公开记录中等
软件健康报告模式 0.27.0 · 指标 1.13.0 · 2026-07-24 13:15 UTC
InnerOpen / marvin-cli
Official CLI for Marvin CMS - interact with the Marvin Publishing API
InnerOpen/marvin-cli 的健康指数为 100 分中的 58 分，处于「中等」区间。 其得分最高的类别是Vitality（74/100），最低的是Community & Adoption（32/100）。 最近一次更新在今天。 近期的大部分工作由 1 位贡献者完成。
58
总分 / 100软件健康指数
指标归入加权类别，统一采用 1–100 量表。总体分先取类别加权平均；当公开证据触发高风险司法辖区政策时，评级会按政策调整，并设置 49（有风险）的上限。AI 就绪度不计入总体分。
58
优秀85-100堪称典范；基本满足所有检验标准
良好70-84健康；仅有轻微不足
中等50-69可接受，但存在明显不足；建议进行审查
存在风险30-49存在重大薄弱环节；采用时应保持审慎
危急1-29问题严重（项目被弃置、仅有单一维护者、缺乏基本工程规范）
评分画像
每条轴代表一个类别。形状比平均值更重要——健康的对象会填满整个图形，而“一峰一谷”式画像意味着某一维度的优势正掩盖另一维度的风险。
所有权
软件包生态系统
| 注册表 | 软件包 | 版本 | 月下载量 | 版本数 | 最近发布 | 标签 |
|---|---|---|---|---|---|---|
| npm | @inneropen/marvin-cli | 2.7.0 | 6,692 | 47 | 5 天前 | marvincmsclipublishingheadless-cms |
按类别列示的指标
活力
项目是否仍有生命——是否仍在编写代码，是否仍在发布版本？
74
开发活跃度
56中等
评分方式
| 36/36 | 推送新近度 — 最近一次推送于 0 天前 |
| 2.1/36 | 提交节奏 — 52 周中有 3 周有提交 |
| 18/18 | 提交量 — 最近一年 148 次提交 |
| 0/10 | OpenSSF Scorecard：Maintained — project was created within the last 90 days. Please review its contents carefully |
所用输入
| commits_last_year | 148 |
| human_commit_share | 1 |
| days_since_last_push | 0 |
| active_weeks_last_year | 3 |
发布纪律
100优秀
评分方式
| 27/27 | 有发布版本 — 已发布 26 个发布版本 |
| 36/36 | 发布时效 — 最近一次发布版本于 5 天前 |
| 27/27 | 发布节奏 — 约每 0.5 天发布一次 |
| 0/10 | OpenSSF Scorecard：Signed-Releases — 无数据 |
所用输入
| releases_count | 26 |
| latest_release_tag | v2.7.0 |
| releases_from_tags | 否 |
| days_since_latest_release | 5 |
| mean_days_between_releases | 0.5 |
已排除计分（无数据或不适用）：OpenSSF Scorecard：Signed-Releases。 其余权重已重新归一化。
社区与采用
项目是否拥有用户、下载量与关注度，并具备欢迎贡献者参与的配置？
32
流行度与采用
1危急
评分方式
| 0/60 | 星标 — 0 个星标 |
| 0/25 | 复刻 — 0 个复刻 |
| 0/15 | 关注者 — 0 位关注者 |
所用输入
| forks | 0 |
| stars | 0 |
| watchers | 0 |
| growth_state | unverified |
| growth_factor_pct | 100 |
| growth_unverified_reason | no_history |
社区健康
45存在风险
评分方式
| 22.5/22.5 | README |
| 0/22.5 | 许可证 — 未检测到许可证文件 |
| 18/18 | CONTRIBUTING 指南 |
| 0/13.5 | 行为准则 |
| 0/7.2 | 议题模板 |
| 0/6.3 | PR 模板 |
所用输入
| has_readme | 是 |
| has_license | 否 |
| has_contributing | 是 |
| has_issue_template | 否 |
| has_code_of_conduct | 否 |
| has_pull_request_template | 否 |
生态采用（下载量）
64中等
评分方式
| 51/80 | 月度下载量 — npm 合计每月 6,692 次下载 |
| 0/20 | 注册表被依赖数 — 该生态系统不报告此项 |
所用输入
| packages | @inneropen/marvin-cli |
| dependents | — |
| ecosystems | npm |
| total_downloads | — |
| monthly_downloads | 6,692 |
已排除计分（无数据或不适用）：注册表被依赖数。 其余权重已重新归一化。
可持续性与治理
项目能否在其成员之外延续——巴士系数、响应能力、由谁支持，以及软件包的维护状况？
54
维护者韧性（巴士系数）
22危急
评分方式
| 9/54 | 巴士系数 — 1 位贡献者贡献了半数提交 |
| 4.8/22.5 | 提交分布 — 头号贡献者编写了 79% 的提交 |
| 2.7/13.5 | 贡献者广度 — 2 位贡献者 |
| 6/10 | OpenSSF Scorecard：Contributors — project has 2 contributing companies or organizations -- score normalized to 6 |
所用输入
| bus_factor | 1 |
| contributors_sampled | 2 |
| top_contributor_share | 0.788 |
议题与 PR 响应能力
72良好
评分方式
| 0/46.8 | 议题解决 — 没有议题或无数据 |
| 38.2/38.3 | PR 接受 — 已裁定的 PR 中 1/1 已合并 |
| 0/15 | OpenSSF Scorecard：Code-Review — Found 0/2 approved changesets -- score normalized to 0 |
所用输入
| merged_prs | 1 |
| open_issues | 0 |
| closed_issues | 0 |
| issue_closed_ratio | — |
| closed_unmerged_prs | 0 |
已排除计分（无数据或不适用）：议题解决。 其余权重已重新归一化。
所有权与托管责任
37存在风险
评分方式
| 30/30 | 所有权背书 — 组织持有 |
| 0/20 | 已验证域名 |
| 0/25 | 所有者影响力 — InnerOpen 有 0 位关注者 |
| 7.1/25 | 既往记录 — 8 个公开仓库，账户约 0 年 |
所用输入
| followers | 0 |
| owner_type | Organization |
| is_verified | — |
| owner_login | InnerOpen |
| public_repos | 8 |
| account_age_days | 31 |
软件包维护
100优秀
评分方式
| 25/25 | 已发布且可解析 — npm 上有 1 个软件包 |
| 35/35 | 发布时效 — 最近一次发布于 5 天前 |
| 20/20 | 版本历史 — 47 个已发布版本 |
| 20/20 | 未被弃用 — 活跃，未被弃用或撤回 |
所用输入
| packages | @inneropen/marvin-cli |
| ecosystems | npm |
| any_deprecated | 否 |
| min_days_since_publish | 5 |
工程质量
基础的工程与文档实践是否到位？
71
工程实践
68中等
评分方式
| 24/24 | CI 工作流 — 4 个工作流 |
| 24/24 | 存在测试 |
| 0/16 | Linter 配置 |
| 0/9.6 | Pre-commit 钩子 |
| 0/6.4 | .editorconfig |
| 20/20 | OpenSSF Scorecard：CI-Tests — 1 out of 1 merged PRs checked by a CI test -- score normalized to 10 |
所用输入
| has_ci | 是 |
| has_tests | 是 |
| has_editorconfig | 否 |
| has_linter_config | 否 |
| has_precommit_config | 否 |
文档
75良好
评分方式
| 30/30 | README |
| 25/25 | 文档目录 |
| 0/15 | 文档 / 主页站点 |
| 10/10 | 仓库描述 |
| 0/10 | 主题标签 |
| 10/10 | Wiki |
所用输入
| topics | — |
| has_wiki | 是 |
| homepage | — |
| has_readme | 是 |
| has_docs_dir | 是 |
| has_description | 是 |
安全
可见的安全与供应链实践是否稳固，且不存在未解决的高风险司法辖区暴露？
53
安全态势
41存在风险
评分方式
| 7.5/7.5 | Binary-Artifacts — no binaries found in the repo |
| 0.8/7.5 | Branch-Protection — branch protection is not maximal on development and all release branches |
| 2.5/2.5 | CI-Tests — 1 out of 1 merged PRs checked by a CI test -- score normalized to 10 |
| 0/2.5 | CII-Best-Practices — no effort to earn an OpenSSF best practices badge detected |
| 0/7.5 | Code-Review — Found 0/2 approved changesets -- score normalized to 0 |
| 1.5/2.5 | Contributors — project has 2 contributing companies or organizations -- score normalized to 6 |
| 10/10 | Dangerous-Workflow — no dangerous workflow patterns detected |
| 0/7.5 | Dependency-Update-Tool — no update tool detected |
| 0/5 | Fuzzing — project is not fuzzed |
| 0/2.5 | 许可证 — license file not detected |
| 0/7.5 | Maintained — project was created within the last 90 days. Please review its contents carefully |
| 5/5 | Packaging — packaging workflow detected |
| 0.5/5 | Pinned-Dependencies — dependency not pinned by hash detected -- score normalized to 1 |
| 0/5 | SAST — SAST tool is not run on all commits -- score normalized to 0 |
| 5/5 | Security-Policy — security policy file detected |
| 0/7.5 | Signed-Releases — 无数据 |
| 0/7.5 | Token-Permissions — detected GitHub workflow tokens with excessive permissions |
| 7.5/7.5 | Vulnerabilities — 0 existing vulnerabilities detected |
所用输入
| source | openssf_scorecard |
| checks_evaluated | 17 |
| scorecard_version | v5.5.0 |
| checks_inconclusive | 1 |
| scorecard_aggregate | 4.1 |
已排除计分（无数据或不适用）：signed_releases。 其余权重已重新归一化。
依赖安全公告
100优秀
评分方式
| 35/35 | 直接依赖不含已知公告 — 没有直接依赖携带已知公告 |
| 25/25 | 间接依赖不含已知公告 — 没有间接依赖携带已知公告 |
| 0/40 | 没有长期未处理的公告 — 没有公告带有发布日期 |
所用输入
| source | osv |
| advisories | 0 |
| affected_packages | 0 |
| assessed_packages | 5 |
| unassessed_packages | 0 |
| affected_by_severity | none |
| direct_affected_packages | 0 |
已排除计分（无数据或不适用）：没有长期未处理的公告。 其余权重已重新归一化。 比对的是 npm:@inneropen/marvin-cli@2.7.0 的运行时依赖闭包——安装已发布的软件包时真正被拉取进来的内容——共 5 个软件包。 未对可达性进行分析。
AI 就绪度
该仓库在多大程度上具备与 AI 编码代理协同开发与维护的条件？这是一枚独立的实验性徽章——权重为 0.0，因此单独呈现，不影响总体健康评分。
55
AI 代理上下文与指引
40存在风险
评分方式
| 0/45 | 代理指令 — 没有 CLAUDE.md / AGENTS.md / 编辑器规则 |
| 0/15 | 机器可读文档（llms.txt） |
| 40/40 | 可读的提交历史 — 100 次人类提交中有 94 次说明了意图（结构化标题或解释性正文） |
所用输入
| has_llms_txt | 否 |
| legible_history_share | 0.94 |
| agent_instruction_files | — |
| agent_instruction_max_bytes | — |
评分方式
| 0/18 | 一条命令的引导启动 |
| 22/22 | 自动化测试 |
| 0/11 | Lint / 格式化配置 |
| 11/11 | 静态类型检查 — tsconfig.json |
| 10/10 | 可复现环境 — lockfile |
| 10/10 | 已体现的代理实践 — 最近 100 次提交中有 47 次由代理编写或署名代理 |
| 0/8 | 自动化维护 — 未观察到自动依赖更新 |
| 1/10 | OpenSSF Scorecard：Pinned-Dependencies — dependency not pinned by hash detected -- score normalized to 1 |
所用输入
| has_nix | 否 |
| has_tests | 是 |
| lockfiles | package-lock.json |
| has_dockerfile | 否 |
| typed_language | 是 |
| bootstrap_files | — |
| has_devcontainer | 否 |
| has_linter_config | 否 |
| typecheck_configs | tsconfig.json |
| agent_commit_share | 0.47 |
| toolchain_manifests | — |
| dependency_bot_commit_share | 0 |
面向模型的代码可读性
100优秀
评分方式
| 45/45 | 可类型检查的代码 — TypeScript（静态类型） |
| 55/55 | 可控的文件大小 — 采样的 67 个源文件中有 0 个超过 60KB |
所用输入
| primary_language | TypeScript |
| largest_source_bytes | 13,750 |
| source_files_sampled | 67 |
| oversized_source_files | 0 |
机器可读接口
40存在风险
评分方式
| 0/40 | API 模式（OpenAPI/GraphQL/proto） |
| 0/20 | MCP 服务器 |
| 40/40 | 可运行示例 — examples |
所用输入
| example_dirs | examples |
| has_mcp_signal | 否 |
| api_schema_files | — |
关键数据
0GitHub 星标
2贡献者
148最近 12 个月提交数
0距最近推送天数
26发布版本数
1巴士系数（bus factor）
0开放议题
npm, PyPI软件包生态系统数
数据采集警告
- GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository
更多细节
OpenSSF Scorecard 4.1 / 10
4.1综合
来自开源项目 OpenSSF Scorecard 的独立、工具无关的安全评估。每项检查奖励的是安全实践本身，而非特定供应商的工具。Scorecard 无法判定的检查项标记为 不适用，并从安全评分中剔除（绝不按零分计）。
| 10 | Binary-Artifacts | no binaries found in the repo |
| 1 | Branch-Protection | branch protection is not maximal on development and all release branches |
| 10 | CI-Tests | 1 out of 1 merged PRs checked by a CI test -- score normalized to 10 |
| 0 | CII-Best-Practices | no effort to earn an OpenSSF best practices badge detected |
| 0 | Code-Review | Found 0/2 approved changesets -- score normalized to 0 |
| 6 | Contributors | project has 2 contributing companies or organizations -- score normalized to 6 |
| 10 | Dangerous-Workflow | no dangerous workflow patterns detected |
| 0 | Dependency-Update-Tool | no update tool detected |
| 0 | Fuzzing | project is not fuzzed |
| 0 | License | license file not detected |
| 0 | Maintained | project was created within the last 90 days. Please review its contents carefully |
| 10 | Packaging | packaging workflow detected |
| 1 | Pinned-Dependencies | dependency not pinned by hash detected -- score normalized to 1 |
| 0 | SAST | SAST tool is not run on all commits -- score normalized to 0 |
| 10 | Security-Policy | security policy file detected |
| 不适用 | Signed-Releases | no releases found |
| 0 | Token-Permissions | detected GitHub workflow tokens with excessive permissions |
| 10 | Vulnerabilities | 0 existing vulnerabilities detected |
直接依赖 4
| 注册表 | 软件包 | 版本约束 | 清单文件 |
|---|---|---|---|
| npm | @inneropen/marvin-sdk | ^3.2.0-next.23 | package.json |
| npm | chalk | ^5.6.2 | package.json |
| npm | commander | ^12.1.0 | package.json |
| npm | dotenv | ^16.4.5 | package.json |
全部依赖 未采集
本报告未能采集到解析后的依赖集合：GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository
依赖安全公告 0
安装 npm:@inneropen/marvin-cli@2.7.0 会引入 5 个包（直接与传递）：其中 0 个存在已知公告，0 个为直接依赖。
没有已知公告影响已评估的依赖。
公告表示依赖图中记录的版本落入某条公告的受影响范围。可达性未经分析，且依赖图包含开发与测试的版本固定——某项发现可能只涉及工具链而非交付的软件。
原始 JSON 报告 机器可读
{
"data": {
"repo": {
"topics": [],
"is_fork": false,
"size_kb": 2357,
"has_wiki": true,
"homepage": null,
"languages": {
"JavaScript": 14983,
"TypeScript": 292017
},
"pushed_at": "2026-07-24T04:00:30Z",
"created_at": "2026-07-07T00:27:35Z",
"owner_type": "Organization",
"updated_at": "2026-07-19T00:30:37Z",
"description": "Official CLI for Marvin CMS - interact with the Marvin Publishing API",
"is_archived": false,
"is_disabled": false,
"license_spdx": null,
"default_branch": "main",
"license_spdx_raw": null,
"primary_language": "TypeScript",
"significant_languages": [
"TypeScript"
]
},
"owner": {
"blog": "https://www.inneropen.com",
"name": "InnerOpen",
"type": "Organization",
"login": "InnerOpen",
"company": null,
"location": "United States of America",
"followers": 0,
"avatar_url": "https://avatars.githubusercontent.com/u/295994472?v=4",
"created_at": "2026-06-22T22:55:23Z",
"is_verified": null,
"public_repos": 8,
"account_age_days": 31
},
"license": {
"state": "absent",
"spdx_id": null,
"raw_spdx": null,
"file_present": false,
"scorecard_found": false,
"profile_has_license": false
},
"activity": {
"releases": [
{
"tag": "v2.7.0",
"kind": "minor",
"published_at": "2026-07-19T00:30:39Z"
},
{
"tag": "v2.6.0-next.23",
"kind": "prerelease",
"published_at": "2026-07-18T20:32:55Z"
},
{
"tag": "v2.6.0-next.22",
"kind": "prerelease",
"published_at": "2026-07-16T17:59:13Z"
},
{
"tag": "v2.6.0-next.21",
"kind": "prerelease",
"published_at": "2026-07-16T16:44:45Z"
},
{
"tag": "v2.6.0-next.20",
"kind": "prerelease",
"published_at": "2026-07-16T16:39:59Z"
},
{
"tag": "v2.6.0-next.19",
"kind": "prerelease",
"published_at": "2026-07-16T16:36:43Z"
},
{
"tag": "v2.6.0-next.18",
"kind": "prerelease",
"published_at": "2026-07-16T16:27:03Z"
},
{
"tag": "v2.6.0-next.17",
"kind": "prerelease",
"published_at": "2026-07-16T16:19:34Z"
},
{
"tag": "v2.6.0-next.16",
"kind": "prerelease",
"published_at": "2026-07-14T21:38:41Z"
},
{
"tag": "v2.6.0-next.15",
"kind": "prerelease",
"published_at": "2026-07-14T21:35:31Z"
},
{
"tag": "v2.6.0-next.14",
"kind": "prerelease",
"published_at": "2026-07-14T21:11:50Z"
},
{
"tag": "v2.6.0-next.13",
"kind": "prerelease",
"published_at": "2026-07-14T04:39:42Z"
},
{
"tag": "v2.6.0-next.12",
"kind": "prerelease",
"published_at": "2026-07-12T20:29:58Z"
},
{
"tag": "v2.6.0-next.11",
"kind": "prerelease",
"published_at": "2026-07-11T21:36:12Z"
},
{
"tag": "v2.6.0-next.10",
"kind": "prerelease",
"published_at": "2026-07-11T17:04:59Z"
},
{
"tag": "v2.6.0-next.9",
"kind": "prerelease",
"published_at": "2026-07-11T16:54:30Z"
},
{
"tag": "v2.6.0-next.8",
"kind": "prerelease",
