated: gofmt/vet clean, make test + eval (48/48), go test -race\n./internal/js clean.",
"is_bot": false,
"headline": "feat(js): resource-based JS budgets + concurrent module-graph warming",
"author_name": "Christopher Davenport",
"author_login": "ChristopherDavenport",
"committed_at": "2026-07-04T13:34:50Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "408966c71f2dcd848ab35cf0b152208c38d8f7c3",
"body": "Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>\nClaude-Session: https://claude.ai/code/session_01Ghmk4bFbWqsZwSKXGmx7HJ",
"is_bot": false,
"headline": "chore(release): v0.21.0 changelog + plugin manifest",
"author_name": "Christopher Davenport",
"author_login": "ChristopherDavenport",
"committed_at": "2026-07-04T04:11:41Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "a5cbc73cf283f38f065cc031256358207fa0c88e",
"body": "feat(browse): auto-detect repeating collections + propose extract schemas",
"is_bot": false,
"headline": "Merge pull request #39 from ChristopherDavenport/feat/browse-collections",
"author_name": "Christopher Davenport",
"author_login": "ChristopherDavenport",
"committed_at": "2026-07-04T04:07:07Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "9dfe54bf828ae525dfdf1e8a151e4a8b33066097",
"body": "feat(mcp): add extract tool (CSS-schema extraction)",
"is_bot": false,
"headline": "Merge pull request #37 from ChristopherDavenport/feat/extract-tool",
"author_name": "Christopher Davenport",
"author_login": "ChristopherDavenport",
"committed_at": "2026-07-04T04:04:43Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "831b74645716752c042211011c0df4b274b091dc",
"body": "…emas\n\nClose the discovery gap for the extract tool: extract needs CSS selectors,\nbut an agent had no way to find them short of reading raw HTML. browse — where\nan agent already orients — now auto-detects a page's dominant repeating\nrecord-sets (product lists, search results, table-like rows) and re\n[…]\n then extract pulls all records via the\nsuggested schema).\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>\nClaude-Session: https://claude.ai/code/session_01Ghmk4bFbWqsZwSKXGmx7HJ",
"is_bot": false,
"headline": "feat(browse): auto-detect repeating collections + propose extract sch…",
"author_name": "Christopher Davenport",
"author_login": "ChristopherDavenport",
"committed_at": "2026-07-04T04:00:37Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "41cb96b4948a8097aaacd825a4abdc8b3d2089bf",
"body": "Add a caller-directed structured-extraction tool: an agent passes a\nselector->field schema and gets structured records back. This closes the\none Obscura/Lightpanda differentiator (\"CSS-schema extraction\") that fits\nunblink's reduce-to-meaning identity rather than its automation turf.\n\n extract(ur\n[…]\nfence; correct across core/read-only/--disable-js gating).\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>\nClaude-Session: https://claude.ai/code/session_01Ghmk4bFbWqsZwSKXGmx7HJ",
"is_bot": false,
"headline": "feat(mcp): add extract tool (CSS-schema extraction)",
"author_name": "Christopher Davenport",
"author_login": "ChristopherDavenport",
"committed_at": "2026-07-04T03:13:55Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "9af778b3f8f0e42e7585f4c8b2e6c9851da44d89",
"body": "Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>\nClaude-Session: https://claude.ai/code/session_01Ghmk4bFbWqsZwSKXGmx7HJ",
"is_bot": false,
"headline": "chore(release): v0.20.0 changelog + plugin manifest",
"author_name": "Christopher Davenport",
"author_login": "ChristopherDavenport",
"committed_at": "2026-07-04T02:31:25Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "23d7ab1410c189f3defc56d7ac5e5f627beafed0",
"body": "Add requests, console, and cookies inspection tools",
"is_bot": false,
"headline": "Merge pull request #36 from ChristopherDavenport/feat/inspection-tools",
"author_name": "Christopher Davenport",
"author_login": "ChristopherDavenport",
"committed_at": "2026-07-04T02:29:51Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "7a9c5218a9228755886849ab857c6c34a7051180",
"body": "Three inspection tools surfaced by the charlotte comparison, all fitting\nthe no-layout-engine mission:\n\n- requests: the network requests a page's JavaScript made while rendering\n (method/url/status). The escape hatch for data-driven pages — render\n once, see the JSON endpoint the page fetched, the\n[…]\nree join the tool registry, presets, and capability gates.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>\nClaude-Session: https://claude.ai/code/session_01Ghmk4bFbWqsZwSKXGmx7HJ",
"is_bot": false,
"headline": "feat(mcp): add requests, console, and cookies tools",
"author_name": "Christopher Davenport",
"author_login": "ChristopherDavenport",
"committed_at": "2026-07-04T02:28:02Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "302ca2246cc13cc89fcc6d2093631b999bc15830",
"body": "Configurable tool exposure: presets + capability auto-gating",
"is_bot": false,
"headline": "Merge pull request #35 from ChristopherDavenport/feat/tool-exposure",
"author_name": "Christopher Davenport",
"author_login": "ChristopherDavenport",
"committed_at": "2026-07-04T01:54:33Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "067565cc50a6ae4843ac4edae4b35273d05257db",
"body": "…esentation\n\nCharlotte-inspired structured representation (regions, ARIA state, hash IDs, metadata, outline)",
"is_bot": false,
"headline": "Merge pull request #34 from ChristopherDavenport/feat/structured-repr…",
"author_name": "Christopher Davenport",
"author_login": "ChristopherDavenport",
"committed_at": "2026-07-04T01:54:17Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2f1a5198d9c8821dd442fa4edb61c9bd30719651",
"body": "staticcheck SA4000 flagged `hashID(...) != hashID(...)` as identical\nexpressions on both sides of !=. Compare the id of the same button across\ntwo independent parses instead — a genuine determinism check (distinct\nnodes, same inputs) that also satisfies the linter.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>\nClaude-Session: https://claude.ai/code/session_01Ghmk4bFbWqsZwSKXGmx7HJ",
"is_bot": false,
"headline": "test(dom): make hashID determinism check not a self-comparison",
"author_name": "Christopher Davenport",
"author_login": "ChristopherDavenport",
"committed_at": "2026-07-04T01:52:46Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "3a597c7973a9e46a815e506fb58de16c26c10337",
"body": "The server advertises 14 tools; every one costs the model context on each\nturn. Two levers to trim the surface to what's useful:\n\n- Capability auto-gating (always on): a tool that can only error when\n unconfigured is never registered. `search` is hidden without a\n `--search-provider`; `interact` i\n[…]\ns routes every tool through a single gated addTool helper.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>\nClaude-Session: https://claude.ai/code/session_01Ghmk4bFbWqsZwSKXGmx7HJ",
"is_bot": false,
"headline": "feat(mcp): configurable tool exposure (presets + capability auto-gating)",
"author_name": "Christopher Davenport",
"author_login": "ChristopherDavenport",
"committed_at": "2026-07-04T01:24:05Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "3ca81e10e919acf7d07f3273c42a0f71a91f9703",
"body": "Add a semantic region map to the browse result: page.Region records each\nARIA landmark (banner/navigation/main/complementary/contentinfo/form/\nsearch/region) with a role, accessible label, and a per-region\ninteractive inventory (links/forms/controls/headings) — charlotte's\n\"by-landmark\" orientation,\n[…]\n (which was a page-wide cost even on\nlandmark-free pages).\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>\nClaude-Session: https://claude.ai/code/session_01Ghmk4bFbWqsZwSKXGmx7HJ",
"is_bot": false,
"headline": "feat(browse): landmark/region map with by-region counts",
"author_name": "Christopher Davenport",
"author_login": "ChristopherDavenport",
"committed_at": "2026-07-04T01:08:08Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "3d5436ca6ee1af0b2ee6cb5b9c7f232ed64a3b71",
