SamyRai / go-z-ai

来自 GitHub 依赖图的完整解析依赖集合：14 个直接依赖与 42 个间接（传递）软件包。仓库提交锁文件时，传递闭包才是完整的。

该仓库未发布可被索引解析的包，因此评估的是其自身的依赖图——共 56 个包，其中也包含从不交付的开发与测试版本固定：0 个存在已知公告，0 个为直接依赖。

没有已知公告影响已评估的依赖。

公告表示依赖图中记录的版本落入某条公告的受影响范围。可达性未经分析，且依赖图包含开发与测试的版本固定——某项发现可能只涉及工具链而非交付的软件。

{
  "data": {
    "repo": {
      "topics": [
        "ai",
        "anthropic",
        "api",
        "client",
        "go",
        "integration",
        "openai",
        "sdk",
        "zai",
        "cli",
        "glm",
        "llm",
        "zhipu"
      ],
      "is_fork": false,
      "size_kb": 729,
      "has_wiki": false,
      "homepage": "https://github.com/SamyRai/go-z-ai#readme",
      "languages": {
        "Go": 744852,
        "CSS": 32567,
        "HTML": 16113,
        "Makefile": 3348
      },
      "pushed_at": "2026-07-22T05:44:44Z",
      "created_at": "2026-07-08T03:13:28Z",
      "owner_type": "User",
      "updated_at": "2026-07-24T07:10:24Z",
      "description": "Z.AI API client SDK for Go - Comprehensive OpenAI and Anthropic API integration",
      "is_archived": false,
      "is_disabled": false,
      "license_spdx": "Apache-2.0",
      "default_branch": "main",
      "license_spdx_raw": "Apache-2.0",
      "primary_language": "Go",
      "significant_languages": [
        "Go"
      ]
    },
    "owner": {
      "blog": null,
      "name": "Damir Mukimov",
      "type": "User",
      "login": "SamyRai",
      "company": null,
      "location": "Berlin",
      "followers": 11,
      "avatar_url": "https://avatars.githubusercontent.com/u/919510?v=4",
      "created_at": "2011-07-16T13:12:55Z",
      "is_verified": null,
      "public_repos": 25,
      "account_age_days": 5487
    },
    "license": {
      "state": "standard",
      "spdx_id": "Apache-2.0",
      "raw_spdx": "Apache-2.0",
      "file_present": true,
      "scorecard_found": true,
      "profile_has_license": true
    },
    "activity": {
      "releases": [
        {
          "tag": "v0.1.0",
          "kind": "minor",
          "published_at": "2026-07-18T22:58:15Z"
        }
      ],
      "recent_commits": [
        {
          "oid": "e3c00c4fbf65cd1d7d81698dfc54f6701fa470fd",
          "body": "The Pages deploy failed with \"Get Pages site failed ... Not Found\"\nbecause Pages was never enabled in repo settings. Set enablement: true\non actions/configure-pages so the workflow enables Pages (Source =\nGitHub Actions) on first run instead of requiring a manual toggle.",
          "is_bot": false,
          "headline": "fix(ci): auto-enable GitHub Pages in configure-pages step",
          "author_name": "Damir Mukimov",
          "author_login": "SamyRai",
          "committed_at": "2026-07-19T03:20:32Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "c67d8fdb4075541aac190a489c00d2d470323984",
          "body": "The site-generation docs autolink a `http://localhost:8000/en/` preview\nURL, which lychee cannot reach in CI (connection refused). Add localhost\nto the existing lychee --exclude list, consistent with how pkg.go.dev\nand docs.z.ai are already handled.",
          "is_bot": false,
          "headline": "fix(ci): exclude localhost from lychee link check",
          "author_name": "Damir Mukimov",
          "author_login": "SamyRai",
          "committed_at": "2026-07-19T03:15:51Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "26b4d36ab0017b9b0a61c70488389d11f630c46f",
          "body": "The actions/checkout pin was a 38-char (truncated) commit SHA\n(9c091bb...908d89e...), missing the middle \"d1\", so every job failed\nat \"Set up job\" with \"Unable to resolve action ... unable to find\nversion\". Restore the full 40-char v7.0.0 SHA\n(9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0) across all 6 w\n[…]\nAlso tag the directory-tree fenced block in docs/en/site-generation.md\nas `text` to satisfy markdownlint MD040 (fenced-code-language), which\nwould have failed the docs-lint job once checkout resolved.",
          "is_bot": false,
          "headline": "fix(ci): correct truncated actions/checkout SHA pin and MD040 lint",
          "author_name": "Damir Mukimov",
          "author_login": "SamyRai",
          "committed_at": "2026-07-19T03:12:47Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "f3a29564db00398527961289693b6fc01ed0d5d5",
          "body": "…inism\n\n- render_test.go: TestRenderMarkdown_EscapesRawHTML (C1 regression),\n  TestRenderMarkdown_LinkRewrite (.md→.html rewriter),\n  TestRelativeTime_Deterministic (build-clock fix),\n  TestFullDocLocales_StableOrder (H5 helper).\n- git_test.go: TestGitLineCountLogic (H4 off-by-one regression — singl\n[…]\nheckout).\n- sitegen_test.go: TestWriteSitemap_Deterministic (byte-identical across\n  two builds of same input — H5 regression),\n  TestRun_RejectsBadIdentifiers + TestRun_BadModule (M5 URL validation).",
          "is_bot": false,
          "headline": "test(sitegen): regression coverage for XSS, contributor count, determ…",
          "author_name": "Damir Mukimov",
          "author_login": "SamyRai",
          "committed_at": "2026-07-19T02:36:48Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "a0d5837798a5e53fa6d4ad80e6bfd54e26c52bf4",
          "body": "- .goreleaser.yml: SBOM id 'zai-client' → 'go-z-ai' (build was already\n  renamed); fix stale header comment.\n- .gitignore: ignore /go-z-ai binary (was the stale 'zai-client' entry);\n  keep /zai-client ignored as legacy for older checkouts.\n- internal/accounts: add a comment documenting why the config dir stays\n  'zai-client' (backward compat for existing installs — do not 'fix').\n- .env.example: add trailing newline.\n- cmd/sitegen: gofmt (was failing CI's gofmt check).",
          "is_bot": false,
          "headline": "chore: post-rename consistency (SBOM id, gitignore, gofmt, comments)",
          "author_name": "Damir Mukimov",
          "author_login": "SamyRai",
          "committed_at": "2026-07-19T02:36:48Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "16be60a801339d9db72f44b671da44d05b3e63e7",
          "body": "…erministic builds\n\nSecurity:\n- Drop goldmark WithUnsafe() and run output through bluemonday with a strict\n  allowlist (prose + GFM tables/tasklists + chroma code spans + details/kbd/\n  sub/sup). Docs no longer an XSS sink for outside PRs (C1).\n- Escape simplifyBullet captures in changelog.go before\n[…]\nut (H5, H6).\n- Replace 'for lang := range localesWithFullDocs' (randomized map order)\n  with fullDocLocales() iterating the stable localesAll slice.\n- Remove unused 'var _ = io.Discard' + 'io' import.",
          "is_bot": false,
          "headline": "fix(sitegen): harden markdown XSS surface, fix contributor count, det…",
          "author_name": "Damir Mukimov",
          "author_login": "SamyRai",
          "committed_at": "2026-07-19T02:36:25Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "e48d81398630753f82842012915e752a34260345",
          "body": "- New .github/workflows/dependency-review.yml gates PRs that introduce\n  moderate+ vulnerable dependencies (free for public repos).\n- Rewrite codeql.yml: drop GitHub's verbose template, focus on Go, enable\n  security-extended + security-and-quality query suites.\n- Bump scorecard.yml upload-sarif v3 \n[…]\n2026).\n- Pin every third-party action by 40-char SHA with '# vX.Y.Z' comment so\n  Dependabot keeps them current; the tag pins Scorecard penalized.\n- Refresh SETUP.md to document the new in-repo state.",
          "is_bot": false,
          "headline": "ci: SHA-pin all actions, add dependency-review, harden CodeQL",
          "author_name": "Damir Mukimov",
          "author_login": "SamyRai",
          "committed_at": "2026-07-19T02:36:24Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "ce121a675260d3e36b2936803d23c221573fdb7d",
          "body": "The project was called \"Z.AI API Client\" in display with `zai-client` as\nthe binary name — inconsistent with the repo name `go-z-ai`. Now everything\nuses `go-z-ai` as the canonical name, matching the Go ecosystem convention\n(go-redis, go-fiber, etc.). The binary installs as `go-z-ai` directly — no\nm\n[…]\nbuild/vet/test green; site generates with new H1 \"go-z-ai\";\nall command examples use go-z-ai; 314 doc replacements + 11 Go source files\nupdated; all internal links resolve; all 7 HTTP URLs return 200.",
          "is_bot": false,
          "headline": "refactor: standardize project name to go-z-ai, suggest zai alias",
          "author_name": "Damir Mukimov",
          "author_login": "SamyRai",
          "committed_at": "2026-07-19T02:02:57Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "3836e2d08124bc5bcc2d190a7319e218cab33a3f",
          "body": "Three coordinated improvements: full localization of all template strings,\na spacing/token audit that eliminates excess padding and magic numbers,\nand the \"unnecessary padding\" fix around the activity feed.\n\ni18n system (new):\n- internal/sitegen/locales/*.json: 6 locale files (en, ru, zh, de, tt, tr\n[…]\nrkish/\nTatar translations visible in nav, headings, footer, stat labels, CTAs;\nbuild/vet/test green; all internal links resolve; footer interpolation\n(\"Built from commit HASH\") works in all languages.",
          "is_bot": false,
          "headline": "feat(site): JSON-based i18n system + spacing audit + DRY tokens",
          "author_name": "Damir Mukimov",
          "author_login": "SamyRai",
          "committed_at": "2026-07-19T02:02:57Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "c077fa671c6a7602ab357e6269f196fc56f89891",
          "body": "Activity feed (was: flat non-clickable list of plain text):\n- Every commit hash is now a clickable link to the GitHub commit page\n  (https://github.com/.../commit/HASH).\n- Conventional-commit type parsed and rendered as a colored pill badge:\n  feat=green, fix=red, docs=blue, ci=mauve, chore=gray, re\n[…]\nat 0.875em (the 2026 consensus) for x-height parity.\n\nVerification: all 10 recent commits render as clickable cards with type\nbadges + relative time; build/vet/test green; HTTP all 200; links resolve.",
          "is_bot": false,
          "headline": "feat(site): redesigned activity feed + better code font",
          "author_name": "Damir Mukimov",
          "author_login": "SamyRai",
          "committed_at": "2026-07-19T02:02:57Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "4e05f975e6b60889ce714e77ddfb4b5d5d659aa7",
          "body": "The previous commit wired chroma but highlighting wasn't visible on the\nlanding page — the template had hardcoded <pre><code> blocks that bypassed\ngoldmark entirely. Also addressed several bugs surfaced by research into\ncurrent goldmark/chroma integration patterns.\n\nGoldmark config fixes (render.go)\n[…]\ngoldmark pipeline (13 blocks on\n  library-guide.html).\n- syntax.css fully scoped under pre.chroma — no bare .bg collision risk.\n- build/vet/test green; 13/13 HTTP URLs 200; all internal links resolve.",
          "is_bot": false,
          "headline": "fix(site): proper syntax highlighting on all pages + code font alignment",
          "author_name": "Damir Mukimov",
          "author_login": "SamyRai",
          "committed_at": "2026-07-19T02:02:57Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "a0e3e32cdf7f1e5ab2470ec9678a550959e9cc57",
          "body": "Properly addresses \"align fonts with the other texts in code or pick better\nfor code and add proper color highlighting\" — chroma-based highlighting with\nthe project's existing Catppuccin palette, plus code/body font alignment.\n\nHighlighting:\n- goldmark-highlighting/v2 wired into the goldmark pipelin\n[…]\ngenerates 44 files (was 43, +syntax.css), build/vet/test\ngreen, HTTP all 200, internal links resolve. Sample <pre class=\"chroma\">\noutput has proper token classes (kn/nx/nf/s/c1/…); both themes render.",
          "is_bot": false,
          "headline": "feat(site): syntax highlighting + code font alignment",
          "author_name": "Damir Mukimov",
          "author_login": "SamyRai",
          "committed_at": "2026-07-19T02:02:57Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "3c8c827c3a68a1635738a3ed6c392f93019c0474",
          "body": "Major UI/UX/a11y/visual-identity pass on the generated site, applying\nskills (css-design-system, modern-css-refactor, design-system-improvement-\nsteward, high-end-visual-design, minimalist-ui) and 2026 Baseline features.\n\nCSS rewrite (internal/sitegen/assets/style.css):\n- Cascade layers (@layer rese\n[…]\n site links resolve (link checker across all 43 files).\n- go build / vet / test all green.\n- CSS file grew from 304 → ~750 lines but is now organized into 7 cascade\n  layers with no specificity drift.",
          "is_bot": false,
          "headline": "feat(site): design system pass — token-driven CSS, a11y, 2026 features",
          "author_name": "Damir Mukimov",
          "author_login": "SamyRai",
          "committed_at": "2026-07-19T02:02:57Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "f043182a7c9d5fb4839720b3492bc75d99acd556",
          "body": "Adds a pure-Go static site generator that renders the project's docs into a\ndeployable HTML site, with a Catppuccin-themed design and a 6-language\nlocalization switcher.\n\nGenerator (internal/sitegen + cmd/sitegen):\n- Pure stdlib + goldmark (already in go.sum via glamour; zero net-new deps).\n- Reads \n[…]\nsampled HTTP URLs return 200 (landing, docs, meta, assets, sitemap).\n- All internal site links resolve (custom link checker, 43 files scanned).\n- YAML lint passes on all 4 workflows + .goreleaser.yml.",
          "is_bot": false,
          "headline": "feat(site): auto-generated branded static HTML site",
          "author_name": "Damir Mukimov",
          "author_login": "SamyRai",
          "committed_at": "2026-07-19T02:02:57Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "14af6954ff119523f26f5fea643402d3c253fba9",
          "body": null,
          "is_bot": false,
          "headline": "Create codeql.yml",
          "author_name": "Damir Mukimov",
          "author_login": "SamyRai",
