ShipfoxHQ / shipfox

本报告未能采集到解析后的依赖集合：GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository

安装 npm:@shipfox/biome@1.10.1 会引入 16 个包（直接与传递）：其中 0 个存在已知公告，0 个为直接依赖。

没有已知公告影响已评估的依赖。

公告表示依赖图中记录的版本落入某条公告的受影响范围。可达性未经分析，且依赖图包含开发与测试的版本固定——某项发现可能只涉及工具链而非交付的软件。

{
  "data": {
    "repo": {
      "topics": [],
      "is_fork": false,
      "size_kb": 23606,
      "has_wiki": true,
      "homepage": "https://react-ui-ten-nu.vercel.app",
      "languages": {
        "CSS": 52289,
        "HCL": 9106,
        "MDX": 279782,
        "HTML": 470,
        "Shell": 16462,
        "Mermaid": 1052,
        "Dockerfile": 14736,
        "JavaScript": 236497,
        "TypeScript": 12872803
      },
      "pushed_at": "2026-08-01T16:45:55Z",
      "created_at": "2026-04-20T09:54:13Z",
      "owner_type": "Organization",
      "updated_at": "2026-08-01T13:35:53Z",
      "description": null,
      "is_archived": false,
      "is_disabled": false,
      "license_spdx": "MIT",
      "default_branch": "main",
      "license_spdx_raw": "MIT",
      "primary_language": "TypeScript",
      "significant_languages": [
        "TypeScript"
      ]
    },
    "owner": {
      "blog": "https://www.shipfox.io",
      "name": "Shipfox",
      "type": "Organization",
      "login": "ShipfoxHQ",
      "company": null,
      "location": "France",
      "followers": 2,
      "avatar_url": "https://avatars.githubusercontent.com/u/163036520?v=4",
      "created_at": "2024-03-11T18:10:18Z",
      "is_verified": null,
      "public_repos": 6,
      "account_age_days": 873
    },
    "license": {
      "state": "standard",
      "spdx_id": "MIT",
      "raw_spdx": "MIT",
      "file_present": true,
      "scorecard_found": true,
      "profile_has_license": true
    },
    "activity": {
      "releases": [
        {
          "tag": "@shipfox/client-workspace-settings@5.0.0",
          "kind": "other",
          "published_at": "2026-07-22T15:00:13Z"
        },
        {
          "tag": "@shipfox/client-workflows@5.0.0",
          "kind": "other",
          "published_at": "2026-07-22T15:00:11Z"
        },
        {
          "tag": "@shipfox/client-triggers@5.0.0",
          "kind": "other",
          "published_at": "2026-07-22T15:00:08Z"
        },
        {
          "tag": "@shipfox/client-shell@5.0.0",
          "kind": "other",
          "published_at": "2026-07-22T15:00:04Z"
        },
        {
          "tag": "@shipfox/client-secrets@5.0.0",
          "kind": "other",
          "published_at": "2026-07-22T15:00:02Z"
        },
        {
          "tag": "@shipfox/client-runners@5.0.0",
          "kind": "other",
          "published_at": "2026-07-22T14:59:58Z"
        },
        {
          "tag": "@shipfox/client-projects@5.0.0",
          "kind": "other",
          "published_at": "2026-07-22T14:59:55Z"
        },
        {
          "tag": "@shipfox/client-logs@5.0.0",
          "kind": "other",
          "published_at": "2026-07-22T14:59:52Z"
        },
        {
          "tag": "@shipfox/client-invitations@5.0.0",
          "kind": "other",
          "published_at": "2026-07-22T14:59:49Z"
        },
        {
          "tag": "@shipfox/client-integrations@5.0.0",
          "kind": "other",
          "published_at": "2026-07-22T14:59:46Z"
        },
        {
          "tag": "@shipfox/client-features@5.0.0",
          "kind": "other",
          "published_at": "2026-07-22T14:59:43Z"
        },
        {
          "tag": "@shipfox/client-auth@5.0.0",
          "kind": "other",
          "published_at": "2026-07-22T14:59:40Z"
        },
        {
          "tag": "@shipfox/client-agent@5.0.0",
          "kind": "other",
          "published_at": "2026-07-22T14:59:37Z"
        },
        {
          "tag": "@shipfox/api-workflows-dto@8.0.0",
          "kind": "other",
          "published_at": "2026-07-22T14:59:35Z"
        },
        {
          "tag": "@shipfox/api-workflows@8.0.0",
          "kind": "other",
          "published_at": "2026-07-22T14:59:32Z"
        },
        {
          "tag": "@shipfox/api-triggers@8.0.0",
          "kind": "other",
          "published_at": "2026-07-22T14:59:28Z"
        },
        {
          "tag": "@shipfox/api-server@8.0.0",
          "kind": "other",
          "published_at": "2026-07-22T14:59:25Z"
        },
        {
          "tag": "@shipfox/api-secrets@8.0.0",
          "kind": "other",
          "published_at": "2026-07-22T14:59:23Z"
        },
        {
          "tag": "@shipfox/api-runners@8.0.0",
          "kind": "other",
          "published_at": "2026-07-22T14:59:19Z"
        },
        {
          "tag": "@shipfox/api-projects-dto@8.0.0",
          "kind": "other",
          "published_at": "2026-07-22T14:59:16Z"
        },
        {
          "tag": "@shipfox/api-projects@8.0.0",
          "kind": "other",
          "published_at": "2026-07-22T14:59:13Z"
        },
        {
          "tag": "@shipfox/api-logs@8.0.0",
          "kind": "other",
          "published_at": "2026-07-22T14:59:10Z"
        },
        {
          "tag": "@shipfox/api-integration-webhook-dto@8.0.0",
          "kind": "other",
          "published_at": "2026-07-22T14:59:07Z"
        },
        {
          "tag": "@shipfox/api-integration-webhook@8.0.0",
          "kind": "other",
          "published_at": "2026-07-22T14:59:04Z"
        },
        {
          "tag": "@shipfox/api-integration-slack-dto@8.0.0",
          "kind": "other",
          "published_at": "2026-07-22T14:59:01Z"
        },
        {
          "tag": "@shipfox/api-integration-slack@8.0.0",
          "kind": "other",
          "published_at": "2026-07-22T14:58:58Z"
        },
        {
          "tag": "@shipfox/api-integration-sentry-dto@8.0.0",
          "kind": "other",
          "published_at": "2026-07-22T14:58:55Z"
        },
        {
          "tag": "@shipfox/api-integration-sentry@8.0.0",
          "kind": "other",
          "published_at": "2026-07-22T14:58:52Z"
        },
        {
          "tag": "@shipfox/api-integration-linear-dto@8.0.0",
          "kind": "other",
          "published_at": "2026-07-22T14:58:49Z"
        },
        {
          "tag": "@shipfox/api-integration-linear@8.0.0",
          "kind": "other",
          "published_at": "2026-07-22T14:58:48Z"
        },
        {
          "tag": "@shipfox/api-integration-jira-dto@8.0.0",
          "kind": "other",
          "published_at": "2026-07-22T14:58:43Z"
        },
        {
          "tag": "@shipfox/api-integration-jira@8.0.0",
          "kind": "other",
          "published_at": "2026-07-22T14:58:40Z"
        },
        {
          "tag": "@shipfox/api-integration-github-dto@8.0.0",
          "kind": "other",
          "published_at": "2026-07-22T14:58:37Z"
        },
        {
          "tag": "@shipfox/api-integration-github@8.0.0",
          "kind": "other",
          "published_at": "2026-07-22T14:58:34Z"
        },
        {
          "tag": "@shipfox/api-integration-gitea-dto@8.0.0",
          "kind": "other",
          "published_at": "2026-07-22T14:58:31Z"
        },
        {
          "tag": "@shipfox/api-integration-gitea@8.0.0",
          "kind": "other",
          "published_at": "2026-07-22T14:58:28Z"
        },
        {
          "tag": "@shipfox/api-integration-core-dto@8.0.0",
          "kind": "other",
          "published_at": "2026-07-22T14:58:25Z"
        },
        {
          "tag": "@shipfox/api-integration-core@8.0.0",
          "kind": "other",
          "published_at": "2026-07-22T14:58:22Z"
        },
        {
          "tag": "@shipfox/api-definitions@8.0.0",
          "kind": "other",
          "published_at": "2026-07-22T14:58:19Z"
        },
        {
          "tag": "@shipfox/annotations@8.0.0",
          "kind": "other",
          "published_at": "2026-07-22T14:58:16Z"
        },
        {
          "tag": "@shipfox/api-agent-dto@8.0.0",
          "kind": "other",
          "published_at": "2026-07-22T14:58:13Z"
        },
        {
          "tag": "@shipfox/api-agent@8.0.0",
          "kind": "other",
          "published_at": "2026-07-22T14:58:11Z"
        },
        {
          "tag": "@shipfox/node-temporal@0.4.0",
          "kind": "other",
          "published_at": "2026-07-22T13:21:13Z"
        },
        {
          "tag": "@shipfox/node-opentelemetry@0.6.0",
          "kind": "other",
          "published_at": "2026-07-22T13:21:10Z"
        },
        {
          "tag": "@shipfox/node-module@0.5.0",
          "kind": "other",
          "published_at": "2026-07-22T13:21:07Z"
        },
        {
          "tag": "@shipfox/node-mailer@0.2.1",
          "kind": "other",
          "published_at": "2026-07-22T13:21:04Z"
        },
        {
          "tag": "@shipfox/node-fastify@0.3.0",
          "kind": "other",
          "published_at": "2026-07-22T13:21:01Z"
        },
        {
          "tag": "@shipfox/node-error-monitoring@0.2.0",
          "kind": "other",
          "published_at": "2026-07-22T13:20:58Z"
        },
        {
          "tag": "@shipfox/client-workspace-settings@4.0.0",
          "kind": "other",
          "published_at": "2026-07-22T13:20:55Z"
        },
        {
          "tag": "@shipfox/client-workflows@4.0.0",
          "kind": "other",
          "published_at": "2026-07-22T13:20:52Z"
        },
        {
          "tag": "@shipfox/client-ui@4.0.0",
          "kind": "other",
          "published_at": "2026-07-22T13:20:49Z"
        },
        {
          "tag": "@shipfox/client-triggers@4.0.0",
          "kind": "other",
          "published_at": "2026-07-22T13:20:46Z"
        },
        {
          "tag": "@shipfox/client-shell@4.0.0",
          "kind": "other",
          "published_at": "2026-07-22T13:20:43Z"
        },
        {
          "tag": "@shipfox/client-secrets@4.0.0",
          "kind": "other",
          "published_at": "2026-07-22T13:20:40Z"
        },
        {
          "tag": "@shipfox/client-runners@4.0.0",
          "kind": "other",
          "published_at": "2026-07-22T13:20:37Z"
        },
        {
          "tag": "@shipfox/client-projects@4.0.0",
          "kind": "other",
          "published_at": "2026-07-22T13:20:34Z"
        },
        {
          "tag": "@shipfox/client-logs@4.0.0",
          "kind": "other",
          "published_at": "2026-07-22T13:20:31Z"
        },
        {
          "tag": "@shipfox/client-invitations@4.0.0",
          "kind": "other",
          "published_at": "2026-07-22T13:20:28Z"
        },
        {
          "tag": "@shipfox/client-integrations@4.0.0",
          "kind": "other",
          "published_at": "2026-07-22T13:20:25Z"
        },
        {
          "tag": "@shipfox/client-features@4.0.0",
          "kind": "other",
          "published_at": "2026-07-22T13:20:22Z"
        },
        {
          "tag": "@shipfox/client-auth@4.0.0",
          "kind": "other",
          "published_at": "2026-07-22T13:20:19Z"
        },
        {
          "tag": "@shipfox/client-api@4.0.0",
          "kind": "other",
          "published_at": "2026-07-22T13:20:16Z"
        },
        {
          "tag": "@shipfox/client-agent@4.0.0",
          "kind": "other",
          "published_at": "2026-07-22T13:20:13Z"
        },
        {
          "tag": "@shipfox/api-workspaces@7.1.0",
          "kind": "other",
          "published_at": "2026-07-22T13:20:10Z"
        },
        {
          "tag": "@shipfox/api-workflows@7.1.0",
          "kind": "other",
          "published_at": "2026-07-22T13:20:07Z"
        },
        {
          "tag": "@shipfox/api-triggers@7.1.0",
          "kind": "other",
          "published_at": "2026-07-22T13:20:04Z"
        },
        {
          "tag": "@shipfox/api-server@7.1.0",
          "kind": "other",
          "published_at": "2026-07-22T13:20:01Z"
        },
        {
          "tag": "@shipfox/api-secrets@7.1.0",
          "kind": "other",
          "published_at": "2026-07-22T13:19:58Z"
        },
        {
          "tag": "@shipfox/api-runners@7.1.0",
          "kind": "other",
          "published_at": "2026-07-22T13:19:55Z"
        },
        {
          "tag": "@shipfox/api-projects@7.1.0",
          "kind": "other",
          "published_at": "2026-07-22T13:19:52Z"
        },
        {
          "tag": "@shipfox/api-logs@7.1.0",
          "kind": "other",
          "published_at": "2026-07-22T13:19:49Z"
        },
        {
          "tag": "@shipfox/api-integration-webhook@7.1.0",
          "kind": "other",
          "published_at": "2026-07-22T13:19:46Z"
        },
        {
          "tag": "@shipfox/api-integration-slack@7.1.0",
          "kind": "other",
          "published_at": "2026-07-22T13:19:43Z"
        },
        {
          "tag": "@shipfox/api-integration-sentry@7.1.0",
          "kind": "other",
          "published_at": "2026-07-22T13:19:40Z"
        },
        {
          "tag": "@shipfox/api-integration-linear@7.1.0",
          "kind": "other",
          "published_at": "2026-07-22T13:19:37Z"
        },
        {
          "tag": "@shipfox/api-integration-jira@7.1.0",
          "kind": "other",
          "published_at": "2026-07-22T13:19:34Z"
        },
        {
          "tag": "@shipfox/api-integration-github@7.1.0",
          "kind": "other",
          "published_at": "2026-07-22T13:19:31Z"
        },
        {
          "tag": "@shipfox/api-integration-gitea@7.1.0",
          "kind": "other",
          "published_at": "2026-07-22T13:19:28Z"
        },
        {
          "tag": "@shipfox/api-integration-core@7.1.0",
          "kind": "other",
          "published_at": "2026-07-22T13:19:25Z"
        },
        {
          "tag": "@shipfox/api-email-challenges@0.3.0",
          "kind": "other",
          "published_at": "2026-07-22T13:19:22Z"
        },
        {
          "tag": "@shipfox/api-dispatcher@7.1.0",
          "kind": "other",
          "published_at": "2026-07-22T13:19:19Z"
        },
        {
          "tag": "@shipfox/api-definitions@7.1.0",
          "kind": "other",
          "published_at": "2026-07-22T13:19:16Z"
        },
        {
          "tag": "@shipfox/api-auth-dto@7.1.0",
          "kind": "other",
          "published_at": "2026-07-22T13:19:13Z"
        },
        {
          "tag": "@shipfox/api-auth-context@7.1.0",
          "kind": "other",
          "published_at": "2026-07-22T13:19:10Z"
        },
        {
          "tag": "@shipfox/api-auth@7.1.0",
          "kind": "other",
          "published_at": "2026-07-22T13:19:07Z"
        },
        {
          "tag": "@shipfox/annotations@7.1.0",
          "kind": "other",
          "published_at": "2026-07-22T13:19:04Z"
        },
        {
          "tag": "@shipfox/api-agent@7.1.0",
          "kind": "other",
          "published_at": "2026-07-22T13:19:01Z"
        },
        {
          "tag": "@shipfox/application-release@0.1.5",
          "kind": "other",
          "published_at": "2026-07-22T08:51:39Z"
        },
        {
          "tag": "@shipfox/node-auth-root-key@0.2.1",
          "kind": "other",
          "published_at": "2026-07-22T08:51:36Z"
        },
        {
          "tag": "@shipfox/api-workflows@7.0.2",
          "kind": "other",
          "published_at": "2026-07-22T08:51:33Z"
        },
        {
          "tag": "@shipfox/api-server@7.0.2",
          "kind": "other",
          "published_at": "2026-07-22T08:51:30Z"
        },
        {
          "tag": "@shipfox/api-runners@7.0.2",
          "kind": "other",
          "published_at": "2026-07-22T08:51:27Z"
        },
        {
          "tag": "@shipfox/api-email-challenges@0.2.3",
          "kind": "other",
          "published_at": "2026-07-22T08:51:24Z"
        },
        {
          "tag": "@shipfox/api-auth@7.0.2",
          "kind": "other",
          "published_at": "2026-07-22T08:51:21Z"
        },
        {
          "tag": "@shipfox/react-ui@0.3.5",
          "kind": "other",
          "published_at": "2026-07-22T08:07:15Z"
        },
        {
          "tag": "@shipfox/node-email@0.3.1",
          "kind": "other",
          "published_at": "2026-07-22T08:07:12Z"
        },
        {
          "tag": "@shipfox/client-workspace-settings@3.0.1",
          "kind": "other",
          "published_at": "2026-07-22T08:07:09Z"
        },
        {
          "tag": "@shipfox/client-workflows@3.0.1",
          "kind": "other",
          "published_at": "2026-07-22T08:07:06Z"
        },
        {
          "tag": "@shipfox/client-ui@3.0.1",
          "kind": "other",
          "published_at": "2026-07-22T08:07:03Z"
        },
        {
          "tag": "@shipfox/client-triggers@3.0.1",
          "kind": "other",
          "published_at": "2026-07-22T08:07:00Z"
        }
      ],
      "recent_commits": [
        {
          "oid": "c2a8e54af1be319bb16d4d5535b80b5e6eca2245",
          "body": "* Normalize checkout target templates at step dispatch\n\nNormalize explicit checkout target fields as server-evaluated templates while keeping job-level checkout limited to supported permissions and credential settings. Update the published schema and docs to match the runtime contract.\n\nRefs ENG-143\n[…]\ne reference docs.\n\n* Complete checkout variable and model fixes\n\nCollect checkout target variable references before run creation and keep job checkout models limited to the fields the job path honors.",
          "is_bot": false,
          "headline": "Normalize checkout targets for step-dispatch templating (#1185)",
          "author_name": "Noé Charmet",
          "author_login": "noe-charmet",
          "committed_at": "2026-08-01T13:35:30Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "adf07e7f5bd4cfc0695bd03e58e405cccd30cb62",
          "body": "* Enforce literal-only workflow and job names\n\nRefs ENG-1397\n\n* Align literal names with schema and runtime\n\nUnescape escaped literal names during normalization and project the same\nconstraint into the public workflow JSON Schema.\n\nRefs ENG-1397",
          "is_bot": false,
          "headline": "Cut over to literal-only workflow and job names (#1183)",
          "author_name": "Noé Charmet",
          "author_login": "noe-charmet",
          "committed_at": "2026-08-01T09:11:35Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "9ebc5b436a1d517aca3b7d180b7656191ff8b872",
          "body": "… (#1180)\n\n* Add workspace slug availability endpoint\n\n* Centralize rate-limit persistence and error translation\n\n* Centralize rate-limit pre-handler orchestration",
          "is_bot": false,
          "headline": "[api-workspaces] Add authenticated workspace slug availability checks…",
          "author_name": "Noé Charmet",
          "author_login": "noe-charmet",
          "committed_at": "2026-07-31T15:11:01Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "cb0abfa456cc1c0529042f57f4e4ea34d1c8b7b7",
          "body": "Persist normalized trigger project, repository, ref, and commit facts and keep\noptional trigger enrichment from blocking run creation.\n\nRefs ENG-1430",
          "is_bot": false,
          "headline": "Expose trigger references in workflow context (#1182)",
          "author_name": "Noé Charmet",
          "author_login": "noe-charmet",
          "committed_at": "2026-07-31T14:47:30Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "7c4116e69befb07dbc87637aab3541590fd8bdc3",
          "body": null,
          "is_bot": false,
          "headline": "Align expression context types with runtime (#1181)",
          "author_name": "Noé Charmet",
          "author_login": "noe-charmet",
          "committed_at": "2026-07-31T14:39:22Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "13fa279ab1e349c5cb5474c78874f8ba9722da2f",
          "body": "* Display workflow run numbers in client workflows\n\nReplace colliding UUID short IDs with per-workflow run numbers in list and detail metadata.\n\nRefs ENG-1451\n\n* Separate standalone workflow run numbers\n\nKeep run summary metadata visually separated from its timestamp when no other metadata is present.\\n\\nRefs ENG-1451\n\n* Clarify the workflow run API release note\n\nDocument that the exported UUID short-id surface is replaced by workflow names and numbers.\\n\\nRefs ENG-1451",
          "is_bot": false,
          "headline": "[client-workflows] Display workflow run numbers in run history (#1177)",
          "author_name": "Noé Charmet",
          "author_login": "noe-charmet",
          "committed_at": "2026-07-31T11:16:10Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "f5a396192af1f78c6c472f41fec6658ebcb6e2e6",
          "body": "* Document provisioner template families\n\nRewrite the Docker and EC2 examples around independent matrix families, align\noperator docs with defaults, cost, shadowing, and strictness semantics, and\nload both fixtures through their real provider loaders.\n\nRefs ENG-1326\n\n* Clarify matrix template key derivation",
          "is_bot": false,
          "headline": "Document provisioner template families (#1179)",
          "author_name": "Noé Charmet",
          "author_login": "noe-charmet",
          "committed_at": "2026-07-31T11:13:54Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "4eb18b83d558b181e6a53e167ad1376ef4c5922c",
          "body": "* Add project slugs across API and client\n\nPersist workspace-scoped slugs, expose project updates, and wire slug generation through project creation and test helpers.\n\nRefs ENG-1448\n\n* Harden project slug review fixes\n\nKeep legacy project-created outbox payloads dispatchable, make E2E slug fallback \n[…]\n client slug errors.\\n\\nRefs ENG-1448\n\n* Fix onboarding project test fixture slug\n\n* Fix workflow project test fixture slug\n\n* Improve project slug field accessibility\n\n* Show live project URL preview",
          "is_bot": false,
          "headline": "Add workspace-scoped project slugs end to end (#1170)",
          "author_name": "Noé Charmet",
          "author_login": "noe-charmet",
          "committed_at": "2026-07-31T08:19:21Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "4d246d4706c2e7f7be15062c4e395857e4d7c56e",
          "body": "Use field-specific contracts across validation and runtime evaluation, and make listener snapshots follow the corresponding listener field.\n\nRefs ENG-1454",
          "is_bot": false,
          "headline": "Align predicate validation with runtime contexts (#1178)",
          "author_name": "Noé Charmet",
          "author_login": "noe-charmet",
          "committed_at": "2026-07-31T08:15:16Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "44440790ae6f81a1aace45a58e21c3bf72642cec",
          "body": "* Warn on re-evaluating shell commands\n\nSurface unsafe workflow interpolations as validation warnings instead of silently dropping them.\n\nRefs ENG-1411\n\n* Preserve every re-evaluating command warning\n\nKeep all unsafe interpolations and repeated code-position matches in validation diagnostics.\n\nRefs ENG-1411",
