公开记录
软件健康报告模式 0.27.0 · 指标 1.13.0 · 2026-07-25 09:56 UTC

YosefHayim / launch-store

Self-hosted CLI for building, signing, and shipping Expo/React Native apps to TestFlight and Google Play.

TypeScriptMIT★ 3 星标⑂ 1 复刻始于 2026年6月在 GitHub 上查看 ↗

YosefHayim/launch-store 的健康指数为 100 分中的 62 分,处于「中等」区间。 其得分最高的类别是Engineering Quality(88/100),最低的是Community & Adoption(41/100)。 最近一次更新在 5 天前。 近期的大部分工作由 1 位贡献者完成。

62
总分 / 100
中等

软件健康指数

指标归入加权类别,统一采用 1–100 量表。总体分先取类别加权平均;当公开证据触发高风险司法辖区政策时,评级会按政策调整,并设置 49(有风险)的上限。AI 就绪度不计入总体分。

62
优秀85-100堪称典范;基本满足所有检验标准
良好70-84健康;仅有轻微不足
中等50-69可接受,但存在明显不足;建议进行审查
存在风险30-49存在重大薄弱环节;采用时应保持审慎
危急1-29问题严重(项目被弃置、仅有单一维护者、缺乏基本工程规范)
活力社区与采用可持续性与治理工程质量安全AI 就绪度

评分画像

每条轴代表一个类别。形状比平均值更重要——健康的对象会填满整个图形,而“一峰一谷”式画像意味着某一维度的优势正掩盖另一维度的风险。

所有权

YosefHayim个人账户
16 关注者12 个公开仓库始于 2024年8月

该仓库由个人账户拥有。相较于组织支持的项目,单一所有者项目的延续性风险更高。

软件包生态系统

按类别列示的指标

活力

项目是否仍有生命——是否仍在编写代码,是否仍在发布版本?

75良好 · 占总体的 22%
评分方式
36/36推送新近度 — 最近一次推送于 5 天前
4.2/36提交节奏 — 52 周中有 6 周有提交
18/18提交量 — 最近一年 311 次提交
0/10OpenSSF Scorecard:Maintained — project was created within the last 90 days. Please review its contents carefully
所用输入
commits_last_year311
human_commit_share1
days_since_last_push5
active_weeks_last_year6

发布纪律

100优秀
评分方式
27/27有发布版本 — 已发布 37 个发布版本
36/36发布时效 — 最近一次发布版本于 5 天前
27/27发布节奏 — 约每 2.4 天发布一次
0/10OpenSSF Scorecard:Signed-Releases — 无数据
所用输入
releases_count37
latest_release_tagv0.32.8
releases_from_tags
days_since_latest_release5
mean_days_between_releases2.4
已排除计分(无数据或不适用):OpenSSF Scorecard:Signed-Releases。 其余权重已重新归一化。

社区与采用

项目是否拥有用户、下载量与关注度,并具备欢迎贡献者参与的配置?

41存在风险 · 占总体的 18%
评分方式
4.9/60星标 — 3 个星标
0/25复刻 — 1 个复刻
0/15关注者 — 0 位关注者
所用输入
forks1
stars3
watchers0
growth_stateunverified
growth_factor_pct100
growth_unverified_reasonno_history

社区健康

70良好
评分方式
22.5/22.5README
22.5/22.5许可证 — 可识别的许可证(MIT)
18/18CONTRIBUTING 指南
0/13.5行为准则
0/7.2议题模板
0/6.3PR 模板
所用输入
has_readme
has_license
has_contributing
has_issue_template
has_code_of_conduct
has_pull_request_template
评分方式
45.6/80月度下载量 — npm 合计每月 2,629 次下载
0/20注册表被依赖数 — 该生态系统不报告此项
所用输入
packageslaunch-store
dependents
ecosystemsnpm
total_downloads
monthly_downloads2,629
已排除计分(无数据或不适用):注册表被依赖数。 其余权重已重新归一化。

可持续性与治理

项目能否在其成员之外延续——巴士系数、响应能力、由谁支持,以及软件包的维护状况?

