公开记录优秀
软件健康报告模式 0.27.0 · 指标 2.5.0 · 2026-07-29 15:47 UTC
OpenHands / extensions
Public registry for OpenHands extensions.
OpenHands/extensions 的健康指数为 100 分中的 83 分，处于「优秀」区间。 其得分最高的类别是Vitality（92/100），最低的是AI Readiness（55/100）。 最近一次更新在今天。 近期的大部分工作由 3 位贡献者完成。
83
总分 / 100软件健康指数
指标归入加权类别，统一采用 1–100 量表。总体分先取类别加权平均，再依据公开记录的分布进行校准，使各等级具有百分位含义；当公开证据触发高风险司法辖区政策时，评级会按政策调整，并设置 34（存在风险）的上限。
83
卓越93-100公开记录中的最高层级（约前 5%）；基本满足所有检验标准
优秀80-92各方面均表现强劲；仅有少量不足
良好65-79健康；不足之处有限且可控
中等50-64可接受，但存在明显不足；建议进行审查
薄弱35-49多个领域存在实质性薄弱环节
存在风险20-34存在重大薄弱环节；采用时应保持审慎
危急1-19问题严重（项目被弃置、仅有单一维护者、缺乏基本工程规范）
评分画像
每条轴代表一个类别。形状比平均值更重要——健康的对象会填满整个图形，而“一峰一谷”式画像意味着某一维度的优势正掩盖另一维度的风险。
加权总体分 70 经校准后在公布的指数量表上为 83（记录校准 2026-08-02）。
所有权
软件包生态系统
| 注册表 | 软件包 | 版本 | 月下载量 | 版本数 | 最近发布 |
|---|---|---|---|---|---|
| npm | @openhands/extensions | 0.11.0 | 20,722 | 16 | 8 天前 |
| PyPI | openhands-extensions | 0.11.0 | - | 8 | 8 天前 |
按类别列示的指标
活力
项目是否仍有生命——是否仍在编写代码，是否仍在发布版本？
92
开发活跃度
86优秀
评分方式
| 36/36 | 推送新近度 — 最近一次推送于 0 天前 |
| 22.2/36 | 提交节奏 — 52 周中有 32 周有提交 |
| 18/18 | 提交量 — 最近一年 264 次提交 |
| 10/10 | OpenSSF Scorecard：Maintained — 30 commit(s) and 24 issue activity found in the last 90 days -- score normalized to 10 |
所用输入
| commits_last_year | 264 |
| human_commit_share | 0.87 |
| days_since_last_push | 0 |
| active_weeks_last_year | 32 |
发布纪律
100卓越
评分方式
| 27/27 | 有发布版本 — 已发布 15 个发布版本 |
| 36/36 | 发布时效 — 最近一次发布版本于 8 天前 |
| 27/27 | 发布节奏 — 约每 4.4 天发布一次 |
| 0/10 | OpenSSF Scorecard：Signed-Releases — 无数据 |
所用输入
| releases_count | 15 |
| latest_release_tag | v0.11.0 |
| releases_from_tags | 否 |
| days_since_latest_release | 8 |
| mean_days_between_releases | 4.4 |
已排除计分（无数据或不适用）：OpenSSF Scorecard：Signed-Releases。 其余权重已重新归一化。
社区与采用
项目是否拥有用户、下载量与关注度，并具备欢迎贡献者参与的配置？
59
流行度与采用
52中等
评分方式
| 34.3/60 | 星标 — 132 个星标 |
| 14.9/25 | 复刻 — 62 个复刻 |
| 2.7/15 | 关注者 — 4 位关注者 |
所用输入
| forks | 62 |
| stars | 132 |
| watchers | 4 |
| growth_state | unverified |
| growth_factor_pct | 100 |
| growth_unverified_reason | no_history |
社区健康
57中等
评分方式
| 22.5/22.5 | README |
| 22.5/22.5 | 许可证 — 可识别的许可证（MIT） |
| 0/18 | CONTRIBUTING 指南 |
| 0/13.5 | 行为准则 |
| 0/7.2 | 议题模板 |
| 6.3/6.3 | PR 模板 |
所用输入
| has_readme | 是 |
| has_license | 是 |
| readme_badges | — |
| has_contributing | 否 |
| has_issue_template | 否 |
| has_code_of_conduct | 否 |
| readme_badge_services | — |
| has_pull_request_template | 是 |
生态采用（下载量）
72良好
评分方式
| 57.6/80 | 月度下载量 — npm, pypi 合计每月 20,722 次下载 |
| 0/20 | 注册表被依赖数 — 该生态系统不报告此项 |
所用输入
| packages | @openhands/extensions, openhands-extensions |
| dependents | — |
| ecosystems | npm, pypi |
| total_downloads | — |
| monthly_downloads | 20,722 |
已排除计分（无数据或不适用）：注册表被依赖数。 其余权重已重新归一化。
可持续性与治理
项目能否在其成员之外延续——巴士系数、响应能力、由谁支持，以及软件包的维护状况？
77
维护者韧性（巴士系数）
77良好
评分方式
| 36/54 | 巴士系数 — 3 位贡献者贡献了半数提交 |
| 17.8/22.5 | 提交分布 — 头号贡献者编写了 21% 的提交 |
| 13.5/13.5 | 贡献者广度 — 25 位贡献者 |
| 10/10 | OpenSSF Scorecard：Contributors — project has 6 contributing companies or organizations |
所用输入
| bus_factor | 3 |
| contributors_sampled | 25 |
| top_contributor_share | 0.209 |
议题与 PR 响应能力
70良好
评分方式
| 26.7/42 | 议题解决 — 64% 的议题已关闭 |
| 23.5/30 | PR 接受 — 已裁定的 PR 中 223/285 已合并 |
| 0/13 | Newcomer PR acceptance — 30 天内没有首次贡献者的 PR 得到裁决 |
| 10.5/15 | OpenSSF Scorecard：Code-Review — Found 18/24 approved changesets -- score normalized to 7 |
所用输入
| merged_prs | 223 |
| open_issues | 32 |
| closed_issues | 56 |
| prs_merged_7d | — |
| prs_decided_7d | — |
| prs_merged_30d | — |
| prs_decided_30d | — |
| issue_closed_ratio | 0.636 |
| closed_unmerged_prs | 62 |
| first_time_authors_30d | — |
| first_time_prs_merged_30d | — |
| first_time_prs_decided_30d | — |
已排除计分（无数据或不适用）：newcomer_pr_acceptance。 其余权重已重新归一化。
所有权与托管责任
64中等
评分方式
| 30/30 | 所有权背书 — 组织持有 |
| 0/20 | 已验证域名 |
| 19.6/25 | 所有者影响力 — OpenHands 有 523 位关注者 |
| 14.1/25 | 既往记录 — 46 个公开仓库，账户约 0 年 |
所用输入
| followers | 523 |
| owner_type | Organization |
| is_verified | — |
| owner_login | OpenHands |
| public_repos | 46 |
| account_age_days | 351 |
软件包维护
100卓越
评分方式
| 25/25 | 已发布且可解析 — npm, pypi 上有 2 个软件包 |
| 35/35 | 发布时效 — 最近一次发布于 8 天前 |
| 20/20 | 版本历史 — 16 个已发布版本 |
| 20/20 | 未被弃用 — 活跃，未被弃用或撤回 |
所用输入
| packages | @openhands/extensions, openhands-extensions |
| ecosystems | npm, pypi |
| any_deprecated | 否 |
| min_days_since_publish | 8 |
工程质量
基础的工程与文档实践是否到位？
61
工程实践
68良好
评分方式
| 24/24 | CI 工作流 — 8 个工作流 |
| 24/24 | 存在测试 |
| 0/16 | Linter 配置 |
| 0/9.6 | Pre-commit 钩子 |
| 0/6.4 | .editorconfig |
| 20/20 | OpenSSF Scorecard：CI-Tests — 30 out of 30 merged PRs checked by a CI test -- score normalized to 10 |
所用输入
| has_ci | 是 |
| has_tests | 是 |
| has_editorconfig | 否 |
| has_linter_config | 否 |
| has_precommit_config | 否 |
文档
50中等
评分方式
| 30/30 | README |
| 0/25 | 文档目录 |
| 0/15 | 文档 / 主页站点 |
| 10/10 | 仓库描述 |
| 0/10 | 主题标签 |
| 10/10 | Wiki |
所用输入
| topics | — |
| has_wiki | 是 |
| homepage | — |
| has_readme | 是 |
| has_docs_dir | 否 |
| has_description | 是 |
安全
可见的安全与供应链实践是否稳固，且不存在未解决的高风险司法辖区暴露？
55
安全态势
55中等
评分方式
| 7.5/7.5 | Binary-Artifacts — no binaries found in the repo |
| 3/7.5 | Branch-Protection — branch protection is not maximal on development and all release branches |
| 2.5/2.5 | CI-Tests — 30 out of 30 merged PRs checked by a CI test -- score normalized to 10 |
| 0/2.5 | CII-Best-Practices — no effort to earn an OpenSSF best practices badge detected |
| 5.2/7.5 | Code-Review — Found 18/24 approved changesets -- score normalized to 7 |
| 2.5/2.5 | Contributors — project has 6 contributing companies or organizations |
| 10/10 | Dangerous-Workflow — no dangerous workflow patterns detected |
| 0/7.5 | Dependency-Update-Tool — no update tool detected |
| 0/5 | Fuzzing — project is not fuzzed |
| 2.5/2.5 | 许可证 — license file detected |
| 7.5/7.5 | Maintained — 30 commit(s) and 24 issue activity found in the last 90 days -- score normalized to 10 |
| 5/5 | Packaging — packaging workflow detected |
| 0/5 | Pinned-Dependencies — dependency not pinned by hash detected -- score normalized to 0 |
| 0/5 | SAST — SAST tool is not run on all commits -- score normalized to 0 |
| 0/5 | Security-Policy — security policy file not detected |
| 0/7.5 | Signed-Releases — 无数据 |
| 0/7.5 | Token-Permissions — detected GitHub workflow tokens with excessive permissions |
| 7.5/7.5 | Vulnerabilities — 0 existing vulnerabilities detected |
所用输入
| source | openssf_scorecard |
| checks_evaluated | 17 |
| scorecard_version | v5.5.0 |
| checks_inconclusive | 1 |
| scorecard_aggregate | 5.5 |
已排除计分（无数据或不适用）：signed_releases。 其余权重已重新归一化。
AI 就绪度
该仓库在多大程度上具备与 AI 编码代理协同开发与维护的条件？权重刻意设小（4%）：代理工具链是一项真实的维护信号，但完全不具备的仓库仍可达到 100/100。
55
AI 代理上下文与指引
85优秀
评分方式
| 45/45 | 代理指令 — AGENTS.md |
| 0/15 | 机器可读文档（llms.txt） |
| 40/40 | 可读的提交历史 — 87 次人类提交中有 87 次说明了意图（结构化标题或解释性正文） |
所用输入
| has_llms_txt | 否 |
| legible_history_share | 1 |
| agent_instruction_files | AGENTS.md |
| agent_instruction_max_bytes | 14,908 |
验证循环（构建 / 测试 / 类型检查）
32存在风险
评分方式
| 0/18 | 一条命令的引导启动 |
| 22/22 | 自动化测试 |
| 0/11 | Lint / 格式化配置 |
| 0/11 | 静态类型检查 |
| 0/10 | 可复现环境 |
| 10/10 | 已体现的代理实践 — 最近 100 次提交中有 70 次由代理编写或署名代理 |
| 0/8 | 自动化维护 — 未观察到自动依赖更新 |
| 0/10 | OpenSSF Scorecard：Pinned-Dependencies — dependency not pinned by hash detected -- score normalized to 0 |
所用输入
| has_nix | 否 |
| has_tests | 是 |
| lockfiles | — |
| has_dockerfile | 否 |
| typed_language | 否 |
| bootstrap_files | — |
| has_devcontainer | 否 |
| has_linter_config | 否 |
| typecheck_configs | — |
| agent_commit_share | 0.7 |
| toolchain_manifests | — |
| dependency_bot_commit_share | 0 |
面向模型的代码可读性
54中等
评分方式
| 0/45 | 可类型检查的代码 — Python，未配置类型检查 |
| 54.3/55 | 可控的文件大小 — 采样的 79 个源文件中有 1 个超过 60KB |
所用输入
| primary_language | Python |
| largest_source_bytes | 365,433 |
| source_files_sampled | 79 |
| oversized_source_files | 1 |
关键数据
132GitHub 星标
25贡献者
264最近 12 个月提交数
0距最近推送天数
15发布版本数
3巴士系数（bus factor）
32开放议题
npm, PyPI软件包生态系统数
数据采集警告
- Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token
- GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository
更多细节
Star 与 Fork 历史 0 ★ / 62 ⇿
0Star
62Fork
15发布
每颗 star 和每个 fork 的添加时间，来自 GitHub 并按天汇总。累计增长位于其构成来源——每日新增——的正上方，二者可相互对照：稳定的自然增长与短暂的突增形态截然不同。当这一差别可被衡量时，它会作为增长真实性予以报告。
主版本 0次版本 11修订 4
OpenSSF Scorecard 5.5 / 10
5.5综合
来自开源项目 OpenSSF Scorecard 的独立、工具无关的安全评估。每项检查奖励的是安全实践本身，而非特定供应商的工具。Scorecard 无法判定的检查项标记为 不适用，并从安全评分中剔除（绝不按零分计）。
| 10 | Binary-Artifacts | no binaries found in the repo |
| 4 | Branch-Protection | branch protection is not maximal on development and all release branches |
| 10 | CI-Tests | 30 out of 30 merged PRs checked by a CI test -- score normalized to 10 |
| 0 | CII-Best-Practices | no effort to earn an OpenSSF best practices badge detected |
| 7 | Code-Review | Found 18/24 approved changesets -- score normalized to 7 |
| 10 | Contributors | project has 6 contributing companies or organizations |
| 10 | Dangerous-Workflow | no dangerous workflow patterns detected |
| 0 | Dependency-Update-Tool | no update tool detected |
| 0 | Fuzzing | project is not fuzzed |
| 10 | License | license file detected |
| 10 | Maintained | 30 commit(s) and 24 issue activity found in the last 90 days -- score normalized to 10 |
| 10 | Packaging | packaging workflow detected |
| 0 | Pinned-Dependencies | dependency not pinned by hash detected -- score normalized to 0 |
| 0 | SAST | SAST tool is not run on all commits -- score normalized to 0 |
| 0 | Security-Policy | security policy file not detected |
| 不适用 | Signed-Releases | no releases found |
| 0 | Token-Permissions | detected GitHub workflow tokens with excessive permissions |
| 10 | Vulnerabilities | 0 existing vulnerabilities detected |
直接依赖 3
| 注册表 | 软件包 | 版本约束 | 清单文件 |
|---|---|---|---|
| PyPI | deprecation | >=2.1,<3 | pyproject.toml |
| PyPI | packaging | >=24,<26 | pyproject.toml |
| PyPI | pydantic | >=2.10,<3 | pyproject.toml |
全部依赖 未采集
本报告未能采集到解析后的依赖集合：GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository
原始 JSON 报告 机器可读
{
"data": {
"repo": {
"topics": [],
"is_fork": false,
"size_kb": 3921,
"has_wiki": true,
"homepage": null,
"languages": {
"Jinja": 4321,
"Shell": 23061,
"Python": 732080,
"JavaScript": 24659,
"TypeScript": 8063
},
"pushed_at": "2026-07-29T14:29:42Z",
"created_at": "2025-11-24T14:30:27Z",
"owner_type": "Organization",
"updated_at": "2026-07-29T14:32:16Z",
"description": "Public registry for OpenHands extensions.",
"is_archived": false,
"is_disabled": false,
"license_spdx": "MIT",
"default_branch": "main",
"license_spdx_raw": "MIT",
"primary_language": "Python",
"significant_languages": [
"Python"
]
},
"owner": {
"blog": "https://openhands.dev",
"name": "OpenHands",
"type": "Organization",
"login": "OpenHands",
"company": null,
"location": null,
"followers": 523,
"avatar_url": "https://avatars.githubusercontent.com/u/225919603?v=4",
"created_at": "2025-08-11T16:25:09Z",
"is_verified": null,
"public_repos": 46,
"account_age_days": 351
},
"license": {
"state": "standard",
"spdx_id": "MIT",
"raw_spdx": "MIT",
"file_present": true,
"scorecard_found": true,
"profile_has_license": true
},
"activity": {
"releases": [
{
"tag": "v0.11.0",
"kind": "minor",
"published_at": "2026-07-21T10:51:51Z"
},
{
"tag": "v0.10.0",
"kind": "minor",
"published_at": "2026-07-12T08:28:23Z"
},
{
"tag": "v0.9.0",
"kind": "minor",
"published_at": "2026-07-09T13:41:25Z"
},
{
"tag": "v0.8.0",
"kind": "minor",
"published_at": "2026-06-30T04:04:49Z"
},
{
"tag": "v0.7.2",
"kind": "patch",
"published_at": "2026-06-29T01:50:40Z"
},
{
"tag": "v0.7.1",
"kind": "patch",
"published_at": "2026-06-29T01:38:00Z"
},
{
"tag": "v0.7.0",
"kind": "minor",
"published_at": "2026-06-28T02:48:29Z"
},
{
"tag": "v0.6.0",
"kind": "minor",
"published_at": "2026-06-23T15:31:29Z"
},
{
"tag": "v0.5.0",
"kind": "minor",
"published_at": "2026-06-12T15:35:43Z"
},
{
"tag": "v0.4.2",
"kind": "patch",
"published_at": "2026-06-12T01:46:20Z"
},
{
"tag": "v0.4.1",
"kind": "patch",
"published_at": "2026-06-11T16:11:06Z"
},
{
"tag": "v0.4.0",
"kind": "minor",
"published_at": "2026-06-10T13:41:37Z"
},
{
"tag": "v0.3.0",
"kind": "minor",
"published_at": "2026-06-07T21:34:14Z"
},
{
"tag": "v0.2.0",
"kind": "minor",
"published_at": "2026-06-05T18:42:48Z"
},
{
"tag": "v0.1.0",
"kind": "minor",
"published_at": "2026-06-05T17:49:42Z"
}
],
"recent_commits": [
{
"oid": "f887f192d05da5f50df7aa449d82ff2d9c28904d",
"body": "…#423)\n\n* feat(automations): add reference manifests and API contract fixtures\n\n* refactor: capabilities.json\n\n* fix: sync-sdk-skill\n\n* refactor: make catalog/*.json the single source of truth\n\n* feat: add the setup contract to the automation catalog\n\n* refactor: state only what cannot be derived in a manifest\n\n* refactor: derive the create request from the form",
"is_bot": false,
"headline": "feat(automations): add the setup contract to the automation catalog (…",
"author_name": "Hiep Le",
"author_login": "hieptl",
"committed_at": "2026-07-29T14:29:15Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ee80646b3fbb023f805f3cbfd6f2c4be7c3935ff",
"body": "…ub skills (#427)",
"is_bot": false,
"headline": "feat: drop the bare `git` trigger from the bitbucket, gitlab and gith…",
"author_name": "Vasco Schiavo",
"author_login": "VascoSch92",
"committed_at": "2026-07-29T10:13:10Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ce324178a5a1b0eccf054fa37d1c9dd030644f03",
"body": "Co-authored-by: openhands <openhands@all-hands.dev>",
"is_bot": false,
"headline": "fix(integrations): use Datadog MCP header names (#407)",
"author_name": "Graham Neubig",
"author_login": "neubig",
"committed_at": "2026-07-21T16:04:01Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "9def413cc05fa8287ed236d846af85f977baea45",
"body": "* chore(main): release 0.11.0\n\n* fix: align Python fallback version for release\n\n---------\n\nCo-authored-by: openhands-release-bot[bot] <290150379+openhands-release-bot[bot]@users.noreply.github.com>\nCo-authored-by: hieptl <hieptl.developer@gmail.com>",
"is_bot": true,
"headline": "chore(main): release 0.11.0 (#406)",
"author_name": "openhands-release-bot[bot]",
