公开记录中等
软件健康报告模式 0.27.0 · 指标 1.13.0 · 2026-07-28 04:36 UTC
Detective-XH / DocGraph
Govern your documents like code. MCP server that indexes .md/.docx/.html/.pdf into a SQLite knowledge graph and runs drift audits — stale policies, conflicting research claims, superseded docs, undocumented code exports. 12 MCP tools incl. cross-reference graph, governance + provenance metadata, topic similarity. Single binary, zero runtime deps.
Detective-XH/DocGraph 的健康指数为 100 分中的 56 分，处于「中等」区间。 其得分最高的类别是AI Readiness（78/100），最低的是Community & Adoption（29/100）。 最近一次更新在 7 天前。 近期的大部分工作由 1 位贡献者完成。
56
总分 / 100软件健康指数
指标归入加权类别，统一采用 1–100 量表。总体分先取类别加权平均；当公开证据触发高风险司法辖区政策时，评级会按政策调整，并设置 49（有风险）的上限。AI 就绪度不计入总体分。
56
优秀85-100堪称典范；基本满足所有检验标准
良好70-84健康；仅有轻微不足
中等50-69可接受，但存在明显不足；建议进行审查
存在风险30-49存在重大薄弱环节；采用时应保持审慎
危急1-29问题严重（项目被弃置、仅有单一维护者、缺乏基本工程规范）
评分画像
每条轴代表一个类别。形状比平均值更重要——健康的对象会填满整个图形，而“一峰一谷”式画像意味着某一维度的优势正掩盖另一维度的风险。
所有权
软件包生态系统
| 注册表 | 软件包 | 版本 | 月下载量 | 版本数 | 最近发布 |
|---|---|---|---|---|---|
| Go | github.com/Detective-XH/docgraph | v0.3.4 | - | 15 | 42 天前 |
按类别列示的指标
活力
项目是否仍有生命——是否仍在编写代码，是否仍在发布版本？
73
开发活跃度
57中等
评分方式
| 36/36 | 推送新近度 — 最近一次推送于 7 天前 |
| 2.8/36 | 提交节奏 — 52 周中有 4 周有提交 |
| 18/18 | 提交量 — 最近一年 258 次提交 |
| 0/10 | OpenSSF Scorecard：Maintained — project was created within the last 90 days. Please review its contents carefully |
所用输入
| commits_last_year | 258 |
| human_commit_share | 0.98 |
| days_since_last_push | 7 |
| active_weeks_last_year | 4 |
发布纪律
98优秀
评分方式
| 27/27 | 有发布版本 — 已发布 15 个发布版本 |
| 36/36 | 发布时效 — 最近一次发布版本于 42 天前 |
| 27/27 | 发布节奏 — 约每 2.3 天发布一次 |
| 8/10 | OpenSSF Scorecard：Signed-Releases — 5 out of the last 5 releases have a total of 5 signed artifacts. |
所用输入
| releases_count | 15 |
| latest_release_tag | v0.3.4 |
| releases_from_tags | 否 |
| days_since_latest_release | 42 |
| mean_days_between_releases | 2.3 |
社区与采用
项目是否拥有用户、下载量与关注度，并具备欢迎贡献者参与的配置？
29
流行度与采用
10危急
评分方式
| 9.8/60 | 星标 — 5 个星标 |
| 0/25 | 复刻 — 0 个复刻 |
| 0/15 | 关注者 — 0 位关注者 |
所用输入
| forks | 0 |
| stars | 5 |
| watchers | 0 |
| growth_state | unverified |
| growth_factor_pct | 100 |
| growth_unverified_reason | no_history |
社区健康
50中等
评分方式
| 22.5/22.5 | README |
| 22.5/22.5 | 许可证 — 可识别的许可证（MIT） |
| 0/18 | CONTRIBUTING 指南 |
| 0/13.5 | 行为准则 |
| 0/7.2 | 议题模板 |
| 0/6.3 | PR 模板 |
所用输入
| has_readme | 是 |
| has_license | 是 |
| has_contributing | 否 |
| has_issue_template | 否 |
| has_code_of_conduct | 否 |
| has_pull_request_template | 否 |
可持续性与治理
项目能否在其成员之外延续——巴士系数、响应能力、由谁支持，以及软件包的维护状况？
50
维护者韧性（巴士系数）
10危急
评分方式
| 9/54 | 巴士系数 — 1 位贡献者贡献了半数提交 |
| 0/22.5 | 提交分布 — 头号贡献者编写了 100% 的提交 |
| 1.4/13.5 | 贡献者广度 — 1 位贡献者 |
| 0/10 | OpenSSF Scorecard：Contributors — project has 0 contributing companies or organizations -- score normalized to 0 |
所用输入
| bus_factor | 1 |
| contributors_sampled | 1 |
| top_contributor_share | 1 |
议题与 PR 响应能力
70良好
评分方式
| 0/46.8 | 议题解决 — 没有议题或无数据 |
| 37.1/38.3 | PR 接受 — 已裁定的 PR 中 95/98 已合并 |
| 0/15 | OpenSSF Scorecard：Code-Review — Found 0/12 approved changesets -- score normalized to 0 |
所用输入
| merged_prs | 95 |
| open_issues | 0 |
| closed_issues | 0 |
| issue_closed_ratio | — |
| closed_unmerged_prs | 3 |
已排除计分（无数据或不适用）：议题解决。 其余权重已重新归一化。
所有权与托管责任
37存在风险
评分方式
| 10/30 | 所有权背书 — 个人（用户）账户 |
| 0/20 | 已验证域名 — 不适用于个人账户 |
| 4.3/25 | 所有者影响力 — Detective-XH 有 3 位关注者 |
| 15.4/25 | 既往记录 — 28 个公开仓库，账户约 2 年 |
所用输入
| followers | 3 |
| owner_type | User |
| is_verified | — |
| owner_login | Detective-XH |
| public_repos | 28 |
| account_age_days | 862 |
已排除计分（无数据或不适用）：已验证域名。 其余权重已重新归一化。
软件包维护
100优秀
评分方式
| 25/25 | 已发布且可解析 — go 上有 1 个软件包 |
| 35/35 | 发布时效 — 最近一次发布于 42 天前 |
| 20/20 | 版本历史 — 15 个已发布版本 |
| 20/20 | 未被弃用 — 活跃，未被弃用或撤回 |
所用输入
| packages | github.com/Detective-XH/docgraph |
| ecosystems | go |
| any_deprecated | 否 |
| min_days_since_publish | 42 |
工程质量
基础的工程与文档实践是否到位？
74
工程实践
84良好
评分方式
| 24/24 | CI 工作流 — 1 个工作流 |
| 24/24 | 存在测试 |
| 16/16 | Linter 配置 — .golangci.yml |
| 0/9.6 | Pre-commit 钩子 |
| 0/6.4 | .editorconfig |
| 20/20 | OpenSSF Scorecard：CI-Tests — 12 out of 12 merged PRs checked by a CI test -- score normalized to 10 |
所用输入
| has_ci | 是 |
| has_tests | 是 |
| has_editorconfig | 否 |
| has_linter_config | 是 |
| has_precommit_config | 否 |
文档
60中等
评分方式
| 30/30 | README |
| 0/25 | 文档目录 |
| 0/15 | 文档 / 主页站点 |
| 10/10 | 仓库描述 |
| 10/10 | 主题标签 — 19 个主题标签 |
| 10/10 | Wiki |
所用输入
| topics | claude, documentation, golang, knowledge-graph, llm, markdown, mcp, mcp-server, obsidian, rag, semantic-search, sqlite, agent, docx, html, pdf, codex, hermes, opencode |
| has_wiki | 是 |
| homepage | — |
| has_readme | 是 |
| has_docs_dir | 否 |
| has_description | 是 |
安全
可见的安全与供应链实践是否稳固，且不存在未解决的高风险司法辖区暴露？
50
安全态势
50中等
评分方式
| 7.5/7.5 | Binary-Artifacts — no binaries found in the repo |
| 2.2/7.5 | Branch-Protection — branch protection is not maximal on development and all release branches |
| 2.5/2.5 | CI-Tests — 12 out of 12 merged PRs checked by a CI test -- score normalized to 10 |
| 0/2.5 | CII-Best-Practices — no effort to earn an OpenSSF best practices badge detected |
| 0/7.5 | Code-Review — Found 0/12 approved changesets -- score normalized to 0 |
| 0/2.5 | Contributors — project has 0 contributing companies or organizations -- score normalized to 0 |
| 10/10 | Dangerous-Workflow — no dangerous workflow patterns detected |
| 7.5/7.5 | Dependency-Update-Tool — update tool detected |
| 5/5 | Fuzzing — project is fuzzed |
| 2.5/2.5 | 许可证 — license file detected |
| 0/7.5 | Maintained — project was created within the last 90 days. Please review its contents carefully |
| 0/5 | Packaging — 无数据 |
| 0/5 | Pinned-Dependencies — dependency not pinned by hash detected -- score normalized to 0 |
| 0/5 | SAST — SAST tool is not run on all commits -- score normalized to 0 |
| 0/5 | Security-Policy — security policy file not detected |
| 6/7.5 | Signed-Releases — 5 out of the last 5 releases have a total of 5 signed artifacts. |
| 0/7.5 | Token-Permissions — detected GitHub workflow tokens with excessive permissions |
| 6.8/7.5 | Vulnerabilities — 1 existing vulnerabilities detected |
所用输入
| source | openssf_scorecard |
| checks_evaluated | 17 |
| scorecard_version | v5.5.0 |
| checks_inconclusive | 1 |
| scorecard_aggregate | 5 |
已排除计分（无数据或不适用）：packaging。 其余权重已重新归一化。
AI 就绪度
该仓库在多大程度上具备与 AI 编码代理协同开发与维护的条件？这是一枚独立的实验性徽章——权重为 0.0，因此单独呈现，不影响总体健康评分。
78
AI 代理上下文与指引
85优秀
评分方式
| 45/45 | 代理指令 — AGENTS.md |
| 0/15 | 机器可读文档（llms.txt） |
| 40/40 | 可读的提交历史 — 98 次人类提交中有 98 次说明了意图（结构化标题或解释性正文） |
所用输入
| has_llms_txt | 否 |
| legible_history_share | 1 |
| agent_instruction_files | AGENTS.md |
| agent_instruction_max_bytes | 7,493 |
评分方式
| 12.6/18 | 一条命令的引导启动 — go.mod（工具链约定，无任务运行器） |
| 22/22 | 自动化测试 |
| 11/11 | Lint / 格式化配置 — .golangci.yml |
| 11/11 | 静态类型检查 — Go（静态类型） |
| 10/10 | 可复现环境 — lockfile |
| 10/10 | 已体现的代理实践 — 最近 100 次提交中有 59 次由代理编写或署名代理 |
| 8/8 | 自动化维护 — 最近 100 次提交中有 2 次为自动依赖更新 |
| 0/10 | OpenSSF Scorecard：Pinned-Dependencies — dependency not pinned by hash detected -- score normalized to 0 |
所用输入
| has_nix | 否 |
| has_tests | 是 |
| lockfiles | go.sum |
| has_dockerfile | 否 |
| typed_language | 是 |
| bootstrap_files | — |
| has_devcontainer | 否 |
| has_linter_config | 是 |
| typecheck_configs | — |
| agent_commit_share | 0.59 |
| toolchain_manifests | go.mod |
| dependency_bot_commit_share | 0.02 |
面向模型的代码可读性
100优秀
评分方式
| 45/45 | 可类型检查的代码 — Go（静态类型） |
| 55/55 | 可控的文件大小 — 采样的 222 个源文件中有 0 个超过 60KB |
所用输入
| primary_language | Go |
| largest_source_bytes | 33,922 |
| source_files_sampled | 222 |
| oversized_source_files | 0 |
机器可读接口
20危急
评分方式
| 0/40 | API 模式（OpenAPI/GraphQL/proto） |
| 20/20 | MCP 服务器 |
| 0/40 | 可运行示例 |
所用输入
| example_dirs | — |
| has_mcp_signal | 是 |
| api_schema_files | — |
关键数据
5GitHub 星标
1贡献者
258最近 12 个月提交数
7距最近推送天数
15发布版本数
1巴士系数（bus factor）
0开放议题
Go软件包生态系统数
数据采集警告
- Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token
- GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository
更多细节
OpenSSF Scorecard 5.0 / 10
5.0综合
来自开源项目 OpenSSF Scorecard 的独立、工具无关的安全评估。每项检查奖励的是安全实践本身，而非特定供应商的工具。Scorecard 无法判定的检查项标记为 不适用，并从安全评分中剔除（绝不按零分计）。
| 10 | Binary-Artifacts | no binaries found in the repo |
| 3 | Branch-Protection | branch protection is not maximal on development and all release branches |
| 10 | CI-Tests | 12 out of 12 merged PRs checked by a CI test -- score normalized to 10 |
| 0 | CII-Best-Practices | no effort to earn an OpenSSF best practices badge detected |
| 0 | Code-Review | Found 0/12 approved changesets -- score normalized to 0 |
| 0 | Contributors | project has 0 contributing companies or organizations -- score normalized to 0 |
| 10 | Dangerous-Workflow | no dangerous workflow patterns detected |
| 10 | Dependency-Update-Tool | update tool detected |
| 10 | Fuzzing | project is fuzzed |
| 10 | License | license file detected |
| 0 | Maintained | project was created within the last 90 days. Please review its contents carefully |
| 不适用 | Packaging | packaging workflow not detected |
| 0 | Pinned-Dependencies | dependency not pinned by hash detected -- score normalized to 0 |
| 0 | SAST | SAST tool is not run on all commits -- score normalized to 0 |
| 0 | Security-Policy | security policy file not detected |
| 8 | Signed-Releases | 5 out of the last 5 releases have a total of 5 signed artifacts. |
| 0 | Token-Permissions | detected GitHub workflow tokens with excessive permissions |
| 9 | Vulnerabilities | 1 existing vulnerabilities detected |
直接依赖 7
| 注册表 | 软件包 | 版本约束 | 清单文件 |
|---|---|---|---|
| Go | github.com/Detective-XH/gopdf | v0.8.0 | go.mod |
| Go | github.com/fsnotify/fsnotify | v1.10.1 | go.mod |
| Go | github.com/mark3labs/mcp-go | v0.54.1 | go.mod |
| Go | github.com/yuin/goldmark | v1.8.2 | go.mod |
| Go | golang.org/x/net | v0.56.0 | go.mod |
| Go | gopkg.in/yaml.v3 | v3.0.1 | go.mod |
| Go | modernc.org/sqlite | v1.52.0 | go.mod |
全部依赖 未采集
本报告未能采集到解析后的依赖集合：GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository
原始 JSON 报告 机器可读
{
"data": {
"repo": {
"topics": [
"claude",
"documentation",
"golang",
"knowledge-graph",
"llm",
"markdown",
"mcp",
"mcp-server",
"obsidian",
"rag",
"semantic-search",
"sqlite",
"agent",
"docx",
"html",
"pdf",
"codex",
"hermes",
"opencode"
],
"is_fork": false,
"size_kb": 1207,
"has_wiki": true,
"homepage": null,
"languages": {
"Go": 1717032
},
"pushed_at": "2026-07-20T08:12:17Z",
"created_at": "2026-05-25T11:22:29Z",
"owner_type": "User",
"updated_at": "2026-07-11T03:48:26Z",
"description": "Govern your documents like code. MCP server that indexes .md/.docx/.html/.pdf into a SQLite knowledge graph and runs drift audits — stale policies, conflicting research claims, superseded docs, undocumented code exports. 12 MCP tools incl. cross-reference graph, governance + provenance metadata, topic similarity. Single binary, zero runtime deps.",
"is_archived": false,
"is_disabled": false,
"license_spdx": "MIT",
"default_branch": "main",
"license_spdx_raw": "MIT",
"primary_language": "Go",
"significant_languages": [
"Go"
]
},
"owner": {
"blog": null,
"name": "Detective-X",
"type": "User",
"login": "Detective-XH",
"company": null,
"location": null,
"followers": 3,
"avatar_url": "https://avatars.githubusercontent.com/u/163795227?v=4",
"created_at": "2024-03-18T01:44:03Z",
"is_verified": null,
"public_repos": 28,
"account_age_days": 862
},
"license": {
"state": "standard",
"spdx_id": "MIT",
"raw_spdx": "MIT",
"file_present": true,
"scorecard_found": true,
"profile_has_license": true
},
"activity": {
"releases": [
{
"tag": "v0.3.4",
"kind": "patch",
"published_at": "2026-06-15T20:00:18Z"
},
{
"tag": "v0.3.3",
"kind": "patch",
"published_at": "2026-06-14T22:17:30Z"
},
{
"tag": "v0.3.2",
"kind": "patch",
"published_at": "2026-06-14T14:43:14Z"
},
{
"tag": "v0.3.1",
"kind": "patch",
"published_at": "2026-06-13T18:38:44Z"
},
{
"tag": "v0.3.0",
"kind": "minor",
"published_at": "2026-06-02T01:47:01Z"
},
{
"tag": "v0.2.3",
"kind": "patch",
"published_at": "2026-05-29T00:24:37Z"
},
{
"tag": "v0.2.2",
"kind": "patch",
"published_at": "2026-05-28T00:37:27Z"
},
{
"tag": "v0.2.1",
"kind": "patch",
"published_at": "2026-05-27T01:14:31Z"
},
{
"tag": "v0.2.0",
"kind": "minor",
"published_at": "2026-05-27T00:57:44Z"
},
{
"tag": "v0.1.9",
"kind": "patch",
"published_at": "2026-05-25T19:38:33Z"
},
{
"tag": "v0.1.8",
"kind": "patch",
"published_at": "2026-05-25T19:23:38Z"
},
{
"tag": "v0.1.7",
"kind": "patch",
"published_at": "2026-05-25T19:10:39Z"
},
{
"tag": "v0.1.6",
"kind": "patch",
"published_at": "2026-05-25T18:42:35Z"
},
{
"tag": "v0.1.5",
"kind": "patch",
"published_at": "2026-05-25T18:27:01Z"
},
{
"tag": "v0.1.0",
"kind": "minor",
"published_at": "2026-05-25T15:16:56Z"
}
],
"recent_commits": [
{
"oid": "fd794aea38e3669336e9cc915541f85cd826cdc8",
"body": "release: v0.3.4",
"is_bot": false,
"headline": "Merge pull request #97 from Detective-XH/release/v0.3.4",
"author_name": "Detective-X",
"author_login": "Detective-XH",
"committed_at": "2026-06-15T19:59:33Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "efe7d4380b20cc1583b4bbfb10d81482f515db78",
"body": "Update SHA256 checksums built on Go 1.26.4 (darwin/arm64). Prior\nchecksums in the release/v0.3.4 branch were built on a different\nmachine; rebuilt from the same tagged source for reproducibility.\n\nCo-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>",