"published_at": "2026-07-11T16:46:43Z"
},
{
"tag": "v2.6.1",
"kind": "patch",
"published_at": "2026-07-10T17:23:23Z"
},
{
"tag": "v2.6.0-next.7",
"kind": "prerelease",
"published_at": "2026-07-10T17:22:49Z"
},
{
"tag": "v2.6.0-next.6",
"kind": "prerelease",
"published_at": "2026-07-10T17:17:07Z"
},
{
"tag": "v2.6.0",
"kind": "minor",
"published_at": "2026-07-10T17:17:02Z"
},
{
"tag": "v2.6.0-next.5",
"kind": "prerelease",
"published_at": "2026-07-10T16:53:31Z"
},
{
"tag": "v2.6.0-next.4",
"kind": "prerelease",
"published_at": "2026-07-10T02:48:18Z"
},
{
"tag": "v2.6.0-next.3",
"kind": "prerelease",
"published_at": "2026-07-10T00:52:40Z"
},
{
"tag": "v2.6.0-next.2",
"kind": "prerelease",
"published_at": "2026-07-09T02:28:45Z"
},
{
"tag": "v2.6.0-next.1",
"kind": "prerelease",
"published_at": "2026-07-08T16:50:59Z"
}
],
"recent_commits": [
{
"oid": "b3def4969ef40e69427fc2377777bb6bb4e24d60",
"body": "# [2.7.0](https://github.com/inneropen/marvin-cli/compare/v2.6.1...v2.7.0) (2026-07-19)\n\n### Bug Fixes\n\n* Add null check for collection.get() return value ([d362859](https://github.com/inneropen/marvin-cli/commit/d36285996b315c7d4e18433b99cf5025853cfab7))\n* camelCase column specs in email-subscripti\n[…]\nca9b5e00b4ecb9c2eb90c8f9d18b626e))\n* Rename publish entry-types → publish renderers, add --all flag ([fdb6ba8](https://github.com/inneropen/marvin-cli/commit/fdb6ba8e040a4981cd12e9b6eadec2e7cf7594b1))",
"is_bot": false,
"headline": "chore(release): 2.7.0 [skip ci]",
"author_name": "semantic-release-bot",
"author_login": "semantic-release-bot",
"committed_at": "2026-07-19T00:30:33Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "003972557c3ba8c6b9ad69a863fba5c72a081d19",
"body": "develop carries the refactored CLI (80 files, large cleanup) plus the\nPUBLISHING_TOKEN fix; main only had release-bookkeeping commits (2.6.0,\n2.6.1 version bumps). Merge develop's tree so the stable release ships\nthe current code. semantic-release will cut the next stable version.",
"is_bot": false,
"headline": "chore: reconcile develop into main for stable release",
"author_name": "Jared Mashburn",
"author_login": "jmashburn",
"committed_at": "2026-07-19T00:28:58Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e98b1dec15ef1d49c35b7cc22fd3cbb6e5236cf8",
"body": null,
"is_bot": false,
"headline": "🔧 chore(deps): bump marvin-sdk to 3.2.0-next.23",
"author_name": "Jared Mashburn",
"author_login": "jmashburn",
"committed_at": "2026-07-18T21:16:08Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "06a0f6b34bdfff48d5b6cd4514ac8c9818c5444a",
"body": "# [2.6.0-next.23](https://github.com/inneropen/marvin-cli/compare/v2.6.0-next.22...v2.6.0-next.23) (2026-07-18)\n\n### Bug Fixes\n\n* **release:** parse gitmoji-prefixed commit subjects ([da9ee93](https://github.com/inneropen/marvin-cli/commit/da9ee933bfd2f4a852915e91a53255a75a3e27f4))\n\n### Features\n\n* cover all backend endpoints in the CLI ([99d9801](https://github.com/inneropen/marvin-cli/commit/99d98013722ae4306192c0ff93481ce7ef6e6045))",
"is_bot": false,
"headline": "chore(release): 2.6.0-next.23 [skip ci]",
"author_name": "semantic-release-bot",
"author_login": "semantic-release-bot",
"committed_at": "2026-07-18T20:32:49Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "713fcf0cb8d0ed6eb18cbcdabfb960db95653f87",
"body": null,
"is_bot": false,
"headline": "👷 ci: install latest SDK develop tag instead of stale lockfile pin",
"author_name": "Jared Mashburn",
"author_login": "jmashburn",
"committed_at": "2026-07-18T20:19:29Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "da9ee933bfd2f4a852915e91a53255a75a3e27f4",
"body": null,
"is_bot": false,
"headline": "🐛 fix(release): parse gitmoji-prefixed commit subjects",
"author_name": "Jared Mashburn",
"author_login": "jmashburn",
"committed_at": "2026-07-18T20:19:29Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c22f1be530700794a9268a18ca397d6019f61586",
"body": null,
"is_bot": false,
"headline": "📝 docs: add status badges",
"author_name": "Jared Mashburn",
"author_login": "jmashburn",
"committed_at": "2026-07-18T18:43:37Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "99d98013722ae4306192c0ff93481ce7ef6e6045",
"body": "Add ~76 commands so the CLI wraps every non-excluded backend operation:\n- platform ai: providers (+ nested models), operations, executions, settings\n (nested under `platform` to mirror the SDK's platform.ai.* namespace)\n- admin: new backups, scheduled-tasks, email (+templates), groups and\n workspa\n[…]\nn/webhook logs and\n types; email-template event-connections\n- user: api-token get/update\n- auth: public register / forgot-password / reset-password via a new\n AuthClient factory in shared/clients.ts",
"is_bot": false,
"headline": "✨ feat: cover all backend endpoints in the CLI",
"author_name": "Jared Mashburn",
"author_login": "jmashburn",
"committed_at": "2026-07-18T17:53:44Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "7d4b6ec3919c1600e059af6054902af424f3dae1",
"body": "# [2.6.0-next.22](https://github.com/inneropen/marvin-cli/compare/v2.6.0-next.21...v2.6.0-next.22) (2026-07-16)\n\n### Features\n\n* centralized table-schemas.ts — single source of truth for column specs, typed against SDK schema ([a671164](https://github.com/inneropen/marvin-cli/commit/a671164bea234aa2bd06ec0f118bb7b5e52e60ae))",
"is_bot": false,
"headline": "chore(release): 2.6.0-next.22 [skip ci]",
"author_name": "semantic-release-bot",
"author_login": "semantic-release-bot",
"committed_at": "2026-07-16T17:59:06Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a671164bea234aa2bd06ec0f118bb7b5e52e60ae",
"body": "…n specs, typed against SDK schema\n\nAll platform command renderList column specs moved to src/shared/table-schemas.ts.\nString field names use `satisfies ColSpec<T>` to type-check against SDK schema types\nat compile time. Mixed schemas (strings + functions) use `satisfies ColumnSpec<T>`.\nTest updated to use per-command fixtures built from TABLE_SCHEMAS entries.",
"is_bot": false,
"headline": "feat: centralized table-schemas.ts — single source of truth for colum…",
"author_name": "Jared Mash",
"author_login": null,
"committed_at": "2026-07-16T17:58:22Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "82e4248529b3da38230de3ba64a9ddb623b73561",
"body": "- webhooks log/logs: fix column spec from snake_case (webhook_id, event_type,\n created_at) to correct camelCase (webhookId, httpStatusCode, executedAt)\n matching the WebhookExecutionLogRead API schema\n- event-log list/entity/user: fix column spec from snake_case (event_id,\n occurred_at, user_id, \n[…]\nests for each; the table test acts as drift detection and\n will fail if a column spec references a wrong field name; adding a new\n command automatically gets all three tests with no manual additions",
"is_bot": false,
"headline": "test: fully dynamic output format tests; fix log column field names",
"author_name": "Jared Mash",
"author_login": null,
"committed_at": "2026-07-16T17:26:07Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "4d0771260994a456a574cf640168d3db7113b3e7",
"body": "Adds Vitest test suite (89 tests) covering three layers:\n\n1. Explicit per-command tests (72) — secrets, variables, webhooks,\n email-subscriptions, entry-types, entries, collections, api-clients,\n assets, resources, notifications, forms, scheduled-tasks list/log,\n event-log, invites, email-temp\n[…]\nurn for empty bypassed --json mode,\n outputting human text instead of []\n- invites list: trailing Total: line appended after JSON body made\n output unparseable; empty early-return also bypassed mode",
"is_bot": false,
"headline": "test: comprehensive output format tests for all platform list commands",
"author_name": "Jared Mash",
"author_login": null,
"committed_at": "2026-07-16T17:10:35Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "76ca7719ef65826823c74addb237d8721f358bdc",
"body": "# [2.6.0-next.21](https://github.com/inneropen/marvin-cli/compare/v2.6.0-next.20...v2.6.0-next.21) (2026-07-16)\n\n### Bug Fixes\n\n* getOutputMode + handleCommandError across all 16 command files; fix camelCase column specs ([61d6838](https://github.com/inneropen/marvin-cli/commit/61d6838c79c9a6f93edc19d1bbd0cb1c410fffa2))",
"is_bot": false,
"headline": "chore(release): 2.6.0-next.21 [skip ci]",
"author_name": "semantic-release-bot",
"author_login": "semantic-release-bot",
"committed_at": "2026-07-16T16:44:38Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "61d6838c79c9a6f93edc19d1bbd0cb1c410fffa2",
"body": "…fix camelCase column specs\n\n- All commands now respect --json/--yaml/--csv flags via getOutputMode()\n- All commands use handleCommandError for consistent structured error output\n- Fixed snake_case column specs: eventType, webhookId, createdAt, templateType etc\n- email-templates list shows Scope as 'workspace'/'system' instead of raw groupId",
"is_bot": false,
"headline": "fix: getOutputMode + handleCommandError across all 16 command files; …",
"author_name": "Jared Mash",
"author_login": null,
"committed_at": "2026-07-16T16:44:10Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "cfba4c5313df3fca3aeb4a6d7746a1ae4d7dd5fb",
"body": "# [2.6.0-next.20](https://github.com/inneropen/marvin-cli/compare/v2.6.0-next.19...v2.6.0-next.20) (2026-07-16)\n\n### Bug Fixes\n\n* entry-types list — renderingJson/capabilitiesJson field names, add isSystem, empty when null ([ea2722c](https://github.com/inneropen/marvin-cli/commit/ea2722ca22f5dec4ad537359f310525f259cb41f))",
"is_bot": false,
"headline": "chore(release): 2.6.0-next.20 [skip ci]",
"author_name": "semantic-release-bot",
"author_login": "semantic-release-bot",
"committed_at": "2026-07-16T16:39:54Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ea2722ca22f5dec4ad537359f310525f259cb41f",
"body": "…dd isSystem, empty when null",
"is_bot": false,
"headline": "fix: entry-types list — renderingJson/capabilitiesJson field names, a…",
"author_name": "Jared Mash",
"author_login": null,
"committed_at": "2026-07-16T16:39:29Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "dd2316074895b0332178b1b6f951295ed9212130",
"body": "# [2.6.0-next.19](https://github.com/inneropen/marvin-cli/compare/v2.6.0-next.18...v2.6.0-next.19) (2026-07-16)\n\n### Bug Fixes\n\n* camelCase column specs in email-subscriptions list; default recipient_type to admins ([7b1d3d7](https://github.com/inneropen/marvin-cli/commit/7b1d3d7f6a5badbd51e283e3421e00ef8930706f))",
"is_bot": false,
"headline": "chore(release): 2.6.0-next.19 [skip ci]",
"author_name": "semantic-release-bot",
"author_login": "semantic-release-bot",
"committed_at": "2026-07-16T16:36:34Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "7b1d3d7f6a5badbd51e283e3421e00ef8930706f",
"body": "…pient_type to admins",
"is_bot": false,
"headline": "fix: camelCase column specs in email-subscriptions list; default reci…",
"author_name": "Jared Mash",
"author_login": null,
"committed_at": "2026-07-16T16:36:08Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "03d8cf066bb7ad311d3c8025f4b35762f1265f70",
"body": "# [2.6.0-next.18](https://github.com/inneropen/marvin-cli/compare/v2.6.0-next.17...v2.6.0-next.18) (2026-07-16)\n\n### Bug Fixes\n\n* machine-mode errors to stdout (json/yaml/csv all pipe cleanly to jq/yq) ([4fdd3b6](https://github.com/inneropen/marvin-cli/commit/4fdd3b6f732bda2a5a731144261b7ce899c4810a))",
"is_bot": false,
"headline": "chore(release): 2.6.0-next.18 [skip ci]",
"author_name": "semantic-release-bot",
"author_login": "semantic-release-bot",
"committed_at": "2026-07-16T16:26:56Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4fdd3b6f732bda2a5a731144261b7ce899c4810a",
"body": "… jq/yq)",
"is_bot": false,
"headline": "fix: machine-mode errors to stdout (json/yaml/csv all pipe cleanly to…",
"author_name": "Jared Mash",
"author_login": null,
"committed_at": "2026-07-16T16:26:30Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "91dd384e82a087ad2f1e3210dd7dcbe757c96c3a",
"body": "# [2.6.0-next.17](https://github.com/inneropen/marvin-cli/compare/v2.6.0-next.16...v2.6.0-next.17) (2026-07-16)\n\n### Bug Fixes\n\n* global structured error output matching --json/--yaml/--csv flags; slug normalization ([9b77358](https://github.com/inneropen/marvin-cli/commit/9b7735844a3b39b2dc8c3a1ba4\n[…]\nns, events, webhook logs, workspace import/prefs, entry-type write ops, entry collection membership ([59ec311](https://github.com/inneropen/marvin-cli/commit/59ec3110a89430952ac287dfd25e4ed43c2ffcc2))",
"is_bot": false,
"headline": "chore(release): 2.6.0-next.17 [skip ci]",
"author_name": "semantic-release-bot",
