公开记录中等
软件健康报告模式 0.23.0 · 指标 1.13.0 · 2026-07-21 20:19 UTC
SanderMuller / laravel-fluent-validation
Fluent and extremely fast validation for Laravel
SanderMuller/laravel-fluent-validation 的健康指数为 100 分中的 69 分，处于「中等」区间。 其得分最高的类别是Vitality（90/100），最低的是Community & Adoption（54/100）。 最近一次更新在 3 天前。 近期的大部分工作由 2 位贡献者完成。
69
总分 / 100软件健康指数
指标归入加权类别，统一采用 1–100 量表。总体分先取类别加权平均；当公开证据触发高风险司法辖区政策时，评级会按政策调整，并设置 49（有风险）的上限。AI 就绪度不计入总体分。
69
优秀85-100堪称典范；基本满足所有检验标准
良好70-84健康；仅有轻微不足
中等50-69可接受，但存在明显不足；建议进行审查
存在风险30-49存在重大薄弱环节；采用时应保持审慎
危急1-29问题严重（项目被弃置、仅有单一维护者、缺乏基本工程规范）
评分画像
每条轴代表一个类别。形状比平均值更重要——健康的对象会填满整个图形，而“一峰一谷”式画像意味着某一维度的优势正掩盖另一维度的风险。
所有权
Sander Muller个人账户
50 关注者68 个公开仓库始于 2014年10月@blinqx-vh and @hihaho
该仓库由个人账户拥有。相较于组织支持的项目，单一所有者项目的延续性风险更高。
软件包生态系统
| 注册表 | 软件包 | 版本 | 月下载量 | 版本数 | 最近发布 | 标签 |
|---|---|---|---|---|---|---|
| Packagist | sandermuller/laravel-fluent-validation | 1.33.0 | 9,636 | 79 | 5 天前 | fluentvalidationlaravelrule-builder |
按类别列示的指标
活力
项目是否仍有生命——是否仍在编写代码，是否仍在发布版本？
90
开发活跃度
83良好
评分方式
| 36/36 | 推送新近度 — 最近一次推送于 3 天前 |
| 18.7/36 | 提交节奏 — 52 周中有 27 周有提交 |
| 18/18 | 提交量 — 最近一年 541 次提交 |
| 10/10 | OpenSSF Scorecard：Maintained — 30 commit(s) and 1 issue activity found in the last 90 days -- score normalized to 10 |
所用输入
| commits_last_year | 541 |
| human_commit_share | 0.97 |
| days_since_last_push | 3 |
| active_weeks_last_year | 27 |
发布纪律
100优秀
评分方式
| 27/27 | 有发布版本 — 已发布 78 个发布版本 |
| 36/36 | 发布时效 — 最近一次发布版本于 5 天前 |
| 27/27 | 发布节奏 — 约每 4.9 天发布一次 |
| 0/10 | OpenSSF Scorecard：Signed-Releases — 无数据 |
所用输入
| releases_count | 78 |
| latest_release_tag | 1.33.0 |
| releases_from_tags | 否 |
| days_since_latest_release | 5 |
| mean_days_between_releases | 4.9 |
已排除计分（无数据或不适用）：OpenSSF Scorecard：Signed-Releases。 其余权重已重新归一化。
社区与采用
项目是否拥有用户、下载量与关注度，并具备欢迎贡献者参与的配置？
54
流行度与采用
38存在风险
评分方式
| 37.7/60 | 星标 — 211 个星标 |
| 0/25 | 复刻 — 2 个复刻 |
| 0/15 | 关注者 — 2 位关注者 |
所用输入
| forks | 2 |
| stars | 211 |
| watchers | 2 |
| growth_state | organic |
| growth_factor_pct | 100 |
社区健康
70良好
评分方式
| 22.5/22.5 | README |
| 22.5/22.5 | 许可证 — 可识别的许可证（MIT） |
| 18/18 | CONTRIBUTING 指南 |
| 0/13.5 | 行为准则 |
| 0/7.2 | 议题模板 |
| 0/6.3 | PR 模板 |
所用输入
| has_readme | 是 |
| has_license | 是 |
| has_contributing | 是 |
| has_issue_template | 否 |
| has_code_of_conduct | 否 |
| has_pull_request_template | 否 |
生态采用（下载量）
56中等
评分方式
| 53.1/80 | 月度下载量 — packagist 合计每月 9,636 次下载 |
| 3.2/20 | 注册表被依赖数 — 2 个软件包依赖它 |
所用输入
| packages | sandermuller/laravel-fluent-validation |
| dependents | 2 |
| ecosystems | packagist |
| total_downloads | 24,354 |
| monthly_downloads | 9,636 |
可持续性与治理
项目能否在其成员之外延续——巴士系数、响应能力、由谁支持，以及软件包的维护状况？
72
维护者韧性（巴士系数）
62中等
评分方式
| 25.2/54 | 巴士系数 — 2 位贡献者贡献了半数提交 |
| 13/22.5 | 提交分布 — 头号贡献者编写了 42% 的提交 |
| 13.5/13.5 | 贡献者广度 — 98 位贡献者 |
| 10/10 | OpenSSF Scorecard：Contributors — project has 17 contributing companies or organizations |
所用输入
| bus_factor | 2 |
| contributors_sampled | 98 |
| top_contributor_share | 0.423 |
议题与 PR 响应能力
73良好
评分方式
| 46.8/46.8 | 议题解决 — 100% 的议题已关闭 |
| 26.3/38.3 | PR 接受 — 已裁定的 PR 中 11/16 已合并 |
| 0/15 | OpenSSF Scorecard：Code-Review — Found 0/28 approved changesets -- score normalized to 0 |
所用输入
| merged_prs | 11 |
| open_issues | 0 |
| closed_issues | 2 |
| issue_closed_ratio | 1 |
| closed_unmerged_prs | 5 |
所有权与托管责任
59中等
评分方式
| 10/30 | 所有权背书 — 个人（用户）账户 |
| 0/20 | 已验证域名 — 不适用于个人账户 |
| 12.3/25 | 所有者影响力 — SanderMuller 有 50 位关注者 |
| 25/25 | 既往记录 — 68 个公开仓库，账户约 11 年 |
所用输入
| followers | 50 |
| owner_type | User |
| is_verified | — |
| owner_login | SanderMuller |
| public_repos | 68 |
| account_age_days | 4,304 |
已排除计分（无数据或不适用）：已验证域名。 其余权重已重新归一化。
软件包维护
100优秀
评分方式
| 25/25 | 已发布且可解析 — packagist 上有 1 个软件包 |
| 35/35 | 发布时效 — 最近一次发布于 5 天前 |
| 20/20 | 版本历史 — 79 个已发布版本 |
| 20/20 | 未被弃用 — 活跃，未被弃用或撤回 |
所用输入
| packages | sandermuller/laravel-fluent-validation |
| ecosystems | packagist |
| any_deprecated | 否 |
| min_days_since_publish | 5 |
工程质量
基础的工程与文档实践是否到位？
60
工程实践
74良好
评分方式
| 24/24 | CI 工作流 — 9 个工作流 |
| 24/24 | 存在测试 |
| 0/16 | Linter 配置 |
| 0/9.6 | Pre-commit 钩子 |
| 6.4/6.4 | .editorconfig |
| 20/20 | OpenSSF Scorecard：CI-Tests — 2 out of 2 merged PRs checked by a CI test -- score normalized to 10 |
所用输入
| has_ci | 是 |
| has_tests | 是 |
| has_editorconfig | 是 |
| has_linter_config | 否 |
| has_precommit_config | 否 |
文档
40存在风险
评分方式
| 30/30 | README |
| 0/25 | 文档目录 |
| 0/15 | 文档 / 主页站点 |
| 10/10 | 仓库描述 |
| 0/10 | 主题标签 |
| 0/10 | Wiki |
所用输入
| topics | — |
| has_wiki | 否 |
| homepage | — |
| has_readme | 是 |
| has_docs_dir | 否 |
| has_description | 是 |
安全
可见的安全与供应链实践是否稳固，且不存在未解决的高风险司法辖区暴露？
61
安全态势
61中等
评分方式
| 7.5/7.5 | Binary-Artifacts — no binaries found in the repo |
| 0/7.5 | Branch-Protection — branch protection not enabled on development/release branches |
| 2.5/2.5 | CI-Tests — 2 out of 2 merged PRs checked by a CI test -- score normalized to 10 |
| 0/2.5 | CII-Best-Practices — no effort to earn an OpenSSF best practices badge detected |
| 0/7.5 | Code-Review — Found 0/28 approved changesets -- score normalized to 0 |
| 2.5/2.5 | Contributors — project has 17 contributing companies or organizations |
| 0/10 | Dangerous-Workflow — 无数据 |
| 7.5/7.5 | Dependency-Update-Tool — update tool detected |
| 0/5 | Fuzzing — project is not fuzzed |
| 2.5/2.5 | 许可证 — license file detected |
| 7.5/7.5 | Maintained — 30 commit(s) and 1 issue activity found in the last 90 days -- score normalized to 10 |
| 0/5 | Packaging — 无数据 |
| 0/5 | Pinned-Dependencies — 无数据 |
| 5/5 | SAST — SAST tool is run on all commits |
| 0/5 | Security-Policy — security policy file not detected |
| 0/7.5 | Signed-Releases — 无数据 |
| 0/7.5 | Token-Permissions — 无数据 |
| 7.5/7.5 | Vulnerabilities — 0 existing vulnerabilities detected |
所用输入
| source | openssf_scorecard |
| checks_evaluated | 13 |
| scorecard_version | v5.5.0 |
| checks_inconclusive | 5 |
| scorecard_aggregate | 6.1 |
已排除计分（无数据或不适用）：dangerous_workflow, packaging, pinned_dependencies, signed_releases, token_permissions。 其余权重已重新归一化。
AI 就绪度
该仓库在多大程度上具备与 AI 编码代理协同开发与维护的条件？这是一枚独立的实验性徽章——权重为 0.0，因此单独呈现，不影响总体健康评分。
58
AI 代理上下文与指引
78良好
评分方式
| 45/45 | 代理指令 — AGENTS.md, CLAUDE.md |
| 0/15 | 机器可读文档（llms.txt） |
| 33.5/40 | 可读的提交历史 — 97 次人类提交中有 61 次说明了意图（结构化标题或解释性正文） |
所用输入
| has_llms_txt | 否 |
| legible_history_share | 0.629 |
| agent_instruction_files | AGENTS.md, CLAUDE.md |
| agent_instruction_max_bytes | 13,555 |
验证循环（构建 / 测试 / 类型检查）
44存在风险
评分方式
| 0/18 | 一条命令的引导启动 |
| 22/22 | 自动化测试 |
| 0/11 | Lint / 格式化配置 |
| 0/11 | 静态类型检查 |
| 0/10 | 可复现环境 |
| 10/10 | 已体现的代理实践 — 最近 100 次提交中有 6 次由代理编写或署名代理 |
| 8/8 | 自动化维护 — 最近 100 次提交中有 3 次为自动依赖更新 |
| 0/10 | OpenSSF Scorecard：Pinned-Dependencies — 无数据 |
所用输入
| has_nix | 否 |
| has_tests | 是 |
| lockfiles | — |
| has_dockerfile | 否 |
| typed_language | 否 |
| bootstrap_files | — |
| has_devcontainer | 否 |
| has_linter_config | 否 |
| typecheck_configs | — |
| agent_commit_share | 0.06 |
| toolchain_manifests | — |
| dependency_bot_commit_share | 0.03 |
已排除计分（无数据或不适用）：OpenSSF Scorecard：Pinned-Dependencies。 其余权重已重新归一化。
面向模型的代码可读性
54中等
评分方式
| 0/45 | 可类型检查的代码 — PHP，未配置类型检查 |
| 54.3/55 | 可控的文件大小 — 采样的 158 个源文件中有 2 个超过 60KB |
所用输入
| primary_language | PHP |
| largest_source_bytes | 105,804 |
| source_files_sampled | 158 |
| oversized_source_files | 2 |
关键数据
211GitHub 星标
98贡献者
541最近 12 个月提交数
3距最近推送天数
78发布版本数
2巴士系数（bus factor）
0开放议题
Packagist软件包生态系统数
数据采集警告
- No resolved dependencies carried a version and a supported ecosystem
更多细节
Star 与 Fork 历史 211 ★ / 2 ⇿
211Star
2Fork
77发布
每颗 star 和每个 fork 的添加时间，来自 GitHub 并按天汇总。累计增长位于其构成来源——每日新增——的正上方，二者可相互对照：稳定的自然增长与短暂的突增形态截然不同。当这一差别可被衡量时，它会作为增长真实性予以报告。
主版本 1次版本 37修订 39
OpenSSF Scorecard 6.1 / 10
6.1综合
来自开源项目 OpenSSF Scorecard 的独立、工具无关的安全评估。每项检查奖励的是安全实践本身，而非特定供应商的工具。Scorecard 无法判定的检查项标记为 不适用，并从安全评分中剔除（绝不按零分计）。
| 10 | Binary-Artifacts | no binaries found in the repo |
| 0 | Branch-Protection | branch protection not enabled on development/release branches |
| 10 | CI-Tests | 2 out of 2 merged PRs checked by a CI test -- score normalized to 10 |
| 0 | CII-Best-Practices | no effort to earn an OpenSSF best practices badge detected |
| 0 | Code-Review | Found 0/28 approved changesets -- score normalized to 0 |
| 10 | Contributors | project has 17 contributing companies or organizations |
| 不适用 | Dangerous-Workflow | no workflows found |
| 10 | Dependency-Update-Tool | update tool detected |
| 0 | Fuzzing | project is not fuzzed |
| 10 | License | license file detected |
| 10 | Maintained | 30 commit(s) and 1 issue activity found in the last 90 days -- score normalized to 10 |
| 不适用 | Packaging | packaging workflow not detected |
| 不适用 | Pinned-Dependencies | no dependencies found |
| 10 | SAST | SAST tool is run on all commits |
| 0 | Security-Policy | security policy file not detected |
| 不适用 | Signed-Releases | no releases found |
| 不适用 | Token-Permissions | No tokens found |
| 10 | Vulnerabilities | 0 existing vulnerabilities detected |
直接依赖 4
| 注册表 | 软件包 | 版本约束 | 清单文件 |
|---|---|---|---|
| Packagist | illuminate/contracts | ^12.0||^13.0 | composer.json |
| Packagist | illuminate/http | ^12.0||^13.0 | composer.json |
| Packagist | illuminate/support | ^12.0||^13.0 | composer.json |
| Packagist | illuminate/validation | ^12.0||^13.0 | composer.json |
全部依赖 28
来自 GitHub 依赖图的完整解析依赖集合：4 个直接依赖与 24 个间接（传递）软件包。仓库提交锁文件时，传递闭包才是完整的。
| 注册表 | 软件包 | 版本 | 关系 |
|---|---|---|---|
| Packagist | illuminate/contracts | — | 直接 |
| Packagist | illuminate/http | — | 直接 |
| Packagist | illuminate/support | — | 直接 |
| Packagist | illuminate/validation | — | 直接 |
| Packagist | driftingly/rector-laravel | — | 间接 |
| Packagist | larastan/larastan | — | 间接 |
| Packagist | laravel/pao | — | 间接 |
| Packagist | laravel/pint | — | 间接 |
| Packagist | livewire/livewire | — | 间接 |
| Packagist | mrpunyapal/rector-pest | — | 间接 |
| Packagist | nunomaduro/collision | — | 间接 |
| Packagist | orchestra/testbench | — | 间接 |
| Packagist | pestphp/pest | — | 间接 |
| Packagist | pestphp/pest-plugin-arch | — | 间接 |
| Packagist | pestphp/pest-plugin-laravel | — | 间接 |
| Packagist | php | — | 间接 |
| Packagist | phpstan/extension-installer | — | 间接 |
| Packagist | phpstan/phpstan-deprecation-rules | — | 间接 |
| Packagist | phpstan/phpstan-phpunit | — | 间接 |
| Packagist | phpstan/phpstan-strict-rules | — | 间接 |
| Packagist | rector/rector | — | 间接 |
| Packagist | rector/type-perfect | — | 间接 |
| Packagist | sandermuller/boost-skills | — | 间接 |
| Packagist | sandermuller/package-boost-laravel | — | 间接 |
| Packagist | spaze/phpstan-disallowed-calls | — | 间接 |
| Packagist | symplify/phpstan-extensions | — | 间接 |
| Packagist | tomasvotruba/cognitive-complexity | — | 间接 |
| Packagist | tomasvotruba/type-coverage | — | 间接 |
依赖安全公告 未评估
本报告未能完成公告比对：No resolved dependencies carried a version and a supported ecosystem
原始 JSON 报告 机器可读
{
"data": {
"repo": {
"topics": [],
"is_fork": false,
"size_kb": 2334,
"has_wiki": false,
"homepage": null,
"languages": {
"PHP": 1304211
},
"pushed_at": "2026-07-18T12:38:26Z",
"created_at": "2026-04-02T21:12:41Z",
"owner_type": "User",
"updated_at": "2026-07-18T12:38:29Z",
"description": "Fluent and extremely fast validation for Laravel",
"is_archived": false,
"is_disabled": false,
"license_spdx": "MIT",
"default_branch": "main",
"license_spdx_raw": "MIT",
"primary_language": "PHP",
"significant_languages": [
"PHP"
]
},
"owner": {
"blog": null,
"name": "Sander Muller",
"type": "User",
"login": "SanderMuller",
"company": "@blinqx-vh and @hihaho",
"location": "Netherlands",
"followers": 50,
"avatar_url": "https://avatars.githubusercontent.com/u/9074391?v=4",
"created_at": "2014-10-08T09:16:45Z",
"is_verified": null,
"public_repos": 68,
"account_age_days": 4304
},
"license": {
"state": "standard",
"spdx_id": "MIT",
"raw_spdx": "MIT",
"file_present": true,
"scorecard_found": true,
"profile_has_license": true
},
"activity": {
"releases": [
{
"tag": "1.33.0",
"kind": "minor",
"published_at": "2026-07-16T16:34:20Z"
},
{
"tag": "1.32.0",
"kind": "minor",
"published_at": "2026-07-13T10:33:34Z"
},
{
"tag": "1.31.0",
"kind": "minor",
"published_at": "2026-07-04T21:24:20Z"
},
{
"tag": "1.30.1",
"kind": "patch",
"published_at": "2026-06-18T15:24:29Z"
},
{
"tag": "1.30.0",
"kind": "minor",
"published_at": "2026-06-18T12:47:14Z"
},
{
"tag": "1.29.0",
"kind": "minor",
"published_at": "2026-06-14T12:03:48Z"
},
{
"tag": "1.28.1",
"kind": "patch",
"published_at": "2026-06-14T11:14:53Z"
},
{
"tag": "1.28.0",
"kind": "minor",
"published_at": "2026-06-13T22:21:06Z"
},
{
"tag": "1.27.3",
"kind": "patch",
"published_at": "2026-06-02T20:36:01Z"
},
{
"tag": "1.27.2",
"kind": "patch",
"published_at": "2026-06-02T13:11:11Z"
},
{
"tag": "1.27.1",
"kind": "patch",
"published_at": "2026-05-11T20:50:49Z"
},
{
"tag": "1.27.0",
"kind": "minor",
"published_at": "2026-05-11T15:09:20Z"
},
{
"tag": "1.26.0",