          "is_bot": false,
          "headline": "[api-definitions] Warn on re-evaluating shell commands (#1175)",
          "author_name": "Noé Charmet",
          "author_login": "noe-charmet",
          "committed_at": "2026-07-31T07:22:02Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "e1efaee93e250973cdf522327dece2ddfc4bb143",
          "body": "* Add workspace slugs end to end\n\nRefs ENG-1447\n\n* Fix workspace settings fixture formatting\n\nRefs ENG-1447\n\n* Address workspace slug review comments\n\nRefs ENG-1447\n\n* Show live workspace URL preview",
          "is_bot": false,
          "headline": "[api-workspaces] Add workspace slugs end to end (#1169)",
          "author_name": "Noé Charmet",
          "author_login": "noe-charmet",
          "committed_at": "2026-07-31T07:11:47Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "edb4a18f9076fd24b840c17c84fd9f02b89be038",
          "body": "* Present static and resolved workflow names in run UI\n\n* Keep resolved names as run UI labels\n\nRemove parent workflow and job names from run and execution surfaces while retaining the static job name fallback for the job node graph.\n\nRefs ENG-1394\n\n* Use execution name as job card title\n\nDo not fal\n[…]\n394\n\n* Expose display names on job executions\n\nKeep display-name ownership on the entity being rendered: jobs provide\nstatic graph labels and job executions provide resolved run labels.\n\nRefs ENG-1394",
          "is_bot": false,
          "headline": "[client-workflows] Present resolved names in run UI (#1167)",
          "author_name": "Noé Charmet",
          "author_login": "noe-charmet",
          "committed_at": "2026-07-31T07:10:41Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "5d2c9cfd071f8dd9dfddfd23fffa319cd9310c9b",
          "body": "* Carry checkout steps through workflow materialization\n\nNormalize checkout step kinds into the workflow model, resolve runner config, and materialize checkout rows with setup error categories.\n\nRefs ENG-1428\n\n* Keep checkout model templates compatible",
          "is_bot": false,
          "headline": "Carry checkout steps through workflow materialization (#1168)",
          "author_name": "Noé Charmet",
          "author_login": "noe-charmet",
          "committed_at": "2026-07-31T06:44:16Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "94b9b0e6eb6475c3ded6dd2f99605f94709b9b08",
          "body": "Document field-specific predicate contexts and preserve accurate warnings for infrastructure selectors and shell re-evaluation.",
          "is_bot": false,
          "headline": "Rewrite expressions context reference (#1173)",
          "author_name": "Noé Charmet",
          "author_login": "noe-charmet",
          "committed_at": "2026-07-31T06:35:29Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "51ce56d680e349437abb6431daf4b4b50b15b368",
          "body": null,
          "is_bot": false,
          "headline": "[api-runners] Stabilize concurrent reaper test (#1174)",
          "author_name": "Noé Charmet",
          "author_login": "noe-charmet",
          "committed_at": "2026-07-31T06:35:13Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "d77baaa143ec4a9087f83dfe9c7e0d9b4e2117c3",
          "body": "Allocate per-definition run numbers transactionally and expose them through\nworkflow DTOs and expression contexts.\n\nRefs ENG-1446",
          "is_bot": false,
          "headline": "Add sequential numbers to workflow runs (#1159)",
          "author_name": "Noé Charmet",
          "author_login": "noe-charmet",
          "committed_at": "2026-07-31T06:18:15Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "24ef4759c62834817972a647b55451569fc039b7",
          "body": "* Add normalized source-control trigger references\n\nAdd the shared trigger-reference contract and provider implementations for\nGitHub and Gitea payloads, including validation and safety checks.\n\nRefs ENG-1418\n\n* Align trigger ref validation with Git semantics\n\nAccept valid hierarchical refs while matching Git's component rules for\nintermediate dots and leading-dash safety.\n\nRefs ENG-1418",
          "is_bot": false,
          "headline": "Normalize source-control trigger references (#1171)",
          "author_name": "Noé Charmet",
          "author_login": "noe-charmet",
          "committed_at": "2026-07-31T06:16:52Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "8cc5a36dd68c0463e9cab71e03bcf9ad2e8d9706",
          "body": "* Add checkout target resolution to projects\n\nRefs ENG-1427\n\n* Refresh project source metadata during checkout resolution\n\nValidate repository targets against the provider's current repository snapshot so renamed repositories fail closed instead of trusting stale project metadata. Persist refreshed source identity for subsequent lookups.\n\nRefs ENG-1427",
          "is_bot": false,
          "headline": "[api-projects] Add resolveCheckoutTarget inter-module RPC (#1162)",
          "author_name": "Noé Charmet",
          "author_login": "noe-charmet",
          "committed_at": "2026-07-30T14:06:51Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "01c3dbc2690ee9055670475b206f668753093e43",
          "body": "* Allow vars in workflow predicates\n\nRefs ENG-1408\n\n* Deduplicate E2E seeded value schema\n\nRefs ENG-1408",
          "is_bot": false,
          "headline": "Allow workflow variables in job and gate predicates (#1166)",
          "author_name": "Noé Charmet",
          "author_login": "noe-charmet",
          "committed_at": "2026-07-30T14:06:19Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "9fdd5e46c94d244cd96ec61d7796bf118eba96b2",
          "body": "* Persist and surface definition sync warnings\n\nPersist validation warnings from repository syncs, expose them through the API, and render them on the workflow page without changing sync success.\n\nRefs ENG-1409\n\n* Update definition observer sync fixtures\n\nInclude the required warning list in definition sync test responses.\n\nRefs ENG-1409\n\n* Complete sync warning fixture migration\n\nAdd the required warning list to the flow workflow sync helper.\n\nRefs ENG-1409",
          "is_bot": false,
          "headline": "Persist and surface workflow definition warnings (#1163)",
          "author_name": "Noé Charmet",
          "author_login": "noe-charmet",
          "committed_at": "2026-07-30T14:03:53Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "c1142c1e57e642b62eca2689a238c0920111c0cb",
          "body": "Reset each job's log directory before setup and sweep orphaned job directories at runner startup. Report log preparation failures through the setup result.\n\nRefs ENG-1416",
          "is_bot": false,
          "headline": "Clean up runner job logs after crashes (#1165)",
          "author_name": "Noé Charmet",
          "author_login": "noe-charmet",
          "committed_at": "2026-07-30T14:00:22Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "f7939c726789965d7692e4666af7a3d2c34eed70",
          "body": "* Report resolved checkout details from runner\n\nExpose fetch depth controls and carry the resolved checkout through the\nrunner report contract without colliding with user outputs.\n\nRefs ENG-1421\n\n* Validate fetch depth and reuse checkout DTO\n\nReject invalid checkout depth values before invoking Git and keep runner\ncheckout results tied to the shared API contract.\n\nRefs ENG-1421",
          "is_bot": false,
          "headline": "Report resolved checkout details from runner jobs (#1164)",
          "author_name": "Noé Charmet",
          "author_login": "noe-charmet",
          "committed_at": "2026-07-30T13:57:00Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "35a42bd5863405afa5ec60350ae226d2db4f3eb3",
          "body": "* Support runner working directories for run and agent steps\n\nResolve working_directory against the job workspace, validate it at dispatch and on the runner, and expose SHIPFOX_WORKSPACE to run steps.\n\nRefs ENG-1429\n\n* Fix runner workspace review follow-ups\n\nAlign the linked-package changeset levels and reset the working-directory\nresolver mock implementation before each orchestration test.\n\nRefs ENG-1429",
          "is_bot": false,
          "headline": "Allow runner steps to target workspace directories (#1161)",
          "author_name": "Noé Charmet",
          "author_login": "noe-charmet",
          "committed_at": "2026-07-30T13:44:52Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "869a792b45d6932e50f0bb24cb930fe82b8c0e0b",
          "body": "* Refresh project repository identity on GitHub events\n\nPublish typed repository identity updates from GitHub rename and installation-repository webhooks so source-backed projects refresh their denormalized repository fields.\n\nRefs ENG-1426\n\n* Address repository identity review comments\n\nDeduplicate project repository-update events atomically, share source webhook publication logic, and make the outbox test independent of row order.\n\nRefs ENG-1426",
          "is_bot": false,
          "headline": "Refresh project repository identity on GitHub events (#1160)",
          "author_name": "Noé Charmet",
          "author_login": "noe-charmet",
          "committed_at": "2026-07-30T13:44:26Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "41d558c90726a2924ba6cde2f66f7d7d340a3bec",
          "body": "…1158)\n\n* Add shell code-position classifier\n\nAdd pure analysis for direct workflow references passed to shell constructs\nthat re-evaluate their arguments, with lexical scanner coverage and tests.\n\nRefs ENG-1404\n\n* Address shell classifier review comments\n\nPreserve shell literal semantics, skip loop headers, and remove unreachable\nnested-arithmetic scanning branches.\n\nRefs ENG-1404",
          "is_bot": false,
          "headline": "[expression] Detect workflow data in shell re-evaluation positions (#…",
          "author_name": "Noé Charmet",
          "author_login": "noe-charmet",
          "committed_at": "2026-07-30T13:31:38Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "e17cf4a1a635efc2d15e301151d460d51b7728d6",
          "body": "Migrate the listening fixture to literal job names and publish the static and dynamic naming contract in the workflow reference and schema metadata.\n\nCloses ENG-1395",
          "is_bot": false,
          "headline": "Document workflow run and execution naming fields (#1156)",
          "author_name": "Noé Charmet",
          "author_login": "noe-charmet",
          "committed_at": "2026-07-30T13:03:31Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "b5bb0c5f6c7bb9f956d1dcea318d7bc7ddd2e036",
          "body": "… surfaces (#1154)\n\n* Use activity-derived workflow UI statuses\n\nRefs ENG-1399\n\n* Align workflow stories with display status guidelines\n\nAdd direct listening status icon coverage and keep workflow story ordering and listener labels consistent with the display-status model.\n\nRefs ENG-1399\n\n* Keep running icons distinct from listening status\n\nUse the display status as the sole source for the workflow icon glyph so running executions retain the running dot in listening-mode jobs.\n\nRefs ENG-1399",
          "is_bot": false,
          "headline": "[client-workflows] Use one activity-derived status across workflow UI…",
          "author_name": "Noé Charmet",
          "author_login": "noe-charmet",
          "committed_at": "2026-07-30T13:00:49Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "e44a279f8b4b00e59ebb4569efad55442e6f8e1e",
          "body": "* Persist resolved workflow run-name overrides\n\nStore dynamic run-name overrides separately from static workflow-name snapshots, preserving effective names across reruns and exposing both values through workflow contexts and DTOs.\n\nRefs ENG-1392\n\n* Fold workflow run-name migration into existing migr\n[…]\nt.\n\nRefs ENG-1392\n\n* Fold workflow run-name migration into existing migration\n\nKeep the workflow run schema transition in the existing migration and remove the extra migration metadata.\n\nRefs ENG-1392",
          "is_bot": false,
          "headline": "[api-workflows] Persist resolved workflow-run names (#1145)",
          "author_name": "Noé Charmet",
          "author_login": "noe-charmet",
          "committed_at": "2026-07-30T13:00:26Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "e95fdf46f56ab0f74a18ce4fd0a393f8d228c56f",
          "body": null,
          "is_bot": false,
          "headline": "Add checkout targeting to workflow schema (#1155)",
          "author_name": "Noé Charmet",
          "author_login": "noe-charmet",
          "committed_at": "2026-07-30T12:57:56Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "34a5639e6d0a0a3d8dd99e28ec29593ebb4d9b82",
          "body": "Refs ENG-1445",
          "is_bot": false,
          "headline": "[api-common-dto] Add shared resource slug primitive (#1157)",
          "author_name": "Noé Charmet",
          "author_login": "noe-charmet",
          "committed_at": "2026-07-30T12:54:19Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "66f111e30352857250d6e4eebb512274499b1223",
          "body": "…(#1150)\n\n* Snapshot predicate variables for workflow runs\n\n* Fold vars column into workflow migration",
          "is_bot": false,
          "headline": "[api-workflows] Snapshot workflow variables for predicate evaluation …",
          "author_name": "Noé Charmet",
          "author_login": "noe-charmet",
          "committed_at": "2026-07-30T12:46:19Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "9dffe580e8915ad7208c968bc8067b2aaeef06d6",
          "body": "… at GitHub ingestion (#1152)\n\n* Drop fork pull request deliveries at GitHub ingestion\n\nRecord fork and indeterminate pull request deliveries without publishing trigger envelopes.\n\nRefs ENG-1422\n\n* Harden fork delivery regression test\n\nSeed an active installation so the route test proves the fork guard drops\nthe delivery before connection lookup.\n\nRefs ENG-1422",
          "is_bot": false,
          "headline": "[api-integration-github] Drop fork-originated pull request deliveries…",
          "author_name": "Noé Charmet",
          "author_login": "noe-charmet",
          "committed_at": "2026-07-30T12:46:05Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "1767993ac87d817d7c851aa464b24e97e7fdb016",
          "body": null,
          "is_bot": false,
          "headline": "Stabilize workflow orchestration tests (#1153)",
          "author_name": "Noé Charmet",
          "author_login": "noe-charmet",
          "committed_at": "2026-07-30T12:31:50Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "48b009fbe96f982204a7823aa004b49784d105da",
          "body": "* Move agent harness state into runner job logs\n\nKeep harness-created state outside checked-out repositories and clean it with the job logs directory.\n\nRefs ENG-1415\n\n* Make Claude config cleanup best-effort\n\nPrevent transient cleanup races in runner-owned logs from masking successful agent invocations.",
          "is_bot": false,
          "headline": "Keep agent harness state out of checked-out repositories (#1151)",
          "author_name": "Noé Charmet",
          "author_login": "noe-charmet",
          "committed_at": "2026-07-30T12:28:07Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "285fff2671c6904f1503cc8f2256c51711f20bdd",
          "body": "* Persist resolved job execution names\n\nStore dynamic execution-name overrides separately from stable job names so\nlistener and one-shot executions retain their resolved display names while\npreserving fallback behavior on resolution failures.\n\nRefs ENG-1393\n\n* Fix async variable loader test mock\n\nRefs ENG-1393\n\n* Satisfy async loader mock lint\n\nRefs ENG-1393",
          "is_bot": false,
          "headline": "Persist resolved job execution names in workflow runs (#1147)",
          "author_name": "Noé Charmet",
          "author_login": "noe-charmet",
          "committed_at": "2026-07-30T12:27:31Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "a0a02cc750599e9448a9d6aac261d9b44eea6af5",
          "body": null,
          "is_bot": false,
          "headline": "Persist source repository identity on projects (#1149)",
          "author_name": "Noé Charmet",
          "author_login": "noe-charmet",
          "committed_at": "2026-07-30T12:08:08Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "045895cf863a1e688470507d95a8c2f9542234ce",
          "body": null,
          "is_bot": false,
          "headline": "Remove dead workflow context trust metadata (#1146)",
          "author_name": "Noé Charmet",
          "author_login": "noe-charmet",
          "committed_at": "2026-07-30T12:01:33Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "beab5a0caa21453b4c377ebec2a8d21cede2607d",
          "body": "Refs ENG-1412",
          "is_bot": false,
          "headline": "Rewrite workflow context trust guidance (#1144)",
          "author_name": "Noé Charmet",
          "author_login": "noe-charmet",
          "committed_at": "2026-07-30T12:01:07Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "7f90b0c0aa6eb5b7e5763aef0267267943ee7b16",
          "body": "Refs ENG-1420",
          "is_bot": false,
          "headline": "Add working_directory to workflow step schema (#1148)",
          "author_name": "Noé Charmet",
          "author_login": "noe-charmet",
          "committed_at": "2026-07-30T11:52:35Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "0bb880ad2106bafa433947f3cd28e5e538faf858",
          "body": "…(#1141)\n\n* [api-workflows] Transition executions to running on runner claim\n\n* [api-workflows] Synchronize mocked runner outcome signals",
          "is_bot": false,
          "headline": "[api-workflows] Transition job executions to running on runner claim …",
          "author_name": "Noé Charmet",
          "author_login": "noe-charmet",
          "committed_at": "2026-07-30T10:22:19Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "28daafe822b02d32c286ac8755355a514167c0b0",
          "body": "…#1142)\n\n* Validate literal agent config during workflow authoring\n\nValidate known provider and model values during normalization while keeping\ninterpolated and workspace custom values deferred.\n\nRefs ENG-1405\n\n* Fix agent validation review findings\n\nDefer harness-specific checks when the harness is omitted or interpolation is invalid, and cover every supported pi provider in the validation fixture.\n\nRefs ENG-1405",
          "is_bot": false,
          "headline": "Validate literal agent model and provider during workflow authoring (…",
          "author_name": "Noé Charmet",
          "author_login": "noe-charmet",
          "committed_at": "2026-07-30T10:22:09Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "3d91d1dba1173bf2690882866f1db15350a1ef50",
          "body": "Allow external context in interpolation fields while retaining authored-context guard for model/provider selection and shell hoisting.\n\nRefs ENG-1401",
          "is_bot": false,
          "headline": "Relax workflow context trust-tier validation (#1143)",
          "author_name": "Noé Charmet",
          "author_login": "noe-charmet",
          "committed_at": "2026-07-30T10:10:59Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "89f2c18ae4df3d21ee3f7fda4c518fd8594d4b3a",
          "body": "Expose warnings from definition validation and the /validate route while\nkeeping sync-path persistence for the follow-up issue.\n\nRefs ENG-1403",
          "is_bot": false,
          "headline": "Add non-fatal definition validation warnings (#1140)",
          "author_name": "Noé Charmet",
          "author_login": "noe-charmet",
          "committed_at": "2026-07-30T09:37:13Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "f252ee1f1139f86cc2d7275929d3315823665dbe",
          "body": "Run the manifest publication job whenever both architecture builds succeed\non main, so successful candidates are not left without their immutable OCI\nmanifest.\n\nRefs ENG-1378",
          "is_bot": false,
          "headline": "Ensure runner image candidate manifests publish (#1139)",
          "author_name": "Noé Charmet",
          "author_login": "noe-charmet",
          "committed_at": "2026-07-30T09:36:44Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "d3222a93dc5be512e26a82a623e5abef0ef2692b",
          "body": "* Atomically reconcile terminal runner execution state\n\nDelete the exact pending execution and request cancellation on its running lease in one transaction. Add deterministic race and timeout-subscriber coverage.\n\nRefs ENG-1398\n\n* Align runner lease expiry lock ordering\n\nSweep pending execution rows\n[…]\n and row-lock one pending execution before attempting its advisory lock so a claim cannot temporarily lock unrelated queue entries. Add a regression test for the blocked FIFO candidate.\n\nRefs ENG-1398",
          "is_bot": false,
          "headline": "[api-runners] Atomically reconcile terminal runner state (#1138)",
          "author_name": "Noé Charmet",
          "author_login": "noe-charmet",
          "committed_at": "2026-07-30T06:03:40Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "3f781eeb5d7d073e35bcb9fb0f7f459c4e53b891",
          "body": "Closes ENG-1391",
          "is_bot": false,
          "headline": "Add workflow run and execution naming contract (#1137)",
          "author_name": "Noé Charmet",
          "author_login": "noe-charmet",
          "committed_at": "2026-07-29T14:54:24Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "0a210267825821321d31f6a53cade6e1259585ab",
          "body": "Activate the Spot watchdog after cloud-init alongside the runner, and keep\nall installable Shipfox services on the post-cloud-init target.\n\nRefs ENG-1390",
          "is_bot": false,
          "headline": "[runner-image] Fix Spot watchdog boot activation (#1136)",
          "author_name": "Noé Charmet",
          "author_login": "noe-charmet",
          "committed_at": "2026-07-29T13:04:02Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "a2d684ec48a91c8b613676a78970d6c20db2e44f",
          "body": null,
          "is_bot": false,
          "headline": "[client-workflows] Show execution name in job card title (#1134)",
          "author_name": "Noé Charmet",
          "author_login": "noe-charmet",
          "committed_at": "2026-07-29T08:19:57Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "297b407c24358db02c1f2db28a44237c5d758fe5",
