EliteaAI / elitea-sdk

来自 GitHub 依赖图的完整解析依赖集合：15 个直接依赖与 112 个间接（传递）软件包。仓库提交锁文件时，传递闭包才是完整的。

该仓库未发布可被索引解析的包，因此评估的是其自身的依赖图——共 91 个包，其中也包含从不交付的开发与测试版本固定：19 个存在已知公告，0 个为直接依赖。 有 36 个无法评估——没有已解析的版本、生态系统不受支持，或不在所列包清单之内。

公告表示依赖图中记录的版本落入某条公告的受影响范围。可达性未经分析，且依赖图包含开发与测试的版本固定——某项发现可能只涉及工具链而非交付的软件。

{
  "data": {
    "repo": {
      "topics": [],
      "is_fork": false,
      "size_kb": 13321,
      "has_wiki": true,
      "homepage": null,
      "languages": {
        "Shell": 50232,
        "Groovy": 2747,
        "Python": 9505616,
        "TypeScript": 14277
      },
      "pushed_at": "2026-07-28T16:17:00Z",
      "created_at": "2026-04-09T08:45:46Z",
      "owner_type": "Organization",
      "updated_at": "2026-07-28T16:19:17Z",
      "description": "SDK for EliteA",
      "is_archived": false,
      "is_disabled": false,
      "license_spdx": "Apache-2.0",
      "default_branch": "main",
      "license_spdx_raw": "Apache-2.0",
      "primary_language": "Python",
      "significant_languages": [
        "Python"
      ]
    },
    "owner": {
      "blog": "https://elitea.ai",
      "name": "ELITEA AI",
      "type": "Organization",
      "login": "EliteaAI",
      "company": null,
      "location": null,
      "followers": 8,
      "avatar_url": "https://avatars.githubusercontent.com/u/270877885?v=4",
      "created_at": "2026-03-25T07:36:47Z",
      "is_verified": null,
      "public_repos": 64,
      "account_age_days": 125
    },
    "license": {
      "state": "standard",
      "spdx_id": "Apache-2.0",
      "raw_spdx": "Apache-2.0",
      "file_present": true,
      "scorecard_found": true,
      "profile_has_license": true
    },
    "activity": {
      "releases": [],
      "recent_commits": [
        {
          "oid": "7f5cadb8ef1cfe1d9c3cf94d66018fe5b0e28e0a",
          "body": null,
          "is_bot": true,
          "headline": "Increment version",
          "author_name": "github-actions[bot]",
          "author_login": "github-actions[bot]",
          "committed_at": "2026-07-28T16:16:59Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "c004559b921bb40974e26b9ffeb9735f0e9fb933",
          "body": null,
          "is_bot": false,
          "headline": "fix: propagate sensitive tool autoapproval to subagents (#478)",
          "author_name": "Roman Mitusov",
          "author_login": "Roman-Mitusov",
          "committed_at": "2026-07-28T16:16:26Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "5bd1c375b0a6cee547319ff6585b1c80b6b4c327",
          "body": null,
          "is_bot": true,
          "headline": "Increment version",
          "author_name": "github-actions[bot]",
          "author_login": "github-actions[bot]",
          "committed_at": "2026-07-28T15:25:24Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "9ff3f31b091a296a13d2661cfc58b7aa80dd4d55",
          "body": null,
          "is_bot": false,
          "headline": "fix: [EL-5925][EL-5927] route MCP authentication correctly (#477)",
          "author_name": "Roman Mitusov",
          "author_login": "Roman-Mitusov",
          "committed_at": "2026-07-28T15:24:44Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "09fc0aa9a373b358aea997e948b585280b53a6f3",
          "body": null,
          "is_bot": true,
          "headline": "Increment version",
          "author_name": "github-actions[bot]",
          "author_login": "github-actions[bot]",
          "committed_at": "2026-07-28T13:42:34Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "d8cc877627ce2796391c424b0cfe426a98126075",
          "body": "…(#471)\n\nLoaded skill bodies persist in conversation history, so the load_skill\nresponses now state the scope contract explicitly: outside the\nsituation the agent instructions or the current request scope a skill\nto, it is inactive regardless of \"always\"-style wording in its body,\nand it never appli\n[…]\nrecord of the skill.\n\nThe \"already loaded\" response gets a stable prefix and a shared regex,\nmirroring the existing serve marker, so consumers can recognize both\noutcomes without duplicating literals.",
          "is_bot": false,
          "headline": "feat(skills): scope loaded skills to their trigger situation (#5977) …",
          "author_name": "Daniyar Chambylov",
          "author_login": "daniyarchambylov",
          "committed_at": "2026-07-28T13:40:34Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "33c41b69d1fc5f9eba5aeecaf936b8b4eb56b588",
          "body": "… (#5994) (#476)\n\nThe UI marked Path as required for List Files and List Folders and blocked\nsubmission when it was empty, even though both tools treat it as optional and\nlist the repository root when it is omitted. Users had to pass \"/\" as a\nworkaround.\n\nThe models declared path and branch as Optio\n[…]\nunusable without a value the caller shouldn't need to\nsupply. Descriptions now state the omitted-value behaviour, since they are what\nthe model reads when deciding whether to pass the argument at all.",
          "is_bot": false,
          "headline": "fix(gitlab): make path and branch optional on list_files/list_folders…",
          "author_name": "Daniyar Chambylov",
          "author_login": "daniyarchambylov",
          "committed_at": "2026-07-28T11:33:40Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "b689e5fe7eba7105865013323c0d5a0dac70fe32",
          "body": "…ption is not None (#5996) (#474)\n\nLoading any GitLab toolkit raised \"unsupported operand type(s) for +:\n'NoneType' and 'str'\" and the whole toolkit failed to instantiate — every\ntool disappeared, not just the offending one.\n\nextend_with_file_operations builds the read_multiple_files tool's descript\n[…]\nit has to\nstate the capped return contract — content, a content_too_large object, or a\nskip notice for a file never fetched — which the generic base docstring\n(\"content or error messages\") gets wrong.",
          "is_bot": false,
          "headline": "fix(gitlab): restore read_multiple_files docstring so its tool descri…",
          "author_name": "Daniyar Chambylov",
          "author_login": "daniyarchambylov",
          "committed_at": "2026-07-28T11:10:02Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "929c31c7e700c8a5e9dc63f538479d6d4973f971",
          "body": null,
          "is_bot": true,
          "headline": "Increment version",
          "author_name": "github-actions[bot]",
          "author_login": "github-actions[bot]",
          "committed_at": "2026-07-28T10:39:48Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "1be76d696db871c87fcaaa280aa1ae266921299b",
          "body": "build_line_range_metadata's multi-line branch never set read_limits, so\nget_file_metadata's True baseline went unchallenged and any multi-line file\nover the 200K-char output cap was reported as fully readable, contradicting\nwhat read_file itself does for the same file. The single-line branch already\n[…]\n DEFAULT_MAX_OUTPUT_CHARS. Added a\nregression test covering the multi-line-over-cap case, which previously had\nno test coverage.\n\nConnected issue: https://github.com/EliteaAI/elitea_issues/issues/5988",
          "is_bot": false,
          "headline": "Fix: multi-line files over cap wrongly report full_read_allowed=true",
          "author_name": "Mikhail Campos Guadamuz",
          "author_login": "plageat",
          "committed_at": "2026-07-28T10:26:11Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "3a65be89da1884cd0f7462fbd769b92ba87daf21",
          "body": null,
          "is_bot": true,
          "headline": "Increment version",
          "author_name": "github-actions[bot]",
          "author_login": "github-actions[bot]",
          "committed_at": "2026-07-27T17:55:49Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "8b6fc4c19956079b7773152f1cd2d1bbadffed3d",
          "body": "…978) (#470)\n\n* fix(config): preserve configurable when minting a thread_id\n\nMinting a thread id replaced the whole configurable dict instead of setting\nthe key, discarding anything already placed there. Six lines earlier the same\nfunction stores selected_tools/selected_toolkits from dynamic tool se\n[…]\ns on its own version\ndetails, and the caller's are cleared rather than inherited. Public\napplications are fetched with the runtime payload variant so cross-project\nsub-agents resolve their skills too.",
          "is_bot": false,
          "headline": "feat(skills): give a sub-agent its own skills, never its caller's (#5…",
          "author_name": "Daniyar Chambylov",
          "author_login": "daniyarchambylov",
          "committed_at": "2026-07-27T17:51:50Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "b8cb6d1a1cd3ea92b8b0aabbb6f05d9cab7579c2",
          "body": null,
          "is_bot": true,
          "headline": "Increment version",
          "author_name": "github-actions[bot]",
          "author_login": "github-actions[bot]",
          "committed_at": "2026-07-27T05:48:07Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "b5d36faa7d6762f6d8bc0d5874f8f36b2713109e",
          "body": "…ved) (#469)\n\nThe OpenAPI toolkit handed query params to requests as a dict, which\nrequests encodes with quote_plus — spaces became '+'. Servers whose\nparsers require %20 and reject '+' (e.g. Planisware OData) returned\nHTTP 400 \"Nobody expected this character: '+'\". The toolkit also\nignored the spec\n[…]\now uses the same serializer so error messages match the\nreal request.\n\nAdds tests/tools/test_openapi_query_encoding.py (21 cases: unit\nserialization + full _execute integration + no-monkeypatch-leak).",
          "is_bot": false,
          "headline": "fix(openapi): serialize query params ourselves (%20, honor allowReser…",
          "author_name": "Roman Mitusov",
          "author_login": "Roman-Mitusov",
          "committed_at": "2026-07-27T05:47:29Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "1cfedc3f523ff979044d9e0e466b8de03eacad84",
          "body": null,
          "is_bot": true,
          "headline": "Increment version",
          "author_name": "github-actions[bot]",
          "author_login": "github-actions[bot]",
          "committed_at": "2026-07-25T12:41:37Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "5e3f025e78b676b71f8b9a747970339301365e89",
          "body": "Opus 5 was missing from the _adaptive_only allowlist in AlitaClient's Anthropic\nLLM configuration, so predict requests fell through to the thinking.type=enabled\nbranch. Anthropic rejects that mode for this model family, returning a 400 with\n\"thinking.type.enabled is not supported for this model. Use\n[…]\npus 5 now gets\nthinking={type: adaptive, display: summarized} + effort, matching the existing\nOpus 4.7/4.8 and Sonnet 5 entries.\n\nConnected issue: https://github.com/EliteaAI/elitea_issues/issues/5983",
          "is_bot": false,
          "headline": "Fix: Opus 5 predict fails with thinking.type.enabled 400 error",
          "author_name": "Mikhail Campos Guadamuz",
          "author_login": "plageat",
          "committed_at": "2026-07-25T12:12:03Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "48c51a16634a9924f6c5d5313c3bacedb0b5b56b",
          "body": "fix(tests): unbreak failed image-loader + index_sharepoint test pipelines",
          "is_bot": false,
          "headline": "Merge pull request #465 from EliteaAI/fix/failed-test-pipelines",
          "author_name": "Aliaksei Breilian",
          "author_login": "breilian",
          "committed_at": "2026-07-24T20:50:44Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "792382c91d29a8566dbf1a8ee37988a2c7394ff3",
          "body": null,
          "is_bot": false,
          "headline": "fix(tests): [index_sharepoint] Fix 1 failing tests - ISP02",
          "author_name": "Aliaksei Breilian",
          "author_login": "breilian",
          "committed_at": "2026-07-24T20:40:32Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "1fd9ac77acc5f906b9ae5541cfd6767c06a91bee",
          "body": "- Remove summarize_text_large code node, let LLM validate directly\n- Use output_fields: [\"metadata.Name\", \"metadata.chunk_id\"] for minimal payload\n- Update validation rules to work with raw search results\n- Simpler test with same coverage\n\nCo-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "refactor(test): simplify ISP02 by removing code node",
          "author_name": "Aliaksei Breilian",
          "author_login": "breilian",
          "committed_at": "2026-07-24T20:28:24Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "a0a8199c23ebc801c5d13b73bed28e8cc580818a",
          "body": null,
          "is_bot": false,
          "headline": "fix(tests): [index_sharepoint] Fix 1 failing tests - ISP02",
          "author_name": "Aliaksei Breilian",
          "author_login": "breilian",
          "committed_at": "2026-07-24T20:03:24Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "23922a1057eaae246f9dcca6d02870aaca8a37c4",
          "body": "…tion\n\n- Change expected chunk count from 3 to 4 (text_large.txt has 860 tokens,\n  which produces 4 chunks at max_tokens=256)\n- Add output_fields: [\"metadata\"] to search_index to reduce payload size\n  and prevent context truncation when passing results to LLM validator\n- Change filter to JSON string\n[…]\n LLM validator, causing it to see only 3 of 4 chunks. By excluding\npage_content from the output, all chunk metadata fits within context limits.\n\nCo-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix(tests): [ISP02] correct chunk count and reduce payload for valida…",
          "author_name": "Aliaksei Breilian",
          "author_login": "breilian",
          "committed_at": "2026-07-24T19:53:43Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "7d634b1f5c966c9fe98fad2155f8c1d53dcd0bd7",
          "body": null,
          "is_bot": false,
          "headline": "fix(tests): [index_sharepoint] Fix 1 failing tests - ISP02",
          "author_name": "Aliaksei Breilian",
          "author_login": "breilian",
          "committed_at": "2026-07-24T19:12:16Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "6fdd05bfa79e025c8b95c06a7293ec2b6151d6ac",
          "body": "Search results are ranked by similarity score, not by chunk_id order.\nThe previous validation incorrectly required chunk_ids to be exactly\n(1, 2, 3), but search can return any 3 chunks from the text_large.txt\ndocument depending on query relevance.\n\nChange validation to only verify:\n- Exactly 3 chunks returned\n- All chunks belong to text_large.txt\n- Each chunk has a valid integer chunk_id\n\nCo-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix(tests): [ISP02] relax chunk_id validation for search results",
          "author_name": "Aliaksei Breilian",
          "author_login": "breilian",
          "committed_at": "2026-07-24T19:03:11Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "28aa5f3f1a0fada7da3d383c9f59d23723624549",
          "body": null,
          "is_bot": false,
          "headline": "fix(tests): [index_sharepoint] Fix 1 failing tests - ISP02",
          "author_name": "Aliaksei Breilian",
          "author_login": "breilian",
          "committed_at": "2026-07-24T19:01:11Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "a6eac3636808f308af00d1ee830e3dedcb3d1849",
          "body": "The SDK's text_chunker (introduced in commit 440b358) produces exactly\n3 chunks for text_large.txt at max_tokens=256, not 4 as the original\nmarkdown_chunker did.\n\nRoot cause: text_chunker uses TokenTextSplitter directly without the\nwhitespace normalization and small-chunk merging that markdown_chunk\n[…]\nt expectation to 3 to detect any future changes in\nthe chunker implementation rather than hiding them behind a flexible\n\"at least N\" assertion.\n\nCo-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix(tests): [ISP02] expect exactly 3 chunks for text_large.txt",
          "author_name": "Aliaksei Breilian",
          "author_login": "breilian",
          "committed_at": "2026-07-24T18:51:11Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "464e04b4ab8443b3d5dc988b6d9ffadd45c6b935",
          "body": null,
          "is_bot": false,
          "headline": "fix(tests): [index_sharepoint] Fix 1 failing tests - ISP02",
          "author_name": "Aliaksei Breilian",
          "author_login": "breilian",
          "committed_at": "2026-07-24T13:54:42Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "9dbbfc9b8088c5f6381b81e4b15b7c593bc43286",
          "body": null,
          "is_bot": false,
          "headline": "fix(tests): [github] Fix 1 failing tests - GH08",
          "author_name": "Aliaksei Breilian",
          "author_login": "breilian",
          "committed_at": "2026-07-24T13:19:56Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "927d88352ce5db2148c2a7c30037eec7b3d8aed4",
          "body": null,
          "is_bot": false,
          "headline": "fix(tests): [gitlab] Fix 1 failing tests - GL05",
          "author_name": "Aliaksei Breilian",
          "author_login": "breilian",
          "committed_at": "2026-07-24T13:17:21Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "3a24a7d85525115cdb2484a24d89743217542736",
          "body": "…not an SDK/platform issue\n\nContext for the two remaining postman failures we saw across the failed runs.\n\nPST18 \"execute request happy path\" reproduced locally against dev.elitea.ai\n=========================================================================\n\nCommand:\n  cd .elitea/tests/test_pipelines\n[…]\nvalidator prompt allows subjective judgement on folder-ID equality and\nthe LLM output non-determinism produced a false negative once. Not\ntracked here; will need a separate investigation if it recurs.",
          "is_bot": false,
          "headline": "docs: record PST18 local-against-DEV reproduction — httpbin.org 503, …",
          "author_name": "Aliaksandr Valadzko",
          "author_login": "aliaksandr-valadzko",
          "committed_at": "2026-07-24T12:52:44Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "1eca30c58196b9b1f5586eca588a15700803ed18",