          "committed_at": "2026-07-19T01:54:19Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "5a89d3a4f5e9ce0e93bb668ca0994670cf3a2025",
          "body": "Code review + best-practices research surfaced 5 issues. Fixing all:\n\n- markdownlint-cli2-action @v20 → @v24 (4 majors behind, current is v24.1.0\n  released 2026-07-18). Picks up markdownlint rule fixes through v0.41.\n- lychee cache key: was github.run_id (unique per run → primary key never\n  hit, e\n[…]\n GitHub Actions footgun).\n\nVerification: go build/vet/test green, all internal links resolve across\n33 files, markdownlint 0 issues, lychee 526 OK / 0 errors / 33 excluded,\nall 3 workflow YAMLs parse.",
          "is_bot": false,
          "headline": "ci(docs): apply research-driven improvements to lint config + actions",
          "author_name": "Damir Mukimov",
          "author_login": "SamyRai",
          "committed_at": "2026-07-19T00:20:37Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "f097a563c94a81c45e684aab59daaf5912099f17",
          "body": "…doc linting\n\nREADME rewrite (ollama-style dual-nature, applied to all 6 locales):\n- New tagline leads with \"CLI, library, and TUI\" instead of burying the\n  dual nature in a long feature sentence.\n- New \"Quick example\" block shows BOTH a CLI invocation and a Go import,\n  plus a config-file mention (\n[…]\n\nVerification:\n- go build, go vet, go test -count=1 ./... all green\n- All internal markdown links resolve (checklinks script, 33 files)\n- make docs-lint clean: markdownlint 0 issues, lychee 559/559 OK",
          "is_bot": false,
          "headline": "docs(readme): rewrite with dual CLI/library structure + add markdown/…",
          "author_name": "Damir Mukimov",
          "author_login": "SamyRai",
          "committed_at": "2026-07-19T00:08:47Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "515a8c621b0db59ddd51ffabe71b837e059f597c",
          "body": "Accuracy fixes (docs previously disagreed with code):\n- accounts-and-quota.md (en/ru/zh): correct the regional-gateway claim —\n  only Embeddings and Moderations are pinned to open.bigmodel.cn in code\n  (embeddings.go, moderations.go call doRequestBaseKey(BigModelBaseURL,…));\n  Rerank and Voice use t\n[…]\nked.\n\nVerification:\n- go build, go vet, go test -count=1 ./... all green\n- all internal markdown links resolve across 27 docs + 6 root READMEs\n- each of the 10 fixes confirmed present in all 3 locales",
          "is_bot": false,
          "headline": "docs: apply 10 audit-driven improvements across all 3 locales",
          "author_name": "Damir Mukimov",
          "author_login": "SamyRai",
          "committed_at": "2026-07-18T23:53:03Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "cf0d1f1bb0fdb9ab96d4f7d7e11574fd424b3f8d",
          "body": "…ales\n\nRestructure docs/ into language namespaces (en/ru/zh) and add four\nadditional root README translations (ru/de/tt/tr) to the existing zh.\n\nWhat changed:\n- docs/ -> docs/en/ (git mv preserves history); docs/ru/ and docs/zh/\n  seeded as siblings under docs/<lang>/\n- docs/zh/: all 9 files fully t\n[…]\n\nNote: 5 backticked prose mentions of docs/foo.md under historical\nCHANGELOG release sections left as-is — they describe the docs' location\nat that release and rewriting them would falsify the record.",
          "is_bot": false,
          "headline": "docs(i18n): namespace docs by language, add ru/zh + 4 root README loc…",
          "author_name": "Damir Mukimov",
          "author_login": "SamyRai",
          "committed_at": "2026-07-18T23:35:26Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "41a4e1d4bdbfdc7c9e615236a1e6112cea365ae2",
          "body": "The api.securityscorecards.dev badge 404s until the first weekly cron\npublishes to the public transparency log (next Monday). shields.io's\nossf-scorecard badge already renders a live score for the repo, so the\nREADME badge isn't broken in the interim. Link target unchanged (official\nscorecard viewer).",
          "is_bot": false,
          "headline": "docs(badges): use shields.io scorecard badge (renders immediately)",
          "author_name": "Damir Mukimov",
          "author_login": "SamyRai",
          "committed_at": "2026-07-18T23:12:25Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "12249db3e19c435904cdcf19a3cf6fd57d63be97",
          "body": "scorecard-action v2.4.x deliberately suppresses publish_results on non-\nscheduled events (push/PR/dispatch) to avoid overwriting the official weekly\ncron data in the public transparency log. The push trigger was running\nscorecard but the publish step was a no-op ('Publication enabled: false' in\nthe logs).\n\nKeep schedule (weekly) + workflow_dispatch. The Security-tab SARIF upload\nworks on any trigger; the public badge populates only from the weekly run.",
          "is_bot": false,
          "headline": "fix(ci): scorecard — drop push trigger (action can't publish from it)",
          "author_name": "Damir Mukimov",
          "author_login": "SamyRai",
          "committed_at": "2026-07-18T23:11:33Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "1293cb3ad8ec6a65b631cff36589eb9d9a542fc6",
          "body": "That isn't a valid workflow 'on:' event (it's an internal webhook type).\nUse schedule (weekly) + workflow_dispatch + push on main instead.",
          "is_bot": false,
          "headline": "fix(ci): scorecard trigger — drop invalid branch_protection_review",
          "author_name": "Damir Mukimov",
          "author_login": "SamyRai",
          "committed_at": "2026-07-18T23:08:46Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "62e07c52cecb748199c9f8ace805d6e17c1f4b15",
          "body": "goreportcard.com shut down its public badge service on July 1, 2026; the\nbadge endpoint now returns a static 'retired' placeholder for every repo\nregardless of grade, so the README badge had become meaningless.\n\nReplaced with OpenSSF Scorecard:\n- README.md + README.zh.md: swap badge URLs to\n  api.se\n[…]\nF to the Security tab and exposes the score via the badge\n  API (badge populates after the first run).\n- SETUP.md: promote Scorecard from 'Later' to 'applied' with a note on the\n  goreportcard sunset.",
          "is_bot": false,
          "headline": "docs(badges): replace goreportcard (sunset) with OpenSSF Scorecard",
          "author_name": "Damir Mukimov",
          "author_login": "SamyRai",
          "committed_at": "2026-07-18T23:07:59Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "42f89f1bac0ed8f43d9f29671550f6a3dc30f5a3",
          "body": "The v0.1.0 GoReleaser run succeeded in publishing all 4 OS/arch binaries +\nSBOMs + cosign signatures but failed at the final discussion cross-post step:\nthe configured 'Releases' category doesn't exist. Use 'Announcements' (one of\nGitHub's default categories) so subsequent releases post cleanly.",
          "is_bot": false,
          "headline": "fix(release): use existing 'Announcements' discussion category",
          "author_name": "Damir Mukimov",
          "author_login": "SamyRai",
          "committed_at": "2026-07-18T22:59:28Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "fd9b49af7624b89efddc4adc5ecc9db91b467fcd",
          "body": "…tatus checks)\n\n- release.yml: add anchore/sbom-action/download-syft before goreleaser\n  (first v0.1.0 run failed: 'syft: executable file not found').\n- rulesets/main-branch.json: align required status checks with the new\n  OS-matrix job names (Build/vet/test on ubuntu+macos, lint on ubuntu,\n  vuln \n[…]\ny false (a tag-triggered release run should\n  not be gated by PR status contexts), and add admin bypass so the\n  maintainer can push fixes during the pre-contributor phase documented\n  in SETUP.md §1.",
          "is_bot": false,
          "headline": "fix(ci): install syft + relax ruleset (admin bypass, matrix-matched s…",
          "author_name": "Damir Mukimov",
          "author_login": "SamyRai",
          "committed_at": "2026-07-18T22:54:15Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "fe36843e3a348f732c6b858c0ccfd224f14b7ff5",
          "body": "First v0.1.0 release run failed: 'exec: \"syft\": executable file not found'.\nAdd anchore/sbom-action/download-syft before the goreleaser step.",
          "is_bot": false,
          "headline": "fix(ci): install syft for GoReleaser SBOM generation",
          "author_name": "Damir Mukimov",
          "author_login": "SamyRai",
          "committed_at": "2026-07-18T22:53:36Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "c64f6cc0848b6658c412ba21b23afe146fec460d",
          "body": "…dening, release path\n\nStream 1 (community/hygiene):\n- .gitignore: cover .zcode/ and .claude/ at repo level (were uncaught)\n- CODE_OF_CONDUCT.md: Contributor Covenant 2.1 (contact gigadamer@gmail.com)\n- README.zh.md: Simplified-Chinese README, cross-linked from README.md\n- examples/: three runnable \n[…]\n.. clean,\ngo test -race ./... green, --version prints build info, YAML parses.\n\nVerified no key exposure: git log --all -- .env empty; no key-shaped\nstrings in source; cassettes carry Bearer REDACTED.",
          "is_bot": false,
          "headline": "chore: open-source readiness pass — community files, examples, CI har…",
          "author_name": "Damir Mukimov",
          "author_login": "SamyRai",
          "committed_at": "2026-07-18T22:45:46Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "09dea55eef39e02b028f02d6632cb053ae69b1ed",
          "body": "The 2026-07-18 sprint (Region type, chat-completion API sync,\nlive-verify scaffolding) shipped code before this; these changes bring\nthe docs current and tighten their structure. Grounded in a two-axis\naudit (docs-vs-code, and TODO/roadmap-vs-cassette-inventory).\n\nDoc-vs-code drift fixed:\n- cli-refe\n[…]\nnce to the now-renamed test file\n  is updated to point at both current files.\n\nAll internal markdown links verified to resolve. No code changes in\nthis commit (the test-file rename landed separately).",
          "is_bot": false,
          "headline": "docs: align docs with the region + chat-API sprint, rewrite roadmap",
          "author_name": "Damir Mukimov",
          "author_login": "SamyRai",
          "committed_at": "2026-07-18T22:12:30Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "c8da34c41c49bddf9af4d46b8ae9e3b555e6d817",
          "body": "…r clarity\n\npkg/client now has two live-test files with distinct roles, and their\nold names were easy to confuse (one letter apart, both \"live verif…\").\nRename live_verification_test.go → live_replay_test.go so each\nself-documents:\n\n- live_replay_test.go — the Test*Live replay-only tests that consum\n[…]\nll\n  pending a real capture.\n\nNo behavior change. A header comment on live_replay_test.go now spells\nout the split. The doc references that named the old file are updated\nin the follow-up docs commit.",
          "is_bot": false,
          "headline": "refactor(client): rename live_verification_test → live_replay_test fo…",
          "author_name": "Damir Mukimov",
          "author_login": "SamyRai",
          "committed_at": "2026-07-18T22:12:08Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "6f640557cfd556b089fc890cb23c97d9cc14d4fb",
          "body": "- CHANGELOG.md: new 2026-07-18 entry covering the Region/region\n  parity work (Config.Region / --region / ZAI_REGION, monitor/biz/\n  agents/detection routing, coding plan helpers), the chat-\n  completion API sync (StreamToolCall, tool discrimination,\n  web_search response, xhigh effort, finish_reaso\n[…]\ne now-unverified-live items introduced\n  this sprint (the chat-completion fields, the China gateway hosts\n  for monitor/biz/agents) so the verify-first convention tracks\n  what still needs a cassette.",
          "is_bot": false,
          "headline": "docs(changelog): record the region + chat-API sync sprint",
          "author_name": "Damir Mukimov",
          "author_login": "SamyRai",
          "committed_at": "2026-07-18T21:56:34Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "c01cb93143df0913550444489b2f78b50d7ea653",
          "body": "…, web-search\n\nExtend the existing live-verification harness (pkg/client/\nlive_verify_test.go) with four more TestVerify* functions, so the\nsuccess-path shapes of these services can be pinned by a cassette\nonce an entitled account records one. Each test skips until its\ncassette exists, so CI stays g\n[…]\np \"Bearer \" pkg/client/testdata/cassettes/<name>.yaml`):\n\n  ZAI_RECORD=1 ZAI_API_KEY=<key> go test -run TestVerify<Name> ./pkg/client\n\nAll eight TestVerify* tests skip offline; no network calls in CI.",
          "is_bot": false,
          "headline": "test(client): add live-verify scaffolding for voice, stream-tool-call…",
          "author_name": "Damir Mukimov",
          "author_login": "SamyRai",
          "committed_at": "2026-07-18T21:56:25Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "0d8b9057a933db312036edd479cd0af2958b0492",
          "body": "Z.AI serves the same GLM model family from two regional gateways:\napi.z.ai (international, the historical default) and\nopen.bigmodel.cn (China mainland). Previously only\nEmbeddings/Moderations were wired to the China host; monitor\n(quota/usage), biz (account info), agents, and account detection\nwere\n[…]\n_REGION env, flag-beats-env). isolateCreds\nalso neutralizes the bare REGION env var so the tests stay\nhermetic given viper.AutomaticEnv().\n\ngo test -race ./... + golangci-lint + govulncheck all clean.",
          "is_bot": false,
          "headline": "feat(client): add Region type for api.z.ai / open.bigmodel.cn parity",
          "author_name": "Damir Mukimov",
          "author_login": "SamyRai",
          "committed_at": "2026-07-18T21:56:13Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "f43b987c29c35532ab538919bc6ac40e9f8d9105",