"kind": "minor",
"published_at": "2026-05-10T14:56:43Z"
},
{
"tag": "1.25.0",
"kind": "minor",
"published_at": "2026-04-29T15:00:34Z"
},
{
"tag": "1.24.0",
"kind": "minor",
"published_at": "2026-04-24T06:58:28Z"
},
{
"tag": "1.23.0",
"kind": "minor",
"published_at": "2026-04-23T20:46:04Z"
},
{
"tag": "1.22.0",
"kind": "minor",
"published_at": "2026-04-23T13:55:22Z"
},
{
"tag": "1.21.0",
"kind": "minor",
"published_at": "2026-04-22T19:06:46Z"
},
{
"tag": "1.20.0",
"kind": "minor",
"published_at": "2026-04-22T16:39:28Z"
},
{
"tag": "1.19.0",
"kind": "minor",
"published_at": "2026-04-22T06:44:41Z"
},
{
"tag": "1.18.0",
"kind": "minor",
"published_at": "2026-04-21T10:45:15Z"
},
{
"tag": "1.17.1",
"kind": "patch",
"published_at": "2026-04-20T21:02:26Z"
},
{
"tag": "1.17.0",
"kind": "minor",
"published_at": "2026-04-20T18:42:37Z"
},
{
"tag": "1.16.0",
"kind": "minor",
"published_at": "2026-04-20T16:05:24Z"
},
{
"tag": "1.15.1",
"kind": "patch",
"published_at": "2026-04-20T12:49:18Z"
},
{
"tag": "1.15.0",
"kind": "minor",
"published_at": "2026-04-19T21:01:14Z"
},
{
"tag": "1.14.0",
"kind": "minor",
"published_at": "2026-04-19T19:43:57Z"
},
{
"tag": "1.13.2",
"kind": "patch",
"published_at": "2026-04-19T17:19:48Z"
},
{
"tag": "1.13.1",
"kind": "patch",
"published_at": "2026-04-19T14:30:57Z"
},
{
"tag": "1.13.0",
"kind": "minor",
"published_at": "2026-04-19T14:22:20Z"
},
{
"tag": "1.12.3",
"kind": "patch",
"published_at": "2026-04-19T09:17:04Z"
},
{
"tag": "1.12.2",
"kind": "patch",
"published_at": "2026-04-18T23:07:35Z"
},
{
"tag": "1.12.1",
"kind": "patch",
"published_at": "2026-04-18T22:20:10Z"
},
{
"tag": "1.12.0",
"kind": "minor",
"published_at": "2026-04-18T22:18:51Z"
},
{
"tag": "1.11.0",
"kind": "minor",
"published_at": "2026-04-17T22:45:20Z"
},
{
"tag": "1.10.0",
"kind": "minor",
"published_at": "2026-04-17T15:10:12Z"
},
{
"tag": "1.9.2",
"kind": "patch",
"published_at": "2026-04-17T12:06:36Z"
},
{
"tag": "1.9.1",
"kind": "patch",
"published_at": "2026-04-17T11:05:49Z"
},
{
"tag": "1.9.0",
"kind": "minor",
"published_at": "2026-04-15T16:43:32Z"
},
{
"tag": "1.8.2",
"kind": "patch",
"published_at": "2026-04-15T11:43:24Z"
},
{
"tag": "1.8.1",
"kind": "patch",
"published_at": "2026-04-15T09:06:14Z"
},
{
"tag": "1.8.0",
"kind": "minor",
"published_at": "2026-04-15T07:59:16Z"
},
{
"tag": "1.7.1",
"kind": "patch",
"published_at": "2026-04-14T20:59:21Z"
},
{
"tag": "1.7.0",
"kind": "minor",
"published_at": "2026-04-14T20:56:31Z"
},
{
"tag": "1.6.0",
"kind": "minor",
"published_at": "2026-04-12T16:01:08Z"
},
{
"tag": "1.5.0",
"kind": "minor",
"published_at": "2026-04-12T15:52:40Z"
},
{
"tag": "1.4.1",
"kind": "patch",
"published_at": "2026-04-10T22:38:14Z"
},
{
"tag": "1.4.0",
"kind": "minor",
"published_at": "2026-04-10T22:23:48Z"
},
{
"tag": "1.3.0",
"kind": "minor",
"published_at": "2026-04-10T17:51:42Z"
},
{
"tag": "1.2.0",
"kind": "minor",
"published_at": "2026-04-10T13:50:30Z"
},
{
"tag": "1.1.0",
"kind": "minor",
"published_at": "2026-04-08T14:20:34Z"
},
{
"tag": "1.0.1",
"kind": "patch",
"published_at": "2026-04-07T08:10:47Z"
},
{
"tag": "1.0.0",
"kind": "major",
"published_at": "2026-04-06T21:22:34Z"
},
{
"tag": "0.5.3",
"kind": "patch",
"published_at": "2026-04-06T19:37:38Z"
},
{
"tag": "0.5.2",
"kind": "patch",
"published_at": "2026-04-06T14:33:20Z"
},
{
"tag": "0.5.1",
"kind": "patch",
"published_at": "2026-04-06T14:21:26Z"
},
{
"tag": "0.5.0",
"kind": "minor",
"published_at": "2026-04-06T13:27:28Z"
},
{
"tag": "0.4.5",
"kind": "patch",
"published_at": "2026-04-06T12:30:14Z"
},
{
"tag": "0.4.4",
"kind": "patch",
"published_at": "2026-04-06T12:16:54Z"
},
{
"tag": "0.4.3",
"kind": "patch",
"published_at": "2026-04-06T08:36:31Z"
},
{
"tag": "0.4.2",
"kind": "patch",
"published_at": "2026-04-05T21:25:20Z"
},
{
"tag": "0.4.1",
"kind": "patch",
"published_at": "2026-04-05T20:45:43Z"
},
{
"tag": "0.4.0",
"kind": "minor",
"published_at": "2026-04-05T18:27:24Z"
},
{
"tag": "0.3.6",
"kind": "patch",
"published_at": "2026-04-05T08:09:08Z"
},
{
"tag": "0.3.5",
"kind": "patch",
"published_at": "2026-04-04T22:46:18Z"
},
{
"tag": "0.3.4",
"kind": "patch",
"published_at": "2026-04-04T22:18:26Z"
},
{
"tag": "0.3.3",
"kind": "patch",
"published_at": "2026-04-04T21:07:08Z"
},
{
"tag": "0.3.2",
"kind": "patch",
"published_at": "2026-04-04T19:51:44Z"
},
{
"tag": "0.3.1",
"kind": "patch",
"published_at": "2026-04-04T18:57:55Z"
},
{
"tag": "0.3.0",
"kind": "minor",
"published_at": "2026-04-04T17:17:54Z"
},
{
"tag": "0.2.4",
"kind": "patch",
"published_at": "2026-04-04T07:54:20Z"
},
{
"tag": "0.2.3",
"kind": "patch",
"published_at": "2026-04-03T23:11:08Z"
},
{
"tag": "0.2.2",
"kind": "patch",
"published_at": "2026-04-03T21:59:24Z"
},
{
"tag": "0.2.0",
"kind": "minor",
"published_at": "2026-04-03T21:41:52Z"
},
{
"tag": "0.1.3",
"kind": "patch",
"published_at": "2026-04-03T19:57:19Z"
},
{
"tag": "0.1.2",
"kind": "patch",
"published_at": "2026-04-03T17:49:50Z"
},
{
"tag": "0.1.1",
"kind": "patch",
"published_at": "2026-04-03T17:38:45Z"
},
{
"tag": "0.1.0",
"kind": "minor",
"published_at": "2026-04-03T16:25:33Z"
}
],
"recent_commits": [
{
"oid": "f40b23c062ca083d7978dce251db9f306ff02a90",
"body": null,
"is_bot": false,
"headline": "Update README.md",
"author_name": "Sander Muller",
"author_login": "SanderMuller",
"committed_at": "2026-07-18T12:38:21Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "172064d6a3998e6eb23d3c01be86371b02df2037",
"body": null,
"is_bot": false,
"headline": "Update CHANGELOG",
"author_name": "SanderMuller",
"author_login": "SanderMuller",
"committed_at": "2026-07-16T16:34:36Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ac42caa4994a6693df4cb4f2e6558d8e9da1a94a",
"body": "HasFluentRules now declares `public function rules(): array|RuleSet`. A request\nthat defines only schema() can call ->rules() and get the builder's output (the\nraw field map, the shape a hand-written rules() would return). A\nconsumer-defined rules() overrides it as usual; createDefaultValidator dete\n[…]\nture requirement (a rules() you define must be public and\nreturn array or RuleSet) in UPGRADING, and the capability in the README.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "Add a rules() fallback so schema-only requests answer ->rules()",
"author_name": "Sander Muller",
"author_login": "SanderMuller",
"committed_at": "2026-07-16T15:48:22Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "13d51ef6223076432d31fb50044d394611b43c62",
"body": "* chore(deps): bump actions/cache from 5 to 6\n\nBumps [actions/cache](https://github.com/actions/cache) from 5 to 6.\n- [Release notes](https://github.com/actions/cache/releases)\n- [Changelog](https://github.com/actions/cache/blob/main/RELEASES.md)\n- [Commits](https://github.com/actions/cache/compare/\n[…]\nependabot[bot] <support@github.com>\n\n* chore: rector\n\n---------\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "chore(deps): bump actions/cache from 5 to 6 (#19)",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-07-13T15:09:43Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "9d69d6df9352a67815aab8bbaf513d637e85e430",
"body": "- The schema() intro now notes it can be defined alongside rules() (the\n two merge), not only in place of it.\n- Reflow the merge paragraph: fewer em dashes, no mechanical bold, and\n shorter sentences.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "docs: clarify schema()/rules() compose, tighten the merge prose",
"author_name": "Sander Muller",
"author_login": "SanderMuller",
"committed_at": "2026-07-13T11:43:21Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "252b7c56e765b698006ff3549feedbca3bceb728",
"body": null,
"is_bot": false,
"headline": "Update CHANGELOG",
"author_name": "SanderMuller",
"author_login": "SanderMuller",
"committed_at": "2026-07-13T10:33:51Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "96135493a1859c96672b11041804ec81b7770c8f",
"body": "resolveSchemaOutranksRules()'s same-class branch now uses early returns\ninstead of a negated-boolean expression, dropping a redundant (bool) cast a\nRector rewrite had introduced. Behaviorally identical; clean under both\nRector and PHPStan.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "Simplify same-class tie precedence to early returns",
"author_name": "Sander Muller",
"author_login": "SanderMuller",
"committed_at": "2026-07-13T10:25:09Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "5afa9cc9e47af7dc2728095f47a5517db1bbb3c8",
"body": null,
"is_bot": false,
"headline": "chore: rector",
"author_name": "SanderMuller",
"author_login": "SanderMuller",
"committed_at": "2026-07-13T10:17:07Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "dbed21cb996d05d0d9dfa3a147a67b2dcbe1f167",
"body": "When a FormRequest declares both a FluentSchema-typed schema() and a rules()\n(anywhere in its class hierarchy), the two are now merged rather than schema()\nsilently shadowing rules(). The more-specific declaration wins each shared\nfield -- the deeper class in the hierarchy, or a body definition over\n[…]\n and adds a matrix covering both hierarchy directions, the trait/body\ntie-break, RuleSet returns, and parent::rules() composition.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "Merge schema() and rules() instead of one shadowing the other",
"author_name": "Sander Muller",
"author_login": "SanderMuller",
"committed_at": "2026-07-13T10:16:00Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "24914040f08eec46e50fb49f44a48d196c353f47",
"body": null,
"is_bot": false,
"headline": "chore: rector",
"author_name": "SanderMuller",
"author_login": "SanderMuller",
"committed_at": "2026-07-07T06:49:38Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "de9b69f6a88b961358a4624a6b17bc7124b0606d",
"body": null,
"is_bot": false,
"headline": "Update composer.json",
"author_name": "Sander Muller",
"author_login": "SanderMuller",
"committed_at": "2026-07-07T06:48:06Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "87c6b3a24041ddfe25b2f74718c1a1805a198604",
"body": "…-validation",
"is_bot": false,
"headline": "Merge branch 'main' of https://github.com/SanderMuller/laravel-fluent…",
"author_name": "Sander Muller",
"author_login": "SanderMuller",
"committed_at": "2026-07-07T06:47:52Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "df3889fbaed659d014d4cdd0195ad839987e65a3",
"body": null,
"is_bot": false,
"headline": "CS",
"author_name": "Sander Muller",
"author_login": "SanderMuller",
"committed_at": "2026-07-07T06:47:49Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "15f5bc2d79259f7fbcf1a4928c33645df655b010",
"body": null,
"is_bot": false,
"headline": "Update CHANGELOG",
"author_name": "SanderMuller",
"author_login": "SanderMuller",
"committed_at": "2026-07-04T21:24:34Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "6a8e7492e416901dc1b36009309907e0a3d853b6",
"body": "- README + boost skill: add the fifth optimization (rule-parse\n memoization) and bump the \"four optimizations\" references to five.\n- README: correct the Octane-safety note -- the factory resolver is\n never mutated (no try/finally swap in current code), and the parse\n cache is a bounded, pure memoization rather than \"no static state\".\n- Apply rector (toBe([]) -> toBeEmpty()) to the new copier test.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "Document rule-parse memoization and correct the Octane-safety note",
"author_name": "Sander Muller",
"author_login": "SanderMuller",
"committed_at": "2026-07-04T12:51:19Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "5c2d7c2d6e80925f58ebed0f49ee5d3d46b9e588",
"body": null,
"is_bot": false,
"headline": "chore: rector",
"author_name": "SanderMuller",
"author_login": "SanderMuller",
"committed_at": "2026-07-04T12:36:59Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c171dc3c64fd269b9077c5d71c20f57c48e9e83b",
"body": "Memoize ValidationRuleParser::parse() of string rules in a worker-global\nstatic, collapsing the ~O(rules^2) re-parsing getRule() does per passes().\nByte-identical to vanilla; non-string rules bypass; soft-capped at 1024\nentries to bound long-lived Octane workers.\n\n- OptimizedValidator now extends Me\n[…]\n rules.\n\n~-48% on large homogeneous arrays, ~-21% on the conditional scenario, no\nregressions. Parity + regression tests included.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "Add MemoizingValidator for worker-global rule-parse memoization",
"author_name": "Sander Muller",
"author_login": "SanderMuller",
"committed_at": "2026-07-04T12:35:41Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "4f033d16b5ebd67bd65ba38d1e3dd6c7fea12262",
"body": "…ook)",
"is_bot": false,
"headline": "Merge FluentSchema builder (RuleSet::define + schema() form-request h…",
"author_name": "Sander Muller",