          "body": "* Fix runner image boot activation\n\nInstall the runner services under the cloud-init completion target so systemd can start them after cloud-final without an ordering cycle. Remove the Packer SSH key during final image hardening.\n\nRefs ENG-1390\n\n* Explain runner image final hardening\n\nDocument why the build-user hardening provisioner must remain after the other Packer SSH-dependent steps.\n\nRefs ENG-1390",
          "is_bot": false,
          "headline": "[runner-image] Fix runner AMI boot activation (#1133)",
          "author_name": "Noé Charmet",
          "author_login": "noe-charmet",
          "committed_at": "2026-07-29T08:01:55Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "f13e8bb9afba2d1b132b03e84f8bc20ced554740",
          "body": "* Add Jira dynamic webhook registration\n\nRegister authenticated Jira dynamic webhooks, persist connection-scoped delivery state, and wire the receiver through the shared webhook pipeline. Serialize reconnects across replicas and preserve lifecycle compensation on failures.\n\nRefs ENG-1002\n\n* Address \n[…]\na lock retry churn\n\nUse capped exponential backoff between non-blocking advisory-lock attempts so contended reconnects release direct sessions without polling the database aggressively.\n\nRefs ENG-1002",
          "is_bot": false,
          "headline": "[Jira] Add dynamic webhook registration and ingestion (#1131)",
          "author_name": "Noé Charmet",
          "author_login": "noe-charmet",
          "committed_at": "2026-07-29T07:15:05Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "56876b1de024178773459a8e20f1329bf9ba5bda",
          "body": "…1132)\n\nPacker modifies AMI launch permissions before it applies `tags`, so a\ncandidate AMI carried no `shipfox.managed` or `shipfox.lifecycle` tag when\nit was shared with the worker-plane accounts. The build role scopes\n`ec2:ModifyImageAttribute` by those tags, so every main build failed with\nan au\n[…]\n the same tag map as `run_tags`, which Packer attaches through the\n`CreateImage` tag specifications. The tags now exist before sharing, and a\nmanaged image is never registered untagged.\n\nRefs ENG-1378",
          "is_bot": false,
          "headline": "Tag runner AMIs at registration so candidate sharing is authorized (#…",
          "author_name": "Noé Charmet",
          "author_login": "noe-charmet",
          "committed_at": "2026-07-29T06:06:21Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "0f0e981da6e99a5642896ce0b033ca5a40a16720",
          "body": "Co-authored-by: shipfox-release-bot[bot] <289588602+shipfox-release-bot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "Version packages (#1127)",
          "author_name": "shipfox-release-bot[bot]",
          "author_login": "shipfox-release-bot[bot]",
          "committed_at": "2026-07-28T22:43:37Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "4661bce58f78bd82c465bcacc496ee505ce88992",
          "body": "…rver (#1129)\n\n* Align Slack agent tools with the Slack MCP server\n\nSlack agent tools were named and parameterized after the Slack Web API, so\nprompts written against the official Slack MCP server did not port to a\nShipfox agent step. Rename the catalog to the MCP tool names and inputs, and\ntranslat\n[…]\ntion\nfrom the package root in the changeset: they were wire-mapping\ninternals with no consumer outside the package, but the major-version\nchangelog should say so explicitly for anyone relying on them.",
          "is_bot": false,
          "headline": "[api-integration-slack] Align Slack agent tools with the Slack MCP se…",
          "author_name": "Noé Charmet",
          "author_login": "noe-charmet",
          "committed_at": "2026-07-28T22:27:08Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "1ba6098e450cfb6921c77f2a543bcfef5bf19443",
          "body": "Avoid Packer's intermediary CopyImage step when applying the candidate KMS\nkey in the single build region.\n\nRelated to ENG-1378",
          "is_bot": false,
          "headline": "Encrypt runner AMIs at volume launch (#1130)",
          "author_name": "Noé Charmet",
          "author_login": "noe-charmet",
          "committed_at": "2026-07-28T21:29:18Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "deeeba0c31a63c22b1a32be41f022a445ae290d3",
          "body": "* Publish immutable runner image candidates\n\nPublish encrypted, shareable candidate AMIs and immutable OCI manifests\nwith strict provenance validation, reuse handling, and catalog coverage.\n\nRefs ENG-1378\n\n* Address runner image candidate review feedback\n\nHarden registry rechecks and candidate avail\n[…]\nNG-1378\n\n* Remove non-user AMI launch permissions\n\nEnsure reused candidate AMIs converge to the configured consumer account\npermissions without retaining public or organization sharing.\n\nRefs ENG-1378",
          "is_bot": false,
          "headline": "[runner-image] Publish shareable runner-image candidates (#1128)",
          "author_name": "Noé Charmet",
          "author_login": "noe-charmet",
          "committed_at": "2026-07-28T20:29:51Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "25158c8f0a61f37aaa0fc9bf0c916ca2e47a0c14",
          "body": "* Enforce suspended workspace access for JWT-backed routes\n\nCarry workspace lifecycle status through JWT claims and apply the stateless access gate across workspace-scoped routes while preserving legacy tokens and non-leaking resource errors.\n\nRefs ENG-1367\n\n* Honor JWT workspace claim snapshots on \n[…]\n\nRefs ENG-1367\n\n* Cover inactive workspace membership rejection\n\nDocument the linked major release and directly test the database-status\nfallback used by inter-module membership checks.\n\nRefs ENG-1367",
          "is_bot": false,
          "headline": "Enforce suspended workspace access for JWT-backed routes (#1126)",
          "author_name": "Noé Charmet",
          "author_login": "noe-charmet",
          "committed_at": "2026-07-28T19:41:13Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "71d9ba499de4468b318f0abd5439d5a40d1be9d6",
          "body": null,
          "is_bot": false,
          "headline": "Allow integer literals in numeric equality (#1125)",
          "author_name": "Noé Charmet",
          "author_login": "noe-charmet",
          "committed_at": "2026-07-28T17:08:57Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "8139a9ff5a3a72aee9f5298bff299595a0854700",
          "body": "Co-authored-by: shipfox-release-bot[bot] <289588602+shipfox-release-bot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "Version packages (#1112)",
          "author_name": "shipfox-release-bot[bot]",
          "author_login": "shipfox-release-bot[bot]",
          "committed_at": "2026-07-28T16:57:10Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "78a003395bac69943b3cd8dcd6315cc1d9f2b73b",
          "body": null,
          "is_bot": false,
          "headline": "[client-workflows] Show running executions in job graph (#1124)",
          "author_name": "Noé Charmet",
          "author_login": "noe-charmet",
          "committed_at": "2026-07-28T16:46:42Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "0773b85877c9e71eed3c696cb88c05a05876621f",
          "body": null,
          "is_bot": false,
          "headline": "Expose Auth admin role predicate from DTO package (#1123)",
          "author_name": "Noé Charmet",
          "author_login": "noe-charmet",
          "committed_at": "2026-07-28T16:25:50Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "00875539ffeb6863b78c2dfa9e94a6de02faf8b9",
          "body": "* test: cover environment-backed signup gating E2E\n\nExercise the enabled signup gate through API and browser journeys, including\nallowlisted signup and invitation/existing-user bypasses. Render the configured\ndenial message from the safe API error details.\n\nRefs ENG-1386\n\n* test: remove signup gating screenshot assertion\n\nKeep functional signup-denial coverage without a visual snapshot.\n\nRefs ENG-1386",
          "is_bot": false,
          "headline": "Add E2E coverage for environment-backed signup gating (#1122)",
          "author_name": "Noé Charmet",
          "author_login": "noe-charmet",
          "committed_at": "2026-07-28T14:21:49Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "57e64e5ae003de8e0ac937c8c2827a8f0dfc92cc",
          "body": "…te loading (#1119)\n\n* Adopt matrix expansion in Docker loader\n\nRefs ENG-1324\n\n* Validate generated templates before shadowing\n\nRefs ENG-1324\n\n* Preserve generated Docker template keys and limits\n\nRefs ENG-1324\n\n* Preserve Docker template key validation\n\nRefs ENG-1324",
          "is_bot": false,
          "headline": "[provisioner-docker-provider] Adopt matrix expansion in Docker templa…",
          "author_name": "Noé Charmet",
          "author_login": "noe-charmet",
          "committed_at": "2026-07-28T13:37:08Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "aaa0962593ad8eecf6050dc5f3ea3f4563eafd59",
          "body": "Add parser coverage against the installed Claude SDK declarations and captured session fixtures, including hook response metadata.\n\nRefs ENG-1340",
          "is_bot": false,
          "headline": "Cover Claude SDK system union drift (#1121)",
          "author_name": "Noé Charmet",
          "author_login": "noe-charmet",
          "committed_at": "2026-07-28T13:36:52Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "c9a188d50bda6ad72a7ace604652b9497e0fcad0",
          "body": "…ment (#1120)\n\n* Add administrator installation provisioner token management\n\nRefs ENG-1370\n\n* Address administrator token review comments\n\nRefs ENG-1370",
          "is_bot": false,
          "headline": "[api-runners] Add administrator installation provisioner token manage…",
          "author_name": "Noé Charmet",
          "author_login": "noe-charmet",
          "committed_at": "2026-07-28T13:09:35Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "2d45ff3fec1af2bc6fe55f6310371f4d0243c708",
          "body": "Refs ENG-1325",
          "is_bot": false,
          "headline": "[Provisioner EC2] Adopt matrix template expansion (#1118)",
          "author_name": "Noé Charmet",
          "author_login": "noe-charmet",
          "committed_at": "2026-07-28T12:16:43Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "50d71947f66291ecbcbc5386e4d8ea69a66e38c0",
          "body": "* Render matrix variants into templates\n\nAdd provider-neutral rendering for defaults, scoped let bindings, typed fields, derived keys, collision checks, shadow warnings, and aggregated diagnostics.\n\nRefs ENG-1323\n\n* Harden template variant keys and segment rendering\n\nEscape default key separators to keep matrix variants unique and mark parsed\nworkflow segments so opaque provider arrays are not rendered as strings.\n\nRefs ENG-1323",
          "is_bot": false,
          "headline": "[Provisioner Core] Render matrix variants into templates (#1117)",
          "author_name": "Noé Charmet",
          "author_login": "noe-charmet",
          "committed_at": "2026-07-28T11:15:27Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "57e69d87d6c21955b20c5ba6b157e1d3ad65c062",
          "body": "* Handle benign Claude SDK message types\n\nRoute authentication and rate-limit events to lifecycle rows while ignoring companion messages that have no standalone row representation.\n\nRefs ENG-1339\n\n* Fold Claude tool-use summaries into tool-call rows\n\nPreserve SDK summaries on matching tool-call rows\n[…]\ner around tool summaries\n\nKeep rows after an identified tool call buffered with the call so summaries,\ntool results, assistant content, and lifecycle events are emitted in source\norder.\n\nRefs ENG-1339",
          "is_bot": false,
          "headline": "[api-logs] Stop flagging benign Claude SDK messages (#1111)",
          "author_name": "Noé Charmet",
          "author_login": "noe-charmet",
          "committed_at": "2026-07-28T11:14:45Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "8678943d592bf37b851ac58292c354b1cbb06873",
          "body": "* Add bounded administrator runner inventory\n\nExpose a safe admin-observer inventory for installation-managed runner instances with bounded filters, pagination, lifecycle state, and regression coverage.\n\nRefs ENG-1347\n\n* Address runner inventory review findings\n\nPersist managed-runner claim history,\n[…]\nknown when the original claim instant cannot be reconstructed.\n\nRefs ENG-1347\n\n* Normalize runner DTO exports after rebase\n\nKeep the rebased export barrel in repository formatter order.\n\nRefs ENG-1347",
          "is_bot": false,
          "headline": "[api-runners] Add bounded administrator runner inventory (#1113)",
          "author_name": "Noé Charmet",
          "author_login": "noe-charmet",
          "committed_at": "2026-07-28T10:39:55Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "95d14569bcf9fb0fba889d30fc34eca995e1d448",
          "body": "* Add administrator user moderation commands\n\nImplement atomic suspension, reactivation, and session revocation with\nidempotent results, redacted outbox events, and session-bound auth checks.\n\nRefs ENG-1272\n\n* Harden administrator session invalidation\n\nSerialize user session mutations with moderatio\n[…]\n cap owner-count checks, and share the transaction-capable user summary query across administrator lookup and moderation.\n\nRefs ENG-1272\n\n* Use shared token hashing for admin moderation\n\nRefs ENG-1272",
          "is_bot": false,
          "headline": "[api-auth] Add administrator user moderation commands (#1110)",
          "author_name": "Noé Charmet",
          "author_login": "noe-charmet",
          "committed_at": "2026-07-28T10:29:48Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "dd48e67760a2a2e7e6ee40eff8b2e3927d0f6a0a",
          "body": "Keep EC2 convergence from leaving demand-backed runners unassigned and from blocking fleet reporting on stale reservations.\n\nRefs ENG-1333",
          "is_bot": false,
          "headline": "Fix EC2 runner reservation assignment (#1116)",
          "author_name": "Noé Charmet",
          "author_login": "noe-charmet",
          "committed_at": "2026-07-28T10:29:19Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "6be5a54ad5c188a3016e7844f455283be71306e6",
          "body": "…(#1115)\n\n* Make managed assignment polling bounded and resilient\n\nLet managed runners request bounded assignment waits and derive transport\ntimeouts from that contract while retrying healthy-session timeouts.\n\nRefs ENG-1300\n\n* Harden managed assignment polling bounds\n\nReject invalid server wait caps, enforce the one-second resolver floor, and\nkeep assignment polling reads within the requested deadline. Use Ky's real\ntimeout error in the orchestration regression test.\n\nRefs ENG-1300",
          "is_bot": false,
          "headline": "Make managed runner assignment polling bounded and timeout-resilient …",
          "author_name": "Noé Charmet",
          "author_login": "noe-charmet",
          "committed_at": "2026-07-28T10:20:00Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "d40f5db339d9740c4db81921777805b85cab8248",
          "body": "* Add provisioner template matrix enumeration\n\nParse matrix files and enumerate bounded variants for provisioner core.\n\nRefs ENG-1322\n\n* Handle prototype-named template matrix keys\n\nPreserve user-supplied __proto__ matrix, axis, and binding names with null-prototype accumulators.\n\nRefs ENG-1322",
          "is_bot": false,
          "headline": "[Provisioner Core] Add template matrix variant enumeration (#1114)",
          "author_name": "Noé Charmet",
          "author_login": "noe-charmet",
          "committed_at": "2026-07-28T10:01:47Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "3e257f5a0fe5ee260204d7dfd2b9c7bc37f0a596",
          "body": "* Bind idle runners to granted reservations\n\nBind prewarmed enrolled runners in the reservation transaction so queued jobs can activate without a launch.\n\nRefs ENG-1331\n\n* Fix runner reservation cancellation cleanup\n\n* Clean up expired runner reservations",
          "is_bot": false,
          "headline": "[api-runners] Activate prewarmed runners for queued jobs (#1108)",
          "author_name": "Noé Charmet",
          "author_login": "noe-charmet",
          "committed_at": "2026-07-28T09:55:32Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "07e73717e38d6f420d5aa63f8eb8634ac9087deb",
          "body": "* Add administrator workspace suspension commands\n\nAdd idempotent suspension and reactivation with atomic redacted administration events.\n\nRefs ENG-1278\n\n* Address workspace administration review comments\n\nReuse the shared opaque-value hash helper and align the reactivation test name with its assertions.\n\nRefs ENG-1278",
          "is_bot": false,
          "headline": "[api-workspaces] Add administrator workspace suspension commands (#1109)",
          "author_name": "Noé Charmet",
          "author_login": "noe-charmet",
          "committed_at": "2026-07-28T09:55:02Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "1300a54729a2e8ce8c0dd9c14b40fcc6517405f8",
          "body": "* Split provisioner demand and convergence loops\n\nSeparate demand polling from provider convergence, preserve shutdown cleanup, and document the independent control paths.\n\nRefs ENG-1332\n\n* Replace deferred termination snapshots\n\nTreat each demand response as the current termination snapshot while preserving failed-termination requeue behavior.\n\nRefs ENG-1332",
          "is_bot": false,
          "headline": "[provisioner-core] Split demand polling from convergence (#1106)",
          "author_name": "Noé Charmet",
          "author_login": "noe-charmet",
          "committed_at": "2026-07-28T09:18:27Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "ac1c6aa781d0dc563cdba9e4445739b31b3c923f",
          "body": "Co-authored-by: shipfox-release-bot[bot] <289588602+shipfox-release-bot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "Version packages (#1101)",
          "author_name": "shipfox-release-bot[bot]",
          "author_login": "shipfox-release-bot[bot]",
          "committed_at": "2026-07-28T09:15:49Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "3db7189f6b683c417937ccbe29b5ef5d33546fa3",
          "body": "Refs ENG-1366",
          "is_bot": false,
          "headline": "[api-auth] Restore bootstrap after owner suspension (#1107)",
          "author_name": "Noé Charmet",
          "author_login": "noe-charmet",
          "committed_at": "2026-07-28T09:01:06Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "fb34b6a93d712b609eb9286ae96e7176d3ea9dea",
          "body": "* Expose authenticated administrator bootstrap state\n\nAdd an authenticated bootstrap-state read backed by active owner state,\nwith race, anonymous access, and suspended-owner coverage.\n\nCloses ENG-1344\n\n* Separate bootstrap state rate limiting",
          "is_bot": false,
          "headline": "[api-auth] Expose authenticated administrator bootstrap state (#1103)",
          "author_name": "Noé Charmet",
          "author_login": "noe-charmet",
          "committed_at": "2026-07-28T08:38:18Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "15984a41dd6f0bd48528d783e809dc167aaebebe",
          "body": "Verify prewarmed runner-instance creation requests do not carry a reservation intent.\n\nRefs ENG-1330",
          "is_bot": false,
          "headline": "Assert warm launches omit reservation IDs (#1102)",
          "author_name": "Noé Charmet",
          "author_login": "noe-charmet",
          "committed_at": "2026-07-28T08:32:07Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "0760f79a42c087b93c8a946a11e1f327f2a58867",
          "body": "Refs ENG-1337",
          "is_bot": false,
          "headline": "Name Claude session events with signal and tone (#1105)",
          "author_name": "Noé Charmet",
          "author_login": "noe-charmet",
          "committed_at": "2026-07-28T08:31:54Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "35fb890ec4c15e437b7fae5a9273a590af68b954",
          "body": "* Fail runner image builds when Pi extensions are incomplete\n\nValidate every declared Pi extension entry in both the container and AMI\nproduction dependency layouts so packaging regressions fail before release.\n\nRefs ENG-1309\n\n* Run compiled verifier during runner image builds\n\nUse a compiled leaf-m\n[…]\n both Docker and AMI production closures, so image builds exercise the installed tree without loading runtime barrels. Add resolver fixtures for missing and malformed extension entries.\n\nRefs ENG-1309",
          "is_bot": false,
          "headline": "[runner] Fail image builds when Pi extensions are incomplete (#1080)",
          "author_name": "Noé Charmet",
          "author_login": "noe-charmet",
          "committed_at": "2026-07-28T08:28:30Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "0dc3aa803f791994cefe957b8cacdb2e6f18610c",
          "body": null,
          "is_bot": false,
          "headline": "Skip empty Pages preview deployments (#1104)",
          "author_name": "Noé Charmet",
          "author_login": "noe-charmet",
          "committed_at": "2026-07-28T08:20:27Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "88ae6891b6e0277884f77e5c3d29311df8cceffd",
          "body": "* Add bounded administrator project lookup\n\nRefs ENG-1276\n\n* Harden project summary redaction test\n\nRefs ENG-1276",
          "is_bot": false,
          "headline": "[api-projects] Add bounded administrator project lookup (#1095)",
          "author_name": "Noé Charmet",
          "author_login": "noe-charmet",
          "committed_at": "2026-07-28T07:41:57Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "96ae951138c7623f398d3be50e15758b4fa94d60",
          "body": "…099)\n\n* Add feature-owned layouts to client shell\n\nSupport checked feature-owned layout parents, layout-local navigation, and\nexternal consumer coverage for the public client shell contract.\n\nRefs ENG-1343\n\n* Address client shell review comments",
          "is_bot": false,
          "headline": "[client-shell] Support feature-owned layouts and local navigation (#1…",
          "author_name": "Noé Charmet",
          "author_login": "noe-charmet",
          "committed_at": "2026-07-28T07:41:34Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "b8dbc993392a400386757d370a34ceeb7a89ef24",
          "body": "Co-authored-by: shipfox-release-bot[bot] <289588602+shipfox-release-bot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "Version packages (#1069)",
          "author_name": "shipfox-release-bot[bot]",
          "author_login": "shipfox-release-bot[bot]",
          "committed_at": "2026-07-28T07:32:42Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "26a7ca28a9eca67c267d39d325736505db0f3c1e",
          "body": "* Grant production deploy PR read permission\n\n* Use PR head SHA for static preview builds",