"author_login": "semantic-release-bot",
"committed_at": "2026-07-16T16:19:28Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "9b7735844a3b39b2dc8c3a1ba4af61bfb3b8da4e",
"body": "…s; slug normalization\n\n- handleCommandError: respects output format flag for ALL commands\n --json: stderr {\"error\":\"msg\",\"status\":N}\n --yaml: stderr valid YAML error block\n --csv/default: plain text or styled chalk\n- FastAPI 422 array detail rendered properly (was [object Object])\n- secrets + variables create: slug auto-normalized to UPPER_SNAKE_CASE",
"is_bot": false,
"headline": "fix: global structured error output matching --json/--yaml/--csv flag…",
"author_name": "Jared Mash",
"author_login": null,
"committed_at": "2026-07-16T16:19:03Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "650b26550d6a67f937c5dc397e5363d45c8211d8",
"body": "…ents, webhook logs, workspace import/prefs, entry-type write ops, entry collection ops\n\nNew commands:\n- secrets list/get/slugs/reveal/create/update/delete\n- variables list/get/create/update/delete\n- email-subscriptions list/get/create/delete\n- webhooks log / webhooks logs <id>\n- workspace import --\n[…]\nreferences / workspace preferences update\n- entry-types create/update/delete\n- entries collections <id> / add-to-collection / remove-from-collection\n- tasks log\n- user profile update\n- event-log types",
"is_bot": false,
"headline": "feat: fill all CLI gaps — secrets, variables, email-subscriptions, ev…",
"author_name": "Jared Mash",
"author_login": null,
"committed_at": "2026-07-16T14:53:31Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "59ec3110a89430952ac287dfd25e4ed43c2ffcc2",
"body": "…, webhook logs, workspace import/prefs, entry-type write ops, entry collection membership\n\nCo-Authored-By: Claude Sonnet 4.6 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "feat: fill CLI gaps — secrets, variables, email-subscriptions, events…",
"author_name": "Jared Mash",
"author_login": null,
"committed_at": "2026-07-16T14:49:03Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "57103e9ce543dab0b4d66a87603678240edc2ec7",
"body": "…ma type errors\n\n- health.ts: raw fetch replaced with PlatformClient.app.health()\n- email-templates.ts: snake_case keys updated to camelCase (templateType, headerText etc)\n- forms.ts: getPublishedForm/submitForm now pass workspace slug (SDK signature fix)\n- webhooks.ts: updated to match new test() response shape {message}\n- workspaces.ts: null-safe slug access for setActive/getSiteToken\n- tokens.ts: integrationId now required in createApiToken payload",
"is_bot": false,
"headline": "fix: replace raw fetch in health command with SDK AppModule; fix sche…",
"author_name": "Jared Mash",
"author_login": null,
"committed_at": "2026-07-16T14:34:51Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "75ee703ff84df65382e0e32544ce2e0f15b30af8",
"body": "- Define EntryLike, CollectionLike, ResourceLike, AssetLike interfaces\n for column specs instead of MarvinEntry/MarvinCollection etc. — allows\n CollectionEntry, Entry, PublishedCollectionSummary etc. to flow through\n without casts\n- collection <slug> now builds output from Collection class getter\n[…]\nh a Slug column\n instead of misusing entryColumns on non-entry data\n- entry <slug> uses toJSON() instead of broken Entry[] cast\n\nCo-Authored-By: Claude Sonnet 4.6 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "fix: Properly type column specs and fix collection <slug> entries shape",
"author_name": "Jared Mash",
"author_login": null,
"committed_at": "2026-07-14T23:41:05Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "bb43dc67e4b499339d8f94448927c2a3b3b0fc4a",
"body": "# [2.6.0-next.16](https://github.com/inneropen/marvin-cli/compare/v2.6.0-next.15...v2.6.0-next.16) (2026-07-14)\n\n### Bug Fixes\n\n* Render single items as table rows, not raw JSON objects ([8bf2e8b](https://github.com/inneropen/marvin-cli/commit/8bf2e8bf80c7f2ac41bb0cd414266338bceab894))",
"is_bot": false,
"headline": "chore(release): 2.6.0-next.16 [skip ci]",
"author_name": "semantic-release-bot",
"author_login": "semantic-release-bot",
"committed_at": "2026-07-14T21:38:35Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "8bf2e8bf80c7f2ac41bb0cd414266338bceab894",
"body": "collection, resource, asset single-item commands now use renderList\nwith column specs in table/CSV mode. JSON and YAML still return the\nfull object. Also fixes renderData fallthrough to console.dir which\nwas producing JSON-like output in table mode.\n\nCo-Authored-By: Claude Sonnet 4.6 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "fix: Render single items as table rows, not raw JSON objects",
"author_name": "Jared Mash",
"author_login": null,
"committed_at": "2026-07-14T21:38:13Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "3f0c52a4de4f54d5813ba41d556dc8a2635dab20",
"body": "# [2.6.0-next.15](https://github.com/inneropen/marvin-cli/compare/v2.6.0-next.14...v2.6.0-next.15) (2026-07-14)\n\n### Features\n\n* Persist apiUrl in credentials, consistent empty output across all modes ([97a27f0](https://github.com/inneropen/marvin-cli/commit/97a27f0fca9b5e00b4ecb9c2eb90c8f9d18b626e))",
"is_bot": false,
"headline": "chore(release): 2.6.0-next.15 [skip ci]",
"author_name": "semantic-release-bot",
"author_login": "semantic-release-bot",
"committed_at": "2026-07-14T21:35:24Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "97a27f0fca9b5e00b4ecb9c2eb90c8f9d18b626e",
"body": "…ll modes\n\n- Save apiUrl to ~/.marvin/credentials.json on login so marvin works\n outside any project directory without MARVIN_API_URL env var\n- --api-url flag is now read from global opts in login command\n- Empty list results: --json returns [], --yaml returns [], --csv shows\n headers only, table \n[…]\ne,\n asset, and collection commands\n- renderJson falls back to [] for undefined data (was 'undefined')\n- renderList is null-safe\n\nCo-Authored-By: Claude Sonnet 4.6 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "feat: Persist apiUrl in credentials, consistent empty output across a…",
"author_name": "Jared Mash",
"author_login": null,
"committed_at": "2026-07-14T21:34:59Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "8b88b0eaf04e21853bba5217def0880232df22bb",
"body": "# [2.6.0-next.14](https://github.com/inneropen/marvin-cli/compare/v2.6.0-next.13...v2.6.0-next.14) (2026-07-14)\n\n### Features\n\n* Auth-aware CLI — site-token login, command visibility, credential precedence ([34dce56](https://github.com/inneropen/marvin-cli/commit/34dce565073f05742d5edac2dae6437aa89bbe58))",
"is_bot": false,
"headline": "chore(release): 2.6.0-next.14 [skip ci]",
"author_name": "semantic-release-bot",
"author_login": "semantic-release-bot",
"committed_at": "2026-07-14T21:11:44Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "34dce565073f05742d5edac2dae6437aa89bbe58",
"body": "…al precedence\n\n- marvin login accepts --site-token with live validation against publish API\n- marvin logout --site-token/--all/bare for scoped credential clearing\n- marvin --help shows auth status line and hides commands based on token availability\n- workspace hidden when no user token; slug passable via --workspace or env\n- Site token precedence: CLI flag > stored credentials > env var\n\nCo-Authored-By: Claude Sonnet 4.6 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "feat: Auth-aware CLI — site-token login, command visibility, credenti…",
"author_name": "Jared Mash",
"author_login": null,
"committed_at": "2026-07-14T21:11:12Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "41b3125e71380d8e4c9dbc6b5e2f5a80fe6c6265",
"body": "# [2.6.0-next.13](https://github.com/inneropen/marvin-cli/compare/v2.6.0-next.12...v2.6.0-next.13) (2026-07-14)\n\n### Bug Fixes\n\n* Return empty array instead of [null] when slug not found ([96cdb88](https://github.com/inneropen/marvin-cli/commit/96cdb88eb5deccfb71e8875d544a6f5800ed9ece))",
"is_bot": false,
"headline": "chore(release): 2.6.0-next.13 [skip ci]",
"author_name": "semantic-release-bot",
"author_login": "semantic-release-bot",
"committed_at": "2026-07-14T04:39:37Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "96cdb88eb5deccfb71e8875d544a6f5800ed9ece",
"body": "Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>",
"is_bot": false,
"headline": "fix: Return empty array instead of [null] when slug not found",
"author_name": "Jared Mash",
"author_login": null,
"committed_at": "2026-07-14T04:38:57Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "5e44dfcd9d3852516ee3bfb0213be204fa94f05d",
"body": "Document the marvin publish renderers command with --all flag and\nisRendered filtering behavior.\n\nCo-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>",
"is_bot": false,
"headline": "docs: Add publish renderers command documentation",
"author_name": "Jared Mash",
"author_login": null,
"committed_at": "2026-07-12T22:40:18Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "2ac42242ed8521ccf93c53882e12ba9b7e26c6cd",
"body": "# [2.6.0-next.12](https://github.com/inneropen/marvin-cli/compare/v2.6.0-next.11...v2.6.0-next.12) (2026-07-12)\n\n### Bug Fixes\n\n* Update marvin-sdk dependency to next.20 with renderers rename ([fe591f6](https://github.com/inneropen/marvin-cli/commit/fe591f687e79665f6ae4728bef8d09ea9e4d8ceb))\n\n### Fe\n[…]\n875fcd1d38286c8494112cc4f43c170d))\n* Rename publish entry-types → publish renderers, add --all flag ([fdb6ba8](https://github.com/inneropen/marvin-cli/commit/fdb6ba8e040a4981cd12e9b6eadec2e7cf7594b1))",
"is_bot": false,
"headline": "chore(release): 2.6.0-next.12 [skip ci]",
"author_name": "semantic-release-bot",
"author_login": "semantic-release-bot",
"committed_at": "2026-07-12T20:29:51Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "fe591f687e79665f6ae4728bef8d09ea9e4d8ceb",
"body": "The lockfile was pinned to next.18 which lacked the renderers module.\n\nCo-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>",
"is_bot": false,
"headline": "fix: Update marvin-sdk dependency to next.20 with renderers rename",
"author_name": "Jared Mash",
"author_login": null,
"committed_at": "2026-07-12T20:29:10Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "fdb6ba8e040a4981cd12e9b6eadec2e7cf7594b1",
"body": "Command now shows only entry types with isRendered=true by default.\nUse --all to include non-rendered types. Renamed entryTypeColumns →\nrendererColumns.\n\nCo-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>",
"is_bot": false,
"headline": "feat: Rename publish entry-types → publish renderers, add --all flag",
"author_name": "Jared Mash",
"author_login": null,
"committed_at": "2026-07-12T20:18:25Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "a11126be875fcd1d38286c8494112cc4f43c170d",
"body": "Adds `marvin publish entry-types` to list entry types with rendering\ninfo via the publishing API. Updates platform entry-types list to show\nrendering and capabilities columns.\n\nCo-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>",
"is_bot": false,
"headline": "feat: Add publish entry-types command and update platform entry-types",
"author_name": "Jared Mash",
"author_login": null,
"committed_at": "2026-07-12T19:33:40Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "52ad904abd20dcb6de366a313c4a7854baaf6099",
"body": "# [2.6.0-next.11](https://github.com/inneropen/marvin-cli/compare/v2.6.0-next.10...v2.6.0-next.11) (2026-07-11)\n\n### Bug Fixes\n\n* Add null check for collection.get() return value ([d362859](https://github.com/inneropen/marvin-cli/commit/d36285996b315c7d4e18433b99cf5025853cfab7))\n\n### Features\n\n* Add workspace export command ([b6bce79](https://github.com/inneropen/marvin-cli/commit/b6bce79b592e36f556984b53d409b589604a74f8))",
"is_bot": false,
"headline": "chore(release): 2.6.0-next.11 [skip ci]",
"author_name": "semantic-release-bot",
"author_login": "semantic-release-bot",
"committed_at": "2026-07-11T21:36:06Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d36285996b315c7d4e18433b99cf5025853cfab7",
"body": "Fixes TypeScript error TS18047 after SDK update where collections.get()\ncan return null.\n\nCo-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>",
"is_bot": false,
"headline": "fix: Add null check for collection.get() return value",
"author_name": "Jared Mash",
"author_login": null,
"committed_at": "2026-07-11T21:35:38Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "b6bce79b592e36f556984b53d409b589604a74f8",
"body": "Adds 'marvin workspace export' to download workspace data as JSON.\nSupports --output <file>, --include-system-types, and --no-pretty flags.\n\nCo-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>",