          "body": "Bring pkg/client/types.go and chat.go up to the current docs.z.ai\nchat-completion spec. All additions are additive (existing callers\ncompile unchanged) and marked NOT VERIFIED LIVE until a cassette\npins them, per the repo's verify-first convention.\n\nNew fields/types:\n- ChatRequest.StreamToolCall — s\n[…]\nnd-trips, the\nname/cap/payload/effort validation, WebSearch deserialization,\nStreamToolCall serialization, and the FinishReason constants.\n\ngo test -race ./... + golangci-lint + govulncheck all clean.",
          "is_bot": false,
          "headline": "feat(client): sync chat-completion types to the live API",
          "author_name": "Damir Mukimov",
          "author_login": "SamyRai",
          "committed_at": "2026-07-18T21:55:52Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "55c2669ad38710a7d015b7e5d23c100cc978b3af",
          "body": "Extend the media tab's origin-tagged routing (commit b7386e2) to the\nother tabs that run async work but delivered their result message\ndirectly — which root.Update only hands to the active screen, so\nswitching tabs mid-operation stranded the result (tools left busy=true;\nmodels/usage stuck 'loading'\n[…]\nusage: wrap fetch() at every call site (Init, 'r', tick).\n\nAdds a route()-wrapper unit test per tab. coding/accounts are left as-is\n(local/fast ops) per the original scope. go test -race + lint clean.",
          "is_bot": false,
          "headline": "fix(tui): route tools/models/usage async results to their own tab",
          "author_name": "Damir Mukimov",
          "author_login": "SamyRai",
          "committed_at": "2026-07-17T09:53:51Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "55e203fa59dbe9e562ba77000276ac12f79fe894",
          "body": "Add Fixed (account-status classification, accounts JSON key masking, TUI\nmedia poll routing) and Testing/docs notes (accounts+TUI+CLI tests, live\nverification harness, vision-401 pitfall) to the 2026-07-17 entry.",
          "is_bot": false,
          "headline": "docs(changelog): record the hardening sprint",
          "author_name": "Damir Mukimov",
          "author_login": "SamyRai",
          "committed_at": "2026-07-17T09:45:06Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "73bbf9e232976fef3e5b74918ee9878202a06e73",
          "body": "Adds an opt-in recording harness so previously docs-only 'success'\nresponse shapes can be verified against a real entitled account and\nreplayed offline thereafter (docs/roadmap.md 'Unverified live'):\n\n- newVerifyClient: replays a committed cassette in CI, skipping when it\n  hasn't been recorded yet \n[…]\nngs,\n  Moderations, and Agents Invoke — each skipped until recorded.\n\nAll four skip cleanly offline; go test -race + golangci-lint clean.\nRecording is user-run (needs a real key); see docs/roadmap.md.",
          "is_bot": false,
          "headline": "test(client): add live success-path verification harness",
          "author_name": "Damir Mukimov",
          "author_login": "SamyRai",
          "committed_at": "2026-07-17T09:43:39Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "9b8266315bebf405de0b6b8d27a3f48b3c165e23",
          "body": "Document the community-reported (claude-code-router#1491) failure where\ncombining a vision model with function-calling tools in one request is\nrejected with HTTP 401 on some GLM configs, with the split-the-turns\nworkaround. Marked not-yet-live-reproduced, per the repo's verify-first\nconvention.",
          "is_bot": false,
          "headline": "docs: note the vision + tool-calling 401 pitfall",
          "author_name": "Damir Mukimov",
          "author_login": "SamyRai",
          "committed_at": "2026-07-17T09:39:51Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "81fc422173bc706b6cd648c3990e1e94c584131a",
          "body": "Extend the media/root Update-test pattern (Update(msg)->(model,cmd),\nsynthetic key/result messages, spy screen) to the previously-untested\ntabs:\n- models: fetch populate, fetch-error toast, filter keys, reload.\n- tools: result/error render, form cycle, enter busy-guard.\n- usage: fetch syncs progress\n[…]\n cancel-is-not-an-error, ctrl+c cancels the stream.\n\nThe TUI package had almost no coverage; every tab now exercises its core\nstate transitions without a terminal. go test -race + golangci-lint clean.",
          "is_bot": false,
          "headline": "test(tui): cover every tab's Update logic",
          "author_name": "Damir Mukimov",
          "author_login": "SamyRai",
          "committed_at": "2026-07-17T09:39:07Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "d2213f29a601409af298c7667d9a9a33fd1a1c9c",
          "body": "internal/accounts had zero unit tests despite holding API keys. Add\ndirect coverage:\n- Store: Add (first-active, overwrite guard), Remove (active needs\n  force, clears Active), List (sorted), SetActive/ActiveAccount (unknown\n  errors, dangling Active), Touch, ResolvedBaseURL (override/type/unknown),\n[…]\n.BaseURL can't redirect) and test\n  it via a canned RoundTripper — coding_plan/confirmed on a clean success,\n  pay_as_you_go/unconfirmed on every other outcome.\n\ngo test -race and golangci-lint clean.",
          "is_bot": false,
          "headline": "test(accounts): cover the credential store and type detection",
          "author_name": "Damir Mukimov",
          "author_login": "SamyRai",
          "committed_at": "2026-07-17T09:33:43Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "f7788329b84ecef57182f58c91b1810f25154961",
          "body": "GetAccountStatus's insufficient-balance branch was unreachable:\nTestBalance flattened a 1113 error into a plain fmt.Errorf string\n(no %w), stripping the code/status markers GetAccountStatus then tried\nto string-match, so a real insufficient-balance response fell through to\nAPIAccessible=false.\n\n- Te\n[…]\nlse the cleaned message.\n- Rewrite the test that locked the wrong behavior; add 1316/1317 and a\n  plain-429 rate-limit case. Remove the roadmap Known bug entry.\n\ngo test -race and golangci-lint clean.",
          "is_bot": false,
          "headline": "fix(client): classify account status from structured APIError",
          "author_name": "Damir Mukimov",
          "author_login": "SamyRai",
          "committed_at": "2026-07-17T09:31:19Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "a3d7de8a12158ed42b47be76c3211808cd227745",
          "body": "Move CLI to internal/cli and app packages (tui/usageview/accounts/coding)\nto internal/, leaving pkg/client as the only public package. Add\nrunWithClient injection, universal --format text|json, interface{}->any,\nbuildChatRequest split, and a shared fileinput helper. First tests for\nthe CLI, fileinput, and TUI layers. Fix two latent bugs: accounts JSON\nkey exposure (mask by default, --reveal opt-in) and TUI media async-poll\nstranding on tab switch (origin-tagged routing + WaitForResult + cancel).",
          "is_bot": false,
          "headline": "Merge: internal/ layout, CLI dedupe, --format, and TUI/accounts fixes",
          "author_name": "Damir Mukimov",
          "author_login": "SamyRai",
          "committed_at": "2026-07-17T09:18:25Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "b7386e225bc62a8388850b3ce416220713bb77c2",
          "body": "The media tab drove video generation with a multi-message poll loop\n(resultMsg -> pollAfter tea.Tick -> pollMsg -> checkVideo -> ...). Every\nhop routed through root.Update, which delivers non-key/non-window\nmessages only to the ACTIVE screen — so switching tabs mid-generation\nsent the poll messages \n[…]\nt Routed dispatch to an inactive screen. go test -race and\ngolangci-lint clean. Interactive check (go run . tui against a live key)\nstill recommended but needs a TTY not available in this environment.",
          "is_bot": false,
          "headline": "fix(tui): stop stranding media async results on tab switch",
          "author_name": "Damir Mukimov",
          "author_login": "SamyRai",
          "committed_at": "2026-07-17T09:14:59Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "cf189f3f824aed150568a64a33a1d31bcdb4c6d0",
          "body": "accounts list/show/current --format json serialized the full\naccounts.Account struct, printing raw api_key values while the table\nview masked them — a secret-exfiltration footgun via a format flag.\n\nJSON output now goes through a presentation-layer accountView that masks\nthe key by default (consiste\n[…]\nage JSON paths were already safe\n(their result structs carry only name/type).\n\nUpdates TestE2EAccountsRoundTrip to assert masking + --reveal; docs note\nthe flag. go test -race and golangci-lint clean.",
          "is_bot": false,
          "headline": "fix(accounts): mask API keys in --format json, add --reveal opt-in",
          "author_name": "Damir Mukimov",
          "author_login": "SamyRai",
          "committed_at": "2026-07-17T09:04:52Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "1f3bc00b23311185ad864c696dfd3095478d9c66",
          "body": "- architecture.md: package-layout block now shows internal/cli, the root\n  main.go entrypoint, internal/{accounts,coding,usageview,tui,fileinput};\n  new 'CLI conventions' section documents runWithClient/resolveConfig and\n  the addFormatFlag/emit output contract.\n- library-guide.md: pkg/accounts and \n[…]\nt|json is universal; json keeps stdout clean.\n- CHANGELOG.md: new dated entry for the internal move (breaking for importers\n  of the app packages), universal --format, interface{}->any, and CLI tests.",
          "is_bot": false,
          "headline": "docs: actualize layout, library surface, and --format for internal move",
          "author_name": "Damir Mukimov",
          "author_login": "SamyRai",
          "committed_at": "2026-07-17T08:11:55Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "66224d332d0c1349d71b0bc5588ef6dfb531c222",
          "body": "Mechanical gofmt -r 'interface{} -> any' sweep on a Go 1.26 module. In\npkg/client this touches exported signatures (e.g. doRequest's body/result\nparams), but 'any' is a type alias for interface{}, so these are\nAPI-identical — no compatibility break for library consumers.\n\nNo behavior change; go test and golangci-lint clean.",
          "is_bot": false,
          "headline": "refactor: interface{} -> any across the module",
          "author_name": "Damir Mukimov",
          "author_login": "SamyRai",
          "committed_at": "2026-07-17T08:09:36Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "0abc722bff861d29319b75f583c4aa2bec2e7aba",
          "body": "- buildChatRequest: extract the thinking/response-format/tools/images\n  blocks into focused helpers and add unit tests (base, thinking,\n  images, missing-image error).\n- internal/fileinput.FileOrURL: the 'URL passes through, local file is\n  base64-encoded' rule for the layout/OCR API, previously dup\n[…]\neration strands the poll) is documented as a follow-up:\nthe safe fixes need an interactive harness to verify and a cancel path,\nso it is not shipped blind here.\n\ngo test -race and golangci-lint clean.",
          "is_bot": false,
          "headline": "refactor: split buildChatRequest, extract shared fileinput helper",
          "author_name": "Damir Mukimov",
          "author_login": "SamyRai",
          "committed_at": "2026-07-17T08:08:55Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "2c022a31410b41b8ae66df038baed605d5cbd62a",
          "body": "Introduce shared addFormatFlag/emit helpers in common.go and adopt them\nso every command selects output the same way, replacing three ad-hoc\nconventions (a bare outputJSON with no flag, a bound package var, or no\nJSON at all):\n\n- batch, files, image, video, rerank, ocr gain --format json (were\n  tex\n[…]\nep JSON as the default but gain a text\n  summary via the same helper.\n\nAdds e2e coverage for the newly JSON-capable files list and rerank.\nRoot --help unchanged; go test -race and golangci-lint clean.",
          "is_bot": false,
          "headline": "feat(cli): consistent --format json across all commands",
          "author_name": "Damir Mukimov",
          "author_login": "SamyRai",
          "committed_at": "2026-07-17T08:03:32Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "4b59f9059195cbfc145e19c0357afdcdb5519404",
          "body": "Replace the four-line 'apiClient, err := getClient()' preamble that\nopened ~50 command handlers with a single runWithClient adapter that\nresolves the client once and passes it in. Handlers keep identical\nbodies (the injected parameter is named apiClient); only signatures and\nRunE registrations change. Commands that branch before needing a client\n(usage check --watch) or take no client are left unwrapped.\n\nCLI --help output is byte-identical; behavior-locking tests unchanged.",
          "is_bot": false,
          "headline": "refactor(cli): inject client via runWithClient wrapper",
          "author_name": "Damir Mukimov",
          "author_login": "SamyRai",
          "committed_at": "2026-07-17T07:56:23Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "637bb9f7d4b46abf2d4dec992c3a399a9c10541e",
          "body": "Add the first real coverage of the CLI layer before refactoring it:\n\n- credentials_test.go: table-driven getClient precedence (flag > account\n  > ZAI_API_KEY > KEY > active account, loud failure on unknown account,\n  base-URL resolution). Extract a pure resolveConfig() from getClient so\n  the preced\n[…]\n  before extraction), and an accounts add/list round-trip.\n- usage_test.go: pins the quota table renderer.\n\nVerified: go test -race ./... and -count=2 (no cross-test state leaks),\ngolangci-lint clean.",
          "is_bot": false,
          "headline": "test(cli): lock credential precedence and command behavior",
          "author_name": "Damir Mukimov",
          "author_login": "SamyRai",
          "committed_at": "2026-07-17T07:52:27Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "33b6e34682fb1cd525508f8376eeb7e8fe9c2fa2",
          "body": "Move the 25-file root command layer into internal/cli (package cli),\nleaving a thin root main.go that calls cli.Execute(). Move the\nin-repo-only packages pkg/{tui,usageview,accounts,coding} to internal/,\nleaving only the documented pkg/client public library at pkg/.\n\nPure mechanical move: package rename + import-path rewrite, no logic\nchanges. Installed binary name (go-z-ai) and CLI --help output are\nbyte-identical. Compiler-, vet-, test-, and lint-verified.",