"author_login": "openhands-release-bot[bot]",
"committed_at": "2026-07-21T10:51:29Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "9b2dd52e1fbe416536618e8f965d9b75a14be72c",
"body": "…Slack (#414)\n\n* feat: state auth scopes and add live smoke tests for GitHub, Linear, Slack\n\n* refactor: add smoke tests",
"is_bot": false,
"headline": "feat: state auth scopes and add live smoke tests for GitHub, Linear, …",
"author_name": "Hiep Le",
"author_login": "hieptl",
"committed_at": "2026-07-20T16:22:31Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0729756a18f27c129b194ce2b6502b7755eb756f",
"body": "Adds a catalog entry for the official Atlassian Rovo hosted MCP server.\nUses shttp transport with server-managed OAuth 2.1 - no client credentials\nrequired. Covers Jira, Confluence, Bitbucket, and JSM in a single connection.\n\nCo-authored-by: jpelletier1 <joe@openhands.dev>\nCo-authored-by: openhands <openhands@all-hands.dev>",
"is_bot": false,
"headline": "feat(integrations): add Atlassian Rovo MCP server (OAuth 2.1) (#408)",
"author_name": "jpelletier1",
"author_login": "jpelletier1",
"committed_at": "2026-07-15T15:52:38Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "de28dbb326505af966529eb8a65a87be5bf8ab1f",
"body": "…n (#402)\n\n* feat(iterate): keep generated .pr/ artifacts fresh during PR iteration\n\nWhile driving a PR to merge-ready, check a conventionally-named .pr/ folder\nof generated artifacts. If the agent can tell how an artifact was produced and\nthe code it derives from changed, regenerate it so it isn't \n[…]\nst pins it) and rebuild\nskills/index.js so the generated catalog reflects the SKILL.md update.\n\nCo-authored-by: smolpaws <engel@enyst.org>\n\n---------\n\nCo-authored-by: Engel Nyst <engel.nyst@gmail.com>",
"is_bot": false,
"headline": "feat(iterate): keep generated .pr/ artifacts fresh during PR iteratio…",
"author_name": "🐾 smolpaws",
"author_login": "smolpaws",
"committed_at": "2026-07-13T10:50:53Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "fc09aeff8aa92c19741fcc17d3d497540c39f942",
"body": "* feat: add technical-writing skill\n\n* fix: add technical-writing skill metadata\n\n* fix: keep narrowed keyword lists valid JSON\n\n* ci: retry SDK skill sync\n\n---------\n\nCo-authored-by: Engel Nyst <engel.nyst@gmail.com>",
"is_bot": false,
"headline": "feat: add technical-writing skill (#405)",
"author_name": "🐾 smolpaws",
"author_login": "smolpaws",
"committed_at": "2026-07-13T03:22:47Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "279ece7e6e678dc1edee98da75a2cf05df2dbfa3",
"body": "* chore(main): release 0.10.0\n\n* fix: align Python fallback version for release\n\n---------\n\nCo-authored-by: openhands-release-bot[bot] <290150379+openhands-release-bot[bot]@users.noreply.github.com>\nCo-authored-by: neubig <neubig@users.noreply.github.com>",
"is_bot": true,
"headline": "chore(main): release 0.10.0",
"author_name": "openhands-release-bot[bot]",
"author_login": "openhands-release-bot[bot]",
"committed_at": "2026-07-12T08:28:11Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "da671c7981790a17bc7f7ebdce46292885536059",
"body": "Exports validated catalog models and tightens the shared catalog contract.",
"is_bot": false,
"headline": "feat: export typed integration catalog models",
"author_name": "Graham Neubig",
"author_login": "neubig",
"committed_at": "2026-07-12T08:24:35Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ae671cfb445443f37203088f8e969dfa5fd9fc4d",
"body": "Add Vanta integration to the integrations catalog\n\nAdd Vanta's hosted remote MCP server as a supported integration so it is\navailable for one-click install in the agent canvas and in the integrations\nhub. The entry uses Vanta's OAuth 2.1 MCP flow (PKCE, public client,\ndynamic client registration, RF\n[…]\nvertised at\nhttps://mcp.vanta.com/.well-known/oauth-authorization-server. Regional\nEU/AUS endpoints and the beta/Admin-role prerequisite are noted.\n\nCo-authored-by: openhands <openhands@all-hands.dev>",
"is_bot": false,
"headline": "feat: add Vanta integration to the integrations catalog (#399)",
"author_name": "aivong-openhands",
"author_login": "aivong-openhands",
"committed_at": "2026-07-10T21:38:13Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "59ed7a38c8a3600bb9cee5ea481d6418ea8dd1d1",
"body": "…400)\n\nfeat(integrations): define connection resource identity model\n\nCo-authored-by: neubig <neubig@users.noreply.github.com>",
"is_bot": false,
"headline": "feat(integrations): define multi-account connection resource model (#…",
"author_name": "Graham Neubig",
"author_login": "neubig",
"committed_at": "2026-07-10T20:10:33Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "56c74634e85700e298910ed3f58d0b4a27ba3c04",
"body": "* chore(main): release 0.9.0\n\n* fix: sync _version.py to 0.9.0 for release\n\n---------\n\nCo-authored-by: openhands-release-bot[bot] <290150379+openhands-release-bot[bot]@users.noreply.github.com>\nCo-authored-by: neubig <neubig@users.noreply.github.com>",
"is_bot": true,
"headline": "chore(main): release 0.9.0 (#381)",
"author_name": "openhands-release-bot[bot]",
"author_login": "openhands-release-bot[bot]",
"committed_at": "2026-07-09T13:41:09Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "20e1b9fd2867d719e38fb502be2350c0e2b74445",
"body": "…entry (#382)\n\n* Add jira-create-pr skill and automation catalog entry\n\n- Add skills/jira-create-pr/ from jpelletier1/.openhands with SKILL.md,\n scripts/main.py, and references/setup.md\n- Register in marketplaces/openhands-extensions.json\n- Add automations/catalog/jira-create-pr.json for Agent Canv\n[…]\nog.mjs\n (test_skills_catalog.py)\n\nCo-authored-by: openhands <openhands@all-hands.dev>\n\n---------\n\nCo-authored-by: openhands <openhands@all-hands.dev>\nCo-authored-by: Engel Nyst <engel.nyst@gmail.com>",
"is_bot": false,
"headline": "feat: add jira-issue-to-pr skill and Agent Canvas automation catalog …",
"author_name": "jpelletier1",
"author_login": "jpelletier1",
"committed_at": "2026-07-06T18:00:35Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "2a1bb45e9ffbd55ef26acf3bc805eb73ffed812c",
"body": "…(#388)",
"is_bot": false,
"headline": "docs: document AUTOMATION_MODEL profile selection for custom scripts …",
"author_name": "Hiep Le",
"author_login": "hieptl",
"committed_at": "2026-07-06T15:05:15Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b04266e78976f04738bed13bc358237cc52f9d78",
"body": "* feat(integrations): add Superhuman Mail MCP catalog entry\n\nAdd Superhuman Mail to the integrations catalog with OAuth-based\nstreamable HTTP transport to https://mcp.mail.superhuman.com/mcp.\n\n- New entry: integrations/catalog/superhuman-mail.json\n- Rebuilt catalog-index.js (146 entries)\n\nPart of th\n[…]\n- Track B: OAuth support in agent-server and agent-canvas (separate PRs)\n\n* feat(integrations): configure Superhuman MCP OAuth auth\n\n---------\n\nCo-authored-by: neubig <neubig@users.noreply.github.com>",
"is_bot": false,
"headline": "feat(integrations): add Superhuman Mail MCP catalog entry (#387)",
"author_name": "Graham Neubig",
"author_login": "neubig",
"committed_at": "2026-07-05T19:08:43Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "7b0de54473eafa875286522fd518be167c83c268",
"body": "… Atlassian entry\n\nThe existing atlassian entry only exposed the Atlassian-hosted OAuth MCP server. This adds a second api connection option using uvx mcp-atlassian for Jira and/or Confluence API-token users, keeps the generated integration catalog index in sync, and follows marketplace punctuation conventions.\n\nMerged by OpenHands on behalf of the user after approval and green CI.",
"is_bot": false,
"headline": "feat(integrations): add mcp-atlassian self-hosted stdio connection to…",
"author_name": "jpelletier1",
"author_login": "jpelletier1",
"committed_at": "2026-07-02T21:17:51Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "599cc4dc95bf1f489dedaf9f722331b0cd71c52e",
"body": "Add focused Windows notes for shell examples\n\nCo-authored-by: openhands <openhands@all-hands.dev>",
"is_bot": false,
"headline": "docs: add Windows command references for skills (#329)",
"author_name": "Graham Neubig",
"author_login": "neubig",
"committed_at": "2026-07-01T22:49:56Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "d63156eed3398ef2be117dfea140bf35c4f8a824",
"body": "…ransports (#364)\n\n* feat(integrations): support custom request headers on MCP shttp/sse transports\n\nAdd `headerFields?: MarketplaceField[]` to the `shttp` and `sse` variants of\n`IntegrationTransport`, mirroring the `envFields`/`argFields` pattern already\nused by `stdio`. This lets a hosted MCP inte\n[…]\n/v1/mcp) with US5/EU examples.\n- Update `notes` to describe the site-specific host.\n\nCo-authored-by: openhands <openhands@all-hands.dev>\n\n---------\n\nCo-authored-by: openhands <openhands@all-hands.dev>",
"is_bot": false,
"headline": "feat(integrations): support custom request headers on MCP shttp/sse t…",
"author_name": "Graham Neubig",
"author_login": "neubig",
"committed_at": "2026-06-30T13:00:48Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "c1392e8b2ebbfbda5cd70628334c05684f5a1b75",
"body": "* chore(main): release 0.8.0\n\n* chore(release): bump _version.py fallback to 0.8.0\n\nrelease-please bumped package.json and pyproject.toml to 0.8.0 but left\nthe _FALLBACK_VERSION in _version.py at 0.7.2, failing\ntest_version_alignment. Bump it to match so the 0.8.0 release PR CI\npasses.\n\n---------\n\nCo-authored-by: openhands-release-bot[bot] <290150379+openhands-release-bot[bot]@users.noreply.github.com>\nCo-authored-by: openhands <openhands@all-hands.dev>",
"is_bot": true,
"headline": "chore(main): release 0.8.0 (#377)",
"author_name": "openhands-release-bot[bot]",
"author_login": "openhands-release-bot[bot]",
"committed_at": "2026-06-30T04:04:33Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "f2733f3268653efbde0df673a135dcfe04488369",
"body": "Notion's catalog entry listed the api_key (stdio MCP) option first and\nthe OAuth2 option second. integrations-hub builds each visible connector\nfrom connectionOptions[0], so Notion surfaced as an api_key connector\nand its OAuth option was silently dropped — unlike Slack and Linear,\nwhich list oauth \n[…]\n.\n\nReorder the options so oauth comes first (favored) and the api_key\nstdio MCP option remains as a fallback, matching the Slack/Linear\nconvention.\n\nCo-authored-by: openhands <openhands@all-hands.dev>",
"is_bot": false,
"headline": "fix(catalog): favor Notion OAuth connection option (#379)",
"author_name": "Graham Neubig",
"author_login": "neubig",
"committed_at": "2026-06-30T04:01:02Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "6e46834290cf90864361b6900061550377bd16b9",
"body": "* feat: add plain English content skill",
"is_bot": false,
"headline": "feat: add plain English content skill (#376)",
"author_name": "Engel Nyst",
"author_login": "enyst",
"committed_at": "2026-06-29T02:40:40Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "9cc4c6da07d0227722f2093e699b4dc1d8953d33",
"body": "* chore(main): release 0.8.0\n\n* chore(main): release 0.7.2\n\n---------\n\nCo-authored-by: openhands-release-bot[bot] <290150379+openhands-release-bot[bot]@users.noreply.github.com>\nCo-authored-by: openhands <openhands@all-hands.dev>",
"is_bot": true,
"headline": "chore(main): release 0.7.2 (#375)",
"author_name": "openhands-release-bot[bot]",
"author_login": "openhands-release-bot[bot]",
"committed_at": "2026-06-29T01:50:24Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "e6e24dd114d7b4e5a29e1775efe5cbb03f6d06c1",
"body": "…ack (#374)\n\nfeat(integrations): prefer Linear MCP OAuth while keeping bearer fallback\n\nCo-authored-by: openhands <openhands@all-hands.dev>",
"is_bot": false,
"headline": "fix(integrations): prefer Linear MCP OAuth while keeping bearer fallb…",
"author_name": "Graham Neubig",
"author_login": "neubig",
"committed_at": "2026-06-29T01:33:35Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "4479797ede9b97d0b38977e083be8500361f4947",
"body": "…slack, mondaydotcom 404s) (#372)\n\nfix(integrations): replace broken simpleicons logo URLs\n\nsimple-icons v16 removed all Salesforce-owned brand icons (salesforce,\nslack, heroku, mulesoft, quip, informatica) for trademark reasons, so\ncdn.simpleicons.org/{salesforce,slack}/FFFFFF now 404. mondaydotcom\n[…]\nntries\n (no clean square icon source exists).\n\nBump patch version 0.7.0 -> 0.7.1.\n\nCo-authored-by: Graham Neubig <gneubig@users.noreply.github.com>\nCo-authored-by: openhands <openhands@all-hands.dev>",
"is_bot": false,
"headline": "fix(integrations): replace broken simpleicons logo URLs (salesforce, …",
"author_name": "Graham Neubig",
"author_login": "neubig",
"committed_at": "2026-06-28T11:09:34Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "c020fae5cb3ec42fbdd0d8e753b3d47006ed9282",
"body": "* chore(main): release 0.7.0\n\n* chore(release): bump _version.py to 0.7.0 (release-please Generic updater did not bump it)\n\n---------\n\nCo-authored-by: openhands-release-bot[bot] <290150379+openhands-release-bot[bot]@users.noreply.github.com>\nCo-authored-by: openhands <openhands@all-hands.dev>",
"is_bot": true,
"headline": "chore(main): release 0.7.0 (#354)",
"author_name": "openhands-release-bot[bot]",
"author_login": "openhands-release-bot[bot]",
"committed_at": "2026-06-28T02:48:17Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "49fddbcb9d0a22084d07e1b8c9e951abbc0a70aa",
"body": "… (#371)\n\nfix(release): add x-release-please-update-version annotation so _version.py is bumped\n\nrelease-please lists python/openhands_extensions/_version.py as a plain\nextra-file, which uses the Generic updater. The Generic updater only\nreplaces a version string that is marked with the\n'x-release-p\n[…]\nease PR's version-alignment test failed\n(_version.py stayed 0.6.0 while package.json bumped to 0.7.0).\n\nAdd the annotation above _FALLBACK_VERSION.\n\nCo-authored-by: openhands <openhands@all-hands.dev>",
