公开记录
软件健康报告模式 0.27.0 · 指标 1.13.0 · 2026-07-26 01:16 UTC

OjasKord / bizfile-mcp

JavaScriptMIT★ 0 星标⑂ 0 复刻始于 2026年3月在 GitHub 上查看 ↗
#agent#aml#compliance#kyc#mcp#registry

OjasKord/bizfile-mcp 的健康指数为 100 分中的 41 分，处于「存在风险」区间。 其得分最高的类别是Vitality（75/100），最低的是AI Readiness（22/100）。 最近一次更新在 6 天前。 近期的大部分工作由 1 位贡献者完成。

41
总分 / 100
存在风险

软件健康指数

指标归入加权类别，统一采用 1–100 量表。总体分先取类别加权平均；当公开证据触发高风险司法辖区政策时，评级会按政策调整，并设置 49（有风险）的上限。AI 就绪度不计入总体分。

41
优秀85-100堪称典范；基本满足所有检验标准
良好70-84健康；仅有轻微不足
中等50-69可接受，但存在明显不足；建议进行审查
存在风险30-49存在重大薄弱环节；采用时应保持审慎
危急1-29问题严重（项目被弃置、仅有单一维护者、缺乏基本工程规范）
活力社区与采用可持续性与治理工程质量安全AI 就绪度

评分画像

每条轴代表一个类别。形状比平均值更重要——健康的对象会填满整个图形，而“一峰一谷”式画像意味着某一维度的优势正掩盖另一维度的风险。

所有权

OjasKord个人账户
0 关注者11 个公开仓库始于 2026年3月

该仓库由个人账户拥有。相较于组织支持的项目，单一所有者项目的延续性风险更高。

软件包生态系统

注册表软件包版本月下载量版本数最近发布标签
npmbizfile-mcp4.10.542,169435 天前mcpkycamlsanctionscounterpartycompliancecompanies-houseacraopensanctionsdue-diligenceb2bpayment-complianceagentic-financetrade-financevendor-verificationinvoice-compliance

按类别列示的指标

活力

项目是否仍有生命——是否仍在编写代码，是否仍在发布版本？

75良好 · 占总体的 22%

开发活跃度

75良好
评分方式
36/36推送新近度 — 最近一次推送于 6 天前
11.1/36提交节奏 — 52 周中有 16 周有提交
18/18提交量 — 最近一年 158 次提交
10/10OpenSSF Scorecard：Maintained — 30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10
所用输入
commits_last_year158
human_commit_share1
days_since_last_push6
active_weeks_last_year16

发布纪律

74良好
评分方式
27/27有发布版本 — 已发布 1 个发布版本
27/36发布时效 — 最近一次发布版本于 113 天前
12.6/27发布节奏 — 节奏未知（仅一次发布）
0/10OpenSSF Scorecard：Signed-Releases — 无数据
所用输入
releases_count1
latest_release_tagv1.3.4
releases_from_tags否
days_since_latest_release113
mean_days_between_releases—
已排除计分（无数据或不适用）：OpenSSF Scorecard：Signed-Releases。 其余权重已重新归一化。

社区与采用

项目是否拥有用户、下载量与关注度，并具备欢迎贡献者参与的配置？

32存在风险 · 占总体的 18%

流行度与采用

1危急
评分方式
0/60星标 — 0 个星标
0/25复刻 — 0 个复刻
0/15关注者 — 0 位关注者
所用输入
forks0
stars0
watchers0
growth_stateunverified
growth_factor_pct100
growth_unverified_reasonno_history

社区健康

50中等
评分方式
22.5/22.5README
22.5/22.5许可证 — 可识别的许可证（MIT）
0/18CONTRIBUTING 指南
0/13.5行为准则
0/7.2议题模板
0/6.3PR 模板
所用输入
has_readme是
has_license是
has_contributing否
has_issue_template否
has_code_of_conduct否
has_pull_request_template否

生态采用（下载量）

56中等
评分方式
44.5/80月度下载量 — npm 合计每月 2,169 次下载
0/20注册表被依赖数 — 该生态系统不报告此项
所用输入
packagesbizfile-mcp
dependents—
ecosystemsnpm
total_downloads—
monthly_downloads2,169
已排除计分（无数据或不适用）：注册表被依赖数。 其余权重已重新归一化。

可持续性与治理

项目能否在其成员之外延续——巴士系数、响应能力、由谁支持，以及软件包的维护状况？

29危急 · 占总体的 24%

维护者韧性（巴士系数）

10危急
评分方式
9/54巴士系数 — 1 位贡献者贡献了半数提交
0/22.5提交分布 — 头号贡献者编写了 100% 的提交
1.4/13.5贡献者广度 — 1 位贡献者
0/10OpenSSF Scorecard：Contributors — project has 0 contributing companies or organizations -- score normalized to 0
所用输入
bus_factor1
contributors_sampled1
top_contributor_share1

议题与 PR 响应能力

1危急
评分方式
0/46.8议题解决 — 没有议题或无数据
0/38.3PR 接受 — 没有已裁定的拉取请求或无数据
0/15OpenSSF Scorecard：Code-Review — Found 0/30 approved changesets -- score normalized to 0
所用输入
merged_prs0
open_issues0
closed_issues0
issue_closed_ratio—
closed_unmerged_prs0
已排除计分（无数据或不适用）：议题解决, PR 接受。 其余权重已重新归一化。

所有权与托管责任

23危急
评分方式
10/30所有权背书 — 个人（用户）账户
0/20已验证域名 — 不适用于个人账户
0/25所有者影响力 — OjasKord 有 0 位关注者
8.5/25既往记录 — 11 个公开仓库，账户约 0 年
所用输入
followers0
owner_typeUser
is_verified—
owner_loginOjasKord
public_repos11
account_age_days120
已排除计分（无数据或不适用）：已验证域名。 其余权重已重新归一化。

软件包维护

100优秀
评分方式
25/25已发布且可解析 — npm 上有 1 个软件包
35/35发布时效 — 最近一次发布于 5 天前
20/20版本历史 — 43 个已发布版本
20/20未被弃用 — 活跃，未被弃用或撤回
所用输入
packagesbizfile-mcp
ecosystemsnpm
any_deprecated否
min_days_since_publish5

工程质量

基础的工程与文档实践是否到位？

27危急 · 占总体的 20%

工程实践

1危急
评分方式
0/24CI 工作流
0/24存在测试
0/16Linter 配置
0/9.6Pre-commit 钩子
0/6.4.editorconfig
0/20OpenSSF Scorecard：CI-Tests — 无数据
所用输入
has_ci否
has_tests否
has_editorconfig否
has_linter_config否
has_precommit_config否
已排除计分（无数据或不适用）：OpenSSF Scorecard：CI-Tests。 其余权重已重新归一化。

文档

65中等
评分方式
30/30README
0/25文档目录
15/15文档 / 主页站点 — https://kordagencies.com
0/10仓库描述
10/10主题标签 — 6 个主题标签
10/10Wiki
所用输入
topicsagent, aml, compliance, kyc, mcp, registry
has_wiki是
homepagehttps://kordagencies.com
has_readme是
has_docs_dir否
has_description否

安全

可见的安全与供应链实践是否稳固，且不存在未解决的高风险司法辖区暴露？

38存在风险 · 占总体的 16%

安全态势

26危急
评分方式
7.5/7.5Binary-Artifacts — no binaries found in the repo
0/7.5Branch-Protection — branch protection not enabled on development/release branches
0/2.5CI-Tests — 无数据
0/2.5CII-Best-Practices — no effort to earn an OpenSSF best practices badge detected
0/7.5Code-Review — Found 0/30 approved changesets -- score normalized to 0
0/2.5Contributors — project has 0 contributing companies or organizations -- score normalized to 0
0/10Dangerous-Workflow — 无数据
0/7.5Dependency-Update-Tool — no update tool detected
0/5Fuzzing — project is not fuzzed
2.5/2.5许可证 — license file detected
7.5/7.5Maintained — 30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10
0/5Packaging — 无数据
0/5Pinned-Dependencies — 无数据
0/5SAST — no SAST tool detected
0/5Security-Policy — security policy file not detected
0/7.5Signed-Releases — 无数据
0/7.5Token-Permissions — 无数据
0/7.5Vulnerabilities — 33 existing vulnerabilities detected
所用输入
sourceopenssf_scorecard
checks_evaluated12
scorecard_versionv5.5.0
checks_inconclusive6
scorecard_aggregate2.6
已排除计分（无数据或不适用）：ci_tests, dangerous_workflow, packaging, pinned_dependencies, signed_releases, token_permissions。 其余权重已重新归一化。

依赖安全公告

88优秀
评分方式
35/35直接依赖不含已知公告 — 没有直接依赖携带已知公告
13.2/25间接依赖不含已知公告 — 1 个受影响：@hono/node-server 1.19.15 (moderate 5.9)
40/40没有长期未处理的公告 — 没有公告公开超过 90 天
所用输入
sourceosv
advisories1
affected_packages1
assessed_packages125
unassessed_packages0
affected_by_severitymoderate 1
direct_affected_packages0
比对的是 npm:bizfile-mcp@4.10.54 的运行时依赖闭包——安装已发布的软件包时真正被拉取进来的内容——共 125 个软件包。 未对可达性进行分析。

AI 就绪度

该仓库在多大程度上具备与 AI 编码代理协同开发与维护的条件？这是一枚独立的实验性徽章——权重为 0.0，因此单独呈现，不影响总体健康评分。

22危急 · 占总体的 0%

AI 代理上下文与指引

24危急
评分方式
0/45代理指令 — 没有 CLAUDE.md / AGENTS.md / 编辑器规则
0/15机器可读文档（llms.txt）
23.5/40可读的提交历史 — 100 次人类提交中有 44 次说明了意图（结构化标题或解释性正文）
所用输入
has_llms_txt否
legible_history_share0.44
agent_instruction_files—
agent_instruction_max_bytes—

验证循环（构建 / 测试 / 类型检查）

22危急
评分方式
0/18一条命令的引导启动
0/22自动化测试
0/11Lint / 格式化配置
0/11静态类型检查
10/10可复现环境 — lockfile
10/10已体现的代理实践 — 最近 100 次提交中有 26 次由代理编写或署名代理
0/8自动化维护 — 未观察到自动依赖更新
0/10OpenSSF Scorecard：Pinned-Dependencies — 无数据
所用输入
has_nix否
has_tests否
lockfilespackage-lock.json
has_dockerfile否
typed_language否
bootstrap_files—
has_devcontainer否
has_linter_config否
typecheck_configs—
agent_commit_share0.26
toolchain_manifests—
dependency_bot_commit_share0
已排除计分（无数据或不适用）：OpenSSF Scorecard：Pinned-Dependencies。 其余权重已重新归一化。

面向模型的代码可读性

18危急
评分方式
0/45可类型检查的代码 — JavaScript，未配置类型检查
18.3/55可控的文件大小 — 采样的 3 个源文件中有 2 个超过 60KB
所用输入
primary_languageJavaScript
largest_source_bytes151,733
source_files_sampled3
oversized_source_files2