"body": "Surface p.Meta.Headings as a structured `headings[]` (level/text/id) on\nthe browse result, alongside the existing indented-text outline (kept for\nback-compat). Level encodes depth, so a flat list is far cheaper than a\nnested tree while letting an agent rebuild the hierarchy or deep-link via\n`#id`. H\n[…]\n heading-spam page can't bloat\nthe cheap orientation call.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>\nClaude-Session: https://claude.ai/code/session_01Ghmk4bFbWqsZwSKXGmx7HJ",
"is_bot": false,
"headline": "feat(browse): structured heading outline with anchor ids",
"author_name": "Christopher Davenport",
"author_login": "ChristopherDavenport",
"committed_at": "2026-07-04T01:07:31Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "b8075a1f429a6cbfea2d1380ac9bb04728274eda",
"body": "Extend dom.Extract to read the head metadata already sitting in the meta\nmap — og:image (absolutized), author/article:author, article published &\nmodified times, twitter card/site, favicon (link[rel~=icon]), theme-color\n— and group them, with the long-extracted-but-never-surfaced canonical,\ninto a c\n[…]\nries none; every field omitempty, so it stays token-cheap.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>\nClaude-Session: https://claude.ai/code/session_01Ghmk4bFbWqsZwSKXGmx7HJ",
"is_bot": false,
"headline": "feat(browse): unified page-metadata object",
"author_name": "Christopher Davenport",
"author_login": "ChristopherDavenport",
"committed_at": "2026-07-04T01:06:19Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "e2adafab106fcf944d09c4b209dc4f7b7b238f88",
"body": "Add the semantic-accessibility foundation (internal/dom/aria.go): a\ncomputable subset of the WAI-ARIA accessible-name algorithm, ARIA-state\nreads, and mutation-resilient content-hash element ids — all from the\nparsed node tree, no browser (unblink has no layout engine).\n\npage.Control/Field now carry\n[…]\ntable no-nth structural signature, and the collision rule.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>\nClaude-Session: https://claude.ai/code/session_01Ghmk4bFbWqsZwSKXGmx7HJ",
"is_bot": false,
"headline": "feat(dom): interactive ARIA state + stable element ids",
"author_name": "Christopher Davenport",
"author_login": "ChristopherDavenport",
"committed_at": "2026-07-04T01:04:15Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "0bdcbafb84c4d564a39afb743e706f491033b92b",
"body": "feat(js): broad Web API surface (Web API tiers 1–3 + crypto.subtle) — v0.19.0",
"is_bot": false,
"headline": "Merge pull request #33 from ChristopherDavenport/feat/web-api-tiers",
"author_name": "Christopher Davenport",
"author_login": "ChristopherDavenport",
"committed_at": "2026-07-03T23:55:19Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "de2e70e7f8dd7f148f6bac16c310e77b97d4b323",
"body": "Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>\nClaude-Session: https://claude.ai/code/session_01Ghmk4bFbWqsZwSKXGmx7HJ",
"is_bot": false,
"headline": "chore(release): v0.19.0 changelog + plugin manifest",
"author_name": "Christopher Davenport",
"author_login": "ChristopherDavenport",
"committed_at": "2026-07-03T23:53:31Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "1c33c587cd051f045062d8069ced00615d89e611",
"body": "The \"What it forfeits\" JS bullet claimed canvas/WebGL/Workers/WebSocket make\npages \"not fully materialize\" — no longer accurate now that the crash-avoidance\nWeb API surface (Tiers 1-3) is present. Reframe the ceiling around what actually\nstays forfeit (pixels/layout and second-thread features), note\n[…]\n\" (JS is on by default) in the at-a-glance JavaScript row.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>\nClaude-Session: https://claude.ai/code/session_01Ghmk4bFbWqsZwSKXGmx7HJ",
"is_bot": false,
"headline": "docs(comparison): reflect the broad Web API surface (Phases 24-26)",
"author_name": "Christopher Davenport",
"author_login": "ChristopherDavenport",
"committed_at": "2026-07-03T23:49:39Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "f01c811b02c4f67c9f333a682ecabc179ef98f29",
"body": "Flip the niche tier from \"leave undefined until a page crashes\" to proactive\ninert stubs, all in preludeAPIJS. None gate textual content, but a page touching\none unconditionally at boot (video.play(), new AudioContext(), new Notification(),\na WebGPU/WebRTC probe) would abort hydration without them. \n[…]\n/webapi_tier3_test.go and js-api-smoke markers\napi-26..27.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>\nClaude-Session: https://claude.ai/code/session_01Ghmk4bFbWqsZwSKXGmx7HJ",
"is_bot": false,
"headline": "feat(js): render Web API tier 3 crash-avoidance stubs (Phase 26)",
"author_name": "Christopher Davenport",
"author_login": "ChristopherDavenport",
"committed_at": "2026-07-03T23:47:38Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "37dcfbdbb7209df7827f43a2a6948d7fffb0122c",
"body": "The situational tier, once tier 1 shipped. All in preludeAPIJS except the\ncustom-element lifecycle hook and the crypto.subtle natives:\n\n- FULL: DOMMatrix/DOMPoint/DOMRect/DOMQuad/Path2D (real pure-JS matrix math);\n TextEncoderStream/TextDecoderStream over the tier-1 Streams; disconnectedCallback\n \n[…]\nle_fuzz_test.go, and\njs-api-smoke eval markers api-18..25.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>\nClaude-Session: https://claude.ai/code/session_01Ghmk4bFbWqsZwSKXGmx7HJ",
"is_bot": false,
"headline": "feat(js): render Web API tier 2 + broad crypto.subtle (Phase 25)",
"author_name": "Christopher Davenport",
"author_login": "ChristopherDavenport",
"committed_at": "2026-07-03T23:46:48Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "21a8e9186f71c3037ea1f60270f47134a950657c",
"body": "Close the eight highest-frequency browser-API gaps that crash SPA hydration on\nreal/common sites, each by the cheapest treatment that lets content materialize\n(the full/stub/leave-undefined rubric from docs/web-api-priorities.md):\n\n- FULL: CSS.escape/supports; FileReader and ReadableStream/WritableS\n[…]\npi_tier1_test.go and js-api-smoke eval markers api-11..17.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>\nClaude-Session: https://claude.ai/code/session_01Ghmk4bFbWqsZwSKXGmx7HJ",
"is_bot": false,
"headline": "feat(js): render Web API tier 1 (Phase 24)",
"author_name": "Christopher Davenport",
"author_login": "ChristopherDavenport",
"committed_at": "2026-07-03T23:46:06Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "733d3aff3ecc577d2696d9e1a50a4465311f56bf",
"body": "…t-drop-js\n\nchore: drop deprecated --js from the plugin manifest",
"is_bot": false,
"headline": "Merge pull request #32 from ChristopherDavenport/chore/plugin-manifes…",
"author_name": "Christopher Davenport",
"author_login": "ChristopherDavenport",
"committed_at": "2026-07-03T20:05:22Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a815ecd82003a60c8b650d101310fce99b7cad5a",
"body": "The v0.18.0 release re-pinned the plugin manifest to the 0.18.0 image but kept\nthe --js arg the release sync only maps the image tag, not the arg list. JS is\non by default as of v0.18.0 (--js is a deprecated no-op), so the installed\nexample should not pass it. The sync job never re-adds args, so this is durable.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>\nClaude-Session: https://claude.ai/code/session_01Ghmk4bFbWqsZwSKXGmx7HJ",
"is_bot": false,
"headline": "chore: drop deprecated --js from the plugin manifest",
"author_name": "Christopher Davenport",
"author_login": "ChristopherDavenport",
"committed_at": "2026-07-03T20:03:51Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "1cc590e2ef2e803c8bcd6356e9b674890c1696db",
"body": null,
"is_bot": true,
"headline": "chore: sync plugin manifest to v0.18.0",
"author_name": "github-actions[bot]",
"author_login": "github-actions[bot]",
"committed_at": "2026-07-03T20:01:51Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "323184d2a41333eff38e54132abd85bd131078d7",
"body": "…tion\n\nComposed Shadow DOM (Phase 23) + JavaScript on by default",
"is_bot": false,
"headline": "Merge pull request #31 from ChristopherDavenport/shadow-dom-encapsula…",
"author_name": "Christopher Davenport",
"author_login": "ChristopherDavenport",