          "is_bot": false,
          "headline": "refactor: move CLI to internal/cli and app packages to internal/",
          "author_name": "Damir Mukimov",
          "author_login": "SamyRai",
          "committed_at": "2026-07-17T07:45:10Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "50ee1953be20ad45fa3ad1900372d9d81e074e48",
          "body": "… and quota pace\n\nREADME's \"What's covered\" line, docs/library-guide.md (new Anthropic\nMessages API + tool-schema-compatibility sections), docs/cli-reference.md\n(anthropic messages command), docs/accounts-and-quota.md (Pace example\nand explanation), docs/roadmap.md (moves the Anthropic wrapper out o\n[…]\nve-vs-\nunverified boundary; logs the tool-schema-compat construct list as\ndrawn from community reports, not yet live-verified), and CHANGELOG.md\nfor all three features landed in the preceding commits.",
          "is_bot": false,
          "headline": "docs: actualize README/docs for tool-schema compat, Anthropic client,…",
          "author_name": "Damir Mukimov",
          "author_login": "SamyRai",
          "committed_at": "2026-07-13T21:51:35Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "12983609aef2363a7a216ef139772433c7f04089",
          "body": "Targets the most common GLM Coding Plan complaint — usage limits\nrunning out sooner than expected — without repeating unverified\ncommunity claims about a peak/off-peak pricing multiplier. Pace is\nstraight-line extrapolation of the API's own reported usage % against\nhow much of the rolling window has\n[…]\nck, exhausts-early, just-started, invalid/\nclamped bounds, the tiny-usage overflow case, compactDuration) and\nWindowDuration/WindowStart — first coverage for the previously-untested\nusageview package.",
          "is_bot": false,
          "headline": "feat(usage): quota burn-rate ('Pace') indicator on token windows",
          "author_name": "Damir Mukimov",
          "author_login": "SamyRai",
          "committed_at": "2026-07-13T21:51:35Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "155c14e2512c32e8dec7804c3dcee91c5ba47d43",
          "body": "Z.AI exposes an Anthropic-protocol surface at /api/anthropic — the\nendpoint the GLM Coding Plan already points Claude Code at via\npkg/coding (ANTHROPIC_BASE_URL/ANTHROPIC_AUTH_TOKEN), but there was no\ntyped Go client for it, only the OpenAI-style ChatService.\n\npkg/client/anthropic.go: AnthropicServi\n[…]\nnt (a bogus key\nreturns a clean HTTP 401, not a 404/timeout), but the success-path\nresponse body shape is modeled from Anthropic's docs, not yet parsed\nfrom a real entitled call — see docs/roadmap.md.",
          "is_bot": false,
          "headline": "feat(client): typed Anthropic-compatible Messages client",
          "author_name": "Damir Mukimov",
          "author_login": "SamyRai",
          "committed_at": "2026-07-13T21:51:34Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "09095b5704a11d30928651b0e85403027bbacb99",
          "body": "GLM's chat/completions endpoint uses a strict JSON-Schema parser for\ntool `parameters`: a schema containing anyOf/oneOf/allOf or a\n$ref/$defs reference returns HTTP 500 rather than a usable error — a\nknown pain point for tool schemas generated from typed languages\n(nullable fields become anyOf:[T,nu\n[…]\nruct, nested recursion, cycles,\nunresolvable refs, idempotency, no-input-mutation, and an end-to-end\nwire test asserting Create sends the flattened schema by default and\nthe raw schema when opted out.",
          "is_bot": false,
          "headline": "feat(client): flatten tool schemas GLM's parser rejects with HTTP 500",
          "author_name": "Damir Mukimov",
          "author_login": "SamyRai",
          "committed_at": "2026-07-13T21:51:34Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "3fa7bf8e95cced70b7146600fe5e9dfc3e5dcf4c",
          "body": "golangci-lint already caught real bugs in this repo (unused code, a\nstaticcheck empty branch) but was never wired into CI or the pre-PR\nchecklist, so nothing prevented the same class of bug from recurring.\n\n- .golangci.yml: default linter set (errcheck, govet, ineffassign,\n  staticcheck, unused), wi\n[…]\nempty branch in main.go's config load, collapsed to the same\n'_ = ...' idiom already used for the .env load above it.\n\ngo build/vet/gofmt/test -race/govulncheck clean; golangci-lint 0 issues\n(was 28).",
          "is_bot": false,
          "headline": "ci: add golangci-lint gate; fix short-read bugs it surfaced",
          "author_name": "Damir Mukimov",
          "author_login": "SamyRai",
          "committed_at": "2026-07-13T21:51:33Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "ddfb761771e0ec1aecfe045ec36a4b7ea658f214",
          "body": "…lint\n\nA golangci-lint pass (not previously run in CI, which only covers\nbuild/vet/gofmt/test/govulncheck) turned up real findings beyond what\ngoast's deadcode command catches (that one only over-reports cobra RunE\nhandlers; this is genuine unused-code detection):\n\n- DetectionService.once (pkg/clien\n[…]\n + 1\nstaticcheck findings are idiomatic ignore-on-Close/Write patterns,\ncobra/viper setup calls that can't practically fail, and one\nalready-commented intentional empty branch — reviewed, not changed.",
          "is_bot": false,
          "headline": "fix: dead code and a recurring test short-read bug found by golangci-…",
          "author_name": "Damir Mukimov",
          "author_login": "SamyRai",
          "committed_at": "2026-07-12T12:36:29Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "a01e315da25d1dc3e64fdc4eb07c91eb79fb0017",
          "body": "…ools\n\ncoding mcp add/remove/status registers @z_ai/mcp-server (screenshot OCR,\nerror-screenshot diagnosis, diagram/chart understanding, image/video\nanalysis via GLM-4.6V) into Claude Code, OpenCode, Crush, Factory Droid,\nor Cursor — the \"manage MCP services\" step of the official\n@z_ai/coding-helper\n[…]\npkg/coding/mcp_test.go: Load/Detect/Unload round trips per\ntool plus \"preserves existing unrelated config\" cases, including the\ntwo-different-files case for Claude Code and Factory Droid specifically.",
          "is_bot": false,
          "headline": "feat(coding): register Z.AI's Vision MCP server in supported coding t…",
          "author_name": "Damir Mukimov",
          "author_login": "SamyRai",
          "committed_at": "2026-07-12T12:25:00Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "69aa3a1d34c9ac233b8cb0fc25672b2060873f29",
          "body": "- README.md trimmed to a landing page (what it is, install, quick\n  example) that links into docs/ instead of duplicating everything\n- docs/README.md: index split into \"for users\" and \"for developers\"\n- docs/getting-started.md, cli-reference.md, accounts-and-quota.md,\n  coding-tools.md (user guide)\n\n[…]\nsource it was copying)\n- cli-reference.md's command list is sourced from cobra's own generated\n  docs (doc.GenMarkdownTree), not hand-transcribed, so it can't drift\n  from what --help actually reports",
          "is_bot": false,
          "headline": "docs: rewrite documentation into a docs/ guide with a proper index",
          "author_name": "Damir Mukimov",
          "author_login": "SamyRai",
          "committed_at": "2026-07-12T00:12:06Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "81e6b9974e17c2525f4dffb4ebfd5fdb4f5fb600",
          "body": "CLI commands for the new client services from the previous commit:\n\"embeddings create\", \"moderations check\", \"rerank\", \"voice clone/delete/\nlist\", and \"parser parse/create/result\" (document parsing, distinct from\nthe existing \"ocr\" commands).",
          "is_bot": false,
          "headline": "feat(cli): embeddings, moderations, rerank, voice, and parser commands",
          "author_name": "Damir Mukimov",
          "author_login": "SamyRai",
          "committed_at": "2026-07-12T00:11:43Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "1a69eb8a71d8e4377d8f1ce4b56ef65c95ec7dff",
          "body": "- LICENSE (Apache 2.0)\n- .github/workflows/ci.yml: build, vet, gofmt check, test -race, govulncheck\n- .github/dependabot.yml (gomod + github-actions, weekly)\n- Issue templates (bug report, feature request) and a PR template\n- .github/rulesets/main-branch.json + SETUP.md: an importable branch\n  rules\n[…]\nCodeQL default setup, secret scanning)\n- CONTRIBUTING.md: the live-verification/cassette convention and the\n  pre-PR check sequence\n- SECURITY.md: vulnerability reporting via GitHub private advisories",
          "is_bot": false,
          "headline": "chore: Apache 2.0 license, CI workflow, and GitHub OSS scaffolding",
          "author_name": "Damir Mukimov",
          "author_login": "SamyRai",
          "committed_at": "2026-07-12T00:10:40Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "ce901e4a57aff27a4aa1ce841759eb82f045ce92",
          "body": "playground/ and api-explorer/ were ad-hoc API-exploration scripts (own\ngo.mod, not part of the module or its CI) — moved to .scratch/, now\ngitignored, kept locally but no longer part of the public repo.",
          "is_bot": false,
          "headline": "chore: move personal scratch tools out of the tracked repo",
          "author_name": "Damir Mukimov",
          "author_login": "SamyRai",
          "committed_at": "2026-07-12T00:10:26Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "2197bdd50e69899a5c8a22ba8403e73717dce541",
          "body": "…ices into the CLI/TUI\n\nBREAKING CHANGE: module path changed from the non-installable\n\"zai-api-client\" to \"github.com/SamyRai/go-z-ai\" so `go install`/`go get`\nresolve correctly against the real repository. Every internal import\nupdated accordingly.\n\nAlso, in the same files:\n\n- CLI commands and TUI \n[…]\nt\n  out of runAccountsUsage/runAccountsQuota to bring their cyclomatic\n  complexity down, and de-duplicated the \"apply this account's\n  credentials\" sequence in common.go's getClient into applyAccount",
          "is_bot": false,
          "headline": "refactor!: rename module to github.com/SamyRai/go-z-ai; wire new serv…",
          "author_name": "Damir Mukimov",
          "author_login": "SamyRai",
          "committed_at": "2026-07-12T00:09:58Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "8ce739741eafa8ce4640ae050e96a71e40f813e7",
          "body": "- validateKeyAt no longer mutates hc.Timeout in place. ValidateAPIKey\n  passes http.DefaultClient — a shared package-level global — so this was\n  a data race under concurrent callers (it runs inside a bubbletea\n  tea.Cmd goroutine in the TUI) and a surprising process-wide side effect\n  on every othe\n[…]\nmp-file-then-rename (new atomicfile.go), matching the pattern\n  pkg/accounts already used. A crash mid-write could previously truncate\n  one of these real config files instead of leaving it untouched.",
          "is_bot": false,
          "headline": "fix(coding): atomic config writes and context-aware key validation",
          "author_name": "Damir Mukimov",
          "author_login": "SamyRai",
          "committed_at": "2026-07-12T00:09:30Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "94c27fcd81c2dc54785ddd275ed4086e0124af69",
          "body": "- httptest coverage for Embeddings, Moderations, Rerank, Voice, FileParser,\n  Models (previously untested), and Tools\n- Fixed a short-read bug in a test's httptest handler (single r.Body.Read\n  call instead of io.ReadAll — Read isn't guaranteed to fill the buffer)\n- Recorded go-vcr cassettes replayi\n[…]\nquirks: the Agents API's HTTP-200-with-embedded-failure\n  response shape, and the account/plan-entitlement gate behind Embeddings/\n  Moderations/Rerank/Voice returning \"Unknown Model\" on some accounts",
          "is_bot": false,
          "headline": "test(client): coverage for the new services and go-vcr live-verification",
          "author_name": "Damir Mukimov",
          "author_login": "SamyRai",
          "committed_at": "2026-07-12T00:09:10Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "897eca159c01015827cddb50bf74e4bffaa634f5",
          "body": "…eParser services\n\nRounds out the API surface against the official OpenAPI spec:\n\n- Agents (Invoke/AsyncResult), Embeddings, Moderations, Rerank, Voice\n  (cloning), and FileParser (document-to-text) services\n- Embeddings/Moderations authenticate against open.bigmodel.cn via\n  Config.ChinaAPIKey (fal\n[…]\nh\n  no real callers anywhere in the codebase\n- Model categorization (vision vs text) now driven by a single\n  visionModelMarkers source of truth instead of two copies that could\n  silently drift apart",
          "is_bot": false,
          "headline": "feat(client): Agents, Embeddings, Moderations, Rerank, Voice, and Fil…",
          "author_name": "Damir Mukimov",
          "author_login": "SamyRai",
          "committed_at": "2026-07-12T00:08:32Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "388e6c54aa1f6c398edc7858dbaadf705d7ddd74",
          "body": "- Agents service (Invoke/AsyncResult), including the HTTP-200-with-\n  embedded-business-failure response quirk both endpoints share\n- Handwriting OCR alongside layout parsing\n- A go-vcr based live-verification test suite that replays real recorded\n  API interactions instead of hand-written fixtures\n- Confirmed the Assistant API is deprecated upstream and that Moderations\n  needs an account with real entitlement to verify further",
          "is_bot": false,
          "headline": "feat: Agents API, handwriting OCR, and live-verification test suite",
          "author_name": "Damir Mukimov",
          "author_login": "SamyRai",
          "committed_at": "2026-07-11T21:18:00Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "e6b31a15e837e1caa4df43303b0041e96e928db7",