"is_bot": false,
"headline": "fix(release): annotate _version.py for release-please Generic updater…",
"author_name": "Graham Neubig",
"author_login": "neubig",
"committed_at": "2026-06-28T02:45:08Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "5a4b60aed5a7b65eca055e2446e2ba3de7bad9df",
"body": "…7.0 (#370)\n\nfix(release): revert manual version bump to 0.6.0 so release-please can cut 0.7.0\n\nPR #369 manually bumped package.json/pyproject.toml/_version.py/\n.release-please-manifest.json to 0.7.0. release-please owns the version\nbump and the manifest; the manual manifest bump made release-please\n[…]\nanly\ncreate the 0.7.0 release PR, bump all files together, tag v0.7.0, and\npublish to npm/PyPI. The catalog/schema content from #369 is unaffected.\n\nCo-authored-by: openhands <openhands@all-hands.dev>",
"is_bot": false,
"headline": "fix(release): revert manual version bump so release-please can cut 0.…",
"author_name": "Graham Neubig",
"author_login": "neubig",
"committed_at": "2026-06-28T02:41:24Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "fc52b1bd8ab463f89a4677a1d3208cdab3fd8bca",
"body": "…connectors (#369)\n\n* feat(integrations): remove defaultTool, add openApiUrl, drop no-spec connectors\n\nRemove the defaultTool field from the integration catalog and type defs\n(it is no longer used by integrations-hub or agent-canvas; tools come\nfrom MCP tools/list or HTTP OpenAPI regeneration). For \n[…]\nwith reasons; 29 HTTP, 50 MCP).\n\n98 catalog/sync/version/schema tests pass; schema now rejects mcp+http and\nhttp+transport mixed shapes.\n\n---------\n\nCo-authored-by: openhands <openhands@all-hands.dev>",
"is_bot": false,
"headline": "feat(integrations): remove defaultTool, add openApiUrl, drop no-spec …",
"author_name": "Graham Neubig",
"author_login": "neubig",
"committed_at": "2026-06-28T02:36:46Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "b0092a35c2a6c4fc3b326f7997b8a4ee8a9bf89b",
"body": "…ntials (#367)\n\n* docs(agent-canvas-environment): fix delegation to carry tools + credentials\n\nThe delegation template forwarded agent_settings from /api/settings, whose\nllm.api_key is masked as \"**********\", so delegated conversations failed\nwith LLMAuthenticationError (\"You must provide an API key\n[…]\nf 80) so the bump is\n explicit and reviewers can evaluate the compute-cost impact.\n\nCo-authored-by: openhands <openhands@all-hands.dev>\n\n---------\n\nCo-authored-by: openhands <openhands@all-hands.dev>",
"is_bot": false,
"headline": "docs(agent-canvas-environment): fix delegation to carry tools + crede…",
"author_name": "Graham Neubig",
"author_login": "neubig",
"committed_at": "2026-06-27T18:40:43Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "e7ffdde7d643c1288939fb3da4a19f89764e78d2",
"body": "refactor: align catalog read APIs across JS and Python\n\nKeep integrations/catalog/<id>.json as the single source of truth while making JS read functions return independent copies like the Python package. Replace provider-specific catalog parity checks and examples with generic invariants.\\n\\nCo-authored-by: openhands <openhands@all-hands.dev>\n\nCo-authored-by: Graham Neubig <gneubig@users.noreply.github.com>",
"is_bot": false,
"headline": "refactor: align integration catalog read APIs (#359)",
"author_name": "Graham Neubig",
"author_login": "neubig",
"committed_at": "2026-06-25T15:21:20Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "3d80d8d92bd82a302ff58c4b5334b19fd1adf0ea",
"body": "Regenerate skills/openhands-sdk/SKILL.md via\nscripts/sync_openhands_sdk_skill.py. The live llms.txt no longer\nlists the 'Sub-Agent Delegation' guide, so the stale entry is\nremoved. Also regenerate skills/index.js via\nnode scripts/build-skills-catalog.mjs (it embeds SKILL.md content)\nso test_skills_c\n[…]\nhis unblocks the sync-sdk-skill and test CI checks on main and\non PRs (e.g. #355).\n\nCo-authored-by: Graham Neubig <gneubig@users.noreply.github.com>\nCo-authored-by: openhands <openhands@all-hands.dev>",
"is_bot": false,
"headline": "chore: sync SDK skill (#356)",
"author_name": "Graham Neubig",
"author_login": "neubig",
"committed_at": "2026-06-24T21:34:41Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "6059badd20012a7d23a37bb9117ff305cd619a87",
"body": "* Add Bitbucket hub + Cloud/Data Center spoke skills\n\nRefactor the bitbucket skill into a detection hub that triggers on\ngit/bitbucket and routes to provider-specific skills via invoke_skill:\n\n- bitbucket (hub): detects Cloud vs Data Center by which token env var\n is present (case-insensitive) and \n[…]\nneeds .plugin/plugin.json plus .claude-plugin\nand .codex-plugin vendor symlinks so Codex/Claude can load them\n(tests/test_skill_plugin_loading.py).\n\nCo-authored-by: openhands <openhands@all-hands.dev>",
"is_bot": false,
"headline": "feat: add Bitbucket hub + Cloud/Data Center spoke skills (#355)",
"author_name": "John-Mason P. Shackelford",
"author_login": "jpshackelford",
"committed_at": "2026-06-24T15:25:28Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "b99ddea109822ea201e18bb7b766ac82a00883af",
"body": "Co-authored-by: openhands <openhands@all-hands.dev>",
"is_bot": false,
"headline": "docs: clarify first-party dependency freshness reviews (#353)",
"author_name": "Engel Nyst",
"author_login": "enyst",
"committed_at": "2026-06-23T21:32:45Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "3c9353849df6a681260e504236bcf598f1ba3ac1",
"body": "Co-authored-by: Graham Neubig <gneubig@users.noreply.github.com>\nCo-authored-by: openhands <openhands@all-hands.dev>",
"is_bot": false,
"headline": "ci: use PyPI trusted publishing (#352)",
"author_name": "Graham Neubig",
"author_login": "neubig",
"committed_at": "2026-06-23T14:55:58Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "14b7acdbfd6fb4fbd309024b26fb01460ee52484",
"body": "…S + Python) (#346)\n\n* feat: add openhands_extensions Python package sharing the integration catalog JSON asset\n\nAdd a Python package (openhands_extensions) that reads the OAuth provider\ncatalog from the same JSON asset as the JS package, so Python services (e.g.\nthe integrations-hub backend) can im\n[…]\nns package to PyPI\n\nCo-authored-by: openhands <openhands@all-hands.dev>\n\n---------\n\nCo-authored-by: openhands <openhands@all-hands.dev>\nCo-authored-by: Graham Neubig <gneubig@users.noreply.github.com>",
"is_bot": false,
"headline": "feat(integrations): unify catalog into single JSON source of truth (J…",
"author_name": "Graham Neubig",
"author_login": "neubig",
"committed_at": "2026-06-23T14:02:27Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "c9c99413ba5537e0471533a9bcd55e218ac4ae58",
"body": "* Document local Agent Canvas conversations\n\nAdd local agent-server API guidance for starting child conversations from Agent Canvas dev mode, including safe session key handling, curl examples, polling, and UI links.\n\nCo-authored-by: openhands <openhands@all-hands.dev>\n\n* docs: move local Agent Canv\n[…]\n: sync skills catalog\n\n* docs: clarify local backend workspace settings\n\n---------\n\nCo-authored-by: openhands <openhands@all-hands.dev>\nCo-authored-by: Graham Neubig <gneubig@users.noreply.github.com>",
"is_bot": false,
"headline": "docs: document local Agent Canvas child conversations (#300)",
"author_name": "Graham Neubig",
"author_login": "neubig",
"committed_at": "2026-06-22T13:17:45Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "67494e5cdd65c3e1893616f0f5df1e490a099e25",
"body": "Co-authored-by: openhands <openhands@all-hands.dev>",
"is_bot": false,
"headline": "chore: sync OpenHands SDK skill examples (#348)",
"author_name": "Engel Nyst",
"author_login": "enyst",
"committed_at": "2026-06-21T22:20:50Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "c72f462e8714cd008eefc68906a21ab7f33eef62",
"body": "Co-authored-by: openhands <openhands@all-hands.dev>",
"is_bot": false,
"headline": "fix: align nested plugin skill names (#347)",
"author_name": "Engel Nyst",
"author_login": "enyst",
"committed_at": "2026-06-21T22:20:17Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "bb34a76d5230ba287cda4ea2883b5d008111575c",
"body": "* Add Agent Canvas environment skill\n\n* chore: sync openhands-sdk skill with upstream docs\n\nCo-authored-by: openhands <openhands@all-hands.dev>\n\n* chore: rebuild skills/index.js after SDK skill sync\n\nCo-authored-by: openhands <openhands@all-hands.dev>\n\n---------\n\nCo-authored-by: openhands <openhands@all-hands.dev>",
"is_bot": false,
"headline": "feat: add Agent Canvas environment skill (#340)",
"author_name": "Graham Neubig",
"author_login": "neubig",
"committed_at": "2026-06-19T16:41:16Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "af767ddf7f127a8745df67a72f42d0a4cea69192",
"body": "…rsistence (#342)\n\n* feat: migrate polling automations to KV store for cloud-safe state persistence\n\nReplace disk-based state files with the new automation KV store API\n(landed in OpenHands/automation#69) across all three polling plugins.\n\nProblem: github-pr-reviewer, github-repo-monitor, and slack-\n[…]\ng on load (no silent fallback)\n- KV errors propagating on save (no silent fallback)\n\nCo-authored-by: openhands <openhands@all-hands.dev>\n\n---------\n\nCo-authored-by: openhands <openhands@all-hands.dev>",
"is_bot": false,
"headline": "feat: migrate polling automations to KV store for cloud-safe state pe…",
"author_name": "Tim O'Farrell",
"author_login": "tofarr",
"committed_at": "2026-06-18T19:06:16Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "e15748cf0e13dccb73fef1a403a4b2e6212fdc46",
"body": "* fix: render Slack monitor replies with markdown_text\n\nPost agent summaries through Slack's markdown_text field so Slack renders standard Markdown without local regex conversion. Add regression coverage for the chat.postMessage payload and update generated skill catalog output.\n\nCo-authored-by: openhands <openhands@all-hands.dev>\n\n* fix: poll Slack follow-up threads before expiry\n\nCo-authored-by: openhands <openhands@all-hands.dev>\n\n---------\n\nCo-authored-by: openhands <openhands@all-hands.dev>",
"is_bot": false,
"headline": "fix: render Slack monitor replies with markdown_text (#337)",
"author_name": "OpenHands Bot",
"author_login": "all-hands-bot",
"committed_at": "2026-06-15T17:46:39Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "ee7480edafd0fa92b1134b844bb554ad357f2380",
"body": "Co-authored-by: openhands-release-bot[bot] <290150379+openhands-release-bot[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "chore(main): release 0.5.0 (#334)",
"author_name": "openhands-release-bot[bot]",
"author_login": "openhands-release-bot[bot]",
"committed_at": "2026-06-12T15:35:25Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "aba201ddbd8a50ab4bdee560d56616a159c2767a",
"body": "* Switch GitHub MCP to hosted endpoint\n\nCo-authored-by: openhands <openhands@all-hands.dev>\n\n* feat: add GitHub MCP secret metadata\n\nCo-authored-by: openhands <openhands@all-hands.dev>\n\n---------\n\nCo-authored-by: openhands <openhands@all-hands.dev>",
"is_bot": false,
"headline": "feat: switch GitHub MCP to hosted endpoint (#335)",
"author_name": "OpenHands Bot",
"author_login": "all-hands-bot",
"committed_at": "2026-06-12T15:33:26Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "e1d7ba310a941804022c79a786de0a28c618680d",
"body": "Co-authored-by: openhands <openhands@all-hands.dev>",
"is_bot": false,
"headline": "feat(slack-channel-monitor): support triggered thread follow-ups (#333)",
"author_name": "OpenHands Bot",
"author_login": "all-hands-bot",
"committed_at": "2026-06-12T14:27:07Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "219b1a3b5d1a181385e17e674eef1ebd3089231c",
"body": "Co-authored-by: openhands-release-bot[bot] <290150379+openhands-release-bot[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "chore(main): release 0.4.2",
"author_name": "openhands-release-bot[bot]",
"author_login": "openhands-release-bot[bot]",
"committed_at": "2026-06-12T01:46:08Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "58bc66110b2a12b3bcd80513b8b8aa1e9c13c185",
"body": "…de on-demand control (#332)\n\nAlign GitHub PR reviewer automation with tarball implementation\n\nCo-authored-by: openhands <openhands@all-hands.dev>",
"is_bot": false,
"headline": "fix: prevent pr review automation from going out of control and provi…",
"author_name": "OpenHands Bot",
"author_login": "all-hands-bot",
"committed_at": "2026-06-12T01:42:21Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "8c4366c890497db9eb476908a828b96b788496e6",
"body": "fix(qa-changes): pin lmnr below incompatible release\n\nPin the QA action bootstrap to lmnr<0.7.53 because lmnr 0.7.53 removed the rollout_entrypoint observe kwarg while current OpenHands SDK releases still forward it.\n\nCo-authored-by: openhands <openhands@all-hands.dev>",
"is_bot": false,
"headline": "fix: pin lmnr below incompatible release (fixes qa-changes) (#326)",
"author_name": "Engel Nyst",
"author_login": "enyst",
"committed_at": "2026-06-11T17:35:32Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "4cc912203323cb6a9970f493ccb5a610f5a2da19",
"body": "* docs: sync OpenHands SDK skill examples\n\nRegenerate the OpenHands SDK skill so it includes the latest SDK example links.\n\n---------\n\nCo-authored-by: openhands <openhands@all-hands.dev>",
"is_bot": false,
"headline": "docs: sync OpenHands SDK skill examples (#327)",
"author_name": "Engel Nyst",
"author_login": "enyst",
"committed_at": "2026-06-11T16:49:25Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "8b632f69141ac672bd4947c2205cbfeef255eba3",
"body": "Co-authored-by: openhands-release-bot[bot] <290150379+openhands-release-bot[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "chore(main): release 0.4.1",
"author_name": "openhands-release-bot[bot]",
"author_login": "openhands-release-bot[bot]",