          "body": "Replaces the earlier _SKIP-only patch (ffd56a1) with the proper fix: the\ninput JSONs now pass max_tokens to the loader, and the module docstring\nrecords why this is a test defect — not an SDK defect — with the full\nhistory so a future reader doesn't chase the SDK.\n\nWhat was wrong (test side, not SDK\n[…]\neffective value was 512 and will not match the\n  loader's now-correct 2048/8192 chunking. Baseline regeneration needs\n  LLM credentials and is left as a follow-up.\n\nRefs: closed loader-side bug #4259.",
          "is_bot": false,
          "headline": "fix(tests): rename _max_tokens → max_tokens in EliteAImageLoader inputs",
          "author_name": "Aliaksandr Valadzko",
          "author_login": "aliaksandr-valadzko",
          "committed_at": "2026-07-24T12:30:43Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "e28f140ae2d1b0da1662034b22ccad41ed08c4ab",
          "body": "…onfig fix\n\nFollow-up context for the sharepoint-index-config.json change in ffd56a1\n(list_collections → list_indexes).\n\nProof this is a stale test config, not a valid tool name:\n\n  Commit ac6420c (PR #442, squash-merged to main on 2026-07-21)\n    \"feat: [EL-5708] bump index_name max_length 7 -> 32 \n[…]\nthe config to \"list_indexes\" is the direct completion of the rename\nthat PR #442 started.\n\nNo behaviour change in the test — the tool still exists with the same\nsemantics, only under its current name.",
          "is_bot": false,
          "headline": "docs: link SDK rename commit that necessitated the sharepoint-index-c…",
          "author_name": "Aliaksandr Valadzko",
          "author_login": "aliaksandr-valadzko",
          "committed_at": "2026-07-24T12:24:44Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "ffd56a14c90266776a21103e5c988a30e96dba69",
          "body": "- Skip elitea_screenshot_jpeg config1 in image loader tests: same _max_tokens\n  prefix bug as several_in_one_png — the underscore-prefixed key is stripped\n  before reaching the loader, so max_tokens defaults to 512 and non-deterministic\n  LLM output length yields variable chunk counts vs the 2-chunk\n[…]\nh 'list_indexes' in sharepoint-index-config\n  selected_tools; the alias was removed from the base indexer toolkit, causing\n  toolkit creation to fail with HTTP 400 in the index_sharepoint suite setup.",
          "is_bot": false,
          "headline": "fix(tests): unblock EliteAImageLoader and index_sharepoint pipelines",
          "author_name": "Aliaksandr Valadzko",
          "author_login": "aliaksandr-valadzko",
          "committed_at": "2026-07-24T12:15:44Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "2bda0d32fc75badbc48c195432d2ad8e450eab85",
          "body": null,
          "is_bot": true,
          "headline": "Increment version",
          "author_name": "github-actions[bot]",
          "author_login": "github-actions[bot]",
          "committed_at": "2026-07-24T07:48:52Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "7a577cb7cdbdb5e06940664d7568794e2bf04239",
          "body": "Emit metadata.group (default \"Other\") from each mcp_servers entry so the UI can group MCP toolkits into sub-sections.",
          "is_bot": false,
          "headline": "feat: expose group metadata on MCP config toolkit schemas (#5942) (#455)",
          "author_name": "Daniyar Chambylov",
          "author_login": "daniyarchambylov",
          "committed_at": "2026-07-24T07:45:18Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "bf45c4ac71387c5c49fe143b8984a61900d1f561",
          "body": null,
          "is_bot": true,
          "headline": "Increment version",
          "author_name": "github-actions[bot]",
          "author_login": "github-actions[bot]",
          "committed_at": "2026-07-23T17:06:55Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "e00afb4a6afc7bcf8ff6557987535251d1a834a3",
          "body": "… (#460)\n\nMicrosoft's token endpoints return expires_in as a JSON string (\"3600\")\nrather than a number, so `time.time() + expires_in` raised\n\"unsupported operand type(s) for +: 'float' and 'str'\" and every OAuth2\nclient_credentials exchange failed after the secret-masking fix let the\nreal credential\n[…]\npires_in(): accepts int/float/numeric-string, preserves a\nvalid number exactly (float(3600) == 3600.0), and falls back to 1h for\nmissing / non-numeric / non-positive values. Wire it into _cache_token.",
          "is_bot": false,
          "headline": "fix(openapi): tolerate string expires_in in OAuth token cache (#5956)…",
          "author_name": "Roman Mitusov",
          "author_login": "Roman-Mitusov",
          "committed_at": "2026-07-23T17:02:10Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "57a418f30ba73142ff22b730806c74696d928171",
          "body": null,
          "is_bot": true,
          "headline": "Increment version",
          "author_name": "github-actions[bot]",
          "author_login": "github-actions[bot]",
          "committed_at": "2026-07-23T14:26:32Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "4e73e043849e4a25dbd41d85db535600cfce8c42",
          "body": "Fix #5844: per-toolkit LRU image description cache across all indexers",
          "is_bot": false,
          "headline": "Merge pull request #457 from EliteaAI/fix/5844-image-cache",
          "author_name": "MikalaiB",
          "author_login": "MikalaiB",
          "committed_at": "2026-07-23T14:26:03Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "5f922a282d4243f0bc82d40468401cb94270d4ab",
          "body": "Wire image_cache kwarg from BaseIndexerToolkit._chunk_one call sites in\nindex_data through process_document_by_type into process_content_by_type,\nso the per-toolkit LRU image description cache is populated during regular\nindexing runs (not only via get_page_with_image_descriptions).\n\nUses getattr fa\n[…]\ns that own one (e.g. Confluence) participate in caching.\n\nLive-verified with two Confluence pages sharing the same image: second\npage produced [img-cache HIT] on the shared md5, skipping the LLM call.",
          "is_bot": false,
          "headline": "Fix #5844: thread image_cache through index_data flow",
          "author_name": "mikalai_biazruchka",
          "author_login": "MikalaiB",
          "committed_at": "2026-07-23T14:03:58Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "72a412187ee95eb46fddd822b05fa7bbc6f3928a",
          "body": null,
          "is_bot": true,
          "headline": "Increment version",
          "author_name": "github-actions[bot]",
          "author_login": "github-actions[bot]",
          "committed_at": "2026-07-23T11:26:24Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "b0f2080a9aab8ed6fdf5744efb1ad5890e6d30d7",
          "body": "… the security configurations via the indexer config for the deno (#458)",
          "is_bot": false,
          "headline": "feat: Fix the SecretStr unsecret in the OpenAPI configuration and add…",
          "author_name": "Roman Mitusov",
          "author_login": "Roman-Mitusov",
          "committed_at": "2026-07-23T11:25:49Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "21efbfdd1cb7edf0fa02f8b8d49106d2b7024724",
          "body": "…e_cache\n\n- Thread image_cache through parse_content_from_bytes → process_content_by_type\n  so SharePoint's binary download path (OneNote attachments) is no longer bypassed.\n- Apply prepare_loader-style signature filter to load_content (fallback path)\n  and process_content_by_type so future strict-s\n[…]\nrt\n  on cache.cache storage side (len == 0) instead of get() short-circuit — the\n  prior assertion would have passed even if set() were broken.\n\nCo-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "Address PR #457 review round 2: wire remaining indexers + thread imag…",
          "author_name": "mikalai_biazruchka",
          "author_login": "MikalaiB",
          "committed_at": "2026-07-23T11:06:37Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "9dac79b129ccacf2630fa3bfadfb8b5f31d321a1",
          "body": "… and add the security configurations via the indexer config for the deno\"\n\nThis reverts commit a6f262f4db90dae2f4b4197ac2e4bf0f12bcaef6.",
          "is_bot": false,
          "headline": "Revert \"feat: Fix the SecretStr unsecret in the OpenAPI configuration…",
          "author_name": "Roman-Mitusov",
          "author_login": "Roman-Mitusov",
          "committed_at": "2026-07-23T11:06:28Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "ec5725816a5d440ba8657165fce579101582a335",
          "body": null,
          "is_bot": false,
          "headline": "Merge remote-tracking branch 'origin/main'",
          "author_name": "Roman-Mitusov",
          "author_login": "Roman-Mitusov",
          "committed_at": "2026-07-23T10:59:32Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "a6f262f4db90dae2f4b4197ac2e4bf0f12bcaef6",
          "body": "… the security configurations via the indexer config for the deno",
          "is_bot": false,
          "headline": "feat: Fix the SecretStr unsecret in the OpenAPI configuration and add…",
          "author_name": "Roman-Mitusov",
          "author_login": "Roman-Mitusov",
          "committed_at": "2026-07-23T10:59:07Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "3b456e1bf6e08628bfb5fd7f9f111d6e97117cde",
          "body": "- image_cache: cache key is md5(bytes) + md5(prompt) only; image_name is\n  logging context only. Enables cross-doc dedup for the same asset\n  (company logos on every page/slide, reused images across documents),\n  which is what #5844 was actually asking for.\n- PDF/PPT/DOCX loaders: pass bare source (\n[…]\nefault.\n- tests: rewrite test_image_name_is_part_of_key → NOT_part_of_key with\n  positive assertion; update docstring.\n\nAll 17 unit tests pass.\n\nCo-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "Address PR #457 review: drop image_name from key, fix MIME, bump log",
          "author_name": "mikalai_biazruchka",
          "author_login": "MikalaiB",
          "committed_at": "2026-07-23T10:10:30Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "d41367facaca5b58cf6db6a7ee108f7dc7f4eaa6",
          "body": "Consolidate LLM image-description caching so every indexer (ADO Wiki,\nADO Boards, Jira, Confluence, and the document-loader path used by\nSharePoint / GitLab / QTest / etc.) shares the same behaviour:\n\n- Move ImageDescriptionCache to runtime/langchain/document_loaders as the\n  canonical home; re-expo\n[…]\nthe cache (LRU, prompt-in-key, env-var-driven\nmax_size) and the shared helper (cache hit / miss / prompt-change /\nempty-description behaviour).\n\nCo-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "Fix #5844: per-toolkit LRU image description cache across all indexers",
          "author_name": "mikalai_biazruchka",
          "author_login": "MikalaiB",
          "committed_at": "2026-07-23T09:58:42Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "39483ac4094d56e28ae24f915bc7c1e7b7f031ae",
          "body": "…achments\n\nFix #5869: skip non-image ADO Wiki attachments in image processing",
          "is_bot": false,
          "headline": "Merge pull request #456 from EliteaAI/fix/5869-ado-wiki-non-image-att…",
          "author_name": "MikalaiB",
          "author_login": "MikalaiB",
          "committed_at": "2026-07-23T09:29:02Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "d9b4703dc677d364fee051de0cd2fdc66cfa9386",
          "body": "ADO Wiki inserts every attachment (PDF, DOCX, images alike) using\nimage-markdown syntax `![name](/.attachments/<guid>.<ext>)`.\n`_process_images` treated any such match as an image and routed\nnon-image files through the image-description pipeline. When\n`parse_file_content` returned a `ToolException` \n[…]\n tests covering the classification helper and the\n  `_process_images` behaviour for PDFs, images, mixed content, and\n  `ToolException` returns.\n\nCo-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "Fix #5869: skip non-image ADO Wiki attachments in image processing",
          "author_name": "mikalai_biazruchka",
          "author_login": "MikalaiB",
          "committed_at": "2026-07-23T09:20:42Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "7bd6dbb0669f4b0aa02009903686a62391c6a839",
          "body": "* Use system CA trust store for TLS (DLP / interception support)\n\nPython HTTP libraries (requests, urllib3, aiohttp, httpcore/httpx, the\nopenai/anthropic clients) verify TLS against the bundled certifi CA store\nand ignore the OS trust store. In corporate DLP / TLS-interception\nenvironments the proxy\n[…]\nn macOS/Windows and minimal Linux images need\nSSL_CERT_FILE) in the README.\n\nCo-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>\n\n---------\n\nCo-authored-by: Claude Opus 4.8 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "Use system CA trust store for TLS (DLP / interception support) (#452)",
          "author_name": "Alexander Kharkevich",
          "author_login": "kharkevich",
          "committed_at": "2026-07-23T09:10:47Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "a78d3654f99d8ff89ca7233f20a66d676e564f79",
          "body": null,
          "is_bot": true,
          "headline": "Increment version",
          "author_name": "github-actions[bot]",
          "author_login": "github-actions[bot]",
          "committed_at": "2026-07-22T15:48:23Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "a81f0ac369f544cd5c707ee94b205d43a8cccd1f",
          "body": "…diverged\n\nFix #5820: reindex non-code docs when dependent set diverges",
          "is_bot": false,
          "headline": "Merge pull request #451 from EliteaAI/fix/5820-attachment-dependents-…",
          "author_name": "MikalaiB",
          "author_login": "MikalaiB",
          "committed_at": "2026-07-22T15:47:50Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "3395ca314724890b6cd0caf90ff3dc44779d1946",
          "body": "PR #451 switched the dependent_docs join separator from ',' to ';'\nin both the producer (_emit_document_with_deps) and the vector-store\nconsumers (VectorStoreAdapter). Update the two regression assertions\nthat still expected the old comma-joined string.\n\nCo-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "Fix test: expect ';' separator for aggregated dependent_docs",
          "author_name": "mikalai_biazruchka",
          "author_login": "MikalaiB",
          "committed_at": "2026-07-22T15:17:30Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "63fd471c67a5a19a83a1e2072e969f91bd1397e1",
          "body": "Move the attachment-list fetch into _base_loader for Confluence,\nTestRail, and SharePoint OneNote (Jira already had it in the JQL\nbatch) and store the raw list on document.metadata['_attachments_data'].\nBoth _dependents_diverged and _process_document now read from that\nmetadata slot, with a fallback\n[…]\nskip glob logic and drop the\nin-method 'import re as _re' (module-level re is already imported).\n\nAddresses review findings 1 and 2 on PR #451.\n\nCo-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "Refactor: share attachment fetch between diverge check and processing",
          "author_name": "mikalai_biazruchka",
          "author_login": "MikalaiB",
          "committed_at": "2026-07-22T15:10:47Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "a829e3eb336d4268db80e9f68d30949cefa82e19",
          "body": "Adds a _dependents_diverged template hook on NonCodeIndexerToolkit so\ncompare_fn can force reprocessing of a document whose updated_on is\nunchanged but whose emitted dependent set (attachments, images, etc.)\nhas diverged from the indexed copy — the previous behavior let\n_reduce_duplicates skip the p\n[…]\nTest (no dependents), Figma (deps track file mtime).\n\nKnown limitation: replacing an attachment's binary content under the\nsame ID is not detected — set membership stays identical. Tracked\nseparately.",
          "is_bot": false,
          "headline": "Fix #5820: reindex non-code docs when dependent set diverges",
          "author_name": "mikalai_biazruchka",
          "author_login": "MikalaiB",
          "committed_at": "2026-07-22T14:52:53Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "1a8a0a864581dd0bf6ffa9edae718ab13c1ac4db",
          "body": null,
          "is_bot": true,
          "headline": "Increment version",
          "author_name": "github-actions[bot]",
          "author_login": "github-actions[bot]",
          "committed_at": "2026-07-22T10:52:25Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "7da1e2ff720681f91d098e2f765d418fe576650c",
          "body": "* feat: Add OpenAPI delegated auth support\n\n* fix: [EL-4864] Redact sensitive values from OpenAPI OAuth debug logs\n\n* fix: Remove sensitive data from debug log statements\nCodeQL flagged logger.debug calls that could leak OAuth endpoint URLs\nand configuration identifiers. Replace with generic success messages\nto satisfy clear-text logging security checks.\n\n---------\n\nCo-authored-by: utkarsh.mishra1504 <utkarsh.mishra@deiglobal.com>",
          "is_bot": false,
          "headline": "feat: Add OpenAPI delegated auth support (#106)",
          "author_name": "Utkarsh Mishra",
          "author_login": "umishra1504",
          "committed_at": "2026-07-22T10:51:53Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "18122a1121a502ffe66c1e7b59a71edecfef30fa",
          "body": null,
          "is_bot": true,
          "headline": "Increment version",
          "author_name": "github-actions[bot]",
          "author_login": "github-actions[bot]",
          "committed_at": "2026-07-22T08:08:00Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "850d0d21118f78564c2c472cafad4d3d454eb565",
          "body": "…test run (#450)",
          "is_bot": false,
          "headline": "feat: Add upload attachments to test run and update status of latest …",
          "author_name": "Roman Mitusov",
          "author_login": "Roman-Mitusov",
          "committed_at": "2026-07-22T08:06:56Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "1d35a0f38cd3c636cb405831600ed1edf1511093",
          "body": null,
          "is_bot": true,
          "headline": "Increment version",
          "author_name": "github-actions[bot]",
          "author_login": "github-actions[bot]",