          "body": "- Streaming chat completions (SSE), structured (json_schema) output, a\n  function-calling auto-executing loop, deep-thinking controls, and\n  retry/backoff with jitter and Retry-After support\n- Multimodal messages for vision models (GLM-4.6V/4.5V)\n- Image, video, audio, and OCR (layout parsing) servi\n[…]\nd as a fifth supported coding tool\n- pkg/usageview extracted so CLI and TUI usage/quota rendering can't drift\n- Removed the provider/appconfig abstraction in favor of the simpler\n  multi-account model",
          "is_bot": false,
          "headline": "feat: streaming, tool calling, media generation, and terminal UI",
          "author_name": "Damir Mukimov",
          "author_login": "SamyRai",
          "committed_at": "2026-07-11T21:18:00Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "be9fef2507c747cd2f938fd5c27a41b6025836c8",
          "body": "Go client library (chat completions, streaming, tools, structured output)\nand CLI (chat, models, usage, billing, multi-account management), plus a\nport of @z_ai/coding-helper (pkg/coding) for wiring Claude Code, OpenCode,\nCrush, and Factory Droid to a GLM Coding Plan credential.\n\n- Resilient HTTP transport with retry and exponential backoff\n- SRP-compliant service design, typed request/response structures\n- Configuration via environment variables, flags, and config files",
          "is_bot": false,
          "headline": "feat: initial Z.AI API client and CLI",
          "author_name": "Damir Mukimov",
          "author_login": "SamyRai",
          "committed_at": "2026-07-11T21:18:00Z",
          "body_truncated": false,
          "is_coding_agent": false
        }
      ],
      "releases_count": 1,
      "commits_last_year": 68,
      "latest_release_at": "2026-07-18T22:58:15Z",
      "latest_release_tag": "v0.1.0",
      "releases_from_tags": false,
      "days_since_last_push": 2,
      "active_weeks_last_year": 2,
      "days_since_latest_release": 6,
      "mean_days_between_releases": null
    },
    "community": {
      "has_readme": true,
      "has_license": true,
      "has_description": true,
      "has_contributing": true,
      "health_percentage": 100,
      "has_issue_template": false,
      "has_code_of_conduct": true,
      "has_pull_request_template": true
    },
    "ecosystem": {
      "packages": [
        {
          "name": "github.com/SamyRai/go-z-ai",
          "exists": true,
          "license": null,
          "keywords": [],
          "ecosystem": "go",
          "matches_repo": true,
          "registry_url": "https://pkg.go.dev/github.com/SamyRai/go-z-ai",
          "is_deprecated": false,
          "latest_version": "v0.1.0",
          "repository_url": "https://github.com/SamyRai/go-z-ai",
          "versions_count": 1,
          "total_downloads": null,
          "dependents_count": null,
          "deprecation_note": null,
          "maintainers_count": null,
          "monthly_downloads": null,
          "first_published_at": null,
          "latest_published_at": "2026-07-18T22:54:15Z",
          "latest_version_yanked": null,
          "days_since_latest_publish": 6
        }
      ]
    },
    "popularity": {
      "forks": 0,
      "stars": 0,
      "watchers": 0,
      "fork_history": {
        "days": [],
        "complete": true,
        "collected": 0,
        "total_forks": 0
      },
      "star_history": {
        "days": [],
        "complete": true,
        "collected": 0,
        "total_stars": 0,
        "collected_at": null
      },
      "open_issues_and_prs": 5
    },
    "ai_readiness": {
      "has_nix": false,
      "example_dirs": [
        "examples"
      ],
      "has_llms_txt": false,
      "has_dockerfile": false,
      "has_mcp_signal": false,
      "bootstrap_files": [
        "Makefile"
      ],
      "api_schema_files": [],
      "has_devcontainer": false,
      "typecheck_configs": [],
      "toolchain_manifests": [
        "go.mod"
      ],
      "largest_source_bytes": 23677,
      "source_files_sampled": 146,
      "oversized_source_files": 0,
      "agent_instruction_files": [],
      "agent_instruction_max_bytes": null
    },
    "dependencies": {
      "manifests": [
        "go.mod"
      ],
      "advisories": {
        "error": null,
        "scope": "repository_graph",
        "source": "osv",
        "findings": [],
        "collected": true,
        "malicious": [],
        "truncated": false,
        "by_severity": {},
        "advisory_count": 0,
        "affected_count": 0,
        "assessed_count": 56,
        "malicious_count": 0,
        "assessed_package": null,
        "unassessed_count": 0,
        "direct_affected_count": 0
      },
      "ecosystems": [
        "go"
      ],
      "dependencies": [
        {
          "name": "charm.land/bubbles/v2",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v2.1.1"
        },
        {
          "name": "charm.land/bubbletea/v2",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v2.0.8"
        },
        {
          "name": "charm.land/glamour/v2",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v2.0.1"
        },
        {
          "name": "charm.land/huh/v2",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v2.0.3"
        },
        {
          "name": "charm.land/lipgloss/v2",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v2.0.5"
        },
        {
          "name": "github.com/alecthomas/chroma/v2",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v2.14.0"
        },
        {
          "name": "github.com/joho/godotenv",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.5.1"
        },
        {
          "name": "github.com/spf13/cobra",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.10.2"
        },
        {
          "name": "github.com/spf13/viper",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.21.0"
        },
        {
          "name": "github.com/yuin/goldmark",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.7.17"
        },
        {
          "name": "github.com/yuin/goldmark-highlighting/v2",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v2.0.0-20230729083705-37449abec8cc"
        },
        {
          "name": "go.yaml.in/yaml/v3",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v3.0.4"
        },
        {
          "name": "golang.org/x/term",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v0.45.0"
        },
        {
          "name": "gopkg.in/dnaeon/go-vcr.v4",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v4.0.7"
        }
      ],
      "all_dependencies": {
        "error": null,
        "source": "github-sbom",
        "packages": [
          {
            "name": "charm.land/bubbles/v2",
            "direct": true,
            "version": "v2.1.1",
            "ecosystem": "go"
          },
          {
            "name": "charm.land/bubbletea/v2",
            "direct": true,
            "version": "v2.0.8",
            "ecosystem": "go"
          },
          {
            "name": "charm.land/glamour/v2",
            "direct": true,
            "version": "v2.0.1",
            "ecosystem": "go"
          },
          {
            "name": "charm.land/huh/v2",
            "direct": true,
            "version": "v2.0.3",
            "ecosystem": "go"
          },
          {
            "name": "charm.land/lipgloss/v2",
            "direct": true,
            "version": "v2.0.5",
            "ecosystem": "go"
          },
          {
            "name": "github.com/alecthomas/chroma/v2",
            "direct": true,
            "version": "v2.14.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/joho/godotenv",
            "direct": true,
            "version": "v1.5.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/spf13/cobra",
            "direct": true,
            "version": "v1.10.2",
            "ecosystem": "go"
          },
          {
            "name": "github.com/spf13/viper",
            "direct": true,
            "version": "v1.21.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/yuin/goldmark",
            "direct": true,
            "version": "v1.7.17",
            "ecosystem": "go"
          },
          {
            "name": "github.com/yuin/goldmark-highlighting/v2",
            "direct": true,
            "version": "v2.0.0-20230729083705-37449abec8cc",
            "ecosystem": "go"
          },
          {
            "name": "go.yaml.in/yaml/v3",
            "direct": true,
            "version": "v3.0.4",
            "ecosystem": "go"
          },
          {
            "name": "golang.org/x/term",
            "direct": true,
            "version": "v0.45.0",
            "ecosystem": "go"
          },
          {
            "name": "gopkg.in/dnaeon/go-vcr.v4",
            "direct": true,
            "version": "v4.0.7",
            "ecosystem": "go"
          },
          {
            "name": "github.com/atotto/clipboard",
            "direct": false,
            "version": "v0.1.4",
            "ecosystem": "go"
          },
          {
            "name": "github.com/aymerick/douceur",
            "direct": false,
            "version": "v0.2.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/catppuccin/go",
            "direct": false,
            "version": "v0.2.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/charmbracelet/colorprofile",
            "direct": false,
            "version": "v0.4.3",
            "ecosystem": "go"
          },
          {
            "name": "github.com/charmbracelet/harmonica",
            "direct": false,
            "version": "v0.2.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/charmbracelet/ultraviolet",
            "direct": false,
            "version": "v0.0.0-20260703014108-f5a850f9c2b7",
            "ecosystem": "go"
          },
          {
            "name": "github.com/charmbracelet/x/ansi",
            "direct": false,
            "version": "v0.11.7",
            "ecosystem": "go"
          },
          {
            "name": "github.com/charmbracelet/x/exp/ordered",
            "direct": false,
            "version": "v0.1.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/charmbracelet/x/exp/slice",
            "direct": false,
            "version": "v0.0.0-20250327172914-2fdc97757edf",
            "ecosystem": "go"
          },
          {
            "name": "github.com/charmbracelet/x/exp/strings",
            "direct": false,
            "version": "v0.0.0-20240722160745-212f7b056ed0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/charmbracelet/x/term",
            "direct": false,
            "version": "v0.2.2",
            "ecosystem": "go"
          },
          {
            "name": "github.com/charmbracelet/x/termios",
            "direct": false,
            "version": "v0.1.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/charmbracelet/x/windows",
            "direct": false,
            "version": "v0.2.2",
            "ecosystem": "go"
          },
          {
            "name": "github.com/clipperhouse/displaywidth",
            "direct": false,
            "version": "v0.11.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/clipperhouse/uax29/v2",
            "direct": false,
            "version": "v2.7.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/dlclark/regexp2",
            "direct": false,
            "version": "v1.11.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/dustin/go-humanize",
            "direct": false,
            "version": "v1.0.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/fsnotify/fsnotify",
            "direct": false,
            "version": "v1.9.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/go-viper/mapstructure/v2",
            "direct": false,
            "version": "v2.4.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/gorilla/css",
            "direct": false,
            "version": "v1.0.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/inconshreveable/mousetrap",
            "direct": false,
            "version": "v1.1.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/lucasb-eyer/go-colorful",
            "direct": false,
            "version": "v1.4.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/mattn/go-runewidth",
            "direct": false,
            "version": "v0.0.24",
            "ecosystem": "go"
          },
          {
            "name": "github.com/microcosm-cc/bluemonday",
            "direct": false,
            "version": "v1.0.27",
            "ecosystem": "go"
          },
          {
            "name": "github.com/mitchellh/hashstructure/v2",
            "direct": false,
            "version": "v2.0.2",
            "ecosystem": "go"
          },
          {
            "name": "github.com/muesli/cancelreader",
            "direct": false,
            "version": "v0.2.2",
            "ecosystem": "go"
          },
          {
            "name": "github.com/pelletier/go-toml/v2",
            "direct": false,
            "version": "v2.2.4",
            "ecosystem": "go"
          },
          {
            "name": "github.com/rivo/uniseg",
            "direct": false,
            "version": "v0.4.7",
            "ecosystem": "go"
          },
          {
            "name": "github.com/sagikazarmark/locafero",
            "direct": false,
            "version": "v0.11.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/sahilm/fuzzy",
            "direct": false,
            "version": "v0.1.3",
            "ecosystem": "go"
          },
          {
            "name": "github.com/sourcegraph/conc",
            "direct": false,
            "version": "v0.3.1-0.20240121214520-5f936abd7ae8",
            "ecosystem": "go"
          },
          {
            "name": "github.com/spf13/afero",
            "direct": false,
            "version": "v1.15.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/spf13/cast",
            "direct": false,
            "version": "v1.10.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/spf13/pflag",
            "direct": false,
            "version": "v1.0.10",
            "ecosystem": "go"
          },
          {
            "name": "github.com/subosito/gotenv",
            "direct": false,