"author_login": "SanderMuller",
"committed_at": "2026-06-25T21:36:00Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "06b2fa6f6f8201b88bd4c6cc7f219b419c287059",
"body": null,
"is_bot": false,
"headline": "chore: rector",
"author_name": "SanderMuller",
"author_login": "SanderMuller",
"committed_at": "2026-06-25T17:31:22Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "fdc8f58c26505cbeedc47d0af707b3a5ba22e653",
"body": "Instance-based mirror of the FluentRule static factory: receive one\n$rules builder and chain field starters off it instead of repeating the\nFluentRule:: prefix, matching the schema(JsonSchema) shape Laravel's AI\nSDK uses for structured output.\n\n- FluentSchema: 29 typed delegates to FluentRule (singl\n[…]\narding snapshots, precedence both ways,\n non-hijack, macro forwarding. FluentSchema at 100% line coverage.\n- README: schema() builder subsection, RuleSet::define entry point +\n method-reference row.",
"is_bot": false,
"headline": "Add FluentSchema builder + RuleSet::define / schema() form-request hook",
"author_name": "Sander Muller",
"author_login": "SanderMuller",
"committed_at": "2026-06-25T17:29:54Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "e4fcf85fa32896af7985035593a38a25b7460c52",
"body": "Bumps [actions/checkout](https://github.com/actions/checkout) from 6 to 7.\n- [Release notes](https://github.com/actions/checkout/releases)\n- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)\n- [Commits](https://github.com/actions/checkout/compare/v6...v7)\n\n---\nupdated-dependenc\n[…]\nirect:production\n update-type: version-update:semver-major\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "chore(deps): bump actions/checkout from 6 to 7 (#18)",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-06-18T15:30:11Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "0286fd0cc71296fdc4327b2c63138feccf2caed3",
"body": null,
"is_bot": false,
"headline": "Update CHANGELOG",
"author_name": "SanderMuller",
"author_login": "SanderMuller",
"committed_at": "2026-06-18T15:25:33Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "7e97746eec6f3d347ed131b4859314760829be62",
"body": "…less\n\nFive conditional-validation fixes, all pinned to native Laravel by parity tests:\n\n- Object-form regex with a pipe: compiledRules() (and ItemRuleCompiler's\n tuple-strip join) no longer pipe-join when a token contains '|', so\n regex:/^(a|b)$/ survives instead of being split by Laravel's parse\n[…]\nlidator.\n\n- exclude reduction now evaluates every exclude_* condition on a field (not just\n the first) and no longer strips tuple-form required_if/required_unless when a\n field survives its exclude.",
"is_bot": false,
"headline": "Fix exclude_*/regex conditional edge cases and prune fluent excludeUn…",
"author_name": "Sander Muller",
"author_login": "SanderMuller",
"committed_at": "2026-06-18T14:45:38Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "7ae109a41dd5aeb60c4387b9213b4bb516b61b07",
"body": null,
"is_bot": false,
"headline": "Update CHANGELOG",
"author_name": "SanderMuller",
"author_login": "SanderMuller",
"committed_at": "2026-06-18T12:47:30Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "71f09e7b4bd3a75c5b6774da80d3aa2527b03ef1",
"body": "RuleSet: conditional rules written as FluentRule objects with a wildcard\ndependent path (e.g. requiredUnless('items.*.type', ...)) were mis-evaluated\nbecause the per-item prefix strip only handled array/string rule forms.\nrewriteRulesForPerItem now normalizes object rules to native form first, and\nm\n[…]\n, matching native Laravel instead of back-filling numeric\n indices.\n- normalizeRuleToArray strips the prefix on the whole compiled string rather\n than exploding on '|', which corrupted regex tokens.",
"is_bot": false,
"headline": "Fix object-form wildcard conditional deps and optimize FluentValidator",
"author_name": "Sander Muller",
"author_login": "SanderMuller",
"committed_at": "2026-06-18T12:21:01Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "a9d3268ffa080deae127d0d803d0d378fbbc09a2",
"body": null,
"is_bot": false,
"headline": "Update CHANGELOG",
"author_name": "SanderMuller",
"author_login": "SanderMuller",
"committed_at": "2026-06-14T12:04:11Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "343dc5bcb219d2a34c775f1d1a3d401cec2a9d73",
"body": "A rule key containing '*' with no '.*' segment — the typo 'items*' (for\n'items.*'), or a root-level '*' / '*.foo' — computed an empty parent in\nRuleSet::separateRules() and was then silently dropped by\nvalidateWildcardGroups, so the rule applied NO validation and invalid data\npassed. separateRules()\n[…]\ny well-formed wildcard key contains '.*'.\n\nThe RuleSet class cognitive-complexity baseline rises 139->140 for the single\nconditional throw (irreducible for a guard; a sub-80 refactor is out of scope).",
"is_bot": false,
"headline": "fix: throw on malformed wildcard rule keys instead of silently skipping",
"author_name": "Sander Muller",
"author_login": "SanderMuller",
"committed_at": "2026-06-14T11:38:34Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "ed99167166d92e583a253ea7e3b7d365c82dffea",
"body": null,
"is_bot": false,
"headline": "Update CHANGELOG",
"author_name": "SanderMuller",
"author_login": "SanderMuller",
"committed_at": "2026-06-14T11:15:09Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a1c5df02580d5ee2562517f7e549efc9ceb27101",
"body": "… item path\n\nItemValidator's sibling-conditional branch (required_if / required_with /\npresence conditionals) recompiled fast-checks for every item, re-allocating\nwrapper closures even when many items reduce to the same effective rule set.\nMemoize them in $fastChecksByReduced, keyed by ruleCacheKey(\n[…]\nn an explicit isset() block so cognitive complexity stays\nat the baselined 49. Interleaved A/B benchmarking shows ~2-5% faster on the\nconditional-import scenario with no regression on untouched paths.",
"is_bot": false,
"headline": "perf: memoize buildFastChecks per reduced rule set in the conditional…",
"author_name": "Sander Muller",
"author_login": "SanderMuller",
"committed_at": "2026-06-14T11:05:05Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "983ba4ef6827a96b2d965f87cac2aebb07a2fc44",
"body": "Aggregates breaking/constraint changes and their migration steps in the\nconventional repo-root location. Documents the 1.28.0 Laravel 11 support\ndrop (constraint narrowed to ^12.0||^13.0) with both upgrade paths, links\nit from the README, and export-ignores it so it stays GitHub-only like\nCHANGELOG.md/CONTRIBUTING.md.",
"is_bot": false,
"headline": "docs: add UPGRADING.md with the 1.28 Laravel 11-drop upgrade guide",
"author_name": "Sander Muller",
"author_login": "SanderMuller",
"committed_at": "2026-06-14T10:01:54Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a9154fe8598e06807219c3f1425a9ec3728dd703",
"body": "laravel/pao gives agent-optimized output for pint/phpstan/rector/pest.\nLike the boost-skills / package-boost-laravel dev tooling it floors at\nphp ^8.3, so the run-tests matrix strips it for the php 8.2 legs (the\npackage itself still supports php ^8.2 at runtime).\n\n- require-dev: laravel/pao ^1.1\n- run-tests.yml: drop laravel/pao alongside the boost tooling before the\n matrix install so php 8.2 / Laravel 12 legs still resolve",
"is_bot": false,
"headline": "chore: add laravel/pao dev dependency",
"author_name": "Sander Muller",
"author_login": "SanderMuller",
"committed_at": "2026-06-13T22:58:37Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0415680eeae197ce34e104bd395edf6046ae8d16",
"body": null,
"is_bot": false,
"headline": "Update CHANGELOG",
"author_name": "SanderMuller",
"author_login": "SanderMuller",
"committed_at": "2026-06-13T22:21:49Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "17cf97636660f8a6abc65b8ec1d73a53226cc29e",
"body": "Every Laravel 11 release (v11.0.0..v11.54.0) is flagged by Packagist\nsecurity advisories with no advisory-free patch in the 11.x line, so\nComposer's advisory policy refuses to install it — the L11 CI legs can\nno longer resolve. Laravel 11 is past security support; dropping it.\n\n- illuminate/* constr\n[…]\n.0 -> ^12.0||^13.0\n- orchestra/testbench: ^9.0||^10.11 -> ^10.11 (testbench 9 is L11-only)\n- run-tests.yml: remove the L11.* matrix leg + testbench 9.* include\n- README: \"Laravel 11+\" -> \"Laravel 12+\"",
"is_bot": false,
"headline": "fix: drop Laravel 11 support (advisory-blocked, past security support)",
"author_name": "Sander Muller",
"author_login": "SanderMuller",
"committed_at": "2026-06-13T22:15:35Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "ebf502c0631358f8b6f642dcb53f6ed48e6cbfb8",
"body": "- Bump sandermuller/package-boost-laravel ^0.11.0 -> ^1.0 (pulls\n boost-core 1.x + package-boost-php 1.x transitively)\n- Bump sandermuller/boost-skills ^2.0 -> ^2.5 (first version allowing\n boost-core ^1.0; required so prefer-lowest CI resolves)\n- .config/boost.php: wrap withTags() args in an arra\n[…]\ndrop redundant @var override; PHPStan now\n infers the precise list<decimal-int-string> for the regex captures\n- Regenerate AGENTS.md/CLAUDE.md/.gitignore via boost sync (boost-skills\n 2.5.0 content)",
"is_bot": false,
"headline": "chore: upgrade boost family to v1",
"author_name": "Sander Muller",
"author_login": "SanderMuller",
"committed_at": "2026-06-13T21:12:06Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "09049f715cf2023d9f7410948559f75aae47983a",
"body": "boost-core 0.18.1 resolves .config/boost.php ahead of root boost.php.\nMove the config there; boost-core relocates its runtime manifest to\n.config/boost/manifest.json and updates the managed .gitignore block.\nAdd .config/ export-ignore so the dev config stays out of the Composer\narchive (the old root boost.php was shipping), and update CONTRIBUTING\npath references.",
"is_bot": false,
"headline": "chore: move boost.php to .config/ using boost-core .config support",
"author_name": "Sander Muller",
"author_login": "SanderMuller",
"committed_at": "2026-06-02T20:52:18Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2fca8dad5d940d8701b56e3921b3e9d90b718cc1",
"body": null,
"is_bot": false,
"headline": "Update CHANGELOG",
"author_name": "SanderMuller",
"author_login": "SanderMuller",
"committed_at": "2026-06-02T20:36:17Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "db314676416304edcbd9e569d05108f884db5c26",
"body": "core.blade.php was plain markdown with zero Blade directives; the\n.blade.php extension made boost-core skip it on every consumer with\n'no renderer registered for its extension'. The always-on FluentRule\nguidance never reached consumers' CLAUDE.md/AGENTS.md. Rename to .md\nso boost-core renders it natively. No content change.",
"is_bot": false,
"headline": "fix: rename core guideline to .md so boost-core renders it for consumers",
"author_name": "Sander Muller",
"author_login": "SanderMuller",
"committed_at": "2026-06-02T19:14:08Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "8f002af816513f53d2036f23837162b06b7f265c",
"body": null,
"is_bot": false,
"headline": "Update CHANGELOG",
"author_name": "SanderMuller",
"author_login": "SanderMuller",
"committed_at": "2026-06-02T13:11:26Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d17504911517456ec7f42b00f637bd93bba20cdc",
"body": "…h nullable()\n\nWhen a FluentRule self-validates (used as a standalone ValidationRule, e.g. inline `$request->validate([...])` without HasFluentRules), a null or absent value short-circuited validation whenever `nullable` was present and the literal `required` string was absent. That silently dropped\n[…]\nted each()/children() rules, so a required child under a null nullable parent is enforced like native Laravel instead of skipped.\n\nSupersedes #15 (broader than the required-only patch proposed there).",
"is_bot": false,
"headline": "fix: enforce conditional-required and presence modifiers combined wit…",
"author_name": "Sander Muller",
"author_login": "SanderMuller",
"committed_at": "2026-06-02T12:57:13Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "3727dc8cefc1e886fa4c7683f9dc5dd76025f9bb",
"body": "…avel ^0.11.0\n\nBump the boost dev dependencies and regenerate the managed boost artefacts (boost.php, .gitignore boost block, AGENTS.md, CLAUDE.md) via `boost sync`. Dev-only; no runtime or public-API change.",
"is_bot": false,
"headline": "chore: upgrade boost tooling to boost-skills ^2.0 + package-boost-lar…",
"author_name": "Sander Muller",
"author_login": "SanderMuller",
"committed_at": "2026-06-02T12:57:04Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a21f47e83bdd75aacb8ae387b14d67229e5fb26d",