          "committed_at": "2026-07-22T07:29:48Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "f441abe4d8684125d1b42ac6acd7175cfa6f1f21",
          "body": "openpyxl's read_only worksheet mode derives max_row/max_column exclusively from\nthe worksheet's <dimension> XML tag, with no fallback. Workbooks written via\nopenpyxl's write_only=True streaming mode never emit that tag, so every helper\nrelying on it (check_excel_read_limits, list_excel_sheets, _read\n[…]\n,\ncheck_excel_read_limits, and read_excel_rows against a write_only=True fixture\nthat reproduces the missing-dimension-tag case.\n\nConnected issue: https://github.com/EliteaAI/elitea_issues/issues/5890",
          "is_bot": false,
          "headline": "Fix: Excel bounded-read guard falls back when dimension tag is missing",
          "author_name": "Mikhail Campos Guadamuz",
          "author_login": "plageat",
          "committed_at": "2026-07-21T19:45:51Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "3d048486d71324628fd7152c3087b955574d4cb8",
          "body": null,
          "is_bot": true,
          "headline": "Increment version",
          "author_name": "github-actions[bot]",
          "author_login": "github-actions[bot]",
          "committed_at": "2026-07-21T18:38:32Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "ac6420cfc1bcbbd124582e54ddb760233fa9b14d",
          "body": "* feat: [EL-5708] bump index_name max_length 7 -> 32\n\nRaise the Pydantic max_length constraint on index_name fields across\nBaseIndexParams / BaseCodeIndexParams / RemoveIndexParams /\nBaseSearchParams / BaseStepbackSearchParams and the dynamic\nBaseIndexerToolkit index_params schema. index_name is sto\n[…]\nIntroduces\nINDEX_NAME_MAX_LENGTH constant to replace scattered 32 literals.\n\nCo-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>\n\n---------\n\nCo-authored-by: Claude Opus 4.7 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat: [EL-5708] bump index_name max_length 7 -> 32 (#442)",
          "author_name": "MikalaiB",
          "author_login": "MikalaiB",
          "committed_at": "2026-07-21T18:33:10Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "458b5b6af661e5374e75d91083668fd344277c15",
          "body": null,
          "is_bot": true,
          "headline": "Increment version",
          "author_name": "github-actions[bot]",
          "author_login": "github-actions[bot]",
          "committed_at": "2026-07-21T15:05:39Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "d44c798575e4346331176def2d47db0f371c83d2",
          "body": "feat: [EL-5907] Add Aha! project management toolkit integration",
          "is_bot": false,
          "headline": "Merge pull request #448 from EliteaAI/feat/EL-5907-aha-toolkit",
          "author_name": "MikalaiB",
          "author_login": "MikalaiB",
          "committed_at": "2026-07-21T13:46:06Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "411b9a060d437b2e35ad01b4471147a5ce05d7e2",
          "body": "…record\n\nEach write test now creates a uniquely-named record (`elitea-sdk-e2e-<kind>-<uuid>`),\nreads it back via `read_records`, updates it, deletes it, and re-verifies\nthat the delete landed — with a `finally` block that best-effort deletes\nthe artifact even when the assertion path fails. This keep\n[…]\nupdate → delete). The other write types\nskip on 403 for `product owner` roles or fail cleanly when the .env\nrefs point at non-existent parents.\n\nCo-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "test: [EL-5907] add self-cleaning e2e lifecycle tests for Aha manage_…",
          "author_name": "mikalai_biazruchka",
          "author_login": "MikalaiB",
          "committed_at": "2026-07-21T13:07:18Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "70a250504e5223909fe0b7f4c9b681f40a3d97c9",
          "body": "…Not Trigger Authentication (#446)\n\n* fix: [EL-5868] SharePoint Delegated Toolkit Index Functionality Does Not Trigger Authentication\n\n* refactor code according to review comments",
          "is_bot": false,
          "headline": "fix: [EL-5868] SharePoint Delegated Toolkit Index Functionality Does …",
          "author_name": "HawkQing1",
          "author_login": "HawkQing1",
          "committed_at": "2026-07-21T13:00:07Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "022fcdbac0e2e9594f2cff277324cf2d2ae74056",
          "body": "…tive/epic/page\n\n- Add `delete` action to `manage_record` (feature/requirement/idea/release/\n  initiative/epic/page) — hits `DELETE /{plural}/{record_id}` and returns a\n  consistent `{deleted, record_type, record_id}` shape.\n- Extend the create/update whitelist and dispatcher to cover release,\n  ini\n[…]\n operations flowing through a single dispatcher. GraphQL remains the\nread path for pages via `get_page` and `read_records(record_type='page')`.\n\nCo-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat: [EL-5907] extend Aha manage_record with delete + release/initia…",
          "author_name": "mikalai_biazruchka",
          "author_login": "MikalaiB",
          "committed_at": "2026-07-21T12:45:58Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "7f71fbcb1d70f89a55f9a7be6a852e2f188c7130",
          "body": null,
          "is_bot": false,
          "headline": "feat: add Aha! configuration import to initialization",
          "author_name": "mikalai_biazruchka",
          "author_login": "MikalaiB",
          "committed_at": "2026-07-21T12:31:43Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "a69e2a378475e76418d04e2a45399d02d2563f01",
          "body": "Adds a new Aha! toolkit exposing 19 read-side tools over REST v1 and\nGraphQL v2, per feature request #5907.\n\nToolkit surface (read-only in this iteration):\n  * REST reads: get_product, get_feature, get_requirement, get_release,\n    get_initiative, get_epic, get_idea, get_page (via GraphQL)\n  * REST \n[…]\n\n    scoped lists and 404 on /custom_fields (endpoint absent on some\n    tenants).\n\nRefs: https://github.com/EliteaAI/elitea_issues/issues/5907\n\nCo-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat: [EL-5907] Add Aha! project management toolkit integration",
          "author_name": "mikalai_biazruchka",
          "author_login": "MikalaiB",
          "committed_at": "2026-07-21T11:57:58Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "e2ca023ed63c6043417248567cc0d0f7cd8bc3b0",
          "body": null,
          "is_bot": true,
          "headline": "Increment version",
          "author_name": "github-actions[bot]",
          "author_login": "github-actions[bot]",
          "committed_at": "2026-07-21T09:03:25Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "26981ac216f74201111ebd01c6493dd4a6b3c35a",
          "body": "Internal Elitea MCP servers authenticate with the caller's personal token.\nWhen a prebuilt server definition carries no Authorization header template to\nsubstitute into, dispatch previously sent no auth (silent 401) while discovery\nsucceeded, an asymmetric and confusing failure. Fall back to injecti\n[…]\nir existing header.\n\nAlso drop an Authorization header still holding an unresolved {placeholder} when\nthere is no token, so a user without a PAT gets a clean auth error instead of a\nliteral-token 401.",
          "is_bot": false,
          "headline": "fix(mcp): auth fallback for internal MCP dispatch (#5772) (#445)",
          "author_name": "Daniyar Chambylov",
          "author_login": "daniyarchambylov",
          "committed_at": "2026-07-21T08:41:11Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "95b731a145b88404842c47ad050b0530aa8619ee",
          "body": null,
          "is_bot": true,
          "headline": "Increment version",
          "author_name": "github-actions[bot]",
          "author_login": "github-actions[bot]",
          "committed_at": "2026-07-20T15:10:53Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "4aff7c0c25e0441379f4620c42cd5cdb8eca3d51",
          "body": "LangChain's default_tool_parser / langchain_anthropic's extract_tool_calls set a\ntool_call's id to None (never absent) when the raw provider payload lacks a\nusable id. Elitea's tool_call.get('id', '') pattern only guards an absent key,\nso the None flowed through into ToolMessage(tool_call_id=None), \n[…]\ntwo existing reproduction tests to assert correct\npost-fix behavior and added a new unit-test file covering the helper\ndirectly.\n\nConnected issue: https://github.com/EliteaAI/elitea_issues/issues/5750",
          "is_bot": false,
          "headline": "Fix: repair provider-supplied null tool_call_id (#5750)",
          "author_name": "Mikhail Campos Guadamuz",
          "author_login": "plageat",
          "committed_at": "2026-07-20T14:02:07Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "aae620939865ea18ae32980a99a2cfa919d6140d",
          "body": null,
          "is_bot": true,
          "headline": "Increment version",
          "author_name": "github-actions[bot]",
          "author_login": "github-actions[bot]",
          "committed_at": "2026-07-17T09:26:11Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "e778a43b10adc74df001e916fba20f633672b4df",
          "body": "…ia internal mcp tool call",
          "is_bot": false,
          "headline": "feat: [EL-5692] fixed post_configurations_configurations for github v…",
          "author_name": "daniilmotsnyi",
          "author_login": "daniilmotsniy",
          "committed_at": "2026-07-17T08:07:33Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "2cb85480260a92207f3b3d6d3a84149e10de7949",
          "body": null,
          "is_bot": true,
          "headline": "Increment version",
          "author_name": "github-actions[bot]",
          "author_login": "github-actions[bot]",
          "committed_at": "2026-07-16T14:23:03Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "804273523f79e1fd8d1c391fff17d9033e111e69",
          "body": "…ilt-in delegated-OAuth toolkits through deferred proxies) (#391)\n\n* fix: [EL-5638] route built-in delegated-OAuth toolkits through smart-auth deferred proxies\n\nSharePoint (and other built-in toolkits that require browser OAuth) raised\nMcpAuthorizationRequired eagerly at tool-load time from the batc\n[…]\n pull request finding 'CodeQL / Clear-text logging of sensitive information'\n\nCo-authored-by: Copilot Autofix powered by AI <62310815+github-advanced-security[bot]@users.noreply.github.com>\n\n---------",
          "is_bot": false,
          "headline": "fix: [EL-5638] SharePoint smart-auth \"Skip\" no longer loops (route bu…",
          "author_name": "Roman Mitusov",
          "author_login": "Roman-Mitusov",
          "committed_at": "2026-07-16T14:19:26Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "f8b244d17a0eb003b8aaa8fbc7a932a3040263ca",
          "body": "…#441)",
          "is_bot": false,
          "headline": "fix: the toolkit_type missing from mcp_authorization_required event (…",
          "author_name": "HawkQing1",
          "author_login": "HawkQing1",
          "committed_at": "2026-07-16T09:52:31Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "134d633e0b3e28b347f34fd8b1d17ad5c636755b",
          "body": null,
          "is_bot": true,
          "headline": "Increment version",
          "author_name": "github-actions[bot]",
          "author_login": "github-actions[bot]",
          "committed_at": "2026-07-16T09:13:30Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "efaa1472faf3fb5be06e95d0bf4fa5fce112ada0",
          "body": "* feat: [EL-5695] refresh MCP configuration cache\n\n* perf: [EL-5695] reuse unchanged MCP toolkit schemas",
          "is_bot": false,
          "headline": "feat: [EL-5695] refresh MCP configuration cache (#440)",
          "author_name": "Roman Mitusov",
          "author_login": "Roman-Mitusov",
          "committed_at": "2026-07-16T09:12:54Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "0c986294cbb1a6dec469a94eed40f72f5738ee4e",
          "body": null,
          "is_bot": true,
          "headline": "Increment version",
          "author_name": "github-actions[bot]",
          "author_login": "github-actions[bot]",
          "committed_at": "2026-07-16T08:02:35Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "82339a79cb18869f1ae4ada483d0cb53b81a9c69",
          "body": "* feat: [#5778] nested (2-level) parallel HITL resume routing + ancestry chain\n\nSupport depth-3 agent nesting on the Track-1 (in-process gather) path: a root\nthat fans out to parallel container sub-agents, each of which itself fans out to\nparallel leaves, where HITL can pause leaves under multiple c\n[…]\nd, no regressions.\n\nCo-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>\n\n* Fix nested parallel HITL resume\n\n* Bound persisted trace-step payloads\n\n* Harden nested HITL routing contracts\n\n---------",
          "is_bot": false,
          "headline": "feat: [EL-5778] support depth-3 nested parallel HITL (#439)",
          "author_name": "Roman Mitusov",
          "author_login": "Roman-Mitusov",
          "committed_at": "2026-07-16T08:01:41Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "554737eb67d576926fa51e81eb9c8343242e0376",
          "body": "perf(ado-indexer): opt-in cross-doc parallelism + updated_on inheritance",
          "is_bot": false,
          "headline": "Merge pull request #437 from EliteaAI/perf/ado-indexer-parallelism",
          "author_name": "MikalaiB",
          "author_login": "MikalaiB",
          "committed_at": "2026-07-13T13:48:33Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "ad276f3421d53625561f2da1f3a96ae775c7635a",
          "body": "Unbounded `workers` values on the ADO wiki and work-item indexers can\nsaturate the ADO REST quota (429s), the LLM rate limit (when\n`process_images=True`), and the pgvector connection pool. Values above\n~10 give diminishing throughput anyway because the outer ThreadPoolExecutor\ngates on downstream I/\n[…]\npy cover the\nconstant, runtime clamp + warning, within-cap pass-through, default\nserial behaviour, and the schema constraint for both wrappers.\n\nCo-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "perf(ado-indexer): cap workers at 10 (schema + runtime clamp)",
          "author_name": "mikalai_biazruchka",
          "author_login": "MikalaiB",
          "committed_at": "2026-07-13T13:24:56Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "b5587236ef838476fbfea9bb01238ab17a5eef85",
          "body": "Adds a bounded per-invocation `workers` knob to ADO wiki + work-item indexers\nso callers can fan out per-base-doc pipelines (image LLM, attachment I/O,\nchunking) while keeping all state mutation and pgvector writes on the main\nthread. Nested-pool guard falls back to serial when called from an outer\n\n[…]\n semantics + regression surface (parent_id set,\ndependent_docs aggregation, yield order, empty-deps case, existing\n`dependent_docs` extension).\n\nCo-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "perf(ado-indexer): opt-in cross-doc parallelism + updated_on inheritance",
          "author_name": "mikalai_biazruchka",
          "author_login": "MikalaiB",
          "committed_at": "2026-07-10T13:35:16Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "a220a66a625eddeaf4f4132694761eadd4289926",
          "body": null,
          "is_bot": true,
          "headline": "Increment version",
          "author_name": "github-actions[bot]",
          "author_login": "github-actions[bot]",
          "committed_at": "2026-07-10T09:30:54Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "b0d57d9ba77307d08d8c26c25e26c1cbc3b2b738",
          "body": "When the parallel-handoff guard or orphan sanitizer trims AIMessage.tool_calls,\nthey must also prune matching tool_use blocks from .content. langchain_anthropic\nserializes from .content and re-emits any tool_use block whose id is absent from\n.tool_calls — leaving discarded calls orphaned, which cras\n[…]\nmetadata\npreservation, and end-to-end _format_messages invariant (no orphaned tool_use).\nAll 77 existing swarm suite tests pass.\n\nConnected issue: https://github.com/EliteaAI/elitea_issues/issues/5768",
          "is_bot": false,
          "headline": "Fix: Prevent orphaned tool_use blocks in swarm mode (issue #5768)",
          "author_name": "Mikhail Campos Guadamuz",
          "author_login": "plageat",
          "committed_at": "2026-07-10T09:29:54Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "505e0501af81551292b78a0e8ff37619b2fe405a",
          "body": "Review follow-up: the multi-sheet sampling path reopened and fully re-parsed the\nworkbook once per sheet (via read_excel_rows -> load_workbook), on top of the open\nalready done by list_excel_sheets. Because each open reparses the whole growing\nfile, guard cost scaled ~quadratically with sheet count \n[…]\nare\nunchanged (same _format_row formatting); only the number of opens drops from N+1\nto 1. Benchmark: 500 sheets 87.5s -> 0.60s.\n\nConnected issue: https://github.com/EliteaAI/elitea_issues/issues/5713",
          "is_bot": false,
          "headline": "Fix: make whole-workbook Excel guard O(1) in sheet count",
          "author_name": "Mikhail Campos Guadamuz",
          "author_login": "plageat",
          "committed_at": "2026-07-10T08:15:16Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "c2c19098d9f9e6da1be8f724e537750784a983bd",
          "body": "The Excel pre-flight read-limit guard could be bypassed by many-sheet workbooks\nwhere no single sheet tripped the per-sheet row or text-budget thresholds but the\nworkbook total far exceeded the output cap.\n\nTwo defects: get_content() coerced start_row to 1 before calling the guard, so\nis_unbounded_r\n[…]\nrow-count rejection, small\nmulti-sheet full reads passing, named-sheet scoping isolation, and get_content()\nfull-read rejection.\n\nConnected issue: https://github.com/EliteaAI/elitea_issues/issues/5713",
          "is_bot": false,
          "headline": "Fix: Excel guard defeated by multi-sheet workbooks",
          "author_name": "Mikhail Campos Guadamuz",
          "author_login": "plageat",
          "committed_at": "2026-07-10T08:15:16Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "59cc1f79b8a8e17e2cf1559b1a858db8e10d1451",