"committed_at": "2026-06-11T16:10:46Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b755c886eba32ba52d718a07a016d57067f85597",
"body": "…c custom script (#325)\n\n* refactor(github-pr-reviewer): add deterministic custom script\n\nReplace preset/prompt approach with a custom Python script that:\n- Tracks reviewed PR numbers in a persistent state file\n- Only spawns LLM conversations for new, unreviewed PRs\n- Posts results as GitHub comment\n[…]\nr-reviewer SKILL.md update\n\nCo-authored-by: openhands <openhands@all-hands.dev>\n\n---------\n\nCo-authored-by: tofarr <tofarr@users.noreply.github.com>\nCo-authored-by: openhands <openhands@all-hands.dev>",
"is_bot": false,
"headline": "refactor(github-pr-reviewer): replace preset/prompt with deterministi…",
"author_name": "Tim O'Farrell",
"author_login": "tofarr",
"committed_at": "2026-06-11T14:22:39Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "53b22e3b8b4408f3ac93f79ddda261fe4f6e0637",
"body": "Co-authored-by: openhands-release-bot[bot] <290150379+openhands-release-bot[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "chore(main): release 0.4.0 (#315)",
"author_name": "openhands-release-bot[bot]",
"author_login": "openhands-release-bot[bot]",
"committed_at": "2026-06-10T13:41:21Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e7d200fdabc6801dd9df810c2037444a8aebb136",
"body": "fix: load duplicate checker JS helpers as CommonJS\n\nCo-authored-by: openhands <openhands@all-hands.dev>",
"is_bot": false,
"headline": "Fix issue duplicate checker CommonJS helper loading (#284)",
"author_name": "Engel Nyst",
"author_login": "enyst",
"committed_at": "2026-06-09T17:53:50Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "f60dee40278df8d5ccbe6e19afc36e2af16bb936",
"body": "* Harden workflow GitHub context handling\n\nPass attacker-controllable GitHub context and workflow values through environment variables before shell use.\n\n* Sync vulnerability scan workflow copy\n* Keep GitHub-controlled event names direct\n\n---------\n\nCo-authored-by: openhands <openhands@all-hands.dev>",
"is_bot": false,
"headline": "Harden workflow output handling (#263)",
"author_name": "Engel Nyst",
"author_login": "enyst",
"committed_at": "2026-06-09T17:52:44Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "3f8a900770f2b8d473218c62e5938df49c363602",
"body": "* Harden slack monitor setup instructions\n\nCo-authored-by: openhands <openhands@all-hands.dev>\n\n* chore: regenerate skills catalog\n\nCo-authored-by: openhands <openhands@all-hands.dev>\n\n---------\n\nCo-authored-by: openhands <openhands@all-hands.dev>",
"is_bot": false,
"headline": "docs: harden slack-channel-monitor setup instructions (#322)",
"author_name": "Jamie Chicago",
"author_login": "jamiechicago312",
"committed_at": "2026-06-09T17:51:25Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "2a2d875bc7237b2f6935c4e79400925254be83e3",
"body": "…ACCESS_TOKEN (#313)\n\n* github-repo-monitor: rename GITHUB_TOKEN to GITHUB_PERSONAL_ACCESS_TOKEN\n\nCo-authored-by: openhands <openhands@all-hands.dev>\n\n* regenerate skills/index.js after GITHUB_TOKEN -> GITHUB_PERSONAL_ACCESS_TOKEN rename\n\n---------\n\nCo-authored-by: openhands <openhands@all-hands.dev>",
"is_bot": false,
"headline": "refactor: github-repo-monitor rename GITHUB_TOKEN to GITHUB_PERSONAL_…",
"author_name": "jpelletier1",
"author_login": "jpelletier1",
"committed_at": "2026-06-09T13:44:53Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "6001ad82d121bb4ac9ff5b266017f06817c8173c",
"body": "…317)\n\n* Fix colon in command filenames for Windows compatibility\n\nReplace colons with dashes in generated command filenames to avoid\nWindows filesystem restrictions (colon is reserved character).\n\nAlso rename existing colon-named files:\n- automation:create.md -> automation-create.md\n- slack-monitor\n[…]\nre similar renames\n\nCloses #230\n\n* test: cover colon command filename normalization\n\nCo-authored-by: openhands <openhands@all-hands.dev>\n\n---------\n\nCo-authored-by: openhands <openhands@all-hands.dev>",
"is_bot": false,
"headline": "fix: replace colons in command filenames for Windows compatibility (#…",
"author_name": "Jamie Chicago",
"author_login": "jamiechicago312",
"committed_at": "2026-06-09T13:33:46Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "05215de0342d8b74dedccfb6cc3560e47d5d4e1b",
"body": "Rename GitHub PR review automation to code review agent\n\nCo-authored-by: Engel Nyst <engel.nyst@gmail.com>",
"is_bot": false,
"headline": "chore: rename GitHub review automation to code review agent (#319)",
"author_name": "🐾 smolpaws",
"author_login": "smolpaws",
"committed_at": "2026-06-08T21:41:45Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "3fbc4b8993cfc90d1eab73ea9592747722881733",
"body": "Rename GitHub PR review automation\n\nCo-authored-by: Engel Nyst <engel.nyst@gmail.com>",
"is_bot": false,
"headline": "chore: rename GitHub PR review automation (#318)",
"author_name": "🐾 smolpaws",
"author_login": "smolpaws",
"committed_at": "2026-06-08T21:33:42Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e56c5ef4715aff78f5c944e9da623b8f3a8ac193",
"body": "* feat: add GitHub Actions skill for workflow creation and debugging\n\n- Add comprehensive GitHub Actions skill with SKILL.md\n- Include practical examples for testing, debugging, and best practices\n- Cover common pitfalls like action deployment requirements and permissions\n- Add README.md with detail\n[…]\nx.js for github-actions skill\n\nCo-authored-by: openhands <openhands@all-hands.dev>\n\n---------\n\nCo-authored-by: openhands <openhands@all-hands.dev>\nCo-authored-by: OpenHands Bot <contact@all-hands.dev>",
"is_bot": false,
"headline": "feat: add GitHub Actions skill for workflow creation and debugging (#56)",
"author_name": "Juan Michelini",
"author_login": "juanmichelini",
"committed_at": "2026-06-08T17:52:20Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "ecb181896c190111f9a243d233cb664597fa0526",
"body": "Replace ALLHANDS_BOT_GITHUB_PAT in the pr-review and\nvulnerability-remediation plugin READMEs with trust-boundary guidance:\nrecommend OPENHANDS_BOT_GITHUB_PAT_PUBLIC on public repos and a\nrepo-scoped token on private repos, never a token that can reach\nprivate repos from a public workflow.\n\nCo-authored-by: Debug Agent <debug@example.com>\nCo-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "docs: scope bot-token guidance to trust boundary (#314)",
"author_name": "simonrosenberg",
"author_login": "simonrosenberg",
"committed_at": "2026-06-08T16:21:47Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "081cf7699966c03d5dfffc04a116926fe3cba2ff",
"body": "Co-authored-by: openhands-release-bot[bot] <290150379+openhands-release-bot[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "chore(main): release 0.3.0 (#312)",
"author_name": "openhands-release-bot[bot]",
"author_login": "openhands-release-bot[bot]",
"committed_at": "2026-06-07T21:34:03Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "3299ef182099688f6f89193926b38935fd4c1337",
"body": "* feat: export SKILLS_CATALOG from ./skills subpath\n\nAdd a codegen script (scripts/build-skills-catalog.mjs) that reads the\nexisting skills/*/SKILL.md files, parses YAML frontmatter + body\ncontent, and generates skills/index.js with the catalog data inlined.\n\nThe SKILL.md files remain the single sou\n[…]\nnds <openhands@all-hands.dev>\n\n* fix: trim whitespace-only names in catalog codegen\n\nCo-authored-by: openhands <openhands@all-hands.dev>\n\n---------\n\nCo-authored-by: openhands <openhands@all-hands.dev>",
"is_bot": false,
"headline": "feat: export SKILLS_CATALOG from ./skills subpath (#310)",
"author_name": "Rohit Malhotra",
"author_login": "malhotra5",
"committed_at": "2026-06-07T21:30:44Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "0057d0126cbdca656b8ea57fff6ac1ad3a776d0c",
"body": "…k (#293)\n\n* fix(github-pr-review): teach agent how suggestion blocks actually work\n\nGitHub suggestion blocks replace the targeted line range with whatever\nis in the body. The previous guidance told the agent the suggestion 'must\nhave the same number of lines as the range', which is wrong and was th\n[…]\ns the misleading dead\nbranch.\n\nCo-authored-by: openhands <openhands@all-hands.dev>\n\n---------\n\nCo-authored-by: openhands <openhands@all-hands.dev>\nCo-authored-by: OpenHands Bot <contact@all-hands.dev>",
"is_bot": false,
"headline": "fix(github-pr-review): teach agent how suggestion blocks actually wor…",
"author_name": "Juan Michelini",
"author_login": "juanmichelini",
"committed_at": "2026-06-06T17:05:50Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "fdb217a0ea572fc74b65582ccd63802ab1cec1e2",
"body": "Co-authored-by: openhands-release-bot[bot] <290150379+openhands-release-bot[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "chore(main): release 0.2.0 (#308)",
"author_name": "openhands-release-bot[bot]",
"author_login": "openhands-release-bot[bot]",
"committed_at": "2026-06-05T18:42:33Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "eae4738b31b2292a14391638d4df321f0cc1f1ac",
"body": "* feat(npm): publish the whole repo in the package\n\nDrop the files allowlist so npm ships the entire repo (minus gitignored\nand npm-default cruft), exposing skills/, plugins/, and marketplaces/ as\nresolvable subpaths. Ignore *.tgz so stray pack artifacts aren't published.\n\n* docs: tighten npm packaging section\n\n* docs: drop symlink note from packaging section",
"is_bot": false,
"headline": "feat(npm): publish the whole repo in the package (#307)",
"author_name": "Joe Laverty",
"author_login": "jlav",
"committed_at": "2026-06-05T18:41:32Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4321ca834d25c60f16ad94ff054f42c63a13a0ca",
"body": "Co-authored-by: openhands-release-bot[bot] <290150379+openhands-release-bot[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "chore(main): release 0.1.0 (#306)",
"author_name": "openhands-release-bot[bot]",
"author_login": "openhands-release-bot[bot]",
"committed_at": "2026-06-05T17:49:27Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f6a3d13f6449eb5b5953b2c8f0d1fe43642e0c06",
"body": "In manifest mode the node release-type derives a non-empty component\n(\"extensions\", from package.json name) and include-component-in-tag\ndefaults to true, so release-please produced 'extensions-v*' tags. That\nbroke two things: the first run failed in generate-notes looking for a\nnon-existent 'extensions-v0.0.1' previous_tag, and the eventual release\ntag wouldn't match npm-publish's 'v*' trigger.\n\nSet include-component-in-tag: false so tags are plain 'v*'.",
"is_bot": false,
"headline": "fix(ci): drop component prefix from release tags (#305)",
"author_name": "Joe Laverty",
"author_login": "jlav",
"committed_at": "2026-06-05T17:44:56Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "28d545c82a037d19db89e56ef8b610d6a9e8ce2f",
"body": "* feat: add release-please versioning and npm publish pipeline\n\nAdopt the shared release-please automation from OpenHands/release-actions\n(caller workflows + config/manifest/version.txt) so the repo produces\nSemVer tags, and add a publish-npm workflow that ships @openhands/extensions\non release. Als\n[…]\nst, so the step was dead code.\n\n* ci: drop comment about nonexistent pre-release flow\n\n* ci: set bootstrap-sha to trim first release notes to current main HEAD\n\n* chore: seed baseline version at 0.0.1",
"is_bot": false,
"headline": "feat: add release-please versioning and npm publish pipeline (#303)",
"author_name": "Joe Laverty",
"author_login": "jlav",
"committed_at": "2026-06-05T17:19:56Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "171a9973f50893e4d93c4896339ed40ea29530fa",
"body": "Add an explicit 'Unnecessary comments' check under the Complexity / Good Taste\nscenario so the code-review skill suggests removing noisy or redundant\ncomments that restate the code, narrate the diff, or describe non-local\nbehavior. Reserve comments for genuinely unintuitive things.\n\nRefs OpenHands/software-agent-sdk#3498.\n\nCo-authored-by: openhands <openhands@all-hands.dev>",
"is_bot": false,
"headline": "feat(code-review): flag unnecessary comments (#304)",
"author_name": "Juan Michelini",
"author_login": "juanmichelini",
"committed_at": "2026-06-05T16:26:23Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "5dd68ff47a197a7f8e7cdd7a32a6dcb3702cbd7f",
"body": "…(#301)\n\nBoth slack-channel-monitor and github-repo-monitor scripts dispatch new\nOpenHands conversations via POST /api/conversations but were only passing\nworkspace, agent, and initial_message. The spawned conversations had no\naccess to the user's secrets (GITHUB_TOKEN, SLACK_BOT_TOKEN, etc.) or\nMCP\n[…]\nrver configuration from\n user settings\n- Update create_conversation() to include 'secrets' and 'mcp_config'\n in the conversation creation payload\n\nCo-authored-by: openhands <openhands@all-hands.dev>",
"is_bot": false,
"headline": "fix: forward user secrets and MCP config to dispatched conversations …",
"author_name": "Rohit Malhotra",
"author_login": "malhotra5",
"committed_at": "2026-06-04T18:59:53Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "d916b3599246360bfef12ddf7a7f7568369a8b3c",
"body": "* feat: add slash-command triggers and use RUNTIME_SERVICES for API routing\n\n- Add triggers: frontmatter to slack-channel-monitor (/slack-monitor:poll)\n and github-repo-monitor (/github-monitor:poll)\n- Update catalog prompt fields to use slash commands\n- Replace hardcoded localhost:8000 with instru\n[…]\nnhands <openhands@all-hands.dev>\n\n* fix: sync README catalog with new skill entries\n\nCo-authored-by: openhands <openhands@all-hands.dev>\n\n---------\n\nCo-authored-by: openhands <openhands@all-hands.dev>",
"is_bot": false,
"headline": "feat: convert automation skills to slash commands (#298)",
"author_name": "Rohit Malhotra",
"author_login": "malhotra5",