54中等 · 占总体的 24%
评分方式
9/54巴士系数 — 1 位贡献者贡献了半数提交
0/22.5提交分布 — 头号贡献者编写了 100% 的提交
1.4/13.5贡献者广度 — 1 位贡献者
0/10OpenSSF Scorecard:Contributors — project has 0 contributing companies or organizations -- score normalized to 0
所用输入
bus_factor1
contributors_sampled1
top_contributor_share1
评分方式
46.4/46.8议题解决 — 99% 的议题已关闭
37.6/38.3PR 接受 — 已裁定的 PR 中 167/170 已合并
0/15OpenSSF Scorecard:Code-Review — Found 0/30 approved changesets -- score normalized to 0
所用输入
merged_prs167
open_issues1
closed_issues132
issue_closed_ratio0.992
closed_unmerged_prs3
评分方式
10/30所有权背书 — 个人(用户)账户
0/20已验证域名 — 不适用于个人账户
8.8/25所有者影响力 — YosefHayim 有 16 位关注者
11.9/25既往记录 — 12 个公开仓库,账户约 1 年
所用输入
followers16
owner_typeUser
is_verified
owner_loginYosefHayim
public_repos12
account_age_days701
已排除计分(无数据或不适用):已验证域名。 其余权重已重新归一化。
评分方式
25/25已发布且可解析 — npm 上有 1 个软件包
35/35发布时效 — 最近一次发布于 5 天前
20/20版本历史 — 36 个已发布版本
20/20未被弃用 — 活跃,未被弃用或撤回
所用输入
packageslaunch-store
ecosystemsnpm
any_deprecated
min_days_since_publish5

工程质量

基础的工程与文档实践是否到位?

88优秀 · 占总体的 20%

工程实践

80良好
评分方式
24/24CI 工作流 — 11 个工作流
24/24存在测试
16/16Linter 配置 — biome.json
0/9.6Pre-commit 钩子
0/6.4.editorconfig
0/20OpenSSF Scorecard:CI-Tests — 无数据
所用输入
has_ci
has_tests
has_editorconfig
has_linter_config
has_precommit_config
已排除计分(无数据或不适用):OpenSSF Scorecard:CI-Tests。 其余权重已重新归一化。

文档

100优秀
评分方式
30/30README
25/25文档目录
15/15文档 / 主页站点 — https://www.npmjs.com/package/launch-store
10/10仓库描述
10/10主题标签 — 18 个主题标签
10/10Wiki
所用输入
topicsandroid, app-store, app-store-connect, ci-cd, cli, code-signing, eas, expo, fastlane, ios, mobile, play-store, react-native, testflight, expo-updates, google-play, nodejs, typescript
has_wiki
homepagehttps://www.npmjs.com/package/launch-store
has_readme
has_docs_dir
has_description

安全

可见的安全与供应链实践是否稳固,且不存在未解决的高风险司法辖区暴露?

47存在风险 · 占总体的 16%

安全态势

37存在风险
评分方式
7.5/7.5Binary-Artifacts — no binaries found in the repo
0/7.5Branch-Protection — 无数据
0/2.5CI-Tests — 无数据
0/2.5CII-Best-Practices — no effort to earn an OpenSSF best practices badge detected
0/7.5Code-Review — Found 0/30 approved changesets -- score normalized to 0
0/2.5Contributors — project has 0 contributing companies or organizations -- score normalized to 0
10/10Dangerous-Workflow — no dangerous workflow patterns detected
0/7.5Dependency-Update-Tool — no update tool detected
0/5Fuzzing — project is not fuzzed
2.5/2.5许可证 — license file detected
0/7.5Maintained — project was created within the last 90 days. Please review its contents carefully
5/5Packaging — packaging workflow detected
0/5Pinned-Dependencies — dependency not pinned by hash detected -- score normalized to 0
0/5SAST — no SAST tool detected
0/5Security-Policy — security policy file not detected
0/7.5Signed-Releases — 无数据
7.5/7.5Token-Permissions — GitHub workflow tokens follow principle of least privilege
0/7.5Vulnerabilities — 10 existing vulnerabilities detected
所用输入
sourceopenssf_scorecard
checks_evaluated15
scorecard_versionv5.5.0
checks_inconclusive3
scorecard_aggregate3.7
已排除计分(无数据或不适用):branch_protection, ci_tests, signed_releases。 其余权重已重新归一化。
评分方式
35/35直接依赖不含已知公告 — 没有直接依赖携带已知公告
13.2/25间接依赖不含已知公告 — 1 个受影响:@hono/node-server 1.19.15 (moderate 5.9)
40/40没有长期未处理的公告 — 没有公告公开超过 90 天
所用输入
sourceosv
advisories1
affected_packages1
assessed_packages165
unassessed_packages0
affected_by_severitymoderate 1
direct_affected_packages0
比对的是 npm:launch-store@0.32.8 的运行时依赖闭包——安装已发布的软件包时真正被拉取进来的内容——共 165 个软件包。 未对可达性进行分析。