          "body": "Fix: defer ADO wiki image LLM calls until after dedup",
          "is_bot": false,
          "headline": "Merge pull request #434 from EliteaAI/fix/ado-wiki-image-llm-cost",
          "author_name": "MikalaiB",
          "author_login": "MikalaiB",
          "committed_at": "2026-07-10T07:33:50Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "824815941d57273b746674df2665f25dccbfeadf",
          "body": "_base_loader ran _process_images on every fetched page unconditionally,\nfiring one LLM call per referenced image on every run — even for pages\n_reduce_duplicates would discard because their raw content hadn't\nchanged. On a large wiki this meant paying for image descriptions\nalready stored from a pri\n[…]\ne_loader is unchanged, so dedup semantics are preserved.\n\nAlso add per-page / per-image / per-attachment debug logs so operators\ncan trace incremental progress without turning on request-body logging.",
          "is_bot": false,
          "headline": "Fix: defer ADO wiki image LLM calls until after dedup",
          "author_name": "mikalai_biazruchka",
          "author_login": "MikalaiB",
          "committed_at": "2026-07-09T19:46:43Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "f543cf972e0af2ca1f4d400efe92799e066594d9",
          "body": null,
          "is_bot": true,
          "headline": "Increment version",
          "author_name": "github-actions[bot]",
          "author_login": "github-actions[bot]",
          "committed_at": "2026-07-09T16:29:38Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "07b68fd14b829ee7d44fb73c4353b3f7a09e939e",
          "body": "ArtifactWrapper.read_multiple_files previously read each file through its own\ncapped read_file, bounding each individual file at 200K chars but applying no\nshared budget across the batch — a request for N files could return up to\nN x 200K chars in one response.\n\nRoute it through the same capped_read\n[…]\nnd skips remaining files once the\nshared 200K budget is reached, closing the same failure class the epic was\ncreated to address.\n\nConnected issue: https://github.com/EliteaAI/elitea_issues/issues/5780",
          "is_bot": false,
          "headline": "Fix: cap read_multiple_files cumulative batch size in artifact toolkit",
          "author_name": "Mikhail Campos Guadamuz",
          "author_login": "plageat",
          "committed_at": "2026-07-09T16:22:06Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "6ef17e7113409b89602c64bbf9c0959e8a8baf52",
          "body": "feat(ado-wiki): index images and attachments in wiki pages",
          "is_bot": false,
          "headline": "Merge pull request #428 from EliteaAI/feature/ado-wiki-image-indexing",
          "author_name": "MikalaiB",
          "author_login": "MikalaiB",
          "committed_at": "2026-07-09T16:06:49Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "fd9cf6eb3dfc5fa8527280578a956d436d5a9dc2",
          "body": "…-count\n\nfix(indexer): fix meta.indexed count for incremental re-index",
          "is_bot": false,
          "headline": "Merge pull request #422 from EliteaAI/fix/indexer-incremental-indexed…",
          "author_name": "MikalaiB",
          "author_login": "MikalaiB",
          "committed_at": "2026-07-09T16:06:30Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "4c4efa6a11e81ce0fd310aca41f4901203327d86",
          "body": "…debug\n\nfix(bitbucket): drop stray root-logger DEBUG basicConfig at module load",
          "is_bot": false,
          "headline": "Merge pull request #431 from EliteaAI/fix/bitbucket-drop-root-logger-…",
          "author_name": "MikalaiB",
          "author_login": "MikalaiB",
          "committed_at": "2026-07-09T16:05:45Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "cee117b6d67e3735b82d8bd7db9fedfe96f9e8ca",
          "body": "cloud_api_wrapper.py called logging.basicConfig(level=logging.DEBUG) as a\ntop-level statement. Because tools/__init__.py auto-imports the bitbucket\npackage at SDK import time, this ran on every process start and flipped\nthe root logger to DEBUG globally — activating httpx, openai, anthropic\nand boto\n[…]\nger = logging.getLogger(__name__) on the line above already gives this\nmodule a properly namespaced logger.\n\nNo behavioural change for callers.\n\nCo-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix(bitbucket): drop stray root-logger DEBUG basicConfig at module load",
          "author_name": "mikalai_biazruchka",
          "author_login": "MikalaiB",
          "committed_at": "2026-07-09T16:05:06Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "53d75c707fd47d45ef03596770eb409b67364ae7",
          "body": "…t guidance\n\nThe SharePoint Excel over-limit path hand-rebuilt the metadata skeleton\n(total_rows/total_sheets/sheets/read_limits) from the estimate, silently\ndropping the richer diagnostics the shared build_excel_metadata_from_estimate\nalready computes (excel_max_request_rows, excel_full_read_max_by\n[…]\ntruction_for_readFile to reflect read_document's narrower surface\n(sheet_name only, no row range). Added a test assertion that the shared\ndiagnostics survive so the thin version can't silently return.",
          "is_bot": false,
          "headline": "Fix: Reuse build_excel_metadata_from_estimate in SharePoint over-limi…",
          "author_name": "Mikhail Campos Guadamuz",
          "author_login": "plageat",
          "committed_at": "2026-07-09T16:03:31Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "e520259dcf5047f4f647ebbc674cd5c401949487",
          "body": "Brings the SharePoint read_document tool onto the shared chunked-read\ncontract (Epic #5431, Phase 5), matching the six prior toolkits. The facade\nread_file() now supports bounded start_line/end_line reads, applies the\nuniversal 200K-char output cap, and returns a structured content_too_large\nguidanc\n[…]\n only sheet_name (the sole\nnarrowing lever read_document supports) and refusing plainly when a single\nsheet is still over limit.\n\nConnected issue: https://github.com/EliteaAI/elitea_issues/issues/5451",
          "is_bot": false,
          "headline": "Fix: Add read cap + structured guidance to SharePoint read_document",
          "author_name": "Mikhail Campos Guadamuz",
          "author_login": "plageat",
          "committed_at": "2026-07-09T16:03:31Z",
          "body_truncated": true,
          "is_coding_agent": false
        }
      ],
      "releases_count": 0,
      "commits_last_year": 681,
      "latest_release_at": null,
      "latest_release_tag": null,
      "releases_from_tags": false,
      "days_since_last_push": 0,
      "active_weeks_last_year": 16,
      "days_since_latest_release": null,
      "mean_days_between_releases": null
    },
    "community": {
      "has_readme": true,
      "has_license": true,
      "has_description": true,
      "has_contributing": false,
      "health_percentage": 50,
      "has_issue_template": false,
      "has_code_of_conduct": false,
      "has_pull_request_template": false
    },
    "ecosystem": {
      "packages": [
        {
          "name": "elitea_sdk",
          "exists": true,
          "license": "Apache-2.0",
          "keywords": [
            "Operating System :: OS Independent",
            "Programming Language :: Python :: 3"
          ],
          "ecosystem": "pypi",
          "matches_repo": true,
          "registry_url": "https://pypi.org/project/elitea_sdk/",
          "is_deprecated": false,
          "latest_version": "0.8.37",
          "repository_url": "https://github.com/EliteaAI/elitea-sdk/issues",
          "versions_count": 246,
          "total_downloads": null,
          "dependents_count": null,
          "deprecation_note": null,
          "maintainers_count": null,
          "monthly_downloads": 10526,
          "first_published_at": "2026-04-09T11:41:58.457564Z",
          "latest_published_at": "2026-07-28T16:17:39.607808Z",
          "latest_version_yanked": null,
          "days_since_latest_publish": 0
        }
      ]
    },
    "popularity": {
      "forks": 1,
      "stars": 1,
      "watchers": 0,
      "fork_history": {
        "days": [
          {
            "date": "2026-05-01",
            "count": 1
          }
        ],
        "complete": true,
        "collected": 1,
        "total_forks": 1
      },
      "star_history": null,
      "open_issues_and_prs": 109
    },
    "ai_readiness": {
      "has_nix": false,
      "example_dirs": [
        "examples"
      ],
      "has_llms_txt": false,
      "has_dockerfile": true,
      "has_mcp_signal": true,
      "bootstrap_files": [],
      "api_schema_files": [
        "elitea_sdk/tools/github/schema.docs.graphql"
      ],
      "has_devcontainer": false,
      "typecheck_configs": [],
      "toolchain_manifests": [],
      "largest_source_bytes": 174204,
      "source_files_sampled": 686,
      "oversized_source_files": 32,
      "agent_instruction_files": [
        ".github/copilot-instructions.md",
        ".github/instructions/bug-reporting.instructions.md",
        ".github/instructions/test-coverage-structure.instructions.md"
      ],
      "agent_instruction_max_bytes": 13190
    },
    "dependencies": {
      "manifests": [
        "pyproject.toml",
        "setup.py"
      ],
      "advisories": {
        "error": null,
        "scope": "repository_graph",
        "source": "osv",
        "findings": [
          {
            "name": "gitpython",
            "direct": false,
            "version": "3.1.43",
            "severity": "critical",
            "ecosystem": "pypi",
            "cvss_score": 9.8,
            "advisory_ids": [
              "GHSA-2f96-g7mh-g2hx",
              "GHSA-3rp5-jjmw-4wv2",
              "GHSA-6p8h-3wgx-97gf",
              "GHSA-7545-fcxq-7j24",
              "GHSA-94p4-4cq8-9g67",
              "GHSA-956x-8gvw-wg5v",
              "GHSA-fjr4-x663-mwxc",
              "GHSA-mv93-w799-cj2w",
              "GHSA-r9mr-m37c-5fr3",
              "GHSA-rpm5-65cw-6hj4"
            ],
            "fixed_version": "3.1.55",
            "advisory_count": 17,
            "oldest_advisory_days": 93
          },
          {
            "name": "mammoth",
            "direct": false,
            "version": "1.9.0",
            "severity": "critical",
            "ecosystem": "pypi",
            "cvss_score": 9.3,
            "advisory_ids": [
              "GHSA-rmjr-87wv-gf87",
              "PYSEC-2026-1603"
            ],
            "fixed_version": "1.11.0",
            "advisory_count": 2,
            "oldest_advisory_days": 284
          },
          {
            "name": "unstructured",
            "direct": false,
            "version": "0.16.23",
            "severity": "critical",
            "ecosystem": "pypi",
            "cvss_score": 9.8,
            "advisory_ids": [
              "GHSA-gm8q-m8mv-jj5m",
              "PYSEC-2026-558"
            ],
            "fixed_version": "0.18.18",
            "advisory_count": 2,
            "oldest_advisory_days": 174
          },
          {
            "name": "azure-core",
            "direct": false,
            "version": "1.30.2",
            "severity": "high",
            "ecosystem": "pypi",
            "cvss_score": 7.5,
            "advisory_ids": [
              "GHSA-jm66-cg57-jjv5",
              "PYSEC-2026-1208"
            ],
            "fixed_version": "1.38.0",
            "advisory_count": 2,
            "oldest_advisory_days": 195
          },
          {
            "name": "dulwich",
            "direct": false,
            "version": "0.21.6",
            "severity": "high",
            "ecosystem": "pypi",
            "cvss_score": 8.8,
            "advisory_ids": [
              "GHSA-897w-fcg9-f6xj",
              "GHSA-xrvj-v92f-53gj",
              "PYSEC-2026-2463",
              "PYSEC-2026-2466"
            ],
            "fixed_version": "1.2.5",
            "advisory_count": 4,
            "oldest_advisory_days": 60
          },
          {
            "name": "langchain-core",
            "direct": false,
            "version": "1.2.7",
            "severity": "high",
            "ecosystem": "pypi",
            "cvss_score": 8.2,
            "advisory_ids": [
              "GHSA-2g6r-c272-w58r",
              "GHSA-926x-3r5x-gfhw",
              "GHSA-pjwx-r37v-7724",
              "GHSA-qh6h-p6c9-ff54",
              "PYSEC-2026-2193",
              "PYSEC-2026-2562",
              "PYSEC-2026-2563",
              "PYSEC-2026-2564"
            ],
            "fixed_version": "1.3.3",
            "advisory_count": 8,
            "oldest_advisory_days": 167
          },
          {
            "name": "langgraph",
            "direct": false,
            "version": "1.0.7",
            "severity": "high",
            "ecosystem": "pypi",
            "cvss_score": 7.2,
            "advisory_ids": [
              "GHSA-g48c-2wqr-h844",
              "PYSEC-2026-83"
            ],
            "fixed_version": "1.0.10rc1",
            "advisory_count": 2,
            "oldest_advisory_days": 144
          },
          {
            "name": "langgraph-checkpoint",
            "direct": false,
            "version": "2.1.2",
            "severity": "high",
            "ecosystem": "pypi",
            "cvss_score": 8.1,
            "advisory_ids": [
              "GHSA-fjqc-hq36-qh5p",
              "GHSA-mhr3-j7m5-c7c9",
              "GHSA-wwqv-p2pp-99h5",
              "PYSEC-2026-1527",
              "PYSEC-2026-2573",
              "PYSEC-2026-2574"
            ],
            "fixed_version": "4.1.1",
            "advisory_count": 6,
            "oldest_advisory_days": 264
          },
          {
            "name": "langgraph-checkpoint-sqlite",
            "direct": false,
            "version": "2.0.11",
            "severity": "high",
            "ecosystem": "pypi",
            "cvss_score": 7.3,
            "advisory_ids": [
              "GHSA-9rwj-6rc7-p77c",
              "PYSEC-2026-1530"
            ],
            "fixed_version": "3.0.1",
            "advisory_count": 2,
            "oldest_advisory_days": 230
          },
          {
            "name": "lxml",
            "direct": false,
            "version": "5.2.2",
            "severity": "high",
            "ecosystem": "pypi",
            "cvss_score": 7.5,
            "advisory_ids": [
              "GHSA-vfmq-68hx-4jfw",
              "PYSEC-2026-87"
            ],
            "fixed_version": "6.1.0",
            "advisory_count": 2,
            "oldest_advisory_days": 97
          },
          {
            "name": "markdown",
            "direct": false,
            "version": "3.5.1",
            "severity": "high",
            "ecosystem": "pypi",
            "cvss_score": 7.5,
            "advisory_ids": [
              "GHSA-5wmx-573v-2qwq",
              "PYSEC-2026-89"
            ],
            "fixed_version": "3.8.1",
            "advisory_count": 2,
            "oldest_advisory_days": 145
          },
          {
            "name": "pdfminer-six",
            "direct": false,
            "version": "20240706",
            "severity": "high",
            "ecosystem": "pypi",
            "cvss_score": 8.6,
            "advisory_ids": [
              "GHSA-f83h-ghpp-7wcc",
              "GHSA-wf5f-4jwr-ppcp",
              "PYSEC-2026-1761",
              "PYSEC-2026-1762"
            ],
            "fixed_version": "20251230",
            "advisory_count": 4,
            "oldest_advisory_days": 262
          },
          {
            "name": "pypdf",
            "direct": false,
            "version": "4.3.1",
            "severity": "high",
            "ecosystem": "pypi",
            "cvss_score": 7.5,
            "advisory_ids": [
              "GHSA-248m-82v9-q6g6",
              "GHSA-2q4j-m29v-hq73",
              "GHSA-2rw7-x74f-jg35",
              "GHSA-3crg-w4f6-42mx",
              "GHSA-4f6g-68pf-7vhv",
              "GHSA-4pxv-j86v-mhcw",
              "GHSA-4xc4-762w-m6cg",
              "GHSA-52x6-gq3r-vpf4",
              "GHSA-55h5-xmcq-c37v",
              "GHSA-5hgr-hg42-57jg"
            ],
            "fixed_version": "6.14.2",
            "advisory_count": 65,
            "oldest_advisory_days": 348
          },
          {
            "name": "azure-identity",
            "direct": false,
            "version": "1.16.0",
            "severity": "moderate",
            "ecosystem": "pypi",
            "cvss_score": 5.5,
            "advisory_ids": [
              "GHSA-m5vv-6r4h-3vj9",
              "PYSEC-2026-1209"
            ],
            "fixed_version": "4.61.3",
            "advisory_count": 2,
            "oldest_advisory_days": 776
          },
          {
            "name": "langchain",
            "direct": false,
            "version": "1.2.6",
            "severity": "moderate",
            "ecosystem": "pypi",
            "cvss_score": 5.5,
            "advisory_ids": [
              "GHSA-gr75-jv2w-4656",
              "PYSEC-2026-2192"
            ],
            "fixed_version": "1.4.6",
            "advisory_count": 2,
            "oldest_advisory_days": 42
          },
          {
            "name": "langchain-anthropic",
            "direct": false,
            "version": "1.3.1",
            "severity": "moderate",
            "ecosystem": "pypi",
            "cvss_score": 5.1,
            "advisory_ids": [
              "GHSA-gr75-jv2w-4656",
              "PYSEC-2026-2556"
            ],
            "fixed_version": "1.4.6",
            "advisory_count": 2,
            "oldest_advisory_days": 42
          },
          {
            "name": "langchain-text-splitters",
            "direct": false,
            "version": "1.1.0",
            "severity": "moderate",
            "ecosystem": "pypi",
            "cvss_score": 6.5,
            "advisory_ids": [
              "GHSA-fv5p-p927-qmxr",
              "PYSEC-2026-77"
            ],
            "fixed_version": "1.1.2",
            "advisory_count": 2,
            "oldest_advisory_days": 102
          },
          {
            "name": "paramiko",
            "direct": false,
            "version": "3.3.1",