          "is_bot": false,
          "headline": "Fix production deployment workflow permissions (#1100)",
          "author_name": "Noé Charmet",
          "author_login": "noe-charmet",
          "committed_at": "2026-07-28T07:15:59Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "e9280fc3408b75ae1ad6a2f2501bee533f187c2a",
          "body": "…1097)\n\n* Add administrator workspace lookup and unavailable member guard\n\nAdd observer-gated workspace summaries with best-effort project and job counts, plus neutral handling for suspended or deleted workspaces.\n\nRefs ENG-1275\n\n* Optimize administrator workspace pagination\n\nPage workspaces before aggregating membership counts so administrator responses stay bounded, and add the matching name/id index.\n\nRefs ENG-1275",
          "is_bot": false,
          "headline": "Add administrator workspace lookup and unavailable member handling (#…",
          "author_name": "Noé Charmet",
          "author_login": "noe-charmet",
          "committed_at": "2026-07-28T07:03:15Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "837bf5df3a25b5165ddf9db6cc4d7c3d23b2470a",
          "body": "* Add intended reservation fast path for runner enrollment\n\nStore reservation intent when creating runners and promote it during enrollment so provisioners can use the returned activation token without polling.\n\nRefs ENG-1327\n\n* Fix reservation cleanup and linked release bump\n\nHandle installation-sc\n[…]\nENG-1327\n\n* Prefer validated intended reservation cleanup\n\nKeep terminal cleanup tied to the reservation that belongs to the provisioner when stale assignment and intent fields coexist.\n\nRefs ENG-1327",
          "is_bot": false,
          "headline": "Reduce runner activation latency with intended reservations (#1092)",
          "author_name": "Noé Charmet",
          "author_login": "noe-charmet",
          "committed_at": "2026-07-28T06:58:54Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "d7b951f68d8252f1a18d2be7656c52bb161f5b8b",
          "body": "* Add verified Pages preview lifecycle\n\nAdd config-driven preview artifacts, secure promotion controls, and deployment workflow support.\n\nRefs ENG-1178\n\n* Harden verified preview promotion\n\nValidate artifact provenance and pull request lifecycle before publication.\\n\\nRefs ENG-1178\n\n* Allow same-run\n[…]\nnd configuration at their exact commit.\\n\\nRefs ENG-1178\n\n* Harden fork artifact promotion\n\nKeep promoted deployments on the authorized config and report artifact failures accurately.\\n\\nRefs ENG-1178",
          "is_bot": false,
          "headline": "Add verified Storybook preview deployment lifecycle (#1087)",
          "author_name": "Noé Charmet",
          "author_login": "noe-charmet",
          "committed_at": "2026-07-28T06:40:10Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "6054364cd4c16a9bef8df492c015bf3a6b900552",
          "body": "Expose exact user lookup and bounded grant summaries through Auth while keeping sensitive user fields private and removing the unbounded grant reader.\n\nRefs ENG-1271",
          "is_bot": false,
          "headline": "Add bounded administrator read models (#1098)",
          "author_name": "Noé Charmet",
          "author_login": "noe-charmet",
          "committed_at": "2026-07-28T06:19:41Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "59a552ccf1d2812ffc612a7116380478f8c402c1",
          "body": "…acker builds (#1096)\n\n* Share built-output staging between Docker and Packer builds\n\nDocker's inline overlayDist copied a pruned package's built dist/ and\nproductionized its #* import map. Packer's runner AMI build needed the\nsame staging but had no way to reuse it, so it never wired it in.\n\nExtrac\n[…]\nng.js\" read as a deploy-tier name even though the module writes\nproduction dist/ output and import maps. Rename to overlay.js to match\nthe exported overlayBuiltOutputs function and drop the ambiguity.",
          "is_bot": false,
          "headline": "[@shipfox/tool-utils] Share built-output staging between Docker and P…",
          "author_name": "Noé Charmet",
          "author_login": "noe-charmet",
          "committed_at": "2026-07-28T06:18:29Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "662516d17a5384021e7a39e554a1e884698b6a1b",
          "body": "* Add client shell account menu slot\n\nRefs ENG-1345\n\n* Fix external account menu portal assertion\n\nRefs ENG-1345",
          "is_bot": false,
          "headline": "[client-shell] Add optional account menu extension slot (#1094)",
          "author_name": "Noé Charmet",
          "author_login": "noe-charmet",
          "committed_at": "2026-07-28T05:48:04Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "e5f7cfe0b4fa9d6c146c2c813411eb9ddf6b9262",
          "body": "* Isolate Claude steps from repository policy\n\n* Bound repository instruction file reads",
          "is_bot": false,
          "headline": "[runner-agent] Isolate Claude steps from repository policy (#1090)",
          "author_name": "Noé Charmet",
          "author_login": "noe-charmet",
          "committed_at": "2026-07-27T18:07:54Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "930e3e7957e1d8146838550f6365ff94d79d52a5",
          "body": "* fix(api-logs): report Claude turn boundaries\n\nRender re-prompts as turn lifecycle events and distinguish platform-authored output guidance.\n\nCloses ENG-1338\n\n* perf(api-logs): linearize Claude turn lookahead\n\nPrecompute the last init index for each Claude session so result labeling\nstays linear in\n[…]\nalize deferred Claude results before declared or timeout closure so\ncompaction receives the final lifecycle row. Reuse claudeInitSessionId for\ninit detection to avoid duplicate parsing.\n\nRefs ENG-1338",
          "is_bot": false,
          "headline": "[@shipfox/api-logs] Report Claude turn boundaries as turns (#1085)",
          "author_name": "Noé Charmet",
          "author_login": "noe-charmet",
          "committed_at": "2026-07-27T17:37:26Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "dd43d631cc3638281a3dd93c46b396080cdee0ba",
          "body": "Use the stable /admin namespace for Auth administrator bootstrap and grant\nroutes, and remove the obsolete /admin/v1 contract.\n\nRefs ENG-1358",
          "is_bot": false,
          "headline": "Move Auth administration routes to unversioned namespace (#1089)",
          "author_name": "Noé Charmet",
          "author_login": "noe-charmet",
          "committed_at": "2026-07-27T17:27:56Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "6b0fb90f8b531bd5f8677cd10a104f8bbe298a7c",
          "body": "* Improve provisioner lifecycle logging and retention\n\nAdd bounded Docker failure retention, structured lifecycle diagnostics, health-aware admission, and CI coverage for the logging-driver contract.\n\n* Address provisioner review feedback\n\nRespect reservation capacity when filling warm pools, preserve core lifecycle metadata, cover episode transitions, and report buffered launch events as incomplete.",
          "is_bot": false,
          "headline": "Improve Docker provisioner lifecycle observability and retention (#1088)",
          "author_name": "Noé Charmet",
          "author_login": "noe-charmet",
          "committed_at": "2026-07-27T17:26:58Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "2402bdbc2aa24051da20973899d0b92fed4e0422",
          "body": "Keep server assignment polls open across transient token-mint races and back off client retries without swallowing heartbeat failures.\n\nRefs ENG-1328",
          "is_bot": false,
          "headline": "Prevent null runner activation polling loops (#1086)",
          "author_name": "Noé Charmet",
          "author_login": "noe-charmet",
          "committed_at": "2026-07-27T15:45:11Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "38a4635dd6b82cf3435094b77aeeae33727adf1b",
          "body": "* Show Claude tool names in log results\n\nResolve tool-result fallback names from matching tool-call rows and label unmatched ids honestly.\n\nRefs ENG-1341\n\n* Pin claude-parser tool-result test to the literal sentinel\n\nThe tool-result toolName default ('tool') is now load-bearing for the\nclient-side name lookup in agent-session-rows.tsx, so the assertion\nshould pin the exact value instead of any string.",
          "is_bot": false,
          "headline": "[client-logs] Name Claude tool-result rows in session logs (#1083)",
          "author_name": "Noé Charmet",
          "author_login": "noe-charmet",
          "committed_at": "2026-07-27T15:12:06Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "a71323104b5790882642659db38e6d2a09ffe00f",
          "body": "Provide caller-scoped CEL evaluation, typed exact-field resolution, and per-evaluation range budgets for config templating.\\n\\nRefs ENG-1319",
          "is_bot": false,
          "headline": "Add bounded range evaluation for expression templates (#1084)",
          "author_name": "Noé Charmet",
          "author_login": "noe-charmet",
          "committed_at": "2026-07-27T15:11:37Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "dcce9cb4ed16d2e25dbdf6967f038d5202a9098b",
          "body": "Filter pure-progress system entries before normalized storage and cover all known subtypes in the parser.\n\nRefs ENG-1336",
          "is_bot": false,
          "headline": "Drop pure-progress Claude session events (#1082)",
          "author_name": "Noé Charmet",
          "author_login": "noe-charmet",
          "committed_at": "2026-07-27T14:54:47Z",
          "body_truncated": false,
          "is_coding_agent": false
        }
      ],
      "releases_count": 100,
      "commits_last_year": 1128,
      "latest_release_at": "2026-07-22T15:00:13Z",
      "latest_release_tag": "@shipfox/client-workspace-settings@5.0.0",
      "releases_from_tags": false,
      "days_since_last_push": 0,
      "active_weeks_last_year": 14,
      "days_since_latest_release": 10,
      "mean_days_between_releases": 0
    },
    "community": {
      "has_readme": true,
      "has_license": true,
      "has_description": false,
      "has_contributing": true,
      "health_percentage": 75,
      "has_issue_template": false,
      "has_code_of_conduct": true,
      "has_pull_request_template": false
    },
    "ecosystem": {
      "packages": [
        {
          "name": "@shipfox/biome",
          "exists": true,
          "license": "MIT",
          "keywords": [],
          "ecosystem": "npm",
          "matches_repo": true,
          "registry_url": "https://www.npmjs.com/package/@shipfox/biome",
          "is_deprecated": false,
          "latest_version": "1.10.1",
          "repository_url": "https://github.com/ShipfoxHQ/shipfox",
          "versions_count": 18,
          "total_downloads": null,
          "dependents_count": null,
          "deprecation_note": null,
          "maintainers_count": 3,
          "monthly_downloads": 1292,
          "first_published_at": "2025-06-27T07:43:16.444000Z",
          "latest_published_at": "2026-07-28T07:44:30.697000Z",
          "latest_version_yanked": null,
          "days_since_latest_publish": 5
        },
        {
          "name": "@shipfox/docker",
          "exists": true,
          "license": "MIT",
          "keywords": [],
          "ecosystem": "npm",
          "matches_repo": true,
          "registry_url": "https://www.npmjs.com/package/@shipfox/docker",
          "is_deprecated": false,
          "latest_version": "0.1.4",
          "repository_url": "https://github.com/ShipfoxHQ/shipfox",
          "versions_count": 15,
          "total_downloads": null,
          "dependents_count": null,
          "deprecation_note": null,
          "maintainers_count": 3,
          "monthly_downloads": 1851,
          "first_published_at": "2025-06-27T07:43:19.978000Z",
          "latest_published_at": "2026-07-28T07:44:32.206000Z",
          "latest_version_yanked": null,
          "days_since_latest_publish": 5
        },
        {
          "name": "@shipfox/depcruise",
          "exists": true,
          "license": "MIT",
          "keywords": [],
          "ecosystem": "npm",
          "matches_repo": true,
          "registry_url": "https://www.npmjs.com/package/@shipfox/depcruise",
          "is_deprecated": false,
          "latest_version": "1.0.4",
          "repository_url": "https://github.com/ShipfoxHQ/shipfox",
          "versions_count": 4,
          "total_downloads": null,
          "dependents_count": null,
          "deprecation_note": null,
          "maintainers_count": 3,
          "monthly_downloads": 464,
          "first_published_at": "2026-06-01T13:43:30.097000Z",
          "latest_published_at": "2026-07-28T07:44:32.015000Z",
          "latest_version_yanked": null,
          "days_since_latest_publish": 5
        },
        {
          "name": "@shipfox/cloudflare-pages",
          "exists": true,
          "license": "MIT",
          "keywords": [],
          "ecosystem": "npm",
          "matches_repo": true,
          "registry_url": "https://www.npmjs.com/package/@shipfox/cloudflare-pages",
          "is_deprecated": false,
          "latest_version": "0.3.0",
          "repository_url": "https://github.com/ShipfoxHQ/shipfox",
          "versions_count": 2,
          "total_downloads": null,
          "dependents_count": null,
          "deprecation_note": null,
          "maintainers_count": 3,
          "monthly_downloads": 361,
          "first_published_at": "2026-07-26T21:17:36.513000Z",
          "latest_published_at": "2026-07-28T07:44:31.171000Z",
          "latest_version_yanked": null,
          "days_since_latest_publish": 5
        },
        {
          "name": "@shipfox/application-release",
          "exists": true,
          "license": "MIT",
          "keywords": [],
          "ecosystem": "npm",
          "matches_repo": true,
          "registry_url": "https://www.npmjs.com/package/@shipfox/application-release",
          "is_deprecated": false,
          "latest_version": "0.1.7",
          "repository_url": "https://github.com/ShipfoxHQ/shipfox",
          "versions_count": 5,
          "total_downloads": null,
          "dependents_count": null,
          "deprecation_note": null,
          "maintainers_count": 3,
          "monthly_downloads": 618,
          "first_published_at": "2026-07-16T10:16:52.711000Z",
          "latest_published_at": "2026-07-23T14:21:44.541000Z",
          "latest_version_yanked": null,
          "days_since_latest_publish": 9
        },
        {
          "name": "@shipfox/architecture-policy",
          "exists": true,
          "license": "MIT",
          "keywords": [],
          "ecosystem": "npm",
          "matches_repo": true,
          "registry_url": "https://www.npmjs.com/package/@shipfox/architecture-policy",
          "is_deprecated": false,
          "latest_version": "0.2.0",
          "repository_url": "https://github.com/ShipfoxHQ/shipfox",
          "versions_count": 1,
          "total_downloads": null,
          "dependents_count": null,
          "deprecation_note": null,
          "maintainers_count": 3,
          "monthly_downloads": 265,
          "first_published_at": "2026-07-24T15:56:16.894000Z",
          "latest_published_at": "2026-07-24T15:56:17.247000Z",
          "latest_version_yanked": null,
          "days_since_latest_publish": 8
        },
        {
          "name": "@shipfox/engineering-guidance",
          "exists": true,
          "license": "MIT",
          "keywords": [],
          "ecosystem": "npm",
          "matches_repo": true,
          "registry_url": "https://www.npmjs.com/package/@shipfox/engineering-guidance",
          "is_deprecated": false,
          "latest_version": "1.0.2",
          "repository_url": "https://github.com/ShipfoxHQ/shipfox",
          "versions_count": 1,
          "total_downloads": null,
          "dependents_count": null,
          "deprecation_note": null,
          "maintainers_count": 3,
          "monthly_downloads": 376,
          "first_published_at": "2026-07-23T14:32:30.580000Z",
          "latest_published_at": "2026-07-23T14:32:30.967000Z",
          "latest_version_yanked": null,
          "days_since_latest_publish": 9
        }
      ]
    },
    "popularity": {
      "forks": 0,
      "stars": 13,
      "watchers": 0,
      "fork_history": {
        "days": [],
        "complete": true,
        "collected": 0,
        "total_forks": 0
      },
      "star_history": null,
      "open_issues_and_prs": 15
    },
    "ai_readiness": {
      "has_nix": false,
      "example_dirs": [
        "recipes"
      ],
      "has_llms_txt": false,
      "has_dockerfile": true,
      "has_mcp_signal": true,
      "bootstrap_files": [
        "mise.toml"
      ],
      "api_schema_files": [],
      "has_devcontainer": false,
      "typecheck_configs": [
        "apps/api/tsconfig.json",
        "apps/client/tsconfig.json",
        "apps/docs/tsconfig.json",
        "apps/provisioner-docker/tsconfig.json",
        "apps/provisioner-ec2/tsconfig.json",
        "apps/runner/tsconfig.json",
        "apps/storybook/tsconfig.json",
        "e2e/core/tsconfig.json",
        "e2e/drivers/gitea/tsconfig.json",
        "e2e/drivers/model-provider/tsconfig.json",
        "e2e/drivers/runner-process/tsconfig.json",
        "e2e/kit/tsconfig.json",
        "e2e/observe/definitions/tsconfig.json",
        "e2e/observe/logs/tsconfig.json",
        "e2e/observe/workflows/tsconfig.json",
        "e2e/screens/agent/tsconfig.json",
        "e2e/screens/auth/tsconfig.json",
        "e2e/screens/integrations/tsconfig.json",
        "e2e/screens/runners/tsconfig.json",
        "e2e/screens/secrets/tsconfig.json",
        "e2e/screens/workspaces/tsconfig.json",
        "e2e/setup/agent/tsconfig.json",
        "e2e/setup/auth/tsconfig.json",
        "e2e/setup/integrations/tsconfig.json",
        "e2e/setup/projects/tsconfig.json",
        "e2e/setup/secrets/tsconfig.json",
        "e2e/setup/workspaces/tsconfig.json",
        "e2e/suites/api/auth/tsconfig.json",
        "e2e/suites/client/agent/tsconfig.json",
        "e2e/suites/client/auth/tsconfig.json",
        "e2e/suites/client/integrations/tsconfig.json",
        "e2e/suites/client/runners/tsconfig.json",
        "e2e/suites/client/secrets/tsconfig.json",
        "e2e/suites/client/workspaces/tsconfig.json",
        "e2e/suites/flow/workflows/tsconfig.json",
        "infra/images/runner/tsconfig.json",
        "libs/api/agent-dto/tsconfig.json",
        "libs/api/agent/tsconfig.json",
        "libs/api/annotations-dto/tsconfig.json",
        "libs/api/annotations/tsconfig.json",
        "libs/api/auth-context/tsconfig.json",
        "libs/api/auth-dto/tsconfig.json",
        "libs/api/auth/tsconfig.json",
        "libs/api/common-dto/tsconfig.json",
        "libs/api/definitions-dto/tsconfig.json",
        "libs/api/definitions/tsconfig.json",
        "libs/api/dispatcher/tsconfig.json",
        "libs/api/email-challenges/tsconfig.json",
        "libs/api/integration/core-dto/tsconfig.json",
        "libs/api/integration/core/tsconfig.json",
        "libs/api/integration/gitea-dto/tsconfig.json",
        "libs/api/integration/gitea/tsconfig.json",
        "libs/api/integration/github-dto/tsconfig.json",
        "libs/api/integration/github/tsconfig.json",
        "libs/api/integration/jira-dto/tsconfig.json",
        "libs/api/integration/jira/tsconfig.json",
        "libs/api/integration/linear-dto/tsconfig.json",
        "libs/api/integration/linear/tsconfig.json",
        "libs/api/integration/sentry-dto/tsconfig.json",
        "libs/api/integration/sentry/tsconfig.json",
        "libs/api/integration/slack-dto/tsconfig.json",
        "libs/api/integration/slack/tsconfig.json",
        "libs/api/integration/spi/tsconfig.json",
        "libs/api/integration/webhook-dto/tsconfig.json",
        "libs/api/integration/webhook/tsconfig.json",
        "libs/api/logs-dto/tsconfig.json",
        "libs/api/logs/tsconfig.json",
        "libs/api/projects-dto/tsconfig.json",
        "libs/api/projects/tsconfig.json",
        "libs/api/runners-dto/tsconfig.json",
        "libs/api/runners/tsconfig.json",
        "libs/api/secrets-dto/tsconfig.json",
        "libs/api/secrets/tsconfig.json",
        "libs/api/server/tsconfig.json",
        "libs/api/triggers-dto/tsconfig.json",
        "libs/api/triggers/tsconfig.json",
        "libs/api/workflows-dto/tsconfig.json",
        "libs/api/workflows/tsconfig.json",
        "libs/api/workspaces-dto/tsconfig.json",
        "libs/api/workspaces/tsconfig.json",
        "libs/client/agent/tsconfig.json",
        "libs/client/api/tsconfig.json",
        "libs/client/auth/tsconfig.json",
        "libs/client/config/tsconfig.json",
        "libs/client/features/tsconfig.json",
        "libs/client/integrations/tsconfig.json",
        "libs/client/invitations/tsconfig.json",
        "libs/client/logs/tsconfig.json",
        "libs/client/onboarding/tsconfig.json",
        "libs/client/projects/tsconfig.json",
        "libs/client/runners/tsconfig.json",
        "libs/client/secrets/tsconfig.json",
        "libs/client/shell/test/external/fixture/tsconfig.json",
        "libs/client/shell/tsconfig.json",
        "libs/client/test-setup/tsconfig.json",
        "libs/client/triggers/tsconfig.json",
        "libs/client/ui/tsconfig.json",
        "libs/client/workflows/tsconfig.json",
        "libs/client/workspace-settings/tsconfig.json",
        "libs/provisioner/core/tsconfig.json",
        "libs/provisioner/docker/tsconfig.json",
        "libs/provisioner/ec2/tsconfig.json",
        "libs/runner/agent/tsconfig.json",
        "libs/runner/execution/tsconfig.json",
        "libs/runner/logs/tsconfig.json",
        "libs/runner/orchestration/tsconfig.json",
        "libs/runner/protocol/tsconfig.json",
        "libs/runner/workspace/tsconfig.json",
        "libs/shared/common/config/tsconfig.json",
        "libs/shared/common/inter-module/tsconfig.json",
        "libs/shared/common/redact/tsconfig.json",
        "libs/shared/common/regex/tsconfig.json",
        "libs/shared/common/runner-labels/tsconfig.json",
        "libs/shared/expression/tsconfig.json",
        "libs/shared/node/auth-root-key/tsconfig.json",
        "libs/shared/node/drizzle/tsconfig.json",
        "libs/shared/node/egress-guard/tsconfig.json",
        "libs/shared/node/email/tsconfig.json",
        "libs/shared/node/error-monitoring/tsconfig.json",
        "libs/shared/node/fastify/tsconfig.json",
        "libs/shared/node/jwt/tsconfig.json",
        "libs/shared/node/log/tsconfig.json",
        "libs/shared/node/mailer/tsconfig.json",
        "libs/shared/node/module/tsconfig.json",