AI 就绪度

该仓库在多大程度上具备与 AI 编码代理协同开发与维护的条件?这是一枚独立的实验性徽章——权重为 0.0,因此单独呈现,不影响总体健康评分。

77良好 · 占总体的 0%
评分方式
45/45代理指令 — .cursor/rules/core-types.mdc, .cursor/rules/exec-secrets.mdc, .cursor/rules/launch.mdc, .cursor/rules/providers.mdc, AGENTS.md, CLAUDE.md
15/15机器可读文档(llms.txt) — 存在 llms.txt
40/40可读的提交历史 — 100 次人类提交中有 100 次说明了意图(结构化标题或解释性正文)
所用输入
has_llms_txt
legible_history_share1
agent_instruction_files.cursor/rules/core-types.mdc, .cursor/rules/exec-secrets.mdc, .cursor/rules/launch.mdc, .cursor/rules/providers.mdc, AGENTS.md, CLAUDE.md
agent_instruction_max_bytes7,397
评分方式
0/18一条命令的引导启动
22/22自动化测试
11/11Lint / 格式化配置 — biome.json
11/11静态类型检查 — examples/hello-world/tsconfig.json, tsconfig.json
10/10可复现环境 — lockfile
10/10已体现的代理实践 — 最近 100 次提交中有 73 次由代理编写或署名代理
0/8自动化维护 — 未观察到自动依赖更新
0/10OpenSSF Scorecard:Pinned-Dependencies — dependency not pinned by hash detected -- score normalized to 0
所用输入
has_nix
has_tests
lockfilespnpm-lock.yaml
has_dockerfile
typed_language
bootstrap_files
has_devcontainer
has_linter_config
typecheck_configsexamples/hello-world/tsconfig.json, tsconfig.json
agent_commit_share0.73
toolchain_manifests
dependency_bot_commit_share0
评分方式
45/45可类型检查的代码 — TypeScript(静态类型)
54.6/55可控的文件大小 — 采样的 525 个源文件中有 4 个超过 60KB
所用输入
primary_languageTypeScript
largest_source_bytes5,069,338
source_files_sampled525
oversized_source_files4

机器可读接口

40存在风险
评分方式
0/40API 模式(OpenAPI/GraphQL/proto)
0/20MCP 服务器
40/40可运行示例 — examples
所用输入
example_dirsexamples
has_mcp_signal
api_schema_files

关键数据

3GitHub 星标
1贡献者
311最近 12 个月提交数
5距最近推送天数
37发布版本数
1巴士系数(bus factor)
1开放议题
npm软件包生态系统数

数据采集警告

  • Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token

更多细节

OpenSSF Scorecard 3.7 / 10
3.7综合

来自开源项目 OpenSSF Scorecard 的独立、工具无关的安全评估。每项检查奖励的是安全实践本身,而非特定供应商的工具。Scorecard 无法判定的检查项标记为 不适用,并从安全评分中剔除(绝不按零分计)。Scorecard v5.5.0 · 2026-07-25 09:56 UTC

10Binary-Artifactsno binaries found in the repo
不适用Branch-Protectioninternal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md
不适用CI-Testsno pull request found
0CII-Best-Practicesno effort to earn an OpenSSF best practices badge detected
0Code-ReviewFound 0/30 approved changesets -- score normalized to 0
0Contributorsproject has 0 contributing companies or organizations -- score normalized to 0
10Dangerous-Workflowno dangerous workflow patterns detected
0Dependency-Update-Toolno update tool detected
0Fuzzingproject is not fuzzed
10Licenselicense file detected
0Maintainedproject was created within the last 90 days. Please review its contents carefully
10Packagingpackaging workflow detected
0Pinned-Dependenciesdependency not pinned by hash detected -- score normalized to 0
0SASTno SAST tool detected
0Security-Policysecurity policy file not detected
不适用Signed-Releasesno releases found
10Token-PermissionsGitHub workflow tokens follow principle of least privilege
0Vulnerabilities10 existing vulnerabilities detected
直接依赖 7
注册表软件包版本约束清单文件
npm@clack/prompts^1.5.1package.json
npm@effect/platform^0.96.2package.json
npmchalk^5.6.2package.json
npmcommander^12.1.0package.json
npmeffect^3.21.4package.json
npmjiti^2.4.0package.json
npmjose^5.9.6package.json
全部依赖 393