"is_bot": false,
"headline": "release: v0.3.4",
"author_name": "Detective-X",
"author_login": "Detective-XH",
"committed_at": "2026-06-15T19:55:15Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "3aa4bd63b6eb4ac1a68d5736ef1d56ced202c756",
"body": "fix(ax-assert): make A2 corpus-stable with dynamic zero-result probe",
"is_bot": false,
"headline": "Merge pull request #96 from Detective-XH/fix/ax-assert-a2-dynamic-probe",
"author_name": "Detective-X",
"author_login": "Detective-XH",
"committed_at": "2026-06-15T19:51:42Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e2d7680e33a409e380c895d983b0d88d87521879",
"body": "CHANGELOG.md acquired a similar_to edge to plans/CHANGELOG-v0.3.x.md\n(TF-IDF 0.61), invalidating A2's static assumption. Replace hardcoded\ndocument with findDocWithNoSimilarityResults() that probes candidates\nat runtime and selects the first that renders the zero-result sentinel\n\"No similarity edges for this document\" — matching the existing\nfindDocWithSimilarityResults() pattern used by A1.\n\nCo-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>",
"is_bot": false,
"headline": "fix(ax-assert): make A2 corpus-stable with dynamic zero-result probe",
"author_name": "Detective-X",
"author_login": "Detective-XH",
"committed_at": "2026-06-15T19:47:34Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "51420f0dd9ac0c6d6a78b8387585f34f6264f2fc",
"body": "release: v0.3.4",
"is_bot": false,
"headline": "Merge pull request #95 from Detective-XH/release/v0.3.4",
"author_name": "Detective-X",
"author_login": "Detective-XH",
"committed_at": "2026-06-15T02:00:40Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "507a188e2f373b306a65c61141dda4e8f248e6f2",
"body": null,
"is_bot": false,
"headline": "release: v0.3.4",
"author_name": "Detective-X",
"author_login": "Detective-XH",
"committed_at": "2026-06-15T01:56:21Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "445bce442537c69c5b36cd6a60b9db78aa6cf101",
"body": "Infers and patches missing status/owner governance fields in .md files.\nDry-run by default; --fix applies atomic writes. Uses yaml.Node to avoid\nre-encoding existing YAML content. HTML-comment-before-frontmatter files\nare reordered so --- is the first byte (Goldmark linenum==0 constraint).\nNon-mapping frontmatter and YAML-special-char values are handled safely.\n15 tests covering all plan edge cases + 2 adversarial-review regressions.\n\nCo-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>",
"is_bot": false,
"headline": "feat(heal): add docgraph heal CLI subcommand (Phase 1 MD frontmatter)",
"author_name": "Detective-X",
"author_login": "Detective-XH",
"committed_at": "2026-06-15T01:55:15Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "76fed26a84f45707116dc427f14a9da012bf4c1d",
"body": "chore(lint): tighten cyclop max-complexity 40 -> 20",
"is_bot": false,
"headline": "Merge pull request #94 from Detective-XH/chore/tighten-cyclop-gate",
"author_name": "Detective-X",
"author_login": "Detective-XH",
"committed_at": "2026-06-15T00:06:11Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "7b74ec8322518b30f8bef5068be35041a48bd6e4",
"body": "The gocyclo campaign refactored away the old high-CC baseline (handleNode 55, indexStore 44, indexProjectOpts 43, extractHTML 40, all now <=14), so the cyclop backstop no longer needs the 40 slack. Lowered to 20, which sits just above the GoReportCard soft target (gocyclo <=13-15) without double-fir\n[…]\nthan //nolint.\n\nFull-tree golangci-lint lists exactly extractCStyle; gofmt -s clean; gosec exit 0; go build + go test -race green.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "chore(lint): tighten cyclop max-complexity 40 -> 20",
"author_name": "Detective-X",
"author_login": "Detective-XH",
"committed_at": "2026-06-15T00:01:39Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "6ec02dd4224048fd5b00232564decb3841176faa",
"body": "refactor(gocyclo): reopen by-design-red — codedoc readability + prune/oracle file-greening",
"is_bot": false,
"headline": "Merge pull request #93 from Detective-XH/refactor/gocyclo-reduction",
"author_name": "Detective-X",
"author_login": "Detective-XH",
"committed_at": "2026-06-14T23:35:21Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e24e4330162eea5633e465b45e4f0ba19132f8de",
"body": "…/oracle file-greening\n\nRe-assess and refactor the 3 files PR #89 left by-design-red, at the owner's\ndirection (knowingly overriding the post-advisor LEAVE verdicts).\n\ncodedoc_cstyle.go (readability only — file stays red on extractCStyle, ZERO\nfile-ratio gain): extractSymbol 25->5 (switch -> symbolF\n[…]\nreserving: go build + go test -race green; gofmt -s clean;\ngolangci-lint 0 issues; gosec exit 0; codex adversarial-review approve.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "refactor(gocyclo): reopen by-design-red — codedoc readability + prune…",
"author_name": "Detective-X",
"author_login": "Detective-XH",
"committed_at": "2026-06-14T23:30:39Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "c0fb6c128013b316710a6bf4e3b4880b359a5a86",
"body": "test: fix misspell false positive in reconcile_ignore_test",
"is_bot": false,
"headline": "Merge pull request #92 from Detective-XH/fix/misspell-reconcile-test",
"author_name": "Detective-X",
"author_login": "Detective-XH",
"committed_at": "2026-06-14T22:37:11Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "9e77cd172af8e0f23be1724db4ef2465567cc4d1",
"body": "The string literal \"# Drop\\n\\nto be ignored.\\n\" tripped misspell: the\n\\n escape immediately followed by \"to\" reads as \"nto\", flagged as a\nmisspelling of \"not\". Reword the body to \"will be ignored.\" so the\nnewline escape is no longer adjacent to \"to\". No behavior change.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "test: fix misspell false positive in reconcile_ignore_test",
"author_name": "Detective-X",
"author_login": "Detective-XH",
"committed_at": "2026-06-14T22:31:34Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "c45ae4ed70cb9cfaabbf11d130fd29646f74683d",
"body": "release: v0.3.3",
"is_bot": false,
"headline": "Merge pull request #91 from Detective-XH/release/v0.3.3",
"author_name": "Detective-X",
"author_login": "Detective-XH",
"committed_at": "2026-06-14T22:16:38Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2c93075f3e9337fe9f2b0ecbdac121b4b1feec3a",
"body": "gocyclo decomposition + GetDriftFindings finder-table + modernize sweep + gopdf v0.8.0 bump. CHANGELOG.md + README.md SHA-256 checksums for v0.3.3.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "release: v0.3.3",
"author_name": "Detective-X",
"author_login": "Detective-XH",
"committed_at": "2026-06-14T22:12:55Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "1939b26649ac2e3e2281289118b9dafbad06f5ca",
"body": "build(deps): bump gopdf v0.7.9 -> v0.8.0",
"is_bot": false,
"headline": "Merge pull request #90 from Detective-XH/chore/bump-gopdf-v0.8.0",
"author_name": "Detective-X",
"author_login": "Detective-XH",
"committed_at": "2026-06-14T22:05:12Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "06027ad20d2b76f9028f544988a0c84d5778a825",
"body": "Additive/fix-only release, no breaking API changes. Only internal/extractor/pdf.go consumes gopdf (GetPlainText/Reader.Info/OpenBytes/raw Value traversal) — unaffected by v0.8.0's ToUnicode and TJ-separator fixes. go build + go test -race green (18 pkgs); govulncheck clean.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "build(deps): bump github.com/Detective-XH/gopdf v0.7.9 -> v0.8.0",
"author_name": "Detective-X",
"author_login": "Detective-XH",
"committed_at": "2026-06-14T22:01:24Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "65d70e22aa43138a29819ef272e529431cbb2d05",
"body": "refactor: decompose gocyclo tail (21 test funcs + GetDriftFindings finder-table + modernize)",
"is_bot": false,
"headline": "Merge pull request #89 from Detective-XH/refactor/gocyclo-tail",
"author_name": "Detective-X",
"author_login": "Detective-XH",
"committed_at": "2026-06-14T21:55:49Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "bf2e1b34103bb5ea49d84fb586172713fb75a1a4",
"body": "…inder-table + modernize sweep\n\nLifts gocyclo file-ratio 91.3% -> 98.63% (GoReportCard sub-metric; A+ letter unchanged, gocyclo weight 0.10).\n\n- 21/23 over-cx-15 test funcs decomposed via genuine helper extraction (t.Helper assertion helpers, shared-harness de-dup, corpus-generator splits); 2 serial\n[…]\n go build + go test -race green; gofmt -s clean; golangci-lint 0 issues; gosec baseline unchanged; assertion-preservation audited.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "refactor: decompose gocyclo tail — 21 test funcs + GetDriftFindings f…",
"author_name": "Detective-X",
"author_login": "Detective-XH",
"committed_at": "2026-06-14T21:52:15Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "655bbb559b8ee40dbaa5cfcf0c79b05e9b1376cc",
"body": "refactor: decompose 8 high-cyclo funcs to flip gocyclo to A+ (PR4)",
"is_bot": false,
"headline": "Merge pull request #88 from Detective-XH/refactor/gocyclo-pr4-aplus",
"author_name": "Detective-X",
"author_login": "Detective-XH",
"committed_at": "2026-06-14T18:32:05Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5fd65c325afbe46f76424bddf9c93c61336c18d9",
"body": "Batch-4 \"A+ push\" of the gocyclo-reduction campaign: 8 honest flips take\nthe local gocyclo metric from 27/219 to 19/219 failed files (91.3%),\ncrossing the 90% A+ threshold with margin. All changes behavior-preserving.\n\nProduction (3):\n- remediationFor: 23 static cases -> remediationText map; CodeSta\n[…]\n -race green; golangci-lint\n--new-from-rev=HEAD 0 issues; gofmt -s clean; codex adversarial-review\napprove / no material findings.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "refactor: decompose 8 high-cyclo funcs to flip gocyclo to A+ (PR4)",
"author_name": "Detective-X",
"author_login": "Detective-XH",
"committed_at": "2026-06-14T18:27:59Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "a17e5402ca48c1d80ad4df8212588562fe2ea476",
"body": "refactor: gocyclo Batch-3 core decomposition (PR3, 27/218 = 87.6% A)",
"is_bot": false,
"headline": "Merge pull request #87 from Detective-XH/refactor/gocyclo-pr3-core",
"author_name": "Detective-X",
"author_login": "Detective-XH",
"committed_at": "2026-06-14T17:42:27Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "dc373ab9a8de1a8a0de4a0fc2d9b62a95f777dae",
"body": "The new TestIndexProjectOpts_GitAndPlainCharacterization was itself cx19 ->\na freshly flagged _test.go file (test files are graded), which would have\nleft PR3 at 28 failed instead of the planned 27. Extract assertFileHistory /\nassertNoHistory to DRY the repeated err/nil/subject/count checks; the test\ndrops to cx10 and every helper is <=13. No assertion changed.\n\nFlip count now 27/218 (gocyclo 87.6%), matching the PR3 target.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "test: keep characterization test under gocyclo via assertion helpers",
"author_name": "Detective-X",
"author_login": "Detective-XH",
"committed_at": "2026-06-14T17:28:57Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "284cc8576b0517588a55e8f26175b1fc1fa90c6e",
"body": "Extract addRoots (synchronous per-root w.Add), classifyWatchEvent (pure\nevent filter), handleCreateDir (Create-dir addRecursive side effect), and a\ndebouncer{} struct with a schedule() method holding the former closure-over-\nlocals (mu/pending/timer/debounce/onChange). Concurrency-preserving: d.time\n[…]\ntchEvent -> schedule. gocyclo: every function <=12.\n\nGated green: watcher_test.go under go test -race -count=5 (timing-sensitive).\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "refactor: decompose WatchWithContext (cx24->12) into helpers",
"author_name": "Detective-X",
"author_login": "Detective-XH",
"committed_at": "2026-06-14T17:25:36Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "b1b0f1c87c743689394c986f98ce2aa4d061df17",
"body": "Split extractPDFMeta (Info-dict tuples + display name), extractPDFPages\n(per-page loop, font cache, U+FFFD security gate), and buildPDFNodes\n(page nodes/edges/chunks) out of extractPDF; a pdfPageResult struct carries\nthe page outputs. Behavior-preserving: the replacementCharRatio garbage gate\nsurviv\n[…]\nd green: existing pdf_test.go suite (Sample/Scanned/CreationDate/GBK/\nCJK x2, TestReplacementCharRatio, Fuzz) under go test -race.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "refactor: decompose extractPDF (cx24->8) into 3 helpers",
"author_name": "Detective-X",
"author_login": "Detective-XH",
"committed_at": "2026-06-14T17:25:21Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "20809be973aa822cbb607ac63cbf748b0ef59a9f",
"body": "Lift the flush closure to indexStoreFlush (batch[:0] + batchTextBytes reset\nmove to the caller) and split indexStoreSetupFTS / indexStoreDeleteStale /\nindexStorePrepareEntry / indexStoreTail out of the main function.\nBehavior-preserving: the force vs fullBuild delete gate, the FTS combined\nrebuild g\n[…]\ned green under go test -race (FTS bulk-rebuild + self-heal, force-guard\ncrash-recovery, 8 prune tests, force-rebuild integration).\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "refactor: decompose indexStore (cx44->12) into 5 helpers",