机器可读接口

20危急
评分方式
0/40API 模式（OpenAPI/GraphQL/proto）
20/20MCP 服务器
0/40可运行示例
所用输入
example_dirs—
has_mcp_signal是
api_schema_files—

关键数据

0GitHub 星标
1贡献者
158最近 12 个月提交数
6距最近推送天数
1发布版本数
1巴士系数（bus factor）
0开放议题
npm软件包生态系统数

数据采集警告

  • GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository

更多细节

OpenSSF Scorecard 2.6 / 10
2.6综合

来自开源项目 OpenSSF Scorecard 的独立、工具无关的安全评估。每项检查奖励的是安全实践本身，而非特定供应商的工具。Scorecard 无法判定的检查项标记为 不适用，并从安全评分中剔除（绝不按零分计）。Scorecard v5.5.0 · 2026-07-26 01:16 UTC

10Binary-Artifactsno binaries found in the repo
0Branch-Protectionbranch protection not enabled on development/release branches
不适用CI-Testsno pull request found
0CII-Best-Practicesno effort to earn an OpenSSF best practices badge detected
0Code-ReviewFound 0/30 approved changesets -- score normalized to 0
0Contributorsproject has 0 contributing companies or organizations -- score normalized to 0
不适用Dangerous-Workflowno workflows found
0Dependency-Update-Toolno update tool detected
0Fuzzingproject is not fuzzed
10Licenselicense file detected
10Maintained30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10
不适用Packagingpackaging workflow not detected
不适用Pinned-Dependenciesno dependencies found
0SASTno SAST tool detected
0Security-Policysecurity policy file not detected
不适用Signed-Releasesno releases found
不适用Token-PermissionsNo tokens found
0Vulnerabilities33 existing vulnerabilities detected
直接依赖 4
注册表软件包版本约束清单文件
npm@anthropic-ai/sdk^0.39.0package.json
npm@modelcontextprotocol/sdk^1.10.1package.json
npmnode-fetch^3.3.2package.json
npmstripe^22.1.1package.json
全部依赖 未采集