"is_bot": false,
"headline": "feat: Add workspace export command",
"author_name": "Jared Mash",
"author_login": null,
"committed_at": "2026-07-11T21:35:23Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "6794a4d4d04fe9418f8bd035fa6fef143cde8c8a",
"body": "Documentation Updates:\n- Add MIGRATION.md - Comprehensive upgrade guide from v2.5.x\n- Add SECURITY.md - Security features and best practices\n- Add DOCUMENTATION_UPDATES.md - Summary of all changes\n- Update README.md - Security features, new command syntax, examples\n- Update CHANGELOG.md - Complete v\n[…]\n fixed (error messages, help text)\n\nBreaking changes, migration paths, and security improvements\nare now fully documented for v2.6.0 release.\n\nCo-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "docs: Complete v2.6.0 documentation and fix command inconsistencies",
"author_name": "Jared Mash",
"author_login": null,
"committed_at": "2026-07-11T17:29:14Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "c09312724db60e43c7b1e4de85a5348f4bcc47b7",
"body": "# [2.6.0-next.10](https://github.com/inneropen/marvin-cli/compare/v2.6.0-next.9...v2.6.0-next.10) (2026-07-11)\n\n### Bug Fixes\n\n* **quality:** Pin SDK version and add token validation (LOW priority) ([cbd1579](https://github.com/inneropen/marvin-cli/commit/cbd157941119c4fbed3ad604d4a51a41fa804fc9)), \n[…]\ninneropen/marvin-cli/issues/11) [#12](https://github.com/inneropen/marvin-cli/issues/12) [#4](https://github.com/inneropen/marvin-cli/issues/4) [#13](https://github.com/inneropen/marvin-cli/issues/13)",
"is_bot": false,
"headline": "chore(release): 2.6.0-next.10 [skip ci]",
"author_name": "semantic-release-bot",
"author_login": "semantic-release-bot",
"committed_at": "2026-07-11T17:04:54Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "5af2dcd1079d35fe9dddacc8b5b214d81e9b9ec9",
"body": "Complete documentation of security audit and remediation:\n- 17 issues identified (4 CRITICAL, 6 MEDIUM, 7 LOW)\n- 15 issues fixed (88% resolution rate)\n- Risk level: HIGH → LOW\n- Production ready\n\nFiles changed: 21 (7 new docs, 14 modified source)\nLines: +2,200 added, -70 removed\n\nExecutive summary for stakeholders and deployment checklist.\n\nCo-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "docs: Add comprehensive security audit summary",
"author_name": "Jared Mash",
"author_login": null,
"committed_at": "2026-07-11T17:04:32Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "cbd157941119c4fbed3ad604d4a51a41fa804fc9",
"body": "LOW-priority quality improvements:\n\nIssue #16: SDK dependency pinned to specific version\n- Changed from \"develop\" branch to \"^2.0.1\"\n- Provides supply chain predictability\n- Allows semver patch/minor updates\n- Works with package-lock.json\n\nIssue #17: Login token validated before saving\n- Calls clien\n[…]\n test coverage: recommendations provided\n\nFiles changed: 3 (2 modified, 1 new doc)\nResolution: 15/17 issues fixed (88%)\nFinal risk level: LOW\n\nCo-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "fix(quality): Pin SDK version and add token validation (LOW priority)",
"author_name": "Jared Mash",
"author_login": null,
"committed_at": "2026-07-11T17:00:25Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "00ab45756a53bdabe91a22813402dca076834d1c",
"body": "# [2.6.0-next.9](https://github.com/inneropen/marvin-cli/compare/v2.6.0-next.8...v2.6.0-next.9) (2026-07-11)\n\n### Bug Fixes\n\n* **security:** Add input validation and fix error handling (MEDIUM priority) ([f1cc4d6](https://github.com/inneropen/marvin-cli/commit/f1cc4d6c5c44e19047d95743ca11c80a2c3b863d))",
"is_bot": false,
"headline": "chore(release): 2.6.0-next.9 [skip ci]",
"author_name": "semantic-release-bot",
"author_login": "semantic-release-bot",
"committed_at": "2026-07-11T16:54:25Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f1cc4d6c5c44e19047d95743ca11c80a2c3b863d",
"body": "…iority)\n\nMEDIUM-priority security improvements addressing 6 vulnerabilities:\n\n1. Path validation on --file option\n - Validate file exists and is not a directory\n - Warn when reading from sensitive paths (SSH keys, credentials)\n - Prevent path traversal in automation scenarios\n\n2. Input valida\n[…]\nNew utilities:\n- src/shared/validation.ts - Comprehensive validation functions\n\nFiles changed: 9 (2 new, 7 modified)\nRisk level: MEDIUM → LOW\n\nCo-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "fix(security): Add input validation and fix error handling (MEDIUM pr…",
"author_name": "Jared Mash",
"author_login": null,
"committed_at": "2026-07-11T16:54:03Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "06199021f39389d7cf131f8202a307efa08beb27",
"body": "# [2.6.0-next.8](https://github.com/inneropen/marvin-cli/compare/v2.6.0-next.7...v2.6.0-next.8) (2026-07-11)\n\n### Bug Fixes\n\n* **security:** Eliminate critical credential exposure vulnerabilities ([a96a86a](https://github.com/inneropen/marvin-cli/commit/a96a86a4c7f4238828a14b6cbe05160daf5e0543)), closes [HI#priority](https://github.com/HI/issues/priority)",
"is_bot": false,
"headline": "chore(release): 2.6.0-next.8 [skip ci]",
"author_name": "semantic-release-bot",
"author_login": "semantic-release-bot",
"committed_at": "2026-07-11T16:46:37Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a96a86a4c7f4238828a14b6cbe05160daf5e0543",
"body": "CRITICAL security fixes addressing 4 HIGH-priority vulnerabilities:\n\n1. Password visibility in shell history\n - Removed password CLI flags from change-password command\n - Implemented secure interactive prompts with hidden input\n - Added password confirmation to prevent typos\n\n2. Token exposure\n[…]\nactively (use --from-stdin for scripts)\n\nFiles changed: 9 (3 new, 6 modified)\nRisk level: HIGH → LOW\nSecurity posture: Significantly improved\n\nCo-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "fix(security): Eliminate critical credential exposure vulnerabilities",
"author_name": "Jared Mash",
"author_login": null,
"committed_at": "2026-07-11T16:45:40Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "abb1d9281dedeac652d84c8bf7c57286be6135df",
"body": "## [2.6.1](https://github.com/inneropen/marvin-cli/compare/v2.6.0...v2.6.1) (2026-07-10)\n\n### Bug Fixes\n\n* Use PUBLISHING_TOKEN parameter name ([0acb56e](https://github.com/inneropen/marvin-cli/commit/0acb56e76a10b7b88f62f8324ef2e49f85849210))",
"is_bot": false,
"headline": "chore(release): 2.6.1 [skip ci]",
"author_name": "semantic-release-bot",
"author_login": "semantic-release-bot",
"committed_at": "2026-07-10T17:23:17Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0acb56e76a10b7b88f62f8324ef2e49f85849210",
"body": "Rename from GITHUB_TOKEN to PUBLISHING_TOKEN to avoid collision\nwith GitHub's reserved system token name.\n\nCo-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "fix: Use PUBLISHING_TOKEN parameter name",
"author_name": "Jared Mash",
"author_login": null,
"committed_at": "2026-07-10T17:22:53Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "87259d5be9a0644ee7dbab67839e592f93fba120",
"body": "# [2.6.0-next.7](https://github.com/inneropen/marvin-cli/compare/v2.6.0-next.6...v2.6.0-next.7) (2026-07-10)\n\n### Bug Fixes\n\n* Use PUBLISHING_TOKEN parameter name ([1596319](https://github.com/inneropen/marvin-cli/commit/15963195450f0f2658d169abc55b44b10dc16db5))",
"is_bot": false,
"headline": "chore(release): 2.6.0-next.7 [skip ci]",
"author_name": "semantic-release-bot",
"author_login": "semantic-release-bot",
"committed_at": "2026-07-10T17:22:42Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "15963195450f0f2658d169abc55b44b10dc16db5",
"body": "Rename from GITHUB_TOKEN to PUBLISHING_TOKEN to avoid collision\nwith GitHub's reserved system token name.\n\nCo-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "fix: Use PUBLISHING_TOKEN parameter name",
"author_name": "Jared Mash",
"author_login": null,
"committed_at": "2026-07-10T17:22:17Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "87a4827f5d06922aa5889dea743831b681f05005",
"body": "# [2.6.0-next.6](https://github.com/inneropen/marvin-cli/compare/v2.6.0-next.5...v2.6.0-next.6) (2026-07-10)\n\n### Bug Fixes\n\n* Map INNEROPEN_IO_TOKEN to GITHUB_TOKEN parameter ([7f96be8](https://github.com/inneropen/marvin-cli/commit/7f96be883566fa00ee995e02b2846d5fa0825679))",
"is_bot": false,
"headline": "chore(release): 2.6.0-next.6 [skip ci]",
"author_name": "semantic-release-bot",
"author_login": "semantic-release-bot",
"committed_at": "2026-07-10T17:17:00Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1cf235098decf42888c83b041c253c67229ed5c4",
"body": "# [2.6.0](https://github.com/inneropen/marvin-cli/compare/v2.5.7...v2.6.0) (2026-07-10)\n\n### Bug Fixes\n\n* Add npm-production environment to release workflow ([c00de05](https://github.com/inneropen/marvin-cli/commit/c00de050fc79ae71d888a7c97fb1c58d1a180a96))\n* Adding deps to develop ([8a4fb5e](https:\n[…]\narvin-cli/commit/5f199faba7dc72d8caa2800fba75f7200ade118b))\n* Apply error handling to auth commands ([ce20a21](https://github.com/inneropen/marvin-cli/commit/ce20a2194f80117b002162912289e3b84f778ca8))",
"is_bot": false,
"headline": "chore(release): 2.6.0 [skip ci]",
"author_name": "semantic-release-bot",
"author_login": "semantic-release-bot",
"committed_at": "2026-07-10T17:16:56Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "7f96be883566fa00ee995e02b2846d5fa0825679",
"body": "The reusable workflow expects GITHUB_TOKEN as a secret parameter.\nExplicitly map the org-level INNEROPEN_IO_TOKEN to this parameter\ninstead of using secrets: inherit.\n\nCo-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "fix: Map INNEROPEN_IO_TOKEN to GITHUB_TOKEN parameter",
"author_name": "Jared Mash",
"author_login": null,
"committed_at": "2026-07-10T17:16:31Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "954a7d54d5169ffd89d6049b6a2977b5a60b7163",
"body": "# [2.6.0-next.5](https://github.com/inneropen/marvin-cli/compare/v2.6.0-next.4...v2.6.0-next.5) (2026-07-10)\n\n### Features\n\n* Add automatic publishing to inneropen.io ([4170b64](https://github.com/inneropen/marvin-cli/commit/4170b6479a97daa1bd9a83145df3e7f2ce205c76))",
"is_bot": false,
"headline": "chore(release): 2.6.0-next.5 [skip ci]",
"author_name": "semantic-release-bot",
"author_login": "semantic-release-bot",
"committed_at": "2026-07-10T16:53:24Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4170b6479a97daa1bd9a83145df3e7f2ce205c76",
"body": "Add GitHub Actions workflow to automatically publish releases to the\nInnerOpen engineering site.\n\nWhen a release is published, this workflow:\n- Calls the reusable workflow in inneropen.io\n- Generates a markdown update with release details\n- Opens a pull request for human review\n- Labels it as automa\n[…]\nediting before publication and prevents duplicate posts\nfor the same version.\n\nRequires org-level secret INNEROPEN_IO_TOKEN to be configured.\n\nCo-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "feat: Add automatic publishing to inneropen.io",
"author_name": "Jared Mash",
"author_login": null,
"committed_at": "2026-07-10T16:52:42Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "c1679c213ce664066873cfbd4005951901104437",
"body": "- Add mkdocs.yml with Material theme configuration\n- Add 38 documentation files across 6 sections\n- Add Getting Started guides (installation, quickstart, configuration)\n- Add 20 command reference pages (Publishing, Platform, Admin APIs)\n- Add usage guides (filtering, scripting, pipelines, CI/CD)\n- A\n[…]\nping)\n- Add GitHub Actions workflow for auto-deployment\n- Add requirements.txt for mkdocs dependencies\n- Update package.json with docs scripts\n\nTotal: 38 Markdown files with complete CLI documentation",
"is_bot": false,
"headline": "docs: Add comprehensive mkdocs documentation structure",
"author_name": "Jared Mash",
"author_login": null,
"committed_at": "2026-07-10T14:27:01Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "9776a0f2302d7572b47cd018f95cedd3b10bdfdc",
"body": null,
"is_bot": false,
"headline": "docs: Add comprehensive mkdocs documentation structure",
"author_name": "Jared Mash",
"author_login": null,
"committed_at": "2026-07-10T14:21:12Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5a4e3d3959df4ef20b77f59d2ccbf67a28433cf8",
"body": "# [2.6.0-next.4](https://github.com/inneropen/marvin-cli/compare/v2.6.0-next.3...v2.6.0-next.4) (2026-07-10)\n\n### Bug Fixes\n\n* Adding deps to develop ([8a4fb5e](https://github.com/inneropen/marvin-cli/commit/8a4fb5ed2c35d568e4fc50b2720ab2375b865546))\n\n### Features\n\n* Add Forms module to Platform CLI\n[…]\nli/commit/d5f52bad7ec1766ef3531f6026f03945a24bb449))\n* Add scheduled-tasks commands to platform CLI ([269523b](https://github.com/inneropen/marvin-cli/commit/269523b259e6161a5df11d755194792b6dc46fa5))",