"committed_at": "2026-07-03T19:57:31Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1f0addd20581d99ea3165d7d5721c5971bebf6fc",
"body": "Two changes for the v0.18.0 minor release.\n\nShadow DOM composition (Phase 23, ADR 0005)\n- Replace the flat, non-encapsulating Shadow DOM with a composed,\n encapsulating one. Each shadow root is a detached *html.Node subtree\n (page-JS document.querySelector respects the boundary); a compose pass\n \n[…]\nslots eval case. make test /\neval / vet / gofmt all green.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>\nClaude-Session: https://claude.ai/code/session_01Ghmk4bFbWqsZwSKXGmx7HJ",
"is_bot": false,
"headline": "feat: composed Shadow DOM (Phase 23) + JavaScript on by default",
"author_name": "Christopher Davenport",
"author_login": "ChristopherDavenport",
"committed_at": "2026-07-03T19:55:31Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "d528a6e75d3a126ded4e1f67ccacba28fa533cf7",
"body": "browser: make the per-host politeness rate limiter opt-in (default off)",
"is_bot": false,
"headline": "Merge pull request #30 from ChristopherDavenport/throughput-improvements",
"author_name": "Christopher Davenport",
"author_login": "ChristopherDavenport",
"committed_at": "2026-07-03T16:46:49Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1f34d3d8ed8a95b46226f48f1206ef8b8d38156d",
"body": "--rate-limit now defaults to 0: out of the box unblink runs\nlike-for-like with the other benchmarked tools (none ships a crawl\nlimiter) and throughput is bounded by the site, not by unblink. The\nflag stays — set --rate-limit 5 (with --rate-burst) for the old\npolite-crawl behavior. The crossbench ada\n[…]\nfull window or provably idle by construction). The\ntiming-sensitive settle tests pass 20 consecutive runs; make test +\neval green (47/47 twice).\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "browser: make the per-host politeness rate limiter opt-in (default off)",
"author_name": "Christopher Davenport",
"author_login": "ChristopherDavenport",
"committed_at": "2026-07-03T16:43:16Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "53d3e50e83eed960a19a5848c9b1b640d2aca825",
"body": "Throughput: provable-idle settle, script prefetch, content-keyed caches, markdown memo, honest crossbench",
"is_bot": false,
"headline": "Merge pull request #29 from ChristopherDavenport/throughput-improvements",
"author_name": "Christopher Davenport",
"author_login": "ChristopherDavenport",
"committed_at": "2026-07-03T16:34:26Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "749b6dc2c981fed2bc65b3eea89dec0cfdbd9fe0",
"body": "Full crossbench re-run (all six tools, median of 3, selfcheck passed):\nunblink's SPA renders drop ~200ms -> 2-10ms — now ahead of the warm\nbrowsers (15-22ms) and level with the embedded-V8 engines — with\nsequential throughput 5 -> ~249 pages/s and a newly published 8-way\nconcurrent row at ~827 pages\n[…]\ncture.md\nPhase 22 entry completed, README headline gains the measured render\nclaim, and settled_idle now rides the render-diagnostics debug log.\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "docs: republish measured throughput numbers (Phase 22)",
"author_name": "Christopher Davenport",
"author_login": "ChristopherDavenport",
"committed_at": "2026-07-03T16:31:59Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "da170cb212ee256b7545ca737df9f9e2ea0b0ce8",
"body": "Read recomputed reduce+emit+defang on every call — including every\npagination cursor page, which redid the whole document's reduction and\ndiscarded all chunks but one — even when the fetched+parsed page came\nstraight from the 60s cache. Each cache entry now carries a small memo\nkeyed {mode, safeOutp\n[…]\n cursor page\n\nmake test + eval green (47/47), -race clean. Also picks up a gofmt\nalignment fix in internal/js/context.go from the settle change.\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "browser: memoize reduced markdown on the page-cache entry",
"author_name": "Christopher Davenport",
"author_login": "ChristopherDavenport",
"committed_at": "2026-07-03T16:18:17Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "0edd090a196b3d558254f8c34a4ae958c7e0c90a",
"body": "Two URL-sensitive cache keys made first visits (and any query-varying\nURL) re-pay compile work for byte-identical sources:\n\n- progKey included the script name — the page-position script-N.js for\n initial scripts, chunk:<absURL> for inserted chunks — so the same CDN\n bundle at a different position \n[…]\nnder a unique query per iteration (1.75ms/op with the cached\nbundle vs an esbuild rebuild per iteration before). make test + eval\ngreen (47/47).\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "js: content-only program cache keys; bundle key ignores base query",
"author_name": "Christopher Davenport",
"author_login": "ChristopherDavenport",
"committed_at": "2026-07-03T16:13:30Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "1c557a0d7d0505f1edb1b489fa7212786ff87875",
"body": "runScripts fetched each classic <script src> synchronously on the loop\ngoroutine in document order: N external scripts = N serial round trips\non the render critical path. startPrefetch (armed right after bridge\ninstall, so fetches also overlap prelude execution) now fetches the\ncollected snapshot's \n[…]\n opens. -race clean; make test +\neval green (47/47). Also refreshes the bench header comment that still\ndescribed the pre-ADR-0004 settle floor.\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "js: prefetch initial external script bodies concurrently",
"author_name": "Christopher Davenport",
"author_login": "ChristopherDavenport",
"committed_at": "2026-07-03T16:10:05Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "8f4fe372723855e133c6156586aaaa60246b1004",
"body": "The one-shot render semaphore was pinned at js.DefaultMaxConcurrent=4\nwith no knob: browser.New never called js.WithConcurrency, so a fifth\nconcurrent render always queued regardless of machine size. The new\n--js-concurrency flag (0 = auto) defaults to GOMAXPROCS clamped to\n[4, 16] — renders are CPU\n[…]\nlta on this 4-vCPU machine (auto resolves to the old 4);\nthe win is on wider machines and shows in crossbench's 8-way\nconcurrent-throughput row.\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "browser: scale JS render concurrency with cores (--js-concurrency)",
"author_name": "Christopher Davenport",
"author_login": "ChristopherDavenport",
"committed_at": "2026-07-03T16:05:09Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "1c1a0a51e99d5cfee7176f7bf4247c42f5f3c10b",
"body": "…0004)\n\nEvery JS work source was already visible to the settle check on-loop —\nnetwork via the pending bracket (incremented synchronously before the\nfetch goroutine spawns), macrotasks via the prelude's wrapped-timer\nhandle table (rAF/rIC/postMessage/MessagePort all route through it),\nmicrotasks dra\n[…]\n: idle pages settle fast, and every\nmacrotask source (timers, immediates, message ports, network) holds\nthe settle open until its content lands.\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "js: settle on provable idleness, not only the 60ms quiet window (ADR …",
"author_name": "Christopher Davenport",
"author_login": "ChristopherDavenport",
"committed_at": "2026-07-03T16:04:14Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "b4cf20ab1eff19499c09edc460e0b24e28dffdac",
"body": "…tures\n\nThe unblink adapter never passed --rate-limit, so the default 5 req/s\nper-host limiter paced every cache-busted render against the single\nfixture host at ~200ms/request. The published SPA latency medians\n(201/199/201ms React/Vue/Lit, uniform across frameworks with very\ndifferent engine costs\n[…]\npoliteness limiter, so the fairness\nrules now record this as the one deliberate deviation from tool\ndefaults. Production defaults are unchanged.\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "crossbench: disable unblink's politeness limiter against loopback fix…",
"author_name": "Christopher Davenport",
"author_login": "ChristopherDavenport",
"committed_at": "2026-07-03T15:51:52Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "1160d975a6525a526e6b0c3f07e4733cd8bd0d30",