            "severity": "moderate",
            "ecosystem": "pypi",
            "cvss_score": 5.9,
            "advisory_ids": [
              "GHSA-45x7-px36-x8w8",
              "GHSA-r374-rxx8-8654",
              "PYSEC-2026-1758",
              "PYSEC-2026-2858"
            ],
            "fixed_version": "3.4.0",
            "advisory_count": 4,
            "oldest_advisory_days": 952
          },
          {
            "name": "langchain-openai",
            "direct": false,
            "version": "1.1.7",
            "severity": "low",
            "ecosystem": "pypi",
            "cvss_score": 3.1,
            "advisory_ids": [
              "GHSA-r7w7-9xr2-qq2r",
              "PYSEC-2026-76"
            ],
            "fixed_version": "1.1.14",
            "advisory_count": 2,
            "oldest_advisory_days": 102
          }
        ],
        "collected": true,
        "malicious": [],
        "truncated": false,
        "by_severity": {
          "low": 1,
          "high": 10,
          "critical": 3,
          "moderate": 5
        },
        "advisory_count": 132,
        "affected_count": 19,
        "assessed_count": 91,
        "malicious_count": 0,
        "assessed_package": null,
        "unassessed_count": 36,
        "direct_affected_count": 0
      },
      "ecosystems": [
        "pypi"
      ],
      "dependencies": [
        {
          "name": "sqlalchemy",
          "manifest": "pyproject.toml",
          "ecosystem": "pypi",
          "version_constraint": "<2.0.36"
        },
        {
          "name": "tiktoken",
          "manifest": "pyproject.toml",
          "ecosystem": "pypi",
          "version_constraint": ">=0.7.0"
        },
        {
          "name": "openai",
          "manifest": "pyproject.toml",
          "ecosystem": "pypi",
          "version_constraint": ">=1.55.0"
        },
        {
          "name": "python-dotenv",
          "manifest": "pyproject.toml",
          "ecosystem": "pypi",
          "version_constraint": "~=1.0.1"
        },
        {
          "name": "jinja2",
          "manifest": "pyproject.toml",
          "ecosystem": "pypi",
          "version_constraint": "~=3.1.3"
        },
        {
          "name": "pillow",
          "manifest": "pyproject.toml",
          "ecosystem": "pypi",
          "version_constraint": "~=11.1.0"
        },
        {
          "name": "requests",
          "manifest": "pyproject.toml",
          "ecosystem": "pypi",
          "version_constraint": "~=2.3"
        },
        {
          "name": "pydantic",
          "manifest": "pyproject.toml",
          "ecosystem": "pypi",
          "version_constraint": "~=2.12.0"
        },
        {
          "name": "chardet",
          "manifest": "pyproject.toml",
          "ecosystem": "pypi",
          "version_constraint": "==5.2.0"
        },
        {
          "name": "fastapi",
          "manifest": "pyproject.toml",
          "ecosystem": "pypi",
          "version_constraint": "==0.115.9"
        },
        {
          "name": "httpcore",
          "manifest": "pyproject.toml",
          "ecosystem": "pypi",
          "version_constraint": "==1.0.7"
        },
        {
          "name": "urllib3",
          "manifest": "pyproject.toml",
          "ecosystem": "pypi",
          "version_constraint": ">=2"
        },
        {
          "name": "certifi",
          "manifest": "pyproject.toml",
          "ecosystem": "pypi",
          "version_constraint": "==2024.8.30"
        },
        {
          "name": "truststore",
          "manifest": "pyproject.toml",
          "ecosystem": "pypi",
          "version_constraint": ">=0.10.4"
        },
        {
          "name": "aiohttp",
          "manifest": "pyproject.toml",
          "ecosystem": "pypi",
          "version_constraint": ">=3.9.0"
        }
      ],
      "all_dependencies": {
        "error": null,
        "source": "github-sbom",
        "packages": [
          {
            "name": "aiohttp",
            "direct": true,
            "version": null,
            "ecosystem": "pypi"
          },
          {
            "name": "certifi",
            "direct": true,
            "version": "2024.8.30",
            "ecosystem": "pypi"
          },
          {
            "name": "chardet",
            "direct": true,
            "version": "5.2.0",
            "ecosystem": "pypi"
          },
          {
            "name": "fastapi",
            "direct": true,
            "version": "0.115.9",
            "ecosystem": "pypi"
          },
          {
            "name": "httpcore",
            "direct": true,
            "version": "1.0.7",
            "ecosystem": "pypi"
          },
          {
            "name": "jinja2",
            "direct": true,
            "version": null,
            "ecosystem": "pypi"
          },
          {
            "name": "openai",
            "direct": true,
            "version": null,
            "ecosystem": "pypi"
          },
          {
            "name": "pillow",
            "direct": true,
            "version": null,
            "ecosystem": "pypi"
          },
          {
            "name": "pydantic",
            "direct": true,
            "version": null,
            "ecosystem": "pypi"
          },
          {
            "name": "python-dotenv",
            "direct": true,
            "version": null,
            "ecosystem": "pypi"
          },
          {
            "name": "requests",
            "direct": true,
            "version": null,
            "ecosystem": "pypi"
          },
          {
            "name": "sqlalchemy",
            "direct": true,
            "version": null,
            "ecosystem": "pypi"
          },
          {
            "name": "tiktoken",
            "direct": true,
            "version": null,
            "ecosystem": "pypi"
          },
          {
            "name": "truststore",
            "direct": true,
            "version": null,
            "ecosystem": "pypi"
          },
          {
            "name": "urllib3",
            "direct": true,
            "version": null,
            "ecosystem": "pypi"
          },
          {
            "name": "anthropic",
            "direct": false,
            "version": "0.76.0",
            "ecosystem": "pypi"
          },
          {
            "name": "astor",
            "direct": false,
            "version": null,
            "ecosystem": "pypi"
          },
          {
            "name": "atlassian-python-api",
            "direct": false,
            "version": null,
            "ecosystem": "pypi"
          },
          {
            "name": "azure-core",
            "direct": false,
            "version": "1.30.2",
            "ecosystem": "pypi"
          },
          {
            "name": "azure-devops",
            "direct": false,
            "version": "7.1.0b4",
            "ecosystem": "pypi"
          },
          {
            "name": "azure-identity",
            "direct": false,
            "version": "1.16.0",
            "ecosystem": "pypi"
          },
          {
            "name": "azure-keyvault-keys",
            "direct": false,
            "version": "4.9.0",
            "ecosystem": "pypi"
          },
          {
            "name": "azure-keyvault-secrets",
            "direct": false,
            "version": "4.8.0",
            "ecosystem": "pypi"
          },
          {
            "name": "azure-mgmt-core",
            "direct": false,
            "version": "1.4.0",
            "ecosystem": "pypi"
          },
          {
            "name": "azure-mgmt-resource",
            "direct": false,
            "version": "23.0.1",
            "ecosystem": "pypi"
          },
          {
            "name": "azure-mgmt-storage",
            "direct": false,
            "version": "21.1.0",
            "ecosystem": "pypi"
          },
          {
            "name": "azure-search-documents",
            "direct": false,
            "version": "11.5.2",
            "ecosystem": "pypi"
          },
          {
            "name": "azure-storage-blob",
            "direct": false,
            "version": "12.23.1",
            "ecosystem": "pypi"
          },
          {
            "name": "beautifulsoup4",
            "direct": false,
            "version": "4.12.2",
            "ecosystem": "pypi"
          },
          {
            "name": "boto3",
            "direct": false,
            "version": null,
            "ecosystem": "pypi"
          },
          {
            "name": "cairocffi",
            "direct": false,
            "version": "1.7.1",
            "ecosystem": "pypi"
          },
          {
            "name": "charset-normalizer",
            "direct": false,
            "version": "3.3.2",
            "ecosystem": "pypi"
          },
          {
            "name": "chromadb",
            "direct": false,
            "version": null,
            "ecosystem": "pypi"
          },
          {
            "name": "click",
            "direct": false,
            "version": null,
            "ecosystem": "pypi"
          },
          {
            "name": "deepeval",
            "direct": false,
            "version": null,
            "ecosystem": "pypi"
          },
          {
            "name": "deltalake",
            "direct": false,
            "version": "1.0.2",
            "ecosystem": "pypi"
          },
          {
            "name": "duckduckgo-search",
            "direct": false,
            "version": "5.3.0",
            "ecosystem": "pypi"
          },
          {
            "name": "dulwich",
            "direct": false,
            "version": "0.21.6",
            "ecosystem": "pypi"
          },
          {
            "name": "elitea-analyse",
            "direct": false,
            "version": "0.1.2",
            "ecosystem": "pypi"
          },
          {
            "name": "factor-analyzer",
            "direct": false,
            "version": "0.5.1",
            "ecosystem": "pypi"
          },
          {
            "name": "figmapy",
            "direct": false,
            "version": "2018.1.0",
            "ecosystem": "pypi"
          },
          {
            "name": "formulas",
            "direct": false,
            "version": "1.3.3",
            "ecosystem": "pypi"
          },
          {
            "name": "gensim",
            "direct": false,
            "version": "4.3.3",
            "ecosystem": "pypi"
          },
          {
            "name": "gitpython",
            "direct": false,
            "version": "3.1.43",
            "ecosystem": "pypi"
          },
          {
            "name": "google-api-python-client",
            "direct": false,
            "version": "2.154.0",
            "ecosystem": "pypi"
          },
          {
            "name": "google-cloud-bigquery",
            "direct": false,
            "version": "3.34.0",
            "ecosystem": "pypi"
          },
          {
            "name": "googlemaps",
            "direct": false,
            "version": "4.10.0",
            "ecosystem": "pypi"
          },
          {
            "name": "grpcio-status",
            "direct": false,
            "version": null,
            "ecosystem": "pypi"
          },
          {
            "name": "htmldocx",
            "direct": false,
            "version": null,
            "ecosystem": "pypi"
          },
          {
            "name": "jira",
            "direct": false,
            "version": "3.8.0",
            "ecosystem": "pypi"
          },
          {
            "name": "keybert",
            "direct": false,
            "version": "0.8.3",
            "ecosystem": "pypi"
          },
          {
            "name": "langchain",
            "direct": false,
            "version": "1.2.6",
            "ecosystem": "pypi"
          },
          {
            "name": "langchain-anthropic",
            "direct": false,
            "version": "1.3.1",
            "ecosystem": "pypi"
          },
          {
            "name": "langchain-chroma",
            "direct": false,
            "version": "1.0.0",
            "ecosystem": "pypi"
          },
          {
            "name": "langchain-community",
            "direct": false,
            "version": "0.4.1",
            "ecosystem": "pypi"
          },
          {
            "name": "langchain-core",
            "direct": false,
            "version": "1.2.7",
            "ecosystem": "pypi"
          },
          {
            "name": "langchain-mcp-adapters",
            "direct": false,
            "version": null,
            "ecosystem": "pypi"
          },
          {
            "name": "langchain-openai",
            "direct": false,
            "version": "1.1.7",
            "ecosystem": "pypi"
          },
          {
            "name": "langchain-postgres",
            "direct": false,
            "version": "0.0.16",
            "ecosystem": "pypi"
          },
          {
            "name": "langchain-text-splitters",
            "direct": false,
            "version": "1.1.0",
            "ecosystem": "pypi"
          },
          {
            "name": "langchain-unstructured",
            "direct": false,
            "version": "1.0.0",
            "ecosystem": "pypi"
          },
          {
            "name": "langgraph",
            "direct": false,
            "version": "1.0.7",
            "ecosystem": "pypi"
          },
          {
            "name": "langgraph-checkpoint",
            "direct": false,
            "version": "2.1.2",
            "ecosystem": "pypi"
          },
          {
            "name": "langgraph-checkpoint-postgres",
            "direct": false,
            "version": "2.0.21",
            "ecosystem": "pypi"
          },
          {
            "name": "langgraph-checkpoint-sqlite",
            "direct": false,
            "version": "2.0.11",
            "ecosystem": "pypi"
          },
          {
            "name": "langgraph-prebuilt",
            "direct": false,
            "version": "1.0.7",
            "ecosystem": "pypi"
          },
          {
            "name": "langgraph-swarm",
            "direct": false,
            "version": "0.1.0",
            "ecosystem": "pypi"
          },
          {
            "name": "langsmith",
            "direct": false,
            "version": null,
            "ecosystem": "pypi"
          },
          {
            "name": "lxml",
            "direct": false,
            "version": "5.2.2",
            "ecosystem": "pypi"
          },
          {
            "name": "mammoth",
            "direct": false,
            "version": "1.9.0",
            "ecosystem": "pypi"
          },
          {
            "name": "markdown",
            "direct": false,
            "version": "3.5.1",
            "ecosystem": "pypi"
          },
          {
            "name": "markdownify",
            "direct": false,
            "version": null,
            "ecosystem": "pypi"
          },
          {
            "name": "msrest",
            "direct": false,
            "version": "0.7.1",
            "ecosystem": "pypi"
          },
          {
            "name": "networkx",
            "direct": false,
            "version": null,
            "ecosystem": "pypi"
          },
          {
            "name": "office365-rest-python-client",
            "direct": false,
            "version": "2.5.14",
            "ecosystem": "pypi"
          },
          {
            "name": "opencv-python",
            "direct": false,
            "version": "4.11.0.86",
            "ecosystem": "pypi"
          },
          {
            "name": "openpyxl",
            "direct": false,
            "version": "3.1.5",
            "ecosystem": "pypi"
          },
          {
            "name": "opentelemetry-api",
            "direct": false,
            "version": null,
            "ecosystem": "pypi"
          },
          {
            "name": "opentelemetry-exporter-otlp-proto-grpc",
            "direct": false,
            "version": null,
            "ecosystem": "pypi"
          },
          {
            "name": "opentelemetry-instrumentation",
            "direct": false,
            "version": null,
            "ecosystem": "pypi"
          },
          {
            "name": "pandas",
            "direct": false,
            "version": "2.2.3",
            "ecosystem": "pypi"
          },
          {
            "name": "paramiko",
            "direct": false,
            "version": "3.3.1",
            "ecosystem": "pypi"
          },
          {
            "name": "pdf2image",
            "direct": false,
            "version": "1.16.3",
            "ecosystem": "pypi"
          },
          {
            "name": "pdfminer-six",
            "direct": false,
            "version": "20240706",
            "ecosystem": "pypi"
          },
          {
            "name": "pgvector",
            "direct": false,
            "version": "0.2.5",
            "ecosystem": "pypi"
          },
          {
            "name": "playwright",
            "direct": false,
            "version": null,
            "ecosystem": "pypi"
          },
          {
            "name": "protobuf",
            "direct": false,
            "version": null,
            "ecosystem": "pypi"
          },
          {
            "name": "psycopg2-binary",
            "direct": false,
            "version": "2.9.10",
            "ecosystem": "pypi"
          },
          {
            "name": "pygithub",
            "direct": false,
            "version": "2.3.0",
            "ecosystem": "pypi"
          },
          {
            "name": "pymupdf",
            "direct": false,
            "version": "1.24.9",
            "ecosystem": "pypi"
          },
          {
            "name": "pymysql",
            "direct": false,
            "version": "1.1.1",
            "ecosystem": "pypi"
          },
          {
            "name": "pypdf",
            "direct": false,
            "version": "4.3.1",
            "ecosystem": "pypi"
          },
          {
            "name": "pypdf2",
            "direct": false,