"author_name": "Detective-X",
"author_login": "Detective-XH",
"committed_at": "2026-06-14T17:10:55Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "6fd28e6811b7e741b39fab1f56a89a3cd824b102",
"body": "Lift the writeOne closure to projectWriteOne (nNew++ moves to the caller),\nand split projectSetupFTS / projectPrepareEntry / projectFlushGitBatch /\nprojectTail out of the main function. Behavior-preserving: baseEmpty/force\ndelete gating, fullBuild FTS gate, histories[idx]<->batch[idx] alignment,\ncha\n[…]\nus the full workspace\nsuite (coldstart FTS rebuild + crash-recovery, fanout, fd-leak git path)\ngreen under go test -race -count=2.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "refactor: decompose indexProjectOpts (cx43→13) into 5 helpers",
"author_name": "Detective-X",
"author_login": "Detective-XH",
"committed_at": "2026-06-14T17:02:57Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "fd896950ba1fad91bb1cff5e282693e3ec7a96bf",
"body": "…paths)\n\nLocks index OUTPUT (node/edge/unresolved counts, per-file git history\nalignment, workspace FTS hits) for the 2-project pipeline before the PR3\ndecomposition. Covers the buffered git path (projectFlushGitBatch target,\nleast-covered region: distinct-commit subjects pin histories[idx] alignment)\nand the streaming non-git path. Green on unmodified indexProjectOpts.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "test: guardrail-8 characterization for indexProjectOpts (git + plain …",
"author_name": "Detective-X",
"author_login": "Detective-XH",
"committed_at": "2026-06-14T16:58:40Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "724a62958bdeea5e8030c25f7e273bfa5acb8afa",
"body": "release: v0.3.2",
"is_bot": false,
"headline": "Merge pull request #86 from Detective-XH/release/v0.3.2",
"author_name": "Detective-X",
"author_login": "Detective-XH",
"committed_at": "2026-06-14T14:41:04Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "8d242cecdeb9756e9011ae8cebff4bb4844f126f",
"body": null,
"is_bot": false,
"headline": "release: v0.3.2",
"author_name": "Detective-X",
"author_login": "Detective-XH",
"committed_at": "2026-06-14T14:37:08Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "bbe0bacf9a2e380c45f7195bc2cc89a6e6be78d7",
"body": "refactor: decompose 10 medium-complexity functions, gocyclo A buffer (PR2)",
"is_bot": false,
"headline": "Merge pull request #85 from Detective-XH/refactor/gocyclo-pr2-medium",
"author_name": "Detective-X",
"author_login": "Detective-XH",
"committed_at": "2026-06-14T14:27:18Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "483023288bbbe3f6d078217fdac054ee1807f7fc",
"body": "…(PR2)\n\nExtract cohesive helpers across 10 files so every refactored function lands at\ncyclomatic complexity ≤13, flipping 10 more files below the >15 gocyclo gate.\nDistinct flagged files 41→31 → gocyclo 81.1%→85.7% (grade A, buffer above the\n80% boundary). Behavior-preserving; equivalence/golden te\n[…]\nverified preserved.\n\nGates: go build ./... ok, go test -race ./... ok, gofmt -s clean,\ngolangci-lint --new-from-rev=main 0 issues.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "refactor: decompose 10 medium-complexity functions, gocyclo A buffer …",
"author_name": "Detective-X",
"author_login": "Detective-XH",
"committed_at": "2026-06-14T14:23:12Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "2da22bbdeaa06d63ee3ca6eee86a29080c81fb88",
"body": "refactor: decompose high-complexity functions, lift gocyclo B→A (PR1)",
"is_bot": false,
"headline": "Merge pull request #84 from Detective-XH/refactor/gocyclo-pr1-lock-a",
"author_name": "Detective-X",
"author_login": "Detective-XH",
"committed_at": "2026-06-14T13:59:12Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "73871ff597e7f1fdc47adbfeb947e50f27ed324a",
"body": "Extract cohesive helpers across 18 files so every refactored function lands at\ncyclomatic complexity ≤13, flipping 18 files below GoReportCard's >15 gocyclo\ngate. Distinct flagged files 59→41 → gocyclo 72.6%→81.1% (sub-grade B→A).\nOverall GoReportCard grade is unchanged (already A+; gocyclo weight 0\n[…]\nd ./... ok, go test -race ./... ok, gofmt -s clean,\ngolangci-lint --new-from-rev=main 0 issues, codex adversarial-review verified.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "refactor: decompose high-complexity functions, lift gocyclo B→A (PR1)",
"author_name": "Detective-X",
"author_login": "Detective-XH",
"committed_at": "2026-06-14T13:54:54Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "92b75ab77b1e057d98e31f5a04c5d0692f7c6000",
"body": "test(tools): cover MCP arg helpers (type-confusion fallback)",
"is_bot": false,
"headline": "Merge pull request #83 from Detective-XH/test/tools-arg-helper-coverage",
"author_name": "Detective-X",
"author_login": "Detective-XH",
"committed_at": "2026-06-14T12:30:27Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e6e3399d5d0d98fd03463834d00165f6c8eaded2",
"body": "Add direct unit tests for getStringArg, getIntArg, getBoolArg, sanitizeArg, and truncateRunes, which had no direct coverage (getIntArgClamped is tested separately). The tests assert the security-relevant contract: a wrong-typed, nil, or missing argument returns the caller-supplied default instead of\n[…]\n bool wrong-type cases use a non-zero default so a regression that returned the zero value instead of the default would be caught.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "test(tools): cover MCP arg helpers (type-confusion fallback)",
"author_name": "Detective-X",
"author_login": "Detective-XH",
"committed_at": "2026-06-14T12:26:23Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "67123a1585c9b27191ff2ed7115c197708b0f5f2",
"body": "…rch-fts\n\nrefactor(store): split search + FTS into sub-stores (Lever B tranche-1)",
"is_bot": false,
"headline": "Merge pull request #82 from Detective-XH/refactor/store-substores-sea…",
"author_name": "Detective-X",
"author_login": "Detective-XH",
"committed_at": "2026-06-14T04:20:41Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "70efd37cecb5beb90a2200aff341a02af2a6f109",
"body": "Execute the documented \"Step 2 sub-store split\": move the search (24)\nand FTS (10) method groups off *Store onto domain sub-store types\nreached via Store.Searcher (*searchStore) and Store.Fts (*ftsStore),\neach embedding the shared *baseDB. A moved body is unchanged except\ns.db -> se.db/ft.db. GetSec\n[…]\nge. Migration\nused temporary forwarding shims (added, callers migrated under a green\ntree, then deleted) so the build never broke.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "refactor(store): split search + FTS into sub-stores (Lever B tranche-1)",
"author_name": "Detective-X",
"author_login": "Detective-XH",
"committed_at": "2026-06-14T04:16:01Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "bad1eac36dd3727741db8e78a6f7612870dbbc4f",
"body": "…rfaces\n\nrefactor(store): decouple consumer packages from *store.Store via narrow interfaces",
"is_bot": false,
"headline": "Merge pull request #81 from Detective-XH/refactor/store-consumer-inte…",
"author_name": "Detective-X",
"author_login": "Detective-XH",
"committed_at": "2026-06-14T00:44:52Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2391009de3128c6fc3e08b68fd3a9955cfd7b4a0",
"body": "…row interfaces\n\nExtract narrow per-package interfaces so each consumer depends on a\nminimal store contract instead of the 125-method *store.Store god type\n(Lever A). *store.Store already satisfies every interface, so call sites\npass the concrete value unchanged.\n\n- RefResolver (resolver), Similarit\n[…]\ned resolver.ProjectRef.Store field deliberately keep the concrete\n*store.Store. Zero behavior change; full suite green with -race.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "refactor(store): decouple consumer packages from *store.Store via nar…",
"author_name": "Detective-X",
"author_login": "Detective-XH",
"committed_at": "2026-06-14T00:40:32Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "6dd0915244bea62bfb9e0502f21388cd4c389fc4",
"body": "…ture\n\ntest(ax-assert): make A11 fixture stable and meaningful via dynamic discovery",
"is_bot": false,
"headline": "Merge pull request #80 from Detective-XH/fix/ax-assert-a11-stable-fix…",
"author_name": "Detective-X",
"author_login": "Detective-XH",
"committed_at": "2026-06-13T23:35:58Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "939b43d4bab702859f04ee21467ab78577c08a0e",
"body": "…iscovery\n\nA11 asserted the graph-outgoing \"all edges resolve to N distinct other\ndocuments\" footer against plans/PERF-METHODOLOGY.md, a gitignored doc whose\noutgoing reference edges drifted to all-distinct (9 -> 9), so the footer\n(rendered only when distinct != total) stopped firing and A11 failed.\n[…]\nly, not in CI or release).\nVerified: go run ./cmd/ax-assert/main.go --project-root . -> 14/14;\ngo test -race -count=1 ./... green.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "test(ax-assert): make A11 fixture stable and meaningful via dynamic d…",
"author_name": "Detective-X",
"author_login": "Detective-XH",
"committed_at": "2026-06-13T23:31:46Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "6d6489c188a0f3ae0e1c04937b37513e042a62cc",
"body": "…-to-8\n\nrefactor(mcp): reduce always-on tool surface 10 → 8 via two zero-loss merges",
"is_bot": false,
"headline": "Merge pull request #79 from Detective-XH/refactor/mcp-tool-surface-10…",
"author_name": "Detective-X",
"author_login": "Detective-XH",
"committed_at": "2026-06-13T23:22:03Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "35334105d6b4fe9ea547ff3ab67eef1e1a9f1b95",
"body": "…s merges\n\nDelete docgraph_explore (a strict subset of docgraph_context) and\ndocgraph_history (already rendered inline by docgraph_node's ### History\nsection). Top up handleNode's history block with Last author + First changed\nso the merge is field-complete versus the removed tool, and extract the b\n[…]\n, search, node, graph, files, similar, status, tags.\nOpt-in unchanged: docgraph_embeddings, docgraph_enrichment. No schema change.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "refactor(mcp): reduce always-on tool surface 10 -> 8 via two zero-los…",
"author_name": "Detective-X",
"author_login": "Detective-XH",
"committed_at": "2026-06-13T23:17:41Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "738bf4568d9266df7bc05ee01d4a9da224d66e1e",
"body": "…nt-drop\n\nfix(context): list docgraph_context overflow tail instead of dropping it",
"is_bot": false,
"headline": "Merge pull request #78 from Detective-XH/fix/context-overflow-list-do…",
"author_name": "Detective-X",
"author_login": "Detective-XH",
"committed_at": "2026-06-13T20:04:49Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "99c2ad5cb20187277beb3298897202e5302b8a6d",
"body": "Remove internal planning identifiers that had leaked into a public/tracked test comment, a test failure message, and a release note (hygiene policy: internal tracker codes must not appear in tracked sources or public docs).\n\nBehavior-neutral: comment / string-literal text only; the affected test still asserts the same serverInstructions substring. Pre-existing leaks, fixed.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "chore(hygiene): drop internal tracker identifiers from tracked files",
"author_name": "Detective-X",
"author_login": "Detective-XH",
"committed_at": "2026-06-13T20:00:09Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "0226b78474a7adb10307cf731479f8365f57f1e9",
"body": "docgraph_context's payload soft-cap (P-v6-2) emitted a count-only notice and dropped every omitted document on overflow, erasing their paths and forfeiting recall — a regression against P-v6-2's own \"Omitted: [list]\" intent. Degrade the tail instead: list each remaining document as a stub (path + re\n[…]\n... 18/18; golangci-lint --new-from-rev=HEAD 0. Also drops a stale internal roadmap-code ref from a comment in the same test file.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "fix(context): list the overflow tail instead of dropping it, byte-capped",
"author_name": "Detective-X",
"author_login": "Detective-XH",
"committed_at": "2026-06-13T19:59:23Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "e0f000dca6b983a5ba13c56bd349e6ed29808279",
"body": "…-supply-chain-d902ad55bd\n\nchore(deps): bump modernc.org/sqlite from 1.51.0 to 1.52.0 in the sqlite-supply-chain group",
"is_bot": false,
"headline": "Merge pull request #73 from Detective-XH/dependabot/go_modules/sqlite…",
"author_name": "Detective-X",
"author_login": "Detective-XH",
"committed_at": "2026-06-13T18:28:43Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c96e943ab6ddfb6005aa8443639142d52f8c480b",
"body": "…or-patch-326ae5767f\n\nchore(deps): bump golang.org/x/net from 0.55.0 to 0.56.0 in the go-minor-patch group across 1 directory",
"is_bot": false,
"headline": "Merge pull request #76 from Detective-XH/dependabot/go_modules/go-min…",
"author_name": "Detective-X",
"author_login": "Detective-XH",
"committed_at": "2026-06-13T18:28:22Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "77bcf3f16ff0de39c26df3151b7000697cafe9b5",
"body": "release: v0.3.1",
"is_bot": false,
"headline": "Merge pull request #77 from Detective-XH/release/v0.3.1",