"body": "docs: reconcile content-boundary table after off-screen strip fix (#27)",
"is_bot": false,
"headline": "Merge pull request #28 from ChristopherDavenport/reconcile-safety-table",
"author_name": "Christopher Davenport",
"author_login": "ChristopherDavenport",
"committed_at": "2026-07-03T15:17:57Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2db265f3e5d3461c403ba973bb102d509dbfe5aa",
"body": "PR #27 closed the off-screen-hidden-text leak in the default article read, so\nre-running `make crossbench ARGS=\"-safety\"` now shows unblink stripping all\nthree hidden-instruction blocks (0/3 leaked, was 1/3). Updates the measured\ntable, the at-a-glance safety row, and the prose — which now credits u\n[…]\nen-text\nfiltering is a heuristic backstopped by the fence on every tool.\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>\nClaude-Session: https://claude.ai/code/session_013w44L7nWYretN5cq95mFNu",
"is_bot": false,
"headline": "docs: reconcile content-boundary table after the off-screen strip fix",
"author_name": "Christopher Davenport",
"author_login": "ChristopherDavenport",
"committed_at": "2026-07-03T15:15:40Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "2da6111cfce083a0f394610edb6144012e7f9a30",
"body": "reduce: strip off-screen hidden text in the default article read",
"is_bot": false,
"headline": "Merge pull request #27 from ChristopherDavenport/reduce-offscreen-strip",
"author_name": "Christopher Davenport",
"author_login": "ChristopherDavenport",
"committed_at": "2026-07-03T15:12:43Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "78bc4ede66a38fc6541b1622731bbe1c9d0e487a",
"body": "The safe-output hidden-strip ran only after readability extraction, on the\nextracted node. But readability drops inline style attributes while cleaning,\nwhich erases the off-screen-positioning signal (left:-9999px, clip:rect(0…))\nthat StripHidden keys on — so an injected off-screen \"screen-reader\" b\n[…]\nced by the cross-tool content-boundary probe (scripts/membench -safety).\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>\nClaude-Session: https://claude.ai/code/session_013w44L7nWYretN5cq95mFNu",
"is_bot": false,
"headline": "reduce: strip off-screen hidden text in the default article read",
"author_name": "Christopher Davenport",
"author_login": "ChristopherDavenport",
"committed_at": "2026-07-03T15:11:06Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "6219bce85342d42b8770db5ec9369547355389f4",
"body": "…tions/actions/setup-go-6\n\nBump actions/setup-go from 5 to 6",
"is_bot": false,
"headline": "Merge pull request #25 from ChristopherDavenport/dependabot/github_ac…",
"author_name": "Christopher Davenport",
"author_login": "ChristopherDavenport",
"committed_at": "2026-07-03T15:01:45Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e1c1f563c29bdc4a9742f59a8a5288dcd6bff11e",
"body": "Cross-tool benchmark harness: measured footprint, latency, and token cost for all five tools",
"is_bot": false,
"headline": "Merge pull request #26 from ChristopherDavenport/cross-tool-benchmarks",
"author_name": "Christopher Davenport",
"author_login": "ChristopherDavenport",
"committed_at": "2026-07-03T15:01:30Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "54c71391638a1e0c573cae0bd4c2c8d2560ac3fa",
"body": "…handling\n\nAdds a `-safety` mode to the membench harness that measures a different axis\nthan the numeric passes: what an untrusted page can smuggle into the model\nthrough each tool's read surface. It drives every tool's read-article against\na fixture carrying three hidden-instruction blocks (display\n[…]\nflated Obscura's browser_markdown path with its canonical snapshot read.\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>\nClaude-Session: https://claude.ai/code/session_013w44L7nWYretN5cq95mFNu",
"is_bot": false,
"headline": "Add content-boundary probe (-safety); measure hidden-text/beacon/PDF …",
"author_name": "Christopher Davenport",
"author_login": "ChristopherDavenport",
"committed_at": "2026-07-03T14:03:51Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "114df1baf913e7f44996cc8d2fe5952ebaee3e04",
"body": "scripts/membench generalizes from a chromedp-only unblink-vs-Chromium\nbaseline into a generic stdio MCP client with per-tool adapters (unblink,\nPlaywright MCP, Charlotte, Obscura, Lightpanda) driving identical local\nfixtures, plus an offline o200k_base BPE token meter (module-local deps —\nnothing to\n[…]\nred baseline (5× lighter\nidle, 10× faster start than headless Chromium).\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>\nClaude-Session: https://claude.ai/code/session_013w44L7nWYretN5cq95mFNu",
"is_bot": false,
"headline": "Add cross-tool benchmark harness; measure all five tools head-to-head",
"author_name": "Christopher Davenport",
"author_login": "ChristopherDavenport",
"committed_at": "2026-07-03T13:37:02Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "b06c34a3c45a797bc64f6c21f50770eb5acab37b",
"body": "Bumps [actions/setup-go](https://github.com/actions/setup-go) from 5 to 6.\n- [Release notes](https://github.com/actions/setup-go/releases)\n- [Commits](https://github.com/actions/setup-go/compare/v5...v6)\n\n---\nupdated-dependencies:\n- dependency-name: actions/setup-go\n dependency-version: '6'\n dependency-type: direct:production\n update-type: version-update:semver-major\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
"is_bot": true,
"headline": "Bump actions/setup-go from 5 to 6",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-07-03T06:53:56Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "3971eb8164a9d491ecf0382e78fe330455f79e55",
"body": "Adopt golangci-lint; drop retired Go Report Card badge",
"is_bot": false,
"headline": "Merge pull request #24 from ChristopherDavenport/golangci-lint",
"author_name": "Christopher Davenport",
"author_login": "ChristopherDavenport",
"committed_at": "2026-07-03T04:21:30Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1b62f0cf54a564d562dff8ab7c9c620af4e534e6",
"body": "goreportcard.com has sunset and recommends golangci-lint. Adds .golangci.yml\n(v2, default linters; errcheck relaxed for idiomatic Close and test/eval\nHTTP handlers; third_party/ exempt like make vet), a make lint target, and a\nCI lint step (golangci-lint-action@v9, v2.12.2). First run's one real\nfinding — dead js.Context.settleThenClose — removed. Docs updated\n(CLAUDE.md, CONTRIBUTING, PR template, CHANGELOG).\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "Adopt golangci-lint; drop retired Go Report Card badge",
"author_name": "Christopher Davenport",
"author_login": "ChristopherDavenport",
"committed_at": "2026-07-03T04:18:22Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "557701643e2e41642c2263672dcdbcc35dfd2e13",
"body": "…s/checkout-7'",
"is_bot": false,
"headline": "Merge remote-tracking branch 'origin/dependabot/github_actions/action…",
"author_name": "Christopher Davenport",
"author_login": "ChristopherDavenport",
"committed_at": "2026-07-03T04:07:00Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "fe0f8194530d6aac725b9b7a87382675e78e8fae",
"body": "…aser/goreleaser-action-7'",
"is_bot": false,
"headline": "Merge remote-tracking branch 'origin/dependabot/github_actions/gorele…",
"author_name": "Christopher Davenport",
"author_login": "ChristopherDavenport",
"committed_at": "2026-07-03T04:06:49Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "01622aae8b720b5049fa554e6feacf6288bde1e2",
"body": "…/login-action-4'\n\n# Conflicts:\n#\t.github/workflows/release.yml",
"is_bot": false,
"headline": "Merge remote-tracking branch 'origin/dependabot/github_actions/docker…",
"author_name": "Christopher Davenport",
"author_login": "ChristopherDavenport",
"committed_at": "2026-07-03T04:06:49Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "444cbbb569138c7ba2e56317cc27ef106db852e9",
"body": "…/setup-qemu-action-4'\n\n# Conflicts:\n#\t.github/workflows/release.yml",
"is_bot": false,
"headline": "Merge remote-tracking branch 'origin/dependabot/github_actions/docker…",
"author_name": "Christopher Davenport",
"author_login": "ChristopherDavenport",