        "libs/shared/node/opentelemetry/tsconfig.json",
        "libs/shared/node/outbox/tsconfig.json",
        "libs/shared/node/postgres/tsconfig.json",
        "libs/shared/node/rate-limit/tsconfig.json",
        "libs/shared/node/resilient-loop/tsconfig.json",
        "libs/shared/node/temporal/tsconfig.json",
        "libs/shared/node/tokens/tsconfig.json",
        "libs/shared/react/integration-icons/tsconfig.json",
        "libs/shared/react/ui/tsconfig.json",
        "libs/shared/workflow/document/tsconfig.json",
        "tools/api-architecture-policy/tsconfig.json",
        "tools/api-database-policy/tsconfig.json",
        "tools/application-release/tsconfig.json",
        "tools/architecture-policy/tsconfig.json",
        "tools/biome/tsconfig.json",
        "tools/client-architecture-policy/tsconfig.json",
        "tools/cloudflare-pages/tsconfig.json",
        "tools/depcruise/tsconfig.json",
        "tools/dependency-policy/tsconfig.json",
        "tools/docker/tsconfig.json",
        "tools/engineering-guidance/tsconfig.json",
        "tools/package-release/tsconfig.json",
        "tools/playwright/tsconfig.json",
        "tools/repository-documentation-policy/tsconfig.json",
        "tools/swc/tsconfig.json",
        "tools/typescript/tsconfig.json",
        "tools/vite/tsconfig.json",
        "tools/vitest/tsconfig.json",
        "tools/worktree-services/tsconfig.json"
      ],
      "toolchain_manifests": [],
      "largest_source_bytes": 140971,
      "source_files_sampled": 3556,
      "oversized_source_files": 4,
      "agent_instruction_files": [
        "AGENTS.md",
        "CLAUDE.md"
      ],
      "agent_instruction_max_bytes": 5104
    },
    "dependencies": {
      "manifests": [
        "dev/package.json",
        "package.json"
      ],
      "advisories": {
        "error": null,
        "scope": "published_package",
        "source": "osv",
        "findings": [],
        "collected": true,
        "malicious": [],
        "truncated": false,
        "by_severity": {},
        "advisory_count": 0,
        "affected_count": 0,
        "assessed_count": 16,
        "malicious_count": 0,
        "assessed_package": "npm:@shipfox/biome@1.10.1",
        "unassessed_count": 0,
        "direct_affected_count": 0
      },
      "ecosystems": [
        "npm"
      ],
      "dependencies": [
        {
          "name": "@shipfox/api-server",
          "manifest": "apps/api/package.json",
          "ecosystem": "npm",
          "version_constraint": "workspace:*"
        },
        {
          "name": "@shipfox/node-error-monitoring",
          "manifest": "apps/api/package.json",
          "ecosystem": "npm",
          "version_constraint": "workspace:*"
        },
        {
          "name": "@shipfox/node-opentelemetry",
          "manifest": "apps/api/package.json",
          "ecosystem": "npm",
          "version_constraint": "workspace:*"
        },
        {
          "name": "@shipfox/client-features",
          "manifest": "apps/client/package.json",
          "ecosystem": "npm",
          "version_constraint": "workspace:*"
        },
        {
          "name": "@shipfox/client-shell",
          "manifest": "apps/client/package.json",
          "ecosystem": "npm",
          "version_constraint": "workspace:*"
        },
        {
          "name": "@shipfox/client-agent",
          "manifest": "apps/client/package.json",
          "ecosystem": "npm",
          "version_constraint": "workspace:*"
        },
        {
          "name": "@shipfox/client-auth",
          "manifest": "apps/client/package.json",
          "ecosystem": "npm",
          "version_constraint": "workspace:*"
        },
        {
          "name": "@shipfox/client-integrations",
          "manifest": "apps/client/package.json",
          "ecosystem": "npm",
          "version_constraint": "workspace:*"
        },
        {
          "name": "@shipfox/client-invitations",
          "manifest": "apps/client/package.json",
          "ecosystem": "npm",
          "version_constraint": "workspace:*"
        },
        {
          "name": "@shipfox/client-onboarding",
          "manifest": "apps/client/package.json",
          "ecosystem": "npm",
          "version_constraint": "workspace:*"
        },
        {
          "name": "@shipfox/client-projects",
          "manifest": "apps/client/package.json",
          "ecosystem": "npm",
          "version_constraint": "workspace:*"
        },
        {
          "name": "@shipfox/client-runners",
          "manifest": "apps/client/package.json",
          "ecosystem": "npm",
          "version_constraint": "workspace:*"
        },
        {
          "name": "@shipfox/client-secrets",
          "manifest": "apps/client/package.json",
          "ecosystem": "npm",
          "version_constraint": "workspace:*"
        },
        {
          "name": "@shipfox/client-triggers",
          "manifest": "apps/client/package.json",
          "ecosystem": "npm",
          "version_constraint": "workspace:*"
        },
        {
          "name": "@shipfox/client-workflows",
          "manifest": "apps/client/package.json",
          "ecosystem": "npm",
          "version_constraint": "workspace:*"
        },
        {
          "name": "@shipfox/client-workspace-settings",
          "manifest": "apps/client/package.json",
          "ecosystem": "npm",
          "version_constraint": "workspace:*"
        },
        {
          "name": "@shipfox/react-ui",
          "manifest": "apps/client/package.json",
          "ecosystem": "npm",
          "version_constraint": "workspace:*"
        },
        {
          "name": "@swc/helpers",
          "manifest": "apps/client/package.json",
          "ecosystem": "npm",
          "version_constraint": "catalog:"
        },
        {
          "name": "@tanstack/react-query",
          "manifest": "apps/client/package.json",
          "ecosystem": "npm",
          "version_constraint": "catalog:"
        },
        {
          "name": "@tanstack/react-router",
          "manifest": "apps/client/package.json",
          "ecosystem": "npm",
          "version_constraint": "catalog:"
        },
        {
          "name": "jotai",
          "manifest": "apps/client/package.json",
          "ecosystem": "npm",
          "version_constraint": "catalog:"
        },
        {
          "name": "react",
          "manifest": "apps/client/package.json",
          "ecosystem": "npm",
          "version_constraint": "catalog:"
        },
        {
          "name": "react-dom",
          "manifest": "apps/client/package.json",
          "ecosystem": "npm",
          "version_constraint": "catalog:"
        },
        {
          "name": "@shipfox/node-opentelemetry",
          "manifest": "apps/provisioner-docker/package.json",
          "ecosystem": "npm",
          "version_constraint": "workspace:*"
        },
        {
          "name": "@shipfox/provisioner-docker-provider",
          "manifest": "apps/provisioner-docker/package.json",
          "ecosystem": "npm",
          "version_constraint": "workspace:*"
        },
        {
          "name": "@shipfox/node-opentelemetry",
          "manifest": "apps/provisioner-ec2/package.json",
          "ecosystem": "npm",
          "version_constraint": "workspace:*"
        },
        {
          "name": "@shipfox/provisioner-ec2-provider",
          "manifest": "apps/provisioner-ec2/package.json",
          "ecosystem": "npm",
          "version_constraint": "workspace:*"
        },
        {
          "name": "@shipfox/node-opentelemetry",
          "manifest": "apps/runner/package.json",
          "ecosystem": "npm",
          "version_constraint": "workspace:*"
        },
        {
          "name": "@shipfox/runner-agent",
          "manifest": "apps/runner/package.json",
          "ecosystem": "npm",
          "version_constraint": "workspace:*"
        },
        {
          "name": "@shipfox/runner-orchestration",
          "manifest": "apps/runner/package.json",
          "ecosystem": "npm",
          "version_constraint": "workspace:*"
        },
        {
          "name": "@shipfox/react-ui",
          "manifest": "apps/storybook/package.json",
          "ecosystem": "npm",
          "version_constraint": "workspace:*"
        },
        {
          "name": "react",
          "manifest": "apps/storybook/package.json",
          "ecosystem": "npm",
          "version_constraint": "catalog:"
        },
        {
          "name": "react-dom",
          "manifest": "apps/storybook/package.json",
          "ecosystem": "npm",
          "version_constraint": "catalog:"
        },
        {
          "name": "@shipfox/config",
          "manifest": "e2e/core/package.json",
          "ecosystem": "npm",
          "version_constraint": "workspace:*"
        },
        {
          "name": "@shipfox/playwright",
          "manifest": "e2e/core/package.json",
          "ecosystem": "npm",
          "version_constraint": "workspace:*"
        },
        {
          "name": "ky",
          "manifest": "e2e/core/package.json",
          "ecosystem": "npm",
          "version_constraint": "catalog:"
        },
        {
          "name": "@shipfox/e2e-core",
          "manifest": "e2e/kit/package.json",
          "ecosystem": "npm",
          "version_constraint": "workspace:*"
        },
        {
          "name": "@shipfox/e2e-setup-auth",
          "manifest": "e2e/kit/package.json",
          "ecosystem": "npm",
          "version_constraint": "workspace:*"
        },
        {
          "name": "@shipfox/e2e-setup-projects",
          "manifest": "e2e/kit/package.json",
          "ecosystem": "npm",
          "version_constraint": "workspace:*"
        },
        {
          "name": "@shipfox/e2e-setup-workspaces",
          "manifest": "e2e/kit/package.json",
          "ecosystem": "npm",
          "version_constraint": "workspace:*"
        },
        {
          "name": "@shipfox/playwright",
          "manifest": "e2e/kit/package.json",
          "ecosystem": "npm",
          "version_constraint": "workspace:*"
        },
        {
          "name": "@shipfox/architecture-policy",
          "manifest": "tools/api-architecture-policy/package.json",
          "ecosystem": "npm",
          "version_constraint": "workspace:*"
        },
        {
          "name": "@shipfox/node-drizzle",
          "manifest": "tools/api-database-policy/package.json",
          "ecosystem": "npm",
          "version_constraint": "workspace:*"
        },
        {
          "name": "@shipfox/node-postgres",
          "manifest": "tools/api-database-policy/package.json",
          "ecosystem": "npm",
          "version_constraint": "workspace:*"
        },
        {
          "name": "ajv",
          "manifest": "tools/application-release/package.json",
          "ecosystem": "npm",
          "version_constraint": "catalog:"
        },
        {
          "name": "ajv-formats",
          "manifest": "tools/application-release/package.json",
          "ecosystem": "npm",
          "version_constraint": "catalog:"
        },
        {
          "name": "@biomejs/biome",
          "manifest": "tools/biome/package.json",
          "ecosystem": "npm",
          "version_constraint": "catalog:"
        },
        {
          "name": "@biomejs/cli-darwin-arm64",
          "manifest": "tools/biome/package.json",
          "ecosystem": "npm",
          "version_constraint": "catalog:"
        },
        {
          "name": "@biomejs/cli-darwin-x64",
          "manifest": "tools/biome/package.json",
          "ecosystem": "npm",
          "version_constraint": "catalog:"
        },
        {
          "name": "@biomejs/cli-linux-arm64",
          "manifest": "tools/biome/package.json",
          "ecosystem": "npm",
          "version_constraint": "catalog:"
        },
        {
          "name": "@biomejs/cli-linux-x64",
          "manifest": "tools/biome/package.json",
          "ecosystem": "npm",
          "version_constraint": "catalog:"
        },
        {
          "name": "@shipfox/tool-utils",
          "manifest": "tools/biome/package.json",
          "ecosystem": "npm",
          "version_constraint": "workspace:*"
        },
        {
          "name": "dependency-cruiser",
          "manifest": "tools/depcruise/package.json",
          "ecosystem": "npm",
          "version_constraint": "catalog:"
        },
        {
          "name": "@shipfox/tool-utils",
          "manifest": "tools/depcruise/package.json",
          "ecosystem": "npm",
          "version_constraint": "workspace:*"
        },
        {
          "name": "@shipfox/tool-utils",
          "manifest": "tools/docker/package.json",
          "ecosystem": "npm",
          "version_constraint": "workspace:*"
        }
      ],
      "all_dependencies": {
        "error": "GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository",
        "source": null,
        "packages": [],
        "collected": false,
        "truncated": false,
        "total_count": null,
        "direct_count": null,
        "indirect_count": null
      }
    },
    "maintainership": {
      "issues": {
        "open_prs": 14,
        "merged_prs": 1126,
        "open_issues": 1,
        "closed_ratio": 0,
        "closed_issues": 0,
        "closed_unmerged_prs": 46
      },
      "bus_factor": 1,
      "bot_contributors": 2,
      "top_contributors": [
        {
          "type": "User",
          "login": "noe-charmet",
          "commits": 998,
          "avatar_url": "https://avatars.githubusercontent.com/u/59678972?v=4"
        },
        {
          "type": "User",
          "login": "ThierryAbalea",
          "commits": 32,
          "avatar_url": "https://avatars.githubusercontent.com/u/1290899?v=4"
        }
      ],
      "contributors_sampled": 2,
      "top_contributor_share": 0.969
    },
    "quality_signals": {
      "has_ci": true,
      "has_tests": true,
      "ci_workflows": [
        "ci.yml",
        "deploy.yml",
        "preview.yml",
        "publish-packages.yml",
        "update-release-pr.yml"
      ],
      "has_docs_dir": true,
      "linter_configs": [
        "biome.json"
      ],
      "has_editorconfig": false,
      "has_linter_config": true,
      "has_precommit_config": false
    },
    "security_signals": {
      "lockfiles": [
        "pnpm-lock.yaml"
      ],
      "scorecard": {
        "checks": [
          {
            "name": "Binary-Artifacts",
            "score": 10,
            "reason": "no binaries found in the repo",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#binary-artifacts"
          },
          {
            "name": "Branch-Protection",
            "score": 5,
            "reason": "branch protection is not maximal on development and all release branches",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#branch-protection"
          },
          {
            "name": "CI-Tests",
            "score": 10,
            "reason": "30 out of 30 merged PRs checked by a CI test -- score normalized to 10",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#ci-tests"
          },
          {
            "name": "CII-Best-Practices",
            "score": 0,
            "reason": "no effort to earn an OpenSSF best practices badge detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#cii-best-practices"
          },
          {
            "name": "Code-Review",
            "score": 0,
            "reason": "Found 0/30 approved changesets -- score normalized to 0",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#code-review"
          },
          {
            "name": "Contributors",
            "score": 6,
            "reason": "project has 2 contributing companies or organizations -- score normalized to 6",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#contributors"
          },
          {
            "name": "Dangerous-Workflow",
            "score": 10,
            "reason": "no dangerous workflow patterns detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dangerous-workflow"
          },
          {
            "name": "Dependency-Update-Tool",
            "score": 10,
            "reason": "update tool detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dependency-update-tool"
          },
          {
            "name": "Fuzzing",
            "score": 0,
            "reason": "project is not fuzzed",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#fuzzing"
          },
          {
            "name": "License",
            "score": 10,
            "reason": "license file detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#license"
          },
          {
            "name": "Maintained",
            "score": 10,
            "reason": "30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#maintained"
          },
          {
            "name": "Packaging",
            "score": null,
            "reason": "packaging workflow not detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#packaging"
          },
          {
            "name": "Pinned-Dependencies",
            "score": 5,
            "reason": "dependency not pinned by hash detected -- score normalized to 5",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#pinned-dependencies"
          },
          {
            "name": "SAST",
            "score": 0,
            "reason": "SAST tool is not run on all commits -- score normalized to 0",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#sast"
          },
          {
            "name": "Security-Policy",
            "score": 10,
            "reason": "security policy file detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#security-policy"
          },
          {
            "name": "Signed-Releases",
            "score": null,
            "reason": "no releases found",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#signed-releases"
          },
          {
            "name": "Token-Permissions",
            "score": 0,
            "reason": "detected GitHub workflow tokens with excessive permissions",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#token-permissions"
          },
          {
            "name": "Vulnerabilities",
            "score": 0,
            "reason": "54 existing vulnerabilities detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#vulnerabilities"
          }
        ],
        "commit": "c2a8e54af1be319bb16d4d5535b80b5e6eca2245",
        "ran_at": "2026-08-02T12:30:12Z",
        "aggregate_score": 5.4,
        "scorecard_version": "v5.5.0"
      },
      "has_codeql_workflow": false,
      "has_security_policy": true,
      "has_dependabot_config": false
    },
    "contribution_flow": {
      "collected": true,
      "ci_last_run_at": "2026-08-01T13:37:07Z",
      "oldest_open_prs": [
        {
          "number": 276,
          "created_at": "2026-06-21T05:40:11Z",
          "last_comment_at": "2026-06-21T05:43:13Z",
          "last_comment_author": "argos-ci"
        },
        {
          "number": 437,
          "created_at": "2026-06-30T09:22:42Z",
          "last_comment_at": "2026-06-30T10:11:04Z",
          "last_comment_author": "noe-charmet"
        },
        {
          "number": 474,
          "created_at": "2026-07-01T19:03:13Z",
          "last_comment_at": "2026-07-01T19:07:18Z",
          "last_comment_author": "argos-ci"
        },
        {
          "number": 673,
          "created_at": "2026-07-06T15:38:23Z",
          "last_comment_at": "2026-07-06T15:40:51Z",
          "last_comment_author": "argos-ci"
        },
        {
          "number": 690,
          "created_at": "2026-07-07T10:44:56Z",
          "last_comment_at": "2026-07-07T10:47:23Z",
          "last_comment_author": "argos-ci"
        },
        {
          "number": 715,
          "created_at": "2026-07-08T09:55:55Z",
          "last_comment_at": "2026-07-08T09:57:56Z",
          "last_comment_author": "argos-ci"
        },
        {
          "number": 1062,
          "created_at": "2026-07-26T18:03:39Z",
          "last_comment_at": "2026-07-26T18:07:18Z",
          "last_comment_author": "argos-ci"
        },
        {
          "number": 1093,
          "created_at": "2026-07-27T17:39:31Z",
          "last_comment_at": "2026-07-27T17:51:16Z",
          "last_comment_author": "argos-ci"
        },
        {
          "number": 1135,
          "created_at": "2026-07-29T08:21:36Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 1172,
          "created_at": "2026-07-30T14:18:55Z",
          "last_comment_at": "2026-08-01T16:45:53Z",
          "last_comment_author": "noe-charmet"
        },
        {
          "number": 1176,
          "created_at": "2026-07-31T07:42:11Z",
          "last_comment_at": "2026-07-31T07:48:17Z",
          "last_comment_author": "argos-ci"
        },
        {
          "number": 1184,
          "created_at": "2026-08-01T07:20:40Z",
          "last_comment_at": "2026-08-01T07:23:54Z",
          "last_comment_author": "argos-ci"
        },
        {
          "number": 1186,
          "created_at": "2026-08-01T09:24:38Z",
          "last_comment_at": "2026-08-01T09:24:44Z",
          "last_comment_author": "vercel"
        },
        {
          "number": 1187,
          "created_at": "2026-08-01T15:54:22Z",
          "last_comment_at": "2026-08-01T16:12:36Z",
          "last_comment_author": "argos-ci"
        }
      ],
      "last_merged_pr_at": "2026-08-01T13:35:31Z",
      "ci_last_conclusion": "SUCCESS",
      "oldest_open_issues": [
        {
          "number": 46,
          "created_at": "2026-05-11T03:38:13Z",
          "last_comment_at": null,
          "last_comment_author": null
        }
      ]
    }
  },
  "config": {
    "disabled_metrics": [],
    "disabled_categories": [],
    "disabled_components": {}
  },
  "source": {
    "url": "https://github.com/ShipfoxHQ/shipfox",
    "host": "github.com",
    "name": "shipfox",
    "owner": "ShipfoxHQ"
  },
  "metrics": {
    "overall": {
      "key": "overall",
      "band": "good",
      "name": "Overall health",
      "note": "The weighted overall 66 is calibrated to 77 on the published index scale (record calibration 2026-08-02).",
      "notes": [
        {
          "code": "overall_calibration",
          "params": {
            "raw": 66,
            "calibrated": 77,
            "calibration": "2026-08-02"
          }
        }
      ],
      "value": 77,
      "inputs": {
        "security": 63,
        "vitality": 84,
        "community": 52,
        "governance": 45,
        "calibration": "2026-08-02",
        "engineering": 82,
        "ai_readiness": 80,
        "weighted_overall_raw": 66
      },
      "components": []
    },
    "categories": [
      {
        "key": "vitality",