"author_name": "Detective-X",
"author_login": "Detective-XH",
"committed_at": "2026-06-13T18:27:51Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "35df57fda5a1a54a8b885979775f0e28be031b5d",
"body": null,
"is_bot": false,
"headline": "release: v0.3.1",
"author_name": "Detective-X",
"author_login": "Detective-XH",
"committed_at": "2026-06-13T18:23:39Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d61240f66097c2442ab2ae2b9ea7f732e1c53fd1",
"body": "Bumps the go-minor-patch group with 1 update in the / directory: [golang.org/x/net](https://github.com/golang/net).\n\n\nUpdates `golang.org/x/net` from 0.55.0 to 0.56.0\n- [Commits](https://github.com/golang/net/compare/v0.55.0...v0.56.0)\n\n---\nupdated-dependencies:\n- dependency-name: golang.org/x/net\n dependency-version: 0.56.0\n dependency-type: direct:production\n update-type: version-update:semver-minor\n dependency-group: go-minor-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
"is_bot": true,
"headline": "chore(deps): bump golang.org/x/net",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-06-13T17:58:49Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5018832cc596f1f875beef6bc785c91ae93147c5",
"body": "feat: actionable drift findings, binary governance exemption, .docgraphignore loop-close; bump gopdf v0.7.9",
"is_bot": false,
"headline": "Merge pull request #75 from Detective-XH/feat/drift-governance-ax-gopdf",
"author_name": "Detective-X",
"author_login": "Detective-XH",
"committed_at": "2026-06-13T17:56:47Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b6c75de1a5e5614d1895d63038f7be5a13355b8f",
"body": "…phignore loop-close; bump gopdf v0.7.9\n\nDrift/governance AX-bug remediation (an MCP-only \"fix all drift\" run dead-ended —\nremediation existed but was undiscoverable/un-completable from the tool surface):\n- DriftFinding/MetadataQualityIssue gain a Remediation field (one-chokepoint\n population + int\n[…]\n watcher passthrough, containsIgnoreRuleFile. Full\nsuite green under -race; 0 new golangci-lint/gosec. No MCP tool-surface change.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "feat: actionable drift findings, binary governance exemption, .docgra…",
"author_name": "Detective-X",
"author_login": "Detective-XH",
"committed_at": "2026-06-13T17:52:49Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "56908d95ef4c1794b651826b020e889566a74ad8",
"body": "Bumps the sqlite-supply-chain group with 1 update: [modernc.org/sqlite](https://gitlab.com/cznic/sqlite).\n\n\nUpdates `modernc.org/sqlite` from 1.51.0 to 1.52.0\n- [Changelog](https://gitlab.com/cznic/sqlite/blob/master/CHANGELOG.md)\n- [Commits](https://gitlab.com/cznic/sqlite/compare/v1.51.0...v1.52.0\n[…]\nendency-version: 1.52.0\n dependency-type: direct:production\n update-type: version-update:semver-minor\n dependency-group: sqlite-supply-chain\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
"is_bot": true,
"headline": "chore(deps): bump modernc.org/sqlite in the sqlite-supply-chain group",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-06-08T08:12:36Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "af10f663e74f107302d850d4245b25b55d143831",
"body": "…d-cyclop\n\nrefactor: cut complexity of 3 functions; gate cyclop at 40",
"is_bot": false,
"headline": "Merge pull request #72 from Detective-XH/chore/complexity-refactor-an…",
"author_name": "Detective-X",
"author_login": "Detective-XH",
"committed_at": "2026-06-02T21:09:15Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "3eda7a4eaf3aeaa633021ad5b1998e64cb0bc89e",
"body": "Behavior-preserving extractions (verified: build, go test -race ./... all pass,\ngolangci-lint 0):\n- handleStatus 31->5: split workspace vs single-store bodies into appendWorkspaceStatus\n / appendSingleStoreStatus (NOT unified — the two emit different output by design).\n- BuildImpactGraph 27->5: ext\n[…]\nrent, breadth\nnot depth) is grandfathered on unchanged lines and stays visible on local full runs as\na periodic-review list. A PR only trips cyclop by adding a new >40 function or growing\none past 40.",
"is_bot": false,
"headline": "refactor: cut complexity of 3 handlers/writers; gate cyclop at 40",
"author_name": "Detective-X",
"author_login": "Detective-XH",
"committed_at": "2026-06-02T21:05:20Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "f12cfccc1519eda2d96636eccc8a3fb96117d36b",
"body": "chore(gosec): annotate confirmed-safe findings with #nosec + rationale",
"is_bot": false,
"headline": "Merge pull request #71 from Detective-XH/chore/gosec-nosec-annotations",
"author_name": "Detective-X",
"author_login": "Detective-XH",
"committed_at": "2026-06-02T20:13:01Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a9d4ce2fa1b978049e7d5c774ff944682e245f98",
"body": "A codegraph-armed investigation confirmed all 20 gosec findings (after the\nG104/G304/G301/G306 excludes) are safe-by-construction. Annotate each site with\n`#nosec <rule> -- <reason>` rather than excluding the rules globally, so\nG202/G204/G703/G706/G115 stay active for future code while the audited s\n[…]\n\n- G115 (x1): non-named zip entries counted but never decompressed; named\n entries capped by readZipEntry's LimitReader.\n\ngosec (excl G104,G304,G301,G306) -> 0; gofmt, golangci-lint, build all clean.",
"is_bot": false,
"headline": "chore(gosec): annotate confirmed-safe findings with #nosec + rationale",
"author_name": "Detective-X",
"author_login": "Detective-XH",
"committed_at": "2026-06-02T20:09:17Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "42e30208400b2c1ab604522864f1cd6a6e7bc615",
"body": "fix: resolve golangci-lint baseline (errcheck + staticcheck)",
"is_bot": false,
"headline": "Merge pull request #70 from Detective-XH/chore/golangci-lint-fixes",
"author_name": "Detective-X",
"author_login": "Detective-XH",
"committed_at": "2026-06-02T19:43:58Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "45d6503d3448f126d3151cd3dcdb4dde6dbcc278",
"body": "Fix the 23 pre-existing golangci-lint findings the new CI job gates against:\n\n- errcheck: handle previously-dropped errors —\n - store.GetStats: propagate Row.Scan errors\n - parser.ParseFile: propagate ast.Walk error (extractText's Walk is\n structurally error-free, so explicit discard with a com\n[…]\nrite De Morgan negations in search ranking + tests\n- staticcheck ST1018: escape literal U+200B as \\u200b in scanner/store tests\n\ngo build, go vet, golangci-lint (0 issues), and go test -race all pass.",
"is_bot": false,
"headline": "fix: resolve golangci-lint baseline (errcheck + staticcheck)",
"author_name": "Detective-X",
"author_login": "Detective-XH",
"committed_at": "2026-06-02T19:39:38Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "a393b9c7ea7a743b4f2bf4f00a82ccda13cbdd98",
"body": "ci: add golangci-lint config + new-issues-only CI job",
"is_bot": false,
"headline": "Merge pull request #69 from Detective-XH/chore/golangci-lint-cleanup",
"author_name": "Detective-X",
"author_login": "Detective-XH",
"committed_at": "2026-06-02T19:23:34Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "8d9ba310297eed1b10c7224510107b361b275a5f",
"body": "Drops golangci/golangci-lint-action (Node-20 deprecation warning + a\nthird-party action dependency) in favour of a pinned `go install` of\ngolangci-lint v2.12.2, diffing new issues against the PR base via\n--new-from-rev=FETCH_HEAD.",
"is_bot": false,
"headline": "ci: run golangci-lint via pinned go install, not the JS action",
"author_name": "Detective-X",
"author_login": "Detective-XH",
"committed_at": "2026-06-02T19:19:46Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "44d1fcaa9665228982eee83fb75554a2eb13c873",
"body": "Add .golangci.yml (default linters; errcheck tuned to exclude conventional\ncleanup — sql/* and io.Closer Close, Tx.Rollback, fmt.Fprint*, flag.Parse,\nstore.Store/workspace.Workspace Close — and disabled on _test.go).\n\nAdd a golangci-lint CI job via golangci-lint-action with only-new-issues,\ngated to pull_request events so it flags issues a PR introduces without\nblocking on the pre-existing baseline (cleaned up in a follow-up PR).",
"is_bot": false,
"headline": "ci: add golangci-lint config + new-issues-only CI job",
"author_name": "Detective-X",
"author_login": "Detective-XH",
"committed_at": "2026-06-02T19:14:21Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0b91247af94774f822b3a58d1f5d106b0512a1c3",
"body": "deps: adopt Detective-XH/gopdf v0.6.3 (renamed from Detective-XH/pdf)",
"is_bot": false,
"headline": "Merge pull request #68 from Detective-XH/deps/adopt-gopdf-v0.6.3",
"author_name": "Detective-X",
"author_login": "Detective-XH",
"committed_at": "2026-06-02T18:48:47Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ae9566d8b1fe5fe7dca799b0ec5a2914aaf188e1",
"body": "The PDF extractor dependency was renamed: GitHub repo pdf → GoPDF and Go\nmodule path github.com/Detective-XH/pdf → github.com/Detective-XH/gopdf. The\npackage identifier is unchanged (still `pdf`), so only the import path,\ngo.mod/go.sum, and doc references change — no call-site edits.\n\nThis also bump\n[…]\ning word-space fix.\n\nAdd gitignored go.work (+ go.work.sum) for local co-development against ../GoPDF\nwithout a tag/bump round-trip.\n\ngo build ./... and go test -race ./... pass against pinned v0.6.3.",
"is_bot": false,
"headline": "deps: adopt Detective-XH/gopdf v0.6.3 (renamed from Detective-XH/pdf)",
"author_name": "Detective-X",
"author_login": "Detective-XH",
"committed_at": "2026-06-02T18:44:27Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "b8da87dcfa7488f1bb45323a390b9f773dc4561d",
"body": "Co-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "release: v0.3.0 (#67)",
"author_name": "Detective-X",
"author_login": "Detective-XH",
"committed_at": "2026-06-02T01:46:15Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "fdf7f9db739eaee6871ea5891966db76468c96c3",
"body": "- bump github.com/Detective-XH/pdf v0.5.0 -> v0.6.0. Public API unchanged\n (OpenBytes/Page/Font/Value signatures identical), so no call-site changes.\n Automatic gains: broader CJK CMap coverage (GB-EUC/GBKp-EUC/ETenms-B5/\n KSC-EUC/KSCms-UHC) and upstream hardening (inline-image crash, zero-length\n[…]\nest: extend buildMinimalPDFEnc with an /Info dict param; add\n TestExtractPDF_CreationDateNormalized pinning +05'00' -> 04:30:00Z.\n\nCo-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "feat(extractor): adopt Detective-XH/pdf v0.6.0 Metadata API (#65)",
"author_name": "Detective-X",
"author_login": "Detective-XH",
"committed_at": "2026-06-02T01:20:44Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "817b7e6571d35200e3a41e163e52e9229f8477ab",
"body": "Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>",
"is_bot": false,
"headline": "docs: add Go Report Card badge to README",
"author_name": "Detective-X",
"author_login": "Detective-XH",
"committed_at": "2026-06-02T00:27:49Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "7865c17abb3a44aa781472d5cec432f1879b9795",
"body": "Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>",
"is_bot": false,
"headline": "style: gofmt fix struct literal alignment in context_arg_clamp_test.go",
"author_name": "Detective-X",
"author_login": "Detective-XH",
"committed_at": "2026-06-01T21:29:05Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "4a2f6dfa9fcb0d9c025670f19fb93121edc2b08d",
"body": "Broad cross-workspace queries (maxNodes=10, ~21 KB in workspace mode)\ncaused LLM runners to struggle with oversized payloads. Add a 20 KB\nsoft cap in the summary render loop: after rendering each document, if\nthe buffer exceeds maxContextResponseBytes and more docs remain, emit a\ntruncation notice a\n[…]\nntext_PayloadOverflowNotice_SmallQuery (negative,\n3-doc fixture ~4 KB).\nDiscovered: AX Probe v6 OPEN-W 2026-06-01 (context-payload-overflow).\n\nCo-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>",
"is_bot": false,
"headline": "fix(context): soft-cap docgraph_context summary payload at 20 KB",
"author_name": "Detective-X",
"author_login": "Detective-XH",
"committed_at": "2026-06-01T21:23:21Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "3fd7bc655d230472df845de1968348d0a64021f4",
"body": "…ery (#64)\n\nThe isolated-docs query joined files.path against edges.source, but\nedges.source holds node IDs. Inline wikilinks are attributed to their\nnearest heading node (ID = path#heading:line), not the document node\n(ID = file path), so the old LEFT JOIN missed all heading-attributed\nlinks and fa\n[…]\nins through nodes.file_path\nso all edges — regardless of whether their source is the document node\nor a heading node — are counted correctly.\n\nCo-authored-by: Claude Sonnet 4.6 <noreply@anthropic.com>",
"is_bot": false,
"headline": "fix(skills): correct docgraph-drift-audit Step 2b isolated-doc SQL qu…",
"author_name": "Detective-X",
"author_login": "Detective-XH",
"committed_at": "2026-06-01T20:40:31Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "42aa176dabecdc47be8f9974c77b10c8b2be1d06",