"committed_at": "2026-07-03T04:06:28Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1eff55ecd0aa31391b056814c48bb6cedacefb91",
"body": "…tions/docker/setup-buildx-action-4\n\nBump docker/setup-buildx-action from 3 to 4",
"is_bot": false,
"headline": "Merge pull request #18 from ChristopherDavenport/dependabot/github_ac…",
"author_name": "Christopher Davenport",
"author_login": "ChristopherDavenport",
"committed_at": "2026-07-03T04:04:31Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c06a24a6e410ad3cddacb354fa539b0d88f9d0a2",
"body": null,
"is_bot": true,
"headline": "chore: sync plugin manifest to v0.17.1",
"author_name": "github-actions[bot]",
"author_login": "github-actions[bot]",
"committed_at": "2026-07-03T03:58:26Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "84bdb2b6bbed277215a27074a9a8116dbd0ee90c",
"body": "Fix go install: vendored pdf by in-repo path (v0.17.1)",
"is_bot": false,
"headline": "Merge pull request #23 from ChristopherDavenport/fix-go-install",
"author_name": "Christopher Davenport",
"author_login": "ChristopherDavenport",
"committed_at": "2026-07-03T03:53:19Z",
"body_truncated": false,
"is_coding_agent": false
}
],
"releases_count": 11,
"commits_last_year": 143,
"latest_release_at": "2026-07-06T20:57:50Z",
"latest_release_tag": "v0.24.0",
"releases_from_tags": false,
"days_since_last_push": 4,
"active_weeks_last_year": 1,
"days_since_latest_release": 15,
"mean_days_between_releases": 0.4
},
"community": {
"has_readme": true,
"has_license": true,
"has_description": true,
"has_contributing": true,
"health_percentage": 85,
"has_issue_template": false,
"has_code_of_conduct": false,
"has_pull_request_template": true
},
"ecosystem": {
"packages": [
{
"name": "github.com/christopherdavenport/unblink",
"exists": true,
"license": null,
"keywords": [],
"ecosystem": "go",
"matches_repo": true,
"registry_url": "https://pkg.go.dev/github.com/christopherdavenport/unblink",
"is_deprecated": false,
"latest_version": "v0.24.0",
"repository_url": "https://github.com/christopherdavenport/unblink",
"versions_count": 11,
"total_downloads": null,
"dependents_count": null,
"deprecation_note": null,
"maintainers_count": null,
"monthly_downloads": null,
"first_published_at": null,
"latest_published_at": "2026-07-06T20:53:41Z",
"latest_version_yanked": null,
"days_since_latest_publish": 15
}
]
},
"popularity": {
"forks": 1,
"stars": 7,
"watchers": 1,
"fork_history": {
"days": [
{
"date": "2026-07-07",
"count": 1
}
],
"complete": true,
"collected": 1,
"total_forks": 1
},
"star_history": {
"days": [
{
"date": "2026-07-06",
"count": 3
},
{
"date": "2026-07-07",
"count": 3
},
{
"date": "2026-07-14",
"count": 1
}
],
"complete": true,
"collected": 7,
"total_stars": 7
},
"open_issues_and_prs": 5
},
"ai_readiness": {
"has_nix": false,
"example_dirs": [],
"has_llms_txt": false,
"has_dockerfile": true,
"has_mcp_signal": true,
"bootstrap_files": [
"Makefile"
],
"api_schema_files": [],
"has_devcontainer": false,
"typecheck_configs": [],
"toolchain_manifests": [
"go.mod",
"scripts/membench/go.mod"
],
"largest_source_bytes": 146843,
"source_files_sampled": 300,
"oversized_source_files": 4,
"agent_instruction_files": [
"CLAUDE.md"
],
"agent_instruction_max_bytes": 22109
},
"dependencies": {
"manifests": [
"go.mod"
],
"advisories": {
"error": null,
"scope": null,
"source": null,
"findings": [],
"collected": false,
"malicious": [],
"truncated": false,
"by_severity": {},
"advisory_count": 0,
"affected_count": 0,
"assessed_count": 0,
"malicious_count": 0,
"assessed_package": null,
"unassessed_count": 0,
"direct_affected_count": 0
},
"ecosystems": [
"go"
],
"dependencies": [
{
"name": "codeberg.org/readeck/go-readability/v2",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v2.1.2"
},
{
"name": "github.com/JohannesKaufmann/html-to-markdown/v2",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v2.5.2"
},
{
"name": "github.com/andybalholm/brotli",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.2.2"
},
{
"name": "github.com/andybalholm/cascadia",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.3.4"
},
{
"name": "github.com/dop251/goja",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v0.0.0-20260629171413-2a84ae0cf10d"
},
{
"name": "github.com/dop251/goja_nodejs",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v0.0.0-20260212111938-1f56ff5bcf14"
},
{
"name": "github.com/evanw/esbuild",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v0.28.1"
},
{
"name": "github.com/microcosm-cc/bluemonday",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.0.27"
},
{
"name": "github.com/mmcdole/gofeed",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.3.0"
},
{
"name": "github.com/modelcontextprotocol/go-sdk",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.6.1"
},
{
"name": "github.com/nlnwa/whatwg-url",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v0.6.2"
},
{
"name": "github.com/refraction-networking/utls",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.8.2"
},
{
"name": "golang.org/x/image",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v0.43.0"
},
{
"name": "golang.org/x/net",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v0.56.0"
},
{
"name": "golang.org/x/text",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v0.38.0"
},
{
"name": "golang.org/x/time",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v0.15.0"
}
],
"all_dependencies": {
"error": "GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository",
"source": null,
"packages": [],
"collected": false,
"truncated": false,
"total_count": null,
"direct_count": null,
"indirect_count": null
}
},
"maintainership": {
"issues": {
"open_prs": 5,
"merged_prs": 48,
"open_issues": 0,
"closed_ratio": null,
"closed_issues": 0,
"closed_unmerged_prs": 4
},
"bus_factor": 1,
"bot_contributors": 2,
"top_contributors": [
{
"type": "User",
"login": "ChristopherDavenport",
"commits": 133,
"avatar_url": "https://avatars.githubusercontent.com/u/10272700?v=4"
}
],
"contributors_sampled": 1,
"top_contributor_share": 1
},
"quality_signals": {
"has_ci": true,
"has_tests": true,
"ci_workflows": [
"ci.yml",
"publish-mcp-registry.yml",
"release.yml"
],
"has_docs_dir": true,
"linter_configs": [
".golangci.yml"
],
"has_editorconfig": false,
"has_linter_config": true,
"has_precommit_config": false
},
"security_signals": {
"lockfiles": [
"go.sum"
],
"scorecard": {
"checks": [
{
"name": "Binary-Artifacts",
"score": 10,
"reason": "no binaries found in the repo",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#binary-artifacts"
},
{
"name": "Branch-Protection",
"score": 0,
"reason": "branch protection not enabled on development/release branches",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#branch-protection"
},
{
"name": "CI-Tests",
"score": 10,
"reason": "9 out of 9 merged PRs checked by a CI test -- score normalized to 10",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#ci-tests"
},
{
"name": "CII-Best-Practices",
"score": 0,
"reason": "no effort to earn an OpenSSF best practices badge detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#cii-best-practices"
},
{
"name": "Code-Review",
"score": 0,
"reason": "Found 0/14 approved changesets -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#code-review"
},
{
"name": "Contributors",
"score": 10,
"reason": "project has 9 contributing companies or organizations",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#contributors"
},
{
"name": "Dangerous-Workflow",
"score": 10,
"reason": "no dangerous workflow patterns detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dangerous-workflow"
},
{
"name": "Dependency-Update-Tool",
"score": 10,
"reason": "update tool detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dependency-update-tool"
},
{
"name": "Fuzzing",
"score": 10,
"reason": "project is fuzzed",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#fuzzing"
},
{
"name": "License",
"score": 10,
"reason": "license file detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#license"
},
{
"name": "Maintained",
"score": 0,
"reason": "project was created within the last 90 days. Please review its contents carefully",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#maintained"