本报告未能采集到解析后的依赖集合：GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository

依赖安全公告 1

安装 npm:bizfile-mcp@4.10.54 会引入 125 个包（直接与传递）：其中 1 个存在已知公告，0 个为直接依赖。

软件包版本关系严重程度公告数修复版本
@hono/node-server1.19.15间接中12.0.5

公告表示依赖图中记录的版本落入某条公告的受影响范围。可达性未经分析，且依赖图包含开发与测试的版本固定——某项发现可能只涉及工具链而非交付的软件。

原始 JSON 报告 机器可读
{
  "data": {
    "repo": {
      "topics": [
        "agent",
        "aml",
        "compliance",
        "kyc",
        "mcp",
        "registry"
      ],
      "is_fork": false,
      "size_kb": 5448,
      "has_wiki": true,
      "homepage": "https://kordagencies.com",
      "languages": {
        "JavaScript": 252246
      },
      "pushed_at": "2026-07-20T00:55:59Z",
      "created_at": "2026-03-28T00:42:51Z",
      "owner_type": "User",
      "updated_at": "2026-07-20T00:56:02Z",
      "description": null,
      "is_archived": false,
      "is_disabled": false,
      "license_spdx": "MIT",
      "default_branch": "main",
      "license_spdx_raw": "MIT",
      "primary_language": "JavaScript",
      "significant_languages": [
        "JavaScript"
      ]
    },
    "owner": {
      "blog": null,
      "name": null,
      "type": "User",
      "login": "OjasKord",
      "company": null,
      "location": null,
      "followers": 0,
      "avatar_url": "https://avatars.githubusercontent.com/u/271656763?v=4",
      "created_at": "2026-03-28T00:28:05Z",
      "is_verified": null,
      "public_repos": 11,
      "account_age_days": 120
    },
    "license": {
      "state": "standard",
      "spdx_id": "MIT",
      "raw_spdx": "MIT",
      "file_present": true,
      "scorecard_found": true,
      "profile_has_license": true
    },
    "activity": {
      "releases": [
        {
          "tag": "v1.3.4",
          "kind": "patch",
          "published_at": "2026-04-03T06:44:44Z"
        }
      ],
      "recent_commits": [
        {
          "oid": "4b52661c0c1113191aabb8f3a3423329d6579ef7",
          "body": null,
          "is_bot": false,
          "headline": "v4.10.54 fix redisSet Upstash env var bypass",
          "author_name": "Ojas",
          "author_login": "OjasKord",
          "committed_at": "2026-07-20T00:55:44Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "8df505165335c7bdf3c4da5d56b61490a92f86c8",
          "body": null,
          "is_bot": false,
          "headline": "fix: VERSION constant sync to 4.10.53",
          "author_name": "Ojas",
          "author_login": "OjasKord",
          "committed_at": "2026-07-01T09:30:29Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "77f97f41d45623fedb0666b3d57d2e048e19f0c6",
          "body": null,
          "is_bot": false,
          "headline": "4.10.53",
          "author_name": "Ojas",
          "author_login": "OjasKord",
          "committed_at": "2026-06-29T03:53:07Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "a31eb5a48f01ccc61c97e82f6f07bc204a84d2c6",
          "body": null,
          "is_bot": false,
          "headline": "feat: add /.well-known/glama.json ownership endpoint v4.10.52",
          "author_name": "Ojas",
          "author_login": "OjasKord",
          "committed_at": "2026-06-29T03:37:24Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "623eace6b69caa95946075240183b6cbce64dcb6",
          "body": "… France Sep 2026, Poland Feb 2026, UK MTD, AU GST)",
          "is_bot": false,
          "headline": "v4.10.51 e-invoicing mandates in tool descriptions (Belgium Jan 2026,…",
          "author_name": "Ojas",
          "author_login": "OjasKord",
          "committed_at": "2026-06-29T02:55:08Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "b40fed8cf30cadce26e604511862477c87fbec7d",
          "body": null,
          "is_bot": false,
          "headline": "4.10.50",
          "author_name": "Ojas",
          "author_login": "OjasKord",
          "committed_at": "2026-06-28T07:59:59Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "d3d1940e638652314b39c412cfdfd258a1965615",
          "body": "…ructured field (v4.10.50)\n\nCo-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix: gate email dedup, HALT_WORKFLOW agent_action, trial_extension st…",
          "author_name": "Ojas",
          "author_login": "OjasKord",
          "committed_at": "2026-06-28T07:52:51Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "f1c738a765e16cb0051ba1278292ae52e6525ef8",
          "body": null,
          "is_bot": false,
          "headline": "4.10.49",
          "author_name": "Ojas",
          "author_login": "OjasKord",
          "committed_at": "2026-06-28T07:40:43Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "ea7a72a879a153f94ecd21ae070bfd7ce6bb5cfb",
          "body": "Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "4.10.49 feat: owner key bypass for fleet owner (OWNER_KEY env var)",
          "author_name": "Ojas",
          "author_login": "OjasKord",
          "committed_at": "2026-06-28T01:26:15Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "c1c0006c01dd03b977cbe55b973e84200cd017db",
          "body": null,
          "is_bot": false,
          "headline": "4.10.48",
          "author_name": "Ojas",
          "author_login": "OjasKord",
          "committed_at": "2026-06-26T08:19:29Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "10d4e525d171564438aeaefa37a454e38494f318",
          "body": "…}) for permanent audit trail",
          "is_bot": false,
          "headline": "v4.10.48 fix: persist trial extensions to Redis (bizfile:trial:{email…",
          "author_name": "Ojas",
          "author_login": "OjasKord",
          "committed_at": "2026-06-26T08:18:00Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "5a96e4f43231d1d339294477e5a3914d034ee4af",
          "body": "…eet rollout reference\n\nTask 1 (purpose verb + required fields) confirmed already done on all 3 tools\nfrom a prior ATO optimisation pass -- no changes needed. Tasks 2-4 implemented:\ncalls_remaining (unlimited for paid keys, numeric for free tier) across all\nthree transports (HTTP POST, SSE, stdio); verdict_ttl per tool; data_source_status\nderived from existing AI-fallback and OpenSanctions-failure handling.",
          "is_bot": false,
          "headline": "v4.10.47 — calls_remaining, verdict_ttl, data_source_status fields fl…",
          "author_name": "Ojas",
          "author_login": "OjasKord",
          "committed_at": "2026-06-25T04:14:30Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "290d03270a03b90d78233626acab0608526ceb9f",
          "body": "screen_counterparty queries OpenSanctions' /match/default collection,\nwhich currently aggregates 386 sources and covers more than sanctions\n(PEPs, crime, debarment, corporate restrictions). The old 328 figure\nwas stale and mislabeled as \"sanctions lists\" specifically.",
          "is_bot": false,
          "headline": "Fix stale 328 sanctions-list figure to accurate 386 risk data sources",
          "author_name": "Ojas",
          "author_login": "OjasKord",
          "committed_at": "2026-06-25T03:54:47Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "2c66caa92f9321aef6e74386d6e3437647ecee59",
          "body": null,
          "is_bot": false,
          "headline": "chore: sync server.json version to match published npm version",
          "author_name": "Ojas",
          "author_login": "OjasKord",
          "committed_at": "2026-06-24T08:27:05Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "0ad577fc32b8d2335edb50efec2a6f43f229db90",
          "body": null,
          "is_bot": false,
          "headline": "4.10.46",
          "author_name": "Ojas",
          "author_login": "OjasKord",
          "committed_at": "2026-06-24T08:16:59Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "927cd6131b8482250d9b2b8a88aaecf6be2d1385",
          "body": "…on followups, outputSchema, accuracy fixes\n\nAdds unauthenticated /public-stats (lifetime calls, uptime %, first_deployed,\nversion) for agent orchestrators. Gate responses are now self-contained\n(server + workflow impact + upgrade path in one sentence) and detect\ncross-server operators via shared fl\n[…]\nn,\nand README -- only UK Companies House is ever called. Removed dead\njurisdiction parameter and the test.js script that tested OpenCorporates,\na data source that was never wired into the live server.",
          "is_bot": false,
          "headline": "v4.10.46 -- public-stats, fleet-wide gate improvements, trial-extensi…",
          "author_name": "Ojas",
          "author_login": "OjasKord",
          "committed_at": "2026-06-24T04:09:09Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "fcd0b90dad9c0afa832b2d29445dc734ff840ba0",
          "body": "Bump to v4.10.45. Add agentRole to smithery.yaml.",
          "is_bot": false,
          "headline": "fix: gate returns HTTP 402 (x402 standard for non-transient quota)",
          "author_name": "Ojas",
          "author_login": "OjasKord",
          "committed_at": "2026-06-23T07:24:34Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "488783f7ebf1cd244aa6bbafb8856ed78ca2d00a",
          "body": null,
          "is_bot": false,
          "headline": "feat: email notification on free tier gate hit",
          "author_name": "Ojas",
          "author_login": "OjasKord",
          "committed_at": "2026-06-20T15:06:32Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "05fccfb4c1eb73218e6c2fd298de25113e965bad",
          "body": "Add charge.refunded webhook handler: looks up the checkout session by\npayment_intent, matches the customer email against issued API keys, and\ndeletes the key from Redis and the in-memory map.\n\nCo-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat: revoke API key on Stripe refund",
          "author_name": "Ojas",
          "author_login": "OjasKord",
          "committed_at": "2026-06-18T03:12:29Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "ec2b435338b5a180e289e166e48d3610e5f28191",
          "body": null,
          "is_bot": false,
          "headline": "fix: log Resend errors; skip email send when customer email is unknown",
          "author_name": "Ojas",
          "author_login": "OjasKord",
          "committed_at": "2026-06-17T09:02:02Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "199678bb4deeb6831c50d310e7e048e45bddc687",
          "body": "… provisioning",
          "is_bot": false,
          "headline": "fix: Stripe webhook validates payment_link ID to prevent cross-server…",
          "author_name": "Ojas",
          "author_login": "OjasKord",
          "committed_at": "2026-06-17T08:52:32Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "04e4537e56826267c1dc3ee77f9c26363893695e",
          "body": "Returns mock PROCEED verdict with empty sanctions list when Smithery\nscanner user-agent detected, avoiding OpenSanctions API credit consumption.\n\nCo-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat: SmitheryBot detection on screen_counterparty",
          "author_name": "Ojas",
          "author_login": "OjasKord",
          "committed_at": "2026-06-17T07:07:45Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "64d39a295a0352d6f19f11f1db241e11753996d6",
          "body": "Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "chore: bump server.json version to 4.10.41",
          "author_name": "Ojas",
          "author_login": "OjasKord",
          "committed_at": "2026-06-16T02:17:21Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "096e3c85b28c751e57ff034fe87c6b6746693a8c",
          "body": "Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "chore: bump server.json version to 4.10.40",
          "author_name": "Ojas",
          "author_login": "OjasKord",
          "committed_at": "2026-06-16T02:15:19Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "ae5dbbe15def85b38ebcbd1718db7ba69d18b3ca",
          "body": "…, ToolRank badge\n\nCo-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat: ATO optimisation — purpose verb, usage context, required fields…",
          "author_name": "Ojas",
          "author_login": "OjasKord",
          "committed_at": "2026-06-16T01:47:21Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "dce0b149c765f9ddbf8e172a80157f76212dad3c",
          "body": "…NHANCED_DUE_DILIGENCE responses",
          "is_bot": false,
          "headline": "v4.10.38 feat: add hold_reason, retry_after, escalation_path to all E…",
          "author_name": "Ojas",
          "author_login": "OjasKord",
          "committed_at": "2026-06-15T10:05:58Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "6290968575a3a1c63ea62aa57bd598513af162fe",
          "body": "…discovery",
          "is_bot": false,
          "headline": "v4.10.37 feat: reposition tool descriptions for agentic payment rail …",
          "author_name": "Ojas",
          "author_login": "OjasKord",
          "committed_at": "2026-06-15T09:47:34Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "f698e05dcf324f1c02937dabd2ce47a0ecaaa4e8",
          "body": null,
          "is_bot": false,
          "headline": "v4.10.36 feat: server-card.json static metadata",
          "author_name": "Ojas",
          "author_login": "OjasKord",
          "committed_at": "2026-06-11T07:26:26Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "1881513d33c1f538375a5e9a7cbc38a4eda70f5c",
          "body": null,
          "is_bot": false,
          "headline": "fix: bump to v4.10.35 past existing npm publish",
          "author_name": "Ojas",
          "author_login": "OjasKord",
          "committed_at": "2026-06-11T06:51:54Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "6769cded026251026323496e866e356a7893d4c6",
          "body": null,
          "is_bot": false,
          "headline": "feat: add Smithery icon",
          "author_name": "Ojas",
          "author_login": "OjasKord",
          "committed_at": "2026-06-11T06:43:22Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "95a83118e347c24215c6378c8df34c3b3dfe95e2",
          "body": null,
          "is_bot": false,
          "headline": "v4.10.34 feat: kill switch + per-minute rate limiting",
          "author_name": "Ojas",
          "author_login": "OjasKord",
          "committed_at": "2026-06-11T03:06:44Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "f25808d1f8da12b985297abadd67af017d27408b",
          "body": null,
          "is_bot": false,
          "headline": "v4.10.33 fix: search_company alias for Smithery stale index",
          "author_name": "Ojas",
          "author_login": "OjasKord",
          "committed_at": "2026-06-11T02:23:09Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "141c2e65ba23c44c6da6fbe491fe1f64ca04ce6a",
          "body": null,
          "is_bot": false,
          "headline": "v4.10.32 fix: BEFORE trigger language + consequence-first limit error",
          "author_name": "Ojas",
          "author_login": "OjasKord",
          "committed_at": "2026-06-08T01:11:56Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "ae862284b067bd4b377099997ac28dd488b54f7a",
          "body": null,
          "is_bot": false,
          "headline": "v4.10.31 feat: Smithery score optimisation",
          "author_name": "Ojas",
          "author_login": "OjasKord",
          "committed_at": "2026-06-05T02:32:37Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "fd5a00dd94aebce47862490e4360960d920e2b21",
          "body": null,
          "is_bot": false,
          "headline": "v4.10.30 fix: fetchServerReport parses direct response format",
          "author_name": "Ojas",
          "author_login": "OjasKord",
          "committed_at": "2026-06-04T04:45:01Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "feea7a8aef46f78cd93d5e7f1ace11596df4e52d",
          "body": null,
          "is_bot": false,
          "headline": "chore: remove stray npm file",
          "author_name": "Ojas",
          "author_login": "OjasKord",
          "committed_at": "2026-06-04T04:21:54Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "a7c8104f770fcd2b4160571fa95971352e62d8f0",
          "body": "- /daily-report fetches all 8 other servers in parallel (10s timeout each)\n- Grand totals block at top of email: calls, IPs, limit hits, conversions\n- Section per server in teal; unavailable servers shown in red\n- Subject: \"Kord Agencies MCP — Daily Report {date}\"\n- JSON response: grand_totals + servers[] array\n\nCo-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "v4.10.29 feat: consolidated 9-server daily report",
          "author_name": "Ojas",
          "author_login": "OjasKord",
          "committed_at": "2026-06-04T04:21:45Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "eb283fb4db10ba5ffd3d4e1c5f05ad1f9dda2057",
          "body": null,
          "is_bot": false,
          "headline": "fix: move /daily-report before general POST handler",
          "author_name": "Ojas",
          "author_login": "OjasKord",
          "committed_at": "2026-06-04T02:44:07Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "f6bd70ff97870c047232d709c50de2234527ca29",
          "body": "- /daily-report POST endpoint: collects 24h calls, unique IPs, limit hits,\n  trial extensions, paid conversions from in-memory + Redis session log;\n  builds dark-themed HTML email and sends to ojas@kordagencies.com\n- railway.json: cron job 0 0 * * * (00:00 UTC / 08:00 SGT) fires the endpoint daily\n\nCo-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "v4.10.28 feat: daily report endpoint + 8am SGT cron",
          "author_name": "Ojas",
          "author_login": "OjasKord",
          "committed_at": "2026-06-04T02:40:59Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "f0503cd144769dfad0a4b0ebe51fa9241f2c6f38",
          "body": null,
          "is_bot": false,
          "headline": "v4.10.27 fix: free tier Redis merge fix",
          "author_name": "Ojas",
          "author_login": "OjasKord",
          "committed_at": "2026-06-03T09:37:53Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "43a3505db07531e6005761caabd3e60de1701375",
          "body": "Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "v4.10.26 feat: per-IP breakdown in stats",
          "author_name": "Ojas",
          "author_login": "OjasKord",
          "committed_at": "2026-06-03T03:00:22Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "b8b994d3881f9e97d525f390d6948f0acbdedef9",
          "body": null,
          "is_bot": false,
          "headline": "v4.10.25 feat: agent-optimised tool descriptions",
          "author_name": "Ojas",
          "author_login": "OjasKord",
          "committed_at": "2026-06-02T06:08:15Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "92ca6439489ed520260a61e9b787c23e5571ad52",
          "body": "Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "v4.10.24 feat: agentic finance trigger language in tool descriptions",
          "author_name": "Ojas",
          "author_login": "OjasKord",
          "committed_at": "2026-06-02T02:11:37Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "2229e75f5c8f0f7377f25dbbbb795a0424e608e4",
          "body": "- freeTierUsage now loaded from Redis on startup and saved to Redis on every increment — survives Railway redeploys\n- Added FREE_TIER_REDIS_KEY constant, loadFreeTierFromRedis(), saveFreeTierToRedis() helpers\n- checkAccess() IP extraction now splits x-forwarded-for on comma and trims — handles Cloudflare proxy chains correctly\n\nCo-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "v4.10.23 fix: free tier Redis persistence and IP extraction",