        "band": "excellent",
        "name": "Vitality",
        "value": 84,
        "weight": 0.21,
        "metrics": [
          {
            "key": "development_activity",
            "band": "good",
            "name": "Development activity",
            "note": null,
            "notes": [],
            "value": 74,
            "inputs": {
              "commits_last_year": 1128,
              "human_commit_share": 0.96,
              "days_since_last_push": 0,
              "active_weeks_last_year": 14
            },
            "components": [
              {
                "key": "push_recency",
                "name": "Push recency",
                "detail": "last push 0 days ago",
                "points": 36,
                "status": "met",
                "details": [
                  {
                    "code": "push_recency",
                    "params": {
                      "days": 0
                    }
                  }
                ],
                "max_points": 36
              },
              {
                "key": "commit_cadence",
                "name": "Commit cadence",
                "detail": "14/52 weeks with commits",
                "points": 9.7,
                "status": "partial",
                "details": [
                  {
                    "code": "commit_cadence_weeks",
                    "params": {
                      "weeks": 14
                    }
                  }
                ],
                "max_points": 36
              },
              {
                "key": "commit_volume",
                "name": "Commit volume",
                "detail": "1128 commits in the last year",
                "points": 18,
                "status": "met",
                "details": [
                  {
                    "code": "commits_last_year",
                    "params": {
                      "count": 1128
                    }
                  }
                ],
                "max_points": 18
              },
              {
                "key": "openssf_scorecard_maintained",
                "name": "OpenSSF Scorecard: Maintained",
                "detail": "30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10",
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "release_discipline",
            "band": "exceptional",
            "name": "Release discipline",
            "note": "Excluded from scoring (no data or not applicable): OpenSSF Scorecard: Signed-Releases. Remaining weights renormalized.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "openssf_scorecard_signed_releases"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              }
            ],
            "value": 100,
            "inputs": {
              "releases_count": 100,
              "latest_release_tag": "@shipfox/client-workspace-settings@5.0.0",
              "releases_from_tags": false,
              "days_since_latest_release": 10,
              "mean_days_between_releases": 0
            },
            "components": [
              {
                "key": "ships_releases",
                "name": "Ships releases",
                "detail": "100 releases published",
                "points": 27,
                "status": "met",
                "details": [
                  {
                    "code": "releases_published",
                    "params": {
                      "count": 100
                    }
                  }
                ],
                "max_points": 27
              },
              {
                "key": "release_recency",
                "name": "Release recency",
                "detail": "latest release 10 days ago",
                "points": 36,
                "status": "met",
                "details": [
                  {
                    "code": "release_recency",
                    "params": {
                      "days": 10
                    }
                  }
                ],
                "max_points": 36
              },
              {
                "key": "release_cadence",
                "name": "Release cadence",
                "detail": "a release every ~0 days",
                "points": 27,
                "status": "met",
                "details": [
                  {
                    "code": "release_cadence",
                    "params": {
                      "gap": 0
                    }
                  }
                ],
                "max_points": 27
              },
              {
                "key": "openssf_scorecard_signed_releases",
                "name": "OpenSSF Scorecard: Signed-Releases",
                "detail": "no releases found",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_data",
                    "params": {}
                  }
                ],
                "max_points": 10
              }
            ]
          },
          {
            "key": "abandonment",
            "band": "exceptional",
            "name": "Abandonment",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "cap": null,
              "state": "unverified",
              "guards": [],
              "signals": [],
              "red_flag": false,
              "multiplier_pct": 100,
              "declared_reason": null,
              "unverified_reason": "repository_too_young",
              "unanswered_open_prs": null,
              "unanswered_open_issues": null,
              "days_since_last_merged_pr": null,
              "days_since_last_human_commit": null,
              "days_since_last_human_commit_is_floor": false
            },
            "components": [
              {
                "key": "project_is_still_maintained",
                "name": "Project is still maintained",
                "detail": "maintenance record not established from the collected data",
                "points": 100,
                "status": "met",
                "details": [
                  {
                    "code": "abandonment_unverified",
                    "params": {}
                  }
                ],
                "max_points": 100
              }
            ]
          }
        ],
        "description": "Is the project alive — is code being written and are releases shipping?"
      },
      {
        "key": "community",
        "band": "moderate",
        "name": "Community & Adoption",
        "value": 52,
        "weight": 0.17,
        "metrics": [
          {
            "key": "popularity",
            "band": "critical",
            "name": "Popularity & adoption",
            "note": null,
            "notes": [],
            "value": 18,
            "inputs": {
              "forks": 0,
              "stars": 13,
              "watchers": 0,
              "growth_state": "unverified",
              "growth_factor_pct": 100,
              "growth_unverified_reason": "no_history"
            },
            "components": [
              {
                "key": "stars",
                "name": "Stars",
                "detail": "13 stars",
                "points": 17.5,
                "status": "partial",
                "details": [
                  {
                    "code": "stars",
                    "params": {
                      "count": 13
                    }
                  }
                ],
                "max_points": 60
              },
              {
                "key": "forks",
                "name": "Forks",
                "detail": "0 forks",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "forks",
                    "params": {
                      "count": 0
                    }
                  }
                ],
                "max_points": 25
              },
              {
                "key": "watchers",
                "name": "Watchers",
                "detail": "0 watchers",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "watchers",
                    "params": {
                      "count": 0
                    }
                  }
                ],
                "max_points": 15
              }
            ]
          },
          {
            "key": "community_health",
            "band": "excellent",
            "name": "Community health",
            "note": null,
            "notes": [],
            "value": 85,
            "inputs": {
              "has_readme": true,
              "has_license": true,
              "readme_badges": null,
              "has_contributing": true,
              "has_issue_template": false,
              "has_code_of_conduct": true,
              "readme_badge_services": [],
              "has_pull_request_template": false
            },
            "components": [
              {
                "key": "readme",
                "name": "README",
                "detail": null,
                "points": 22.5,
                "status": "met",
                "details": [],
                "max_points": 22.5
              },
              {
                "key": "license",
                "name": "License",
                "detail": "recognized license (MIT)",
                "points": 22.5,
                "status": "met",
                "details": [
                  {
                    "code": "license_standard",
                    "params": {}
                  },
                  {
                    "code": "license_spdx",
                    "params": {
                      "spdx": "MIT"
                    }
                  }
                ],
                "max_points": 22.5
              },
              {
                "key": "contributing_guide",
                "name": "CONTRIBUTING guide",
                "detail": null,
                "points": 18,
                "status": "met",
                "details": [],
                "max_points": 18
              },
              {
                "key": "code_of_conduct",
                "name": "Code of conduct",
                "detail": null,
                "points": 13.5,
                "status": "met",
                "details": [],
                "max_points": 13.5
              },
              {
                "key": "issue_template",
                "name": "Issue template",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.2
              },
              {
                "key": "pr_template",
                "name": "PR template",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 6.3
              }
            ]
          },
          {
            "key": "ecosystem_adoption",
            "band": "moderate",
            "name": "Ecosystem adoption (downloads)",
            "note": "Excluded from scoring (no data or not applicable): Registry dependents. Remaining weights renormalized.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "registry_dependents"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              }
            ],
            "value": 62,
            "inputs": {
              "packages": [
                "@shipfox/biome",
                "@shipfox/docker",
                "@shipfox/depcruise",
                "@shipfox/cloudflare-pages",
                "@shipfox/application-release",
                "@shipfox/architecture-policy",
                "@shipfox/engineering-guidance"
              ],
              "dependents": null,
              "ecosystems": "npm",
              "total_downloads": null,
              "monthly_downloads": 5227
            },
            "components": [
              {
                "key": "monthly_downloads",
                "name": "Monthly downloads",
                "detail": "5,227 downloads/month across npm",
                "points": 49.6,
                "status": "partial",
                "details": [
                  {
                    "code": "downloads_monthly",
                    "params": {
                      "count": 5227,
                      "ecosystems": "npm"
                    }
                  }
                ],
                "max_points": 80
              },
              {
                "key": "registry_dependents",
                "name": "Registry dependents",
                "detail": "not reported by this ecosystem",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "not_reported_by_this_ecosystem",
                    "params": {}
                  }
                ],
                "max_points": 20
              }
            ]
          }
        ],
        "description": "Does the project have users, downloads, attention, and a welcoming setup for contributors?"
      },
      {
        "key": "governance",
        "band": "weak",
        "name": "Sustainability & Governance",
        "value": 45,
        "weight": 0.23,
        "metrics": [
          {
            "key": "maintainer_resilience",
            "band": "critical",
            "name": "Maintainer resilience (bus factor)",
            "note": null,
            "notes": [],
            "value": 18,
            "inputs": {
              "bus_factor": 1,
              "contributors_sampled": 2,
              "top_contributor_share": 0.969
            },
            "components": [
              {
                "key": "bus_factor",
                "name": "Bus factor",
                "detail": "1 contributor(s) cover half of all commits",
                "points": 9,
                "status": "partial",
                "details": [
                  {
                    "code": "bus_factor",
                    "params": {
                      "count": 1
                    }
                  }
                ],
                "max_points": 54
              },
              {
                "key": "commit_distribution",
                "name": "Commit distribution",
                "detail": "top contributor authored 97% of commits",
                "points": 0.7,
                "status": "partial",
                "details": [
                  {
                    "code": "top_contributor_share",
                    "params": {
                      "share": 97
                    }
                  }
                ],
                "max_points": 22.5
              },
              {
                "key": "contributor_breadth",
                "name": "Contributor breadth",
                "detail": "2 contributors",
                "points": 2.7,
                "status": "partial",
                "details": [
                  {
                    "code": "contributors_sampled",
                    "params": {
                      "count": 2
                    }
                  }
                ],
                "max_points": 13.5
              },
              {
                "key": "openssf_scorecard_contributors",
                "name": "OpenSSF Scorecard: Contributors",
                "detail": "project has 2 contributing companies or organizations -- score normalized to 6",
                "points": 6,
                "status": "partial",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "responsiveness",
            "band": "at_risk",
            "name": "Issue & PR responsiveness",
            "note": "Excluded from scoring (no data or not applicable): Newcomer PR acceptance. Remaining weights renormalized.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "newcomer_pr_acceptance"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              }
            ],
            "value": 33,
            "inputs": {
              "merged_prs": 1126,
              "open_issues": 1,
              "closed_issues": 0,
              "prs_merged_7d": null,
              "prs_decided_7d": null,
              "prs_merged_30d": null,
              "prs_decided_30d": null,
              "issue_closed_ratio": 0,
              "closed_unmerged_prs": 46,
              "first_time_authors_30d": null,
              "first_time_prs_merged_30d": null,
              "first_time_prs_decided_30d": null
            },
            "components": [
              {
                "key": "issue_resolution",
                "name": "Issue resolution",
                "detail": "0% of issues closed",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "issues_closed_share",
                    "params": {
                      "share": 0
                    }
                  }
                ],
                "max_points": 42
              },
              {
                "key": "pr_acceptance",
                "name": "PR acceptance",
                "detail": "1126/1172 decided PRs merged",
                "points": 28.8,
                "status": "partial",
                "details": [
                  {
                    "code": "decided_prs_merged",
                    "params": {
                      "merged": 1126,
                      "decided": 1172
                    }
                  }
                ],
                "max_points": 30
              },
              {
                "key": "newcomer_pr_acceptance",
                "name": "Newcomer PR acceptance",
                "detail": "no first-time contributor's PR decided in 30d",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_newcomer_prs",
                    "params": {
                      "days": 30
                    }
                  }
                ],
                "max_points": 13
              },
              {
                "key": "openssf_scorecard_code_review",
                "name": "OpenSSF Scorecard: Code-Review",
                "detail": "Found 0/30 approved changesets -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 15
              }
            ]
          },
          {
            "key": "stewardship",
            "band": "weak",
            "name": "Ownership & stewardship",
            "note": null,
            "notes": [],
            "value": 44,
            "inputs": {
              "followers": 2,
              "owner_type": "Organization",
              "is_verified": null,
              "owner_login": "ShipfoxHQ",
              "public_repos": 6,
              "account_age_days": 873
            },
            "components": [
              {
                "key": "ownership_backing",
                "name": "Ownership backing",
                "detail": "organization-owned",
                "points": 30,
                "status": "met",
                "details": [
                  {
                    "code": "owner_organization",
                    "params": {}
                  }
                ],
                "max_points": 30
              },
              {
                "key": "verified_domain",
                "name": "Verified domain",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 20
              },
              {
                "key": "owner_reach",
                "name": "Owner reach",
                "detail": "2 followers of ShipfoxHQ",
                "points": 3.4,
                "status": "partial",
                "details": [
                  {
                    "code": "owner_followers",
                    "params": {
                      "count": 2,
                      "login": "ShipfoxHQ"
                    }
                  }
                ],
                "max_points": 25
              },
              {
                "key": "track_record",
                "name": "Track record",
                "detail": "6 public repos, account ~2 yr old",
                "points": 10.9,
                "status": "partial",
                "details": [
                  {
                    "code": "public_repos",
                    "params": {
                      "count": 6
                    }
                  },
                  {
                    "code": "account_age_years",
                    "params": {
                      "years": 2
                    }
                  }
                ],
                "max_points": 25
              }
            ]
          },
          {
            "key": "package_maintenance",
            "band": "exceptional",
            "name": "Package maintenance",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "packages": [
                "@shipfox/biome",
                "@shipfox/docker",
                "@shipfox/depcruise",
                "@shipfox/cloudflare-pages",
                "@shipfox/application-release",
                "@shipfox/architecture-policy",
                "@shipfox/engineering-guidance"
              ],
              "ecosystems": "npm",
              "any_deprecated": false,
              "min_days_since_publish": 5
            },
            "components": [
              {
                "key": "published_resolvable",
                "name": "Published & resolvable",
                "detail": "7 package(s) on npm",
                "points": 25,
                "status": "met",
                "details": [
                  {
                    "code": "packages_published",
                    "params": {
                      "count": 7,
                      "ecosystems": "npm"
                    }
                  }
                ],
                "max_points": 25
              },
              {
                "key": "publish_recency",
                "name": "Publish recency",
                "detail": "latest publish 5 days ago",
                "points": 35,
                "status": "met",
                "details": [
                  {
                    "code": "publish_recency",
                    "params": {
                      "days": 5
                    }
                  }
                ],
                "max_points": 35
              },
              {
                "key": "version_history",
                "name": "Version history",
                "detail": "18 published versions",
                "points": 20,
                "status": "met",
                "details": [
                  {
                    "code": "published_versions",
                    "params": {
                      "count": 18
                    }
                  }
                ],
                "max_points": 20
              },
              {
                "key": "not_deprecated",
                "name": "Not deprecated",
                "detail": "active, not deprecated or yanked",
                "points": 20,
                "status": "met",
                "details": [
                  {
                    "code": "package_not_deprecated",
                    "params": {}
                  }
                ],
                "max_points": 20
              }
            ]
          }
        ],
        "description": "Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?"