"body": "Add project=<name> parameter to docgraph_search, docgraph_context,\ndocgraph_explore, docgraph_similar, docgraph_files, docgraph_tags in\nworkspace mode. Passing project= scopes the fan-out to a single project DB\n(early-continue in workspace.SearchWithOptions, GetAllFiles, GetAllTopLevelDirs,\nand dire\n[…]\nructionsWorkspaceProjectFilter.\nfanout_test.go updated for GetAllFiles/GetAllTopLevelDirs new signatures.\ngo test -race 18/18 packages green.\n\nCo-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>",
"is_bot": false,
"headline": "feat(workspace): per-project filter for all workspace query tools",
"author_name": "Detective-X",
"author_login": "Detective-XH",
"committed_at": "2026-06-01T20:32:06Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "7466c42b074a73322e8ae2ac0430a3548b0608bd",
"body": "…012)\n\nReplaces all WriteString(fmt.Sprintf(...)) patterns with fmt.Fprintf\nacross internal/tools and internal/extractor, eliminating unnecessary\nintermediate string allocations.\n\nAlso resolves related pre-existing diagnostics found in the same files:\n- rangeint: modernise for-loop to range-over-int\n[…]\nn-memory parsing directly from the src bytes passed by the extractor.\nRemoves the os.CreateTemp/Write/Close/Remove dance and the \"os\" import.\n\nCo-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>",
"is_bot": false,
"headline": "fix(style): replace sb.WriteString(fmt.Sprintf) with fmt.Fprintf (QF1…",
"author_name": "Detective-X",
"author_login": "Detective-XH",
"committed_at": "2026-06-01T20:30:43Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "016c31bd0c0979cd9d5d3a14f65b84f2e979afb7",
"body": "PDF CJK Phases 1–6 shipped native decoders (Shift-JIS, UCS-2-BE, GBK,\nBig5-ETen, UHC) but AGENTS.md still described CJK as a \"trigram search\"\nsignal only. Updated the supporting signal to mention that CJK PDFs are\ndecoded natively rather than skipped or garbled — closing the fit-guide\ndrift surfaced in the Unreleased CHANGELOG review.\n\nCo-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>",
"is_bot": false,
"headline": "docs(agents): expand CJK supporting signal to cover PDF CJK extraction",
"author_name": "Detective-X",
"author_login": "Detective-XH",
"committed_at": "2026-06-01T20:06:46Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "b8be6ddffba8e06e6bc98c565058d842d3cbbb9d",
"body": "…t Layer-1b runner + S-6 supply-chain hardening (#63) (#63)\n\nAdd 6 new deploy-gate test functions + toolDescriptionsMap helper to tool_surface_test.go,\ncovering every un-guarded serverInstructions and tool-description AX assertion:\n TestServerInstructionsNoSeedDocumentGuidance (A6)\n TestServerInst\n[…]\n(debug.ReadBuildInfo),\ngo mod verify in CI (already present), GOFLAGS=-mod=readonly added to test job, /ax-assert\nbinary added to .gitignore.\n\nCo-authored-by: Claude Sonnet 4.6 <noreply@anthropic.com>",
"is_bot": false,
"headline": "test(ax): golden-string CI guards (A6/A12/A13–A15/A18) + cmd/ax-asser…",
"author_name": "Detective-X",
"author_login": "Detective-XH",
"committed_at": "2026-06-01T18:56:27Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "f72abc9d49162450661bd81dd44f5ef06b92e5ab",
"body": "…WorkspaceProjects (#62)\n\nCloses two residual gaps from the startup deletion-reconcile feature (#60/#61): the\n--workspace per-project reconcile path had no runtime coverage (this machine serves\n--path .), and no test asserted the reconcile is wired into a named, testable unit.\n\n- Extract the workspa\n[…]\nt\n isolation, none of which the single-store reconcile tests covered.\n\ngo build / go vet / gofmt / go test -race ./... all green.\n\nCo-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "test(serve): cover the --workspace reconcile path + extract reconcile…",
"author_name": "Detective-X",
"author_login": "Detective-XH",
"committed_at": "2026-06-01T16:43:13Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "1786ffa1d8194d34208c85120b6b193ed67b7784",
"body": "…ncile-on-start) (#61)\n\nFollow-up to #60 (0959412), landed pre-deploy so no shipped binary ever carries the flag.\n\nThe escape hatch was redundant AND a footgun for the first-class user (the LLM). The one\ncase it nominally protected — a copied/portable .docgraph whose files don't exist at the\nlocal r\n[…]\n.\n\ngo build / go vet / gofmt / go test -race green; reconcileDeletedFiles + its T1–T5 tests\nare unchanged (they call it directly).\n\nCo-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "fix(serve): make startup deletion-reconcile always-on (drop --no-reco…",
"author_name": "Detective-X",
"author_login": "Detective-XH",
"committed_at": "2026-06-01T16:20:33Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "09594122a8a91c65050edc42ffd36f1faa2be4a1",
"body": "…atcher-gap staleness) (#60)\n\nDeletion-prune was purely watcher-event-driven (pruneDeletedFiles called only from\nthe serve watcher callback): a file deleted while serve was DOWN fired no fsnotify\nevent, and neither cold-start nor `sync`/`index` reconciles DB-vs-disk, so its nodes\npersisted until `in\n[…]\ndversarially verified via two CodeGraph-armed subagents; plan\nadvisor-signed-off (plans/startup-deletion-reconcile-2026-06-01.md).\n\nCo-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "fix(serve): reconcile downtime-deleted files on warm startup (close w…",
"author_name": "Detective-X",
"author_login": "Detective-XH",
"committed_at": "2026-06-01T16:06:56Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "bc19a8961f51017ef487c2738e93850661c29268",
"body": "…content-trust test guard (#59)\n\nhandleContext now reads impactDepth/referenceLimit via getIntArgClamped\n(1..3 / 1..20), matching the documented tool contract and the H-24 \"clamp\nevery MCP int arg at retrieval\" invariant — these were the last two\nuser-facing int args still relying solely on the down\n[…]\ne 2026-06-01 redteam security-audit (PASS WITH NOTES); both NOTEs were\ndefense-in-depth / regression-guard, no live vulnerability.\n\nCo-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "harden(tools): clamp context-pack int args at retrieval (H-24) + S-1 …",
"author_name": "Detective-X",
"author_login": "Detective-XH",
"committed_at": "2026-06-01T14:54:08Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "a92f092aa0886afffd74ce9ce2a536015c7b546c",
"body": "…ore.WriteDependents (#58)\n\nindexStore (indexer.go) and indexProjectOpts (internal/workspace/indexing.go)\neach carried a byte-identical 8-step per-file dependent tail — document /\ngovernance / research metadata upserts, entitygraph.IndexFile, edge +\nunresolved-ref inserts, UpsertFile, git-history up\n[…]\nnit tests locking the contract\n(changedDocIDs append, UpsertFile persistence, metadata-failure-is-fatal +\nlogPrefix reproduction).\n\nCo-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "refactor(indexing): extract shared per-file tail into internal/indexc…",
"author_name": "Detective-X",
"author_login": "Detective-XH",
"committed_at": "2026-06-01T13:56:08Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "8f254804bfd7328bcc911579378e2bf47dff958a",
"body": "…ipeline to indexing.go (#57)\n\nworkspace.go conflated three concerns: the workspace/multi-project\nabstraction, the fan-out query facade, and the entire single-project\nindexing pipeline (indexProjectOpts, 283 lines). Move the indexing\npipeline (IndexAll, ReindexProject, indexProject, indexProjectOpts\n[…]\n decompose the 283-line indexProjectOpts or consolidate the\nindexStore (indexer.go) parallel-pipeline duplication — both deferred.\n\nCo-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "refactor(workspace): split workspace.go god file — extract indexing p…",
"author_name": "Detective-X",
"author_login": "Detective-XH",
"committed_at": "2026-06-01T12:49:12Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "1c5b8c0593987da4cc0f3415e69c03dd52b666a9",
"body": "…c/pdf) (#56)\n\nThe PDF text extractor was forked ledongthuc/pdf -> Detective-XH/pdf v0.4.0\n(PR #52) for CJK CMap decoding, but README still credited the upstream in both\nthe dependency table and the extractor dispatch flow. Point both at the fork,\nkeeping upstream attribution. Doc-only; no code or go.mod change.\n\nCo-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "docs(readme): correct PDF dep to Detective-XH/pdf fork (was ledongthu…",
"author_name": "Detective-X",
"author_login": "Detective-XH",
"committed_at": "2026-06-01T11:37:38Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "9a693ce072181b352406dd907ddfa6d2dabb1609",
"body": "…ndlers (#55)\n\nClean-code-audit follow-up — raise coverage of two packages by testing\npreviously-uncovered behavior-bearing functions (registration glue left untested\nintentionally).\n\n- internal/workspace/fanout_test.go: GetAllStats / GetAllFiles (incl. prefix\n filter) / GetAllTopLevelDirs / FindNo\n[…]\nHistory (incl. param-validation and not-found paths). 72.4% -> 76.6%.\n\ngo build / go vet / go test -race -count=1 ./... all green.\n\nCo-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "test(workspace,tools): cover fan-out queries + tag/explore/history ha…",
"author_name": "Detective-X",
"author_login": "Detective-XH",
"committed_at": "2026-06-01T11:21:56Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "264b3c0f3a0cb2d6b6180ed05a0f3d9f019204f9",
"body": "… (#54)\n\n- internal/codedoc/codedoc_jsts.go: remove the redundant `loc != nil &&` before\n len(loc) in three FindStringSubmatchIndex guards (staticcheck S1009; len(nil)==0\n makes `len(loc) >= 4` equivalent). Behavior-preserving.\n- gofmt -w across the tree: pdf.go, context_pack.go + 5 test files (wh\n[…]\nhub/workflows/test.yml: add a `gofmt` job so unformatted Go fails CI.\n\ngo build / go vet / go test -race -count=1 ./... all green.\n\nCo-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "style: drop redundant S1009 nil-checks, gofmt repo, add CI gofmt gate…",
"author_name": "Detective-X",
"author_login": "Detective-XH",
"committed_at": "2026-06-01T10:51:32Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "b3e6e7b33b7d0fbda330a55fd53da4426aa14cba",
"body": "…d (#53)\n\nReflects Detective-XH/pdf v0.4.0: all five predefined CMap families\n(Uni*-UCS2-*, Shift-JIS, GBK-EUC, ETen-B5, KSCms-UHC) now decoded.\nStatic unsupported-encoding blocklist removed; runtime encoding-garbage\nbackstop retained.\n\nCo-authored-by: Claude Sonnet 4.6 <noreply@anthropic.com>",
"is_bot": false,
"headline": "docs: update PDF CMap support list — GBK / Big5-ETen / UHC now decode…",
"author_name": "Detective-X",
"author_login": "Detective-XH",
"committed_at": "2026-06-01T10:03:33Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "803e5eb302060d51164c3fce8313f2e91c0613ab",
"body": "…Detective-XH/pdf v0.4.0 (#52)\n\n* feat(extractor): Phase 3 — UniGB/UniCNS/UniJIS/UniKS-UCS2-H decoder via Detective-XH/pdf v0.3.0\n\nFork v0.3.0 adds ucs2BEEncoder: reads 2-byte big-endian Unicode code points\ndirectly (UCS-2/BMP, no x/text dep). Removes UniXX-UCS2-H/V from the Phase 0\nunsupported-enco\n[…]\ning no unsupported-encoding\nwarning is emitted for GBK-EUC-H documents.\n\nCo-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>\n\n---------\n\nCo-authored-by: Claude Sonnet 4.6 <noreply@anthropic.com>",
"is_bot": false,
"headline": "feat(extractor): Phase 5+6 — GBK / Big5-ETen / UHC CMap decoders via …",
"author_name": "Detective-X",
"author_login": "Detective-XH",
"committed_at": "2026-06-01T09:49:42Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "372ba9b19075d19a2fd3d49cb2d8bf1ed91cb042",
"body": "…ive-XH/pdf v0.2.0\n\n- Upgrade to Detective-XH/pdf v0.2.0 which adds multibyteCMapEncoder backed\n by golang.org/x/text/encoding/japanese.ShiftJIS for 90ms-RKSJ-H/V and\n 90pv-RKSJ-H predefined CMaps.\n- Remove 90ms-RKSJ-H/V from isUnsupportedCMapName(): the fork now decodes them.\n- Rebuild cjk_sample\n[…]\nd as image-only.\n- Flip TestExtractPDF_RealModeB1: assert no warning, non-empty text, and that\n both Japanese and ASCII content are present.\n\nCo-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>",
"is_bot": false,
"headline": "feat(extractor): Phase 2 — Shift-JIS (90ms-RKSJ-H) decoder via Detect…",
"author_name": "Detective-X",
"author_login": "Detective-XH",
"committed_at": "2026-06-01T08:16:23Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "c58f74016981762c4b381eb31b8940b0f1c13008",
"body": "Replace github.com/ledongthuc/pdf with the Detective-XH/pdf fork at v0.1.0.\nNo behaviour changes; all 17 test packages pass with -race.\n\nPhase 2 (Shift-JIS / RKSJ decoder) and Phase 3 (UniGB-UCS2-H fixture +\nCJK gate) will follow in subsequent PRs against this fork.\n\nCo-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>",
"is_bot": false,
"headline": "feat(extractor): Phase 1 — swap pdf dep to Detective-XH/pdf fork",
"author_name": "Detective-X",
"author_login": "Detective-XH",
"committed_at": "2026-06-01T08:01:22Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "e6f44a473de399741a4e13a8dcc25d4b1508e42d",
"body": "…ctPDF_RealModeB1 (#51)\n\nAdds a real-world Mode B1 PDF fixture (1039 bytes) from the mozilla/pdf.js\ntest corpus (Apache 2.0). Font HeiseiMin-W3 uses /90ms-RKSJ-H predefined CMap\nwith no /ToUnicode entry — the exact failure mode Phase 0 detects.\n\nTestExtractPDF_RealModeB1 confirms:\n- extraction-faile\n[…]\n — not\ncommitted; 1.4 MB). Fork of ledongthuc/pdf is justified.\n\nSource: github.com/mozilla/pdf.js/blob/master/test/pdfs/90ms_rksj_h_sample.pdf\n\nCo-authored-by: Claude Opus 4.8 <noreply@anthropic.com>",