          "author_name": "Ojas",
          "author_login": "OjasKord",
          "committed_at": "2026-06-02T01:43:20Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "14ea4c51628507419ec2be77f35464970174b876",
          "body": "…nd trial extension\n\n- Free tier blocked response now includes value statement, structured upgrade_options, and trial_extension instructions\n- Fixed undefined PRO_UPGRADE_URL in 409 trial extension response (now 'https://kordagencies.com')\n- Added upgrade_url to trial extension success response\n\nCo-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "v4.10.22 improve: richer free tier limit error with upgrade context a…",
          "author_name": "Ojas",
          "author_login": "OjasKord",
          "committed_at": "2026-06-02T01:22:49Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "2b262a69a739f34c67dccc85706e52fef6c1aaad",
          "body": "Untrack committed node_modules/ (causing Smithery score drop to 43/100),\nstray fix/inject scripts, full.txt, and internal planning documents.\nAdd SYSTEM_PROMPT.md and MCP-*.md patterns to .gitignore.\n\nCo-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "clean: remove node_modules, stray files, and internal docs from tracking",
          "author_name": "Ojas",
          "author_login": "OjasKord",
          "committed_at": "2026-05-25T05:35:38Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "52f5bb2a83e01f2c49b022e9b07a11ca22473149",
          "body": "Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "v4.10.21 fix: internal API key plan support for sanctions screening",
          "author_name": "Ojas",
          "author_login": "OjasKord",
          "committed_at": "2026-05-25T04:39:54Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "15b987e334dfa5f2b104c7ee4a704d725607b001",
          "body": "- redisSet rewritten to use GET /set/{key}/{value} URL format (correct Upstash REST API)\n- redisGet, redisExpire, redisKeys now log data.error from Upstash response body\n- Previous POST body format was silently rejected by Upstash, causing all session log writes to fail\n\nCo-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "v4.10.19 fix: Upstash REST format and Redis response error logging",
          "author_name": "Ojas",
          "author_login": "OjasKord",
          "committed_at": "2026-05-21T08:54:39Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "19f3bc54969164400737c4e5520a1a918ce0cd4c",
          "body": "- redisSet and redisExpire empty catches now log via console.error\n- appendSessionLog body wrapped in try-catch with console.error\n- Both appendSessionLog call sites: .catch now logs instead of silently swallowing\n- IP extraction uses rawIp.split(',')[0].trim() to take only the first forwarded IP\n- Startup warning via console.error if UPSTASH_REDIS_REST_URL or UPSTASH_REDIS_REST_TOKEN not set\n\nCo-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "v4.10.18 fix: session logging silent failure and IP extraction bugs",
          "author_name": "Ojas",
          "author_login": "OjasKord",
          "committed_at": "2026-05-21T08:40:13Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "95c84851c92f5885faf0f5cbd39535f5b8f7a38d",
          "body": null,
          "is_bot": false,
          "headline": "4.10.17 feat: session co-occurrence logging",
          "author_name": "Ojas",
          "author_login": "OjasKord",
          "committed_at": "2026-05-11T07:33:20Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "a3b3ee2196510e43b03c3d61b3839d034e8a7c3a",
          "body": "…dual options\n\nCo-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "v4.10.16 billing: Redis key storage, monthly reset, metered billing, …",
          "author_name": "Ojas",
          "author_login": "OjasKord",
          "committed_at": "2026-05-08T10:14:10Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "66897acd9256b146338d47af2063f914f7ef9968",
          "body": null,
          "is_bot": false,
          "headline": "add glama.json with live remote endpoint for Glama connector listing",
          "author_name": "Ojas",
          "author_login": "OjasKord",
          "committed_at": "2026-05-08T02:21:22Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "7caa4979c1f4c64a217fc0e2bcdf7a14594e8e0f",
          "body": "Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "v4.10.15 update server.json and VERSION to 4.10.15",
          "author_name": "Ojas",
          "author_login": "OjasKord",
          "committed_at": "2026-05-08T02:00:45Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "9a8012c836ab6832e7232a0ae30074466ba6e472",
          "body": "Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "v4.10.14 update server.json version",
          "author_name": "Ojas",
          "author_login": "OjasKord",
          "committed_at": "2026-05-08T01:58:57Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "808c91cefc9c9b22d8c4179cf53649422084a5aa",
          "body": "Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "v4.10.14 discovery rewrite: tool descriptions, README, smithery.yaml",
          "author_name": "Ojas",
          "author_login": "OjasKord",
          "committed_at": "2026-05-08T01:58:35Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "ec86ede12026fe5ffbdd3af480b712eb842bf4cd",
          "body": null,
          "is_bot": false,
          "headline": "v4.10.13 registry: update server.json version to 4.10.13",
          "author_name": "Ojas",
          "author_login": "OjasKord",
          "committed_at": "2026-05-07T03:32:24Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "55ed381c5ee8501ab019dcea211f1bb1311fc001",
          "body": null,
          "is_bot": false,
          "headline": "v4.10.13 update server.json to npm version 4.10.9",
          "author_name": "Ojas",
          "author_login": "OjasKord",
          "committed_at": "2026-05-07T03:20:29Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "ed67077768028605e96027e2fdb775ccf584ecf4",
          "body": null,
          "is_bot": false,
          "headline": "v4.10.13 docs: harness config blocks + registry description update",
          "author_name": "Ojas",
          "author_login": "OjasKord",
          "committed_at": "2026-05-07T02:58:43Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "16ff35049493681a06d5c7a143bd0180054484dc",
          "body": null,
          "is_bot": false,
          "headline": "v4.10.12 fix VERSION constant",
          "author_name": "Ojas",
          "author_login": "OjasKord",
          "committed_at": "2026-05-07T02:33:24Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "6e07bbf247a1074b0b9d48a944363a53a56edff8",
          "body": null,
          "is_bot": false,
          "headline": "v4.10.12 add document-integrity-validator-mcp to dashboard",
          "author_name": "Ojas",
          "author_login": "OjasKord",
          "committed_at": "2026-05-06T14:03:40Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "4c6f29ca36503667f1a2fc2b9eacea0e501fa8f9",
          "body": "Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix: _upgrade_note denominator shows 30 after trial extension, not 20",
          "author_name": "Ojas",
          "author_login": "OjasKord",
          "committed_at": "2026-05-05T04:16:56Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "3dd8633ff919ab0a24e2f1d6f74d15be9754ef29",
          "body": "…y requests",
          "is_bot": false,
          "headline": "v4.10.10 fix: free tier gate applies to tool calls only, not discover…",
          "author_name": "Ojas",
          "author_login": "OjasKord",
          "committed_at": "2026-05-05T03:10:37Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "54fe377be5fca85d2fdbae9da0ce3b0e8bd14a83",
          "body": null,
          "is_bot": false,
          "headline": "add Harness Integration section to README",
          "author_name": "Ojas",
          "author_login": "OjasKord",
          "committed_at": "2026-05-05T02:56:06Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "2508ffbbeece60c7e69d43ecc5c23a695afcc49e",
          "body": null,
          "is_bot": false,
          "headline": "4.10.8",
          "author_name": "Ojas",
          "author_login": "OjasKord",
          "committed_at": "2026-05-04T04:57:13Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "b16e4e9a0d6e6103541516c692560b349081a2d1",
          "body": null,
          "is_bot": false,
          "headline": "add quantum-suitability-validator-mcp panel to dashboard",
          "author_name": "Ojas",
          "author_login": "OjasKord",
          "committed_at": "2026-05-04T02:58:47Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "3b2967ee9adfe1ed8f8eaffc49541ed9a182c1ed",
          "body": "- Add API_KEYS_FILE + saveApiKeys/loadApiKeys so paid keys survive redeploys\n- Add getMonthKey(ip) and use ip:YYYY-MM compound key in freeTierUsage\n- Fix freeUniqueIPs stat to deduplicate by splitting on ':'\n- Fix partial response gating to use getMonthKey\n- Bump to v4.10.8",
          "is_bot": false,
          "headline": "housekeeping: paid key persistence + monthly free tier reset",
          "author_name": "Ojas",
          "author_login": "OjasKord",
          "committed_at": "2026-05-03T09:49:28Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "b24f8873ad5c4f0d3439b848a5598b9a99feac1b",
          "body": null,
          "is_bot": false,
          "headline": "fix: update README pricing to prepaid bundles",
          "author_name": "Ojas",
          "author_login": "OjasKord",
          "committed_at": "2026-05-02T12:16:04Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "cdbcd5b64ef5bc6fba1dedc550f2e6de70d15283",
          "body": null,
          "is_bot": false,
          "headline": "chore: bump package.json version to 4.10.7",
          "author_name": "Ojas",
          "author_login": "OjasKord",
          "committed_at": "2026-05-02T11:34:49Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "1e4f69cf72ace0a43513d5a32cd1187f20c63239",
          "body": "Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "chore: budget ledger + idempotency + error improvements",
          "author_name": "Ojas",
          "author_login": "OjasKord",
          "committed_at": "2026-05-02T00:07:55Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "1a8f935f4bc77bac07ea23aaa24e4c5ee5b25384",
          "body": "Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix VERSION constant to 4.10.6 -- missed in version bump commit",
          "author_name": "Ojas",
          "author_login": "OjasKord",
          "committed_at": "2026-05-01T23:35:15Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "ffbb32179977e56ad1f13b4bc5a443b1daba27fc",
          "body": null,
          "is_bot": false,
          "headline": "add Smithery badge to README",
          "author_name": "Ojas",
          "author_login": "OjasKord",
          "committed_at": "2026-04-29T23:08:48Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "8da96319e2fb5ef48e3111949b408ea9ba5a9837",
          "body": null,
          "is_bot": false,
          "headline": "4.10.6",
          "author_name": "Ojas",
          "author_login": "OjasKord",
          "committed_at": "2026-04-29T23:01:13Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "0fd54837b57807fd107cff010f608a2306b79bd7",
          "body": null,
          "is_bot": false,
          "headline": "remove stray files from repo",
          "author_name": "Ojas",
          "author_login": "OjasKord",
          "committed_at": "2026-04-29T23:01:08Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "8c63221d545212e63f64dad4f4b2b0b947909243",
          "body": "…tories URL",
          "is_bot": false,
          "headline": "v4.10.6 add Smithery Connect links to all server panels and fix Direc…",
          "author_name": "Ojas",
          "author_login": "OjasKord",
          "committed_at": "2026-04-29T23:00:09Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "db72374beb6726e8e58454da455acc49e295d950",
          "body": null,
          "is_bot": false,
          "headline": "v4.10.5 -- bump server.json version",
          "author_name": "Ojas",
          "author_login": "OjasKord",
          "committed_at": "2026-04-28T01:00:32Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "3e95df97e8d132456b817051129e11e0aec08a4d",
          "body": "PRO_UPGRADE_URL and ENTERPRISE_UPGRADE_URL constants added.\nFree tier limit errors now direct agents to prepaid bundle links\n(500 calls for $20, calls never expire) instead of kordagencies.com.\n\nCo-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "v4.10.5 -- update payment links to prepaid bundle URLs",
          "author_name": "Ojas",
          "author_login": "OjasKord",
          "committed_at": "2026-04-28T00:53:44Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "4471bf948580779b7da0c0ab640654c0c3fccf9e",
          "body": null,
          "is_bot": false,
          "headline": "add MIT license",
          "author_name": "Ojas",
          "author_login": "OjasKord",
          "committed_at": "2026-04-28T00:19:52Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "3c9333d6eb618f8a7c819023b91c197cc012f4b9",
          "body": "…validate_counterparty_lite",
          "is_bot": false,
          "headline": "v4.10.4 budget-aware: token_count, /ready endpoint, enhanced errors, …",
          "author_name": "Ojas",
          "author_login": "OjasKord",
          "committed_at": "2026-04-26T16:18:15Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "26d56a1b52df39a03305e897da008a918779318a",
          "body": "…temPrompt",
          "is_bot": false,
          "headline": "v4.10.3 Smithery metadata fix -- correct tool names, description, sys…",
          "author_name": "Ojas",
          "author_login": "OjasKord",
          "committed_at": "2026-04-26T06:07:47Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "9dffeef3402f8c97f005f6bb6dcb27221e96e692",
          "body": null,
          "is_bot": false,
          "headline": "v4.10.3 -- TCO description rewrite for both tools and serverInfo",
          "author_name": "Ojas",
          "author_login": "OjasKord",
          "committed_at": "2026-04-26T01:03:41Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "ac900ea436d2c5e731be6c981728e2223d43bd3b",
          "body": "- const VERSION = '4.10.2' -- single source of truth for all version fields\n- setupStdio() added -- enables Claude Desktop / npm stdio transport\n- SSE initialize capabilities: adds resources: {} and prompts: {}\n- SSE handler: adds resources/list and prompts/list cases\n- /.well-known/mcp/server-card.\n[…]\nion added to all error responses (timeout, not-found, access-denied, unknown-tool)\n- All initialize serverInfo now includes description field\n\nCo-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "v4.10.2: VERSION constant, stdio transport, SSE fixes, agent_action",
          "author_name": "Ojas",
          "author_login": "OjasKord",
          "committed_at": "2026-04-25T12:40:27Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "a1166323cf7c6ff17c7d6cea57d8baf8013159d1",
          "body": "… (hs-code-classifier)",
          "is_bot": false,
          "headline": "fix: checkServerTools branches on Content-Type for plain-JSON servers…",
          "author_name": "Ojas",
          "author_login": "OjasKord",
          "committed_at": "2026-04-24T08:06:16Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "7edc4e6b52702a51fb69752cfcb39452346c0b00",
          "body": null,
          "is_bot": false,
          "headline": "dashboard: fix HS Code tools/list path to /mcp",
          "author_name": "Ojas",
          "author_login": "OjasKord",
          "committed_at": "2026-04-24T07:56:30Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "1f31c8bbbdf081c1c5efcf881a3302545499882e",
          "body": null,
          "is_bot": false,
          "headline": "dashboard: fix tools/list for both old JS and new TS servers",
          "author_name": "Ojas",
          "author_login": "OjasKord",
          "committed_at": "2026-04-24T07:54:41Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "2da8d09ac702a0b6a7cf83896ce09f6401b53951",
          "body": null,
          "is_bot": false,
          "headline": "dashboard: final fix - add url-safety and hs-code to SERVERS array",
          "author_name": "Ojas",
          "author_login": "OjasKord",
          "committed_at": "2026-04-24T07:53:03Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "a48c4b48fb88a5dc7673d6cfce9488964e52abb0",
          "body": null,
          "is_bot": false,
          "headline": "dashboard: fix tools/list Accept header and HS deps array format",
          "author_name": "Ojas",
          "author_login": "OjasKord",
          "committed_at": "2026-04-24T07:36:24Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "dc6b14f1885fc7f6789b9e9936b8367ba6e48ccb",
          "body": null,
          "is_bot": false,
          "headline": "dashboard: fix syntax error in hs deps block",
          "author_name": "Ojas",
          "author_login": "OjasKord",
          "committed_at": "2026-04-24T07:32:45Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "5f030e051b8c51148f56448734cede0ce0a5cf94",
          "body": null,
          "is_bot": false,
          "headline": "dashboard: add url-safety-validator and hs-code-classifier panels",
          "author_name": "Ojas",
          "author_login": "OjasKord",
          "committed_at": "2026-04-24T07:29:01Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "f1557e17c92430e6d961a3f3e65574a247f79823",
          "body": null,
          "is_bot": false,
          "headline": "v4.10.1 fix npmignore, clean publish",
          "author_name": "Ojas",
          "author_login": "OjasKord",
          "committed_at": "2026-04-23T07:54:52Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "68c9feafb40e5b72222f15f35af6472ef326cad9",
          "body": null,
          "is_bot": false,
          "headline": "4.10.1",
          "author_name": "Ojas",
          "author_login": "OjasKord",
          "committed_at": "2026-04-23T07:54:30Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "a7daf3b446a02fd7af01686e3c6c92bf04ed9af3",
          "body": null,
          "is_bot": false,
          "headline": "v4.10.1 clean repo, update gitignore, remove stray files",
          "author_name": "Ojas",
          "author_login": "OjasKord",
          "committed_at": "2026-04-23T07:54:23Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "3f506dbea3b9f3d5ac9b7a3b705fbfdb4fe0ca05",
          "body": null,
          "is_bot": false,
          "headline": "v4.10.1 improve tool descriptions for agent discoverability",
          "author_name": "Ojas",
          "author_login": "OjasKord",
          "committed_at": "2026-04-23T07:53:19Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "ef5c54c3035f03858eda53f9e398cff57acdfd5a",
          "body": null,
          "is_bot": false,
          "headline": "publish to official MCP registry v4.10.0",