            "version": null,
            "ecosystem": "pypi"
          },
          {
            "name": "pyral",
            "direct": false,
            "version": "1.6.0",
            "ecosystem": "pypi"
          },
          {
            "name": "pysnc",
            "direct": false,
            "version": "1.1.10",
            "ecosystem": "pypi"
          },
          {
            "name": "pytest-reportportal",
            "direct": false,
            "version": null,
            "ecosystem": "pypi"
          },
          {
            "name": "python-calamine",
            "direct": false,
            "version": "0.5.3",
            "ecosystem": "pypi"
          },
          {
            "name": "python-docx",
            "direct": false,
            "version": "1.1.2",
            "ecosystem": "pypi"
          },
          {
            "name": "python-gitlab",
            "direct": false,
            "version": "4.5.0",
            "ecosystem": "pypi"
          },
          {
            "name": "python-graphql-client",
            "direct": false,
            "version": null,
            "ecosystem": "pypi"
          },
          {
            "name": "python-pptx",
            "direct": false,
            "version": "1.0.2",
            "ecosystem": "pypi"
          },
          {
            "name": "pyyaml",
            "direct": false,
            "version": null,
            "ecosystem": "pypi"
          },
          {
            "name": "qtest-swagger-client",
            "direct": false,
            "version": "0.0.3",
            "ecosystem": "pypi"
          },
          {
            "name": "reportlab",
            "direct": false,
            "version": "4.2.5",
            "ecosystem": "pypi"
          },
          {
            "name": "requests-openapi",
            "direct": false,
            "version": "1.0.5",
            "ecosystem": "pypi"
          },
          {
            "name": "retry-extended",
            "direct": false,
            "version": "0.2.3",
            "ecosystem": "pypi"
          },
          {
            "name": "rich",
            "direct": false,
            "version": null,
            "ecosystem": "pypi"
          },
          {
            "name": "rlpycairo",
            "direct": false,
            "version": "0.3.0",
            "ecosystem": "pypi"
          },
          {
            "name": "scipy",
            "direct": false,
            "version": "1.13.1",
            "ecosystem": "pypi"
          },
          {
            "name": "sentence-transformers",
            "direct": false,
            "version": "2.7.0",
            "ecosystem": "pypi"
          },
          {
            "name": "setuptools",
            "direct": false,
            "version": null,
            "ecosystem": "pypi"
          },
          {
            "name": "slack-sdk",
            "direct": false,
            "version": "3.35.0",
            "ecosystem": "pypi"
          },
          {
            "name": "statsmodels",
            "direct": false,
            "version": "0.14.4",
            "ecosystem": "pypi"
          },
          {
            "name": "streamlit",
            "direct": false,
            "version": null,
            "ecosystem": "pypi"
          },
          {
            "name": "svglib",
            "direct": false,
            "version": "1.5.1",
            "ecosystem": "pypi"
          },
          {
            "name": "tabulate",
            "direct": false,
            "version": "0.9.0",
            "ecosystem": "pypi"
          },
          {
            "name": "testcontainers",
            "direct": false,
            "version": null,
            "ecosystem": "pypi"
          },
          {
            "name": "testrail-api",
            "direct": false,
            "version": "1.13.4",
            "ecosystem": "pypi"
          },
          {
            "name": "textract-py3",
            "direct": false,
            "version": "2.1.1",
            "ecosystem": "pypi"
          },
          {
            "name": "tree-sitter",
            "direct": false,
            "version": "0.20.2",
            "ecosystem": "pypi"
          },
          {
            "name": "tree-sitter-languages",
            "direct": false,
            "version": "1.10.2",
            "ecosystem": "pypi"
          },
          {
            "name": "unstructured",
            "direct": false,
            "version": "0.16.23",
            "ecosystem": "pypi"
          },
          {
            "name": "unstructured-inference",
            "direct": false,
            "version": "0.8.7",
            "ecosystem": "pypi"
          },
          {
            "name": "unstructured-pytesseract",
            "direct": false,
            "version": "0.3.13",
            "ecosystem": "pypi"
          },
          {
            "name": "wikipedia",
            "direct": false,
            "version": "1.4.0",
            "ecosystem": "pypi"
          },
          {
            "name": "yagmail",
            "direct": false,
            "version": "0.15.293",
            "ecosystem": "pypi"
          },
          {
            "name": "zephyr-python-api",
            "direct": false,
            "version": "0.1.0",
            "ecosystem": "pypi"
          }
        ],
        "collected": true,
        "truncated": false,
        "total_count": 127,
        "direct_count": 15,
        "indirect_count": 112
      }
    },
    "maintainership": {
      "issues": {
        "open_prs": 2,
        "merged_prs": 349,
        "open_issues": 107,
        "closed_ratio": 0.045,
        "closed_issues": 5,
        "closed_unmerged_prs": 15
      },
      "bus_factor": 3,
      "bot_contributors": 1,
      "top_contributors": [
        {
          "type": "User",
          "login": "MikalaiB",
          "commits": 151,
          "avatar_url": "https://avatars.githubusercontent.com/u/58071282?v=4"
        },
        {
          "type": "User",
          "login": "breilian",
          "commits": 98,
          "avatar_url": "https://avatars.githubusercontent.com/u/4901112?v=4"
        },
        {
          "type": "User",
          "login": "plageat",
          "commits": 96,
          "avatar_url": "https://avatars.githubusercontent.com/u/2870966?v=4"
        },
        {
          "type": "User",
          "login": "Roman-Mitusov",
          "commits": 59,
          "avatar_url": "https://avatars.githubusercontent.com/u/74918387?v=4"
        },
        {
          "type": "User",
          "login": "daniyarchambylov",
          "commits": 39,
          "avatar_url": "https://avatars.githubusercontent.com/u/7006388?v=4"
        },
        {
          "type": "User",
          "login": "HawkQing1",
          "commits": 27,
          "avatar_url": "https://avatars.githubusercontent.com/u/149657285?v=4"
        },
        {
          "type": "User",
          "login": "daniilmotsniy",
          "commits": 12,
          "avatar_url": "https://avatars.githubusercontent.com/u/20089762?v=4"
        },
        {
          "type": "User",
          "login": "eln1nxl",
          "commits": 11,
          "avatar_url": "https://avatars.githubusercontent.com/u/117268645?v=4"
        },
        {
          "type": "User",
          "login": "umishra1504",
          "commits": 5,
          "avatar_url": "https://avatars.githubusercontent.com/u/175803473?v=4"
        },
        {
          "type": "User",
          "login": "LifeDJIK",
          "commits": 4,
          "avatar_url": "https://avatars.githubusercontent.com/u/3430492?v=4"
        }
      ],
      "contributors_sampled": 17,
      "top_contributor_share": 0.292
    },
    "quality_signals": {
      "has_ci": true,
      "has_tests": true,
      "ci_workflows": [
        "docker-build-push.yml",
        "execute-indexing-tests-on-demand.yml",
        "execute-tests-on-pr.yml",
        "execute-toolkit-tests-on-demand.yml",
        "pypi.yml",
        "test-artifacts-cleanup.yml",
        "test-runner-reusable.yml",
        "update-sdk-plugin.yml"
      ],
      "has_docs_dir": true,
      "linter_configs": [],
      "has_editorconfig": false,
      "has_linter_config": false,
      "has_precommit_config": false
    },
    "security_signals": {
      "lockfiles": [],
      "scorecard": {
        "checks": [
          {
            "name": "Binary-Artifacts",
            "score": 10,
            "reason": "no binaries found in the repo",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#binary-artifacts"
          },
          {
            "name": "Branch-Protection",
            "score": 0,
            "reason": "branch protection not enabled on development/release branches",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#branch-protection"
          },
          {
            "name": "CI-Tests",
            "score": 10,
            "reason": "10 out of 10 merged PRs checked by a CI test -- score normalized to 10",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#ci-tests"
          },
          {
            "name": "CII-Best-Practices",
            "score": 0,
            "reason": "no effort to earn an OpenSSF best practices badge detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#cii-best-practices"
          },
          {
            "name": "Code-Review",
            "score": 0,
            "reason": "Found 1/17 approved changesets -- score normalized to 0",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#code-review"
          },
          {
            "name": "Contributors",
            "score": 10,
            "reason": "project has 3 contributing companies or organizations -- score normalized to 10",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#contributors"
          },
          {
            "name": "Dangerous-Workflow",
            "score": 0,
            "reason": "dangerous workflow patterns detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dangerous-workflow"
          },
          {
            "name": "Dependency-Update-Tool",
            "score": 0,
            "reason": "no update tool detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dependency-update-tool"
          },
          {
            "name": "Fuzzing",
            "score": 0,
            "reason": "project is not fuzzed",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#fuzzing"
          },
          {
            "name": "License",
            "score": 10,
            "reason": "license file detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#license"
          },
          {
            "name": "Maintained",
            "score": 10,
            "reason": "30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#maintained"
          },
          {
            "name": "Packaging",
            "score": 10,
            "reason": "packaging workflow detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#packaging"
          },
          {
            "name": "Pinned-Dependencies",
            "score": 0,
            "reason": "dependency not pinned by hash detected -- score normalized to 0",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#pinned-dependencies"
          },
          {
            "name": "SAST",
            "score": 10,
            "reason": "SAST tool is run on all commits",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#sast"
          },
          {
            "name": "Security-Policy",
            "score": 0,
            "reason": "security policy file not detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#security-policy"
          },
          {
            "name": "Signed-Releases",
            "score": null,
            "reason": "no releases found",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#signed-releases"
          },
          {
            "name": "Token-Permissions",
            "score": 0,
            "reason": "detected GitHub workflow tokens with excessive permissions",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#token-permissions"
          },
          {
            "name": "Vulnerabilities",
            "score": 10,
            "reason": "0 existing vulnerabilities detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#vulnerabilities"
          }
        ],
        "commit": "7f5cadb8ef1cfe1d9c3cf94d66018fe5b0e28e0a",
        "ran_at": "2026-07-28T16:19:55Z",
        "aggregate_score": 4.1,
        "scorecard_version": "v5.5.0"
      },
      "has_codeql_workflow": false,
      "has_security_policy": false,
      "has_dependabot_config": false
    },
    "contribution_flow": {
      "collected": true,
      "ci_last_run_at": "2026-07-28T16:18:05Z",
      "oldest_open_prs": [
        {
          "number": 174,
          "created_at": "2026-05-20T16:36:27Z",
          "last_comment_at": "2026-05-20T16:39:33Z",
          "last_comment_author": "github-actions"
        },
        {
          "number": 475,
          "created_at": "2026-07-28T11:09:41Z",
          "last_comment_at": "2026-07-28T13:21:24Z",
          "last_comment_author": "aliaksandr-valadzko"
        }
      ],
      "last_merged_pr_at": "2026-07-28T16:16:27Z",
      "ci_last_conclusion": "SUCCESS",
      "oldest_open_issues": [
        {
          "number": 68,
          "created_at": "2026-04-27T10:03:18Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 72,
          "created_at": "2026-04-27T12:48:28Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 73,
          "created_at": "2026-04-27T13:00:32Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 75,
          "created_at": "2026-04-27T15:11:56Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 78,
          "created_at": "2026-04-28T09:15:58Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 99,
          "created_at": "2026-05-04T12:44:32Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 100,
          "created_at": "2026-05-04T13:08:29Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 101,
          "created_at": "2026-05-04T15:43:02Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 103,
          "created_at": "2026-05-05T11:34:57Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 107,
          "created_at": "2026-05-06T14:22:59Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 108,
          "created_at": "2026-05-06T14:29:06Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 109,
          "created_at": "2026-05-06T14:29:44Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 110,
          "created_at": "2026-05-07T06:53:21Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 111,
          "created_at": "2026-05-07T07:01:47Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 112,
          "created_at": "2026-05-07T07:53:06Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 120,
          "created_at": "2026-05-11T17:28:15Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 124,
          "created_at": "2026-05-12T09:07:16Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 125,
          "created_at": "2026-05-12T09:46:53Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 126,
          "created_at": "2026-05-12T10:05:37Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 127,
          "created_at": "2026-05-12T10:47:39Z",
          "last_comment_at": null,
          "last_comment_author": null
        }
      ]
    }
  },
  "config": {
    "disabled_metrics": [],
    "disabled_categories": [],
    "disabled_components": {}
  },
  "source": {
    "url": "https://github.com/EliteaAI/elitea-sdk",
    "host": "github.com",
    "name": "elitea-sdk",
    "owner": "EliteaAI"
  },
  "metrics": {
    "overall": {
      "key": "overall",
      "band": "moderate",
      "name": "Overall health",
      "note": null,
      "notes": [],
      "value": 54,
      "inputs": {
        "security": 53,
        "vitality": 45,
        "community": 35,
        "governance": 65,
        "engineering": 71
      },
      "components": []
    },
    "categories": [
      {
        "key": "vitality",
        "band": "at_risk",
        "name": "Vitality",
        "value": 45,
        "weight": 0.22,
        "metrics": [
          {
            "key": "development_activity",
            "band": "good",
            "name": "Development activity",
            "note": null,
            "notes": [],
            "value": 75,
            "inputs": {
              "commits_last_year": 681,
              "human_commit_share": 0.75,
              "days_since_last_push": 0,
              "active_weeks_last_year": 16
            },
            "components": [
              {
                "key": "push_recency",
                "name": "Push recency",
                "detail": "last push 0 days ago",
                "points": 36,
                "status": "met",
                "details": [
                  {
                    "code": "push_recency",
                    "params": {
                      "days": 0
                    }
                  }
                ],
                "max_points": 36
              },
              {
                "key": "commit_cadence",
                "name": "Commit cadence",
                "detail": "16/52 weeks with commits",
                "points": 11.1,
                "status": "partial",
                "details": [
                  {
                    "code": "commit_cadence_weeks",
                    "params": {
                      "weeks": 16
                    }
                  }
                ],
                "max_points": 36
              },
              {
                "key": "commit_volume",
                "name": "Commit volume",
                "detail": "681 commits in the last year",
                "points": 18,
                "status": "met",
                "details": [
                  {
                    "code": "commits_last_year",
                    "params": {
                      "count": 681
                    }
                  }
                ],
                "max_points": 18
              },
              {
                "key": "openssf_scorecard_maintained",