"committed_at": "2026-06-04T16:40:24Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "660bb7c1d356619be67c4db01d358dcf5b1574b9",
"body": "…(#295)\n\nSyncs the repo script with battle-tested improvements observed in a\ndeployed tarball (automation 6713ff11-5e44-4f01-a2b4-cf94d1dcea9b):\n\n- Add persistent debug log (automation-state/slack_poller_debug.log)\n that mirrors all print() output for post-mortem analysis.\n\n- Add processed_ts dedup\n[…]\nmessage EVAL logging with human/processed flags\n and case labels (Case A / Case B) for easier debugging.\n\nCo-authored-by: openhands <openhands@all-hands.dev>\nCo-authored-by: tofarr <tofarr@gmail.com>",
"is_bot": false,
"headline": "feat(slack-monitor): port prod improvements from deployed automation …",
"author_name": "Rohit Malhotra",
"author_login": "malhotra5",
"committed_at": "2026-06-03T14:56:23Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "26f124c727f77d77d32fbaf41366732ff0f68471",
"body": "- Extract user's request (text after trigger phrase) and present it\n prominently as 'User request' so the agent knows exactly what to act on\n- Name the trigger phrase explicitly so the activation keyword isn't\n mistaken for part of the task\n- Relabel channel history as 'Background context' with a \n[…]\ngent\n- Prevents the agent from latching onto unrelated imperative statements\n in recent channel history (e.g. a previous game or prompt challenge)\n\nCo-authored-by: openhands <openhands@all-hands.dev>",
"is_bot": false,
"headline": "slack-channel-monitor: improve initial prompt context framing (#297)",
"author_name": "Tim O'Farrell",
"author_login": "tofarr",
"committed_at": "2026-06-03T13:45:09Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "899fdaf6ce4b5d0f1deef9bb8fcef2440f884492",
"body": "* Add evidence-based-citations skill\n\nAdds a trigger-activated skill that instructs the agent to back factual\nclaims and field values with official, verifiable sources. The skill\nasks the agent to respond with Field / Value / Quote / Source for each\nclaim and to prefer primary sources (docs, RFCs, A\n[…]\nversions) with a stable RFC 9110 quote that was verified against the\n live source.\n\nCo-authored-by: openhands <openhands@all-hands.dev>\n\n---------\n\nCo-authored-by: openhands <openhands@all-hands.dev>",
"is_bot": false,
"headline": "Add evidence-based-citations skill (#277)",
"author_name": "Juan Michelini",
"author_login": "juanmichelini",
"committed_at": "2026-06-03T07:22:34Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "a47c38120197824f4df1edf959e60216512d6534",
"body": "* fix: include conversation_id in fire_callback for monitor scripts\n\nBoth github-repo-monitor and slack-channel-monitor create OpenHands\nconversations as part of their polling loop but never reported those\nconversation IDs back to the automation service.\n\nThe AutomationRun.conversation_id field is p\n[…]\n directly would store state inside the per-run directory,\nlosing it on every cycle.\n\nCo-authored-by: openhands <openhands@all-hands.dev>\n\n---------\n\nCo-authored-by: openhands <openhands@all-hands.dev>",
"is_bot": false,
"headline": "fix: include conversation_id in fire_callback for monitor scripts (#291)",
"author_name": "Tim O'Farrell",
"author_login": "tofarr",
"committed_at": "2026-06-03T00:42:52Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "62594156a187722344736bc2ff5edfb12c0cc75c",
"body": "* feat(slack): reorder fields and add linked helper text for workspace ID\n\nPut SLACK_TEAM_ID before SLACK_BOT_TOKEN and update the helper text to\nlink to the Slack docs for finding the workspace URL and workspace ID.\n\n_This change was made by an AI agent (OpenHands) on behalf of the user._\n\n* feat(s\n[…]\nt](https://...)) embedded in helperText\n\nCo-authored-by: openhands <openhands@all-hands.dev>\n\n* Remove unnecessary hyperlink\n\n* Fix text\n\n---------\n\nCo-authored-by: openhands <openhands@all-hands.dev>",
"is_bot": false,
"headline": "feat(slack): link to credential docs in install modal helper text (#285)",
"author_name": "chuckbutkus",
"author_login": "chuckbutkus",
"committed_at": "2026-06-02T21:30:03Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "986cb2e9ec99f2d71e845197897d2ab221decd9d",
"body": "* Add automation creation process to SKILL.md\n\nAdded a section outlining the automation creation process for users, detailing the steps to follow when creating an automation.\n\n* Update SKILL.md\n\n* Apply suggestion from @rbren\n\n* Update skills/openhands-automation/SKILL.md\n\nCo-authored-by: OpenHands Bot <contact@all-hands.dev>\n\n* Update skills/openhands-automation/SKILL.md\n\nCo-authored-by: OpenHands Bot <contact@all-hands.dev>\n\n---------\n\nCo-authored-by: OpenHands Bot <contact@all-hands.dev>",
"is_bot": false,
"headline": "Add automation creation process to SKILL.md (#288)",
"author_name": "Robert Brennan",
"author_login": "rbren",
"committed_at": "2026-06-02T17:31:34Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2b25ca9183527dac339d10d947ddc244e9d41f56",
"body": "* Add reusable issue duplicate checker action\n\n* Add duplicate checker plugin manifest\n\n* Remove accidental nested plugin symlink\n\n* Address duplicate checker review feedback\n\n---------\n\nCo-authored-by: openhands <openhands@all-hands.dev>",
"is_bot": false,
"headline": "Add reusable issue duplicate checker action (#283)",
"author_name": "Engel Nyst",
"author_login": "enyst",
"committed_at": "2026-06-02T01:06:05Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "71af09e862a9e7b44fd5a2dfba8e2c465a1e9d18",
"body": "Add references/ab-testing.md covering variant definitions, weighted\nselection, experiment config, observability tags, validation rules,\nand examples. Link from SKILL.md Reference Files section and the\nChoosing the Right Preset table.\n\nRelates to OpenHands/automation#146 and OpenHands/automation#147.\n\nCo-authored-by: openhands <openhands@all-hands.dev>",
"is_bot": false,
"headline": "docs: add A/B testing reference for plugin automations (#278)",
"author_name": "Calvin Smith",
"author_login": "csmith49",
"committed_at": "2026-06-01T16:29:37Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "09503a604b0a08851722a3742e9555b81c54730f",
"body": "…lds (#281)\n\n* feat: add helperText and helperLink to all integration credential fields\n\nAll password fields in integration catalog entries now include:\n- helperText: a short description of what the credential is\n- helperLink: a direct URL to the page where users can obtain the credential\n\nThis ensu\n[…]\nands <openhands@all-hands.dev>\n\n* chore: simplify Exa credential helper text (#281)\n\nCo-authored-by: openhands <openhands@all-hands.dev>\n\n---------\n\nCo-authored-by: openhands <openhands@all-hands.dev>",
"is_bot": false,
"headline": "feat: add credential helperText and helperLink to all integration fie…",
"author_name": "Graham Neubig",
"author_login": "neubig",
"committed_at": "2026-05-31T19:16:18Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "d7c9542fe930fb614ae0c6986dc33a5db327d9d4",
"body": "…ployments, recommend polling (#274)\n\n* fix(openhands-automation): warn about webhook limitations on local deployments and recommend polling\n\nWebhooks require an internet-accessible URL. When AGENT_SERVER_URL or\n<HOST> is a local address (localhost, 127.0.0.1, etc.), external services\ncannot deliver\n[…]\nicate 'Polling vs. Webhooks' header\n\nRemoved duplicate section header for clarity.\n\n---------\n\nCo-authored-by: openhands <openhands@all-hands.dev>\nCo-authored-by: OpenHands Bot <contact@all-hands.dev>",
"is_bot": false,
"headline": "fix(openhands-automation): warn about webhook limitations on local de…",
"author_name": "Tim O'Farrell",
"author_login": "tofarr",
"committed_at": "2026-05-29T15:36:27Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "39711065f53166c52608462f60a4c8507253ce56",
"body": "Remove `pr-review-by-openhands.yml`, `pr-review-evaluation.yml` — PR review is now handled\nvia OpenHands Cloud automation.\n\nCo-authored-by: openhands <openhands@all-hands.dev>",
"is_bot": false,
"headline": "chore: remove PR review GitHub Actions workflow (#270)",
"author_name": "Xingyao Wang",
"author_login": "xingyaoww",
"committed_at": "2026-05-27T16:07:52Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "c4d8d9727405d26fe9013f7ac4ca477cb61a37f6",
"body": "Co-authored-by: neubig <398875+neubig@users.noreply.github.com>",
"is_bot": false,
"headline": "rename mcp catalog to integrations (#266)",
"author_name": "Graham Neubig",
"author_login": "neubig",
"committed_at": "2026-05-25T19:27:41Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b8c1869ec9dea4467bb27d5754dc695d14e27889",
"body": "Co-authored-by: openhands <openhands@all-hands.dev>",
"is_bot": false,
"headline": "fix: restrict github repo monitor triggers by login (#262)",
"author_name": "Engel Nyst",
"author_login": "enyst",
"committed_at": "2026-05-23T13:40:09Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "3125e1176f2fe47fbb3a31ba37a3bbdb0b7952b4",
"body": "…og (#260)\n\n* Add github-repo-monitor and slack-channel-monitor to automation catalog\n\nAdds two new proven workflow entries to the automations catalog,\nsourced from the existing github-repo-monitor and slack-channel-monitor\nskills in this repo.\n\n- github-repo-monitor: watches a GitHub repo for @Open\n[…]\nw entries:\n- github-repo-monitor -> [\"github\"]\n- slack-channel-monitor -> [\"slack\"]\n\nCo-authored-by: openhands <openhands@all-hands.dev>\n\n---------\n\nCo-authored-by: openhands <openhands@all-hands.dev>",
"is_bot": false,
"headline": "Add github-repo-monitor and slack-channel-monitor to automation catal…",
"author_name": "Tim O'Farrell",
"author_login": "tofarr",
"committed_at": "2026-05-23T03:35:56Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "503e5a88a577f0610f8afd5a1cb35982c9716c56",
"body": "* feat: add github-repo-monitor skill\n\nAdds a new skill that creates a cron automation to monitor a GitHub\nrepository for comments on issues and PRs.\n\nWhen a comment containing a configurable trigger phrase (@OpenHands by\ndefault) is detected the skill:\n- Verifies GITHUB_TOKEN is set and has comment\n[…]\nregistry names (CodeActAgent, BrowsingAgent, …)\nare rejected rather than forwarded.\n\nCo-authored-by: openhands <openhands@all-hands.dev>\n\n---------\n\nCo-authored-by: openhands <openhands@all-hands.dev>",
"is_bot": false,
"headline": "feat: add github-repo-monitor skill (#259)",
"author_name": "Tim O'Farrell",
"author_login": "tofarr",
"committed_at": "2026-05-22T22:22:19Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "19a5613a8b65bc02e3a78f1fe1a0546a94984a12",
"body": "* feat: add slack-channel-monitor skill\n\nAdds a skill that guides users through creating a cron automation to\nmonitor up to 10 Slack channels and start OpenHands conversations when\na configurable trigger phrase is detected.\n\nKey features:\n- Polls channels every minute via cron (* * * * *)\n- Trigger \n[…]\nll_new_messages(),\n _process_trigger_message(), _check_conversation_completion()\n\nCo-authored-by: openhands <openhands@all-hands.dev>\n\n---------\n\nCo-authored-by: openhands <openhands@all-hands.dev>",
"is_bot": false,
"headline": "feat: add slack-channel-monitor skill (#258)",
"author_name": "Tim O'Farrell",
"author_login": "tofarr",
"committed_at": "2026-05-22T17:33:05Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "b3c782bb7a89c4dc27b3ff1ff969e8be020e24ea",
"body": "…o-LLM patterns, and corrected env var names (#256)\n\n* fix: use RemoteWorkspace with correct params in custom-automation.md\n\nReplace OpenHandsCloudWorkspace with RemoteWorkspace throughout the\ncustom automation reference doc:\n\n- Fix import path: openhands.workspace -> openhands.sdk.workspace\n- Fix c\n[…]\nERVER_URL fallback from all get_secret()\nhelpers and update the accompanying prose.\n\nCo-authored-by: openhands <openhands@all-hands.dev>\n\n---------\n\nCo-authored-by: openhands <openhands@all-hands.dev>",
"is_bot": false,
"headline": "docs: expand openhands-automation skill with architecture overview, n…",
"author_name": "Tim O'Farrell",
"author_login": "tofarr",
"committed_at": "2026-05-21T22:42:13Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "bf5fabd308b6f86aa7812c75312a121663077fda",
"body": "* code-review: add feedback reactions footer to review output\n\nAdd a line to the mandatory review footer asking users to react with\n👍 or 👎 so we can track how review quality changes are perceived.\n\nCo-authored-by: openhands <openhands@all-hands.dev>\n\n* Move feedback reactions footer from skill to pr\n[…]\n skill, so reviews render one cohesive\nfooter instead of two stacked solicitations.\n\nCo-authored-by: openhands <openhands@all-hands.dev>\n\n---------\n\nCo-authored-by: openhands <openhands@all-hands.dev>",
"is_bot": false,
"headline": "Consolidate duplicate feedback solicitation in PR reviews (#251)",
"author_name": "Calvin Smith",
"author_login": "csmith49",
"committed_at": "2026-05-21T14:58:11Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "5c9fa471771a3b3060d9bae5e8b6284a50e28680",
"body": "OPENHANDS_API_KEY and OPENHANDS_CLOUD_API_URL are not injected by\nthe dispatcher in either local or cloud deployments. The real vars are:\n\n Local: OH_SESSION_API_KEYS_0 / OH_INTERNAL_SERVER_URL\n Cloud: SESSION_API_KEY / RUNTIME_URL\n\nRemove all references to OPENHANDS_API_KEY and OPENHANDS_CLOUD_API_URL.\nUpdate both code examples and the env vars table to use the correct names.\n\nCo-authored-by: openhands <openhands@all-hands.dev>",
"is_bot": false,
"headline": "fix: use correct env var names for session key and server URL (#255)",
"author_name": "Tim O'Farrell",
"author_login": "tofarr",
"committed_at": "2026-05-20T23:03:15Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "2ba66ef2820f61b351808f7ca68f0db3f76e3c18",