},
{
"name": "Packaging",
"score": 10,
"reason": "packaging workflow detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#packaging"
},
{
"name": "Pinned-Dependencies",
"score": 0,
"reason": "dependency not pinned by hash detected -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#pinned-dependencies"
},
{
"name": "SAST",
"score": 0,
"reason": "SAST tool is not run on all commits -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#sast"
},
{
"name": "Security-Policy",
"score": 10,
"reason": "security policy file detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#security-policy"
},
{
"name": "Signed-Releases",
"score": 0,
"reason": "Project has not signed or included provenance with any releases.",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#signed-releases"
},
{
"name": "Token-Permissions",
"score": 0,
"reason": "detected GitHub workflow tokens with excessive permissions",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#token-permissions"
},
{
"name": "Vulnerabilities",
"score": 7,
"reason": "3 existing vulnerabilities detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#vulnerabilities"
}
],
"commit": "d8372b8ccb93f9d0e1e6d9dae8a15aca7fca2606",
"ran_at": "2026-07-22T04:27:13Z",
"aggregate_score": 5,
"scorecard_version": "v5.5.0"
},
"has_codeql_workflow": false,
"has_security_policy": true,
"has_dependabot_config": true
},
"contribution_flow": {
"collected": true,
"ci_last_run_at": "2026-07-17T06:54:26Z",
"oldest_open_prs": [
{
"number": 53,
"created_at": "2026-07-10T06:54:17Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 54,
"created_at": "2026-07-10T06:54:26Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 55,
"created_at": "2026-07-10T06:54:32Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 56,
"created_at": "2026-07-17T06:54:18Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 57,
"created_at": "2026-07-17T06:54:22Z",
"last_comment_at": null,
"last_comment_author": null
}
],
"last_merged_pr_at": "2026-07-06T22:31:23Z",
"ci_last_conclusion": "SUCCESS",
"oldest_open_issues": []
}
},
"config": {
"disabled_metrics": [],
"disabled_categories": [],
"disabled_components": {}
},
"source": {
"url": "https://github.com/ChristopherDavenport/unblink",
"host": "github.com",
"name": "unblink",
"owner": "ChristopherDavenport"
},
"metrics": {
"overall": {
"key": "overall",
"band": "moderate",
"name": "Overall health",
"note": null,
"notes": [],
"value": 62,
"inputs": {
"security": 50,
"vitality": 69,
"community": 43,
"governance": 59,
"engineering": 84
},
"components": []
},
"categories": [
{
"key": "vitality",
"band": "moderate",
"name": "Vitality",
"value": 69,
"weight": 0.22,
"metrics": [
{
"key": "development_activity",
"band": "moderate",
"name": "Development activity",
"note": null,
"notes": [],
"value": 55,
"inputs": {
"commits_last_year": 143,
"human_commit_share": 0.95,
"days_since_last_push": 4,
"active_weeks_last_year": 1
},
"components": [
{
"key": "push_recency",
"name": "Push recency",
"detail": "last push 4 days ago",
"points": 36,
"status": "met",
"details": [
{
"code": "push_recency",
"params": {
"days": 4
}
}
],
"max_points": 36
},
{
"key": "commit_cadence",
"name": "Commit cadence",
"detail": "1/52 weeks with commits",
"points": 0.7,
"status": "partial",
"details": [
{
"code": "commit_cadence_weeks",
"params": {
"weeks": 1
}
}
],
"max_points": 36
},
{
"key": "commit_volume",
"name": "Commit volume",
"detail": "143 commits in the last year",
"points": 18,
"status": "met",
"details": [
{
"code": "commits_last_year",
"params": {
"count": 143
}
}
],
"max_points": 18
},
{
"key": "openssf_scorecard_maintained",
"name": "OpenSSF Scorecard: Maintained",
"detail": "project was created within the last 90 days. Please review its contents carefully",
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
}
]
},
{
"key": "release_discipline",
"band": "excellent",
"name": "Release discipline",
"note": null,
"notes": [],
"value": 90,
"inputs": {
"releases_count": 11,
"latest_release_tag": "v0.24.0",
"releases_from_tags": false,
"days_since_latest_release": 15,
"mean_days_between_releases": 0.4
},
"components": [
{
"key": "ships_releases",
"name": "Ships releases",
"detail": "11 releases published",
"points": 27,
"status": "met",
"details": [
{
"code": "releases_published",
"params": {
"count": 11
}
}
],
"max_points": 27
},
{
"key": "release_recency",
"name": "Release recency",
"detail": "latest release 15 days ago",
"points": 36,
"status": "met",
"details": [
{
"code": "release_recency",
"params": {
"days": 15
}
}
],
"max_points": 36
},
{
"key": "release_cadence",
"name": "Release cadence",
"detail": "a release every ~0.4 days",
"points": 27,
"status": "met",
"details": [
{
"code": "release_cadence",
"params": {
"gap": 0.4
}
}
],
"max_points": 27
},
{
"key": "openssf_scorecard_signed_releases",
"name": "OpenSSF Scorecard: Signed-Releases",
"detail": "Project has not signed or included provenance with any releases.",
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
}
]
},
{
"key": "abandonment",
"band": "excellent",
"name": "Abandonment",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"cap": null,
"state": "unverified",
"guards": [],
"signals": [],
"red_flag": false,
"multiplier_pct": 100,
"declared_reason": null,
"unverified_reason": "repository_too_young",
"unanswered_open_prs": null,
"unanswered_open_issues": null,
"days_since_last_merged_pr": null,
"days_since_last_human_commit": null,
"days_since_last_human_commit_is_floor": false
},
"components": [
{
"key": "project_is_still_maintained",
"name": "Project is still maintained",
"detail": "maintenance record not established from the collected data",
"points": 100,
"status": "met",
"details": [
{
"code": "abandonment_unverified",
"params": {}
}
],
"max_points": 100
}
]
}
],
"description": "Is the project alive — is code being written and are releases shipping?"
},
{
"key": "community",
"band": "at_risk",
"name": "Community & Adoption",
"value": 43,
"weight": 0.18,
"metrics": [
{
"key": "popularity",
"band": "critical",
"name": "Popularity & adoption",
"note": null,
"notes": [],
"value": 13,
"inputs": {
"forks": 1,
"stars": 7,
"watchers": 1,
"growth_state": "unverified",
"growth_factor_pct": 100,
"growth_unverified_reason": "below_threshold"
},
"components": [
{
"key": "stars",
"name": "Stars",
"detail": "7 stars",
"points": 12.6,
"status": "partial",
"details": [
{
"code": "stars",
"params": {
"count": 7
}
}
],
"max_points": 60
},
{
"key": "forks",
"name": "Forks",
"detail": "1 forks",
"points": 0,
"status": "missed",
"details": [
{
"code": "forks",
"params": {
"count": 1
}
}
],
"max_points": 25
},
{
"key": "watchers",
"name": "Watchers",
"detail": "1 watchers",
"points": 0,
"status": "missed",
"details": [
{
"code": "watchers",
"params": {
"count": 1
}
}
],
"max_points": 15
}
]
},
{
"key": "community_health",
"band": "good",
"name": "Community health",
"note": null,
"notes": [],
"value": 77,
"inputs": {
"has_readme": true,
"has_license": true,
"has_contributing": true,
"has_issue_template": false,
"has_code_of_conduct": false,
"has_pull_request_template": true
},
"components": [
{
"key": "readme",
"name": "README",
"detail": null,
"points": 22.5,
"status": "met",
"details": [],
"max_points": 22.5
},
{
"key": "license",
"name": "License",
"detail": "recognized license (MIT)",
"points": 22.5,
"status": "met",
"details": [
{
"code": "license_standard",
"params": {}
},
{
"code": "license_spdx",
"params": {
"spdx": "MIT"
}
}
],
"max_points": 22.5
},
{
"key": "contributing_guide",
"name": "CONTRIBUTING guide",
"detail": null,
"points": 18,
"status": "met",
"details": [],
"max_points": 18
},
{
"key": "code_of_conduct",
"name": "Code of conduct",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 13.5
},
{
"key": "issue_template",
"name": "Issue template",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.2
},
{
"key": "pr_template",
"name": "PR template",
"detail": null,
"points": 6.3,
"status": "met",
"details": [],
"max_points": 6.3
}
]
}
],
"description": "Does the project have users, downloads, attention, and a welcoming setup for contributors?"