                "name": "OpenSSF Scorecard: Maintained",
                "detail": "30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10",
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "release_discipline",
            "band": "critical",
            "name": "Release discipline",
            "note": "Excluded from scoring (no data or not applicable): OpenSSF Scorecard: Signed-Releases. Remaining weights renormalized.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "openssf_scorecard_signed_releases"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              }
            ],
            "value": 1,
            "inputs": {
              "releases_count": 0
            },
            "components": [
              {
                "key": "ships_releases",
                "name": "Ships releases",
                "detail": "no releases published",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "no_releases_published",
                    "params": {}
                  }
                ],
                "max_points": 27
              },
              {
                "key": "release_recency",
                "name": "Release recency",
                "detail": "no releases",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "no_releases",
                    "params": {}
                  }
                ],
                "max_points": 36
              },
              {
                "key": "release_cadence",
                "name": "Release cadence",
                "detail": "no releases",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "no_releases",
                    "params": {}
                  }
                ],
                "max_points": 27
              },
              {
                "key": "openssf_scorecard_signed_releases",
                "name": "OpenSSF Scorecard: Signed-Releases",
                "detail": "no releases found",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_data",
                    "params": {}
                  }
                ],
                "max_points": 10
              }
            ]
          },
          {
            "key": "abandonment",
            "band": "excellent",
            "name": "Abandonment",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "cap": null,
              "state": "unverified",
              "guards": [],
              "signals": [],
              "red_flag": false,
              "multiplier_pct": 100,
              "declared_reason": null,
              "unverified_reason": "repository_too_young",
              "unanswered_open_prs": null,
              "unanswered_open_issues": null,
              "days_since_last_merged_pr": null,
              "days_since_last_human_commit": null,
              "days_since_last_human_commit_is_floor": false
            },
            "components": [
              {
                "key": "project_is_still_maintained",
                "name": "Project is still maintained",
                "detail": "maintenance record not established from the collected data",
                "points": 100,
                "status": "met",
                "details": [
                  {
                    "code": "abandonment_unverified",
                    "params": {}
                  }
                ],
                "max_points": 100
              }
            ]
          }
        ],
        "description": "Is the project alive — is code being written and are releases shipping?"
      },
      {
        "key": "community",
        "band": "at_risk",
        "name": "Community & Adoption",
        "value": 35,
        "weight": 0.18,
        "metrics": [
          {
            "key": "popularity",
            "band": "critical",
            "name": "Popularity & adoption",
            "note": null,
            "notes": [],
            "value": 1,
            "inputs": {
              "forks": 1,
              "stars": 1,
              "watchers": 0,
              "growth_state": "unverified",
              "growth_factor_pct": 100,
              "growth_unverified_reason": "no_history"
            },
            "components": [
              {
                "key": "stars",
                "name": "Stars",
                "detail": "1 stars",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "stars",
                    "params": {
                      "count": 1
                    }
                  }
                ],
                "max_points": 60
              },
              {
                "key": "forks",
                "name": "Forks",
                "detail": "1 forks",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "forks",
                    "params": {
                      "count": 1
                    }
                  }
                ],
                "max_points": 25
              },
              {
                "key": "watchers",
                "name": "Watchers",
                "detail": "0 watchers",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "watchers",
                    "params": {
                      "count": 0
                    }
                  }
                ],
                "max_points": 15
              }
            ]
          },
          {
            "key": "community_health",
            "band": "moderate",
            "name": "Community health",
            "note": null,
            "notes": [],
            "value": 50,
            "inputs": {
              "has_readme": true,
              "has_license": true,
              "has_contributing": false,
              "has_issue_template": false,
              "has_code_of_conduct": false,
              "has_pull_request_template": false
            },
            "components": [
              {
                "key": "readme",
                "name": "README",
                "detail": null,
                "points": 22.5,
                "status": "met",
                "details": [],
                "max_points": 22.5
              },
              {
                "key": "license",
                "name": "License",
                "detail": "recognized license (Apache-2.0)",
                "points": 22.5,
                "status": "met",
                "details": [
                  {
                    "code": "license_standard",
                    "params": {}
                  },
                  {
                    "code": "license_spdx",
                    "params": {
                      "spdx": "Apache-2.0"
                    }
                  }
                ],
                "max_points": 22.5
              },
              {
                "key": "contributing_guide",
                "name": "CONTRIBUTING guide",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 18
              },
              {
                "key": "code_of_conduct",
                "name": "Code of conduct",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 13.5
              },
              {
                "key": "issue_template",
                "name": "Issue template",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.2
              },
              {
                "key": "pr_template",
                "name": "PR template",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 6.3
              }
            ]
          },
          {
            "key": "ecosystem_adoption",
            "band": "moderate",
            "name": "Ecosystem adoption (downloads)",
            "note": "Excluded from scoring (no data or not applicable): Registry dependents. Remaining weights renormalized.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "registry_dependents"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              }
            ],
            "value": 67,
            "inputs": {
              "packages": [
                "elitea_sdk"
              ],
              "dependents": null,
              "ecosystems": "pypi",
              "total_downloads": null,
              "monthly_downloads": 10526
            },
            "components": [
              {
                "key": "monthly_downloads",
                "name": "Monthly downloads",
                "detail": "10,526 downloads/month across pypi",
                "points": 53.6,
                "status": "partial",
                "details": [
                  {
                    "code": "downloads_monthly",
                    "params": {
                      "count": 10526,
                      "ecosystems": "pypi"
                    }
                  }
                ],
                "max_points": 80
              },
              {
                "key": "registry_dependents",
                "name": "Registry dependents",
                "detail": "not reported by this ecosystem",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "not_reported_by_this_ecosystem",
                    "params": {}
                  }
                ],
                "max_points": 20
              }
            ]
          }
        ],
        "description": "Does the project have users, downloads, attention, and a welcoming setup for contributors?"
      },
      {
        "key": "governance",
        "band": "moderate",
        "name": "Sustainability & Governance",
        "value": 65,
        "weight": 0.24,
        "metrics": [
          {
            "key": "maintainer_resilience",
            "band": "good",
            "name": "Maintainer resilience (bus factor)",
            "note": null,
            "notes": [],
            "value": 75,
            "inputs": {
              "bus_factor": 3,
              "contributors_sampled": 17,
              "top_contributor_share": 0.292
            },
            "components": [
              {
                "key": "bus_factor",
                "name": "Bus factor",
                "detail": "3 contributor(s) cover half of all commits",
                "points": 36,
                "status": "partial",
                "details": [
                  {
                    "code": "bus_factor",
                    "params": {
                      "count": 3
                    }
                  }
                ],
                "max_points": 54
              },
              {
                "key": "commit_distribution",
                "name": "Commit distribution",
                "detail": "top contributor authored 29% of commits",
                "points": 15.9,
                "status": "partial",
                "details": [
                  {
                    "code": "top_contributor_share",
                    "params": {
                      "share": 29
                    }
                  }
                ],
                "max_points": 22.5
              },
              {
                "key": "contributor_breadth",
                "name": "Contributor breadth",
                "detail": "17 contributors",
                "points": 13.5,
                "status": "met",
                "details": [
                  {
                    "code": "contributors_sampled",
                    "params": {
                      "count": 17
                    }
                  }
                ],
                "max_points": 13.5
              },
              {
                "key": "openssf_scorecard_contributors",
                "name": "OpenSSF Scorecard: Contributors",
                "detail": "project has 3 contributing companies or organizations -- score normalized to 10",
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "responsiveness",
            "band": "at_risk",
            "name": "Issue & PR responsiveness",
            "note": null,
            "notes": [],
            "value": 39,
            "inputs": {
              "merged_prs": 349,
              "open_issues": 107,
              "closed_issues": 5,
              "issue_closed_ratio": 0.045,
              "closed_unmerged_prs": 15
            },
            "components": [
              {
                "key": "issue_resolution",
                "name": "Issue resolution",
                "detail": "4% of issues closed",
                "points": 2.1,
                "status": "partial",
                "details": [
                  {
                    "code": "issues_closed_share",
                    "params": {
                      "share": 4
                    }
                  }
                ],
                "max_points": 46.75
              },
              {
                "key": "pr_acceptance",
                "name": "PR acceptance",
                "detail": "349/364 decided PRs merged",
                "points": 36.7,
                "status": "partial",
                "details": [
                  {
                    "code": "decided_prs_merged",
                    "params": {
                      "merged": 349,
                      "decided": 364
                    }
                  }
                ],
                "max_points": 38.25
              },
              {
                "key": "openssf_scorecard_code_review",
                "name": "OpenSSF Scorecard: Code-Review",
                "detail": "Found 1/17 approved changesets -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 15
              }
            ]
          },
          {
            "key": "stewardship",
            "band": "moderate",
            "name": "Ownership & stewardship",
            "note": null,
            "notes": [],
            "value": 51,
            "inputs": {
              "followers": 8,
              "owner_type": "Organization",
              "is_verified": null,
              "owner_login": "EliteaAI",
              "public_repos": 64,
              "account_age_days": 125
            },
            "components": [
              {
                "key": "ownership_backing",
                "name": "Ownership backing",
                "detail": "organization-owned",
                "points": 30,
                "status": "met",
                "details": [
                  {
                    "code": "owner_organization",
                    "params": {}
                  }
                ],
                "max_points": 30
              },
              {
                "key": "verified_domain",
                "name": "Verified domain",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 20
              },
              {
                "key": "owner_reach",
                "name": "Owner reach",
                "detail": "8 followers of EliteaAI",
                "points": 6.9,
                "status": "partial",
                "details": [
                  {
                    "code": "owner_followers",
                    "params": {
                      "count": 8,
                      "login": "EliteaAI"
                    }
                  }
                ],
                "max_points": 25
              },
              {
                "key": "track_record",
                "name": "Track record",
                "detail": "64 public repos, account ~0 yr old",
                "points": 13.7,
                "status": "partial",
                "details": [
                  {
                    "code": "public_repos",
                    "params": {
                      "count": 64
                    }
                  },
                  {
                    "code": "account_age_years",
                    "params": {
                      "years": 0
                    }
                  }
                ],
                "max_points": 25
              }
            ]
          },
          {
            "key": "package_maintenance",
            "band": "excellent",
            "name": "Package maintenance",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "packages": [
                "elitea_sdk"
              ],
              "ecosystems": "pypi",
              "any_deprecated": false,
              "min_days_since_publish": 0
            },
            "components": [
              {
                "key": "published_resolvable",
                "name": "Published & resolvable",
                "detail": "1 package(s) on pypi",
                "points": 25,
                "status": "met",
                "details": [
                  {
                    "code": "packages_published",
                    "params": {
                      "count": 1,
                      "ecosystems": "pypi"
                    }
                  }
                ],
                "max_points": 25
              },
              {
                "key": "publish_recency",
                "name": "Publish recency",
                "detail": "latest publish 0 days ago",
                "points": 35,
                "status": "met",
                "details": [
                  {
                    "code": "publish_recency",
                    "params": {
                      "days": 0
                    }
                  }
                ],
                "max_points": 35
              },
              {
                "key": "version_history",
                "name": "Version history",
                "detail": "246 published versions",
                "points": 20,
                "status": "met",
                "details": [
                  {
                    "code": "published_versions",
                    "params": {
                      "count": 246
                    }
                  }
                ],
                "max_points": 20
              },
              {
                "key": "not_deprecated",
                "name": "Not deprecated",
                "detail": "active, not deprecated or yanked",
                "points": 20,
                "status": "met",
                "details": [
                  {
                    "code": "package_not_deprecated",
                    "params": {}
                  }
                ],
                "max_points": 20
              }
            ]
          }
        ],
        "description": "Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?"