            "version": "v1.6.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/xo/terminfo",
            "direct": false,
            "version": "v0.0.0-20220910002029-abceb7e1c41e",
            "ecosystem": "go"
          },
          {
            "name": "github.com/yuin/goldmark-emoji",
            "direct": false,
            "version": "v1.0.5",
            "ecosystem": "go"
          },
          {
            "name": "go.yaml.in/yaml/v4",
            "direct": false,
            "version": "v4.0.0-rc.6",
            "ecosystem": "go"
          },
          {
            "name": "golang.org/x/net",
            "direct": false,
            "version": "v0.57.0",
            "ecosystem": "go"
          },
          {
            "name": "golang.org/x/sync",
            "direct": false,
            "version": "v0.22.0",
            "ecosystem": "go"
          },
          {
            "name": "golang.org/x/sys",
            "direct": false,
            "version": "v0.47.0",
            "ecosystem": "go"
          },
          {
            "name": "golang.org/x/text",
            "direct": false,
            "version": "v0.40.0",
            "ecosystem": "go"
          }
        ],
        "collected": true,
        "truncated": false,
        "total_count": 56,
        "direct_count": 14,
        "indirect_count": 42
      }
    },
    "maintainership": {
      "issues": {
        "open_prs": 5,
        "merged_prs": 0,
        "open_issues": 0,
        "closed_ratio": null,
        "closed_issues": 0,
        "closed_unmerged_prs": 0
      },
      "bus_factor": 1,
      "bot_contributors": 0,
      "top_contributors": [
        {
          "type": "User",
          "login": "SamyRai",
          "commits": 68,
          "avatar_url": "https://avatars.githubusercontent.com/u/919510?v=4"
        }
      ],
      "contributors_sampled": 1,
      "top_contributor_share": 1
    },
    "quality_signals": {
      "has_ci": true,
      "has_tests": true,
      "ci_workflows": [
        "ci.yml",
        "codeql.yml",
        "dependency-review.yml",
        "pages.yml",
        "release.yml",
        "scorecard.yml"
      ],
      "has_docs_dir": true,
      "linter_configs": [
        ".golangci.yml"
      ],
      "has_editorconfig": false,
      "has_linter_config": true,
      "has_precommit_config": false
    },
    "security_signals": {
      "lockfiles": [
        "go.sum"
      ],
      "scorecard": {
        "checks": [
          {
            "name": "Binary-Artifacts",
            "score": 10,
            "reason": "no binaries found in the repo",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#binary-artifacts"
          },
          {
            "name": "Branch-Protection",
            "score": 3,
            "reason": "branch protection is not maximal on development and all release branches",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#branch-protection"
          },
          {
            "name": "CI-Tests",
            "score": null,
            "reason": "no pull request found",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#ci-tests"
          },
          {
            "name": "CII-Best-Practices",
            "score": 0,
            "reason": "no effort to earn an OpenSSF best practices badge detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#cii-best-practices"
          },
          {
            "name": "Code-Review",
            "score": 0,
            "reason": "Found 0/30 approved changesets -- score normalized to 0",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#code-review"
          },
          {
            "name": "Contributors",
            "score": 0,
            "reason": "project has 0 contributing companies or organizations -- score normalized to 0",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#contributors"
          },
          {
            "name": "Dangerous-Workflow",
            "score": 10,
            "reason": "no dangerous workflow patterns detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dangerous-workflow"
          },
          {
            "name": "Dependency-Update-Tool",
            "score": 10,
            "reason": "update tool detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dependency-update-tool"
          },
          {
            "name": "Fuzzing",
            "score": 0,
            "reason": "project is not fuzzed",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#fuzzing"
          },
          {
            "name": "License",
            "score": 10,
            "reason": "license file detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#license"
          },
          {
            "name": "Maintained",
            "score": 0,
            "reason": "project was created within the last 90 days. Please review its contents carefully",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#maintained"
          },
          {
            "name": "Packaging",
            "score": null,
            "reason": "packaging workflow not detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#packaging"
          },
          {
            "name": "Pinned-Dependencies",
            "score": 10,
            "reason": "all dependencies are pinned",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#pinned-dependencies"
          },
          {
            "name": "SAST",
            "score": 10,
            "reason": "SAST tool detected: CodeQL",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#sast"
          },
          {
            "name": "Security-Policy",
            "score": 10,
            "reason": "security policy file detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#security-policy"
          },
          {
            "name": "Signed-Releases",
            "score": 8,
            "reason": "1 out of the last 1 releases have a total of 1 signed artifacts.",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#signed-releases"
          },
          {
            "name": "Token-Permissions",
            "score": 0,
            "reason": "detected GitHub workflow tokens with excessive permissions",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#token-permissions"
          },
          {
            "name": "Vulnerabilities",
            "score": 10,
            "reason": "0 existing vulnerabilities detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#vulnerabilities"
          }
        ],
        "commit": "e3c00c4fbf65cd1d7d81698dfc54f6701fa470fd",
        "ran_at": "2026-07-25T05:39:48Z",
        "aggregate_score": 6,
        "scorecard_version": "v5.5.0"
      },
      "has_codeql_workflow": true,
      "has_security_policy": true,
      "has_dependabot_config": true
    },
    "contribution_flow": {
      "collected": true,
      "ci_last_run_at": "2026-07-22T05:44:48Z",
      "oldest_open_prs": [
        {
          "number": 2,
          "created_at": "2026-07-22T05:44:20Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 3,
          "created_at": "2026-07-22T05:44:25Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 4,
          "created_at": "2026-07-22T05:44:28Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 5,
          "created_at": "2026-07-22T05:44:36Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 6,
          "created_at": "2026-07-22T05:44:45Z",
          "last_comment_at": null,
          "last_comment_author": null
        }
      ],
      "last_merged_pr_at": null,
      "ci_last_conclusion": "SUCCESS",
      "oldest_open_issues": []
    }
  },
  "config": {
    "disabled_metrics": [],
    "disabled_categories": [],
    "disabled_components": {}
  },
  "source": {
    "url": "https://github.com/SamyRai/go-z-ai",
    "host": "github.com",
    "name": "go-z-ai",
    "owner": "SamyRai"
  },
  "metrics": {
    "overall": {
      "key": "overall",
      "band": "moderate",
      "name": "Overall health",
      "note": null,
      "notes": [],
      "value": 58,
      "inputs": {
        "security": 68,
        "vitality": 66,
        "community": 43,
        "governance": 33,
        "engineering": 84
      },
      "components": []
    },
    "categories": [
      {
        "key": "vitality",
        "band": "moderate",
        "name": "Vitality",
        "value": 66,
        "weight": 0.22,
        "metrics": [
          {
            "key": "development_activity",
            "band": "moderate",
            "name": "Development activity",
            "note": null,
            "notes": [],
            "value": 54,
            "inputs": {
              "commits_last_year": 68,
              "human_commit_share": 1,
              "days_since_last_push": 2,
              "active_weeks_last_year": 2
            },
            "components": [
              {
                "key": "push_recency",
                "name": "Push recency",
                "detail": "last push 2 days ago",
                "points": 36,
                "status": "met",
                "details": [
                  {
                    "code": "push_recency",
                    "params": {
                      "days": 2
                    }
                  }
                ],
                "max_points": 36
              },
              {
                "key": "commit_cadence",
                "name": "Commit cadence",
                "detail": "2/52 weeks with commits",
                "points": 1.4,
                "status": "partial",
                "details": [
                  {
                    "code": "commit_cadence_weeks",
                    "params": {
                      "weeks": 2
                    }
                  }
                ],
                "max_points": 36
              },
              {
                "key": "commit_volume",
                "name": "Commit volume",
                "detail": "68 commits in the last year",
                "points": 16.5,
                "status": "partial",
                "details": [
                  {
                    "code": "commits_last_year",
                    "params": {
                      "count": 68
                    }
                  }
                ],
                "max_points": 18
              },
              {
                "key": "openssf_scorecard_maintained",
                "name": "OpenSSF Scorecard: Maintained",
                "detail": "project was created within the last 90 days. Please review its contents carefully",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "release_discipline",
            "band": "good",
            "name": "Release discipline",
            "note": null,
            "notes": [],
            "value": 84,
            "inputs": {
              "releases_count": 1,
              "latest_release_tag": "v0.1.0",
              "releases_from_tags": false,
              "days_since_latest_release": 6,
              "mean_days_between_releases": null
            },
            "components": [
              {
                "key": "ships_releases",
                "name": "Ships releases",
                "detail": "1 releases published",
                "points": 27,
                "status": "met",
                "details": [
                  {
                    "code": "releases_published",
                    "params": {
                      "count": 1
                    }
                  }
                ],
                "max_points": 27
              },
              {
                "key": "release_recency",
                "name": "Release recency",
                "detail": "latest release 6 days ago",
                "points": 36,
                "status": "met",
                "details": [
                  {
                    "code": "release_recency",
                    "params": {
                      "days": 6
                    }
                  }
                ],
                "max_points": 36
              },
              {
                "key": "release_cadence",
                "name": "Release cadence",
                "detail": "cadence unknown (single release)",
                "points": 12.6,
                "status": "partial",
                "details": [
                  {
                    "code": "release_cadence_unknown",
                    "params": {}
                  }
                ],
                "max_points": 27
              },
              {
                "key": "openssf_scorecard_signed_releases",
                "name": "OpenSSF Scorecard: Signed-Releases",
                "detail": "1 out of the last 1 releases have a total of 1 signed artifacts.",
                "points": 8,
                "status": "partial",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "abandonment",
            "band": "excellent",
            "name": "Abandonment",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "cap": null,
              "state": "unverified",
              "guards": [],
              "signals": [],
              "red_flag": false,
              "multiplier_pct": 100,
              "declared_reason": null,
              "unverified_reason": "repository_too_young",
              "unanswered_open_prs": null,
              "unanswered_open_issues": null,
              "days_since_last_merged_pr": null,
              "days_since_last_human_commit": null,
              "days_since_last_human_commit_is_floor": false
            },
            "components": [
              {
                "key": "project_is_still_maintained",
                "name": "Project is still maintained",
                "detail": "maintenance record not established from the collected data",
                "points": 100,
                "status": "met",
                "details": [
                  {
                    "code": "abandonment_unverified",
                    "params": {}
                  }
                ],
                "max_points": 100
              }
            ]
          }
        ],
        "description": "Is the project alive — is code being written and are releases shipping?"