"is_bot": false,
"headline": "chore(release): 2.6.0-next.4 [skip ci]",
"author_name": "semantic-release-bot",
"author_login": "semantic-release-bot",
"committed_at": "2026-07-10T02:48:11Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "8a4fb5ed2c35d568e4fc50b2720ab2375b865546",
"body": null,
"is_bot": false,
"headline": "fix: Adding deps to develop",
"author_name": "Jared Mash",
"author_login": null,
"committed_at": "2026-07-10T02:47:32Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d5f52bad7ec1766ef3531f6026f03945a24bb449",
"body": "- Implement forms CRUD commands (list, get, create, update, delete)\n- Add submissions command to view form submissions\n- Add Publishing API commands (get-published, submit)\n- Follow existing patterns from entries/collections modules",
"is_bot": false,
"headline": "feat: Add Forms module to Platform CLI",
"author_name": "Jared Mash",
"author_login": null,
"committed_at": "2026-07-10T02:41:13Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "269523b259e6161a5df11d755194792b6dc46fa5",
"body": "- Implement 9 commands: list, get, create, update, delete, run, history, types, stats\n- Support filtering (enabled-only, failed-only)\n- Add quick enable/disable shortcuts\n- Support all output formats (table, json, yaml, csv)\n\nPart of scheduled tasks feature - CLI integration",
"is_bot": false,
"headline": "feat: Add scheduled-tasks commands to platform CLI",
"author_name": "Jared Mash",
"author_login": null,
"committed_at": "2026-07-10T02:01:02Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "85908be53637a26f0ddd9ea5b220dece4746a678",
"body": "# [2.6.0-next.3](https://github.com/inneropen/marvin-cli/compare/v2.6.0-next.2...v2.6.0-next.3) (2026-07-10)\n\n### Bug Fixes\n\n* Update email templates commands to match CLI patterns and fix type errors ([0153166](https://github.com/inneropen/marvin-cli/commit/01531668691cc60f1610c728fe46c3594b79ca96))\n\n### Features\n\n* Add email templates commands to marvin-cli ([709097b](https://github.com/inneropen/marvin-cli/commit/709097b96aa8c38f6bfd4881286fb5e646a7c65e))",
"is_bot": false,
"headline": "chore(release): 2.6.0-next.3 [skip ci]",
"author_name": "semantic-release-bot",
"author_login": "semantic-release-bot",
"committed_at": "2026-07-10T00:52:34Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "01531668691cc60f1610c728fe46c3594b79ca96",
"body": "…pe errors",
"is_bot": false,
"headline": "fix: Update email templates commands to match CLI patterns and fix ty…",
"author_name": "Jared Mash",
"author_login": null,
"committed_at": "2026-07-10T00:52:06Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "709097b96aa8c38f6bfd4881286fb5e646a7c65e",
"body": "Add complete email template management commands to the CLI platform group.\n\nCommands:\n- marvin platform email-templates list - List all templates\n- marvin platform email-templates get <id> - Get template details\n- marvin platform email-templates create - Create new template\n- marvin platform email-t\n[…]\nated into platform command group alongside other workspace resources.\nNote: CLI has pre-existing TypeScript errors to be resolved separately.\n\nCo-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "feat: Add email templates commands to marvin-cli",
"author_name": "Jared Mash",
"author_login": null,
"committed_at": "2026-07-10T00:40:44Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "532b0ce85e1df68f9e5b084061cb7fbd53abbb22",
"body": "# [2.6.0-next.2](https://github.com/inneropen/marvin-cli/compare/v2.6.0-next.1...v2.6.0-next.2) (2026-07-09)\n\n### Bug Fixes\n\n* Call toJSON() on Collection objects before rendering ([c0942e6](https://github.com/inneropen/marvin-cli/commit/c0942e6d7d5ad56dda074c0bc411bebbea2cc6e7))\n* Complete error ha\n[…]\narvin-cli/commit/728fca38ff97685bd0ebf38506d07bee1d1416ec))\n* Apply error handling to auth commands ([ce20a21](https://github.com/inneropen/marvin-cli/commit/ce20a2194f80117b002162912289e3b84f778ca8))",
"is_bot": false,
"headline": "chore(release): 2.6.0-next.2 [skip ci]",
"author_name": "semantic-release-bot",
"author_login": "semantic-release-bot",
"committed_at": "2026-07-09T02:28:40Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "42fc506af94f33baf9422c1101f38600e1ab0ff8",
"body": "The dependency value should just be \"develop\", not the full package@tag.\n\nCo-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "fix: Use correct dist-tag format in CI workflows",
"author_name": "Jared Mash",
"author_login": null,
"committed_at": "2026-07-09T02:28:17Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "eeb2909c539cb1386bf3b3cad271819c079a3ad6",
"body": "Use full package@tag format: @inneropen/marvin-sdk@develop\n\nCo-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "fix: Correct SDK dependency format in CI workflows",
"author_name": "Jared Mash",
"author_login": null,
"committed_at": "2026-07-09T02:27:58Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "f9e7c152d619a8c624fa0714ffc8f3cd22d6b87e",
"body": "Replace file dependency with @develop dist-tag in CI workflows.\nThe file:../marvin-sdk dependency only works locally where both\nrepos are checked out side-by-side.\n\nCo-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "fix: Update GitHub Actions workflows to use published SDK",
"author_name": "Jared Mash",
"author_login": null,
"committed_at": "2026-07-09T02:27:08Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "91da5ea5a129b30c2b2f482c28a3de313a3661bf",
"body": "- Import Marvin error classes from main SDK package instead of core/errors\n- Fix collection entries command to use proper column spec format\n- Display order, ID, title, status, and published date for entries\n\nCo-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "fix: Update error imports and collection entries display",
"author_name": "Jared Mash",
"author_login": null,
"committed_at": "2026-07-09T02:22:01Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "728fca38ff97685bd0ebf38506d07bee1d1416ec",
"body": "Display the order field as the first column when listing entries in a\ncollection, showing the sort_order from the collection relationship.\n\nCo-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "feat: Add order column to collection-entries command output",
"author_name": "Jared Mash",
"author_login": null,
"committed_at": "2026-07-09T02:10:08Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "1f630939e343535501162d87c52cb3d8376c4e58",
"body": "Add CLI commands:\n- marvin collections entries <id> - list entries in order\n- marvin collections reorder <id> - bulk reorder entries\n\nCo-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "feat: Add collection entries and reorder commands",
"author_name": "Jared Mash",
"author_login": null,
"committed_at": "2026-07-09T01:32:21Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "c0942e6d7d5ad56dda074c0bc411bebbea2cc6e7",
"body": "Fixed issue where 'marvin publish collection <slug>' was returning\nthe full Collection class with private MarvinHttpClient instead of\njust the collection data.\n\nChanges:\n- Call toJSON() on Collection objects before rendering\n- Applied error handler to all publish commands\n- Collections, assets, and resources now properly serialize\n\nBefore: Returns Collection { http: MarvinHttpClient {...}, ... }\nAfter: Returns clean JSON data object\n\nCo-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "fix: Call toJSON() on Collection objects before rendering",
"author_name": "Jared Mash",
"author_login": null,
"committed_at": "2026-07-09T00:19:29Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "709ebce160f8af887e022f940ee18244d5749d4f",
"body": "Replaced remaining console.error calls with handleCommandError\nfor consistent error messaging.\n\nCo-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "fix: Complete error handling migration in auth commands",
"author_name": "Jared Mash",
"author_login": null,
"committed_at": "2026-07-09T00:11:24Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "ce20a2194f80117b002162912289e3b84f778ca8",
"body": "Updated login and logout commands to use the new error handler\nfor consistent, helpful error messages across all CLI commands.\n\nCo-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "feat: Apply error handling to auth commands",
"author_name": "Jared Mash",
"author_login": null,
"committed_at": "2026-07-09T00:11:15Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "b0f154b13c04430609df410821b9c481dbd5dc65",
"body": "Created error-handler utility module with:\n- Specific handling for MarvinAuthError (401/403)\n- MarvinApiError with status code-based suggestions\n- MarvinConfigError for missing configuration\n- MarvinValidationError for input validation\n- Helpful suggestions for common errors:\n * 401: Login expired \n[…]\nes.\nErrors now show:\n ✗ Error Type (Status Code)\n Helpful error message\n Suggestions for resolution\n\nSupports DEBUG mode for stack traces.\n\nCo-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "feat: Add comprehensive error handling for CLI commands",
"author_name": "Jared Mash",
"author_login": null,
"committed_at": "2026-07-09T00:10:50Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "c53b38ad8eca2a9d0313467919b7ae737225bd6c",
"body": "- Created event-log command group with 4 subcommands:\n - list: Query events with filtering by type, entity, user, date range\n - get: Get single event by ID\n - entity: Get complete event history for an entity\n - user: Get activity history for a user\n- Added alias \"events\" for \"event-log\"\n- Integrated with EventLogModule from SDK\n- Full support for all filter parameters and pagination\n\nCo-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "feat: Add event-log commands to Platform CLI",
"author_name": "Jared Mash",
"author_login": null,
"committed_at": "2026-07-08T21:23:17Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "db2b54b600df8ba9d2627fef2e0b8a059b85ec36",
"body": "Changed @inneropen/marvin-sdk dependency from pinned version\nto 'develop' tag to automatically track latest develop branch.\n\nThis ensures CLI always uses the latest SDK features from develop.",
"is_bot": false,
"headline": "chore: Update SDK dependency to use @develop tag",
"author_name": "Jared Mash",
"author_login": null,
"committed_at": "2026-07-08T19:02:50Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "efed8ab053f716e6e710d2d7c670f18ba0d82006",
"body": "Highlights the ability to create invitation tokens with specific workspace roles (VIEWER, AUTHOR, EDITOR, ADMIN, OWNER) using the --role parameter.",
"is_bot": false,
"headline": "docs: Add workspace roles feature to README",
"author_name": "Jared Mash",
"author_login": null,
"committed_at": "2026-07-08T18:44:30Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "cb0357aa32c6840a429136133916bfbf1444fbc2",
"body": "Updated to latest SDK with workspace role support.\n\nCo-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "chore: Update SDK to 1.11.0-next.1 (develop tag)",
"author_name": "Jared Mash",
"author_login": null,
"committed_at": "2026-07-08T17:06:56Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "74cf439242229959794d276734832fe33c770c58",
"body": "Co-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "chore: Remove old publish workflow (replaced by semantic-release)",
"author_name": "Jared Mash",
"author_login": null,
"committed_at": "2026-07-08T16:52:57Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "46f8678eeef4e597934eacb4cbeaffd432ce317c",
"body": "# [2.6.0-next.1](https://github.com/inneropen/marvin-cli/compare/v2.5.7...v2.6.0-next.1) (2026-07-08)\n\n### Bug Fixes\n\n* Add npm-production environment to release workflow ([c00de05](https://github.com/inneropen/marvin-cli/commit/c00de050fc79ae71d888a7c97fb1c58d1a180a96))\n* Update Node.js version to \n[…]\n/commit/d7247ed92540196c9b529f08ca93b96ad333229f))\n\n### Features\n\n* Add semantic-release automation ([5f199fa](https://github.com/inneropen/marvin-cli/commit/5f199faba7dc72d8caa2800fba75f7200ade118b))",
"is_bot": false,
"headline": "chore(release): 2.6.0-next.1 [skip ci]",
"author_name": "semantic-release-bot",
"author_login": "semantic-release-bot",
"committed_at": "2026-07-08T16:50:52Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "c00de050fc79ae71d888a7c97fb1c58d1a180a96",