          "author_name": "Ojas",
          "author_login": "OjasKord",
          "committed_at": "2026-04-23T06:27:17Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "053278d99fe08e57f3f4e1ca819485de45f922cc",
          "body": null,
          "is_bot": false,
          "headline": "fix server.json: version sync to 4.10.0, add websiteUrl",
          "author_name": "Ojas",
          "author_login": "OjasKord",
          "committed_at": "2026-04-23T06:04:10Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "d6100761a147aad72a067a2285523826414dff89",
          "body": null,
          "is_bot": false,
          "headline": "fix package.json: version sync, keywords, bugs, engines, author",
          "author_name": "Ojas",
          "author_login": "OjasKord",
          "committed_at": "2026-04-23T05:35:25Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "a934180fd8d1f77163699c96c8005fef81103bec",
          "body": null,
          "is_bot": false,
          "headline": "v4.10.1 dashboard: fix DCC in SERVERS array",
          "author_name": "Ojas",
          "author_login": "OjasKord",
          "committed_at": "2026-04-22T02:04:45Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "e026142bd10a6bc73a431d5755b96e2c0113aba9",
          "body": null,
          "is_bot": false,
          "headline": "v4.10.1 dashboard: add data-compliance-mcp panel",
          "author_name": "Ojas",
          "author_login": "OjasKord",
          "committed_at": "2026-04-22T01:48:55Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "9f65583b5fc895be3dff8420d2bbf6ee2be48668",
          "body": null,
          "is_bot": false,
          "headline": "fix: correct sseClients declaration placement",
          "author_name": "Ojas",
          "author_login": "OjasKord",
          "committed_at": "2026-04-20T07:15:40Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "a9acf4899a9617721cee5e026e49e61fe7b3095a",
          "body": null,
          "is_bot": false,
          "headline": "feat: add SSE transport for n8n compatibility",
          "author_name": "Ojas",
          "author_login": "OjasKord",
          "committed_at": "2026-04-20T07:10:02Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "d5778db164eb4c734d36d2c8c69dca139539a7c4",
          "body": null,
          "is_bot": false,
          "headline": "fix: webhook badge shows secured when signature verification active",
          "author_name": "Ojas",
          "author_login": "OjasKord",
          "committed_at": "2026-04-20T02:49:54Z",
          "body_truncated": false,
          "is_coding_agent": false
        }
      ],
      "releases_count": 1,
      "commits_last_year": 158,
      "latest_release_at": "2026-04-03T06:44:44Z",
      "latest_release_tag": "v1.3.4",
      "releases_from_tags": false,
      "days_since_last_push": 6,
      "active_weeks_last_year": 16,
      "days_since_latest_release": 113,
      "mean_days_between_releases": null
    },
    "community": {
      "has_readme": true,
      "has_license": true,
      "has_description": false,
      "has_contributing": false,
      "health_percentage": 28,
      "has_issue_template": false,
      "has_code_of_conduct": false,
      "has_pull_request_template": false
    },
    "ecosystem": {
      "packages": [
        {
          "name": "bizfile-mcp",
          "exists": true,
          "license": "MIT",
          "keywords": [
            "mcp",
            "kyc",
            "aml",
            "sanctions",
            "counterparty",
            "compliance",
            "companies-house",
            "acra",
            "opensanctions",
            "due-diligence",
            "b2b",
            "payment-compliance",
            "agentic-finance",
            "trade-finance",
            "vendor-verification",
            "invoice-compliance"
          ],
          "ecosystem": "npm",
          "matches_repo": true,
          "registry_url": "https://www.npmjs.com/package/bizfile-mcp",
          "is_deprecated": false,
          "latest_version": "4.10.54",
          "repository_url": "https://github.com/OjasKord/bizfile-mcp",
          "versions_count": 43,
          "total_downloads": null,
          "dependents_count": null,
          "deprecation_note": null,
          "maintainers_count": 1,
          "monthly_downloads": 2169,
          "first_published_at": "2026-03-30T10:16:52.653000Z",
          "latest_published_at": "2026-07-20T01:23:41.965000Z",
          "latest_version_yanked": null,
          "days_since_latest_publish": 5
        }
      ]
    },
    "popularity": {
      "forks": 0,
      "stars": 0,
      "watchers": 0,
      "fork_history": {
        "days": [],
        "complete": true,
        "collected": 0,
        "total_forks": 0
      },
      "star_history": {
        "days": [],
        "complete": true,
        "collected": 0,
        "total_stars": 0,
        "collected_at": null
      },
      "open_issues_and_prs": 0
    },
    "ai_readiness": {
      "has_nix": false,
      "example_dirs": [],
      "has_llms_txt": false,
      "has_dockerfile": false,
      "has_mcp_signal": true,
      "bootstrap_files": [],
      "api_schema_files": [],
      "has_devcontainer": false,
      "typecheck_configs": [],
      "toolchain_manifests": [],
      "largest_source_bytes": 151733,
      "source_files_sampled": 3,
      "oversized_source_files": 2,
      "agent_instruction_files": [],
      "agent_instruction_max_bytes": null
    },
    "dependencies": {
      "manifests": [
        "package.json"
      ],
      "advisories": {
        "error": null,
        "scope": "published_package",
        "source": "osv",
        "findings": [
          {
            "name": "@hono/node-server",
            "direct": false,
            "version": "1.19.15",
            "severity": "moderate",
            "ecosystem": "npm",
            "cvss_score": 5.9,
            "advisory_ids": [
              "GHSA-frvp-7c67-39w9"
            ],
            "fixed_version": "2.0.5",
            "advisory_count": 1,
            "oldest_advisory_days": 4
          }
        ],
        "collected": true,
        "malicious": [],
        "truncated": false,
        "by_severity": {
          "moderate": 1
        },
        "advisory_count": 1,
        "affected_count": 1,
        "assessed_count": 125,
        "malicious_count": 0,
        "assessed_package": "npm:bizfile-mcp@4.10.54",
        "unassessed_count": 0,
        "direct_affected_count": 0
      },
      "ecosystems": [
        "npm"
      ],
      "dependencies": [
        {
          "name": "@anthropic-ai/sdk",
          "manifest": "package.json",
          "ecosystem": "npm",
          "version_constraint": "^0.39.0"
        },
        {
          "name": "@modelcontextprotocol/sdk",
          "manifest": "package.json",
          "ecosystem": "npm",
          "version_constraint": "^1.10.1"
        },
        {
          "name": "node-fetch",
          "manifest": "package.json",
          "ecosystem": "npm",
          "version_constraint": "^3.3.2"
        },
        {
          "name": "stripe",
          "manifest": "package.json",
          "ecosystem": "npm",
          "version_constraint": "^22.1.1"
        }
      ],
      "all_dependencies": {
        "error": "GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository",
        "source": null,
        "packages": [],
        "collected": false,
        "truncated": false,
        "total_count": null,
        "direct_count": null,
        "indirect_count": null
      }
    },
    "maintainership": {
      "issues": {
        "open_prs": 0,
        "merged_prs": 0,
        "open_issues": 0,
        "closed_ratio": null,
        "closed_issues": 0,
        "closed_unmerged_prs": 0
      },
      "bus_factor": 1,
      "bot_contributors": 0,
      "top_contributors": [
        {
          "type": "User",
          "login": "OjasKord",
          "commits": 158,
          "avatar_url": "https://avatars.githubusercontent.com/u/271656763?v=4"
        }
      ],
      "contributors_sampled": 1,
      "top_contributor_share": 1
    },
    "quality_signals": {
      "has_ci": false,
      "has_tests": false,
      "ci_workflows": [],
      "has_docs_dir": false,
      "linter_configs": [],
      "has_editorconfig": false,
      "has_linter_config": false,
      "has_precommit_config": false
    },
    "security_signals": {
      "lockfiles": [
        "package-lock.json"
      ],
      "scorecard": {
        "checks": [
          {
            "name": "Binary-Artifacts",
            "score": 10,
            "reason": "no binaries found in the repo",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#binary-artifacts"
          },
          {
            "name": "Branch-Protection",
            "score": 0,
            "reason": "branch protection not enabled on development/release branches",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#branch-protection"
          },
          {
            "name": "CI-Tests",
            "score": null,
            "reason": "no pull request found",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#ci-tests"
          },
          {
            "name": "CII-Best-Practices",
            "score": 0,
            "reason": "no effort to earn an OpenSSF best practices badge detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#cii-best-practices"
          },
          {
            "name": "Code-Review",
            "score": 0,
            "reason": "Found 0/30 approved changesets -- score normalized to 0",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#code-review"
          },
          {
            "name": "Contributors",
            "score": 0,
            "reason": "project has 0 contributing companies or organizations -- score normalized to 0",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#contributors"
          },
          {
            "name": "Dangerous-Workflow",
            "score": null,
            "reason": "no workflows found",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dangerous-workflow"
          },
          {
            "name": "Dependency-Update-Tool",
            "score": 0,
            "reason": "no update tool detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dependency-update-tool"
          },
          {
            "name": "Fuzzing",
            "score": 0,
            "reason": "project is not fuzzed",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#fuzzing"
          },
          {
            "name": "License",
            "score": 10,
            "reason": "license file detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#license"
          },
          {
            "name": "Maintained",
            "score": 10,
            "reason": "30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#maintained"
          },
          {
            "name": "Packaging",
            "score": null,
            "reason": "packaging workflow not detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#packaging"
          },
          {
            "name": "Pinned-Dependencies",
            "score": null,
            "reason": "no dependencies found",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#pinned-dependencies"
          },
          {
            "name": "SAST",
            "score": 0,
            "reason": "no SAST tool detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#sast"
          },
          {
            "name": "Security-Policy",
            "score": 0,
            "reason": "security policy file not detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#security-policy"
          },
          {
            "name": "Signed-Releases",
            "score": null,
            "reason": "no releases found",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#signed-releases"
          },
          {
            "name": "Token-Permissions",
            "score": null,
            "reason": "No tokens found",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#token-permissions"
          },
          {
            "name": "Vulnerabilities",
            "score": 0,
            "reason": "33 existing vulnerabilities detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#vulnerabilities"
          }
        ],
        "commit": "4b52661c0c1113191aabb8f3a3423329d6579ef7",
        "ran_at": "2026-07-26T01:16:16Z",
        "aggregate_score": 2.6,
        "scorecard_version": "v5.5.0"
      },
      "has_codeql_workflow": false,
      "has_security_policy": false,
      "has_dependabot_config": false
    },
    "contribution_flow": {
      "collected": true,
      "ci_last_run_at": "2026-07-20T00:56:00Z",
      "oldest_open_prs": [],
      "last_merged_pr_at": null,
      "ci_last_conclusion": null,
      "oldest_open_issues": []
    }
  },
  "config": {
    "disabled_metrics": [],
    "disabled_categories": [],
    "disabled_components": {}
  },
  "source": {
    "url": "https://github.com/OjasKord/bizfile-mcp",
    "host": "github.com",
    "name": "bizfile-mcp",
    "owner": "OjasKord"
  },
  "metrics": {
    "overall": {
      "key": "overall",
      "band": "at_risk",
      "name": "Overall health",
      "note": null,
      "notes": [],
      "value": 41,
      "inputs": {
        "security": 38,
        "vitality": 75,
        "community": 32,
        "governance": 29,
        "engineering": 27
      },
      "components": []
    },
    "categories": [
      {
        "key": "vitality",
        "band": "good",
        "name": "Vitality",
        "value": 75,
        "weight": 0.22,
        "metrics": [
          {
            "key": "development_activity",
            "band": "good",
            "name": "Development activity",
            "note": null,
            "notes": [],
            "value": 75,
            "inputs": {
              "commits_last_year": 158,
              "human_commit_share": 1,
              "days_since_last_push": 6,
              "active_weeks_last_year": 16
            },
            "components": [
              {
                "key": "push_recency",
                "name": "Push recency",
                "detail": "last push 6 days ago",
                "points": 36,
                "status": "met",
                "details": [
                  {
                    "code": "push_recency",
                    "params": {
                      "days": 6
                    }
                  }
                ],
                "max_points": 36
              },
              {
                "key": "commit_cadence",
                "name": "Commit cadence",
                "detail": "16/52 weeks with commits",
                "points": 11.1,
                "status": "partial",
                "details": [
                  {
                    "code": "commit_cadence_weeks",
                    "params": {
                      "weeks": 16
                    }
                  }
                ],
                "max_points": 36
              },
              {
                "key": "commit_volume",
                "name": "Commit volume",
                "detail": "158 commits in the last year",
                "points": 18,
                "status": "met",
                "details": [
                  {
                    "code": "commits_last_year",
                    "params": {
                      "count": 158
                    }
                  }
                ],
                "max_points": 18
              },
              {
                "key": "openssf_scorecard_maintained",
                "name": "OpenSSF Scorecard: Maintained",
                "detail": "30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10",
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "release_discipline",
            "band": "good",
            "name": "Release discipline",
            "note": "Excluded from scoring (no data or not applicable): OpenSSF Scorecard: Signed-Releases. Remaining weights renormalized.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "openssf_scorecard_signed_releases"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              }
            ],
            "value": 74,
            "inputs": {
              "releases_count": 1,
              "latest_release_tag": "v1.3.4",
              "releases_from_tags": false,
              "days_since_latest_release": 113,
              "mean_days_between_releases": null
            },
            "components": [
              {
                "key": "ships_releases",
                "name": "Ships releases",
                "detail": "1 releases published",
                "points": 27,
                "status": "met",
                "details": [
                  {
                    "code": "releases_published",
                    "params": {
                      "count": 1
                    }
                  }
                ],
                "max_points": 27
              },
              {
                "key": "release_recency",
                "name": "Release recency",
                "detail": "latest release 113 days ago",
                "points": 27,
                "status": "partial",
                "details": [
                  {
                    "code": "release_recency",
                    "params": {
                      "days": 113
                    }
                  }
                ],
                "max_points": 36
              },
              {
                "key": "release_cadence",
                "name": "Release cadence",
                "detail": "cadence unknown (single release)",
                "points": 12.6,
                "status": "partial",
                "details": [
                  {
                    "code": "release_cadence_unknown",
                    "params": {}
                  }
                ],
                "max_points": 27
              },
              {
                "key": "openssf_scorecard_signed_releases",
                "name": "OpenSSF Scorecard: Signed-Releases",
                "detail": "no releases found",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_data",
                    "params": {}
                  }
                ],
                "max_points": 10
              }
            ]
          },
          {
            "key": "abandonment",
            "band": "excellent",
            "name": "Abandonment",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "cap": null,
              "state": "unverified",
              "guards": [],
              "signals": [],
              "red_flag": false,
              "multiplier_pct": 100,
              "declared_reason": null,
              "unverified_reason": "repository_too_young",
              "unanswered_open_prs": null,
              "unanswered_open_issues": null,
              "days_since_last_merged_pr": null,
              "days_since_last_human_commit": null,
              "days_since_last_human_commit_is_floor": false
            },
            "components": [
              {
                "key": "project_is_still_maintained",
                "name": "Project is still maintained",