"is_bot": false,
"headline": "test(extractor): Phase -1 gate — real Mode B1 CJK fixture + TestExtra…",
"author_name": "Detective-X",
"author_login": "Detective-XH",
"committed_at": "2026-06-01T07:52:20Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "09b9a69736abf58cbe23593329f2bd1c2d4c7dac",
"body": "…ap encodings (#50)\n\nledongthuc/pdf silently passes fonts with unrecognised predefined CMap names\n(e.g. UniGB-UCS2-H) through a no-op encoder, producing U+FFFD-laden output\nwith a nil error. This makes utf8.ValidString useless as a guard.\n\nPhase 0 (detection/triage, not a CJK fix):\n- pageUnsupported\n[…]\nTests: TestExtractPDF_UnsupportedEncoding, TestReplacementCharRatio,\nTestSanitizeWarningDetail, FuzzExtractPDF CJK seed. All 17 packages green.\n\nCo-authored-by: Claude Opus 4.8 <noreply@anthropic.com>",
"is_bot": false,
"headline": "feat(extractor): Phase 0 PDF — surface errors + detect unsupported CM…",
"author_name": "Detective-X",
"author_login": "Detective-XH",
"committed_at": "2026-06-01T07:20:58Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "c2aaba7f0555ff4af5913006ace3a59f50ab1156",
"body": "…footer + drift_audit/enumerate guidance (#49)\n\nP-v5-2 (reliability): the live serve watcher reindex never pruned files deleted from\ndisk — a deleted/moved/renamed doc's nodes, edges, FTS rows, metadata, entity mentions,\nand file-hash row persisted in the live index until `index --force`. New pruneD\n[…]\nuild/vet/test -race 17/17 green. Implemented via 3\nparallel CodeGraph-armed worktree subagents (disjoint files), advisor-reviewed.\n\nCo-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "fix(ax): AX v5 — deletion-staleness prune + search limit-instability …",
"author_name": "Detective-X",
"author_login": "Detective-XH",
"committed_at": "2026-06-01T01:05:15Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "3647c9763faabab0b6f017c0ba44a05e6d8caf71",
"body": "…cuments when enumerating (B mitigation) (#48)\n\nAX probe v4's B finding: weak agents asked to enumerate \"distinct work\nthreads\" over-counted 2-3x by treating each PR a document mentions in its\nbody as a separate thread (one file listing PR #19-24 → \"6 threads\").\n\nThis is a task-granularity gap, not \n[…]\n./... green.\n\nMITIGATION, not a verified fix — effect on weak agents is unverified;\nAX v5 must re-probe B before calling it fixed.\n\nCo-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "fix(mcp): serverInstructions granularity guidance — count distinct do…",
"author_name": "Detective-X",
"author_login": "Detective-XH",
"committed_at": "2026-05-31T23:50:26Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "5f58f2f0456c7d969c2d900f5fe510a9a9b30e39",
"body": "…aude/ stay indexed (#46)\" (#47)\n\nThis reverts commit deb7f40b3532a1e3c3b0f4bf0dc86d91dcff327d.",
"is_bot": false,
"headline": "Revert \"fix(mcp): serve this repo with --no-gitignore so plans/ + .cl…",
"author_name": "Detective-X",
"author_login": "Detective-XH",
"committed_at": "2026-05-31T23:43:50Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "deb7f40b3532a1e3c3b0f4bf0dc86d91dcff327d",
"body": "…ay indexed (#46)\n\nThe tracked .mcp.json (serve --path .) overrides the global workspace config when\ncwd is inside the repo, and ran WITHOUT --no-gitignore — so the reindex pipeline\ncorrectly respected .gitignore and never maintained gitignored dirs (plans/,\n.claude/). A .docgraph force-built with -\n[…]\nthis repo in an MCP client\nnow indexes their own gitignored files into a local .docgraph (intended for this\nproject's dogfooding).\n\nCo-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "fix(mcp): serve this repo with --no-gitignore so plans/ + .claude/ st…",
"author_name": "Detective-X",
"author_login": "Detective-XH",
"committed_at": "2026-05-31T23:36:37Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "f71c9eede450bcd42309b12e9af502f2488d4caf",
"body": "…tinct-file footer, missing_status clarity (#45)\n\nFrom the AX probe v4 behavioral audit (zero regressions; all v3 fixes held):\n\n- P-v4-1 (A′/H): the seeded-gather serverInstructions sentence over-promised\n docgraph_context. Verified live, context is task/keyword-based and does not\n compose the cit\n[…]\nield.\n\ngo build/vet + go test -race ./... 17/17 green. New: search_test.go\nTestHandleSearch_DistinctFileFooter*. No schema change.\n\nCo-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "fix(tools): AX v4 surface fixes — seeded-gather call-both, search dis…",
"author_name": "Detective-X",
"author_login": "Detective-XH",
"committed_at": "2026-05-31T23:14:09Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "a4bd2e38e92b0e23d18929e0937a673cd86f6bdd",
"body": "…ve --workspace fd exhaustion) (#44)\n\n`serve --workspace` recursively watches the whole tree; on macOS (kqueue) every\nwatched dir/file is one fd, so a large workspace opens ~58K fds per process —\nmultiplied across every concurrent serve (one per connected MCP client), this\nexhausted the system file \n[…]\nlane\ntoo) + macOS fd-delta proof (uncapped 3072 → capped 524 on a 3068-entry tree) +\nreindex fd-leak guard (0 fds over 20 cycles).\n\nCo-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "fix(watcher): cap fsnotify watches per process to bound fd usage (ser…",
"author_name": "Detective-X",
"author_login": "Detective-XH",
"committed_at": "2026-05-31T22:32:35Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "3414ede78f8226e442c082e52dffb9e27fe75583",
"body": "…strip guidance, trust notes (#43)\n\nRender/description-layer fixes for the AX-probe-v3 findings (no store/ranking\nchange; go build + go test -race ./... green, 17/17):\n\n- docgraph_context: collapse same-source-file result nodes to one entry per\n document, listing additional matched sections inline \n[…]\ntency + K recount).\n\nLayer-1 A0/A4 live substrings preserved (\"distinct other documents\",\n\"incoming edges ←\", \"outgoing edges →\").\n\nCo-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "fix(tools): AX v3 surface fixes — context dedup, tool-overlap & path-…",
"author_name": "Detective-X",
"author_login": "Detective-XH",
"committed_at": "2026-05-31T21:43:07Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "0e2471fc34c5929e999b6d7ab2e040f4f810a51f",
"body": "…(P6/C2) (#42)\n\nsearch('README') now returns README.md itself, not just headings that mention the\ntoken. A new collectFilenameCandidates retrieves a DOCUMENT whose basename (extension\nstripped) exactly equals the query — the find-this-doc-by-name case FTS misses because a\ndocument node's indexed tex\n[…]\n Fires only on a single-token query that equals a basename; whitespace queries\nskip it. Closes the v2 AX-probe C2 deferred defect.\n\nCo-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "feat(search): exact filename match surfaces the named document first …",
"author_name": "Detective-X",
"author_login": "Detective-XH",
"committed_at": "2026-05-31T19:38:19Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "870efe645a65187e1584fd7574b7a7a4745e5659",
"body": "…files honesty, topic-gather guidance (#41)\n\n* fix(tools): surface TF-IDF similarity score components + ground caveats (P1/P3a/P5b)\n\ndocgraph_similar render now labels the score as a 0-1 weighted blend and shows the\ntfidf/refs/tags signal components already persisted in edge metadata (closing the v2\n[…]\nnot a table row, so the table shape is unchanged.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>\n\n---------\n\nCo-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "fix(tools): AX surface follow-ups — similar provenance, node parity, …",
"author_name": "Detective-X",
"author_login": "Detective-XH",
"committed_at": "2026-05-31T19:11:54Z",
"body_truncated": true,
"is_coding_agent": true
}
],
"releases_count": 15,
"commits_last_year": 258,
"latest_release_at": "2026-06-15T20:00:18Z",
"latest_release_tag": "v0.3.4",
"releases_from_tags": false,
"days_since_last_push": 7,
"active_weeks_last_year": 4,
"days_since_latest_release": 42,
"mean_days_between_releases": 2.3
},
"community": {
"has_readme": true,
"has_license": true,
"has_description": true,
"has_contributing": false,
"health_percentage": 42,
"has_issue_template": false,
"has_code_of_conduct": false,
"has_pull_request_template": false
},
"ecosystem": {
"packages": [
{
"name": "github.com/Detective-XH/docgraph",
"exists": true,
"license": null,
"keywords": [],
"ecosystem": "go",
"matches_repo": true,
"registry_url": "https://pkg.go.dev/github.com/Detective-XH/docgraph",
"is_deprecated": false,
"latest_version": "v0.3.4",
"repository_url": "https://github.com/Detective-XH/docgraph",
"versions_count": 15,
"total_downloads": null,
"dependents_count": null,
"deprecation_note": null,
"maintainers_count": null,
"monthly_downloads": null,
"first_published_at": null,
"latest_published_at": "2026-06-15T19:59:33Z",
"latest_version_yanked": null,
"days_since_latest_publish": 42
}
]
},
"popularity": {
"forks": 0,
"stars": 5,
"watchers": 0,
"fork_history": {
"days": [],
"complete": true,
"collected": 0,
"total_forks": 0
},
"star_history": null,
"open_issues_and_prs": 4
},
"ai_readiness": {
"has_nix": false,
"example_dirs": [],
"has_llms_txt": false,
"has_dockerfile": false,
"has_mcp_signal": true,
"bootstrap_files": [],
"api_schema_files": [],
"has_devcontainer": false,
"typecheck_configs": [],
"toolchain_manifests": [
"go.mod"
],
"largest_source_bytes": 33922,
"source_files_sampled": 222,
"oversized_source_files": 0,
"agent_instruction_files": [
"AGENTS.md"
],
"agent_instruction_max_bytes": 7493
},
"dependencies": {
"manifests": [
"go.mod"
],
"advisories": {
"error": null,
"scope": null,
"source": null,
"findings": [],
"collected": false,
"malicious": [],
"truncated": false,
"by_severity": {},
"advisory_count": 0,
"affected_count": 0,
"assessed_count": 0,
"malicious_count": 0,
"assessed_package": null,
"unassessed_count": 0,
"direct_affected_count": 0
},
"ecosystems": [
"go"
],
"dependencies": [
{
"name": "github.com/Detective-XH/gopdf",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v0.8.0"
},
{
"name": "github.com/fsnotify/fsnotify",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.10.1"
},
{
"name": "github.com/mark3labs/mcp-go",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v0.54.1"
},
{
"name": "github.com/yuin/goldmark",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.8.2"
},
{
"name": "golang.org/x/net",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v0.56.0"
},
{
"name": "gopkg.in/yaml.v3",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v3.0.1"
},
{
"name": "modernc.org/sqlite",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.52.0"
}
],
"all_dependencies": {
"error": "GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository",
"source": null,
"packages": [],
"collected": false,
"truncated": false,
"total_count": null,
"direct_count": null,
"indirect_count": null
}
},
"maintainership": {
"issues": {
"open_prs": 4,
"merged_prs": 95,
"open_issues": 0,
"closed_ratio": null,
"closed_issues": 0,
"closed_unmerged_prs": 3
},
"bus_factor": 1,
"bot_contributors": 1,
"top_contributors": [
{
"type": "User",
"login": "Detective-XH",
"commits": 252,
"avatar_url": "https://avatars.githubusercontent.com/u/163795227?v=4"
}
],
"contributors_sampled": 1,
"top_contributor_share": 1
},
"quality_signals": {
"has_ci": true,
"has_tests": true,
"ci_workflows": [
"test.yml"
],
"has_docs_dir": false,
"linter_configs": [
".golangci.yml"
],
"has_editorconfig": false,
"has_linter_config": true,
"has_precommit_config": false
},
"security_signals": {
"lockfiles": [
"go.sum"
],
"scorecard": {
"checks": [
{
"name": "Binary-Artifacts",
"score": 10,
"reason": "no binaries found in the repo",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#binary-artifacts"
},
{
"name": "Branch-Protection",
"score": 3,
"reason": "branch protection is not maximal on development and all release branches",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#branch-protection"
},
{
"name": "CI-Tests",
"score": 10,
"reason": "12 out of 12 merged PRs checked by a CI test -- score normalized to 10",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#ci-tests"
},
{
"name": "CII-Best-Practices",
"score": 0,
"reason": "no effort to earn an OpenSSF best practices badge detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#cii-best-practices"
},
{
"name": "Code-Review",
"score": 0,
"reason": "Found 0/12 approved changesets -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#code-review"
},
{
"name": "Contributors",
"score": 0,
"reason": "project has 0 contributing companies or organizations -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#contributors"
},
{
"name": "Dangerous-Workflow",
"score": 10,
"reason": "no dangerous workflow patterns detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dangerous-workflow"
},
{
"name": "Dependency-Update-Tool",
"score": 10,
"reason": "update tool detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dependency-update-tool"
},
{
"name": "Fuzzing",
"score": 10,
"reason": "project is fuzzed",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#fuzzing"
},
{
"name": "License",
"score": 10,
"reason": "license file detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#license"