"body": "Co-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "fix: Add npm-production environment to release workflow",
"author_name": "Jared Mash",
"author_login": null,
"committed_at": "2026-07-08T16:50:16Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "d7247ed92540196c9b529f08ca93b96ad333229f",
"body": "Co-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "fix: Update Node.js version to 22.14 in release workflow",
"author_name": "Jared Mash",
"author_login": null,
"committed_at": "2026-07-08T16:45:02Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "5f199faba7dc72d8caa2800fba75f7200ade118b",
"body": "- Automatic versioning based on conventional commits\n- Publish @next tag from develop branch\n- Publish stable releases from main branch\n- Auto-generate CHANGELOG.md\n- Create GitHub releases with release notes\n\nCo-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "feat: Add semantic-release automation",
"author_name": "Jared Mash",
"author_login": null,
"committed_at": "2026-07-08T16:42:20Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "f1b9035b83fc9db4e06948f0407b6c79ce7b4e52",
"body": null,
"is_bot": false,
"headline": "2.5.7",
"author_name": "Jared Mash",
"author_login": null,
"committed_at": "2026-07-08T16:37:11Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4cfa4dcef7d0fbfa811728a5cafce7047c24ffb6",
"body": "Co-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "chore: Update SDK to 1.10.6 for workspace role support",
"author_name": "Jared Mash",
"author_login": null,
"committed_at": "2026-07-08T16:36:26Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "0f3a7bb71081ab69a428944c1df6b197ed5935d8",
"body": "- Added --role option to 'platform invites invite' command\n- Supports all workspace roles: VIEWER, AUTHOR, EDITOR, ADMIN, OWNER\n- Display workspace role in list and create outputs\n- Default role is EDITOR\n\nCo-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "feat: Add --role option to invites command",
"author_name": "Jared Mash",
"author_login": null,
"committed_at": "2026-07-08T16:29:04Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "adff6333cf952224c1caa331bce1addec31378d2",
"body": "Updates SDK to include fixed auth endpoints and registration schema.\n\nCo-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "chore: Bump to 2.5.6 with SDK 1.10.4",
"author_name": "Jared Mash",
"author_login": null,
"committed_at": "2026-07-08T15:11:32Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "4e4ab7bdf3e11e033f76b50efd5bca5497c769ed",
"body": "Updates SDK to fix invitation URL generation (now uses frontend URL).\n\nCo-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "chore: Bump to 2.5.5 with SDK 1.10.3",
"author_name": "Jared Mash",
"author_login": null,
"committed_at": "2026-07-08T14:57:11Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "057b4f77806a2e6d9e4466c865a29e733ec7775f",
"body": "Co-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "chore: Bump to 2.5.4",
"author_name": "Jared Mash",
"author_login": null,
"committed_at": "2026-07-08T14:48:40Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "ded989ce7e4ac402f612c40b00fc9b4e754d6a1b",
"body": "Fixes 'Unknown' creation date by checking both camelCase and snake_case\nfield names from API response.\n\nCo-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "fix: Handle both createdAt and created_at in invite token display",
"author_name": "Jared Mash",
"author_login": null,
"committed_at": "2026-07-08T14:48:30Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "ecd671ab5d9e63c635dc097cb8d57728f241f2ae",
"body": "Updates to marvin-sdk@next (v1.10.2) which includes invites API.\n\nCo-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "chore: Bump to 2.5.3 for SDK 1.10.2 compatibility",
"author_name": "Jared Mash",
"author_login": null,
"committed_at": "2026-07-08T14:41:09Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "579fa1687c3d9ca97c25803ec7d3398eade3d471",
"body": "New commands under 'marvin platform invites':\n- list - Show all invitation tokens\n- invite [--email] - Create token and optionally send email\n - Without --email: just shows the link to copy/paste\n - With --email: sends email and shows link as backup\n- link --token - Generate URL from existing toke\n[…]\nexample.com # Send email\n marvin platform invites list\n marvin platform invites revoke --id <id> --yes\n\nTested and working with local API.\n\nCo-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "feat: Add platform invites CLI commands",
"author_name": "Jared Mash",
"author_login": null,
"committed_at": "2026-07-08T14:27:41Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "537fcdbd312cce430b85825ed86d4786f22a14b1",
"body": "New commands under 'marvin platform invites':\n- list - Show all invitation tokens\n- create - Create a new token (shows link)\n- invite [--email] - Create token and optionally send email\n - Without --email: just shows the link to copy/paste\n - With --email: sends email and shows link as backup\n- lin\n[…]\nlatform invites invite --email user@example.com # Send email\n marvin platform invites list\n marvin platform invites revoke --id <id> --yes\n\nCo-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "feat: Add platform invites CLI commands",
"author_name": "Jared Mash",
"author_login": null,
"committed_at": "2026-07-08T14:13:39Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "6c05ab29291aa4fe89b4c0349aabdfec231a9d61",
"body": null,
"is_bot": false,
"headline": "Merge main into develop - take main version for conflicts",
"author_name": "Jared Mash",
"author_login": null,
"committed_at": "2026-07-08T08:16:32Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "7ce90ef44a76e9c18892945926afbc7035d090b3",
"body": null,
"is_bot": false,
"headline": "chore: Bump version to 2.2.2",
"author_name": "Jared Mash",
"author_login": null,
"committed_at": "2026-07-08T04:31:55Z",
"body_truncated": false,
"is_coding_agent": false
}
],
"releases_count": 26,
"commits_last_year": 148,
"latest_release_at": "2026-07-19T00:30:39Z",
"latest_release_tag": "v2.7.0",
"releases_from_tags": false,
"days_since_last_push": 0,
"active_weeks_last_year": 3,
"days_since_latest_release": 5,
"mean_days_between_releases": 0.5
},
"community": {
"has_readme": true,
"has_license": false,
"has_description": true,
"has_contributing": true,
"health_percentage": 62,
"has_issue_template": false,
"has_code_of_conduct": false,
"has_pull_request_template": false
},
"ecosystem": {
"packages": [
{
"name": "@inneropen/marvin-cli",
"exists": true,
"license": "MIT",
"keywords": [
"marvin",
"cms",
"cli",
"publishing",
"headless-cms"
],
"ecosystem": "npm",
"matches_repo": true,
"registry_url": "https://www.npmjs.com/package/@inneropen/marvin-cli",
"is_deprecated": false,
"latest_version": "2.7.0",
"repository_url": "https://github.com/inneropen/marvin-cli",
"versions_count": 47,
"total_downloads": null,
"dependents_count": null,
"deprecation_note": null,
"maintainers_count": 1,
"monthly_downloads": 6692,
"first_published_at": "2026-07-07T00:31:28.888000Z",
"latest_published_at": "2026-07-19T00:30:38.987000Z",
"latest_version_yanked": null,
"days_since_latest_publish": 5
}
]
},
"popularity": {
"forks": 0,
"stars": 0,
"watchers": 0,
"fork_history": {
"days": [],
"complete": true,
"collected": 0,
"total_forks": 0
},
"star_history": {
"days": [],
"complete": true,
"collected": 0,
"total_stars": 0,
"collected_at": null
},
"open_issues_and_prs": 0
},
"ai_readiness": {
"has_nix": false,
"example_dirs": [
"examples"
],
"has_llms_txt": false,
"has_dockerfile": false,
"has_mcp_signal": false,
"bootstrap_files": [],
"api_schema_files": [],
"has_devcontainer": false,
"typecheck_configs": [
"tsconfig.json"
],
"toolchain_manifests": [],
"largest_source_bytes": 13750,
"source_files_sampled": 67,
"oversized_source_files": 0,
"agent_instruction_files": [],
"agent_instruction_max_bytes": null
},
"dependencies": {
"manifests": [
"package.json",
"requirements.txt"
],
"advisories": {
"error": null,
"scope": "published_package",
"source": "osv",
"findings": [],
"collected": true,
"malicious": [],
"truncated": false,
"by_severity": {},
"advisory_count": 0,
"affected_count": 0,
"assessed_count": 5,
"malicious_count": 0,
"assessed_package": "npm:@inneropen/marvin-cli@2.7.0",
"unassessed_count": 0,
"direct_affected_count": 0
},
"ecosystems": [
"npm",
"pypi"
],
"dependencies": [
{
"name": "@inneropen/marvin-sdk",
"manifest": "package.json",
"ecosystem": "npm",
"version_constraint": "^3.2.0-next.23"
},
{
"name": "chalk",
"manifest": "package.json",
"ecosystem": "npm",
"version_constraint": "^5.6.2"
},
{
"name": "commander",
"manifest": "package.json",
"ecosystem": "npm",
"version_constraint": "^12.1.0"
},
{
"name": "dotenv",
"manifest": "package.json",
"ecosystem": "npm",
"version_constraint": "^16.4.5"
}
],
"all_dependencies": {
"error": "GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository",
"source": null,
"packages": [],
"collected": false,
"truncated": false,
"total_count": null,
"direct_count": null,
"indirect_count": null
}
},
"maintainership": {
"issues": {
"open_prs": 0,
"merged_prs": 1,
"open_issues": 0,
"closed_ratio": null,
"closed_issues": 0,
"closed_unmerged_prs": 0
},
"bus_factor": 1,
"bot_contributors": 0,
"top_contributors": [
{
"type": "User",
"login": "semantic-release-bot",
"commits": 26,
"avatar_url": "https://avatars.githubusercontent.com/u/32174276?v=4"
},
{
"type": "User",
"login": "jmashburn",
"commits": 7,
"avatar_url": "https://avatars.githubusercontent.com/u/231223?v=4"
}
],
"contributors_sampled": 2,
"top_contributor_share": 0.788
},
"quality_signals": {
"has_ci": true,
"has_tests": true,
"ci_workflows": [
"docs.yml",
"publish-release.yml",
"release.yml",
"test.yml"
],
"has_docs_dir": true,
"linter_configs": [],
"has_editorconfig": false,
"has_linter_config": false,
"has_precommit_config": false
},
"security_signals": {
"lockfiles": [
"package-lock.json"
],
"scorecard": {
"checks": [
{
"name": "Binary-Artifacts",
"score": 10,
"reason": "no binaries found in the repo",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#binary-artifacts"
},
{
"name": "Branch-Protection",
"score": 1,
"reason": "branch protection is not maximal on development and all release branches",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#branch-protection"
},
{
"name": "CI-Tests",
"score": 10,
"reason": "1 out of 1 merged PRs checked by a CI test -- score normalized to 10",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#ci-tests"
},
{
"name": "CII-Best-Practices",
"score": 0,
"reason": "no effort to earn an OpenSSF best practices badge detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#cii-best-practices"
},
{
"name": "Code-Review",
"score": 0,
"reason": "Found 0/2 approved changesets -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#code-review"
},
{
"name": "Contributors",
"score": 6,
"reason": "project has 2 contributing companies or organizations -- score normalized to 6",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#contributors"
},
{
"name": "Dangerous-Workflow",
"score": 10,
"reason": "no dangerous workflow patterns detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dangerous-workflow"
},
{
"name": "Dependency-Update-Tool",
"score": 0,
"reason": "no update tool detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dependency-update-tool"
},
{
"name": "Fuzzing",
"score": 0,
"reason": "project is not fuzzed",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#fuzzing"
},
{
"name": "License",
"score": 0,
"reason": "license file not detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#license"
},
{
"name": "Maintained",
"score": 0,
"reason": "project was created within the last 90 days. Please review its contents carefully",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#maintained"
},
{
"name": "Packaging",
"score": 10,
"reason": "packaging workflow detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#packaging"
},
{
"name": "Pinned-Dependencies",
"score": 1,
"reason": "dependency not pinned by hash detected -- score normalized to 1",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#pinned-dependencies"
},
{
"name": "SAST",
"score": 0,
"reason": "SAST tool is not run on all commits -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#sast"
},
{
"name": "Security-Policy",
"score": 10,
"reason": "security policy file detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#security-policy"
},
{
"name": "Signed-Releases",
"score": null,
"reason": "no releases found",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#signed-releases"