      },
      {
        "key": "engineering",
        "band": "good",
        "name": "Engineering Quality",
        "value": 71,
        "weight": 0.2,
        "metrics": [
          {
            "key": "engineering_practices",
            "band": "moderate",
            "name": "Engineering practices",
            "note": null,
            "notes": [],
            "value": 68,
            "inputs": {
              "has_ci": true,
              "has_tests": true,
              "has_editorconfig": false,
              "has_linter_config": false,
              "has_precommit_config": false
            },
            "components": [
              {
                "key": "ci_workflows",
                "name": "CI workflows",
                "detail": "8 workflow(s)",
                "points": 24,
                "status": "met",
                "details": [
                  {
                    "code": "ci_workflows",
                    "params": {
                      "count": 8
                    }
                  }
                ],
                "max_points": 24
              },
              {
                "key": "tests_present",
                "name": "Tests present",
                "detail": null,
                "points": 24,
                "status": "met",
                "details": [],
                "max_points": 24
              },
              {
                "key": "linter_config",
                "name": "Linter config",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 16
              },
              {
                "key": "pre_commit_hooks",
                "name": "Pre-commit hooks",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 9.6
              },
              {
                "key": "editorconfig",
                "name": ".editorconfig",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 6.4
              },
              {
                "key": "openssf_scorecard_ci_tests",
                "name": "OpenSSF Scorecard: CI-Tests",
                "detail": "10 out of 10 merged PRs checked by a CI test -- score normalized to 10",
                "points": 20,
                "status": "met",
                "details": [],
                "max_points": 20
              }
            ]
          },
          {
            "key": "documentation",
            "band": "good",
            "name": "Documentation",
            "note": null,
            "notes": [],
            "value": 75,
            "inputs": {
              "topics": [],
              "has_wiki": true,
              "homepage": null,
              "has_readme": true,
              "has_docs_dir": true,
              "has_description": true
            },
            "components": [
              {
                "key": "readme",
                "name": "README",
                "detail": null,
                "points": 30,
                "status": "met",
                "details": [],
                "max_points": 30
              },
              {
                "key": "documentation_directory",
                "name": "Documentation directory",
                "detail": null,
                "points": 25,
                "status": "met",
                "details": [],
                "max_points": 25
              },
              {
                "key": "documentation_homepage_site",
                "name": "Documentation / homepage site",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 15
              },
              {
                "key": "repository_description",
                "name": "Repository description",
                "detail": null,
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              },
              {
                "key": "topics",
                "name": "Topics",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 10
              },
              {
                "key": "wiki",
                "name": "Wiki",
                "detail": null,
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              }
            ]
          }
        ],
        "description": "Are baseline engineering and documentation practices in place?"
      },
      {
        "key": "security",
        "band": "moderate",
        "name": "Security",
        "value": 53,
        "weight": 0.16,
        "metrics": [
          {
            "key": "security_posture",
            "band": "at_risk",
            "name": "Security posture",
            "note": "Excluded from scoring (no data or not applicable): Signed-Releases. Remaining weights renormalized.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "signed_releases"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              }
            ],
            "value": 41,
            "inputs": {
              "source": "openssf_scorecard",
              "checks_evaluated": 17,
              "scorecard_version": "v5.5.0",
              "checks_inconclusive": 1,
              "scorecard_aggregate": 4.1
            },
            "components": [
              {
                "key": "binary_artifacts",
                "name": "Binary-Artifacts",
                "detail": "no binaries found in the repo",
                "points": 7.5,
                "status": "met",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "branch_protection",
                "name": "Branch-Protection",
                "detail": "branch protection not enabled on development/release branches",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "ci_tests",
                "name": "CI-Tests",
                "detail": "10 out of 10 merged PRs checked by a CI test -- score normalized to 10",
                "points": 2.5,
                "status": "met",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "cii_best_practices",
                "name": "CII-Best-Practices",
                "detail": "no effort to earn an OpenSSF best practices badge detected",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "code_review",
                "name": "Code-Review",
                "detail": "Found 1/17 approved changesets -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "contributors",
                "name": "Contributors",
                "detail": "project has 3 contributing companies or organizations -- score normalized to 10",
                "points": 2.5,
                "status": "met",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "dangerous_workflow",
                "name": "Dangerous-Workflow",
                "detail": "dangerous workflow patterns detected",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 10
              },
              {
                "key": "dependency_update_tool",
                "name": "Dependency-Update-Tool",
                "detail": "no update tool detected",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "fuzzing",
                "name": "Fuzzing",
                "detail": "project is not fuzzed",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 5
              },
              {
                "key": "license",
                "name": "License",
                "detail": "license file detected",
                "points": 2.5,
                "status": "met",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "maintained",
                "name": "Maintained",
                "detail": "30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10",
                "points": 7.5,
                "status": "met",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "packaging",
                "name": "Packaging",
                "detail": "packaging workflow detected",
                "points": 5,
                "status": "met",
                "details": [],
                "max_points": 5
              },
              {
                "key": "pinned_dependencies",
                "name": "Pinned-Dependencies",
                "detail": "dependency not pinned by hash detected -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 5
              },
              {
                "key": "sast",
                "name": "SAST",
                "detail": "SAST tool is run on all commits",
                "points": 5,
                "status": "met",
                "details": [],
                "max_points": 5
              },
              {
                "key": "security_policy",
                "name": "Security-Policy",
                "detail": "security policy file not detected",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 5
              },
              {
                "key": "signed_releases",
                "name": "Signed-Releases",
                "detail": "no releases found",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_data",
                    "params": {}
                  }
                ],
                "max_points": 7.5
              },
              {
                "key": "token_permissions",
                "name": "Token-Permissions",
                "detail": "detected GitHub workflow tokens with excessive permissions",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "vulnerabilities",
                "name": "Vulnerabilities",
                "detail": "0 existing vulnerabilities detected",
                "points": 7.5,
                "status": "met",
                "details": [],
                "max_points": 7.5
              }
            ]
          },
          {
            "key": "dependency_advisories",
            "band": "excellent",
            "name": "Dependency advisories",
            "note": "Excluded from scoring (no data or not applicable): Indirect dependencies free of known advisories, No advisories left outstanding. Remaining weights renormalized. Matched 91 resolved dependencies against OSV; 36 could not be assessed (no resolved version, an unsupported ecosystem, or beyond the reported package list). This repository publishes no package the index resolves, so the repository dependency graph was assessed instead. That graph mixes development and test pins with shipped dependencies, so only the declared runtime dependencies are scored; transitive findings are reported as context and excluded from the score. Reachability is not analyzed.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "indirect_dependencies_free_of_known_advisories",
                    "no_advisories_left_outstanding"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              },
              {
                "code": "advisories_scope_repository",
                "params": {
                  "assessed": 91
                }
              },
              {
                "code": "advisories_unassessed",
                "params": {
                  "count": 36
                }
              },
              {
                "code": "advisories_repo_graph_caveat",
                "params": {}
              },
              {
                "code": "advisories_reachability",
                "params": {}
              }
            ],
            "value": 100,
            "inputs": {
              "source": "osv",
              "advisories": 132,
              "affected_packages": 19,
              "assessed_packages": 91,
              "unassessed_packages": 36,
              "affected_by_severity": "critical 3, high 10, moderate 5, low 1",
              "direct_affected_packages": 0
            },
            "components": [
              {
                "key": "direct_dependencies_free_of_known_advisories",
                "name": "Direct dependencies free of known advisories",
                "detail": "no direct dependency carries a known advisory",
                "points": 35,
                "status": "met",
                "details": [
                  {
                    "code": "no_direct_advisories",
                    "params": {}
                  }
                ],
                "max_points": 35
              },
              {
                "key": "indirect_dependencies_free_of_known_advisories",
                "name": "Indirect dependencies free of known advisories",
                "detail": "transitive set not separable from development and test dependencies in this scope",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "advisories_scope_not_separable",
                    "params": {}
                  }
                ],
                "max_points": 25
              },
              {
                "key": "no_advisories_left_outstanding",
                "name": "No advisories left outstanding",
                "detail": "no advisory carries a publication date",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "advisories_no_publication_date",
                    "params": {}
                  }
                ],
                "max_points": 40
              }
            ]
          },
          {
            "key": "malicious_dependencies",
            "band": "excellent",
            "name": "Malicious dependencies",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "source": "osv",
              "meaning": "reported as a malicious package by the OpenSSF corpus; the remedy is removal or moving off the compromised name, never an upgrade of the same artifact. Versions the registry has since pulled are listed but not scored",
              "packages": [],
              "red_flag": false,
              "assessed_packages": 91,
              "malicious_packages": 0,
              "direct_malicious_packages": 0,
              "withdrawn_malicious_packages": 0,
              "installable_malicious_packages": 0
            },
            "components": [
              {
                "key": "no_dependency_reported_as_a_malicious_package",
                "name": "No dependency reported as a malicious package",
                "detail": "no dependency is reported as a malicious package",
                "points": 100,
                "status": "met",
                "details": [
                  {
                    "code": "no_malicious_dependencies",
                    "params": {}
                  }
                ],
                "max_points": 100
              }
            ]
          },
          {
            "key": "high_risk_jurisdiction_exposure",
            "band": "excellent",
            "name": "High-Risk Jurisdiction Exposure",
            "note": "Only high-confidence self-published location evidence affects this multiplier. Ambiguous matches are review-only; country evidence is not proof of nationality, citizenship, legal registration, malicious intent, or sanctions status.",
            "notes": [
              {
                "code": "jurisdiction_evidence_limits",
                "params": {}
              }
            ],
            "value": 100,
            "inputs": {
              "meaning": "self-published location evidence; not nationality or citizenship",
              "red_flag": false,
              "exposures": [],
              "policy_countries": [
                "Russia",
                "Iran",
                "North Korea"
              ],
              "review_only_matches": 0,
              "assessed_self_published_locations": 4
            },
            "components": [
              {
                "key": "policy_exposure_multiplier",
                "name": "Policy exposure multiplier",
                "detail": "no confirmed policy-scope location match",
                "points": 100,
                "status": "met",
                "details": [
                  {
                    "code": "jurisdiction_no_match",
                    "params": {}
                  }
                ],
                "max_points": 100
              }
            ]
          }
        ],
        "description": "Are visible security and supply-chain practices strong, with no malicious dependency and no unresolved high-risk jurisdiction exposure?"
      },
      {
        "key": "ai_readiness",
        "band": "moderate",
        "name": "AI Readiness",
        "value": 65,
        "weight": 0,
        "metrics": [
          {
            "key": "ai_agent_context",
            "band": "excellent",
            "name": "Agent context & guidance",
            "note": null,
            "notes": [],
            "value": 85,
            "inputs": {
              "has_llms_txt": false,
              "legible_history_share": 0.987,
              "agent_instruction_files": [
                ".github/copilot-instructions.md",
                ".github/instructions/bug-reporting.instructions.md",
                ".github/instructions/test-coverage-structure.instructions.md"
              ],
              "agent_instruction_max_bytes": 13190
            },
            "components": [
              {
                "key": "agent_instructions",
                "name": "Agent instructions",
                "detail": ".github/copilot-instructions.md, .github/instructions/bug-reporting.instructions.md, .github/instructions/test-coverage-structure.instructions.md",
                "points": 45,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": ".github/copilot-instructions.md, .github/instructions/bug-reporting.instructions.md, .github/instructions/test-coverage-structure.instructions.md"
                    }
                  }
                ],
                "max_points": 45
              },
              {
                "key": "machine_readable_docs_llms_txt",
                "name": "Machine-readable docs (llms.txt)",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 15
              },
              {
                "key": "legible_commit_history",
                "name": "Legible commit history",
                "detail": "74 of 75 human commits state their intent (structured subject or explanatory body)",
                "points": 40,
                "status": "met",
                "details": [
                  {
                    "code": "legible_history",
                    "params": {
                      "legible": 74,
                      "sampled": 75
                    }
                  }
                ],
                "max_points": 40
              }
            ]
          },
          {
            "key": "ai_verify_loop",
            "band": "at_risk",
            "name": "Verify loop (build / test / typecheck)",
            "note": null,
            "notes": [],
            "value": 42,
            "inputs": {
              "has_nix": false,
              "has_tests": true,
              "lockfiles": [],
              "has_dockerfile": true,
              "typed_language": false,
              "bootstrap_files": [],
              "has_devcontainer": false,
              "has_linter_config": false,
              "typecheck_configs": [],
              "agent_commit_share": 0.2,
              "toolchain_manifests": [],
              "dependency_bot_commit_share": 0
            },
            "components": [
              {
                "key": "one_command_bootstrap",
                "name": "One-command bootstrap",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 18
              },
              {
                "key": "automated_tests",
                "name": "Automated tests",
                "detail": null,
                "points": 22,
                "status": "met",
                "details": [],
                "max_points": 22
              },
              {
                "key": "lint_format_config",
                "name": "Lint / format config",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 11
              },
              {
                "key": "static_type_checking",
                "name": "Static type checking",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 11
              },
              {
                "key": "reproducible_environment",
                "name": "Reproducible environment",
                "detail": "Dockerfile",
                "points": 10,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": "Dockerfile"
                    }
                  }
                ],
                "max_points": 10
              },
              {
                "key": "demonstrated_agent_practice",
                "name": "Demonstrated agent practice",
                "detail": "20 of the last 100 commits agent-authored or agent-credited",
                "points": 10,
                "status": "met",
                "details": [
                  {
                    "code": "agent_authored_commits",
                    "params": {
                      "count": 20,
                      "sampled": 100
                    }
                  }
                ],
                "max_points": 10
              },
              {
                "key": "automated_maintenance",
                "name": "Automated maintenance",
                "detail": "no automated dependency updates observed",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "no_dependency_automation",
                    "params": {}
                  }
                ],
                "max_points": 8
              },
              {
                "key": "openssf_scorecard_pinned_dependencies",
                "name": "OpenSSF Scorecard: Pinned-Dependencies",
                "detail": "dependency not pinned by hash detected -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "ai_code_legibility",
            "band": "moderate",
            "name": "Code legibility for models",
            "note": null,
            "notes": [],
            "value": 52,
            "inputs": {
              "primary_language": "Python",
              "largest_source_bytes": 174204,
              "source_files_sampled": 686,
              "oversized_source_files": 32
            },
            "components": [
              {
                "key": "type_checkable_code",
                "name": "Type-checkable code",
                "detail": "Python without a type-check config",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "no_typecheck_config_language",
                    "params": {
                      "language": "Python"
                    }
                  }
                ],
                "max_points": 45
              },
              {
                "key": "manageable_file_sizes",
                "name": "Manageable file sizes",
                "detail": "32/686 source files over 60KB",
                "points": 52.4,
                "status": "partial",
                "details": [
                  {
                    "code": "oversized_source_files",
                    "params": {
                      "kb": 60,
                      "sampled": 686,
                      "oversized": 32
                    }
                  }
                ],
                "max_points": 55
              }
            ]
          },
          {
            "key": "ai_interfaces",
            "band": "excellent",
            "name": "Machine-readable interfaces",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "example_dirs": [
                "examples"
              ],
              "has_mcp_signal": true,
              "api_schema_files": [
                "elitea_sdk/tools/github/schema.docs.graphql"
              ]
            },
            "components": [
              {
                "key": "api_schema_openapi_graphql_proto",
                "name": "API schema (OpenAPI/GraphQL/proto)",
                "detail": "elitea_sdk/tools/github/schema.docs.graphql",
                "points": 40,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": "elitea_sdk/tools/github/schema.docs.graphql"
                    }
                  }
                ],
                "max_points": 40
              },
              {
                "key": "mcp_server",
                "name": "MCP server",
                "detail": null,
                "points": 20,
                "status": "met",
                "details": [],
                "max_points": 20
              },
              {
                "key": "runnable_examples",
                "name": "Runnable examples",
                "detail": "examples",
                "points": 40,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": "examples"
                    }
                  }
                ],
                "max_points": 40
              }
            ]
          }
        ],
        "description": "How well is the repo equipped to be developed and maintained with AI coding agents? An independent, experimental badge — weight 0.0, so it is surfaced on its own and does not affect the overall health score."
      }
    ],
    "metrics_version": "1.13.0"
  },
  "warnings": [
    "Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token",
    "deps.dev does not index pypi:elitea_sdk@0.8.37; advisories assessed against the repository dependency graph instead"
  ],
  "report_type": "repository",
  "generated_at": "2026-07-28T16:20:20.323078Z",
  "schema_version": "0.27.0",
  "badge_url": "https://raw.githubusercontent.com/inspect-software/badges/main/v1/e/EliteaAI/elitea-sdk.svg",
  "full_name": "EliteaAI/elitea-sdk",
  "license_state": "standard",
  "license_spdx": "Apache-2.0"
}