},
{
"key": "governance",
"band": "moderate",
"name": "Sustainability & Governance",
"value": 59,
"weight": 0.24,
"metrics": [
{
"key": "maintainer_resilience",
"band": "critical",
"name": "Maintainer resilience (bus factor)",
"note": null,
"notes": [],
"value": 20,
"inputs": {
"bus_factor": 1,
"contributors_sampled": 1,
"top_contributor_share": 1
},
"components": [
{
"key": "bus_factor",
"name": "Bus factor",
"detail": "1 contributor(s) cover half of all commits",
"points": 9,
"status": "partial",
"details": [
{
"code": "bus_factor",
"params": {
"count": 1
}
}
],
"max_points": 54
},
{
"key": "commit_distribution",
"name": "Commit distribution",
"detail": "top contributor authored 100% of commits",
"points": 0,
"status": "missed",
"details": [
{
"code": "top_contributor_share",
"params": {
"share": 100
}
}
],
"max_points": 22.5
},
{
"key": "contributor_breadth",
"name": "Contributor breadth",
"detail": "1 contributors",
"points": 1.4,
"status": "partial",
"details": [
{
"code": "contributors_sampled",
"params": {
"count": 1
}
}
],
"max_points": 13.5
},
{
"key": "openssf_scorecard_contributors",
"name": "OpenSSF Scorecard: Contributors",
"detail": "project has 9 contributing companies or organizations",
"points": 10,
"status": "met",
"details": [],
"max_points": 10
}
]
},
{
"key": "responsiveness",
"band": "moderate",
"name": "Issue & PR responsiveness",
"note": "Excluded from scoring (no data or not applicable): Issue resolution. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"issue_resolution"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 66,
"inputs": {
"merged_prs": 48,
"open_issues": 0,
"closed_issues": 0,
"issue_closed_ratio": null,
"closed_unmerged_prs": 4
},
"components": [
{
"key": "issue_resolution",
"name": "Issue resolution",
"detail": "no issues or no data",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_issues_or_data",
"params": {}
}
],
"max_points": 46.75
},
{
"key": "pr_acceptance",
"name": "PR acceptance",
"detail": "48/52 decided PRs merged",
"points": 35.3,
"status": "partial",
"details": [
{
"code": "decided_prs_merged",
"params": {
"merged": 48,
"decided": 52
}
}
],
"max_points": 38.25
},
{
"key": "openssf_scorecard_code_review",
"name": "OpenSSF Scorecard: Code-Review",
"detail": "Found 0/14 approved changesets -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
}
]
},
{
"key": "stewardship",
"band": "moderate",
"name": "Ownership & stewardship",
"note": "Excluded from scoring (no data or not applicable): Verified domain. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"verified_domain"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 66,
"inputs": {
"followers": 289,
"owner_type": "User",
"is_verified": null,
"owner_login": "ChristopherDavenport",
"public_repos": 304,
"account_age_days": 4229
},
"components": [
{
"key": "ownership_backing",
"name": "Ownership backing",
"detail": "personal (user) account",
"points": 10,
"status": "partial",
"details": [
{
"code": "owner_personal",
"params": {}
}
],
"max_points": 30
},
{
"key": "verified_domain",
"name": "Verified domain",
"detail": "not applicable to user accounts",
"points": 0,
"status": "excluded",
"details": [
{
"code": "not_applicable_to_user_accounts",
"params": {}
}
],
"max_points": 20
},
{
"key": "owner_reach",
"name": "Owner reach",
"detail": "289 followers of ChristopherDavenport",
"points": 17.7,
"status": "partial",
"details": [
{
"code": "owner_followers",
"params": {
"count": 289,
"login": "ChristopherDavenport"
}
}
],
"max_points": 25
},
{
"key": "track_record",
"name": "Track record",
"detail": "304 public repos, account ~11 yr old",
"points": 25,
"status": "met",
"details": [
{
"code": "public_repos",
"params": {
"count": 304
}
},
{
"code": "account_age_years",
"params": {
"years": 11
}
}
],
"max_points": 25
}
]
},
{
"key": "package_maintenance",
"band": "excellent",
"name": "Package maintenance",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"packages": [
"github.com/christopherdavenport/unblink"
],
"ecosystems": "go",
"any_deprecated": false,
"min_days_since_publish": 15
},
"components": [
{
"key": "published_resolvable",
"name": "Published & resolvable",
"detail": "1 package(s) on go",
"points": 25,
"status": "met",
"details": [
{
"code": "packages_published",
"params": {
"count": 1,
"ecosystems": "go"
}
}
],
"max_points": 25
},
{
"key": "publish_recency",
"name": "Publish recency",
"detail": "latest publish 15 days ago",
"points": 35,
"status": "met",
"details": [
{
"code": "publish_recency",
"params": {
"days": 15
}
}
],
"max_points": 35
},
{
"key": "version_history",
"name": "Version history",
"detail": "11 published versions",
"points": 20,
"status": "met",
"details": [
{
"code": "published_versions",
"params": {
"count": 11
}
}
],
"max_points": 20
},
{
"key": "not_deprecated",
"name": "Not deprecated",
"detail": "active, not deprecated or yanked",
"points": 20,
"status": "met",
"details": [
{
"code": "package_not_deprecated",
"params": {}
}
],
"max_points": 20
}
]
}
],
"description": "Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?"
},
{
"key": "engineering",
"band": "good",
"name": "Engineering Quality",
"value": 84,
"weight": 0.2,
"metrics": [
{
"key": "engineering_practices",
"band": "good",
"name": "Engineering practices",
"note": null,
"notes": [],
"value": 84,
"inputs": {
"has_ci": true,
"has_tests": true,
"has_editorconfig": false,
"has_linter_config": true,
"has_precommit_config": false
},
"components": [
{
"key": "ci_workflows",
"name": "CI workflows",
"detail": "3 workflow(s)",
"points": 24,
"status": "met",
"details": [
{
"code": "ci_workflows",
"params": {
"count": 3
}
}
],
"max_points": 24
},
{
"key": "tests_present",
"name": "Tests present",
"detail": null,
"points": 24,
"status": "met",
"details": [],
"max_points": 24
},
{
"key": "linter_config",
"name": "Linter config",
"detail": ".golangci.yml",
"points": 16,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": ".golangci.yml"
}
}
],
"max_points": 16
},
{
"key": "pre_commit_hooks",
"name": "Pre-commit hooks",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 9.6
},
{
"key": "editorconfig",
"name": ".editorconfig",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 6.4
},
{
"key": "openssf_scorecard_ci_tests",
"name": "OpenSSF Scorecard: CI-Tests",
"detail": "9 out of 9 merged PRs checked by a CI test -- score normalized to 10",
"points": 20,
"status": "met",
"details": [],
"max_points": 20
}
]
},
{
"key": "documentation",
"band": "excellent",
"name": "Documentation",
"note": null,
"notes": [],
"value": 85,
"inputs": {
"topics": [
"ai",
"browser",
"golang",
"markdown",
"mcp",
"mcp-server",
"model-context-protocol",
"web-scraping"
],
"has_wiki": true,
"homepage": null,
"has_readme": true,
"has_docs_dir": true,
"has_description": true
},
"components": [
{
"key": "readme",
"name": "README",
"detail": null,
"points": 30,
"status": "met",
"details": [],
"max_points": 30
},
{
"key": "documentation_directory",
"name": "Documentation directory",
"detail": null,
"points": 25,
"status": "met",
"details": [],
"max_points": 25
},
{
"key": "documentation_homepage_site",
"name": "Documentation / homepage site",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
},
{
"key": "repository_description",
"name": "Repository description",
"detail": null,
"points": 10,
"status": "met",
"details": [],
"max_points": 10
},
{
"key": "topics",
"name": "Topics",
"detail": "8 topics",
"points": 10,
"status": "met",
"details": [
{
"code": "topics_count",
"params": {
"count": 8
}
}
],
"max_points": 10
},
{
"key": "wiki",
"name": "Wiki",
"detail": null,
"points": 10,
"status": "met",
"details": [],
"max_points": 10
}
]
}
],
"description": "Are baseline engineering and documentation practices in place?"