},
{
"name": "Token-Permissions",
"score": 0,
"reason": "detected GitHub workflow tokens with excessive permissions",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#token-permissions"
},
{
"name": "Vulnerabilities",
"score": 10,
"reason": "0 existing vulnerabilities detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#vulnerabilities"
}
],
"commit": "b3def4969ef40e69427fc2377777bb6bb4e24d60",
"ran_at": "2026-07-24T13:15:21Z",
"aggregate_score": 4.1,
"scorecard_version": "v5.5.0"
},
"has_codeql_workflow": false,
"has_security_policy": true,
"has_dependabot_config": false
},
"contribution_flow": {
"collected": true,
"ci_last_run_at": null,
"oldest_open_prs": [],
"last_merged_pr_at": "2026-07-19T00:30:05Z",
"ci_last_conclusion": null,
"oldest_open_issues": []
}
},
"config": {
"disabled_metrics": [],
"disabled_categories": [],
"disabled_components": {}
},
"source": {
"url": "https://github.com/InnerOpen/marvin-cli",
"host": "github.com",
"name": "marvin-cli",
"owner": "InnerOpen"
},
"metrics": {
"overall": {
"key": "overall",
"band": "moderate",
"name": "Overall health",
"note": null,
"notes": [],
"value": 58,
"inputs": {
"security": 53,
"vitality": 74,
"community": 32,
"governance": 54,
"engineering": 71
},
"components": []
},
"categories": [
{
"key": "vitality",
"band": "good",
"name": "Vitality",
"value": 74,
"weight": 0.22,
"metrics": [
{
"key": "development_activity",
"band": "moderate",
"name": "Development activity",
"note": null,
"notes": [],
"value": 56,
"inputs": {
"commits_last_year": 148,
"human_commit_share": 1,
"days_since_last_push": 0,
"active_weeks_last_year": 3
},
"components": [
{
"key": "push_recency",
"name": "Push recency",
"detail": "last push 0 days ago",
"points": 36,
"status": "met",
"details": [
{
"code": "push_recency",
"params": {
"days": 0
}
}
],
"max_points": 36
},
{
"key": "commit_cadence",
"name": "Commit cadence",
"detail": "3/52 weeks with commits",
"points": 2.1,
"status": "partial",
"details": [
{
"code": "commit_cadence_weeks",
"params": {
"weeks": 3
}
}
],
"max_points": 36
},
{
"key": "commit_volume",
"name": "Commit volume",
"detail": "148 commits in the last year",
"points": 18,
"status": "met",
"details": [
{
"code": "commits_last_year",
"params": {
"count": 148
}
}
],
"max_points": 18
},
{
"key": "openssf_scorecard_maintained",
"name": "OpenSSF Scorecard: Maintained",
"detail": "project was created within the last 90 days. Please review its contents carefully",
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
}
]
},
{
"key": "release_discipline",
"band": "excellent",
"name": "Release discipline",
"note": "Excluded from scoring (no data or not applicable): OpenSSF Scorecard: Signed-Releases. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"openssf_scorecard_signed_releases"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 100,
"inputs": {
"releases_count": 26,
"latest_release_tag": "v2.7.0",
"releases_from_tags": false,
"days_since_latest_release": 5,
"mean_days_between_releases": 0.5
},
"components": [
{
"key": "ships_releases",
"name": "Ships releases",
"detail": "26 releases published",
"points": 27,
"status": "met",
"details": [
{
"code": "releases_published",
"params": {
"count": 26
}
}
],
"max_points": 27
},
{
"key": "release_recency",
"name": "Release recency",
"detail": "latest release 5 days ago",
"points": 36,
"status": "met",
"details": [
{
"code": "release_recency",
"params": {
"days": 5
}
}
],
"max_points": 36
},
{
"key": "release_cadence",
"name": "Release cadence",
"detail": "a release every ~0.5 days",
"points": 27,
"status": "met",
"details": [
{
"code": "release_cadence",
"params": {
"gap": 0.5
}
}
],
"max_points": 27
},
{
"key": "openssf_scorecard_signed_releases",
"name": "OpenSSF Scorecard: Signed-Releases",
"detail": "no releases found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 10
}
]
},
{
"key": "abandonment",
"band": "excellent",
"name": "Abandonment",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"cap": null,
"state": "unverified",
"guards": [],
"signals": [],
"red_flag": false,
"multiplier_pct": 100,
"declared_reason": null,
"unverified_reason": "repository_too_young",
"unanswered_open_prs": null,
"unanswered_open_issues": null,
"days_since_last_merged_pr": null,
"days_since_last_human_commit": null,
"days_since_last_human_commit_is_floor": false
},
"components": [
{
"key": "project_is_still_maintained",
"name": "Project is still maintained",
"detail": "maintenance record not established from the collected data",
"points": 100,
"status": "met",
"details": [
{
"code": "abandonment_unverified",
"params": {}
}
],
"max_points": 100
}
]
}
],
"description": "Is the project alive — is code being written and are releases shipping?"
},
{
"key": "community",
"band": "at_risk",
"name": "Community & Adoption",
"value": 32,
"weight": 0.18,
"metrics": [
{
"key": "popularity",
"band": "critical",
"name": "Popularity & adoption",
"note": null,
"notes": [],
"value": 1,
"inputs": {
"forks": 0,
"stars": 0,
"watchers": 0,
"growth_state": "unverified",
"growth_factor_pct": 100,
"growth_unverified_reason": "no_history"
},
"components": [
{
"key": "stars",
"name": "Stars",
"detail": "0 stars",
"points": 0,
"status": "missed",
"details": [
{
"code": "stars",
"params": {
"count": 0
}
}
],
"max_points": 60
},
{
"key": "forks",
"name": "Forks",
"detail": "0 forks",
"points": 0,
"status": "missed",
"details": [
{
"code": "forks",
"params": {
"count": 0
}
}
],
"max_points": 25
},
{
"key": "watchers",
"name": "Watchers",
"detail": "0 watchers",
"points": 0,
"status": "missed",
"details": [
{
"code": "watchers",
"params": {
"count": 0
}
}
],
"max_points": 15
}
]
},
{
"key": "community_health",
"band": "at_risk",
"name": "Community health",
"note": null,
"notes": [],
"value": 45,
"inputs": {
"has_readme": true,
"has_license": false,
"has_contributing": true,
"has_issue_template": false,
"has_code_of_conduct": false,
"has_pull_request_template": false
},
"components": [
{
"key": "readme",
"name": "README",
"detail": null,
"points": 22.5,
"status": "met",
"details": [],
"max_points": 22.5
},
{
"key": "license",
"name": "License",
"detail": "no license file detected",
"points": 0,
"status": "missed",
"details": [
{
"code": "license_absent",
"params": {}
}
],
"max_points": 22.5
},
{
"key": "contributing_guide",
"name": "CONTRIBUTING guide",
"detail": null,
"points": 18,
"status": "met",
"details": [],
"max_points": 18
},
{
"key": "code_of_conduct",
"name": "Code of conduct",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 13.5
},
{
"key": "issue_template",
"name": "Issue template",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.2
},
{
"key": "pr_template",
"name": "PR template",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 6.3
}
]
},
{
"key": "ecosystem_adoption",
"band": "moderate",
"name": "Ecosystem adoption (downloads)",
"note": "Excluded from scoring (no data or not applicable): Registry dependents. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"registry_dependents"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 64,
"inputs": {
"packages": [
"@inneropen/marvin-cli"
],
"dependents": null,
"ecosystems": "npm",
"total_downloads": null,
"monthly_downloads": 6692
},
"components": [
{
"key": "monthly_downloads",
"name": "Monthly downloads",
"detail": "6,692 downloads/month across npm",
"points": 51,
"status": "partial",
"details": [
{
"code": "downloads_monthly",
"params": {
"count": 6692,
"ecosystems": "npm"
}
}
],
"max_points": 80
},
{
"key": "registry_dependents",
"name": "Registry dependents",
"detail": "not reported by this ecosystem",
"points": 0,
"status": "excluded",
"details": [
{
"code": "not_reported_by_this_ecosystem",
"params": {}
}
],
"max_points": 20
}
]
}
],
"description": "Does the project have users, downloads, attention, and a welcoming setup for contributors?"
},
{
"key": "governance",
"band": "moderate",
"name": "Sustainability & Governance",
"value": 54,
"weight": 0.24,
"metrics": [
{
"key": "maintainer_resilience",
"band": "critical",
"name": "Maintainer resilience (bus factor)",
"note": null,
"notes": [],
"value": 22,
"inputs": {
"bus_factor": 1,
"contributors_sampled": 2,
"top_contributor_share": 0.788
},
"components": [
{
"key": "bus_factor",
"name": "Bus factor",
"detail": "1 contributor(s) cover half of all commits",
"points": 9,
"status": "partial",
"details": [
{
"code": "bus_factor",
"params": {
"count": 1
}
}
],
"max_points": 54
},
{
"key": "commit_distribution",
"name": "Commit distribution",
"detail": "top contributor authored 79% of commits",
"points": 4.8,
"status": "partial",
"details": [
{
"code": "top_contributor_share",
"params": {
"share": 79
}
}
],
"max_points": 22.5
},
{
"key": "contributor_breadth",
"name": "Contributor breadth",
"detail": "2 contributors",
"points": 2.7,
"status": "partial",
"details": [
{
"code": "contributors_sampled",
"params": {
"count": 2
}
}
],
"max_points": 13.5
},
{
"key": "openssf_scorecard_contributors",
"name": "OpenSSF Scorecard: Contributors",
"detail": "project has 2 contributing companies or organizations -- score normalized to 6",
"points": 6,
"status": "partial",
"details": [],
"max_points": 10
}
]
},
{
"key": "responsiveness",
"band": "good",
"name": "Issue & PR responsiveness",
"note": "Excluded from scoring (no data or not applicable): Issue resolution. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"issue_resolution"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 72,
"inputs": {
"merged_prs": 1,
"open_issues": 0,
"closed_issues": 0,
"issue_closed_ratio": null,
"closed_unmerged_prs": 0
},
"components": [
{
"key": "issue_resolution",
"name": "Issue resolution",
"detail": "no issues or no data",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_issues_or_data",
"params": {}
}
],
"max_points": 46.75
},
{
"key": "pr_acceptance",
"name": "PR acceptance",
"detail": "1/1 decided PRs merged",
"points": 38.2,
"status": "met",
"details": [
{
"code": "decided_prs_merged",
"params": {
"merged": 1,
"decided": 1
}
}
],
"max_points": 38.25
},
{
"key": "openssf_scorecard_code_review",
"name": "OpenSSF Scorecard: Code-Review",
"detail": "Found 0/2 approved changesets -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
}
]
},
{
"key": "stewardship",
"band": "at_risk",
"name": "Ownership & stewardship",
"note": null,
"notes": [],
"value": 37,
"inputs": {
"followers": 0,
"owner_type": "Organization",
"is_verified": null,
"owner_login": "InnerOpen",
"public_repos": 8,
"account_age_days": 31
},
"components": [
{
"key": "ownership_backing",
"name": "Ownership backing",
"detail": "organization-owned",
"points": 30,
"status": "met",
"details": [
{
"code": "owner_organization",
"params": {}
}
],
"max_points": 30
},
{
"key": "verified_domain",
"name": "Verified domain",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 20
},
{
"key": "owner_reach",
"name": "Owner reach",
"detail": "0 followers of InnerOpen",
"points": 0,
"status": "missed",
"details": [
{
"code": "owner_followers",
"params": {
"count": 0,
"login": "InnerOpen"
}
}
],
"max_points": 25
},
{
"key": "track_record",
"name": "Track record",
"detail": "8 public repos, account ~0 yr old",
"points": 7.1,
"status": "partial",
"details": [
{
"code": "public_repos",
"params": {
"count": 8
}
},
{
"code": "account_age_years",
"params": {
"years": 0
}
}
],
"max_points": 25
}
]
},
{
"key": "package_maintenance",
"band": "excellent",
"name": "Package maintenance",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"packages": [
"@inneropen/marvin-cli"
],
"ecosystems": "npm",
"any_deprecated": false,
"min_days_since_publish": 5
},
"components": [
{
"key": "published_resolvable",
"name": "Published & resolvable",
"detail": "1 package(s) on npm",
"points": 25,
"status": "met",
"details": [
{
"code": "packages_published",
"params": {
"count": 1,
"ecosystems": "npm"
}
}
],
"max_points": 25
},
{
"key": "publish_recency",
"name": "Publish recency",
"detail": "latest publish 5 days ago",
"points": 35,
"status": "met",
"details": [
{
"code": "publish_recency",
"params": {
"days": 5
}
}
],
"max_points": 35
},
{
"key": "version_history",
"name": "Version history",
"detail": "47 published versions",
"points": 20,
"status": "met",
"details": [
{
"code": "published_versions",
"params": {
"count": 47
}
}
],
"max_points": 20
},
{
"key": "not_deprecated",
"name": "Not deprecated",
"detail": "active, not deprecated or yanked",
"points": 20,
"status": "met",
"details": [
{
"code": "package_not_deprecated",
"params": {}
}
],
"max_points": 20
}
]
}
],
"description": "Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?"