                "detail": "maintenance record not established from the collected data",
                "points": 100,
                "status": "met",
                "details": [
                  {
                    "code": "abandonment_unverified",
                    "params": {}
                  }
                ],
                "max_points": 100
              }
            ]
          }
        ],
        "description": "Is the project alive — is code being written and are releases shipping?"
      },
      {
        "key": "community",
        "band": "at_risk",
        "name": "Community & Adoption",
        "value": 32,
        "weight": 0.18,
        "metrics": [
          {
            "key": "popularity",
            "band": "critical",
            "name": "Popularity & adoption",
            "note": null,
            "notes": [],
            "value": 1,
            "inputs": {
              "forks": 0,
              "stars": 0,
              "watchers": 0,
              "growth_state": "unverified",
              "growth_factor_pct": 100,
              "growth_unverified_reason": "no_history"
            },
            "components": [
              {
                "key": "stars",
                "name": "Stars",
                "detail": "0 stars",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "stars",
                    "params": {
                      "count": 0
                    }
                  }
                ],
                "max_points": 60
              },
              {
                "key": "forks",
                "name": "Forks",
                "detail": "0 forks",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "forks",
                    "params": {
                      "count": 0
                    }
                  }
                ],
                "max_points": 25
              },
              {
                "key": "watchers",
                "name": "Watchers",
                "detail": "0 watchers",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "watchers",
                    "params": {
                      "count": 0
                    }
                  }
                ],
                "max_points": 15
              }
            ]
          },
          {
            "key": "community_health",
            "band": "moderate",
            "name": "Community health",
            "note": null,
            "notes": [],
            "value": 50,
            "inputs": {
              "has_readme": true,
              "has_license": true,
              "has_contributing": false,
              "has_issue_template": false,
              "has_code_of_conduct": false,
              "has_pull_request_template": false
            },
            "components": [
              {
                "key": "readme",
                "name": "README",
                "detail": null,
                "points": 22.5,
                "status": "met",
                "details": [],
                "max_points": 22.5
              },
              {
                "key": "license",
                "name": "License",
                "detail": "recognized license (MIT)",
                "points": 22.5,
                "status": "met",
                "details": [
                  {
                    "code": "license_standard",
                    "params": {}
                  },
                  {
                    "code": "license_spdx",
                    "params": {
                      "spdx": "MIT"
                    }
                  }
                ],
                "max_points": 22.5
              },
              {
                "key": "contributing_guide",
                "name": "CONTRIBUTING guide",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 18
              },
              {
                "key": "code_of_conduct",
                "name": "Code of conduct",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 13.5
              },
              {
                "key": "issue_template",
                "name": "Issue template",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.2
              },
              {
                "key": "pr_template",
                "name": "PR template",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 6.3
              }
            ]
          },
          {
            "key": "ecosystem_adoption",
            "band": "moderate",
            "name": "Ecosystem adoption (downloads)",
            "note": "Excluded from scoring (no data or not applicable): Registry dependents. Remaining weights renormalized.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "registry_dependents"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              }
            ],
            "value": 56,
            "inputs": {
              "packages": [
                "bizfile-mcp"
              ],
              "dependents": null,
              "ecosystems": "npm",
              "total_downloads": null,
              "monthly_downloads": 2169
            },
            "components": [
              {
                "key": "monthly_downloads",
                "name": "Monthly downloads",
                "detail": "2,169 downloads/month across npm",
                "points": 44.5,
                "status": "partial",
                "details": [
                  {
                    "code": "downloads_monthly",
                    "params": {
                      "count": 2169,
                      "ecosystems": "npm"
                    }
                  }
                ],
                "max_points": 80
              },
              {
                "key": "registry_dependents",
                "name": "Registry dependents",
                "detail": "not reported by this ecosystem",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "not_reported_by_this_ecosystem",
                    "params": {}
                  }
                ],
                "max_points": 20
              }
            ]
          }
        ],
        "description": "Does the project have users, downloads, attention, and a welcoming setup for contributors?"
      },
      {
        "key": "governance",
        "band": "critical",
        "name": "Sustainability & Governance",
        "value": 29,
        "weight": 0.24,
        "metrics": [
          {
            "key": "maintainer_resilience",
            "band": "critical",
            "name": "Maintainer resilience (bus factor)",
            "note": null,
            "notes": [],
            "value": 10,
            "inputs": {
              "bus_factor": 1,
              "contributors_sampled": 1,
              "top_contributor_share": 1
            },
            "components": [
              {
                "key": "bus_factor",
                "name": "Bus factor",
                "detail": "1 contributor(s) cover half of all commits",
                "points": 9,
                "status": "partial",
                "details": [
                  {
                    "code": "bus_factor",
                    "params": {
                      "count": 1
                    }
                  }
                ],
                "max_points": 54
              },
              {
                "key": "commit_distribution",
                "name": "Commit distribution",
                "detail": "top contributor authored 100% of commits",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "top_contributor_share",
                    "params": {
                      "share": 100
                    }
                  }
                ],
                "max_points": 22.5
              },
              {
                "key": "contributor_breadth",
                "name": "Contributor breadth",
                "detail": "1 contributors",
                "points": 1.4,
                "status": "partial",
                "details": [
                  {
                    "code": "contributors_sampled",
                    "params": {
                      "count": 1
                    }
                  }
                ],
                "max_points": 13.5
              },
              {
                "key": "openssf_scorecard_contributors",
                "name": "OpenSSF Scorecard: Contributors",
                "detail": "project has 0 contributing companies or organizations -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "responsiveness",
            "band": "critical",
            "name": "Issue & PR responsiveness",
            "note": "Excluded from scoring (no data or not applicable): Issue resolution, PR acceptance. Remaining weights renormalized.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "issue_resolution",
                    "pr_acceptance"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              }
            ],
            "value": 1,
            "inputs": {
              "merged_prs": 0,
              "open_issues": 0,
              "closed_issues": 0,
              "issue_closed_ratio": null,
              "closed_unmerged_prs": 0
            },
            "components": [
              {
                "key": "issue_resolution",
                "name": "Issue resolution",
                "detail": "no issues or no data",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_issues_or_data",
                    "params": {}
                  }
                ],
                "max_points": 46.75
              },
              {
                "key": "pr_acceptance",
                "name": "PR acceptance",
                "detail": "no decided pull requests or no data",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_decided_prs_or_data",
                    "params": {}
                  }
                ],
                "max_points": 38.25
              },
              {
                "key": "openssf_scorecard_code_review",
                "name": "OpenSSF Scorecard: Code-Review",
                "detail": "Found 0/30 approved changesets -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 15
              }
            ]
          },
          {
            "key": "stewardship",
            "band": "critical",
            "name": "Ownership & stewardship",
            "note": "Excluded from scoring (no data or not applicable): Verified domain. Remaining weights renormalized.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "verified_domain"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              }
            ],
            "value": 23,
            "inputs": {
              "followers": 0,
              "owner_type": "User",
              "is_verified": null,
              "owner_login": "OjasKord",
              "public_repos": 11,
              "account_age_days": 120
            },
            "components": [
              {
                "key": "ownership_backing",
                "name": "Ownership backing",
                "detail": "personal (user) account",
                "points": 10,
                "status": "partial",
                "details": [
                  {
                    "code": "owner_personal",
                    "params": {}
                  }
                ],
                "max_points": 30
              },
              {
                "key": "verified_domain",
                "name": "Verified domain",
                "detail": "not applicable to user accounts",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "not_applicable_to_user_accounts",
                    "params": {}
                  }
                ],
                "max_points": 20
              },
              {
                "key": "owner_reach",
                "name": "Owner reach",
                "detail": "0 followers of OjasKord",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "owner_followers",
                    "params": {
                      "count": 0,
                      "login": "OjasKord"
                    }
                  }
                ],
                "max_points": 25
              },
              {
                "key": "track_record",
                "name": "Track record",
                "detail": "11 public repos, account ~0 yr old",
                "points": 8.5,
                "status": "partial",
                "details": [
                  {
                    "code": "public_repos",
                    "params": {
                      "count": 11
                    }
                  },
                  {
                    "code": "account_age_years",
                    "params": {
                      "years": 0
                    }
                  }
                ],
                "max_points": 25
              }
            ]
          },
          {
            "key": "package_maintenance",
            "band": "excellent",
            "name": "Package maintenance",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "packages": [
                "bizfile-mcp"
              ],
              "ecosystems": "npm",
              "any_deprecated": false,
              "min_days_since_publish": 5
            },
            "components": [
              {
                "key": "published_resolvable",
                "name": "Published & resolvable",
                "detail": "1 package(s) on npm",
                "points": 25,
                "status": "met",
                "details": [
                  {
                    "code": "packages_published",
                    "params": {
                      "count": 1,
                      "ecosystems": "npm"
                    }
                  }
                ],
                "max_points": 25
              },
              {
                "key": "publish_recency",
                "name": "Publish recency",
                "detail": "latest publish 5 days ago",
                "points": 35,
                "status": "met",
                "details": [
                  {
                    "code": "publish_recency",
                    "params": {
                      "days": 5
                    }
                  }
                ],
                "max_points": 35
              },
              {
                "key": "version_history",
                "name": "Version history",
                "detail": "43 published versions",
                "points": 20,
                "status": "met",
                "details": [
                  {
                    "code": "published_versions",
                    "params": {
                      "count": 43
                    }
                  }
                ],
                "max_points": 20
              },
              {
                "key": "not_deprecated",
                "name": "Not deprecated",
                "detail": "active, not deprecated or yanked",
                "points": 20,
                "status": "met",
                "details": [
                  {
                    "code": "package_not_deprecated",
                    "params": {}
                  }
                ],
                "max_points": 20
              }
            ]
          }
        ],
        "description": "Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?"
      },
      {
        "key": "engineering",
        "band": "critical",
        "name": "Engineering Quality",
        "value": 27,
        "weight": 0.2,
        "metrics": [
          {
            "key": "engineering_practices",
            "band": "critical",
            "name": "Engineering practices",
            "note": "Excluded from scoring (no data or not applicable): OpenSSF Scorecard: CI-Tests. Remaining weights renormalized.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "openssf_scorecard_ci_tests"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              }
            ],
            "value": 1,
            "inputs": {
              "has_ci": false,
              "has_tests": false,
              "has_editorconfig": false,
              "has_linter_config": false,
              "has_precommit_config": false
            },
            "components": [
              {
                "key": "ci_workflows",
                "name": "CI workflows",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 24
              },
              {
                "key": "tests_present",
                "name": "Tests present",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 24
              },
              {
                "key": "linter_config",
                "name": "Linter config",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 16
              },
              {
                "key": "pre_commit_hooks",
                "name": "Pre-commit hooks",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 9.6
              },
              {
                "key": "editorconfig",
                "name": ".editorconfig",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 6.4
              },
              {
                "key": "openssf_scorecard_ci_tests",
                "name": "OpenSSF Scorecard: CI-Tests",
                "detail": "no pull request found",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_data",
                    "params": {}
                  }
                ],
                "max_points": 20
              }
            ]
          },
          {
            "key": "documentation",
            "band": "moderate",
            "name": "Documentation",
            "note": null,
            "notes": [],
            "value": 65,
            "inputs": {
              "topics": [
                "agent",
                "aml",
                "compliance",
                "kyc",
                "mcp",
                "registry"
              ],
              "has_wiki": true,
              "homepage": "https://kordagencies.com",
              "has_readme": true,
              "has_docs_dir": false,
              "has_description": false
            },
            "components": [
              {
                "key": "readme",
                "name": "README",
                "detail": null,
                "points": 30,
                "status": "met",
                "details": [],
                "max_points": 30
              },
              {
                "key": "documentation_directory",
                "name": "Documentation directory",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 25
              },
              {
                "key": "documentation_homepage_site",
                "name": "Documentation / homepage site",
                "detail": "https://kordagencies.com",
                "points": 15,
                "status": "met",
                "details": [],
                "max_points": 15
              },
              {
                "key": "repository_description",
                "name": "Repository description",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 10
              },
              {
                "key": "topics",
                "name": "Topics",
                "detail": "6 topics",
                "points": 10,
                "status": "met",
                "details": [