},
{
"key": "security",
"band": "moderate",
"name": "Security",
"value": 50,
"weight": 0.16,
"metrics": [
{
"key": "security_posture",
"band": "moderate",
"name": "Security posture",
"note": null,
"notes": [],
"value": 50,
"inputs": {
"source": "openssf_scorecard",
"checks_evaluated": 18,
"scorecard_version": "v5.5.0",
"checks_inconclusive": 0,
"scorecard_aggregate": 5
},
"components": [
{
"key": "binary_artifacts",
"name": "Binary-Artifacts",
"detail": "no binaries found in the repo",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "branch_protection",
"name": "Branch-Protection",
"detail": "branch protection not enabled on development/release branches",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "ci_tests",
"name": "CI-Tests",
"detail": "9 out of 9 merged PRs checked by a CI test -- score normalized to 10",
"points": 2.5,
"status": "met",
"details": [],
"max_points": 2.5
},
{
"key": "cii_best_practices",
"name": "CII-Best-Practices",
"detail": "no effort to earn an OpenSSF best practices badge detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 2.5
},
{
"key": "code_review",
"name": "Code-Review",
"detail": "Found 0/14 approved changesets -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "contributors",
"name": "Contributors",
"detail": "project has 9 contributing companies or organizations",
"points": 2.5,
"status": "met",
"details": [],
"max_points": 2.5
},
{
"key": "dangerous_workflow",
"name": "Dangerous-Workflow",
"detail": "no dangerous workflow patterns detected",
"points": 10,
"status": "met",
"details": [],
"max_points": 10
},
{
"key": "dependency_update_tool",
"name": "Dependency-Update-Tool",
"detail": "update tool detected",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "fuzzing",
"name": "Fuzzing",
"detail": "project is fuzzed",
"points": 5,
"status": "met",
"details": [],
"max_points": 5
},
{
"key": "license",
"name": "License",
"detail": "license file detected",
"points": 2.5,
"status": "met",
"details": [],
"max_points": 2.5
},
{
"key": "maintained",
"name": "Maintained",
"detail": "project was created within the last 90 days. Please review its contents carefully",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "packaging",
"name": "Packaging",
"detail": "packaging workflow detected",
"points": 5,
"status": "met",
"details": [],
"max_points": 5
},
{
"key": "pinned_dependencies",
"name": "Pinned-Dependencies",
"detail": "dependency not pinned by hash detected -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "sast",
"name": "SAST",
"detail": "SAST tool is not run on all commits -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "security_policy",
"name": "Security-Policy",
"detail": "security policy file detected",
"points": 5,
"status": "met",
"details": [],
"max_points": 5
},
{
"key": "signed_releases",
"name": "Signed-Releases",
"detail": "Project has not signed or included provenance with any releases.",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "token_permissions",
"name": "Token-Permissions",
"detail": "detected GitHub workflow tokens with excessive permissions",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "vulnerabilities",
"name": "Vulnerabilities",
"detail": "3 existing vulnerabilities detected",
"points": 5.2,
"status": "partial",
"details": [],
"max_points": 7.5
}
]
},
{
"key": "high_risk_jurisdiction_exposure",
"band": "excellent",
"name": "High-Risk Jurisdiction Exposure",
"note": "Only high-confidence self-published location evidence affects this multiplier. Ambiguous matches are review-only; country evidence is not proof of nationality, citizenship, legal registration, malicious intent, or sanctions status.",
"notes": [
{
"code": "jurisdiction_evidence_limits",
"params": {}
}
],
"value": 100,
"inputs": {
"meaning": "self-published location evidence; not nationality or citizenship",
"red_flag": false,
"exposures": [],
"policy_countries": [
"Russia",
"Iran",
"North Korea"
],
"review_only_matches": 0,
"assessed_self_published_locations": 2
},
"components": [
{
"key": "policy_exposure_multiplier",
"name": "Policy exposure multiplier",
"detail": "no confirmed policy-scope location match",
"points": 100,
"status": "met",
"details": [
{
"code": "jurisdiction_no_match",
"params": {}
}
],
"max_points": 100
}
]
}
],
"description": "Are visible security and supply-chain practices strong, with no malicious dependency and no unresolved high-risk jurisdiction exposure?"
},
{
"key": "ai_readiness",
"band": "good",
"name": "AI Readiness",
"value": 79,
"weight": 0,
"metrics": [
{
"key": "ai_agent_context",
"band": "excellent",
"name": "Agent context & guidance",
"note": null,
"notes": [],
"value": 85,
"inputs": {
"has_llms_txt": false,
"legible_history_share": 0.958,
"agent_instruction_files": [
"CLAUDE.md"
],
"agent_instruction_max_bytes": 22109
},
"components": [
{
"key": "agent_instructions",
"name": "Agent instructions",
"detail": "CLAUDE.md",
"points": 45,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "CLAUDE.md"
}
}
],
"max_points": 45
},
{
"key": "machine_readable_docs_llms_txt",
"name": "Machine-readable docs (llms.txt)",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
},
{
"key": "legible_commit_history",
"name": "Legible commit history",
"detail": "91 of 95 human commits state their intent (structured subject or explanatory body)",
"points": 40,
"status": "met",
"details": [
{
"code": "legible_history",
"params": {
"legible": 91,
"sampled": 95
}
}
],
"max_points": 40
}
]
},
{
"key": "ai_verify_loop",
"band": "excellent",
"name": "Verify loop (build / test / typecheck)",
"note": null,
"notes": [],
"value": 90,
"inputs": {
"has_nix": false,
"has_tests": true,
"lockfiles": [
"go.sum"
],
"has_dockerfile": true,
"typed_language": true,
"bootstrap_files": [
"Makefile"
],
"has_devcontainer": false,
"has_linter_config": true,
"typecheck_configs": [],
"agent_commit_share": 0.61,
"toolchain_manifests": [
"go.mod",
"scripts/membench/go.mod"
],
"dependency_bot_commit_share": 0.01
},
"components": [
{
"key": "one_command_bootstrap",
"name": "One-command bootstrap",
"detail": "Makefile",
"points": 18,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "Makefile"
}
}
],
"max_points": 18
},
{
"key": "automated_tests",
"name": "Automated tests",
"detail": null,
"points": 22,
"status": "met",
"details": [],
"max_points": 22
},
{
"key": "lint_format_config",
"name": "Lint / format config",
"detail": ".golangci.yml",
"points": 11,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": ".golangci.yml"
}
}
],
"max_points": 11
},
{
"key": "static_type_checking",
"name": "Static type checking",
"detail": "Go (statically typed)",
"points": 11,
"status": "met",
"details": [
{
"code": "statically_typed_language",
"params": {
"language": "Go"
}
}
],
"max_points": 11
},
{
"key": "reproducible_environment",
"name": "Reproducible environment",
"detail": "Dockerfile, lockfile",
"points": 10,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "Dockerfile, lockfile"
}
}
],
"max_points": 10
},
{
"key": "demonstrated_agent_practice",
"name": "Demonstrated agent practice",
"detail": "61 of the last 100 commits agent-authored or agent-credited",
"points": 10,
"status": "met",
"details": [
{
"code": "agent_authored_commits",
"params": {
"count": 61,
"sampled": 100
}
}
],
"max_points": 10
},
{
"key": "automated_maintenance",
"name": "Automated maintenance",
"detail": "1 of the last 100 commits are automated dependency updates",
"points": 8,
"status": "met",
"details": [
{
"code": "dependency_bot_commits",
"params": {
"count": 1,
"sampled": 100
}
}
],
"max_points": 8
},
{
"key": "openssf_scorecard_pinned_dependencies",
"name": "OpenSSF Scorecard: Pinned-Dependencies",
"detail": "dependency not pinned by hash detected -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
}
]
},
{
"key": "ai_code_legibility",
"band": "excellent",
"name": "Code legibility for models",
"note": null,
"notes": [],
"value": 99,
"inputs": {
"primary_language": "Go",
"largest_source_bytes": 146843,
"source_files_sampled": 300,
"oversized_source_files": 4
},
"components": [
{
"key": "type_checkable_code",
"name": "Type-checkable code",
"detail": "Go (statically typed)",
"points": 45,
"status": "met",
"details": [
{
"code": "statically_typed_language",
"params": {
"language": "Go"
}
}
],
"max_points": 45
},
{
"key": "manageable_file_sizes",
"name": "Manageable file sizes",
"detail": "4/300 source files over 60KB",
"points": 54.3,
"status": "partial",
"details": [
{
"code": "oversized_source_files",
"params": {
"kb": 60,
"sampled": 300,
"oversized": 4
}
}
],
"max_points": 55
}
]
},
{
"key": "ai_interfaces",
"band": "critical",
"name": "Machine-readable interfaces",
"note": null,
"notes": [],
"value": 20,
"inputs": {
"example_dirs": [],
"has_mcp_signal": true,
"api_schema_files": []
},
"components": [
{
"key": "api_schema_openapi_graphql_proto",
"name": "API schema (OpenAPI/GraphQL/proto)",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 40
},
{
"key": "mcp_server",
"name": "MCP server",
"detail": null,
"points": 20,
"status": "met",
"details": [],
"max_points": 20
},
{
"key": "runnable_examples",
"name": "Runnable examples",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 40
}
]
}
],
"description": "How well is the repo equipped to be developed and maintained with AI coding agents? An independent, experimental badge — weight 0.0, so it is surfaced on its own and does not affect the overall health score."
}
],
"metrics_version": "1.13.0"
},
"warnings": [
"GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository"
],
"report_type": "repository",
"generated_at": "2026-07-22T04:27:26.707416Z",
"schema_version": "0.26.0",
"badge_url": "https://raw.githubusercontent.com/inspect-software/badges/main/v1/c/ChristopherDavenport/unblink.svg",
"full_name": "ChristopherDavenport/unblink",
"license_state": "standard",
"license_spdx": "MIT"
}