},
{
"key": "engineering",
"band": "good",
"name": "Engineering Quality",
"value": 71,
"weight": 0.2,
"metrics": [
{
"key": "engineering_practices",
"band": "moderate",
"name": "Engineering practices",
"note": null,
"notes": [],
"value": 68,
"inputs": {
"has_ci": true,
"has_tests": true,
"has_editorconfig": false,
"has_linter_config": false,
"has_precommit_config": false
},
"components": [
{
"key": "ci_workflows",
"name": "CI workflows",
"detail": "4 workflow(s)",
"points": 24,
"status": "met",
"details": [
{
"code": "ci_workflows",
"params": {
"count": 4
}
}
],
"max_points": 24
},
{
"key": "tests_present",
"name": "Tests present",
"detail": null,
"points": 24,
"status": "met",
"details": [],
"max_points": 24
},
{
"key": "linter_config",
"name": "Linter config",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 16
},
{
"key": "pre_commit_hooks",
"name": "Pre-commit hooks",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 9.6
},
{
"key": "editorconfig",
"name": ".editorconfig",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 6.4
},
{
"key": "openssf_scorecard_ci_tests",
"name": "OpenSSF Scorecard: CI-Tests",
"detail": "1 out of 1 merged PRs checked by a CI test -- score normalized to 10",
"points": 20,
"status": "met",
"details": [],
"max_points": 20
}
]
},
{
"key": "documentation",
"band": "good",
"name": "Documentation",
"note": null,
"notes": [],
"value": 75,
"inputs": {
"topics": [],
"has_wiki": true,
"homepage": null,
"has_readme": true,
"has_docs_dir": true,
"has_description": true
},
"components": [
{
"key": "readme",
"name": "README",
"detail": null,
"points": 30,
"status": "met",
"details": [],
"max_points": 30
},
{
"key": "documentation_directory",
"name": "Documentation directory",
"detail": null,
"points": 25,
"status": "met",
"details": [],
"max_points": 25
},
{
"key": "documentation_homepage_site",
"name": "Documentation / homepage site",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
},
{
"key": "repository_description",
"name": "Repository description",
"detail": null,
"points": 10,
"status": "met",
"details": [],
"max_points": 10
},
{
"key": "topics",
"name": "Topics",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
},
{
"key": "wiki",
"name": "Wiki",
"detail": null,
"points": 10,
"status": "met",
"details": [],
"max_points": 10
}
]
}
],
"description": "Are baseline engineering and documentation practices in place?"
},
{
"key": "security",
"band": "moderate",
"name": "Security",
"value": 53,
"weight": 0.16,
"metrics": [
{
"key": "security_posture",
"band": "at_risk",
"name": "Security posture",
"note": "Excluded from scoring (no data or not applicable): Signed-Releases. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"signed_releases"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 41,
"inputs": {
"source": "openssf_scorecard",
"checks_evaluated": 17,
"scorecard_version": "v5.5.0",
"checks_inconclusive": 1,
"scorecard_aggregate": 4.1
},
"components": [
{
"key": "binary_artifacts",
"name": "Binary-Artifacts",
"detail": "no binaries found in the repo",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "branch_protection",
"name": "Branch-Protection",
"detail": "branch protection is not maximal on development and all release branches",
"points": 0.8,
"status": "partial",
"details": [],
"max_points": 7.5
},
{
"key": "ci_tests",
"name": "CI-Tests",
"detail": "1 out of 1 merged PRs checked by a CI test -- score normalized to 10",
"points": 2.5,
"status": "met",
"details": [],
"max_points": 2.5
},
{
"key": "cii_best_practices",
"name": "CII-Best-Practices",
"detail": "no effort to earn an OpenSSF best practices badge detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 2.5
},
{
"key": "code_review",
"name": "Code-Review",
"detail": "Found 0/2 approved changesets -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "contributors",
"name": "Contributors",
"detail": "project has 2 contributing companies or organizations -- score normalized to 6",
"points": 1.5,
"status": "partial",
"details": [],
"max_points": 2.5
},
{
"key": "dangerous_workflow",
"name": "Dangerous-Workflow",
"detail": "no dangerous workflow patterns detected",
"points": 10,
"status": "met",
"details": [],
"max_points": 10
},
{
"key": "dependency_update_tool",
"name": "Dependency-Update-Tool",
"detail": "no update tool detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "fuzzing",
"name": "Fuzzing",
"detail": "project is not fuzzed",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "license",
"name": "License",
"detail": "license file not detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 2.5
},
{
"key": "maintained",
"name": "Maintained",
"detail": "project was created within the last 90 days. Please review its contents carefully",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "packaging",
"name": "Packaging",
"detail": "packaging workflow detected",
"points": 5,
"status": "met",
"details": [],
"max_points": 5
},
{
"key": "pinned_dependencies",
"name": "Pinned-Dependencies",
"detail": "dependency not pinned by hash detected -- score normalized to 1",
"points": 0.5,
"status": "partial",
"details": [],
"max_points": 5
},
{
"key": "sast",
"name": "SAST",
"detail": "SAST tool is not run on all commits -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "security_policy",
"name": "Security-Policy",
"detail": "security policy file detected",
"points": 5,
"status": "met",
"details": [],
"max_points": 5
},
{
"key": "signed_releases",
"name": "Signed-Releases",
"detail": "no releases found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 7.5
},
{
"key": "token_permissions",
"name": "Token-Permissions",
"detail": "detected GitHub workflow tokens with excessive permissions",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "vulnerabilities",
"name": "Vulnerabilities",
"detail": "0 existing vulnerabilities detected",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
}
]
},
{
"key": "dependency_advisories",
"band": "excellent",
"name": "Dependency advisories",
"note": "Excluded from scoring (no data or not applicable): No advisories left outstanding. Remaining weights renormalized. Matched the npm:@inneropen/marvin-cli@2.7.0 runtime dependency closure — what installing the published package pulls in — 5 packages. Reachability is not analyzed.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"no_advisories_left_outstanding"
]
}
},
{
"code": "weights_renormalized",
"params": {}
},
{
"code": "advisories_scope_published",
"params": {
"package": "npm:@inneropen/marvin-cli@2.7.0",
"assessed": 5
}
},
{
"code": "advisories_reachability",
"params": {}
}
],
"value": 100,
"inputs": {
"source": "osv",
"advisories": 0,
"affected_packages": 0,
"assessed_packages": 5,
"unassessed_packages": 0,
"affected_by_severity": "none",
"direct_affected_packages": 0
},
"components": [
{
"key": "direct_dependencies_free_of_known_advisories",
"name": "Direct dependencies free of known advisories",
"detail": "no direct dependency carries a known advisory",
"points": 35,
"status": "met",
"details": [
{
"code": "no_direct_advisories",
"params": {}
}
],
"max_points": 35
},
{
"key": "indirect_dependencies_free_of_known_advisories",
"name": "Indirect dependencies free of known advisories",
"detail": "no indirect dependency carries a known advisory",
"points": 25,
"status": "met",
"details": [
{
"code": "no_indirect_advisories",
"params": {}
}
],
"max_points": 25
},
{
"key": "no_advisories_left_outstanding",
"name": "No advisories left outstanding",
"detail": "no advisory carries a publication date",
"points": 0,
"status": "excluded",
"details": [
{
"code": "advisories_no_publication_date",
"params": {}
}
],
"max_points": 40
}
]
},
{
"key": "malicious_dependencies",
"band": "excellent",
"name": "Malicious dependencies",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"source": "osv",
"meaning": "reported as a malicious package by the OpenSSF corpus; the remedy is removal or moving off the compromised name, never an upgrade of the same artifact. Versions the registry has since pulled are listed but not scored",
"packages": [],
"red_flag": false,
"assessed_packages": 5,
"malicious_packages": 0,
"direct_malicious_packages": 0,
"withdrawn_malicious_packages": 0,
"installable_malicious_packages": 0
},
"components": [
{
"key": "no_dependency_reported_as_a_malicious_package",
"name": "No dependency reported as a malicious package",
"detail": "no dependency is reported as a malicious package",
"points": 100,
"status": "met",
"details": [
{
"code": "no_malicious_dependencies",
"params": {}
}
],
"max_points": 100
}
]
},
{
"key": "high_risk_jurisdiction_exposure",
"band": "excellent",
"name": "High-Risk Jurisdiction Exposure",
"note": "Only high-confidence self-published location evidence affects this multiplier. Ambiguous matches are review-only; country evidence is not proof of nationality, citizenship, legal registration, malicious intent, or sanctions status.",
"notes": [
{
"code": "jurisdiction_evidence_limits",
"params": {}
}
],
"value": 100,
"inputs": {
"meaning": "self-published location evidence; not nationality or citizenship",
"red_flag": false,
"exposures": [],
"policy_countries": [
"Russia",
"Iran",
"North Korea"
],
"review_only_matches": 0,
"assessed_self_published_locations": 3
},
"components": [
{
"key": "policy_exposure_multiplier",
"name": "Policy exposure multiplier",
"detail": "no confirmed policy-scope location match",
"points": 100,
"status": "met",
"details": [
{
"code": "jurisdiction_no_match",
"params": {}
}
],
"max_points": 100
}
]
}
],
"description": "Are visible security and supply-chain practices strong, with no malicious dependency and no unresolved high-risk jurisdiction exposure?"
},
{
"key": "ai_readiness",
"band": "moderate",
"name": "AI Readiness",
"value": 55,
"weight": 0,
"metrics": [
{
"key": "ai_agent_context",
"band": "at_risk",
"name": "Agent context & guidance",
"note": null,
"notes": [],
"value": 40,
"inputs": {
"has_llms_txt": false,
"legible_history_share": 0.94,
"agent_instruction_files": [],
"agent_instruction_max_bytes": null
},
"components": [
{
"key": "agent_instructions",
"name": "Agent instructions",
"detail": "no CLAUDE.md / AGENTS.md / editor rules",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_agent_instructions",
"params": {}
}
],
"max_points": 45
},
{
"key": "machine_readable_docs_llms_txt",
"name": "Machine-readable docs (llms.txt)",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
},
{
"key": "legible_commit_history",
"name": "Legible commit history",
"detail": "94 of 100 human commits state their intent (structured subject or explanatory body)",
"points": 40,
"status": "met",
"details": [
{
"code": "legible_history",
"params": {
"legible": 94,
"sampled": 100
}
}
],
"max_points": 40
}
]
},
{
"key": "ai_verify_loop",
"band": "moderate",
"name": "Verify loop (build / test / typecheck)",
"note": null,
"notes": [],
"value": 54,
"inputs": {
"has_nix": false,
"has_tests": true,
"lockfiles": [
"package-lock.json"
],
"has_dockerfile": false,
"typed_language": true,
"bootstrap_files": [],
"has_devcontainer": false,
"has_linter_config": false,
"typecheck_configs": [
"tsconfig.json"
],
"agent_commit_share": 0.47,
"toolchain_manifests": [],
"dependency_bot_commit_share": 0
},
"components": [
{
"key": "one_command_bootstrap",
"name": "One-command bootstrap",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 18
},
{
"key": "automated_tests",
"name": "Automated tests",
"detail": null,
"points": 22,
"status": "met",
"details": [],
"max_points": 22
},
{
"key": "lint_format_config",
"name": "Lint / format config",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 11
},
{
"key": "static_type_checking",
"name": "Static type checking",
"detail": "tsconfig.json",
"points": 11,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "tsconfig.json"
}
}
],
"max_points": 11
},
{
"key": "reproducible_environment",
"name": "Reproducible environment",
"detail": "lockfile",
"points": 10,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "lockfile"
}
}
],
"max_points": 10
},
{
"key": "demonstrated_agent_practice",
"name": "Demonstrated agent practice",
"detail": "47 of the last 100 commits agent-authored or agent-credited",
"points": 10,
"status": "met",
"details": [
{
"code": "agent_authored_commits",
"params": {
"count": 47,
"sampled": 100
}
}
],
"max_points": 10
},
{
"key": "automated_maintenance",
"name": "Automated maintenance",
"detail": "no automated dependency updates observed",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_dependency_automation",
"params": {}
}
],
"max_points": 8
},
{
"key": "openssf_scorecard_pinned_dependencies",
"name": "OpenSSF Scorecard: Pinned-Dependencies",
"detail": "dependency not pinned by hash detected -- score normalized to 1",
"points": 1,
"status": "partial",
"details": [],
"max_points": 10
}
]
},
{
"key": "ai_code_legibility",
"band": "excellent",
"name": "Code legibility for models",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"primary_language": "TypeScript",
"largest_source_bytes": 13750,
"source_files_sampled": 67,
"oversized_source_files": 0
},
"components": [
{
"key": "type_checkable_code",
"name": "Type-checkable code",
"detail": "TypeScript (statically typed)",
"points": 45,
"status": "met",
"details": [
{
"code": "statically_typed_language",
"params": {
"language": "TypeScript"
}
}
],
"max_points": 45
},
{
"key": "manageable_file_sizes",
"name": "Manageable file sizes",
"detail": "0/67 source files over 60KB",
"points": 55,
"status": "met",
"details": [
{
"code": "oversized_source_files",
"params": {
"kb": 60,
"sampled": 67,
"oversized": 0
}
}
],
"max_points": 55
}
]
},
{
"key": "ai_interfaces",
"band": "at_risk",
"name": "Machine-readable interfaces",
"note": null,
"notes": [],
"value": 40,
"inputs": {
"example_dirs": [
"examples"
],
"has_mcp_signal": false,
"api_schema_files": []
},
"components": [
{
"key": "api_schema_openapi_graphql_proto",
"name": "API schema (OpenAPI/GraphQL/proto)",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 40
},
{
"key": "mcp_server",
"name": "MCP server",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 20
},
{
"key": "runnable_examples",
"name": "Runnable examples",
"detail": "examples",
"points": 40,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "examples"
}
}
],
"max_points": 40
}
]
}
],
"description": "How well is the repo equipped to be developed and maintained with AI coding agents? An independent, experimental badge — weight 0.0, so it is surfaced on its own and does not affect the overall health score."
}
],
"metrics_version": "1.13.0"
},
"warnings": [
"GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository"
],
"report_type": "repository",
"generated_at": "2026-07-24T13:15:37.615701Z",
"schema_version": "0.27.0",
"badge_url": "https://raw.githubusercontent.com/inspect-software/badges/main/v1/i/InnerOpen/marvin-cli.svg",
"full_name": "InnerOpen/marvin-cli",
"license_state": "absent",
"license_spdx": null
}