                  {
                    "code": "topics_count",
                    "params": {
                      "count": 6
                    }
                  }
                ],
                "max_points": 10
              },
              {
                "key": "wiki",
                "name": "Wiki",
                "detail": null,
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              }
            ]
          }
        ],
        "description": "Are baseline engineering and documentation practices in place?"
      },
      {
        "key": "security",
        "band": "at_risk",
        "name": "Security",
        "value": 38,
        "weight": 0.16,
        "metrics": [
          {
            "key": "security_posture",
            "band": "critical",
            "name": "Security posture",
            "note": "Excluded from scoring (no data or not applicable): CI-Tests, Dangerous-Workflow, Packaging, Pinned-Dependencies, Signed-Releases, Token-Permissions. Remaining weights renormalized.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "ci_tests",
                    "dangerous_workflow",
                    "packaging",
                    "pinned_dependencies",
                    "signed_releases",
                    "token_permissions"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              }
            ],
            "value": 26,
            "inputs": {
              "source": "openssf_scorecard",
              "checks_evaluated": 12,
              "scorecard_version": "v5.5.0",
              "checks_inconclusive": 6,
              "scorecard_aggregate": 2.6
            },
            "components": [
              {
                "key": "binary_artifacts",
                "name": "Binary-Artifacts",
                "detail": "no binaries found in the repo",
                "points": 7.5,
                "status": "met",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "branch_protection",
                "name": "Branch-Protection",
                "detail": "branch protection not enabled on development/release branches",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "ci_tests",
                "name": "CI-Tests",
                "detail": "no pull request found",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_data",
                    "params": {}
                  }
                ],
                "max_points": 2.5
              },
              {
                "key": "cii_best_practices",
                "name": "CII-Best-Practices",
                "detail": "no effort to earn an OpenSSF best practices badge detected",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "code_review",
                "name": "Code-Review",
                "detail": "Found 0/30 approved changesets -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "contributors",
                "name": "Contributors",
                "detail": "project has 0 contributing companies or organizations -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "dangerous_workflow",
                "name": "Dangerous-Workflow",
                "detail": "no workflows found",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_data",
                    "params": {}
                  }
                ],
                "max_points": 10
              },
              {
                "key": "dependency_update_tool",
                "name": "Dependency-Update-Tool",
                "detail": "no update tool detected",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "fuzzing",
                "name": "Fuzzing",
                "detail": "project is not fuzzed",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 5
              },
              {
                "key": "license",
                "name": "License",
                "detail": "license file detected",
                "points": 2.5,
                "status": "met",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "maintained",
                "name": "Maintained",
                "detail": "30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10",
                "points": 7.5,
                "status": "met",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "packaging",
                "name": "Packaging",
                "detail": "packaging workflow not detected",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_data",
                    "params": {}
                  }
                ],
                "max_points": 5
              },
              {
                "key": "pinned_dependencies",
                "name": "Pinned-Dependencies",
                "detail": "no dependencies found",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_data",
                    "params": {}
                  }
                ],
                "max_points": 5
              },
              {
                "key": "sast",
                "name": "SAST",
                "detail": "no SAST tool detected",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 5
              },
              {
                "key": "security_policy",
                "name": "Security-Policy",
                "detail": "security policy file not detected",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 5
              },
              {
                "key": "signed_releases",
                "name": "Signed-Releases",
                "detail": "no releases found",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_data",
                    "params": {}
                  }
                ],
                "max_points": 7.5
              },
              {
                "key": "token_permissions",
                "name": "Token-Permissions",
                "detail": "No tokens found",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_data",
                    "params": {}
                  }
                ],
                "max_points": 7.5
              },
              {
                "key": "vulnerabilities",
                "name": "Vulnerabilities",
                "detail": "33 existing vulnerabilities detected",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              }
            ]
          },
          {
            "key": "dependency_advisories",
            "band": "excellent",
            "name": "Dependency advisories",
            "note": "Matched the npm:bizfile-mcp@4.10.54 runtime dependency closure — what installing the published package pulls in — 125 packages. Reachability is not analyzed.",
            "notes": [
              {
                "code": "advisories_scope_published",
                "params": {
                  "package": "npm:bizfile-mcp@4.10.54",
                  "assessed": 125
                }
              },
              {
                "code": "advisories_reachability",
                "params": {}
              }
            ],
            "value": 88,
            "inputs": {
              "source": "osv",
              "advisories": 1,
              "affected_packages": 1,
              "assessed_packages": 125,
              "unassessed_packages": 0,
              "affected_by_severity": "moderate 1",
              "direct_affected_packages": 0
            },
            "components": [
              {
                "key": "direct_dependencies_free_of_known_advisories",
                "name": "Direct dependencies free of known advisories",
                "detail": "no direct dependency carries a known advisory",
                "points": 35,
                "status": "met",
                "details": [
                  {
                    "code": "no_direct_advisories",
                    "params": {}
                  }
                ],
                "max_points": 35
              },
              {
                "key": "indirect_dependencies_free_of_known_advisories",
                "name": "Indirect dependencies free of known advisories",
                "detail": "1 affected: @hono/node-server 1.19.15 (moderate 5.9)",
                "points": 13.2,
                "status": "partial",
                "details": [
                  {
                    "code": "advisories_affected",
                    "params": {
                      "count": 1,
                      "packages": "@hono/node-server 1.19.15 (moderate 5.9)"
                    }
                  }
                ],
                "max_points": 25
              },
              {
                "key": "no_advisories_left_outstanding",
                "name": "No advisories left outstanding",
                "detail": "no advisory has been public longer than 90 days",
                "points": 40,
                "status": "met",
                "details": [
                  {
                    "code": "advisories_none_stale",
                    "params": {
                      "days": 90
                    }
                  }
                ],
                "max_points": 40
              }
            ]
          },
          {
            "key": "malicious_dependencies",
            "band": "excellent",
            "name": "Malicious dependencies",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "source": "osv",
              "meaning": "reported as a malicious package by the OpenSSF corpus; the remedy is removal or moving off the compromised name, never an upgrade of the same artifact. Versions the registry has since pulled are listed but not scored",
              "packages": [],
              "red_flag": false,
              "assessed_packages": 125,
              "malicious_packages": 0,
              "direct_malicious_packages": 0,
              "withdrawn_malicious_packages": 0,
              "installable_malicious_packages": 0
            },
            "components": [
              {
                "key": "no_dependency_reported_as_a_malicious_package",
                "name": "No dependency reported as a malicious package",
                "detail": "no dependency is reported as a malicious package",
                "points": 100,
                "status": "met",
                "details": [
                  {
                    "code": "no_malicious_dependencies",
                    "params": {}
                  }
                ],
                "max_points": 100
              }
            ]
          }
        ],
        "description": "Are visible security and supply-chain practices strong, with no malicious dependency and no unresolved high-risk jurisdiction exposure?"
      },
      {
        "key": "ai_readiness",
        "band": "critical",
        "name": "AI Readiness",
        "value": 22,
        "weight": 0,
        "metrics": [
          {
            "key": "ai_agent_context",
            "band": "critical",
            "name": "Agent context & guidance",
            "note": null,
            "notes": [],
            "value": 24,
            "inputs": {
              "has_llms_txt": false,
              "legible_history_share": 0.44,
              "agent_instruction_files": [],
              "agent_instruction_max_bytes": null
            },
            "components": [
              {
                "key": "agent_instructions",
                "name": "Agent instructions",
                "detail": "no CLAUDE.md / AGENTS.md / editor rules",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "no_agent_instructions",
                    "params": {}
                  }
                ],
                "max_points": 45
              },
              {
                "key": "machine_readable_docs_llms_txt",
                "name": "Machine-readable docs (llms.txt)",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 15
              },
              {
                "key": "legible_commit_history",
                "name": "Legible commit history",
                "detail": "44 of 100 human commits state their intent (structured subject or explanatory body)",
                "points": 23.5,
                "status": "partial",
                "details": [
                  {
                    "code": "legible_history",
                    "params": {
                      "legible": 44,
                      "sampled": 100
                    }
                  }
                ],
                "max_points": 40
              }
            ]
          },
          {
            "key": "ai_verify_loop",
            "band": "critical",
            "name": "Verify loop (build / test / typecheck)",
            "note": "Excluded from scoring (no data or not applicable): OpenSSF Scorecard: Pinned-Dependencies. Remaining weights renormalized.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "openssf_scorecard_pinned_dependencies"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              }
            ],
            "value": 22,
            "inputs": {
              "has_nix": false,
              "has_tests": false,
              "lockfiles": [
                "package-lock.json"
              ],
              "has_dockerfile": false,
              "typed_language": false,
              "bootstrap_files": [],
              "has_devcontainer": false,
              "has_linter_config": false,
              "typecheck_configs": [],
              "agent_commit_share": 0.26,
              "toolchain_manifests": [],
              "dependency_bot_commit_share": 0
            },
            "components": [
              {
                "key": "one_command_bootstrap",
                "name": "One-command bootstrap",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 18
              },
              {
                "key": "automated_tests",
                "name": "Automated tests",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 22
              },
              {
                "key": "lint_format_config",
                "name": "Lint / format config",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 11
              },
              {
                "key": "static_type_checking",
                "name": "Static type checking",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 11
              },
              {
                "key": "reproducible_environment",
                "name": "Reproducible environment",
                "detail": "lockfile",
                "points": 10,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": "lockfile"
                    }
                  }
                ],
                "max_points": 10
              },
              {
                "key": "demonstrated_agent_practice",
                "name": "Demonstrated agent practice",
                "detail": "26 of the last 100 commits agent-authored or agent-credited",
                "points": 10,
                "status": "met",
                "details": [
                  {
                    "code": "agent_authored_commits",
                    "params": {
                      "count": 26,
                      "sampled": 100
                    }
                  }
                ],
                "max_points": 10
              },
              {
                "key": "automated_maintenance",
                "name": "Automated maintenance",
                "detail": "no automated dependency updates observed",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "no_dependency_automation",
                    "params": {}
                  }
                ],
                "max_points": 8
              },
              {
                "key": "openssf_scorecard_pinned_dependencies",
                "name": "OpenSSF Scorecard: Pinned-Dependencies",
                "detail": "no dependencies found",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_data",
                    "params": {}
                  }
                ],
                "max_points": 10
              }
            ]
          },
          {
            "key": "ai_code_legibility",
            "band": "critical",
            "name": "Code legibility for models",
            "note": null,
            "notes": [],
            "value": 18,
            "inputs": {
              "primary_language": "JavaScript",
              "largest_source_bytes": 151733,
              "source_files_sampled": 3,
              "oversized_source_files": 2
            },
            "components": [
              {
                "key": "type_checkable_code",
                "name": "Type-checkable code",
                "detail": "JavaScript without a type-check config",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "no_typecheck_config_language",
                    "params": {
                      "language": "JavaScript"
                    }
                  }
                ],
                "max_points": 45
              },
              {
                "key": "manageable_file_sizes",
                "name": "Manageable file sizes",
                "detail": "2/3 source files over 60KB",
                "points": 18.3,
                "status": "partial",
                "details": [
                  {
                    "code": "oversized_source_files",
                    "params": {
                      "kb": 60,
                      "sampled": 3,
                      "oversized": 2
                    }
                  }
                ],
                "max_points": 55
              }
            ]
          },
          {
            "key": "ai_interfaces",
            "band": "critical",
            "name": "Machine-readable interfaces",
            "note": null,
            "notes": [],
            "value": 20,
            "inputs": {
              "example_dirs": [],
              "has_mcp_signal": true,
              "api_schema_files": []
            },
            "components": [
              {
                "key": "api_schema_openapi_graphql_proto",
                "name": "API schema (OpenAPI/GraphQL/proto)",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 40
              },
              {
                "key": "mcp_server",
                "name": "MCP server",
                "detail": null,
                "points": 20,
                "status": "met",
                "details": [],
                "max_points": 20
              },
              {
                "key": "runnable_examples",
                "name": "Runnable examples",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 40
              }
            ]
          }
        ],
        "description": "How well is the repo equipped to be developed and maintained with AI coding agents? An independent, experimental badge — weight 0.0, so it is surfaced on its own and does not affect the overall health score."
      }
    ],
    "metrics_version": "1.13.0"
  },
  "warnings": [
    "GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository"
  ],
  "report_type": "repository",
  "generated_at": "2026-07-26T01:16:20.025946Z",
  "schema_version": "0.27.0",
  "badge_url": "https://raw.githubusercontent.com/inspect-software/badges/main/v1/o/OjasKord/bizfile-mcp.svg",
  "full_name": "OjasKord/bizfile-mcp",
  "license_state": "standard",
  "license_spdx": "MIT"
}