"body": "Newer larastan 3.10 / phpstan 2.2 / pest 4.7 (resolved fresh in CI — no\ncommitted lock) report findings that predate main's last green run:\n\n- FastCheckParityTest: assert($closure instanceof Closure) after the\n not-fast-checkable skip guard. markTestSkipped() no longer narrows the\n Closure|null in\n[…]\nsing-class-context analysis, so it is baselined\n against the test file.\n\nPre-existing on main (fails identically there); surfaced by this branch's\nfresh CI resolve, not caused by the boost migration.",
"is_bot": false,
"headline": "fix: resolve PHPStan findings from upstream dependency drift",
"author_name": "Sander Muller",
"author_login": "SanderMuller",
"committed_at": "2026-05-31T09:08:25Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "276733e55a9721b7835188ce75b44c59b341a3d0",
"body": "package-boost-laravel + boost-core floor at php ^8.3 / illuminate ^12||^13,\nbut this package supports php 8.2 and Laravel 11. The authoring tooling is\nnot needed to run the suite, so remove it before the matrix resolve to keep\nthe php 8.2 and Laravel 11 legs installable.\n\nCaught by codex review of the boost-engine migration (the prior\nsandermuller/package-boost 0.15 floored at php ^8.2 / illuminate ^11, so the\nmatrix was green before the swap).",
"is_bot": false,
"headline": "fix(ci): drop AI authoring tooling from the test matrix",
"author_name": "Sander Muller",
"author_login": "SanderMuller",
"committed_at": "2026-05-31T08:45:23Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0d6365fa05fd0b44364686523f3d14edb01b31c5",
"body": "Replace abandoned sandermuller/package-boost with the split engine:\nboost-skills (catalog) + package-boost-laravel (boost-core). Drop\nlaravel/boost — its MCP server was unused.\n\n- boost.php: allowlist boost-skills + package-boost-{laravel,php} +\n stolt/lean-package-validator; tags Php/Laravel/Githu\n[…]\ne dead .mcp.json + .codex/config.toml (boost:mcp gone with laravel/boost)\n- Strip stale old-engine guideline blocks from CLAUDE.md/AGENTS.md\n- Rewrite CONTRIBUTING.md for the vendor/bin/boost workflow",
"is_bot": false,
"headline": "chore: migrate AI tooling to boost-skills + package-boost-laravel",
"author_name": "Sander Muller",
"author_login": "SanderMuller",
"committed_at": "2026-05-31T07:59:02Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "9f1edcb01a2b2a5006a30826284e6e02912beeab",
"body": "- composer.json: sync-ai updated to vendor/bin/boost sync\n- Regenerated AGENTS.md / CLAUDE.md from package-boost 0.15.1",
"is_bot": false,
"headline": "Resync AI tooling — pull package-boost 0.15.1 (boost sync command refs)",
"author_name": "Sander Muller",
"author_login": "SanderMuller",
"committed_at": "2026-05-18T06:51:23Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "3643778b68f74db6df122021927a7bb669fab2ea",
"body": "The 1.27.1 fix proved itself via tests/BatchValidationGuardsTest, which\nasserts Validator::failed() shape directly. Add a tester-surface test\nthat drives the exact consumer scenario downstream adopters reported:\nFluentRulesTester::for(FormRequest)->with(bulk payload)->failsWith($f,\n'max') on a FormRequest whose each() carries a batched exists rule and\nwhose parent declares max:N. Confirmed bug-catching — fails with the\nexact \"Failed rules: []\" symptom when the BatchLimitRemap fix is removed.",
"is_bot": false,
"headline": "test: add FluentRulesTester regression test for parent-max remap path",
"author_name": "Sander Muller",
"author_login": "SanderMuller",
"committed_at": "2026-05-11T21:04:22Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1c6f52b08ce550056d830c219f1c7be4acb7a796",
"body": null,
"is_bot": false,
"headline": "Update CHANGELOG",
"author_name": "SanderMuller",
"author_login": "SanderMuller",
"committed_at": "2026-05-11T20:51:56Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "22852458937411a657f3b244f8d213ad061f1a12",
"body": "The parent-max guard in HasFluentRules fires before the validator is\nbuilt, so the remap from BatchLimitExceededException to\nValidationException produced a synthetic Validator whose failedRules\nstayed empty. Errors bag carried the message, but Validator::failed()\nreturned [] — silently breaking FluentRulesTester::failsWith($f, 'max')\nand any other rule-bag inspection path. Remap now reflects failedRules\nwith Max (parent-max) or BatchLimit (hard-cap) keyed by attribute.",
"is_bot": false,
"headline": "fix: populate Validator::failed() on parent-max batch short-circuit",
"author_name": "Sander Muller",
"author_login": "SanderMuller",
"committed_at": "2026-05-11T20:50:34Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "212db0de49e82b89fead04d6960019278706c9bd",
"body": null,
"is_bot": false,
"headline": "Update CHANGELOG",
"author_name": "SanderMuller",
"author_login": "SanderMuller",
"committed_at": "2026-05-11T15:09:41Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b36e048f6abdb10a4e21f59080e0c5d8525f9475",
"body": "dropUnknownFields() is the lenient counterpart to failOnUnknownFields():\nstrips unvalidated nested array sub-keys (children(), each(), dotted\nrule keys) from validated() output instead of erroring. Maps to\nLaravel's Validator::$excludeUnvalidatedArrayKeys; per-RuleSet override\nof host factory state.\n[…]\nloadedFile was\nalready referenced). Pest @phpstan-ignore identifier renamed\n(pest.impossibleExpectation → pest.expectation.impossible).\nRector AppToResolveRector cleanup on three unrelated test files.",
"is_bot": false,
"headline": "feat: add dropUnknownFields() + Request overload on validate()/check()",
"author_name": "Sander Muller",
"author_login": "SanderMuller",
"committed_at": "2026-05-11T14:27:38Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "2bd5baa41d0f860d2754f6e63d9b1b31af35be92",
"body": "…parser\n\nMaintainability pass before next rule additions land. Internal-only — no\npublic API change, no behaviour change. 2705 tests pass, Login form\nbenchmark 12x preserved.\n\n- Extract AbstractConditionalReducer; PresenceConditional + ValueConditional\n reducers now share apply-template + hasAny + \n[…]\node, new home).\n- Extend tests/ phpstan ignore block with new.internalClass /\n staticMethod.internalClass / staticMethod.internal so direct unit tests\n can instantiate first-party @internal classes.",
"is_bot": false,
"headline": "refactor: dedup reducers, decompose validator phase, unify FastCheck …",
"author_name": "Sander Muller",
"author_login": "SanderMuller",
"committed_at": "2026-05-10T17:09:29Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "45323d0726b6ee1b2e01533a739b9806a5bebe0e",
"body": null,
"is_bot": false,
"headline": "Update CHANGELOG",
"author_name": "SanderMuller",
"author_login": "SanderMuller",
"committed_at": "2026-05-10T14:57:29Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f57256bcb952a0513cc06a880df5d8bede4f11ac",
"body": "The bot's chore: rector commit (a91a2f9) ran a narrower Rector config\nthan the local one. Re-run to converge and add the trailing blank\nlines after the early-return continues.",
"is_bot": false,
"headline": "style: re-apply Rector NewlineAfterStatementRector",
"author_name": "Sander Muller",
"author_login": "SanderMuller",
"committed_at": "2026-05-10T14:42:45Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "912a74a52efb9d3cdb1f326dc6a0060d942e16f0",
"body": "The FastCheckCompiler::compile() static cache (commit 494e4ad,\nnarrowed by e3af13c) doubled the relative speedup on the flat-rule\npath by skipping closure recompilation for stable rule strings on\nrepeat FormRequest validations. Wildcard scenarios were already\nhitting per-rule caches upstream and didn't move; this row was the\nonly stale benchmark figure.",
"is_bot": false,
"headline": "docs: update Login form benchmark — 7x → 12x from compile cache",
"author_name": "Sander Muller",
"author_login": "SanderMuller",
"committed_at": "2026-05-10T14:41:49Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a91a2f9ea920e58624f1bf85cfc26ed484ec246e",
"body": null,
"is_bot": false,
"headline": "chore: rector",
"author_name": "SanderMuller",
"author_login": "SanderMuller",
"committed_at": "2026-05-10T14:37:36Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e3af13cd7f94e0b9d722b2b14c086369d0b47bed",
"body": "CoreValueCompiler resolves strtotime() at compile time and bakes the\ntimestamp into the returned closure. Caching that closure across Octane\nrequests would freeze relative tokens (today/now/tomorrow/+1 week/etc)\nfor the lifetime of the worker, silently drifting validation after\nmidnight or as time a\n[…]\nest.php (7 cases): the stable-\nrule reuse contract and the no-reuse contract for the five date-\ncomparison opcodes plus an absolute-date variant.\n\nCaught by codex adversarial review of commit 494e4ad.",
"is_bot": false,
"headline": "fix: skip FastCheckCompiler::compile() cache for date-comparison rules",
"author_name": "Sander Muller",
"author_login": "SanderMuller",
"committed_at": "2026-05-10T14:27:30Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "4f9fba6df9449e21e1f0b4b2f0eb659f7004ce12",
"body": "- Drop redundant (bool) cast in OptimizedValidator::tryFastCheckRemaining\n — closure return type already declares bool.\n- Tighten PHPDoc on FastCheckCompiler::$compileCache from the ambiguous\n Closure(mixed): bool|null to ?Closure(mixed): bool.\n- Drop now-stale OptimizedValidator::passes() cognitive-complexity\n baseline entry — the helper extraction in 0cb5356 brought it under\n threshold.",
"is_bot": false,
"headline": "chore: polish from self-evaluate pass",
"author_name": "Sander Muller",
"author_login": "SanderMuller",
"committed_at": "2026-05-10T14:27:23Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0cb5356495ddac8199fac2a30f0261e5f3cb4745",
"body": "Phase 2 used to call evaluateConditionals() on EVERY attribute in the\nrules map, doing a full foreach search for exclude_unless/exclude_if\ntuples even when the attribute had none. For FormRequests with sparse\nconditionals over many attributes that scan was the dominant per-call\ncost.\n\nReplace it wit\n[…]\n 13–16ms\n after: median ~10ms (~30% faster)\n\nBench harness scenarios (RuleSet::validate path) unchanged — they\ndon't route through OptimizedValidator. PHPStan clean, full suite\npassing (2660 tests).",
"is_bot": false,
"headline": "perf: pre-extract conditional metadata in OptimizedValidator::passes()",
"author_name": "Sander Muller",
"author_login": "SanderMuller",
"committed_at": "2026-05-10T13:54:28Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "19df5e2920b70e105683aaee3c72159ded5c7740",
"body": "Three micro-cleanups in the per-item validation loop. None move the\nbenchmark needle individually (variance dominates), but they match\nexisting intent and avoid pointless work on every call:\n\n- CoreValueCompiler: replace `in_array($value, [null, '', []], true)`\n with explicit `===` chain. The adjac\n[…]\nthe fast-check\n map to passesAllFastChecks. The collector iterates values via\n foreach, so the rekey was free busywork on every item.\n- ItemErrorCollector: widen the param type to iterable to match.",
"is_bot": false,
"headline": "refactor: drop dead work in fast-check hot path",
"author_name": "Sander Muller",
"author_login": "SanderMuller",
"committed_at": "2026-05-10T13:06:15Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "b35707b6aa42be3f62fc231f044c6fceebc4514f",
"body": null,
"is_bot": false,
"headline": "Update getEachRules to return array only",
"author_name": "Sander Muller",
"author_login": "SanderMuller",
"committed_at": "2026-05-10T12:49:46Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0938515e9dc06f71ba94231fd43468ca9581c04d",
"body": null,
"is_bot": false,
"headline": "Update ImportBenchTest.php",
"author_name": "Sander Muller",
"author_login": "SanderMuller",
"committed_at": "2026-05-10T12:49:09Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "60600db5107bcb1feeda8b81eb2f0fbbc8ecf4d8",
"body": null,
"is_bot": false,
"headline": "Update RuleSet.php",
"author_name": "Sander Muller",
"author_login": "SanderMuller",
"committed_at": "2026-05-10T12:48:59Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "068977da03524abdc101bb0ff96a3c3a2ea93816",
"body": null,
"is_bot": false,
"headline": "Update README.md",
"author_name": "Sander Muller",
"author_login": "SanderMuller",
"committed_at": "2026-05-10T12:48:53Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "3b0fd209b03d6f1b6dc0cc62c3845ed9c377d9bb",
"body": null,
"is_bot": false,
"headline": "Update SKILL.md",
"author_name": "Sander Muller",
"author_login": "SanderMuller",
"committed_at": "2026-05-10T12:48:40Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "494e4adf4d18ed9bc020221d59d212de703dd53b",