"body": "The custom-automation skill's Complete Example had a bare 'pip install'\nthat breaks on macOS (where only pip3 exists) and contradicted the\n'Required Dependencies' section above it, which already used uv.\n\n- openhands-automation: replace 'pip install' with 'uv venv + uv pip\n install' in the Complete\n[…]\nuv (not pip/pip3)\n when writing Python dependency installs in skill scripts, in both the\n Scripts section and the Best Practices DO/DON'T summary\n\nCo-authored-by: openhands <openhands@all-hands.dev>",
"is_bot": false,
"headline": "fix: use uv instead of pip in Python script examples (#254)",
"author_name": "Tim O'Farrell",
"author_login": "tofarr",
"committed_at": "2026-05-20T20:16:52Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "d0ca55653388096ced829b68807f4b92876557b0",
"body": "Clarified instructions on determining the correct host for API calls.",
"is_bot": false,
"headline": "Simplify host determination instructions in SKILL.md (#253)",
"author_name": "Engel Nyst",
"author_login": "enyst",
"committed_at": "2026-05-20T19:44:47Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d0634188c8f0b7701c4524c0d99cfec3e3d7cb09",
"body": "Avoid interpolating PR metadata and action inputs directly into bash run scripts. Pass values through environment variables and print them with quoted printf calls so PR titles cannot break out into shell commands.\n\nCo-authored-by: openhands <openhands@all-hands.dev>",
"is_bot": false,
"headline": "Harden PR review shell context handling (#250)",
"author_name": "Graham Neubig",
"author_login": "neubig",
"committed_at": "2026-05-20T15:48:52Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "d2c9fec2fe8edf603cf0ec69c7fae796fd932246",
"body": "* added {thumbs-up}/{thumbs-down} feedback signal for agent generated PR review\n\n* Inline PR review feedback in the main review body\n\nCo-authored-by: openhands <openhands@all-hands.dev>\n\n---------\n\nCo-authored-by: openhands <openhands@all-hands.dev>",
"is_bot": false,
"headline": "Add maintainer feedback collection to PR reviews (#249)",
"author_name": "Anirudh Khatry",
"author_login": "anirudhkhatry",
"committed_at": "2026-05-20T02:06:07Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "7b33f64ffccf95f7ccd2ec640aeae84ab1cc2c75",
"body": "Remove GitLab, Google Maps, Postgres, Puppeteer, and SQLite from the MCP catalog now that their tracked packages are deprecated or unverified and we do not have maintained replacements to point users toward.\n\nCo-authored-by: openhands <openhands@all-hands.dev>",
"is_bot": false,
"headline": "chore: remove deprecated MCP catalog entries (#248)",
"author_name": "Engel Nyst",
"author_login": "enyst",
"committed_at": "2026-05-19T23:26:17Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "71fc82455857c52864d905e9f5e5ba6da47821cf",
"body": "* fix: refresh MCP catalog after upstream repo moves\n\nUpdate broken MCP docs URLs, replace verified install commands for GitHub, Brave Search, and Redis, and remove dead catalog entries.\n\nClarify the migration away from the deprecated GitHub npm package in the marketplace metadata.\n\n* chore: preserv\n[…]\n migration\n\nKeep the Slack catalog entry aligned with the already-merged upstream fix while replaying the remaining MCP catalog updates.\n\n---------\n\nCo-authored-by: openhands <openhands@all-hands.dev>",
"is_bot": false,
"headline": "fix: refresh MCP catalog after upstream repo moves (#247)",
"author_name": "Engel Nyst",
"author_login": "enyst",
"committed_at": "2026-05-19T23:17:56Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "c3f896acc55d8ee8717ab40f236960e71c2d477d",
"body": "Co-authored-by: openhands <openhands@all-hands.dev>",
"is_bot": false,
"headline": "Update Slack MCP catalog entry (#246)",
"author_name": "Engel Nyst",
"author_login": "enyst",
"committed_at": "2026-05-19T22:51:57Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "f8870918c072438f810f7a4859e143cc9028f5a4",
"body": "Co-authored-by: OpenHands <openhands@all-hands.dev>",
"is_bot": false,
"headline": "review: tighten dependency recency approval text (#244)",
"author_name": "Engel Nyst",
"author_login": "enyst",
"committed_at": "2026-05-19T08:44:10Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "3bba8e3bd8a134ad190347549d9aead98b081980",
"body": "* Add MCP and automation catalogs\n\nCo-authored-by: openhands <openhands@all-hands.dev>\n\n* Split MCP and automation catalogs by entry\n\nStore MCP marketplace entries and recommended automation templates as one JSON file per catalog item so additions avoid large catalog.json merge conflicts. Index modu\n[…]\nync openhands-sdk skill with upstream docs\n\nCo-authored-by: openhands <openhands@all-hands.dev>\n\n* Document catalog package requirements\n\n---------\n\nCo-authored-by: openhands <openhands@all-hands.dev>",
"is_bot": false,
"headline": "Add MCP and automation catalogs (#237)",
"author_name": "Graham Neubig",
"author_login": "neubig",
"committed_at": "2026-05-18T16:42:37Z",
"body_truncated": true,
"is_coding_agent": true
}
],
"releases_count": 15,
"commits_last_year": 264,
"latest_release_at": "2026-07-21T10:51:51Z",
"latest_release_tag": "v0.11.0",
"releases_from_tags": false,
"days_since_last_push": 0,
"active_weeks_last_year": 32,
"days_since_latest_release": 8,
"mean_days_between_releases": 4.4
},
"community": {
"has_readme": true,
"has_license": true,
"has_description": true,
"has_contributing": false,
"health_percentage": 62,
"has_issue_template": false,
"has_code_of_conduct": false,
"has_pull_request_template": true
},
"ecosystem": {
"packages": [
{
"name": "@openhands/extensions",
"exists": true,
"license": "MIT",
"keywords": [],
"ecosystem": "npm",
"matches_repo": true,
"registry_url": "https://www.npmjs.com/package/@openhands/extensions",
"is_deprecated": false,
"latest_version": "0.11.0",
"repository_url": "https://github.com/OpenHands/extensions",
"versions_count": 16,
"total_downloads": null,
"dependents_count": null,
"deprecation_note": null,
"maintainers_count": 3,
"monthly_downloads": 20722,
"first_published_at": "2026-06-05T12:20:57.866000Z",
"latest_published_at": "2026-07-21T10:52:09.413000Z",
"latest_version_yanked": null,
"days_since_latest_publish": 8
},
{
"name": "openhands-extensions",
"exists": true,
"license": null,
"keywords": [],
"ecosystem": "pypi",
"matches_repo": null,
"registry_url": "https://pypi.org/project/openhands-extensions/",
"is_deprecated": false,
"latest_version": "0.11.0",
"repository_url": null,
"versions_count": 8,
"total_downloads": null,
"dependents_count": null,
"deprecation_note": null,
"maintainers_count": null,
"monthly_downloads": null,
"first_published_at": "2026-06-23T15:32:08.959473Z",
"latest_published_at": "2026-07-21T10:52:30.227569Z",
"latest_version_yanked": null,
"days_since_latest_publish": 8
}
]
},
"popularity": {
"forks": 62,
"stars": 132,
"watchers": 4,
"fork_history": {
"days": [
{
"date": "2025-11-25",
"count": 1
},
{
"date": "2025-12-01",
"count": 1
},
{
"date": "2025-12-06",
"count": 1
},
{
"date": "2025-12-11",
"count": 1
},
{
"date": "2026-01-22",
"count": 2
},
{
"date": "2026-01-25",
"count": 1
},
{
"date": "2026-02-11",
"count": 1
},
{
"date": "2026-02-12",
"count": 1
},
{
"date": "2026-02-13",
"count": 1
},
{
"date": "2026-02-14",
"count": 1
},
{
"date": "2026-02-16",
"count": 2
},
{
"date": "2026-03-02",
"count": 1
},
{
"date": "2026-03-03",
"count": 1
},
{
"date": "2026-03-19",
"count": 1
},
{
"date": "2026-03-24",
"count": 1
},
{
"date": "2026-03-27",
"count": 2
},
{
"date": "2026-03-28",
"count": 1
},
{
"date": "2026-04-01",
"count": 1
},
{
"date": "2026-04-12",
"count": 1
},
{
"date": "2026-04-15",
"count": 1
},
{
"date": "2026-04-22",
"count": 2
},
{
"date": "2026-04-26",
"count": 1
},
{
"date": "2026-05-01",
"count": 1
},
{
"date": "2026-05-02",
"count": 1
},
{
"date": "2026-05-06",
"count": 1
},
{
"date": "2026-05-16",
"count": 1
},
{
"date": "2026-05-19",
"count": 1
},
{
"date": "2026-05-20",
"count": 1
},
{
"date": "2026-05-23",
"count": 1
},
{
"date": "2026-05-24",
"count": 1
},
{
"date": "2026-05-25",
"count": 1
},
{
"date": "2026-06-06",
"count": 1
},
{
"date": "2026-06-07",
"count": 1
},
{
"date": "2026-06-08",
"count": 1
},
{
"date": "2026-06-13",
"count": 1
},
{
"date": "2026-06-15",
"count": 1
},
{
"date": "2026-06-16",
"count": 1
},
{
"date": "2026-06-17",
"count": 1
},
{
"date": "2026-06-18",
"count": 1
},
{
"date": "2026-06-28",
"count": 1
},
{
"date": "2026-07-03",
"count": 1
},
{
"date": "2026-07-06",
"count": 3
},
{
"date": "2026-07-07",
"count": 1
},
{
"date": "2026-07-08",
"count": 1
},
{
"date": "2026-07-09",
"count": 1
},
{
"date": "2026-07-22",
"count": 1
},
{
"date": "2026-07-24",
"count": 2
},
{
"date": "2026-07-26",
"count": 3
},
{
"date": "2026-07-27",
"count": 1
},
{
"date": "2026-07-28",
"count": 3
},
{
"date": "2026-07-29",
"count": 1
}
],
"complete": true,
"collected": 62,
"total_forks": 62
},
"star_history": null,
"open_issues_and_prs": 86
},
"ai_readiness": {
"has_nix": false,
"example_dirs": [],
"has_llms_txt": false,
"has_dockerfile": false,
"has_mcp_signal": false,
"bootstrap_files": [],
"api_schema_files": [],
"has_devcontainer": false,
"typecheck_configs": [],
"toolchain_manifests": [],
"largest_source_bytes": 365433,
"source_files_sampled": 79,
"oversized_source_files": 1,
"agent_instruction_files": [
"AGENTS.md"
],
"agent_instruction_max_bytes": 14908
},
"dependencies": {
"manifests": [
"package.json",
"pyproject.toml"
],
"advisories": {
"error": null,
"scope": null,
"source": null,
"findings": [],
"collected": false,
"malicious": [],
"truncated": false,
"by_severity": {},
"advisory_count": 0,
"affected_count": 0,
"assessed_count": 0,
"malicious_count": 0,
"assessed_package": null,
"unassessed_count": 0,
"direct_affected_count": 0
},
"ecosystems": [
"npm",
"pypi"
],
"dependencies": [
{
"name": "deprecation",
"manifest": "pyproject.toml",
"ecosystem": "pypi",
"version_constraint": ">=2.1,<3"
},
{
"name": "packaging",
"manifest": "pyproject.toml",
"ecosystem": "pypi",
"version_constraint": ">=24,<26"
},
{
"name": "pydantic",
"manifest": "pyproject.toml",
"ecosystem": "pypi",
"version_constraint": ">=2.10,<3"
}
],
"all_dependencies": {
"error": "GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository",
"source": null,
"packages": [],
"collected": false,
"truncated": false,
"total_count": null,
"direct_count": null,
"indirect_count": null
}
},
"maintainership": {
"issues": {
"open_prs": 54,
"merged_prs": 223,
"open_issues": 32,
"closed_ratio": 0.636,
"closed_issues": 56,
"closed_unmerged_prs": 62
},
"bus_factor": 3,
"bot_contributors": 1,
"top_contributors": [
{
"type": "User",
"login": "enyst",
"commits": 53,
"avatar_url": "https://avatars.githubusercontent.com/u/6080905?v=4"
},
{
"type": "User",
"login": "xingyaoww",
"commits": 53,
"avatar_url": "https://avatars.githubusercontent.com/u/38853559?v=4"
},
{
"type": "User",
"login": "neubig",
"commits": 47,
"avatar_url": "https://avatars.githubusercontent.com/u/398875?v=4"
},
{
"type": "User",
"login": "openhands-agent",
"commits": 14,
"avatar_url": "https://avatars.githubusercontent.com/u/175740463?v=4"
},
{
"type": "User",
"login": "tofarr",
"commits": 12,
"avatar_url": "https://avatars.githubusercontent.com/u/17094895?v=4"
},
{
"type": "User",
"login": "malhotra5",
"commits": 10,
"avatar_url": "https://avatars.githubusercontent.com/u/30446202?v=4"
},
{
"type": "User",
"login": "aivong-openhands",
"commits": 7,
"avatar_url": "https://avatars.githubusercontent.com/u/254506604?v=4"
},
{
"type": "User",
"login": "csmith49",
"commits": 6,
"avatar_url": "https://avatars.githubusercontent.com/u/12611964?v=4"
},
{
"type": "User",
"login": "juanmichelini",
"commits": 6,
"avatar_url": "https://avatars.githubusercontent.com/u/20578281?v=4"
},
{
"type": "User",
"login": "jpelletier1",
"commits": 5,
"avatar_url": "https://avatars.githubusercontent.com/u/44589723?v=4"
}
],
"contributors_sampled": 25,
"top_contributor_share": 0.209
},
"quality_signals": {
"has_ci": true,
"has_tests": true,
"ci_workflows": [
"check-extensions.yml",
"deprecation-check.yml",
"npm-publish.yml",
"pr.yml",
"pypi-publish.yml",
"release.yml",
"tests.yml",
"vulnerability-scan.yml"
],
"has_docs_dir": false,
"linter_configs": [],
"has_editorconfig": false,
"has_linter_config": false,
"has_precommit_config": false
},
"security_signals": {
"lockfiles": [],
"scorecard": {
"checks": [
{
"name": "Binary-Artifacts",
"score": 10,
"reason": "no binaries found in the repo",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#binary-artifacts"
},
{
"name": "Branch-Protection",
"score": 4,
"reason": "branch protection is not maximal on development and all release branches",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#branch-protection"
},
{
"name": "CI-Tests",
"score": 10,
"reason": "30 out of 30 merged PRs checked by a CI test -- score normalized to 10",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#ci-tests"
},
{
"name": "CII-Best-Practices",
"score": 0,
"reason": "no effort to earn an OpenSSF best practices badge detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#cii-best-practices"
},
{
"name": "Code-Review",
"score": 7,
"reason": "Found 18/24 approved changesets -- score normalized to 7",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#code-review"
},
{
"name": "Contributors",
"score": 10,
"reason": "project has 6 contributing companies or organizations",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#contributors"
},
{
"name": "Dangerous-Workflow",
"score": 10,
"reason": "no dangerous workflow patterns detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dangerous-workflow"
},
{
"name": "Dependency-Update-Tool",
"score": 0,
"reason": "no update tool detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dependency-update-tool"
},
{
"name": "Fuzzing",
"score": 0,
"reason": "project is not fuzzed",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#fuzzing"
},
{
"name": "License",
"score": 10,
"reason": "license file detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#license"