},
{
"name": "Maintained",
"score": 0,
"reason": "project was created within the last 90 days. Please review its contents carefully",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#maintained"
},
{
"name": "Packaging",
"score": null,
"reason": "packaging workflow not detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#packaging"
},
{
"name": "Pinned-Dependencies",
"score": 0,
"reason": "dependency not pinned by hash detected -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#pinned-dependencies"
},
{
"name": "SAST",
"score": 0,
"reason": "SAST tool is not run on all commits -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#sast"
},
{
"name": "Security-Policy",
"score": 0,
"reason": "security policy file not detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#security-policy"
},
{
"name": "Signed-Releases",
"score": 8,
"reason": "5 out of the last 5 releases have a total of 5 signed artifacts.",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#signed-releases"
},
{
"name": "Token-Permissions",
"score": 0,
"reason": "detected GitHub workflow tokens with excessive permissions",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#token-permissions"
},
{
"name": "Vulnerabilities",
"score": 9,
"reason": "1 existing vulnerabilities detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#vulnerabilities"
}
],
"commit": "fd794aea38e3669336e9cc915541f85cd826cdc8",
"ran_at": "2026-07-28T04:36:32Z",
"aggregate_score": 5,
"scorecard_version": "v5.5.0"
},
"has_codeql_workflow": false,
"has_security_policy": false,
"has_dependabot_config": true
},
"contribution_flow": {
"collected": true,
"ci_last_run_at": "2026-07-27T08:13:01Z",
"oldest_open_prs": [
{
"number": 98,
"created_at": "2026-06-22T08:11:05Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 99,
"created_at": "2026-06-22T08:12:25Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 101,
"created_at": "2026-07-13T08:13:21Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 102,
"created_at": "2026-07-20T08:12:18Z",
"last_comment_at": null,
"last_comment_author": null
}
],
"last_merged_pr_at": "2026-06-15T19:59:33Z",
"ci_last_conclusion": "SUCCESS",
"oldest_open_issues": []
}
},
"config": {
"disabled_metrics": [],
"disabled_categories": [],
"disabled_components": {}
},
"source": {
"url": "https://github.com/Detective-XH/DocGraph",
"host": "github.com",
"name": "DocGraph",
"owner": "Detective-XH"
},
"metrics": {
"overall": {
"key": "overall",
"band": "moderate",
"name": "Overall health",
"note": null,
"notes": [],
"value": 56,
"inputs": {
"security": 50,
"vitality": 73,
"community": 29,
"governance": 50,
"engineering": 74
},
"components": []
},
"categories": [
{
"key": "vitality",
"band": "good",
"name": "Vitality",
"value": 73,
"weight": 0.22,
"metrics": [
{
"key": "development_activity",
"band": "moderate",
"name": "Development activity",
"note": null,
"notes": [],
"value": 57,
"inputs": {
"commits_last_year": 258,
"human_commit_share": 0.98,
"days_since_last_push": 7,
"active_weeks_last_year": 4
},
"components": [
{
"key": "push_recency",
"name": "Push recency",
"detail": "last push 7 days ago",
"points": 36,
"status": "met",
"details": [
{
"code": "push_recency",
"params": {
"days": 7
}
}
],
"max_points": 36
},
{
"key": "commit_cadence",
"name": "Commit cadence",
"detail": "4/52 weeks with commits",
"points": 2.8,
"status": "partial",
"details": [
{
"code": "commit_cadence_weeks",
"params": {
"weeks": 4
}
}
],
"max_points": 36
},
{
"key": "commit_volume",
"name": "Commit volume",
"detail": "258 commits in the last year",
"points": 18,
"status": "met",
"details": [
{
"code": "commits_last_year",
"params": {
"count": 258
}
}
],
"max_points": 18
},
{
"key": "openssf_scorecard_maintained",
"name": "OpenSSF Scorecard: Maintained",
"detail": "project was created within the last 90 days. Please review its contents carefully",
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
}
]
},
{
"key": "release_discipline",
"band": "excellent",
"name": "Release discipline",
"note": null,
"notes": [],
"value": 98,
"inputs": {
"releases_count": 15,
"latest_release_tag": "v0.3.4",
"releases_from_tags": false,
"days_since_latest_release": 42,
"mean_days_between_releases": 2.3
},
"components": [
{
"key": "ships_releases",
"name": "Ships releases",
"detail": "15 releases published",
"points": 27,
"status": "met",
"details": [
{
"code": "releases_published",
"params": {
"count": 15
}
}
],
"max_points": 27
},
{
"key": "release_recency",
"name": "Release recency",
"detail": "latest release 42 days ago",
"points": 36,
"status": "met",
"details": [
{
"code": "release_recency",
"params": {
"days": 42
}
}
],
"max_points": 36
},
{
"key": "release_cadence",
"name": "Release cadence",
"detail": "a release every ~2.3 days",
"points": 27,
"status": "met",
"details": [
{
"code": "release_cadence",
"params": {
"gap": 2.3
}
}
],
"max_points": 27
},
{
"key": "openssf_scorecard_signed_releases",
"name": "OpenSSF Scorecard: Signed-Releases",
"detail": "5 out of the last 5 releases have a total of 5 signed artifacts.",
"points": 8,
"status": "partial",
"details": [],
"max_points": 10
}
]
},
{
"key": "abandonment",
"band": "excellent",
"name": "Abandonment",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"cap": null,
"state": "unverified",
"guards": [],
"signals": [],
"red_flag": false,
"multiplier_pct": 100,
"declared_reason": null,
"unverified_reason": "repository_too_young",
"unanswered_open_prs": null,
"unanswered_open_issues": null,
"days_since_last_merged_pr": null,
"days_since_last_human_commit": null,
"days_since_last_human_commit_is_floor": false
},
"components": [
{
"key": "project_is_still_maintained",
"name": "Project is still maintained",
"detail": "maintenance record not established from the collected data",
"points": 100,
"status": "met",
"details": [
{
"code": "abandonment_unverified",
"params": {}
}
],
"max_points": 100
}
]
}
],
"description": "Is the project alive — is code being written and are releases shipping?"
},
{
"key": "community",
"band": "critical",
"name": "Community & Adoption",
"value": 29,
"weight": 0.18,
"metrics": [
{
"key": "popularity",
"band": "critical",
"name": "Popularity & adoption",
"note": null,
"notes": [],
"value": 10,
"inputs": {
"forks": 0,
"stars": 5,
"watchers": 0,
"growth_state": "unverified",
"growth_factor_pct": 100,
"growth_unverified_reason": "no_history"
},
"components": [
{
"key": "stars",
"name": "Stars",
"detail": "5 stars",
"points": 9.8,
"status": "partial",
"details": [
{
"code": "stars",
"params": {
"count": 5
}
}
],
"max_points": 60
},
{
"key": "forks",
"name": "Forks",
"detail": "0 forks",
"points": 0,
"status": "missed",
"details": [
{
"code": "forks",
"params": {
"count": 0
}
}
],
"max_points": 25
},
{
"key": "watchers",
"name": "Watchers",
"detail": "0 watchers",
"points": 0,
"status": "missed",
"details": [
{
"code": "watchers",
"params": {
"count": 0
}
}
],
"max_points": 15
}
]
},
{
"key": "community_health",
"band": "moderate",
"name": "Community health",
"note": null,
"notes": [],
"value": 50,
"inputs": {
"has_readme": true,
"has_license": true,
"has_contributing": false,
"has_issue_template": false,
"has_code_of_conduct": false,
"has_pull_request_template": false
},
"components": [
{
"key": "readme",
"name": "README",
"detail": null,
"points": 22.5,
"status": "met",
"details": [],
"max_points": 22.5
},
{
"key": "license",
"name": "License",
"detail": "recognized license (MIT)",
"points": 22.5,
"status": "met",
"details": [
{
"code": "license_standard",
"params": {}
},
{
"code": "license_spdx",
"params": {
"spdx": "MIT"
}
}
],
"max_points": 22.5
},
{
"key": "contributing_guide",
"name": "CONTRIBUTING guide",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 18
},
{
"key": "code_of_conduct",
"name": "Code of conduct",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 13.5
},
{
"key": "issue_template",
"name": "Issue template",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.2
},
{
"key": "pr_template",
"name": "PR template",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 6.3
}
]
}
],
"description": "Does the project have users, downloads, attention, and a welcoming setup for contributors?"
},
{
"key": "governance",
"band": "moderate",
"name": "Sustainability & Governance",
"value": 50,
"weight": 0.24,
"metrics": [
{
"key": "maintainer_resilience",
"band": "critical",
"name": "Maintainer resilience (bus factor)",
"note": null,
"notes": [],
"value": 10,
"inputs": {
"bus_factor": 1,
"contributors_sampled": 1,
"top_contributor_share": 1
},
"components": [
{
"key": "bus_factor",
"name": "Bus factor",
"detail": "1 contributor(s) cover half of all commits",
"points": 9,
"status": "partial",
"details": [
{
"code": "bus_factor",
"params": {
"count": 1
}
}
],
"max_points": 54
},
{
"key": "commit_distribution",
"name": "Commit distribution",
"detail": "top contributor authored 100% of commits",
"points": 0,
"status": "missed",
"details": [
{
"code": "top_contributor_share",
"params": {
"share": 100
}
}
],
"max_points": 22.5
},
{
"key": "contributor_breadth",
"name": "Contributor breadth",
"detail": "1 contributors",
"points": 1.4,
"status": "partial",
"details": [
{
"code": "contributors_sampled",
"params": {
"count": 1
}
}
],
"max_points": 13.5
},
{
"key": "openssf_scorecard_contributors",
"name": "OpenSSF Scorecard: Contributors",
"detail": "project has 0 contributing companies or organizations -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
}
]
},
{
"key": "responsiveness",
"band": "good",
"name": "Issue & PR responsiveness",
"note": "Excluded from scoring (no data or not applicable): Issue resolution. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"issue_resolution"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 70,
"inputs": {
"merged_prs": 95,
"open_issues": 0,
"closed_issues": 0,
"issue_closed_ratio": null,
"closed_unmerged_prs": 3
},
"components": [
{
"key": "issue_resolution",
"name": "Issue resolution",
"detail": "no issues or no data",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_issues_or_data",
"params": {}
}
],
"max_points": 46.75
},
{
"key": "pr_acceptance",
"name": "PR acceptance",
"detail": "95/98 decided PRs merged",
"points": 37.1,
"status": "partial",
"details": [
{
"code": "decided_prs_merged",
"params": {
"merged": 95,
"decided": 98
}
}
],
"max_points": 38.25
},
{
"key": "openssf_scorecard_code_review",
"name": "OpenSSF Scorecard: Code-Review",
"detail": "Found 0/12 approved changesets -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
}
]
},
{
"key": "stewardship",
"band": "at_risk",
"name": "Ownership & stewardship",
"note": "Excluded from scoring (no data or not applicable): Verified domain. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"verified_domain"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 37,
"inputs": {
"followers": 3,
"owner_type": "User",
"is_verified": null,
"owner_login": "Detective-XH",
"public_repos": 28,
"account_age_days": 862
},
"components": [
{
"key": "ownership_backing",
"name": "Ownership backing",
"detail": "personal (user) account",
"points": 10,
"status": "partial",
"details": [
{
"code": "owner_personal",
"params": {}
}
],
"max_points": 30
},
{
"key": "verified_domain",
"name": "Verified domain",
"detail": "not applicable to user accounts",
"points": 0,
"status": "excluded",
"details": [
{
"code": "not_applicable_to_user_accounts",
"params": {}
}
],
"max_points": 20
},
{
"key": "owner_reach",
"name": "Owner reach",
"detail": "3 followers of Detective-XH",
"points": 4.3,
"status": "partial",
"details": [
{
"code": "owner_followers",
"params": {
"count": 3,
"login": "Detective-XH"
}
}
],
"max_points": 25
},
{
"key": "track_record",
"name": "Track record",
"detail": "28 public repos, account ~2 yr old",
"points": 15.4,
"status": "partial",
"details": [
{
"code": "public_repos",
"params": {
"count": 28
}
},
{
"code": "account_age_years",
"params": {
"years": 2
}
}
],
"max_points": 25
}
]
},
{
"key": "package_maintenance",
"band": "excellent",
"name": "Package maintenance",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"packages": [
"github.com/Detective-XH/docgraph"
],
"ecosystems": "go",
"any_deprecated": false,
"min_days_since_publish": 42
},
"components": [
{
"key": "published_resolvable",
"name": "Published & resolvable",
"detail": "1 package(s) on go",
"points": 25,
"status": "met",
"details": [
{
"code": "packages_published",
"params": {
"count": 1,
"ecosystems": "go"
}
}
],
"max_points": 25
},
{
"key": "publish_recency",
"name": "Publish recency",
"detail": "latest publish 42 days ago",
"points": 35,
"status": "met",
"details": [
{
"code": "publish_recency",
"params": {
"days": 42
}
}
],
"max_points": 35
},
{
"key": "version_history",
"name": "Version history",
"detail": "15 published versions",
"points": 20,
"status": "met",
"details": [
{
"code": "published_versions",
"params": {
"count": 15
}
}
],
"max_points": 20
},
{
"key": "not_deprecated",
"name": "Not deprecated",
"detail": "active, not deprecated or yanked",
"points": 20,
"status": "met",
"details": [
{
"code": "package_not_deprecated",
"params": {}
}
],
"max_points": 20
}
]
}
],
"description": "Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?"