"body": "Repeated FormRequest validations recompile the same pipe-delimited rule\nstrings into the same closures. Adding a static map keyed by rule\nstring roughly doubles the speedup on flat-rule paths (Login-form\nbenchmark: 6.6x -> 12x vs native Laravel) with no measurable regression\non wildcard or conditional benchmarks (those already hit the per-item\nRuleCacheKey upstream).\n\nMemory cost is bounded by the set of distinct rule strings the process\never sees, which is small in typical apps.",
"is_bot": false,
"headline": "perf: cache FastCheckCompiler::compile() closures by rule string",
"author_name": "Sander Muller",
"author_login": "SanderMuller",
"committed_at": "2026-05-10T12:42:07Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "16c2cd126e6b68c22a7659e953f41c3ed5efd4f2",
"body": "- Limit `package-boost.agents` to claude_code, cursor, copilot\n to avoid generating gemini/junie/kiro/.agents/ artefacts.\n- Drop legacy `.github/copilot-instructions.md` (Copilot now reads\n AGENTS.md per package-boost 0.14).\n- Sync regenerated AGENTS.md/CLAUDE.md guidelines block, .gitattributes\n managed export-ignores, and new vendor skill symlinks\n (lean-dist, readme, release-notes, skill-authoring, upgrading).\n- Gitignore unused agent dirs as a safety net.",
"is_bot": false,
"headline": "chore: upgrade package-boost to ^0.14.0",
"author_name": "Sander Muller",
"author_login": "SanderMuller",
"committed_at": "2026-05-08T15:28:11Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "3081f96dab2a296e0e7929aa4f91764aa1a29776",
"body": null,
"is_bot": false,
"headline": "chore(deps-dev): bump sandermuller/package-boost to ^0.13.0",
"author_name": "Sander Muller",
"author_login": "SanderMuller",
"committed_at": "2026-05-08T14:47:28Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "7cb80ecdfdeb79cda5a60768a40e3fbb11ba3b85",
"body": null,
"is_bot": false,
"headline": "Trim Boost skill descriptions",
"author_name": "Sander Muller",
"author_login": "SanderMuller",
"committed_at": "2026-05-08T14:38:20Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "30ad1a2dc6dd39783097efc52b9c471b3cd9f502",
"body": "Updates the requirements on [sandermuller/package-boost](https://github.com/sandermuller/package-boost) to permit the latest version.\n- [Release notes](https://github.com/sandermuller/package-boost/releases)\n- [Changelog](https://github.com/SanderMuller/package-boost/blob/main/CHANGELOG.md)\n- [Commi\n[…]\ndency-version: 0.12.0\n dependency-type: direct:development\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "chore(deps-dev): update sandermuller/package-boost requirement (#14)",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-05-07T21:29:43Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "8b8ddcdaf0a9e0e58089d7ae7376f8d591b22010",
"body": null,
"is_bot": false,
"headline": "Update .gitattributes",
"author_name": "Sander Muller",
"author_login": "SanderMuller",
"committed_at": "2026-04-30T08:37:56Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "3c5d34fa4c795d2d52fa733f74f9ea09cfd9e776",
"body": null,
"is_bot": false,
"headline": "Update CONTRIBUTING.md",
"author_name": "Sander Muller",
"author_login": "SanderMuller",
"committed_at": "2026-04-29T15:23:35Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ff7350edaf33d397dc9e8b771f226a5d1f2150b3",
"body": null,
"is_bot": false,
"headline": "Update CHANGELOG.md",
"author_name": "Sander Muller",
"author_login": "SanderMuller",
"committed_at": "2026-04-29T15:21:12Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "8dd6efd96c394a54e5b469aa7d5fcd5d0d48ccb0",
"body": null,
"is_bot": false,
"headline": "Update CHANGELOG",
"author_name": "SanderMuller",
"author_login": "SanderMuller",
"committed_at": "2026-04-29T15:01:54Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c84a0482d7d2e2c1087a9048165f51a203797793",
"body": null,
"is_bot": false,
"headline": "chore: rector",
"author_name": "SanderMuller",
"author_login": "SanderMuller",
"committed_at": "2026-04-29T14:44:56Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "78516b16250705c2a1b2d24c811ce9f8bf0019d1",
"body": "ValueTypePredicates::predicateFor() collapsed `integer:strict` to bare\n`integer` via the colon-split, then mapped both to a `filter_var(...,\nFILTER_VALIDATE_INT)` predicate. That meant numeric strings like \"42\"\nsurvived BatchDatabaseChecker::filterValuesByType() and entered the\nbatched whereIn group\n[…]\nnumeric strings under\n`integer:strict`, keeping only true ints. Plus a CoreValueCompiler\nclosure-level test pinning fast-check behavior across versions\n(`is_int` under strict, `filter_var` otherwise).",
"is_bot": false,
"headline": "fix: integer:strict bypassed batch type filter",
"author_name": "Sander Muller",
"author_login": "SanderMuller",
"committed_at": "2026-04-29T14:43:01Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "afbc373661aaf15565a7f565121d6f230384877e",
"body": null,
"is_bot": false,
"headline": "chore: rector",
"author_name": "SanderMuller",
"author_login": "SanderMuller",
"committed_at": "2026-04-29T14:05:04Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "679f2994384f401f5c9a8937546d0a31e8cb3a8e",
"body": "….23+\n\nTwo issues caught by the prefer-lowest matrix:\n\n1. Fast-check shortcut. CoreValueCompiler collapsed `integer:strict` to\n `'integer' => true`, then emitted a `filter_var(..., FILTER_VALIDATE_INT)`\n closure that accepted numeric strings. With FluentRule on the optimized\n entry points (Has\n[…]\ns when reflection shows strict isn't honored.\n\nREADME + migration-patterns now note the L12.23+ requirement on the strict row.\nPHPStan baseline bumped 118 → 120 for CoreValueCompiler class complexity.",
"is_bot": false,
"headline": "fix: integer:strict honored on optimized path; gate live tests to L12…",
"author_name": "Sander Muller",
"author_login": "SanderMuller",
"committed_at": "2026-04-29T14:04:14Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "01b8564cc73d6beefafab09fb615885c96d1c487",
"body": "- Restructure Usage to lead with FormRequest; bare validate() demoted to a smaller \"Other contexts\" subsection at the end.\n- Why-this-package gains Fluent / Array notation / Messages & attributes / Performance subsections; intro example replaced with the harder-to-remember pain points (min:5 polymor\n[…]\nomment uses kept.\n- TOC sub-links into <details> blocks removed (anchors don't reliably resolve inside collapsibles).\n- migration-patterns.md adds the integer:strict mapping in the type-choice matrix.",
"is_bot": false,
"headline": "docs: 1.25 README pass + migration-patterns refresh",
"author_name": "Sander Muller",
"author_login": "SanderMuller",
"committed_at": "2026-04-29T13:35:22Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "db5eb0d16b18a80f2b2acae8af7c2fb91e1db46c",
"body": "- FluentRule::integer() accepts strict: true to reject numeric strings (\"42\"); positional (label, message) signature preserved (BC-safe).\n- FluentRule::date() and ::dateTime() now accept message: to mirror ::string(message:); writes to customMessages['date'] (or 'date_format' once format() runs).\n- \n[…]\ncException for chained ->message() before any rule (fail-fast guard preserved).\n- DateRule::format() migrates a pinned 'date' message to 'date_format'; an explicit messageFor('date_format', ...) wins.",
"is_bot": false,
"headline": "feat: factory message: on date/dateTime, strict: on integer",
"author_name": "Sander Muller",
"author_login": "SanderMuller",
"committed_at": "2026-04-29T13:34:14Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "a6ccaa10a54657b629dbdf931577211fbbf8df27",
"body": "* dist: Update export-ignores\n\n* Keep LICENSE.md and README.md in dist tarball\n\n---------\n\nCo-authored-by: Sander Muller <github@scode.nl>",
"is_bot": false,
"headline": "dist: Update export-ignores (#13)",
"author_name": "Raphael Stolt",
"author_login": "raphaelstolt",
"committed_at": "2026-04-28T19:52:14Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "70049807123782bc987af369b8b97e51f075d79a",
"body": "… imports\n\n- Split BatchDatabaseChecker: query runner -> Internal\\BatchPresenceQuery,\n type-predicate derivation -> Internal\\ValueTypePredicates.\n- Adopt Rector withImportNames() + typeDeclarationDocblocks; replace inline\n \\Closure / \\Stringable / \\Throwable references with use statements.\n- Restore spaces in Closure(...) docblock return types where phpdoc-parser's\n printer had stripped them.",
"is_bot": false,
"headline": "refactor: extract BatchPresenceQuery + ValueTypePredicates, normalize…",
"author_name": "Sander Muller",
"author_login": "SanderMuller",
"committed_at": "2026-04-24T13:12:08Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5bbfde4757f3d93f02deb0b81a4ff58e23159c43",
"body": null,
"is_bot": false,
"headline": "Rename skills",
"author_name": "Sander Muller",
"author_login": "SanderMuller",
"committed_at": "2026-04-24T11:31:04Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "740c885414d273b1e64bad56a33094232a630452",
"body": null,
"is_bot": false,
"headline": "Update README.md",
"author_name": "Sander Muller",
"author_login": "SanderMuller",
"committed_at": "2026-04-24T11:21:13Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d9c2e894beea25205b43efc5f2df679fe5332ef3",
"body": null,
"is_bot": false,
"headline": "Update README.md",
"author_name": "Sander Muller",
"author_login": "SanderMuller",
"committed_at": "2026-04-24T11:17:04Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d5abb9a88eb5d32eb4797e1058349818e247530a",
"body": null,
"is_bot": false,
"headline": "Update README.md",
"author_name": "Sander Muller",
"author_login": "SanderMuller",
"committed_at": "2026-04-24T11:16:07Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5927e28f37fb67d8d3397fc6d4326969165b7dd1",
"body": "`dev-master` aliases to the next-major dev branch (currently Laravel\n14). Our composer.json supports `^11 || ^12 || ^13` only — we don't\nclaim Laravel 14 support, so regressions on 14's dev branch are noise\nnot signal.\n\nSwitching the nightly to `laravel/framework:13.x-dev` keeps\nearly-warning covera\n[…]\nrk#59781 added\nthem as abstract methods on the contract without backporting the\nconcrete implementations from #59756. Upstream's to fix on their\nside; not ours to chase for a version we don't support.",
"is_bot": false,
"headline": "ci: target 13.x-dev nightly instead of dev-master (Laravel 14)",
"author_name": "Sander Muller",
"author_login": "SanderMuller",
"committed_at": "2026-04-24T07:15:21Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "1c7964dc881c3f0a7da4fe3e5e82362d3c561424",
"body": "Release notes are public artefacts (GitHub release body → CHANGELOG.md\nvia CI → Packagist). Internal peer IDs, claude-peers channel framing,\nand agent-session process notes leak internal architecture and add\nzero value for downstream consumers. Step 8 of the skill now codifies:\n\n- Do not write peer \n[…]\nadmap.md + specs/*.md\n can still reference peers (gitignored, session-continuity only).\n- Pre-`Write` scrub checklist: grep for `peer`, 8-char IDs, and\n \"claude-peers\" / \"claude-code\" before saving.",
"is_bot": false,
"headline": "docs: pre-release skill forbids peer mentions in release notes",
"author_name": "Sander Muller",
"author_login": "SanderMuller",
"committed_at": "2026-04-24T07:05:50Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "494fad7236d73ebf784846d1c9aa36e4a163ac96",
"body": null,
"is_bot": false,
"headline": "Update CHANGELOG",
"author_name": "SanderMuller",
"author_login": "SanderMuller",
"committed_at": "2026-04-24T06:58:40Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f9dc7a189bd092c91867a0a60bc625ca2d2ae104",
"body": "Phase 4 of `each-children-extend-helpers` — scoped after hihaho's\nadoption report on 1.23.0 confirmed one real extend site and zero\n`getEachRules()` callers post-migration.\n\nTwo new RuleSet methods:\n\n- `RuleSet::modifyEach(string $field, array $rules): self` — wraps\n `modify($field, fn ($r) => $r->\n[…]\nr stays verified through 1.25.0.\n\nNo API breaks. No behaviour change to `each()` / `children()`.\n`addEachRule` / `mergeEachRules` / `addChildRule` / `mergeChildRules`\nprimitives from 1.23.0 unchanged.",
"is_bot": false,
"headline": "feat: RuleSet::modifyEach / modifyChildren sugar + narrow each-getters",
"author_name": "Sander Muller",
"author_login": "SanderMuller",
"committed_at": "2026-04-24T06:38:55Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "8996c2cb9e41e074d4539c1429d2016e26285ff6",
"body": null,
"is_bot": false,
"headline": "Update CHANGELOG",
"author_name": "SanderMuller",
"author_login": "SanderMuller",
"committed_at": "2026-04-23T20:46:19Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4c8393f0c9293c2482009c28883a1b0cb6151dc0",