},
{
"name": "Maintained",
"score": 10,
"reason": "30 commit(s) and 24 issue activity found in the last 90 days -- score normalized to 10",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#maintained"
},
{
"name": "Packaging",
"score": 10,
"reason": "packaging workflow detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#packaging"
},
{
"name": "Pinned-Dependencies",
"score": 0,
"reason": "dependency not pinned by hash detected -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#pinned-dependencies"
},
{
"name": "SAST",
"score": 0,
"reason": "SAST tool is not run on all commits -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#sast"
},
{
"name": "Security-Policy",
"score": 0,
"reason": "security policy file not detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#security-policy"
},
{
"name": "Signed-Releases",
"score": null,
"reason": "no releases found",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#signed-releases"
},
{
"name": "Token-Permissions",
"score": 0,
"reason": "detected GitHub workflow tokens with excessive permissions",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#token-permissions"
},
{
"name": "Vulnerabilities",
"score": 10,
"reason": "0 existing vulnerabilities detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#vulnerabilities"
}
],
"commit": "f887f192d05da5f50df7aa449d82ff2d9c28904d",
"ran_at": "2026-07-29T15:46:49Z",
"aggregate_score": 5.5,
"scorecard_version": "v5.5.0"
},
"has_codeql_workflow": false,
"has_security_policy": false,
"has_dependabot_config": false
},
"contribution_flow": {
"collected": true,
"ci_last_run_at": "2026-07-29T14:29:47Z",
"oldest_open_prs": [
{
"number": 17,
"created_at": "2026-01-14T00:49:38Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 62,
"created_at": "2026-02-19T21:14:58Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 63,
"created_at": "2026-02-19T23:14:17Z",
"last_comment_at": "2026-02-19T23:26:50Z",
"last_comment_author": "jpshackelford"
},
{
"number": 84,
"created_at": "2026-03-02T14:10:10Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 109,
"created_at": "2026-03-15T22:01:12Z",
"last_comment_at": "2026-03-15T23:39:38Z",
"last_comment_author": "openhands-ai"
},
{
"number": 110,
"created_at": "2026-03-15T22:27:46Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 114,
"created_at": "2026-03-19T02:46:30Z",
"last_comment_at": "2026-03-25T19:56:03Z",
"last_comment_author": "romainsimon"
},
{
"number": 126,
"created_at": "2026-03-31T19:10:13Z",
"last_comment_at": "2026-03-31T19:20:12Z",
"last_comment_author": "openhands-ai"
},
{
"number": 138,
"created_at": "2026-04-03T15:11:54Z",
"last_comment_at": "2026-04-03T21:18:23Z",
"last_comment_author": "jamiechicago312"
},
{
"number": 146,
"created_at": "2026-04-07T15:43:16Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 149,
"created_at": "2026-04-07T21:53:08Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 186,
"created_at": "2026-04-17T21:47:56Z",
"last_comment_at": "2026-04-17T22:11:59Z",
"last_comment_author": "aivong-openhands"
},
{
"number": 195,
"created_at": "2026-04-22T15:24:50Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 197,
"created_at": "2026-04-22T19:59:45Z",
"last_comment_at": "2026-06-01T15:51:08Z",
"last_comment_author": "jpshackelford"
},
{
"number": 215,
"created_at": "2026-04-26T12:30:57Z",
"last_comment_at": "2026-04-27T23:48:08Z",
"last_comment_author": "xzessmedia"
},
{
"number": 225,
"created_at": "2026-05-01T03:43:43Z",
"last_comment_at": "2026-07-22T20:26:25Z",
"last_comment_author": "aivong-openhands"
},
{
"number": 245,
"created_at": "2026-05-19T13:05:04Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 252,
"created_at": "2026-05-20T18:16:32Z",
"last_comment_at": "2026-06-24T21:24:16Z",
"last_comment_author": "all-hands-bot"
},
{
"number": 264,
"created_at": "2026-05-24T15:00:51Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 265,
"created_at": "2026-05-25T02:46:30Z",
"last_comment_at": "2026-07-23T00:34:38Z",
"last_comment_author": "pierrebrunelle"
}
],
"last_merged_pr_at": "2026-07-29T14:29:15Z",
"ci_last_conclusion": "SUCCESS",
"oldest_open_issues": [
{
"number": 27,
"created_at": "2026-02-01T17:30:57Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 373,
"created_at": "2026-02-05T17:31:15Z",
"last_comment_at": "2026-06-28T17:08:40Z",
"last_comment_author": "VascoSch92"
},
{
"number": 145,
"created_at": "2026-02-11T11:47:23Z",
"last_comment_at": "2026-04-07T12:56:12Z",
"last_comment_author": "VascoSch92"
},
{
"number": 58,
"created_at": "2026-02-19T14:57:57Z",
"last_comment_at": "2026-02-19T15:51:39Z",
"last_comment_author": "VascoSch92"
},
{
"number": 64,
"created_at": "2026-02-20T01:08:10Z",
"last_comment_at": "2026-02-20T01:17:24Z",
"last_comment_author": "openhands-ai"
},
{
"number": 75,
"created_at": "2026-02-26T16:40:36Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 81,
"created_at": "2026-02-27T18:53:51Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 85,
"created_at": "2026-03-03T13:08:07Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 93,
"created_at": "2026-03-06T14:10:42Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 106,
"created_at": "2026-03-13T23:55:50Z",
"last_comment_at": "2026-03-14T01:13:22Z",
"last_comment_author": "openhands-ai"
},
{
"number": 119,
"created_at": "2026-03-24T13:31:15Z",
"last_comment_at": "2026-03-24T14:18:00Z",
"last_comment_author": "enyst"
},
{
"number": 124,
"created_at": "2026-03-30T16:49:02Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 125,
"created_at": "2026-03-30T18:38:38Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 132,
"created_at": "2026-04-01T17:50:12Z",
"last_comment_at": "2026-04-02T01:24:42Z",
"last_comment_author": "enyst"
},
{
"number": 141,
"created_at": "2026-04-06T17:08:22Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 182,
"created_at": "2026-04-15T22:02:03Z",
"last_comment_at": "2026-04-15T22:35:59Z",
"last_comment_author": "juanmichelini"
},
{
"number": 208,
"created_at": "2026-04-24T13:06:34Z",
"last_comment_at": "2026-04-27T16:54:52Z",
"last_comment_author": "VascoSch92"
},
{
"number": 212,
"created_at": "2026-04-24T20:34:51Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 216,
"created_at": "2026-04-27T08:48:30Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 257,
"created_at": "2026-05-21T09:09:36Z",
"last_comment_at": null,
"last_comment_author": null
}
]
}
},
"config": {
"disabled_metrics": [],
"disabled_categories": [],
"disabled_components": {}
},
"source": {
"url": "https://github.com/OpenHands/extensions",
"host": "github.com",
"name": "extensions",
"owner": "OpenHands"
},
"metrics": {
"overall": {
"key": "overall",
"band": "excellent",
"name": "Overall health",
"note": "The weighted overall 70 is calibrated to 83 on the published index scale (record calibration 2026-08-02).",
"notes": [
{
"code": "overall_calibration",
"params": {
"raw": 70,
"calibrated": 83,
"calibration": "2026-08-02"
}
}
],
"value": 83,
"inputs": {
"security": 55,
"vitality": 92,
"community": 59,
"governance": 77,
"calibration": "2026-08-02",
"engineering": 61,
"ai_readiness": 55,
"weighted_overall_raw": 70
},
"components": []
},
"categories": [
{
"key": "vitality",
"band": "excellent",
"name": "Vitality",
"value": 92,
"weight": 0.21,
"metrics": [
{
"key": "development_activity",
"band": "excellent",
"name": "Development activity",
"note": null,
"notes": [],
"value": 86,
"inputs": {
"commits_last_year": 264,
"human_commit_share": 0.87,
"days_since_last_push": 0,
"active_weeks_last_year": 32
},
"components": [
{
"key": "push_recency",
"name": "Push recency",
"detail": "last push 0 days ago",
"points": 36,
"status": "met",
"details": [
{
"code": "push_recency",
"params": {
"days": 0
}
}
],
"max_points": 36
},
{
"key": "commit_cadence",
"name": "Commit cadence",
"detail": "32/52 weeks with commits",
"points": 22.2,
"status": "partial",
"details": [
{
"code": "commit_cadence_weeks",
"params": {
"weeks": 32
}
}
],
"max_points": 36
},
{
"key": "commit_volume",
"name": "Commit volume",
"detail": "264 commits in the last year",
"points": 18,
"status": "met",
"details": [
{
"code": "commits_last_year",
"params": {
"count": 264
}
}
],
"max_points": 18
},
{
"key": "openssf_scorecard_maintained",
"name": "OpenSSF Scorecard: Maintained",
"detail": "30 commit(s) and 24 issue activity found in the last 90 days -- score normalized to 10",
"points": 10,
"status": "met",
"details": [],
"max_points": 10
}
]
},
{
"key": "release_discipline",
"band": "exceptional",
"name": "Release discipline",
"note": "Excluded from scoring (no data or not applicable): OpenSSF Scorecard: Signed-Releases. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"openssf_scorecard_signed_releases"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 100,
"inputs": {
"releases_count": 15,
"latest_release_tag": "v0.11.0",
"releases_from_tags": false,
"days_since_latest_release": 8,
"mean_days_between_releases": 4.4
},
"components": [
{
"key": "ships_releases",
"name": "Ships releases",
"detail": "15 releases published",
"points": 27,
"status": "met",
"details": [
{
"code": "releases_published",
"params": {
"count": 15
}
}
],
"max_points": 27
},
{
"key": "release_recency",
"name": "Release recency",
"detail": "latest release 8 days ago",
"points": 36,
"status": "met",
"details": [
{
"code": "release_recency",
"params": {
"days": 8
}
}
],
"max_points": 36
},
{
"key": "release_cadence",
"name": "Release cadence",
"detail": "a release every ~4.4 days",
"points": 27,
"status": "met",
"details": [
{
"code": "release_cadence",
"params": {
"gap": 4.4
}
}
],
"max_points": 27
},
{
"key": "openssf_scorecard_signed_releases",
"name": "OpenSSF Scorecard: Signed-Releases",
"detail": "no releases found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 10
}
]
},
{
"key": "abandonment",
"band": "exceptional",
"name": "Abandonment",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"cap": null,
"state": "maintained",
"guards": [],
"signals": [],
"red_flag": false,
"multiplier_pct": 100,
"declared_reason": null,
"unverified_reason": null,
"unanswered_open_prs": null,
"unanswered_open_issues": null,
"days_since_last_merged_pr": null,
"days_since_last_human_commit": 6,
"days_since_last_human_commit_is_floor": false
},
"components": [
{
"key": "project_is_still_maintained",
"name": "Project is still maintained",
"detail": "last human commit 6 days ago",
"points": 100,
"status": "met",
"details": [
{
"code": "abandonment_maintained",
"params": {
"days": 6
}
}
],
"max_points": 100
}
]
}
],
"description": "Is the project alive — is code being written and are releases shipping?"
},
{
"key": "community",
"band": "moderate",
"name": "Community & Adoption",
"value": 59,
"weight": 0.17,
"metrics": [
{
"key": "popularity",
"band": "moderate",
"name": "Popularity & adoption",
"note": null,
"notes": [],
"value": 52,
"inputs": {
"forks": 62,
"stars": 132,
"watchers": 4,
"growth_state": "unverified",
"growth_factor_pct": 100,
"growth_unverified_reason": "no_history"
},
"components": [
{
"key": "stars",
"name": "Stars",
"detail": "132 stars",
"points": 34.3,
"status": "partial",
"details": [
{
"code": "stars",
"params": {
"count": 132
}
}
],
"max_points": 60
},
{
"key": "forks",
"name": "Forks",
"detail": "62 forks",
"points": 14.9,
"status": "partial",
"details": [
{
"code": "forks",
"params": {
"count": 62
}
}
],
"max_points": 25
},
{
"key": "watchers",
"name": "Watchers",
"detail": "4 watchers",
"points": 2.7,
"status": "partial",
"details": [
{
"code": "watchers",
"params": {
"count": 4
}
}
],
"max_points": 15
}
]
},
{
"key": "community_health",
"band": "moderate",
"name": "Community health",
"note": null,
"notes": [],
"value": 57,
"inputs": {
"has_readme": true,
"has_license": true,
"readme_badges": null,
"has_contributing": false,
"has_issue_template": false,
"has_code_of_conduct": false,
"readme_badge_services": [],
"has_pull_request_template": true
},
"components": [
{
"key": "readme",
"name": "README",
"detail": null,
"points": 22.5,
"status": "met",
"details": [],
"max_points": 22.5
},
{
"key": "license",
"name": "License",
"detail": "recognized license (MIT)",
"points": 22.5,
"status": "met",
"details": [
{
"code": "license_standard",
"params": {}
},
{
"code": "license_spdx",
"params": {
"spdx": "MIT"
}
}
],
"max_points": 22.5
},
{
"key": "contributing_guide",
"name": "CONTRIBUTING guide",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 18
},
{
"key": "code_of_conduct",
"name": "Code of conduct",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 13.5
},
{
"key": "issue_template",
"name": "Issue template",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.2
},
{
"key": "pr_template",
"name": "PR template",
"detail": null,
"points": 6.3,
"status": "met",
"details": [],
"max_points": 6.3
}
]
},
{
"key": "ecosystem_adoption",
"band": "good",
"name": "Ecosystem adoption (downloads)",
"note": "Excluded from scoring (no data or not applicable): Registry dependents. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"registry_dependents"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 72,
"inputs": {
"packages": [
"@openhands/extensions",
"openhands-extensions"
],
"dependents": null,
"ecosystems": "npm, pypi",
"total_downloads": null,
"monthly_downloads": 20722
},
"components": [
{
"key": "monthly_downloads",
"name": "Monthly downloads",
"detail": "20,722 downloads/month across npm, pypi",
"points": 57.6,
"status": "partial",
"details": [
{
"code": "downloads_monthly",
"params": {
"count": 20722,
"ecosystems": "npm, pypi"
}
}
],
"max_points": 80
},
{
"key": "registry_dependents",
"name": "Registry dependents",
"detail": "not reported by this ecosystem",
"points": 0,
"status": "excluded",
"details": [
{
"code": "not_reported_by_this_ecosystem",
"params": {}
}
],
"max_points": 20
}
]
}
],
"description": "Does the project have users, downloads, attention, and a welcoming setup for contributors?"