      },
      {
        "key": "engineering",
        "band": "excellent",
        "name": "Engineering Quality",
        "value": 82,
        "weight": 0.19,
        "metrics": [
          {
            "key": "engineering_practices",
            "band": "excellent",
            "name": "Engineering practices",
            "note": null,
            "notes": [],
            "value": 84,
            "inputs": {
              "has_ci": true,
              "has_tests": true,
              "has_editorconfig": false,
              "has_linter_config": true,
              "has_precommit_config": false
            },
            "components": [
              {
                "key": "ci_workflows",
                "name": "CI workflows",
                "detail": "5 workflow(s)",
                "points": 24,
                "status": "met",
                "details": [
                  {
                    "code": "ci_workflows",
                    "params": {
                      "count": 5
                    }
                  }
                ],
                "max_points": 24
              },
              {
                "key": "tests_present",
                "name": "Tests present",
                "detail": null,
                "points": 24,
                "status": "met",
                "details": [],
                "max_points": 24
              },
              {
                "key": "linter_config",
                "name": "Linter config",
                "detail": "biome.json",
                "points": 16,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": "biome.json"
                    }
                  }
                ],
                "max_points": 16
              },
              {
                "key": "pre_commit_hooks",
                "name": "Pre-commit hooks",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 9.6
              },
              {
                "key": "editorconfig",
                "name": ".editorconfig",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 6.4
              },
              {
                "key": "openssf_scorecard_ci_tests",
                "name": "OpenSSF Scorecard: CI-Tests",
                "detail": "30 out of 30 merged PRs checked by a CI test -- score normalized to 10",
                "points": 20,
                "status": "met",
                "details": [],
                "max_points": 20
              }
            ]
          },
          {
            "key": "documentation",
            "band": "excellent",
            "name": "Documentation",
            "note": null,
            "notes": [],
            "value": 80,
            "inputs": {
              "topics": [],
              "has_wiki": true,
              "homepage": "https://react-ui-ten-nu.vercel.app",
              "has_readme": true,
              "has_docs_dir": true,
              "has_description": false
            },
            "components": [
              {
                "key": "readme",
                "name": "README",
                "detail": null,
                "points": 30,
                "status": "met",
                "details": [],
                "max_points": 30
              },
              {
                "key": "documentation_directory",
                "name": "Documentation directory",
                "detail": null,
                "points": 25,
                "status": "met",
                "details": [],
                "max_points": 25
              },
              {
                "key": "documentation_homepage_site",
                "name": "Documentation / homepage site",
                "detail": "https://react-ui-ten-nu.vercel.app",
                "points": 15,
                "status": "met",
                "details": [],
                "max_points": 15
              },
              {
                "key": "repository_description",
                "name": "Repository description",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 10
              },
              {
                "key": "topics",
                "name": "Topics",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 10
              },
              {
                "key": "wiki",
                "name": "Wiki",
                "detail": null,
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              }
            ]
          }
        ],
        "description": "Are baseline engineering and documentation practices in place?"
      },
      {
        "key": "security",
        "band": "moderate",
        "name": "Security",
        "value": 63,
        "weight": 0.16,
        "metrics": [
          {
            "key": "security_posture",
            "band": "moderate",
            "name": "Security posture",
            "note": "Excluded from scoring (no data or not applicable): Packaging, Signed-Releases. Remaining weights renormalized.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "packaging",
                    "signed_releases"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              }
            ],
            "value": 54,
            "inputs": {
              "source": "openssf_scorecard",
              "checks_evaluated": 16,
              "scorecard_version": "v5.5.0",
              "checks_inconclusive": 2,
              "scorecard_aggregate": 5.4
            },
            "components": [
              {
                "key": "binary_artifacts",
                "name": "Binary-Artifacts",
                "detail": "no binaries found in the repo",
                "points": 7.5,
                "status": "met",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "branch_protection",
                "name": "Branch-Protection",
                "detail": "branch protection is not maximal on development and all release branches",
                "points": 3.8,
                "status": "partial",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "ci_tests",
                "name": "CI-Tests",
                "detail": "30 out of 30 merged PRs checked by a CI test -- score normalized to 10",
                "points": 2.5,
                "status": "met",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "cii_best_practices",
                "name": "CII-Best-Practices",
                "detail": "no effort to earn an OpenSSF best practices badge detected",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "code_review",
                "name": "Code-Review",
                "detail": "Found 0/30 approved changesets -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "contributors",
                "name": "Contributors",
                "detail": "project has 2 contributing companies or organizations -- score normalized to 6",
                "points": 1.5,
                "status": "partial",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "dangerous_workflow",
                "name": "Dangerous-Workflow",
                "detail": "no dangerous workflow patterns detected",
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              },
              {
                "key": "dependency_update_tool",
                "name": "Dependency-Update-Tool",
                "detail": "update tool detected",
                "points": 7.5,
                "status": "met",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "fuzzing",
                "name": "Fuzzing",
                "detail": "project is not fuzzed",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 5
              },
              {
                "key": "license",
                "name": "License",
                "detail": "license file detected",
                "points": 2.5,
                "status": "met",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "maintained",
                "name": "Maintained",
                "detail": "30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10",
                "points": 7.5,
                "status": "met",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "packaging",
                "name": "Packaging",
                "detail": "packaging workflow not detected",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_data",
                    "params": {}
                  }
                ],
                "max_points": 5
              },
              {
                "key": "pinned_dependencies",
                "name": "Pinned-Dependencies",
                "detail": "dependency not pinned by hash detected -- score normalized to 5",
                "points": 2.5,
                "status": "partial",
                "details": [],
                "max_points": 5
              },
              {
                "key": "sast",
                "name": "SAST",
                "detail": "SAST tool is not run on all commits -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 5
              },
              {
                "key": "security_policy",
                "name": "Security-Policy",
                "detail": "security policy file detected",
                "points": 5,
                "status": "met",
                "details": [],
                "max_points": 5
              },
              {
                "key": "signed_releases",
                "name": "Signed-Releases",
                "detail": "no releases found",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_data",
                    "params": {}
                  }
                ],
                "max_points": 7.5
              },
              {
                "key": "token_permissions",
                "name": "Token-Permissions",
                "detail": "detected GitHub workflow tokens with excessive permissions",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "vulnerabilities",
                "name": "Vulnerabilities",
                "detail": "54 existing vulnerabilities detected",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              }
            ]
          },
          {
            "key": "dependency_advisories",
            "band": "exceptional",
            "name": "Dependency advisories",
            "note": "Excluded from scoring (no data or not applicable): No advisories left outstanding. Remaining weights renormalized. Matched the npm:@shipfox/biome@1.10.1 runtime dependency closure — what installing the published package pulls in — 16 packages. Reachability is not analyzed.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "no_advisories_left_outstanding"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              },
              {
                "code": "advisories_scope_published",
                "params": {
                  "package": "npm:@shipfox/biome@1.10.1",
                  "assessed": 16
                }
              },
              {
                "code": "advisories_reachability",
                "params": {}
              }
            ],
            "value": 100,
            "inputs": {
              "source": "osv",
              "advisories": 0,
              "affected_packages": 0,
              "assessed_packages": 16,
              "unassessed_packages": 0,
              "affected_by_severity": "none",
              "direct_affected_packages": 0
            },
            "components": [
              {
                "key": "direct_dependencies_free_of_known_advisories",
                "name": "Direct dependencies free of known advisories",
                "detail": "no direct dependency carries a known advisory",
                "points": 35,
                "status": "met",
                "details": [
                  {
                    "code": "no_direct_advisories",
                    "params": {}
                  }
                ],
                "max_points": 35
              },
              {
                "key": "indirect_dependencies_free_of_known_advisories",
                "name": "Indirect dependencies free of known advisories",
                "detail": "no indirect dependency carries a known advisory",
                "points": 25,
                "status": "met",
                "details": [
                  {
                    "code": "no_indirect_advisories",
                    "params": {}
                  }
                ],
                "max_points": 25
              },
              {
                "key": "no_advisories_left_outstanding",
                "name": "No advisories left outstanding",
                "detail": "no advisory carries a publication date",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "advisories_no_publication_date",
                    "params": {}
                  }
                ],
                "max_points": 40
              }
            ]
          },
          {
            "key": "malicious_dependencies",
            "band": "exceptional",
            "name": "Malicious dependencies",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "source": "osv",
              "meaning": "reported as a malicious package by the OpenSSF corpus; the remedy is removal or moving off the compromised name, never an upgrade of the same artifact. Versions the registry has since pulled are listed but not scored",
              "packages": [],
              "red_flag": false,
              "assessed_packages": 16,
              "malicious_packages": 0,
              "direct_malicious_packages": 0,
              "withdrawn_malicious_packages": 0,
              "installable_malicious_packages": 0
            },
            "components": [
              {
                "key": "no_dependency_reported_as_a_malicious_package",
                "name": "No dependency reported as a malicious package",
                "detail": "no dependency is reported as a malicious package",
                "points": 100,
                "status": "met",
                "details": [
                  {
                    "code": "no_malicious_dependencies",
                    "params": {}
                  }
                ],
                "max_points": 100
              }
            ]
          },
          {
            "key": "high_risk_jurisdiction_exposure",
            "band": "exceptional",
            "name": "High-Risk Jurisdiction Exposure",
            "note": "Only high-confidence self-published location evidence affects this multiplier. Ambiguous matches are review-only; country evidence is not proof of nationality, citizenship, legal registration, malicious intent, or sanctions status.",
            "notes": [
              {
                "code": "jurisdiction_evidence_limits",
                "params": {}
              }
            ],
            "value": 100,
            "inputs": {
              "meaning": "self-published location evidence; not nationality or citizenship",
              "red_flag": false,
              "exposures": [],
              "policy_countries": [
                "Russia",
                "Iran",
                "North Korea"
              ],
              "commit_weight_rule": {
                "min_commits": 50,
                "min_commit_share": 0.1
              },
              "review_only_matches": 0,
              "below_threshold_exposures": [],
              "assessed_self_published_locations": 3
            },
            "components": [
              {
                "key": "policy_exposure_multiplier",
                "name": "Policy exposure multiplier",
                "detail": "no confirmed policy-scope location match",
                "points": 100,
                "status": "met",
                "details": [
                  {
                    "code": "jurisdiction_no_match",
                    "params": {}
                  }
                ],
                "max_points": 100
              }
            ]
          }
        ],
        "description": "Are visible security and supply-chain practices strong, with no malicious dependency and no unresolved high-risk jurisdiction exposure?"
      },
      {
        "key": "ai_readiness",
        "band": "excellent",
        "name": "AI Readiness",
        "value": 80,
        "weight": 0.04,
        "metrics": [
          {
            "key": "ai_agent_context",
            "band": "excellent",
            "name": "Agent context & guidance",
            "note": null,
            "notes": [],
            "value": 85,
            "inputs": {
              "has_llms_txt": false,
              "legible_history_share": 1,
              "agent_instruction_files": [
                "AGENTS.md",
                "CLAUDE.md"
              ],
              "agent_instruction_max_bytes": 5104
            },
            "components": [
              {
                "key": "agent_instructions",
                "name": "Agent instructions",
                "detail": "AGENTS.md, CLAUDE.md",
                "points": 45,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": "AGENTS.md, CLAUDE.md"
                    }
                  }
                ],
                "max_points": 45
              },
              {
                "key": "machine_readable_docs_llms_txt",
                "name": "Machine-readable docs (llms.txt)",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 15
              },
              {
                "key": "legible_commit_history",
                "name": "Legible commit history",
                "detail": "96 of 96 human commits state their intent (structured subject or explanatory body)",
                "points": 40,
                "status": "met",
                "details": [
                  {
                    "code": "legible_history",
                    "params": {
                      "legible": 96,
                      "sampled": 96
                    }
                  }
                ],
                "max_points": 40
              }
            ]
          },
          {
            "key": "ai_verify_loop",
            "band": "good",
            "name": "Verify loop (build / test / typecheck)",
            "note": null,
            "notes": [],
            "value": 77,
            "inputs": {
              "has_nix": false,
              "has_tests": true,
              "lockfiles": [
                "pnpm-lock.yaml"
              ],
              "has_dockerfile": true,
              "typed_language": true,
              "bootstrap_files": [
                "mise.toml"
              ],
              "has_devcontainer": false,
              "has_linter_config": true,
              "typecheck_configs": [
                "apps/api/tsconfig.json",
                "apps/client/tsconfig.json",
                "apps/docs/tsconfig.json",
                "apps/provisioner-docker/tsconfig.json",
                "apps/provisioner-ec2/tsconfig.json",
                "apps/runner/tsconfig.json",
                "apps/storybook/tsconfig.json",
                "e2e/core/tsconfig.json",
                "e2e/drivers/gitea/tsconfig.json",
                "e2e/drivers/model-provider/tsconfig.json",
                "e2e/drivers/runner-process/tsconfig.json",
                "e2e/kit/tsconfig.json",
                "e2e/observe/definitions/tsconfig.json",
                "e2e/observe/logs/tsconfig.json",
                "e2e/observe/workflows/tsconfig.json",
                "e2e/screens/agent/tsconfig.json",
                "e2e/screens/auth/tsconfig.json",
                "e2e/screens/integrations/tsconfig.json",
                "e2e/screens/runners/tsconfig.json",
                "e2e/screens/secrets/tsconfig.json",
                "e2e/screens/workspaces/tsconfig.json",
                "e2e/setup/agent/tsconfig.json",
                "e2e/setup/auth/tsconfig.json",
                "e2e/setup/integrations/tsconfig.json",
                "e2e/setup/projects/tsconfig.json",
                "e2e/setup/secrets/tsconfig.json",
                "e2e/setup/workspaces/tsconfig.json",
                "e2e/suites/api/auth/tsconfig.json",
                "e2e/suites/client/agent/tsconfig.json",
                "e2e/suites/client/auth/tsconfig.json",
                "e2e/suites/client/integrations/tsconfig.json",
                "e2e/suites/client/runners/tsconfig.json",
                "e2e/suites/client/secrets/tsconfig.json",
                "e2e/suites/client/workspaces/tsconfig.json",
                "e2e/suites/flow/workflows/tsconfig.json",
                "infra/images/runner/tsconfig.json",
                "libs/api/agent-dto/tsconfig.json",
                "libs/api/agent/tsconfig.json",
                "libs/api/annotations-dto/tsconfig.json",
                "libs/api/annotations/tsconfig.json",
                "libs/api/auth-context/tsconfig.json",
                "libs/api/auth-dto/tsconfig.json",
                "libs/api/auth/tsconfig.json",
                "libs/api/common-dto/tsconfig.json",
                "libs/api/definitions-dto/tsconfig.json",
                "libs/api/definitions/tsconfig.json",
                "libs/api/dispatcher/tsconfig.json",
                "libs/api/email-challenges/tsconfig.json",
                "libs/api/integration/core-dto/tsconfig.json",
                "libs/api/integration/core/tsconfig.json",
                "libs/api/integration/gitea-dto/tsconfig.json",
                "libs/api/integration/gitea/tsconfig.json",
                "libs/api/integration/github-dto/tsconfig.json",
                "libs/api/integration/github/tsconfig.json",
                "libs/api/integration/jira-dto/tsconfig.json",
                "libs/api/integration/jira/tsconfig.json",
                "libs/api/integration/linear-dto/tsconfig.json",
                "libs/api/integration/linear/tsconfig.json",
                "libs/api/integration/sentry-dto/tsconfig.json",
                "libs/api/integration/sentry/tsconfig.json",
                "libs/api/integration/slack-dto/tsconfig.json",
                "libs/api/integration/slack/tsconfig.json",
                "libs/api/integration/spi/tsconfig.json",
                "libs/api/integration/webhook-dto/tsconfig.json",
                "libs/api/integration/webhook/tsconfig.json",
                "libs/api/logs-dto/tsconfig.json",
                "libs/api/logs/tsconfig.json",
                "libs/api/projects-dto/tsconfig.json",
                "libs/api/projects/tsconfig.json",
                "libs/api/runners-dto/tsconfig.json",
                "libs/api/runners/tsconfig.json",
                "libs/api/secrets-dto/tsconfig.json",
                "libs/api/secrets/tsconfig.json",
                "libs/api/server/tsconfig.json",
                "libs/api/triggers-dto/tsconfig.json",
                "libs/api/triggers/tsconfig.json",
                "libs/api/workflows-dto/tsconfig.json",
                "libs/api/workflows/tsconfig.json",
                "libs/api/workspaces-dto/tsconfig.json",
                "libs/api/workspaces/tsconfig.json",
                "libs/client/agent/tsconfig.json",
                "libs/client/api/tsconfig.json",