"body": "… array_merge in loops\n\nThree independent improvements that land together for 1.23.0:\n\n1. Internal cleanup on HasFluentValidation's FluentRule path:\n - `RuleSet::isEmpty()` + `hasObjectRules()` helpers absorb the\n inline duplicated \"does this array have any FluentRule objects?\"\n scans that\n[…]\nDateRule`, `DeclinedRule`, `EmailRule`, `FileRule`,\n`NumericRule`, `PasswordRule`, `StringRule`) from an earlier Pint pass\nride along.\n\nBug fix #2 surfaced via Codex review of the 1.23.0 working tree.",
"is_bot": false,
"headline": "refactor + fix: RuleSet helpers, compileFluentRules empty-array path,…",
"author_name": "Sander Muller",
"author_login": "SanderMuller",
"committed_at": "2026-04-23T20:26:18Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "f991f30f76f26fc8b1e4e6fbae46144a6aa091f3",
"body": "Adds four helpers for the subclass-extends-parent FormRequest pattern:\n\n- `ArrayRule::addEachRule(string $key, ValidationRule $rule)`\n- `ArrayRule::mergeEachRules(array $rules)` (later-wins merge)\n- `FieldRule::addChildRule(string $key, ValidationRule $rule)`\n- `FieldRule::mergeChildRules(array $rul\n[…]\ncrete\n`parent::rules()->modify(KEY, fn ($r) => $r->addEachRule(...))` end-to-end\ntest matching the hihaho dogfood pattern that sourced this feature.\n\nSourced from hihaho migration feedback 2026-04-23.",
"is_bot": false,
"headline": "feat: add extend-parent helpers for each() and children() shapes",
"author_name": "Sander Muller",
"author_login": "SanderMuller",
"committed_at": "2026-04-23T20:25:32Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "cd95794ff5bdee1363b96d74236b5670b1893f80",
"body": "Adds `ValueConditionalReducer` alongside the existing presence-conditional\nreducer, covering `required_if` / `required_unless` / `prohibited_if` /\n`prohibited_unless`. For wildcard items, the reducer rewrites active\nrules to bare `required` / `prohibited` (unlocking fast-check) and drops\ninactive ru\n[…]\nired|exists:users,id` vs just `exists:users,id`) would reuse the\nfirst item's immutable `Validator`. Cache keys now include rule content\nfor string rules and a stable fingerprint for non-string rules.",
"is_bot": false,
"headline": "feat: pre-evaluate value-conditional rules per-item",
"author_name": "Sander Muller",
"author_login": "SanderMuller",
"committed_at": "2026-04-23T20:24:37Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "3978cab0d6db3d1b7987d2260b2b511adaf70c6a",
"body": "Three gaps surfaced by a post-1.22 coverage audit:\n\n- FluentRule::activeUrl() factory lacked a standalone happy/unhappy\n validation test — the factory shortcut bypasses the string()->activeUrl()\n chain that was the only path tested.\n- Factory-level inline message: parameter was only covered by liv\n[…]\n guards are\n designed for. Adds a 50k-unique-int hostile payload test with\n wall-clock (<2s) and memory-delta (<64MB) budgets to catch quadratic\n regressions in the filter -> dedup -> cap pipeline.",
"is_bot": false,
"headline": "test: close coverage gaps across 1.19-1.22 releases",
"author_name": "Sander Muller",
"author_login": "SanderMuller",
"committed_at": "2026-04-23T14:15:58Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "c0ba3b80ebe09689525f80d2ecab0f8b9ffecbfa",
"body": null,
"is_bot": false,
"headline": "Update CHANGELOG",
"author_name": "SanderMuller",
"author_login": "SanderMuller",
"committed_at": "2026-04-23T13:55:38Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d81afbece77740ab558c69aaa529984d9a2538b9",
"body": null,
"is_bot": false,
"headline": "chore: pint",
"author_name": "SanderMuller",
"author_login": "SanderMuller",
"committed_at": "2026-04-23T12:55:44Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f9f978989be2d01f3a2f96849b6ce5d9cd35c11d",
"body": null,
"is_bot": false,
"headline": "chore: sync boost skills + guidelines",
"author_name": "Sander Muller",
"author_login": "SanderMuller",
"committed_at": "2026-04-23T12:41:25Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "155c696b6b82cc8a27e53791748430e4e472205e",
"body": "Three layered safeguards close the gap where BatchDatabaseChecker pre-populates\nraw values before per-item rules run, turning what should be a validation-time\nrejection into unbounded DB work (or a PostgreSQL crash on bad types):\n\n- Parent max:N short-circuit on the FormRequest path. For each concre\n[…]\natchLimitExceededException\npre-remap when consumers construct validators directly from $ruleSet->prepare();\nthrough the documented entry points the exception is always remapped to\nValidationException.",
"is_bot": false,
"headline": "feat: guard batched DB validation against DoS + strict-DB crashes",
"author_name": "Sander Muller",
"author_login": "SanderMuller",
"committed_at": "2026-04-23T12:40:00Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "f106b179605ab94d6c0e6fd6e65a46ce9efa308e",
"body": "…tion",
"is_bot": false,
"headline": "docs: link companion PHPStan rules package for unbounded each() detec…",
"author_name": "Sander Muller",
"author_login": "SanderMuller",
"committed_at": "2026-04-23T12:39:22Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0c364f433daa42eab975385a60edb0d523eba2b3",
"body": null,
"is_bot": false,
"headline": "Update CHANGELOG",
"author_name": "SanderMuller",
"author_login": "SanderMuller",
"committed_at": "2026-04-22T19:06:59Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a7ccb29de33d48c9221a09d87690fa67bc8ef0ae",
"body": null,
"is_bot": false,
"headline": "chore: rector",
"author_name": "SanderMuller",
"author_login": "SanderMuller",
"committed_at": "2026-04-22T18:57:10Z",
"body_truncated": false,
"is_coding_agent": false
}
],
"releases_count": 78,
"commits_last_year": 541,
"latest_release_at": "2026-07-16T16:34:20Z",
"latest_release_tag": "1.33.0",
"releases_from_tags": false,
"days_since_last_push": 3,
"active_weeks_last_year": 27,
"days_since_latest_release": 5,
"mean_days_between_releases": 4.9
},
"community": {
"has_readme": true,
"has_license": true,
"has_description": true,
"has_contributing": true,
"health_percentage": 71,
"has_issue_template": false,
"has_code_of_conduct": false,
"has_pull_request_template": false
},
"ecosystem": {
"packages": [
{
"name": "sandermuller/laravel-fluent-validation",
"exists": true,
"license": "MIT",
"keywords": [
"fluent",
"validation",
"laravel",
"rule-builder"
],
"ecosystem": "packagist",
"matches_repo": true,
"registry_url": "https://packagist.org/packages/sandermuller/laravel-fluent-validation",
"is_deprecated": false,
"latest_version": "1.33.0",
"repository_url": "https://github.com/SanderMuller/laravel-fluent-validation",
"versions_count": 79,
"total_downloads": 24354,
"dependents_count": 2,
"deprecation_note": null,
"maintainers_count": null,
"monthly_downloads": 9636,
"first_published_at": null,
"latest_published_at": "2026-07-16T15:48:22Z",
"latest_version_yanked": null,
"days_since_latest_publish": 5
}
]
},
"popularity": {
"forks": 2,
"stars": 211,
"watchers": 2,
"fork_history": {
"days": [
{
"date": "2026-04-10",
"count": 1
},
{
"date": "2026-04-27",
"count": 1
}
],
"complete": true,
"collected": 2,
"total_forks": 2
},
"star_history": {
"days": [
{
"date": "2026-04-03",
"count": 1
},
{
"date": "2026-04-06",
"count": 1
},
{
"date": "2026-04-08",
"count": 9
},
{
"date": "2026-04-09",
"count": 7
},
{
"date": "2026-04-10",
"count": 9
},
{
"date": "2026-04-11",
"count": 4
},
{
"date": "2026-04-12",
"count": 11
},
{
"date": "2026-04-13",
"count": 11
},
{
"date": "2026-04-14",
"count": 6
},
{
"date": "2026-04-15",
"count": 6
},
{
"date": "2026-04-16",
"count": 3
},
{
"date": "2026-04-17",
"count": 9
},
{
"date": "2026-04-18",
"count": 3
},
{
"date": "2026-04-20",
"count": 2
},
{
"date": "2026-04-21",
"count": 1
},
{
"date": "2026-04-23",
"count": 2
},
{
"date": "2026-04-27",
"count": 47
},
{
"date": "2026-04-28",
"count": 18
},
{
"date": "2026-04-29",
"count": 11
},
{
"date": "2026-04-30",
"count": 3
},
{
"date": "2026-05-01",
"count": 1
},
{
"date": "2026-05-02",
"count": 2
},
{
"date": "2026-05-03",
"count": 3
},
{
"date": "2026-05-04",
"count": 1
},
{
"date": "2026-05-05",
"count": 1
},
{
"date": "2026-05-06",
"count": 1
},
{
"date": "2026-05-10",
"count": 1
},
{
"date": "2026-05-11",
"count": 1
},
{
"date": "2026-05-13",
"count": 1
},
{
"date": "2026-05-18",
"count": 1
},
{
"date": "2026-05-26",
"count": 8
},
{
"date": "2026-05-27",
"count": 3
},
{
"date": "2026-05-28",
"count": 2
},
{
"date": "2026-05-29",
"count": 1
},
{
"date": "2026-05-30",
"count": 2
},
{
"date": "2026-06-02",
"count": 2
},
{
"date": "2026-06-03",
"count": 1
},
{
"date": "2026-06-04",
"count": 1
},
{
"date": "2026-06-05",
"count": 1
},
{
"date": "2026-06-08",
"count": 2
},
{
"date": "2026-06-12",
"count": 1
},
{
"date": "2026-06-19",
"count": 1
},
{
"date": "2026-06-22",
"count": 1
},
{
"date": "2026-06-24",
"count": 2
},
{
"date": "2026-06-30",
"count": 2
},
{
"date": "2026-07-09",
"count": 1
},
{
"date": "2026-07-10",
"count": 1
},
{
"date": "2026-07-13",
"count": 1
},
{
"date": "2026-07-15",
"count": 1
}
],
"complete": true,
"collected": 211,
"total_stars": 211
},
"open_issues_and_prs": 0
},
"ai_readiness": {
"has_nix": false,
"example_dirs": [],
"has_llms_txt": false,
"has_dockerfile": false,
"has_mcp_signal": false,
"bootstrap_files": [],
"api_schema_files": [],
"has_devcontainer": false,
"typecheck_configs": [],
"toolchain_manifests": [],
"largest_source_bytes": 105804,
"source_files_sampled": 158,
"oversized_source_files": 2,
"agent_instruction_files": [
"AGENTS.md",
"CLAUDE.md"
],
"agent_instruction_max_bytes": 13555
},
"dependencies": {
"manifests": [
"composer.json"
],
"advisories": {
"error": "No resolved dependencies carried a version and a supported ecosystem",
"scope": "repository_graph",
"source": null,
"findings": [],
"collected": false,
"truncated": false,
"by_severity": {},
"advisory_count": 0,
"affected_count": 0,
"assessed_count": 0,
"assessed_package": null,
"unassessed_count": 28,
"direct_affected_count": 0
},
"ecosystems": [
"packagist"
],
"dependencies": [
{
"name": "illuminate/contracts",
"manifest": "composer.json",
"ecosystem": "packagist",
"version_constraint": "^12.0||^13.0"
},
{
"name": "illuminate/http",
"manifest": "composer.json",
"ecosystem": "packagist",
"version_constraint": "^12.0||^13.0"
},
{
"name": "illuminate/support",
"manifest": "composer.json",
"ecosystem": "packagist",
"version_constraint": "^12.0||^13.0"
},
{
"name": "illuminate/validation",
"manifest": "composer.json",
"ecosystem": "packagist",
"version_constraint": "^12.0||^13.0"
}
],
"all_dependencies": {
"error": null,
"source": "github-sbom",
"packages": [
{
"name": "illuminate/contracts",
"direct": true,
"version": null,
"ecosystem": "packagist"
},
{
"name": "illuminate/http",
"direct": true,
"version": null,
"ecosystem": "packagist"
},
{
"name": "illuminate/support",
"direct": true,
"version": null,
"ecosystem": "packagist"
},
{
"name": "illuminate/validation",
"direct": true,
"version": null,
"ecosystem": "packagist"
},
{
"name": "driftingly/rector-laravel",
"direct": false,
"version": null,
"ecosystem": "packagist"
},
{
"name": "larastan/larastan",
"direct": false,
"version": null,
"ecosystem": "packagist"
},
{
"name": "laravel/pao",
"direct": false,
"version": null,
"ecosystem": "packagist"
},
{
"name": "laravel/pint",
"direct": false,
"version": null,
"ecosystem": "packagist"
},
{
"name": "livewire/livewire",
"direct": false,
"version": null,
"ecosystem": "packagist"
},
{
"name": "mrpunyapal/rector-pest",
"direct": false,
"version": null,
"ecosystem": "packagist"
},
{
"name": "nunomaduro/collision",
"direct": false,
"version": null,
"ecosystem": "packagist"
},
{
"name": "orchestra/testbench",
"direct": false,
"version": null,
"ecosystem": "packagist"
},
{
"name": "pestphp/pest",
"direct": false,
"version": null,
"ecosystem": "packagist"
},
{
"name": "pestphp/pest-plugin-arch",
"direct": false,
"version": null,
"ecosystem": "packagist"
},
{
"name": "pestphp/pest-plugin-laravel",
"direct": false,
"version": null,
"ecosystem": "packagist"
},
{
"name": "php",
"direct": false,
"version": null,
"ecosystem": "packagist"
},
{
"name": "phpstan/extension-installer",
"direct": false,
"version": null,
"ecosystem": "packagist"
},
{
"name": "phpstan/phpstan-deprecation-rules",
"direct": false,
"version": null,
"ecosystem": "packagist"
},
{
"name": "phpstan/phpstan-phpunit",
"direct": false,
"version": null,
"ecosystem": "packagist"
},
{
"name": "phpstan/phpstan-strict-rules",
"direct": false,
"version": null,
"ecosystem": "packagist"
},
{
"name": "rector/rector",
"direct": false,
"version": null,
"ecosystem": "packagist"
},
{
"name": "rector/type-perfect",
"direct": false,
"version": null,
"ecosystem": "packagist"
},
{
"name": "sandermuller/boost-skills",
"direct": false,
"version": null,
"ecosystem": "packagist"
},
{