相关记录

与 OjasKord/bizfile-mcp 共享目录标签或生态系统的已检测仓库。 并排阅读 →

86microsoft/agent-governance-toolkitAI Agent Governance Toolkit — Policy enforcement, zero-trust identity, execution sandboxing, and reliability engineering for autonomous AI agents. Covers 10/10 OWASP Agentic Top 10.优秀88alibaba/nacosan easy-to-use dynamic service discovery, configuration and service management platform for building AI cloud native applications.优秀88intuitem/ciso-assistant-communityCISO Assistant is a one-stop-shop GRC platform for Risk Management, AppSec, Compliance & Audit, TPRM, BIA, Privacy, and Reporting. It supports 150+ global frameworks with automatic control mapping, including ISO 27001, NIST CSF, SOC 2, CIS, PCI DSS, NIS2, DORA, GDPR, HIPAA, CMMC, and more.优秀87langgenius/difyProduction-ready platform for agentic workflow development.优秀86ModelEngine-Group/nexentNexent is a zero-code platform for auto-generating production-grade AI agents using Harness Engineering principles — unified tools, skills, memory, and orchestration with built-in constraints, feedback loops, and control planes.优秀89ag2ai/ag2AG2 (formerly AutoGen): The Open-Source AgentOS.Join us at: https://discord.gg/sNGSwQME3x优秀

评分是信号，而非担保。 评分反映的是 GitHub 上公开可见的实践——不是代码审计，也不是安全保证。

缺失数据将被剔除并重新归一化权重，绝不按零分计。方法论已版本化并公开：指标 v1.13.0、模式 v0.27.0—— 完整方法论 · 指标知识库.

单项结果在整体记录中的位置： 汇总统计 — npm.