      },
      {
        "key": "community",
        "band": "at_risk",
        "name": "Community & Adoption",
        "value": 43,
        "weight": 0.18,
        "metrics": [
          {
            "key": "popularity",
            "band": "critical",
            "name": "Popularity & adoption",
            "note": null,
            "notes": [],
            "value": 1,
            "inputs": {
              "forks": 0,
              "stars": 0,
              "watchers": 0,
              "growth_state": "unverified",
              "growth_factor_pct": 100,
              "growth_unverified_reason": "no_history"
            },
            "components": [
              {
                "key": "stars",
                "name": "Stars",
                "detail": "0 stars",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "stars",
                    "params": {
                      "count": 0
                    }
                  }
                ],
                "max_points": 60
              },
              {
                "key": "forks",
                "name": "Forks",
                "detail": "0 forks",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "forks",
                    "params": {
                      "count": 0
                    }
                  }
                ],
                "max_points": 25
              },
              {
                "key": "watchers",
                "name": "Watchers",
                "detail": "0 watchers",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "watchers",
                    "params": {
                      "count": 0
                    }
                  }
                ],
                "max_points": 15
              }
            ]
          },
          {
            "key": "community_health",
            "band": "excellent",
            "name": "Community health",
            "note": null,
            "notes": [],
            "value": 92,
            "inputs": {
              "has_readme": true,
              "has_license": true,
              "has_contributing": true,
              "has_issue_template": false,
              "has_code_of_conduct": true,
              "has_pull_request_template": true
            },
            "components": [
              {
                "key": "readme",
                "name": "README",
                "detail": null,
                "points": 22.5,
                "status": "met",
                "details": [],
                "max_points": 22.5
              },
              {
                "key": "license",
                "name": "License",
                "detail": "recognized license (Apache-2.0)",
                "points": 22.5,
                "status": "met",
                "details": [
                  {
                    "code": "license_standard",
                    "params": {}
                  },
                  {
                    "code": "license_spdx",
                    "params": {
                      "spdx": "Apache-2.0"
                    }
                  }
                ],
                "max_points": 22.5
              },
              {
                "key": "contributing_guide",
                "name": "CONTRIBUTING guide",
                "detail": null,
                "points": 18,
                "status": "met",
                "details": [],
                "max_points": 18
              },
              {
                "key": "code_of_conduct",
                "name": "Code of conduct",
                "detail": null,
                "points": 13.5,
                "status": "met",
                "details": [],
                "max_points": 13.5
              },
              {
                "key": "issue_template",
                "name": "Issue template",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.2
              },
              {
                "key": "pr_template",
                "name": "PR template",
                "detail": null,
                "points": 6.3,
                "status": "met",
                "details": [],
                "max_points": 6.3
              }
            ]
          }
        ],
        "description": "Does the project have users, downloads, attention, and a welcoming setup for contributors?"
      },
      {
        "key": "governance",
        "band": "at_risk",
        "name": "Sustainability & Governance",
        "value": 33,
        "weight": 0.24,
        "metrics": [
          {
            "key": "maintainer_resilience",
            "band": "critical",
            "name": "Maintainer resilience (bus factor)",
            "note": null,
            "notes": [],
            "value": 10,
            "inputs": {
              "bus_factor": 1,
              "contributors_sampled": 1,
              "top_contributor_share": 1
            },
            "components": [
              {
                "key": "bus_factor",
                "name": "Bus factor",
                "detail": "1 contributor(s) cover half of all commits",
                "points": 9,
                "status": "partial",
                "details": [
                  {
                    "code": "bus_factor",
                    "params": {
                      "count": 1
                    }
                  }
                ],
                "max_points": 54
              },
              {
                "key": "commit_distribution",
                "name": "Commit distribution",
                "detail": "top contributor authored 100% of commits",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "top_contributor_share",
                    "params": {
                      "share": 100
                    }
                  }
                ],
                "max_points": 22.5
              },
              {
                "key": "contributor_breadth",
                "name": "Contributor breadth",
                "detail": "1 contributors",
                "points": 1.4,
                "status": "partial",
                "details": [
                  {
                    "code": "contributors_sampled",
                    "params": {
                      "count": 1
                    }
                  }
                ],
                "max_points": 13.5
              },
              {
                "key": "openssf_scorecard_contributors",
                "name": "OpenSSF Scorecard: Contributors",
                "detail": "project has 0 contributing companies or organizations -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "responsiveness",
            "band": "critical",
            "name": "Issue & PR responsiveness",
            "note": "Excluded from scoring (no data or not applicable): Issue resolution, PR acceptance. Remaining weights renormalized.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "issue_resolution",
                    "pr_acceptance"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              }
            ],
            "value": 1,
            "inputs": {
              "merged_prs": 0,
              "open_issues": 0,
              "closed_issues": 0,
              "issue_closed_ratio": null,
              "closed_unmerged_prs": 0
            },
            "components": [
              {
                "key": "issue_resolution",
                "name": "Issue resolution",
                "detail": "no issues or no data",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_issues_or_data",
                    "params": {}
                  }
                ],
                "max_points": 46.75
              },
              {
                "key": "pr_acceptance",
                "name": "PR acceptance",
                "detail": "no decided pull requests or no data",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_decided_prs_or_data",
                    "params": {}
                  }
                ],
                "max_points": 38.25
              },
              {
                "key": "openssf_scorecard_code_review",
                "name": "OpenSSF Scorecard: Code-Review",
                "detail": "Found 0/30 approved changesets -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 15
              }
            ]
          },
          {
            "key": "stewardship",
            "band": "moderate",
            "name": "Ownership & stewardship",
            "note": "Excluded from scoring (no data or not applicable): Verified domain. Remaining weights renormalized.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "verified_domain"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              }
            ],
            "value": 50,
            "inputs": {
              "followers": 11,
              "owner_type": "User",
              "is_verified": null,
              "owner_login": "SamyRai",
              "public_repos": 25,
              "account_age_days": 5487
            },
            "components": [
              {
                "key": "ownership_backing",
                "name": "Ownership backing",
                "detail": "personal (user) account",
                "points": 10,
                "status": "partial",
                "details": [
                  {
                    "code": "owner_personal",
                    "params": {}
                  }
                ],
                "max_points": 30
              },
              {
                "key": "verified_domain",
                "name": "Verified domain",
                "detail": "not applicable to user accounts",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "not_applicable_to_user_accounts",
                    "params": {}
                  }
                ],
                "max_points": 20
              },
              {
                "key": "owner_reach",
                "name": "Owner reach",
                "detail": "11 followers of SamyRai",
                "points": 7.8,
                "status": "partial",
                "details": [
                  {
                    "code": "owner_followers",
                    "params": {
                      "count": 11,
                      "login": "SamyRai"
                    }
                  }
                ],
                "max_points": 25
              },
              {
                "key": "track_record",
                "name": "Track record",
                "detail": "25 public repos, account ~15 yr old",
                "points": 22.3,
                "status": "partial",
                "details": [
                  {
                    "code": "public_repos",
                    "params": {
                      "count": 25
                    }
                  },
                  {
                    "code": "account_age_years",
                    "params": {
                      "years": 15
                    }
                  }
                ],
                "max_points": 25
              }
            ]
          },
          {
            "key": "package_maintenance",
            "band": "good",
            "name": "Package maintenance",
            "note": null,
            "notes": [],
            "value": 84,
            "inputs": {
              "packages": [
                "github.com/SamyRai/go-z-ai"
              ],
              "ecosystems": "go",
              "any_deprecated": false,
              "min_days_since_publish": 6
            },
            "components": [
              {
                "key": "published_resolvable",
                "name": "Published & resolvable",
                "detail": "1 package(s) on go",
                "points": 25,
                "status": "met",
                "details": [
                  {
                    "code": "packages_published",
                    "params": {
                      "count": 1,
                      "ecosystems": "go"
                    }
                  }
                ],
                "max_points": 25
              },
              {
                "key": "publish_recency",
                "name": "Publish recency",
                "detail": "latest publish 6 days ago",
                "points": 35,
                "status": "met",
                "details": [
                  {
                    "code": "publish_recency",
                    "params": {
                      "days": 6
                    }
                  }
                ],
                "max_points": 35
              },
              {
                "key": "version_history",
                "name": "Version history",
                "detail": "1 published versions",
                "points": 4,
                "status": "partial",
                "details": [
                  {
                    "code": "published_versions",
                    "params": {
                      "count": 1
                    }
                  }
                ],
                "max_points": 20
              },
              {
                "key": "not_deprecated",
                "name": "Not deprecated",
                "detail": "active, not deprecated or yanked",
                "points": 20,
                "status": "met",
                "details": [
                  {
                    "code": "package_not_deprecated",
                    "params": {}
                  }
                ],
                "max_points": 20
              }
            ]
          }
        ],
        "description": "Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?"
      },
      {
        "key": "engineering",
        "band": "good",
        "name": "Engineering Quality",
        "value": 84,
        "weight": 0.2,
        "metrics": [
          {
            "key": "engineering_practices",
            "band": "good",
            "name": "Engineering practices",
            "note": "Excluded from scoring (no data or not applicable): OpenSSF Scorecard: CI-Tests. Remaining weights renormalized.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "openssf_scorecard_ci_tests"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              }
            ],
            "value": 80,
            "inputs": {
              "has_ci": true,
              "has_tests": true,
              "has_editorconfig": false,
              "has_linter_config": true,
              "has_precommit_config": false
            },
            "components": [
              {
                "key": "ci_workflows",
                "name": "CI workflows",
                "detail": "6 workflow(s)",
                "points": 24,
                "status": "met",
                "details": [
                  {
                    "code": "ci_workflows",
                    "params": {
                      "count": 6
                    }
                  }
                ],
                "max_points": 24
              },
              {
                "key": "tests_present",
                "name": "Tests present",
                "detail": null,
                "points": 24,
                "status": "met",
                "details": [],
                "max_points": 24
              },
              {
                "key": "linter_config",
                "name": "Linter config",
                "detail": ".golangci.yml",
                "points": 16,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": ".golangci.yml"
                    }
                  }
                ],
                "max_points": 16
              },
              {
                "key": "pre_commit_hooks",
                "name": "Pre-commit hooks",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 9.6
              },
              {
                "key": "editorconfig",
                "name": ".editorconfig",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 6.4
              },
              {
                "key": "openssf_scorecard_ci_tests",
                "name": "OpenSSF Scorecard: CI-Tests",
                "detail": "no pull request found",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_data",
                    "params": {}
                  }
                ],
                "max_points": 20
              }
            ]
          },
          {
            "key": "documentation",
            "band": "excellent",
            "name": "Documentation",
            "note": null,
            "notes": [],
            "value": 90,
            "inputs": {
              "topics": [
                "ai",
                "anthropic",
                "api",
                "client",
                "go",
                "integration",
                "openai",
                "sdk",
                "zai",
                "cli",
                "glm",
                "llm",
                "zhipu"
              ],
              "has_wiki": false,
              "homepage": "https://github.com/SamyRai/go-z-ai#readme",
              "has_readme": true,
              "has_docs_dir": true,
              "has_description": true
            },
            "components": [
              {
                "key": "readme",
                "name": "README",
                "detail": null,
                "points": 30,
                "status": "met",
                "details": [],
                "max_points": 30
              },
              {
                "key": "documentation_directory",
                "name": "Documentation directory",
                "detail": null,
                "points": 25,
                "status": "met",
                "details": [],
                "max_points": 25
              },
              {
                "key": "documentation_homepage_site",
                "name": "Documentation / homepage site",
                "detail": "https://github.com/SamyRai/go-z-ai#readme",
                "points": 15,
                "status": "met",
                "details": [],
                "max_points": 15
              },
              {
                "key": "repository_description",
                "name": "Repository description",
                "detail": null,
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              },
              {
                "key": "topics",
                "name": "Topics",
                "detail": "13 topics",
                "points": 10,
                "status": "met",
                "details": [
                  {
                    "code": "topics_count",
                    "params": {
                      "count": 13
                    }
                  }
                ],
                "max_points": 10
              },
              {
                "key": "wiki",
                "name": "Wiki",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 10
              }
            ]
          }
        ],
        "description": "Are baseline engineering and documentation practices in place?"