"name": "sandermuller/package-boost-laravel",
"direct": false,
"version": null,
"ecosystem": "packagist"
},
{
"name": "spaze/phpstan-disallowed-calls",
"direct": false,
"version": null,
"ecosystem": "packagist"
},
{
"name": "symplify/phpstan-extensions",
"direct": false,
"version": null,
"ecosystem": "packagist"
},
{
"name": "tomasvotruba/cognitive-complexity",
"direct": false,
"version": null,
"ecosystem": "packagist"
},
{
"name": "tomasvotruba/type-coverage",
"direct": false,
"version": null,
"ecosystem": "packagist"
}
],
"collected": true,
"truncated": false,
"total_count": 28,
"direct_count": 4,
"indirect_count": 24
}
},
"maintainership": {
"issues": {
"open_prs": 0,
"merged_prs": 11,
"open_issues": 0,
"closed_ratio": 1,
"closed_issues": 2,
"closed_unmerged_prs": 5
},
"bus_factor": 2,
"bot_contributors": 2,
"top_contributors": [
{
"type": "User",
"login": "SanderMuller",
"commits": 488,
"avatar_url": "https://avatars.githubusercontent.com/u/9074391?v=4"
},
{
"type": "User",
"login": "freekmurze",
"commits": 388,
"avatar_url": "https://avatars.githubusercontent.com/u/483853?v=4"
},
{
"type": "User",
"login": "mvdnbrk",
"commits": 46,
"avatar_url": "https://avatars.githubusercontent.com/u/802681?v=4"
},
{
"type": "User",
"login": "Nielsvanpach",
"commits": 23,
"avatar_url": "https://avatars.githubusercontent.com/u/10651054?v=4"
},
{
"type": "User",
"login": "pforret",
"commits": 16,
"avatar_url": "https://avatars.githubusercontent.com/u/474312?v=4"
},
{
"type": "User",
"login": "sebastiandedeyne",
"commits": 14,
"avatar_url": "https://avatars.githubusercontent.com/u/1561079?v=4"
},
{
"type": "User",
"login": "AlexVanderbist",
"commits": 12,
"avatar_url": "https://avatars.githubusercontent.com/u/6287961?v=4"
},
{
"type": "User",
"login": "patinthehat",
"commits": 10,
"avatar_url": "https://avatars.githubusercontent.com/u/5508707?v=4"
},
{
"type": "User",
"login": "riasvdv",
"commits": 10,
"avatar_url": "https://avatars.githubusercontent.com/u/3626559?v=4"
},
{
"type": "User",
"login": "AdrianMrn",
"commits": 8,
"avatar_url": "https://avatars.githubusercontent.com/u/12762044?v=4"
}
],
"contributors_sampled": 98,
"top_contributor_share": 0.423
},
"quality_signals": {
"has_ci": true,
"has_tests": true,
"ci_workflows": [
"benchmark-comment.yml",
"benchmark.yml",
"fix-php-code-style-issues.yml",
"laravel-13-dev.yml",
"phpstan.yml",
"rector.yml",
"release-benchmark.yml",
"run-tests.yml",
"update-changelog.yml"
],
"has_docs_dir": false,
"linter_configs": [],
"has_editorconfig": true,
"has_linter_config": false,
"has_precommit_config": false
},
"security_signals": {
"lockfiles": [],
"scorecard": {
"checks": [
{
"name": "Binary-Artifacts",
"score": 10,
"reason": "no binaries found in the repo",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#binary-artifacts"
},
{
"name": "Branch-Protection",
"score": 0,
"reason": "branch protection not enabled on development/release branches",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#branch-protection"
},
{
"name": "CI-Tests",
"score": 10,
"reason": "2 out of 2 merged PRs checked by a CI test -- score normalized to 10",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#ci-tests"
},
{
"name": "CII-Best-Practices",
"score": 0,
"reason": "no effort to earn an OpenSSF best practices badge detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#cii-best-practices"
},
{
"name": "Code-Review",
"score": 0,
"reason": "Found 0/28 approved changesets -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#code-review"
},
{
"name": "Contributors",
"score": 10,
"reason": "project has 17 contributing companies or organizations",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#contributors"
},
{
"name": "Dangerous-Workflow",
"score": null,
"reason": "no workflows found",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dangerous-workflow"
},
{
"name": "Dependency-Update-Tool",
"score": 10,
"reason": "update tool detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dependency-update-tool"
},
{
"name": "Fuzzing",
"score": 0,
"reason": "project is not fuzzed",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#fuzzing"
},
{
"name": "License",
"score": 10,
"reason": "license file detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#license"
},
{
"name": "Maintained",
"score": 10,
"reason": "30 commit(s) and 1 issue activity found in the last 90 days -- score normalized to 10",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#maintained"
},
{
"name": "Packaging",
"score": null,
"reason": "packaging workflow not detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#packaging"
},
{
"name": "Pinned-Dependencies",
"score": null,
"reason": "no dependencies found",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#pinned-dependencies"
},
{
"name": "SAST",
"score": 10,
"reason": "SAST tool is run on all commits",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#sast"
},
{
"name": "Security-Policy",
"score": 0,
"reason": "security policy file not detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#security-policy"
},
{
"name": "Signed-Releases",
"score": null,
"reason": "no releases found",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#signed-releases"
},
{
"name": "Token-Permissions",
"score": null,
"reason": "No tokens found",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#token-permissions"
},
{
"name": "Vulnerabilities",
"score": 10,
"reason": "0 existing vulnerabilities detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#vulnerabilities"
}
],
"commit": "f40b23c062ca083d7978dce251db9f306ff02a90",
"ran_at": "2026-07-21T20:18:59Z",
"aggregate_score": 6.1,
"scorecard_version": "v5.5.0"
},
"has_codeql_workflow": false,
"has_security_policy": true,
"has_dependabot_config": true
}
},
"config": {
"disabled_metrics": [],
"disabled_categories": [],
"disabled_components": {}
},
"source": {
"url": "https://github.com/SanderMuller/laravel-fluent-validation",
"host": "github.com",
"name": "laravel-fluent-validation",
"owner": "SanderMuller"
},
"metrics": {
"overall": {
"key": "overall",
"band": "moderate",
"name": "Overall health",
"note": null,
"notes": [],
"value": 69,
"inputs": {
"security": 61,
"vitality": 90,
"community": 54,
"governance": 72,
"engineering": 60
},
"components": []
},
"categories": [
{
"key": "vitality",
"band": "excellent",
"name": "Vitality",
"value": 90,
"weight": 0.22,
"metrics": [
{
"key": "development_activity",
"band": "good",
"name": "Development activity",
"note": null,
"notes": [],
"value": 83,
"inputs": {
"commits_last_year": 541,
"human_commit_share": 0.97,
"days_since_last_push": 3,
"active_weeks_last_year": 27
},
"components": [
{
"key": "push_recency",
"name": "Push recency",
"detail": "last push 3 days ago",
"points": 36,
"status": "met",
"details": [
{
"code": "push_recency",
"params": {
"days": 3
}
}
],
"max_points": 36
},
{
"key": "commit_cadence",
"name": "Commit cadence",
"detail": "27/52 weeks with commits",
"points": 18.7,
"status": "partial",
"details": [
{
"code": "commit_cadence_weeks",
"params": {
"weeks": 27
}
}
],
"max_points": 36
},
{
"key": "commit_volume",
"name": "Commit volume",
"detail": "541 commits in the last year",
"points": 18,
"status": "met",
"details": [
{
"code": "commits_last_year",
"params": {
"count": 541
}
}
],
"max_points": 18
},
{
"key": "openssf_scorecard_maintained",
"name": "OpenSSF Scorecard: Maintained",
"detail": "30 commit(s) and 1 issue activity found in the last 90 days -- score normalized to 10",
"points": 10,
"status": "met",
"details": [],
"max_points": 10
}
]
},
{
"key": "release_discipline",
"band": "excellent",
"name": "Release discipline",
"note": "Excluded from scoring (no data or not applicable): OpenSSF Scorecard: Signed-Releases. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"openssf_scorecard_signed_releases"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 100,
"inputs": {
"releases_count": 78,
"latest_release_tag": "1.33.0",
"releases_from_tags": false,
"days_since_latest_release": 5,
"mean_days_between_releases": 4.9
},
"components": [
{
"key": "ships_releases",
"name": "Ships releases",
"detail": "78 releases published",
"points": 27,
"status": "met",
"details": [
{
"code": "releases_published",
"params": {
"count": 78
}
}
],
"max_points": 27
},
{
"key": "release_recency",
"name": "Release recency",
"detail": "latest release 5 days ago",
"points": 36,
"status": "met",
"details": [
{
"code": "release_recency",
"params": {
"days": 5
}
}
],
"max_points": 36
},
{
"key": "release_cadence",
"name": "Release cadence",
"detail": "a release every ~4.9 days",
"points": 27,
"status": "met",
"details": [
{
"code": "release_cadence",
"params": {
"gap": 4.9
}
}
],
"max_points": 27
},
{
"key": "openssf_scorecard_signed_releases",
"name": "OpenSSF Scorecard: Signed-Releases",
"detail": "no releases found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 10
}
]
},
{
"key": "abandonment",
"band": "excellent",
"name": "Abandonment",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"cap": null,
"state": "unverified",
"guards": [],
"signals": [],
"red_flag": false,
"multiplier_pct": 100,
"declared_reason": null,
"unverified_reason": "repository_too_young",
"unanswered_open_prs": null,
"unanswered_open_issues": null,
"days_since_last_merged_pr": null,
"days_since_last_human_commit": null,
"days_since_last_human_commit_is_floor": false
},
"components": [
{
"key": "project_is_still_maintained",
"name": "Project is still maintained",
"detail": "maintenance record not established from the collected data",
"points": 100,
"status": "met",
"details": [
{
"code": "abandonment_unverified",
"params": {}
}
],
"max_points": 100
}
]
}
],
"description": "Is the project alive — is code being written and are releases shipping?"
},
{
"key": "community",
"band": "moderate",
"name": "Community & Adoption",
"value": 54,
"weight": 0.18,
"metrics": [
{
"key": "popularity",
"band": "at_risk",
"name": "Popularity & adoption",
"note": null,
"notes": [],
"value": 38,
"inputs": {
"forks": 2,
"stars": 211,
"watchers": 2,
"growth_state": "organic",
"growth_factor_pct": 100
},
"components": [
{
"key": "stars",
"name": "Stars",
"detail": "211 stars",
"points": 37.7,
"status": "partial",
"details": [
{
"code": "stars",
"params": {
"count": 211
}
}
],
"max_points": 60
},
{
"key": "forks",
"name": "Forks",
"detail": "2 forks",
"points": 0,
"status": "missed",
"details": [
{
"code": "forks",
"params": {
"count": 2
}
}
],
"max_points": 25
},
{
"key": "watchers",
"name": "Watchers",
"detail": "2 watchers",
"points": 0,
"status": "missed",
"details": [
{
"code": "watchers",
"params": {
"count": 2
}
}
],
"max_points": 15
}
]
},
{
"key": "community_health",
"band": "good",
"name": "Community health",
"note": null,
"notes": [],
"value": 70,
"inputs": {
"has_readme": true,
"has_license": true,
"has_contributing": true,
"has_issue_template": false,
"has_code_of_conduct": false,
"has_pull_request_template": false
},
"components": [
{
"key": "readme",
"name": "README",
"detail": null,
"points": 22.5,
"status": "met",
"details": [],
"max_points": 22.5
},
{
"key": "license",
"name": "License",
"detail": "recognized license (MIT)",
"points": 22.5,
"status": "met",
"details": [
{
"code": "license_standard",
"params": {}
},
{
"code": "license_spdx",
"params": {
"spdx": "MIT"
}
}
],
"max_points": 22.5
},
{
"key": "contributing_guide",
"name": "CONTRIBUTING guide",
"detail": null,
"points": 18,
"status": "met",
"details": [],
"max_points": 18
},
{
"key": "code_of_conduct",
"name": "Code of conduct",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 13.5
},
{
"key": "issue_template",
"name": "Issue template",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.2
},
{
"key": "pr_template",
"name": "PR template",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 6.3
}
]
},
{
"key": "ecosystem_adoption",
"band": "moderate",
"name": "Ecosystem adoption (downloads)",
"note": null,
"notes": [],
"value": 56,
"inputs": {
"packages": [
"sandermuller/laravel-fluent-validation"
],
"dependents": 2,
"ecosystems": "packagist",
"total_downloads": 24354,
"monthly_downloads": 9636
},
"components": [
{
"key": "monthly_downloads",
"name": "Monthly downloads",
"detail": "9,636 downloads/month across packagist",
"points": 53.1,
"status": "partial",
"details": [
{
"code": "downloads_monthly",
"params": {
"count": 9636,
"ecosystems": "packagist"
}
}
],
"max_points": 80
},
{
"key": "registry_dependents",
"name": "Registry dependents",
"detail": "2 packages depend on it",
"points": 3.2,
"status": "partial",
"details": [
{
"code": "registry_dependents",
"params": {
"count": 2
}
}
],
"max_points": 20
}
]
}
],
"description": "Does the project have users, downloads, attention, and a welcoming setup for contributors?"