},
{
"key": "governance",
"band": "good",
"name": "Sustainability & Governance",
"value": 77,
"weight": 0.23,
"metrics": [
{
"key": "maintainer_resilience",
"band": "good",
"name": "Maintainer resilience (bus factor)",
"note": null,
"notes": [],
"value": 77,
"inputs": {
"bus_factor": 3,
"contributors_sampled": 25,
"top_contributor_share": 0.209
},
"components": [
{
"key": "bus_factor",
"name": "Bus factor",
"detail": "3 contributor(s) cover half of all commits",
"points": 36,
"status": "partial",
"details": [
{
"code": "bus_factor",
"params": {
"count": 3
}
}
],
"max_points": 54
},
{
"key": "commit_distribution",
"name": "Commit distribution",
"detail": "top contributor authored 21% of commits",
"points": 17.8,
"status": "partial",
"details": [
{
"code": "top_contributor_share",
"params": {
"share": 21
}
}
],
"max_points": 22.5
},
{
"key": "contributor_breadth",
"name": "Contributor breadth",
"detail": "25 contributors",
"points": 13.5,
"status": "met",
"details": [
{
"code": "contributors_sampled",
"params": {
"count": 25
}
}
],
"max_points": 13.5
},
{
"key": "openssf_scorecard_contributors",
"name": "OpenSSF Scorecard: Contributors",
"detail": "project has 6 contributing companies or organizations",
"points": 10,
"status": "met",
"details": [],
"max_points": 10
}
]
},
{
"key": "responsiveness",
"band": "good",
"name": "Issue & PR responsiveness",
"note": "Excluded from scoring (no data or not applicable): Newcomer PR acceptance. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"newcomer_pr_acceptance"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 70,
"inputs": {
"merged_prs": 223,
"open_issues": 32,
"closed_issues": 56,
"prs_merged_7d": null,
"prs_decided_7d": null,
"prs_merged_30d": null,
"prs_decided_30d": null,
"issue_closed_ratio": 0.636,
"closed_unmerged_prs": 62,
"first_time_authors_30d": null,
"first_time_prs_merged_30d": null,
"first_time_prs_decided_30d": null
},
"components": [
{
"key": "issue_resolution",
"name": "Issue resolution",
"detail": "64% of issues closed",
"points": 26.7,
"status": "partial",
"details": [
{
"code": "issues_closed_share",
"params": {
"share": 64
}
}
],
"max_points": 42
},
{
"key": "pr_acceptance",
"name": "PR acceptance",
"detail": "223/285 decided PRs merged",
"points": 23.5,
"status": "partial",
"details": [
{
"code": "decided_prs_merged",
"params": {
"merged": 223,
"decided": 285
}
}
],
"max_points": 30
},
{
"key": "newcomer_pr_acceptance",
"name": "Newcomer PR acceptance",
"detail": "no first-time contributor's PR decided in 30d",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_newcomer_prs",
"params": {
"days": 30
}
}
],
"max_points": 13
},
{
"key": "openssf_scorecard_code_review",
"name": "OpenSSF Scorecard: Code-Review",
"detail": "Found 18/24 approved changesets -- score normalized to 7",
"points": 10.5,
"status": "partial",
"details": [],
"max_points": 15
}
]
},
{
"key": "stewardship",
"band": "moderate",
"name": "Ownership & stewardship",
"note": null,
"notes": [],
"value": 64,
"inputs": {
"followers": 523,
"owner_type": "Organization",
"is_verified": null,
"owner_login": "OpenHands",
"public_repos": 46,
"account_age_days": 351
},
"components": [
{
"key": "ownership_backing",
"name": "Ownership backing",
"detail": "organization-owned",
"points": 30,
"status": "met",
"details": [
{
"code": "owner_organization",
"params": {}
}
],
"max_points": 30
},
{
"key": "verified_domain",
"name": "Verified domain",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 20
},
{
"key": "owner_reach",
"name": "Owner reach",
"detail": "523 followers of OpenHands",
"points": 19.6,
"status": "partial",
"details": [
{
"code": "owner_followers",
"params": {
"count": 523,
"login": "OpenHands"
}
}
],
"max_points": 25
},
{
"key": "track_record",
"name": "Track record",
"detail": "46 public repos, account ~0 yr old",
"points": 14.1,
"status": "partial",
"details": [
{
"code": "public_repos",
"params": {
"count": 46
}
},
{
"code": "account_age_years",
"params": {
"years": 0
}
}
],
"max_points": 25
}
]
},
{
"key": "package_maintenance",
"band": "exceptional",
"name": "Package maintenance",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"packages": [
"@openhands/extensions",
"openhands-extensions"
],
"ecosystems": "npm, pypi",
"any_deprecated": false,
"min_days_since_publish": 8
},
"components": [
{
"key": "published_resolvable",
"name": "Published & resolvable",
"detail": "2 package(s) on npm, pypi",
"points": 25,
"status": "met",
"details": [
{
"code": "packages_published",
"params": {
"count": 2,
"ecosystems": "npm, pypi"
}
}
],
"max_points": 25
},
{
"key": "publish_recency",
"name": "Publish recency",
"detail": "latest publish 8 days ago",
"points": 35,
"status": "met",
"details": [
{
"code": "publish_recency",
"params": {
"days": 8
}
}
],
"max_points": 35
},
{
"key": "version_history",
"name": "Version history",
"detail": "16 published versions",
"points": 20,
"status": "met",
"details": [
{
"code": "published_versions",
"params": {
"count": 16
}
}
],
"max_points": 20
},
{
"key": "not_deprecated",
"name": "Not deprecated",
"detail": "active, not deprecated or yanked",
"points": 20,
"status": "met",
"details": [
{
"code": "package_not_deprecated",
"params": {}
}
],
"max_points": 20
}
]
}
],
"description": "Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?"
},
{
"key": "engineering",
"band": "moderate",
"name": "Engineering Quality",
"value": 61,
"weight": 0.19,
"metrics": [
{
"key": "engineering_practices",
"band": "good",
"name": "Engineering practices",
"note": null,
"notes": [],
"value": 68,
"inputs": {
"has_ci": true,
"has_tests": true,
"has_editorconfig": false,
"has_linter_config": false,
"has_precommit_config": false
},
"components": [
{
"key": "ci_workflows",
"name": "CI workflows",
"detail": "8 workflow(s)",
"points": 24,
"status": "met",
"details": [
{
"code": "ci_workflows",
"params": {
"count": 8
}
}
],
"max_points": 24
},
{
"key": "tests_present",
"name": "Tests present",
"detail": null,
"points": 24,
"status": "met",
"details": [],
"max_points": 24
},
{
"key": "linter_config",
"name": "Linter config",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 16
},
{
"key": "pre_commit_hooks",
"name": "Pre-commit hooks",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 9.6
},
{
"key": "editorconfig",
"name": ".editorconfig",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 6.4
},
{
"key": "openssf_scorecard_ci_tests",
"name": "OpenSSF Scorecard: CI-Tests",
"detail": "30 out of 30 merged PRs checked by a CI test -- score normalized to 10",
"points": 20,
"status": "met",
"details": [],
"max_points": 20
}
]
},
{
"key": "documentation",
"band": "moderate",
"name": "Documentation",
"note": null,
"notes": [],
"value": 50,
"inputs": {
"topics": [],
"has_wiki": true,
"homepage": null,
"has_readme": true,
"has_docs_dir": false,
"has_description": true
},
"components": [
{
"key": "readme",
"name": "README",
"detail": null,
"points": 30,
"status": "met",
"details": [],
"max_points": 30
},
{
"key": "documentation_directory",
"name": "Documentation directory",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 25
},
{
"key": "documentation_homepage_site",
"name": "Documentation / homepage site",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
},
{
"key": "repository_description",
"name": "Repository description",
"detail": null,
"points": 10,
"status": "met",
"details": [],
"max_points": 10
},
{
"key": "topics",
"name": "Topics",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
},
{
"key": "wiki",
"name": "Wiki",
"detail": null,
"points": 10,
"status": "met",
"details": [],
"max_points": 10
}
]
}
],
"description": "Are baseline engineering and documentation practices in place?"
},
{
"key": "security",
"band": "moderate",
"name": "Security",
"value": 55,
"weight": 0.16,
"metrics": [
{
"key": "security_posture",
"band": "moderate",
"name": "Security posture",
"note": "Excluded from scoring (no data or not applicable): Signed-Releases. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"signed_releases"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 55,
"inputs": {
"source": "openssf_scorecard",
"checks_evaluated": 17,
"scorecard_version": "v5.5.0",
"checks_inconclusive": 1,
"scorecard_aggregate": 5.5
},
"components": [
{
"key": "binary_artifacts",
"name": "Binary-Artifacts",
"detail": "no binaries found in the repo",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "branch_protection",
"name": "Branch-Protection",
"detail": "branch protection is not maximal on development and all release branches",
"points": 3,
"status": "partial",
"details": [],
"max_points": 7.5
},
{
"key": "ci_tests",
"name": "CI-Tests",
"detail": "30 out of 30 merged PRs checked by a CI test -- score normalized to 10",
"points": 2.5,
"status": "met",
"details": [],
"max_points": 2.5
},
{
"key": "cii_best_practices",
"name": "CII-Best-Practices",
"detail": "no effort to earn an OpenSSF best practices badge detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 2.5
},
{
"key": "code_review",
"name": "Code-Review",
"detail": "Found 18/24 approved changesets -- score normalized to 7",
"points": 5.2,
"status": "partial",
"details": [],
"max_points": 7.5
},
{
"key": "contributors",
"name": "Contributors",
"detail": "project has 6 contributing companies or organizations",
"points": 2.5,
"status": "met",
"details": [],
"max_points": 2.5
},
{
"key": "dangerous_workflow",
"name": "Dangerous-Workflow",
"detail": "no dangerous workflow patterns detected",
"points": 10,
"status": "met",
"details": [],
"max_points": 10
},
{
"key": "dependency_update_tool",
"name": "Dependency-Update-Tool",
"detail": "no update tool detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "fuzzing",
"name": "Fuzzing",
"detail": "project is not fuzzed",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "license",
"name": "License",
"detail": "license file detected",
"points": 2.5,
"status": "met",
"details": [],
"max_points": 2.5
},
{
"key": "maintained",
"name": "Maintained",
"detail": "30 commit(s) and 24 issue activity found in the last 90 days -- score normalized to 10",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "packaging",
"name": "Packaging",
"detail": "packaging workflow detected",
"points": 5,
"status": "met",
"details": [],
"max_points": 5
},
{
"key": "pinned_dependencies",
"name": "Pinned-Dependencies",
"detail": "dependency not pinned by hash detected -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "sast",
"name": "SAST",
"detail": "SAST tool is not run on all commits -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "security_policy",
"name": "Security-Policy",
"detail": "security policy file not detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "signed_releases",
"name": "Signed-Releases",
"detail": "no releases found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 7.5
},
{
"key": "token_permissions",
"name": "Token-Permissions",
"detail": "detected GitHub workflow tokens with excessive permissions",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "vulnerabilities",
"name": "Vulnerabilities",
"detail": "0 existing vulnerabilities detected",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
}
]
},
{
"key": "high_risk_jurisdiction_exposure",
"band": "exceptional",
"name": "High-Risk Jurisdiction Exposure",
"note": "Only high-confidence self-published location evidence affects this multiplier. Ambiguous matches are review-only; country evidence is not proof of nationality, citizenship, legal registration, malicious intent, or sanctions status.",
"notes": [
{
"code": "jurisdiction_evidence_limits",
"params": {}
}
],
"value": 100,
"inputs": {
"meaning": "self-published location evidence; not nationality or citizenship",
"red_flag": false,
"exposures": [],
"policy_countries": [
"Russia",
"Iran",
"North Korea"
],
"commit_weight_rule": {
"min_commits": 50,
"min_commit_share": 0.1
},
"review_only_matches": 0,
"below_threshold_exposures": [],
"assessed_self_published_locations": 5
},
"components": [
{
"key": "policy_exposure_multiplier",
"name": "Policy exposure multiplier",
"detail": "no confirmed policy-scope location match",
"points": 100,
"status": "met",
"details": [
{
"code": "jurisdiction_no_match",
"params": {}
}
],
"max_points": 100
}
]
}
],
"description": "Are visible security and supply-chain practices strong, with no malicious dependency and no unresolved high-risk jurisdiction exposure?"
},
{
"key": "ai_readiness",
"band": "moderate",
"name": "AI Readiness",
"value": 55,
"weight": 0.04,
"metrics": [
{
"key": "ai_agent_context",
"band": "excellent",
"name": "Agent context & guidance",
"note": null,
"notes": [],
"value": 85,
"inputs": {
"has_llms_txt": false,
"legible_history_share": 1,
"agent_instruction_files": [
"AGENTS.md"
],
"agent_instruction_max_bytes": 14908
},
"components": [
{
"key": "agent_instructions",
"name": "Agent instructions",
"detail": "AGENTS.md",
"points": 45,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "AGENTS.md"
}
}
],
"max_points": 45
},
{
"key": "machine_readable_docs_llms_txt",
"name": "Machine-readable docs (llms.txt)",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
},
{
"key": "legible_commit_history",
"name": "Legible commit history",
"detail": "87 of 87 human commits state their intent (structured subject or explanatory body)",
"points": 40,
"status": "met",
"details": [
{
"code": "legible_history",
"params": {
"legible": 87,
"sampled": 87
}
}
],
"max_points": 40
}
]
},
{
"key": "ai_verify_loop",
"band": "at_risk",
"name": "Verify loop (build / test / typecheck)",
"note": null,
"notes": [],
"value": 32,
"inputs": {
"has_nix": false,
"has_tests": true,
"lockfiles": [],
"has_dockerfile": false,
"typed_language": false,
"bootstrap_files": [],
"has_devcontainer": false,
"has_linter_config": false,
"typecheck_configs": [],
"agent_commit_share": 0.7,
"toolchain_manifests": [],
"dependency_bot_commit_share": 0
},
"components": [
{
"key": "one_command_bootstrap",
"name": "One-command bootstrap",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 18
},
{
"key": "automated_tests",
"name": "Automated tests",
"detail": null,
"points": 22,
"status": "met",
"details": [],
"max_points": 22
},
{
"key": "lint_format_config",
"name": "Lint / format config",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 11
},
{
"key": "static_type_checking",
"name": "Static type checking",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 11
},
{
"key": "reproducible_environment",
"name": "Reproducible environment",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
},
{
"key": "demonstrated_agent_practice",
"name": "Demonstrated agent practice",
"detail": "70 of the last 100 commits agent-authored or agent-credited",
"points": 10,
"status": "met",
"details": [
{
"code": "agent_authored_commits",
"params": {
"count": 70,
"sampled": 100
}
}
],
"max_points": 10
},
{
"key": "automated_maintenance",
"name": "Automated maintenance",
"detail": "no automated dependency updates observed",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_dependency_automation",
"params": {}
}
],
"max_points": 8
},
{
"key": "openssf_scorecard_pinned_dependencies",
"name": "OpenSSF Scorecard: Pinned-Dependencies",
"detail": "dependency not pinned by hash detected -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
}
]
},
{
"key": "ai_code_legibility",
"band": "moderate",
"name": "Code legibility for models",
"note": null,
"notes": [],
"value": 54,
"inputs": {
"primary_language": "Python",
"largest_source_bytes": 365433,
"source_files_sampled": 79,
"oversized_source_files": 1
},
"components": [
{
"key": "type_checkable_code",
"name": "Type-checkable code",
"detail": "Python without a type-check config",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_typecheck_config_language",
"params": {
"language": "Python"
}
}
],
"max_points": 45
},
{
"key": "manageable_file_sizes",
"name": "Manageable file sizes",
"detail": "1/79 source files over 60KB",
"points": 54.3,
"status": "partial",
"details": [
{
"code": "oversized_source_files",
"params": {
"kb": 60,
"sampled": 79,
"oversized": 1
}
}
],
"max_points": 55
}
]
}
],
"description": "How well is the repo equipped to be developed and maintained with AI coding agents? Carries a deliberately small weight: agent tooling is a real maintenance signal, but its absence must never gate the top of the scale (calibration saturates at raw 91, so 100/100 remains reachable with AI Readiness at zero)."
}
],
"classification": {
"top": [
"library"
],
"labels": [
"library"
],
"scores": {
"library": 12
},
"primary": "library",
"evidence": [
{
"tier": "distribution",
"label": "library",
"source": "registry:npm",
"weight": 6
},
{
"tier": "distribution",
"label": "library",
"source": "registry:pypi",
"weight": 6
}
],
"artifacts": [],
"confidence": "medium",
"host_extension": false,
"runs_as_process": false,
"consumed_by_code": true
},
"metrics_version": "2.5.0"
},
"warnings": [
"Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token",
"GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository"
],
"report_type": "repository",
"generated_at": "2026-07-29T15:47:23.183580Z",
"schema_version": "0.27.0",
"badge_url": "https://raw.githubusercontent.com/inspect-software/badges/main/v1/o/OpenHands/extensions.svg",
"full_name": "OpenHands/extensions",
"license_state": "standard",
"license_spdx": "MIT"
}