      },
      {
        "key": "security",
        "band": "moderate",
        "name": "Security",
        "value": 68,
        "weight": 0.16,
        "metrics": [
          {
            "key": "security_posture",
            "band": "moderate",
            "name": "Security posture",
            "note": "Excluded from scoring (no data or not applicable): CI-Tests, Packaging. Remaining weights renormalized.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "ci_tests",
                    "packaging"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              }
            ],
            "value": 60,
            "inputs": {
              "source": "openssf_scorecard",
              "checks_evaluated": 16,
              "scorecard_version": "v5.5.0",
              "checks_inconclusive": 2,
              "scorecard_aggregate": 6
            },
            "components": [
              {
                "key": "binary_artifacts",
                "name": "Binary-Artifacts",
                "detail": "no binaries found in the repo",
                "points": 7.5,
                "status": "met",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "branch_protection",
                "name": "Branch-Protection",
                "detail": "branch protection is not maximal on development and all release branches",
                "points": 2.2,
                "status": "partial",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "ci_tests",
                "name": "CI-Tests",
                "detail": "no pull request found",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_data",
                    "params": {}
                  }
                ],
                "max_points": 2.5
              },
              {
                "key": "cii_best_practices",
                "name": "CII-Best-Practices",
                "detail": "no effort to earn an OpenSSF best practices badge detected",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "code_review",
                "name": "Code-Review",
                "detail": "Found 0/30 approved changesets -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "contributors",
                "name": "Contributors",
                "detail": "project has 0 contributing companies or organizations -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "dangerous_workflow",
                "name": "Dangerous-Workflow",
                "detail": "no dangerous workflow patterns detected",
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              },
              {
                "key": "dependency_update_tool",
                "name": "Dependency-Update-Tool",
                "detail": "update tool detected",
                "points": 7.5,
                "status": "met",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "fuzzing",
                "name": "Fuzzing",
                "detail": "project is not fuzzed",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 5
              },
              {
                "key": "license",
                "name": "License",
                "detail": "license file detected",
                "points": 2.5,
                "status": "met",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "maintained",
                "name": "Maintained",
                "detail": "project was created within the last 90 days. Please review its contents carefully",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "packaging",
                "name": "Packaging",
                "detail": "packaging workflow not detected",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_data",
                    "params": {}
                  }
                ],
                "max_points": 5
              },
              {
                "key": "pinned_dependencies",
                "name": "Pinned-Dependencies",
                "detail": "all dependencies are pinned",
                "points": 5,
                "status": "met",
                "details": [],
                "max_points": 5
              },
              {
                "key": "sast",
                "name": "SAST",
                "detail": "SAST tool detected: CodeQL",
                "points": 5,
                "status": "met",
                "details": [],
                "max_points": 5
              },
              {
                "key": "security_policy",
                "name": "Security-Policy",
                "detail": "security policy file detected",
                "points": 5,
                "status": "met",
                "details": [],
                "max_points": 5
              },
              {
                "key": "signed_releases",
                "name": "Signed-Releases",
                "detail": "1 out of the last 1 releases have a total of 1 signed artifacts.",
                "points": 6,
                "status": "partial",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "token_permissions",
                "name": "Token-Permissions",
                "detail": "detected GitHub workflow tokens with excessive permissions",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "vulnerabilities",
                "name": "Vulnerabilities",
                "detail": "0 existing vulnerabilities detected",
                "points": 7.5,
                "status": "met",
                "details": [],
                "max_points": 7.5
              }
            ]
          },
          {
            "key": "dependency_advisories",
            "band": "excellent",
            "name": "Dependency advisories",
            "note": "Excluded from scoring (no data or not applicable): Indirect dependencies free of known advisories, No advisories left outstanding. Remaining weights renormalized. Matched 56 resolved dependencies against OSV. This repository publishes no package the index resolves, so the repository dependency graph was assessed instead. That graph mixes development and test pins with shipped dependencies, so only the declared runtime dependencies are scored; transitive findings are reported as context and excluded from the score. Reachability is not analyzed.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "indirect_dependencies_free_of_known_advisories",
                    "no_advisories_left_outstanding"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              },
              {
                "code": "advisories_scope_repository",
                "params": {
                  "assessed": 56
                }
              },
              {
                "code": "advisories_repo_graph_caveat",
                "params": {}
              },
              {
                "code": "advisories_reachability",
                "params": {}
              }
            ],
            "value": 100,
            "inputs": {
              "source": "osv",
              "advisories": 0,
              "affected_packages": 0,
              "assessed_packages": 56,
              "unassessed_packages": 0,
              "affected_by_severity": "none",
              "direct_affected_packages": 0
            },
            "components": [
              {
                "key": "direct_dependencies_free_of_known_advisories",
                "name": "Direct dependencies free of known advisories",
                "detail": "no direct dependency carries a known advisory",
                "points": 35,
                "status": "met",
                "details": [
                  {
                    "code": "no_direct_advisories",
                    "params": {}
                  }
                ],
                "max_points": 35
              },
              {
                "key": "indirect_dependencies_free_of_known_advisories",
                "name": "Indirect dependencies free of known advisories",
                "detail": "transitive set not separable from development and test dependencies in this scope",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "advisories_scope_not_separable",
                    "params": {}
                  }
                ],
                "max_points": 25
              },
              {
                "key": "no_advisories_left_outstanding",
                "name": "No advisories left outstanding",
                "detail": "no advisory carries a publication date",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "advisories_no_publication_date",
                    "params": {}
                  }
                ],
                "max_points": 40
              }
            ]
          },
          {
            "key": "malicious_dependencies",
            "band": "excellent",
            "name": "Malicious dependencies",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "source": "osv",
              "meaning": "reported as a malicious package by the OpenSSF corpus; the remedy is removal or moving off the compromised name, never an upgrade of the same artifact. Versions the registry has since pulled are listed but not scored",
              "packages": [],
              "red_flag": false,
              "assessed_packages": 56,
              "malicious_packages": 0,
              "direct_malicious_packages": 0,
              "withdrawn_malicious_packages": 0,
              "installable_malicious_packages": 0
            },
            "components": [
              {
                "key": "no_dependency_reported_as_a_malicious_package",
                "name": "No dependency reported as a malicious package",
                "detail": "no dependency is reported as a malicious package",
                "points": 100,
                "status": "met",
                "details": [
                  {
                    "code": "no_malicious_dependencies",
                    "params": {}
                  }
                ],
                "max_points": 100
              }
            ]
          },
          {
            "key": "high_risk_jurisdiction_exposure",
            "band": "excellent",
            "name": "High-Risk Jurisdiction Exposure",
            "note": "Only high-confidence self-published location evidence affects this multiplier. Ambiguous matches are review-only; country evidence is not proof of nationality, citizenship, legal registration, malicious intent, or sanctions status.",
            "notes": [
              {
                "code": "jurisdiction_evidence_limits",
                "params": {}
              }
            ],
            "value": 100,
            "inputs": {
              "meaning": "self-published location evidence; not nationality or citizenship",
              "red_flag": false,
              "exposures": [],
              "policy_countries": [
                "Russia",
                "Iran",
                "North Korea"
              ],
              "review_only_matches": 0,
              "assessed_self_published_locations": 2
            },
            "components": [
              {
                "key": "policy_exposure_multiplier",
                "name": "Policy exposure multiplier",
                "detail": "no confirmed policy-scope location match",
                "points": 100,
                "status": "met",
                "details": [
                  {
                    "code": "jurisdiction_no_match",
                    "params": {}
                  }
                ],
                "max_points": 100
              }
            ]
          }
        ],
        "description": "Are visible security and supply-chain practices strong, with no malicious dependency and no unresolved high-risk jurisdiction exposure?"
      },
      {
        "key": "ai_readiness",
        "band": "moderate",
        "name": "AI Readiness",
        "value": 68,
        "weight": 0,
        "metrics": [
          {
            "key": "ai_agent_context",
            "band": "at_risk",
            "name": "Agent context & guidance",
            "note": null,
            "notes": [],
            "value": 40,
            "inputs": {
              "has_llms_txt": false,
              "legible_history_share": 0.985,
              "agent_instruction_files": [],
              "agent_instruction_max_bytes": null
            },
            "components": [
              {
                "key": "agent_instructions",
                "name": "Agent instructions",
                "detail": "no CLAUDE.md / AGENTS.md / editor rules",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "no_agent_instructions",
                    "params": {}
                  }
                ],
                "max_points": 45
              },
              {
                "key": "machine_readable_docs_llms_txt",
                "name": "Machine-readable docs (llms.txt)",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 15
              },
              {
                "key": "legible_commit_history",
                "name": "Legible commit history",
                "detail": "67 of 68 human commits state their intent (structured subject or explanatory body)",
                "points": 40,
                "status": "met",
                "details": [
                  {
                    "code": "legible_history",
                    "params": {
                      "legible": 67,
                      "sampled": 68
                    }
                  }
                ],
                "max_points": 40
              }
            ]
          },
          {
            "key": "ai_verify_loop",
            "band": "excellent",
            "name": "Verify loop (build / test / typecheck)",
            "note": null,
            "notes": [],
            "value": 87,
            "inputs": {
              "has_nix": false,
              "has_tests": true,
              "lockfiles": [
                "go.sum"
              ],
              "has_dockerfile": false,
              "typed_language": true,
              "bootstrap_files": [
                "Makefile"
              ],
              "has_devcontainer": false,
              "has_linter_config": true,
              "typecheck_configs": [],
              "agent_commit_share": 0,
              "toolchain_manifests": [
                "go.mod"
              ],
              "dependency_bot_commit_share": 0
            },
            "components": [
              {
                "key": "one_command_bootstrap",
                "name": "One-command bootstrap",
                "detail": "Makefile",
                "points": 18,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": "Makefile"
                    }
                  }
                ],
                "max_points": 18
              },
              {
                "key": "automated_tests",
                "name": "Automated tests",
                "detail": null,
                "points": 22,
                "status": "met",
                "details": [],
                "max_points": 22
              },
              {
                "key": "lint_format_config",
                "name": "Lint / format config",
                "detail": ".golangci.yml",
                "points": 11,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": ".golangci.yml"
                    }
                  }
                ],
                "max_points": 11
              },
              {
                "key": "static_type_checking",
                "name": "Static type checking",
                "detail": "Go (statically typed)",
                "points": 11,
                "status": "met",
                "details": [
                  {
                    "code": "statically_typed_language",
                    "params": {
                      "language": "Go"
                    }
                  }
                ],
                "max_points": 11
              },
              {
                "key": "reproducible_environment",
                "name": "Reproducible environment",
                "detail": "lockfile",
                "points": 10,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": "lockfile"
                    }
                  }
                ],
                "max_points": 10
              },
              {
                "key": "demonstrated_agent_practice",
                "name": "Demonstrated agent practice",
                "detail": "no agent-authored commits among the last 68",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "no_agent_authored_commits",
                    "params": {
                      "sampled": 68
                    }
                  }
                ],
                "max_points": 10
              },
              {
                "key": "automated_maintenance",
                "name": "Automated maintenance",
                "detail": "dependency automation configured, none observed in the sampled commits",
                "points": 5,
                "status": "partial",
                "details": [
                  {
                    "code": "dependency_bot_config_only",
                    "params": {}
                  }
                ],
                "max_points": 8
              },
              {
                "key": "openssf_scorecard_pinned_dependencies",
                "name": "OpenSSF Scorecard: Pinned-Dependencies",
                "detail": "all dependencies are pinned",
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "ai_code_legibility",
            "band": "excellent",
            "name": "Code legibility for models",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "primary_language": "Go",
              "largest_source_bytes": 23677,
              "source_files_sampled": 146,
              "oversized_source_files": 0
            },
            "components": [
              {
                "key": "type_checkable_code",
                "name": "Type-checkable code",
                "detail": "Go (statically typed)",
                "points": 45,
                "status": "met",
                "details": [
                  {
                    "code": "statically_typed_language",
                    "params": {
                      "language": "Go"
                    }
                  }
                ],
                "max_points": 45
              },
              {
                "key": "manageable_file_sizes",
                "name": "Manageable file sizes",
                "detail": "0/146 source files over 60KB",
                "points": 55,
                "status": "met",
                "details": [
                  {
                    "code": "oversized_source_files",
                    "params": {
                      "kb": 60,
                      "sampled": 146,
                      "oversized": 0
                    }
                  }
                ],
                "max_points": 55
              }
            ]
          },
          {
            "key": "ai_interfaces",
            "band": "at_risk",
            "name": "Machine-readable interfaces",
            "note": null,
            "notes": [],
            "value": 40,
            "inputs": {
              "example_dirs": [
                "examples"
              ],
              "has_mcp_signal": false,
              "api_schema_files": []
            },
            "components": [
              {
                "key": "api_schema_openapi_graphql_proto",
                "name": "API schema (OpenAPI/GraphQL/proto)",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 40
              },
              {
                "key": "mcp_server",
                "name": "MCP server",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 20
              },
              {
                "key": "runnable_examples",
                "name": "Runnable examples",
                "detail": "examples",
                "points": 40,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": "examples"
                    }
                  }
                ],
                "max_points": 40
              }
            ]
          }
        ],
        "description": "How well is the repo equipped to be developed and maintained with AI coding agents? An independent, experimental badge — weight 0.0, so it is surfaced on its own and does not affect the overall health score."
      }
    ],
    "metrics_version": "1.13.0"
  },
  "warnings": [],
  "report_type": "repository",
  "generated_at": "2026-07-25T05:39:52.329344Z",
  "schema_version": "0.27.0",
  "badge_url": "https://raw.githubusercontent.com/inspect-software/badges/main/v1/s/SamyRai/go-z-ai.svg",
  "full_name": "SamyRai/go-z-ai",
  "license_state": "standard",
  "license_spdx": "Apache-2.0"
}