},
{
"key": "governance",
"band": "good",
"name": "Sustainability & Governance",
"value": 72,
"weight": 0.24,
"metrics": [
{
"key": "maintainer_resilience",
"band": "moderate",
"name": "Maintainer resilience (bus factor)",
"note": null,
"notes": [],
"value": 62,
"inputs": {
"bus_factor": 2,
"contributors_sampled": 98,
"top_contributor_share": 0.423
},
"components": [
{
"key": "bus_factor",
"name": "Bus factor",
"detail": "2 contributor(s) cover half of all commits",
"points": 25.2,
"status": "partial",
"details": [
{
"code": "bus_factor",
"params": {
"count": 2
}
}
],
"max_points": 54
},
{
"key": "commit_distribution",
"name": "Commit distribution",
"detail": "top contributor authored 42% of commits",
"points": 13,
"status": "partial",
"details": [
{
"code": "top_contributor_share",
"params": {
"share": 42
}
}
],
"max_points": 22.5
},
{
"key": "contributor_breadth",
"name": "Contributor breadth",
"detail": "98 contributors",
"points": 13.5,
"status": "met",
"details": [
{
"code": "contributors_sampled",
"params": {
"count": 98
}
}
],
"max_points": 13.5
},
{
"key": "openssf_scorecard_contributors",
"name": "OpenSSF Scorecard: Contributors",
"detail": "project has 17 contributing companies or organizations",
"points": 10,
"status": "met",
"details": [],
"max_points": 10
}
]
},
{
"key": "responsiveness",
"band": "good",
"name": "Issue & PR responsiveness",
"note": null,
"notes": [],
"value": 73,
"inputs": {
"merged_prs": 11,
"open_issues": 0,
"closed_issues": 2,
"issue_closed_ratio": 1,
"closed_unmerged_prs": 5
},
"components": [
{
"key": "issue_resolution",
"name": "Issue resolution",
"detail": "100% of issues closed",
"points": 46.8,
"status": "met",
"details": [
{
"code": "issues_closed_share",
"params": {
"share": 100
}
}
],
"max_points": 46.75
},
{
"key": "pr_acceptance",
"name": "PR acceptance",
"detail": "11/16 decided PRs merged",
"points": 26.3,
"status": "partial",
"details": [
{
"code": "decided_prs_merged",
"params": {
"merged": 11,
"decided": 16
}
}
],
"max_points": 38.25
},
{
"key": "openssf_scorecard_code_review",
"name": "OpenSSF Scorecard: Code-Review",
"detail": "Found 0/28 approved changesets -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
}
]
},
{
"key": "stewardship",
"band": "moderate",
"name": "Ownership & stewardship",
"note": "Excluded from scoring (no data or not applicable): Verified domain. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"verified_domain"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 59,
"inputs": {
"followers": 50,
"owner_type": "User",
"is_verified": null,
"owner_login": "SanderMuller",
"public_repos": 68,
"account_age_days": 4304
},
"components": [
{
"key": "ownership_backing",
"name": "Ownership backing",
"detail": "personal (user) account",
"points": 10,
"status": "partial",
"details": [
{
"code": "owner_personal",
"params": {}
}
],
"max_points": 30
},
{
"key": "verified_domain",
"name": "Verified domain",
"detail": "not applicable to user accounts",
"points": 0,
"status": "excluded",
"details": [
{
"code": "not_applicable_to_user_accounts",
"params": {}
}
],
"max_points": 20
},
{
"key": "owner_reach",
"name": "Owner reach",
"detail": "50 followers of SanderMuller",
"points": 12.3,
"status": "partial",
"details": [
{
"code": "owner_followers",
"params": {
"count": 50,
"login": "SanderMuller"
}
}
],
"max_points": 25
},
{
"key": "track_record",
"name": "Track record",
"detail": "68 public repos, account ~11 yr old",
"points": 25,
"status": "met",
"details": [
{
"code": "public_repos",
"params": {
"count": 68
}
},
{
"code": "account_age_years",
"params": {
"years": 11
}
}
],
"max_points": 25
}
]
},
{
"key": "package_maintenance",
"band": "excellent",
"name": "Package maintenance",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"packages": [
"sandermuller/laravel-fluent-validation"
],
"ecosystems": "packagist",
"any_deprecated": false,
"min_days_since_publish": 5
},
"components": [
{
"key": "published_resolvable",
"name": "Published & resolvable",
"detail": "1 package(s) on packagist",
"points": 25,
"status": "met",
"details": [
{
"code": "packages_published",
"params": {
"count": 1,
"ecosystems": "packagist"
}
}
],
"max_points": 25
},
{
"key": "publish_recency",
"name": "Publish recency",
"detail": "latest publish 5 days ago",
"points": 35,
"status": "met",
"details": [
{
"code": "publish_recency",
"params": {
"days": 5
}
}
],
"max_points": 35
},
{
"key": "version_history",
"name": "Version history",
"detail": "79 published versions",
"points": 20,
"status": "met",
"details": [
{
"code": "published_versions",
"params": {
"count": 79
}
}
],
"max_points": 20
},
{
"key": "not_deprecated",
"name": "Not deprecated",
"detail": "active, not deprecated or yanked",
"points": 20,
"status": "met",
"details": [
{
"code": "package_not_deprecated",
"params": {}
}
],
"max_points": 20
}
]
}
],
"description": "Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?"
},
{
"key": "engineering",
"band": "moderate",
"name": "Engineering Quality",
"value": 60,
"weight": 0.2,
"metrics": [
{
"key": "engineering_practices",
"band": "good",
"name": "Engineering practices",
"note": null,
"notes": [],
"value": 74,
"inputs": {
"has_ci": true,
"has_tests": true,
"has_editorconfig": true,
"has_linter_config": false,
"has_precommit_config": false
},
"components": [
{
"key": "ci_workflows",
"name": "CI workflows",
"detail": "9 workflow(s)",
"points": 24,
"status": "met",
"details": [
{
"code": "ci_workflows",
"params": {
"count": 9
}
}
],
"max_points": 24
},
{
"key": "tests_present",
"name": "Tests present",
"detail": null,
"points": 24,
"status": "met",
"details": [],
"max_points": 24
},
{
"key": "linter_config",
"name": "Linter config",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 16
},
{
"key": "pre_commit_hooks",
"name": "Pre-commit hooks",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 9.6
},
{
"key": "editorconfig",
"name": ".editorconfig",
"detail": null,
"points": 6.4,
"status": "met",
"details": [],
"max_points": 6.4
},
{
"key": "openssf_scorecard_ci_tests",
"name": "OpenSSF Scorecard: CI-Tests",
"detail": "2 out of 2 merged PRs checked by a CI test -- score normalized to 10",
"points": 20,
"status": "met",
"details": [],
"max_points": 20
}
]
},
{
"key": "documentation",
"band": "at_risk",
"name": "Documentation",
"note": null,
"notes": [],
"value": 40,
"inputs": {
"topics": [],
"has_wiki": false,
"homepage": null,
"has_readme": true,
"has_docs_dir": false,
"has_description": true
},
"components": [
{
"key": "readme",
"name": "README",
"detail": null,
"points": 30,
"status": "met",
"details": [],
"max_points": 30
},
{
"key": "documentation_directory",
"name": "Documentation directory",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 25
},
{
"key": "documentation_homepage_site",
"name": "Documentation / homepage site",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
},
{
"key": "repository_description",
"name": "Repository description",
"detail": null,
"points": 10,
"status": "met",
"details": [],
"max_points": 10
},
{
"key": "topics",
"name": "Topics",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
},
{
"key": "wiki",
"name": "Wiki",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
}
]
}
],
"description": "Are baseline engineering and documentation practices in place?"
},
{
"key": "security",
"band": "moderate",
"name": "Security",
"value": 61,
"weight": 0.16,
"metrics": [
{
"key": "security_posture",
"band": "moderate",
"name": "Security posture",
"note": "Excluded from scoring (no data or not applicable): Dangerous-Workflow, Packaging, Pinned-Dependencies, Signed-Releases, Token-Permissions. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"dangerous_workflow",
"packaging",
"pinned_dependencies",
"signed_releases",
"token_permissions"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 61,
"inputs": {
"source": "openssf_scorecard",
"checks_evaluated": 13,
"scorecard_version": "v5.5.0",
"checks_inconclusive": 5,
"scorecard_aggregate": 6.1
},
"components": [
{
"key": "binary_artifacts",
"name": "Binary-Artifacts",
"detail": "no binaries found in the repo",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "branch_protection",
"name": "Branch-Protection",
"detail": "branch protection not enabled on development/release branches",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "ci_tests",
"name": "CI-Tests",
"detail": "2 out of 2 merged PRs checked by a CI test -- score normalized to 10",
"points": 2.5,
"status": "met",
"details": [],
"max_points": 2.5
},
{
"key": "cii_best_practices",
"name": "CII-Best-Practices",
"detail": "no effort to earn an OpenSSF best practices badge detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 2.5
},
{
"key": "code_review",
"name": "Code-Review",
"detail": "Found 0/28 approved changesets -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "contributors",
"name": "Contributors",
"detail": "project has 17 contributing companies or organizations",
"points": 2.5,
"status": "met",
"details": [],
"max_points": 2.5
},
{
"key": "dangerous_workflow",
"name": "Dangerous-Workflow",
"detail": "no workflows found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 10
},
{
"key": "dependency_update_tool",
"name": "Dependency-Update-Tool",
"detail": "update tool detected",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "fuzzing",
"name": "Fuzzing",
"detail": "project is not fuzzed",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "license",
"name": "License",
"detail": "license file detected",
"points": 2.5,
"status": "met",
"details": [],
"max_points": 2.5
},
{
"key": "maintained",
"name": "Maintained",
"detail": "30 commit(s) and 1 issue activity found in the last 90 days -- score normalized to 10",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "packaging",
"name": "Packaging",
"detail": "packaging workflow not detected",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 5
},
{
"key": "pinned_dependencies",
"name": "Pinned-Dependencies",
"detail": "no dependencies found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 5
},
{
"key": "sast",
"name": "SAST",
"detail": "SAST tool is run on all commits",
"points": 5,
"status": "met",
"details": [],
"max_points": 5
},
{
"key": "security_policy",
"name": "Security-Policy",
"detail": "security policy file not detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "signed_releases",
"name": "Signed-Releases",
"detail": "no releases found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 7.5
},
{
"key": "token_permissions",
"name": "Token-Permissions",
"detail": "No tokens found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 7.5
},
{
"key": "vulnerabilities",
"name": "Vulnerabilities",
"detail": "0 existing vulnerabilities detected",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
}
]
},
{
"key": "high_risk_jurisdiction_exposure",
"band": "excellent",
"name": "High-Risk Jurisdiction Exposure",
"note": "Only high-confidence self-published location evidence affects this multiplier. Ambiguous matches are review-only; country evidence is not proof of nationality, citizenship, legal registration, malicious intent, or sanctions status.",
"notes": [
{
"code": "jurisdiction_evidence_limits",
"params": {}
}
],
"value": 100,
"inputs": {
"meaning": "self-published location evidence; not nationality or citizenship",
"red_flag": false,
"exposures": [],
"policy_countries": [
"Russia",
"Iran",
"North Korea"
],
"review_only_matches": 0,
"assessed_self_published_locations": 19
},
"components": [
{
"key": "policy_exposure_multiplier",
"name": "Policy exposure multiplier",
"detail": "no confirmed policy-scope location match",
"points": 100,
"status": "met",
"details": [
{
"code": "jurisdiction_no_match",
"params": {}
}
],
"max_points": 100
}
]
}
],
"description": "Are visible security and supply-chain practices strong, with no malicious dependency and no unresolved high-risk jurisdiction exposure?"
},
{
"key": "ai_readiness",
"band": "moderate",
"name": "AI Readiness",
"value": 58,
"weight": 0,
"metrics": [
{
"key": "ai_agent_context",
"band": "good",
"name": "Agent context & guidance",
"note": null,
"notes": [],
"value": 78,
"inputs": {
"has_llms_txt": false,
"legible_history_share": 0.629,
"agent_instruction_files": [
"AGENTS.md",
"CLAUDE.md"
],
"agent_instruction_max_bytes": 13555
},
"components": [
{
"key": "agent_instructions",
"name": "Agent instructions",
"detail": "AGENTS.md, CLAUDE.md",
"points": 45,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "AGENTS.md, CLAUDE.md"
}
}
],
"max_points": 45
},
{
"key": "machine_readable_docs_llms_txt",
"name": "Machine-readable docs (llms.txt)",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
},
{
"key": "legible_commit_history",
"name": "Legible commit history",
"detail": "61 of 97 human commits state their intent (structured subject or explanatory body)",
"points": 33.5,
"status": "partial",
"details": [
{
"code": "legible_history",
"params": {
"legible": 61,
"sampled": 97
}
}
],
"max_points": 40
}
]
},
{
"key": "ai_verify_loop",
"band": "at_risk",
"name": "Verify loop (build / test / typecheck)",
"note": "Excluded from scoring (no data or not applicable): OpenSSF Scorecard: Pinned-Dependencies. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"openssf_scorecard_pinned_dependencies"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 44,
"inputs": {
"has_nix": false,
"has_tests": true,
"lockfiles": [],
"has_dockerfile": false,
"typed_language": false,
"bootstrap_files": [],
"has_devcontainer": false,
"has_linter_config": false,
"typecheck_configs": [],
"agent_commit_share": 0.06,
"toolchain_manifests": [],
"dependency_bot_commit_share": 0.03
},
"components": [
{
"key": "one_command_bootstrap",
"name": "One-command bootstrap",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 18
},
{
"key": "automated_tests",
"name": "Automated tests",
"detail": null,
"points": 22,
"status": "met",
"details": [],
"max_points": 22
},
{
"key": "lint_format_config",
"name": "Lint / format config",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 11
},
{
"key": "static_type_checking",
"name": "Static type checking",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 11
},
{
"key": "reproducible_environment",
"name": "Reproducible environment",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
},
{
"key": "demonstrated_agent_practice",
"name": "Demonstrated agent practice",
"detail": "6 of the last 100 commits agent-authored or agent-credited",
"points": 10,
"status": "met",
"details": [
{
"code": "agent_authored_commits",
"params": {
"count": 6,
"sampled": 100
}
}
],
"max_points": 10
},
{
"key": "automated_maintenance",
"name": "Automated maintenance",
"detail": "3 of the last 100 commits are automated dependency updates",
"points": 8,
"status": "met",
"details": [
{
"code": "dependency_bot_commits",
"params": {
"count": 3,
"sampled": 100
}
}
],
"max_points": 8
},
{
"key": "openssf_scorecard_pinned_dependencies",
"name": "OpenSSF Scorecard: Pinned-Dependencies",
"detail": "no dependencies found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 10
}
]
},
{
"key": "ai_code_legibility",
"band": "moderate",
"name": "Code legibility for models",
"note": null,
"notes": [],
"value": 54,
"inputs": {
"primary_language": "PHP",
"largest_source_bytes": 105804,
"source_files_sampled": 158,
"oversized_source_files": 2
},
"components": [
{
"key": "type_checkable_code",
"name": "Type-checkable code",
"detail": "PHP without a type-check config",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_typecheck_config_language",
"params": {
"language": "PHP"
}
}
],
"max_points": 45
},
{
"key": "manageable_file_sizes",
"name": "Manageable file sizes",
"detail": "2/158 source files over 60KB",
"points": 54.3,
"status": "partial",
"details": [
{
"code": "oversized_source_files",
"params": {
"kb": 60,
"sampled": 158,
"oversized": 2
}
}
],
"max_points": 55
}
]
}
],
"description": "How well is the repo equipped to be developed and maintained with AI coding agents? An independent, experimental badge — weight 0.0, so it is surfaced on its own and does not affect the overall health score."
}
],
"metrics_version": "1.13.0"
},
"warnings": [
"No resolved dependencies carried a version and a supported ecosystem"
],
"report_type": "repository",
"generated_at": "2026-07-21T20:19:17.200147Z",
"schema_version": "0.23.0",
"badge_url": "https://raw.githubusercontent.com/inspect-software/badges/main/v1/s/SanderMuller/laravel-fluent-validation.svg",
"full_name": "SanderMuller/laravel-fluent-validation",
"license_state": "standard",
"license_spdx": "MIT"
}