},
{
"key": "engineering",
"band": "good",
"name": "Engineering Quality",
"value": 74,
"weight": 0.2,
"metrics": [
{
"key": "engineering_practices",
"band": "good",
"name": "Engineering practices",
"note": null,
"notes": [],
"value": 84,
"inputs": {
"has_ci": true,
"has_tests": true,
"has_editorconfig": false,
"has_linter_config": true,
"has_precommit_config": false
},
"components": [
{
"key": "ci_workflows",
"name": "CI workflows",
"detail": "1 workflow(s)",
"points": 24,
"status": "met",
"details": [
{
"code": "ci_workflows",
"params": {
"count": 1
}
}
],
"max_points": 24
},
{
"key": "tests_present",
"name": "Tests present",
"detail": null,
"points": 24,
"status": "met",
"details": [],
"max_points": 24
},
{
"key": "linter_config",
"name": "Linter config",
"detail": ".golangci.yml",
"points": 16,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": ".golangci.yml"
}
}
],
"max_points": 16
},
{
"key": "pre_commit_hooks",
"name": "Pre-commit hooks",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 9.6
},
{
"key": "editorconfig",
"name": ".editorconfig",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 6.4
},
{
"key": "openssf_scorecard_ci_tests",
"name": "OpenSSF Scorecard: CI-Tests",
"detail": "12 out of 12 merged PRs checked by a CI test -- score normalized to 10",
"points": 20,
"status": "met",
"details": [],
"max_points": 20
}
]
},
{
"key": "documentation",
"band": "moderate",
"name": "Documentation",
"note": null,
"notes": [],
"value": 60,
"inputs": {
"topics": [
"claude",
"documentation",
"golang",
"knowledge-graph",
"llm",
"markdown",
"mcp",
"mcp-server",
"obsidian",
"rag",
"semantic-search",
"sqlite",
"agent",
"docx",
"html",
"pdf",
"codex",
"hermes",
"opencode"
],
"has_wiki": true,
"homepage": null,
"has_readme": true,
"has_docs_dir": false,
"has_description": true
},
"components": [
{
"key": "readme",
"name": "README",
"detail": null,
"points": 30,
"status": "met",
"details": [],
"max_points": 30
},
{
"key": "documentation_directory",
"name": "Documentation directory",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 25
},
{
"key": "documentation_homepage_site",
"name": "Documentation / homepage site",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
},
{
"key": "repository_description",
"name": "Repository description",
"detail": null,
"points": 10,
"status": "met",
"details": [],
"max_points": 10
},
{
"key": "topics",
"name": "Topics",
"detail": "19 topics",
"points": 10,
"status": "met",
"details": [
{
"code": "topics_count",
"params": {
"count": 19
}
}
],
"max_points": 10
},
{
"key": "wiki",
"name": "Wiki",
"detail": null,
"points": 10,
"status": "met",
"details": [],
"max_points": 10
}
]
}
],
"description": "Are baseline engineering and documentation practices in place?"
},
{
"key": "security",
"band": "moderate",
"name": "Security",
"value": 50,
"weight": 0.16,
"metrics": [
{
"key": "security_posture",
"band": "moderate",
"name": "Security posture",
"note": "Excluded from scoring (no data or not applicable): Packaging. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"packaging"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 50,
"inputs": {
"source": "openssf_scorecard",
"checks_evaluated": 17,
"scorecard_version": "v5.5.0",
"checks_inconclusive": 1,
"scorecard_aggregate": 5
},
"components": [
{
"key": "binary_artifacts",
"name": "Binary-Artifacts",
"detail": "no binaries found in the repo",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "branch_protection",
"name": "Branch-Protection",
"detail": "branch protection is not maximal on development and all release branches",
"points": 2.2,
"status": "partial",
"details": [],
"max_points": 7.5
},
{
"key": "ci_tests",
"name": "CI-Tests",
"detail": "12 out of 12 merged PRs checked by a CI test -- score normalized to 10",
"points": 2.5,
"status": "met",
"details": [],
"max_points": 2.5
},
{
"key": "cii_best_practices",
"name": "CII-Best-Practices",
"detail": "no effort to earn an OpenSSF best practices badge detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 2.5
},
{
"key": "code_review",
"name": "Code-Review",
"detail": "Found 0/12 approved changesets -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "contributors",
"name": "Contributors",
"detail": "project has 0 contributing companies or organizations -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 2.5
},
{
"key": "dangerous_workflow",
"name": "Dangerous-Workflow",
"detail": "no dangerous workflow patterns detected",
"points": 10,
"status": "met",
"details": [],
"max_points": 10
},
{
"key": "dependency_update_tool",
"name": "Dependency-Update-Tool",
"detail": "update tool detected",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "fuzzing",
"name": "Fuzzing",
"detail": "project is fuzzed",
"points": 5,
"status": "met",
"details": [],
"max_points": 5
},
{
"key": "license",
"name": "License",
"detail": "license file detected",
"points": 2.5,
"status": "met",
"details": [],
"max_points": 2.5
},
{
"key": "maintained",
"name": "Maintained",
"detail": "project was created within the last 90 days. Please review its contents carefully",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "packaging",
"name": "Packaging",
"detail": "packaging workflow not detected",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 5
},
{
"key": "pinned_dependencies",
"name": "Pinned-Dependencies",
"detail": "dependency not pinned by hash detected -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "sast",
"name": "SAST",
"detail": "SAST tool is not run on all commits -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "security_policy",
"name": "Security-Policy",
"detail": "security policy file not detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "signed_releases",
"name": "Signed-Releases",
"detail": "5 out of the last 5 releases have a total of 5 signed artifacts.",
"points": 6,
"status": "partial",
"details": [],
"max_points": 7.5
},
{
"key": "token_permissions",
"name": "Token-Permissions",
"detail": "detected GitHub workflow tokens with excessive permissions",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "vulnerabilities",
"name": "Vulnerabilities",
"detail": "1 existing vulnerabilities detected",
"points": 6.8,
"status": "partial",
"details": [],
"max_points": 7.5
}
]
}
],
"description": "Are visible security and supply-chain practices strong, with no malicious dependency and no unresolved high-risk jurisdiction exposure?"
},
{
"key": "ai_readiness",
"band": "good",
"name": "AI Readiness",
"value": 78,
"weight": 0,
"metrics": [
{
"key": "ai_agent_context",
"band": "excellent",
"name": "Agent context & guidance",
"note": null,
"notes": [],
"value": 85,
"inputs": {
"has_llms_txt": false,
"legible_history_share": 1,
"agent_instruction_files": [
"AGENTS.md"
],
"agent_instruction_max_bytes": 7493
},
"components": [
{
"key": "agent_instructions",
"name": "Agent instructions",
"detail": "AGENTS.md",
"points": 45,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "AGENTS.md"
}
}
],
"max_points": 45
},
{
"key": "machine_readable_docs_llms_txt",
"name": "Machine-readable docs (llms.txt)",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
},
{
"key": "legible_commit_history",
"name": "Legible commit history",
"detail": "98 of 98 human commits state their intent (structured subject or explanatory body)",
"points": 40,
"status": "met",
"details": [
{
"code": "legible_history",
"params": {
"legible": 98,
"sampled": 98
}
}
],
"max_points": 40
}
]
},
{
"key": "ai_verify_loop",
"band": "excellent",
"name": "Verify loop (build / test / typecheck)",
"note": null,
"notes": [],
"value": 85,
"inputs": {
"has_nix": false,
"has_tests": true,
"lockfiles": [
"go.sum"
],
"has_dockerfile": false,
"typed_language": true,
"bootstrap_files": [],
"has_devcontainer": false,
"has_linter_config": true,
"typecheck_configs": [],
"agent_commit_share": 0.59,
"toolchain_manifests": [
"go.mod"
],
"dependency_bot_commit_share": 0.02
},
"components": [
{
"key": "one_command_bootstrap",
"name": "One-command bootstrap",
"detail": "go.mod (toolchain convention, no task runner)",
"points": 12.6,
"status": "partial",
"details": [
{
"code": "toolchain_convention",
"params": {
"files": "go.mod"
}
}
],
"max_points": 18
},
{
"key": "automated_tests",
"name": "Automated tests",
"detail": null,
"points": 22,
"status": "met",
"details": [],
"max_points": 22
},
{
"key": "lint_format_config",
"name": "Lint / format config",
"detail": ".golangci.yml",
"points": 11,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": ".golangci.yml"
}
}
],
"max_points": 11
},
{
"key": "static_type_checking",
"name": "Static type checking",
"detail": "Go (statically typed)",
"points": 11,
"status": "met",
"details": [
{
"code": "statically_typed_language",
"params": {
"language": "Go"
}
}
],
"max_points": 11
},
{
"key": "reproducible_environment",
"name": "Reproducible environment",
"detail": "lockfile",
"points": 10,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "lockfile"
}
}
],
"max_points": 10
},
{
"key": "demonstrated_agent_practice",
"name": "Demonstrated agent practice",
"detail": "59 of the last 100 commits agent-authored or agent-credited",
"points": 10,
"status": "met",
"details": [
{
"code": "agent_authored_commits",
"params": {
"count": 59,
"sampled": 100
}
}
],
"max_points": 10
},
{
"key": "automated_maintenance",
"name": "Automated maintenance",
"detail": "2 of the last 100 commits are automated dependency updates",
"points": 8,
"status": "met",
"details": [
{
"code": "dependency_bot_commits",
"params": {
"count": 2,
"sampled": 100
}
}
],
"max_points": 8
},
{
"key": "openssf_scorecard_pinned_dependencies",
"name": "OpenSSF Scorecard: Pinned-Dependencies",
"detail": "dependency not pinned by hash detected -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
}
]
},
{
"key": "ai_code_legibility",
"band": "excellent",
"name": "Code legibility for models",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"primary_language": "Go",
"largest_source_bytes": 33922,
"source_files_sampled": 222,
"oversized_source_files": 0
},
"components": [
{
"key": "type_checkable_code",
"name": "Type-checkable code",
"detail": "Go (statically typed)",
"points": 45,
"status": "met",
"details": [
{
"code": "statically_typed_language",
"params": {
"language": "Go"
}
}
],
"max_points": 45
},
{
"key": "manageable_file_sizes",
"name": "Manageable file sizes",
"detail": "0/222 source files over 60KB",
"points": 55,
"status": "met",
"details": [
{
"code": "oversized_source_files",
"params": {
"kb": 60,
"sampled": 222,
"oversized": 0
}
}
],
"max_points": 55
}
]
},
{
"key": "ai_interfaces",
"band": "critical",
"name": "Machine-readable interfaces",
"note": null,
"notes": [],
"value": 20,
"inputs": {
"example_dirs": [],
"has_mcp_signal": true,
"api_schema_files": []
},
"components": [
{
"key": "api_schema_openapi_graphql_proto",
"name": "API schema (OpenAPI/GraphQL/proto)",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 40
},
{
"key": "mcp_server",
"name": "MCP server",
"detail": null,
"points": 20,
"status": "met",
"details": [],
"max_points": 20
},
{
"key": "runnable_examples",
"name": "Runnable examples",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 40
}
]
}
],
"description": "How well is the repo equipped to be developed and maintained with AI coding agents? An independent, experimental badge — weight 0.0, so it is surfaced on its own and does not affect the overall health score."
}
],
"metrics_version": "1.13.0"
},
"warnings": [
"Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token",
"GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository"
],
"report_type": "repository",
"generated_at": "2026-07-28T04:36:46.704543Z",
"schema_version": "0.27.0",
"badge_url": "https://raw.githubusercontent.com/inspect-software/badges/main/v1/d/Detective-XH/DocGraph.svg",
"full_name": "Detective-XH/DocGraph",
"license_state": "standard",
"license_spdx": "MIT"
}