                "libs/client/auth/tsconfig.json",
                "libs/client/config/tsconfig.json",
                "libs/client/features/tsconfig.json",
                "libs/client/integrations/tsconfig.json",
                "libs/client/invitations/tsconfig.json",
                "libs/client/logs/tsconfig.json",
                "libs/client/onboarding/tsconfig.json",
                "libs/client/projects/tsconfig.json",
                "libs/client/runners/tsconfig.json",
                "libs/client/secrets/tsconfig.json",
                "libs/client/shell/test/external/fixture/tsconfig.json",
                "libs/client/shell/tsconfig.json",
                "libs/client/test-setup/tsconfig.json",
                "libs/client/triggers/tsconfig.json",
                "libs/client/ui/tsconfig.json",
                "libs/client/workflows/tsconfig.json",
                "libs/client/workspace-settings/tsconfig.json",
                "libs/provisioner/core/tsconfig.json",
                "libs/provisioner/docker/tsconfig.json",
                "libs/provisioner/ec2/tsconfig.json",
                "libs/runner/agent/tsconfig.json",
                "libs/runner/execution/tsconfig.json",
                "libs/runner/logs/tsconfig.json",
                "libs/runner/orchestration/tsconfig.json",
                "libs/runner/protocol/tsconfig.json",
                "libs/runner/workspace/tsconfig.json",
                "libs/shared/common/config/tsconfig.json",
                "libs/shared/common/inter-module/tsconfig.json",
                "libs/shared/common/redact/tsconfig.json",
                "libs/shared/common/regex/tsconfig.json",
                "libs/shared/common/runner-labels/tsconfig.json",
                "libs/shared/expression/tsconfig.json",
                "libs/shared/node/auth-root-key/tsconfig.json",
                "libs/shared/node/drizzle/tsconfig.json",
                "libs/shared/node/egress-guard/tsconfig.json",
                "libs/shared/node/email/tsconfig.json",
                "libs/shared/node/error-monitoring/tsconfig.json",
                "libs/shared/node/fastify/tsconfig.json",
                "libs/shared/node/jwt/tsconfig.json",
                "libs/shared/node/log/tsconfig.json",
                "libs/shared/node/mailer/tsconfig.json",
                "libs/shared/node/module/tsconfig.json",
                "libs/shared/node/opentelemetry/tsconfig.json",
                "libs/shared/node/outbox/tsconfig.json",
                "libs/shared/node/postgres/tsconfig.json",
                "libs/shared/node/rate-limit/tsconfig.json",
                "libs/shared/node/resilient-loop/tsconfig.json",
                "libs/shared/node/temporal/tsconfig.json",
                "libs/shared/node/tokens/tsconfig.json",
                "libs/shared/react/integration-icons/tsconfig.json",
                "libs/shared/react/ui/tsconfig.json",
                "libs/shared/workflow/document/tsconfig.json",
                "tools/api-architecture-policy/tsconfig.json",
                "tools/api-database-policy/tsconfig.json",
                "tools/application-release/tsconfig.json",
                "tools/architecture-policy/tsconfig.json",
                "tools/biome/tsconfig.json",
                "tools/client-architecture-policy/tsconfig.json",
                "tools/cloudflare-pages/tsconfig.json",
                "tools/depcruise/tsconfig.json",
                "tools/dependency-policy/tsconfig.json",
                "tools/docker/tsconfig.json",
                "tools/engineering-guidance/tsconfig.json",
                "tools/package-release/tsconfig.json",
                "tools/playwright/tsconfig.json",
                "tools/repository-documentation-policy/tsconfig.json",
                "tools/swc/tsconfig.json",
                "tools/typescript/tsconfig.json",
                "tools/vite/tsconfig.json",
                "tools/vitest/tsconfig.json",
                "tools/worktree-services/tsconfig.json"
              ],
              "agent_commit_share": 0,
              "toolchain_manifests": [],
              "dependency_bot_commit_share": 0
            },
            "components": [
              {
                "key": "one_command_bootstrap",
                "name": "One-command bootstrap",
                "detail": "mise.toml",
                "points": 18,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": "mise.toml"
                    }
                  }
                ],
                "max_points": 18
              },
              {
                "key": "automated_tests",
                "name": "Automated tests",
                "detail": null,
                "points": 22,
                "status": "met",
                "details": [],
                "max_points": 22
              },
              {
                "key": "lint_format_config",
                "name": "Lint / format config",
                "detail": "biome.json",
                "points": 11,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": "biome.json"
                    }
                  }
                ],
                "max_points": 11
              },
              {
                "key": "static_type_checking",
                "name": "Static type checking",
                "detail": "apps/api/tsconfig.json, apps/client/tsconfig.json, apps/docs/tsconfig.json, apps/provisioner-docker/tsconfig.json, apps/provisioner-ec2/tsconfig.json, apps/runner/tsconfig.json, apps/storybook/tsconfig.json, e2e/core/tsconfig.json, e2e/drivers/gitea/tsconfig.json, e2e/drivers/model-provider/tsconfig.json, e2e/drivers/runner-process/tsconfig.json, e2e/kit/tsconfig.json, e2e/observe/definitions/tsconfig.json, e2e/observe/logs/tsconfig.json, e2e/observe/workflows/tsconfig.json, e2e/screens/agent/tsconfig.json, e2e/screens/auth/tsconfig.json, e2e/screens/integrations/tsconfig.json, e2e/screens/runners/tsconfig.json, e2e/screens/secrets/tsconfig.json, e2e/screens/workspaces/tsconfig.json, e2e/setup/agent/tsconfig.json, e2e/setup/auth/tsconfig.json, e2e/setup/integrations/tsconfig.json, e2e/setup/projects/tsconfig.json, e2e/setup/secrets/tsconfig.json, e2e/setup/workspaces/tsconfig.json, e2e/suites/api/auth/tsconfig.json, e2e/suites/client/agent/tsconfig.json, e2e/suites/client/auth/tsconfig.json, e2e/suites/client/integrations/tsconfig.json, e2e/suites/client/runners/tsconfig.json, e2e/suites/client/secrets/tsconfig.json, e2e/suites/client/workspaces/tsconfig.json, e2e/suites/flow/workflows/tsconfig.json, infra/images/runner/tsconfig.json, libs/api/agent-dto/tsconfig.json, libs/api/agent/tsconfig.json, libs/api/annotations-dto/tsconfig.json, libs/api/annotations/tsconfig.json, libs/api/auth-context/tsconfig.json, libs/api/auth-dto/tsconfig.json, libs/api/auth/tsconfig.json, libs/api/common-dto/tsconfig.json, libs/api/definitions-dto/tsconfig.json, libs/api/definitions/tsconfig.json, libs/api/dispatcher/tsconfig.json, libs/api/email-challenges/tsconfig.json, libs/api/integration/core-dto/tsconfig.json, libs/api/integration/core/tsconfig.json, libs/api/integration/gitea-dto/tsconfig.json, libs/api/integration/gitea/tsconfig.json, libs/api/integration/github-dto/tsconfig.json, libs/api/integration/github/tsconfig.json, libs/api/integration/jira-dto/tsconfig.json, libs/api/integration/jira/tsconfig.json, libs/api/integration/linear-dto/tsconfig.json, libs/api/integration/linear/tsconfig.json, libs/api/integration/sentry-dto/tsconfig.json, libs/api/integration/sentry/tsconfig.json, libs/api/integration/slack-dto/tsconfig.json, libs/api/integration/slack/tsconfig.json, libs/api/integration/spi/tsconfig.json, libs/api/integration/webhook-dto/tsconfig.json, libs/api/integration/webhook/tsconfig.json, libs/api/logs-dto/tsconfig.json, libs/api/logs/tsconfig.json, libs/api/projects-dto/tsconfig.json, libs/api/projects/tsconfig.json, libs/api/runners-dto/tsconfig.json, libs/api/runners/tsconfig.json, libs/api/secrets-dto/tsconfig.json, libs/api/secrets/tsconfig.json, libs/api/server/tsconfig.json, libs/api/triggers-dto/tsconfig.json, libs/api/triggers/tsconfig.json, libs/api/workflows-dto/tsconfig.json, libs/api/workflows/tsconfig.json, libs/api/workspaces-dto/tsconfig.json, libs/api/workspaces/tsconfig.json, libs/client/agent/tsconfig.json, libs/client/api/tsconfig.json, libs/client/auth/tsconfig.json, libs/client/config/tsconfig.json, libs/client/features/tsconfig.json, libs/client/integrations/tsconfig.json, libs/client/invitations/tsconfig.json, libs/client/logs/tsconfig.json, libs/client/onboarding/tsconfig.json, libs/client/projects/tsconfig.json, libs/client/runners/tsconfig.json, libs/client/secrets/tsconfig.json, libs/client/shell/test/external/fixture/tsconfig.json, libs/client/shell/tsconfig.json, libs/client/test-setup/tsconfig.json, libs/client/triggers/tsconfig.json, libs/client/ui/tsconfig.json, libs/client/workflows/tsconfig.json, libs/client/workspace-settings/tsconfig.json, libs/provisioner/core/tsconfig.json, libs/provisioner/docker/tsconfig.json, libs/provisioner/ec2/tsconfig.json, libs/runner/agent/tsconfig.json, libs/runner/execution/tsconfig.json, libs/runner/logs/tsconfig.json, libs/runner/orchestration/tsconfig.json, libs/runner/protocol/tsconfig.json, libs/runner/workspace/tsconfig.json, libs/shared/common/config/tsconfig.json, libs/shared/common/inter-module/tsconfig.json, libs/shared/common/redact/tsconfig.json, libs/shared/common/regex/tsconfig.json, libs/shared/common/runner-labels/tsconfig.json, libs/shared/expression/tsconfig.json, libs/shared/node/auth-root-key/tsconfig.json, libs/shared/node/drizzle/tsconfig.json, libs/shared/node/egress-guard/tsconfig.json, libs/shared/node/email/tsconfig.json, libs/shared/node/error-monitoring/tsconfig.json, libs/shared/node/fastify/tsconfig.json, libs/shared/node/jwt/tsconfig.json, libs/shared/node/log/tsconfig.json, libs/shared/node/mailer/tsconfig.json, libs/shared/node/module/tsconfig.json, libs/shared/node/opentelemetry/tsconfig.json, libs/shared/node/outbox/tsconfig.json, libs/shared/node/postgres/tsconfig.json, libs/shared/node/rate-limit/tsconfig.json, libs/shared/node/resilient-loop/tsconfig.json, libs/shared/node/temporal/tsconfig.json, libs/shared/node/tokens/tsconfig.json, libs/shared/react/integration-icons/tsconfig.json, libs/shared/react/ui/tsconfig.json, libs/shared/workflow/document/tsconfig.json, tools/api-architecture-policy/tsconfig.json, tools/api-database-policy/tsconfig.json, tools/application-release/tsconfig.json, tools/architecture-policy/tsconfig.json, tools/biome/tsconfig.json, tools/client-architecture-policy/tsconfig.json, tools/cloudflare-pages/tsconfig.json, tools/depcruise/tsconfig.json, tools/dependency-policy/tsconfig.json, tools/docker/tsconfig.json, tools/engineering-guidance/tsconfig.json, tools/package-release/tsconfig.json, tools/playwright/tsconfig.json, tools/repository-documentation-policy/tsconfig.json, tools/swc/tsconfig.json, tools/typescript/tsconfig.json, tools/vite/tsconfig.json, tools/vitest/tsconfig.json, tools/worktree-services/tsconfig.json",
                "points": 11,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": "apps/api/tsconfig.json, apps/client/tsconfig.json, apps/docs/tsconfig.json, apps/provisioner-docker/tsconfig.json, apps/provisioner-ec2/tsconfig.json, apps/runner/tsconfig.json, apps/storybook/tsconfig.json, e2e/core/tsconfig.json, e2e/drivers/gitea/tsconfig.json, e2e/drivers/model-provider/tsconfig.json, e2e/drivers/runner-process/tsconfig.json, e2e/kit/tsconfig.json, e2e/observe/definitions/tsconfig.json, e2e/observe/logs/tsconfig.json, e2e/observe/workflows/tsconfig.json, e2e/screens/agent/tsconfig.json, e2e/screens/auth/tsconfig.json, e2e/screens/integrations/tsconfig.json, e2e/screens/runners/tsconfig.json, e2e/screens/secrets/tsconfig.json, e2e/screens/workspaces/tsconfig.json, e2e/setup/agent/tsconfig.json, e2e/setup/auth/tsconfig.json, e2e/setup/integrations/tsconfig.json, e2e/setup/projects/tsconfig.json, e2e/setup/secrets/tsconfig.json, e2e/setup/workspaces/tsconfig.json, e2e/suites/api/auth/tsconfig.json, e2e/suites/client/agent/tsconfig.json, e2e/suites/client/auth/tsconfig.json, e2e/suites/client/integrations/tsconfig.json, e2e/suites/client/runners/tsconfig.json, e2e/suites/client/secrets/tsconfig.json, e2e/suites/client/workspaces/tsconfig.json, e2e/suites/flow/workflows/tsconfig.json, infra/images/runner/tsconfig.json, libs/api/agent-dto/tsconfig.json, libs/api/agent/tsconfig.json, libs/api/annotations-dto/tsconfig.json, libs/api/annotations/tsconfig.json, libs/api/auth-context/tsconfig.json, libs/api/auth-dto/tsconfig.json, libs/api/auth/tsconfig.json, libs/api/common-dto/tsconfig.json, libs/api/definitions-dto/tsconfig.json, libs/api/definitions/tsconfig.json, libs/api/dispatcher/tsconfig.json, libs/api/email-challenges/tsconfig.json, libs/api/integration/core-dto/tsconfig.json, libs/api/integration/core/tsconfig.json, libs/api/integration/gitea-dto/tsconfig.json, libs/api/integration/gitea/tsconfig.json, libs/api/integration/github-dto/tsconfig.json, libs/api/integration/github/tsconfig.json, libs/api/integration/jira-dto/tsconfig.json, libs/api/integration/jira/tsconfig.json, libs/api/integration/linear-dto/tsconfig.json, libs/api/integration/linear/tsconfig.json, libs/api/integration/sentry-dto/tsconfig.json, libs/api/integration/sentry/tsconfig.json, libs/api/integration/slack-dto/tsconfig.json, libs/api/integration/slack/tsconfig.json, libs/api/integration/spi/tsconfig.json, libs/api/integration/webhook-dto/tsconfig.json, libs/api/integration/webhook/tsconfig.json, libs/api/logs-dto/tsconfig.json, libs/api/logs/tsconfig.json, libs/api/projects-dto/tsconfig.json, libs/api/projects/tsconfig.json, libs/api/runners-dto/tsconfig.json, libs/api/runners/tsconfig.json, libs/api/secrets-dto/tsconfig.json, libs/api/secrets/tsconfig.json, libs/api/server/tsconfig.json, libs/api/triggers-dto/tsconfig.json, libs/api/triggers/tsconfig.json, libs/api/workflows-dto/tsconfig.json, libs/api/workflows/tsconfig.json, libs/api/workspaces-dto/tsconfig.json, libs/api/workspaces/tsconfig.json, libs/client/agent/tsconfig.json, libs/client/api/tsconfig.json, libs/client/auth/tsconfig.json, libs/client/config/tsconfig.json, libs/client/features/tsconfig.json, libs/client/integrations/tsconfig.json, libs/client/invitations/tsconfig.json, libs/client/logs/tsconfig.json, libs/client/onboarding/tsconfig.json, libs/client/projects/tsconfig.json, libs/client/runners/tsconfig.json, libs/client/secrets/tsconfig.json, libs/client/shell/test/external/fixture/tsconfig.json, libs/client/shell/tsconfig.json, libs/client/test-setup/tsconfig.json, libs/client/triggers/tsconfig.json, libs/client/ui/tsconfig.json, libs/client/workflows/tsconfig.json, libs/client/workspace-settings/tsconfig.json, libs/provisioner/core/tsconfig.json, libs/provisioner/docker/tsconfig.json, libs/provisioner/ec2/tsconfig.json, libs/runner/agent/tsconfig.json, libs/runner/execution/tsconfig.json, libs/runner/logs/tsconfig.json, libs/runner/orchestration/tsconfig.json, libs/runner/protocol/tsconfig.json, libs/runner/workspace/tsconfig.json, libs/shared/common/config/tsconfig.json, libs/shared/common/inter-module/tsconfig.json, libs/shared/common/redact/tsconfig.json, libs/shared/common/regex/tsconfig.json, libs/shared/common/runner-labels/tsconfig.json, libs/shared/expression/tsconfig.json, libs/shared/node/auth-root-key/tsconfig.json, libs/shared/node/drizzle/tsconfig.json, libs/shared/node/egress-guard/tsconfig.json, libs/shared/node/email/tsconfig.json, libs/shared/node/error-monitoring/tsconfig.json, libs/shared/node/fastify/tsconfig.json, libs/shared/node/jwt/tsconfig.json, libs/shared/node/log/tsconfig.json, libs/shared/node/mailer/tsconfig.json, libs/shared/node/module/tsconfig.json, libs/shared/node/opentelemetry/tsconfig.json, libs/shared/node/outbox/tsconfig.json, libs/shared/node/postgres/tsconfig.json, libs/shared/node/rate-limit/tsconfig.json, libs/shared/node/resilient-loop/tsconfig.json, libs/shared/node/temporal/tsconfig.json, libs/shared/node/tokens/tsconfig.json, libs/shared/react/integration-icons/tsconfig.json, libs/shared/react/ui/tsconfig.json, libs/shared/workflow/document/tsconfig.json, tools/api-architecture-policy/tsconfig.json, tools/api-database-policy/tsconfig.json, tools/application-release/tsconfig.json, tools/architecture-policy/tsconfig.json, tools/biome/tsconfig.json, tools/client-architecture-policy/tsconfig.json, tools/cloudflare-pages/tsconfig.json, tools/depcruise/tsconfig.json, tools/dependency-policy/tsconfig.json, tools/docker/tsconfig.json, tools/engineering-guidance/tsconfig.json, tools/package-release/tsconfig.json, tools/playwright/tsconfig.json, tools/repository-documentation-policy/tsconfig.json, tools/swc/tsconfig.json, tools/typescript/tsconfig.json, tools/vite/tsconfig.json, tools/vitest/tsconfig.json, tools/worktree-services/tsconfig.json"
                    }
                  }
                ],
                "max_points": 11
              },
              {
                "key": "reproducible_environment",
                "name": "Reproducible environment",
                "detail": "Dockerfile, lockfile",
                "points": 10,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": "Dockerfile, lockfile"
                    }
                  }
                ],
                "max_points": 10
              },
              {
                "key": "demonstrated_agent_practice",
                "name": "Demonstrated agent practice",
                "detail": "no agent-authored commits among the last 100",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "no_agent_authored_commits",
                    "params": {
                      "sampled": 100
                    }
                  }
                ],
                "max_points": 10
              },
              {
                "key": "automated_maintenance",
                "name": "Automated maintenance",
                "detail": "no automated dependency updates observed",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "no_dependency_automation",
                    "params": {}
                  }
                ],
                "max_points": 8
              },
              {
                "key": "openssf_scorecard_pinned_dependencies",
                "name": "OpenSSF Scorecard: Pinned-Dependencies",
                "detail": "dependency not pinned by hash detected -- score normalized to 5",
                "points": 5,
                "status": "partial",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "ai_code_legibility",
            "band": "exceptional",
            "name": "Code legibility for models",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "primary_language": "TypeScript",
              "largest_source_bytes": 140971,
              "source_files_sampled": 3556,
              "oversized_source_files": 4
            },
            "components": [
              {
                "key": "type_checkable_code",
                "name": "Type-checkable code",
                "detail": "TypeScript (statically typed)",
                "points": 45,
                "status": "met",
                "details": [
                  {
                    "code": "statically_typed_language",
                    "params": {
                      "language": "TypeScript"
                    }
                  }
                ],
                "max_points": 45
              },
              {
                "key": "manageable_file_sizes",
                "name": "Manageable file sizes",
                "detail": "4/3556 source files over 60KB",
                "points": 54.9,
                "status": "partial",
                "details": [
                  {
                    "code": "oversized_source_files",
                    "params": {
                      "kb": 60,
                      "sampled": 3556,
                      "oversized": 4
                    }
                  }
                ],
                "max_points": 55
              }
            ]
          },
          {
            "key": "ai_interfaces",
            "band": "moderate",
            "name": "Machine-readable interfaces",
            "note": null,
            "notes": [],
            "value": 60,
            "inputs": {
              "example_dirs": [
                "recipes"
              ],
              "has_mcp_signal": true,
              "api_schema_files": []
            },
            "components": [
              {
                "key": "api_schema_openapi_graphql_proto",
                "name": "API schema (OpenAPI/GraphQL/proto)",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 40
              },
              {
                "key": "mcp_server",
                "name": "MCP server",
                "detail": null,
                "points": 20,
                "status": "met",
                "details": [],
                "max_points": 20
              },
              {
                "key": "runnable_examples",
                "name": "Runnable examples",
                "detail": "recipes",
                "points": 40,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": "recipes"
                    }
                  }
                ],
                "max_points": 40
              }
            ]
          }
        ],
        "description": "How well is the repo equipped to be developed and maintained with AI coding agents? Carries a deliberately small weight: agent tooling is a real maintenance signal, but its absence must never gate the top of the scale (calibration saturates at raw 91, so 100/100 remains reachable with AI Readiness at zero)."
      }
    ],
    "classification": {
      "labels": [
        "library",
        "web-ui"
      ],
      "scores": {
        "web-ui": 4,
        "library": 6,
        "mcp-server": 3
      },
      "primary": "library",
      "evidence": [
        {
          "tier": "distribution",
          "label": "library",
          "source": "registry:npm",
          "weight": 6
        },
        {
          "tier": "dependencies",
          "label": "web-ui",
          "source": "dep:react-dom",
          "weight": 4
        },
        {
          "tier": "structure",
          "label": "mcp-server",
          "source": "mcp_signal",
          "weight": 3
        }
      ],
      "artifacts": [],
      "confidence": "medium",
      "host_extension": false,
      "runs_as_process": true,
      "consumed_by_code": true
    },
    "metrics_version": "2.3.1"
  },
  "warnings": [
    "Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token",
    "GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository"
  ],
  "report_type": "repository",
  "generated_at": "2026-08-02T12:30:32.710371Z",
  "schema_version": "0.27.0",
  "badge_url": "https://raw.githubusercontent.com/inspect-software/badges/main/v1/s/ShipfoxHQ/shipfox.svg",
  "full_name": "ShipfoxHQ/shipfox",
  "license_state": "standard",
  "license_spdx": "MIT"
}