来自 GitHub 依赖图的完整解析依赖集合:9 个直接依赖与 384 个间接(传递)软件包。仓库提交锁文件时,传递闭包才是完整的。

注册表软件包版本关系
npm@clack/prompts1.5.1直接
npm@effect/platform0.96.2直接
npmchalk5.6.2直接
npmcommander12.1.0直接
npmcommander13.1.0直接
npmeffect3.21.4直接
npmjiti2.7.0直接
npmjose5.10.0直接
npmjose6.2.3直接
npm@aws-crypto/crc325.2.0间接
npm@aws-crypto/crc32c5.2.0间接
npm@aws-crypto/sha1-browser5.2.0间接
npm@aws-crypto/sha256-browser5.2.0间接
npm@aws-crypto/sha256-js5.2.0间接
npm@aws-crypto/supports-web-crypto5.2.0间接
npm@aws-crypto/util5.2.0间接
npm@aws-sdk/checksums3.1000.5间接
npm@aws-sdk/client-cognito-identity3.1068.0间接
npm@aws-sdk/client-ec23.1068.0间接
npm@aws-sdk/client-s33.1068.0间接
npm@aws-sdk/core3.974.20间接
npm@aws-sdk/credential-provider-cognito-identity3.972.45间接
npm@aws-sdk/credential-provider-env3.972.46间接
npm@aws-sdk/credential-provider-http3.972.48间接
npm@aws-sdk/credential-provider-ini3.972.53间接
npm@aws-sdk/credential-provider-login3.972.52间接
npm@aws-sdk/credential-provider-node3.972.55间接
npm@aws-sdk/credential-provider-process3.972.46间接
npm@aws-sdk/credential-provider-sso3.972.52间接
npm@aws-sdk/credential-provider-web-identity3.972.52间接
npm@aws-sdk/credential-providers3.1068.0间接
npm@aws-sdk/middleware-flexible-checksums3.974.30间接
npm@aws-sdk/middleware-sdk-ec23.972.34间接
npm@aws-sdk/middleware-sdk-s33.972.51间接
npm@aws-sdk/nested-clients3.997.20间接
npm@aws-sdk/signature-v4-multi-region3.996.34间接
npm@aws-sdk/token-providers3.1066.0间接
npm@aws-sdk/types3.973.12间接
npm@aws-sdk/util-locate-window3.965.7间接
npm@aws-sdk/xml-builder3.972.29间接
npm@aws/lambda-invoke-store0.2.4间接
npm@babel/code-frame7.29.7间接
npm@babel/core^7.25.0间接
npm@babel/helper-string-parser7.29.7间接
npm@babel/helper-validator-identifier7.29.7间接
npm@babel/parser7.29.7间接
npm@babel/types7.29.7间接
npm@bcoe/v8-coverage1.0.2间接
npm@biomejs/biome2.5.1间接
npm@biomejs/cli-darwin-arm642.5.1间接
npm@biomejs/cli-darwin-x642.5.1间接
npm@biomejs/cli-linux-arm642.5.1间接
npm@biomejs/cli-linux-arm64-musl2.5.1间接
npm@biomejs/cli-linux-x642.5.1间接
npm@biomejs/cli-linux-x64-musl2.5.1间接
npm@biomejs/cli-win32-arm642.5.1间接
npm@biomejs/cli-win32-x642.5.1间接
npm@clack/core1.4.1间接
npm@emnapi/core1.10.0间接
npm@emnapi/runtime1.10.0间接
npm@emnapi/wasi-threads1.2.1间接
npm@esbuild/aix-ppc640.28.1间接
npm@esbuild/android-arm0.28.1间接
npm@esbuild/android-arm640.28.1间接
npm@esbuild/android-x640.28.1间接
npm@esbuild/darwin-arm640.28.1间接
npm@esbuild/darwin-x640.28.1间接
npm@esbuild/freebsd-arm640.28.1间接
npm@esbuild/freebsd-x640.28.1间接
npm@esbuild/linux-arm0.28.1间接
npm@esbuild/linux-arm640.28.1间接
npm@esbuild/linux-ia320.28.1间接
npm@esbuild/linux-loong640.28.1间接
npm@esbuild/linux-mips64el0.28.1间接
npm@esbuild/linux-ppc640.28.1间接
npm@esbuild/linux-riscv640.28.1间接
npm@esbuild/linux-s390x0.28.1间接
npm@esbuild/linux-x640.28.1间接
npm@esbuild/netbsd-arm640.28.1间接
npm@esbuild/netbsd-x640.28.1间接
npm@esbuild/openbsd-arm640.28.1间接
npm@esbuild/openbsd-x640.28.1间接
npm@esbuild/openharmony-arm640.28.1间接
npm@esbuild/sunos-x640.28.1间接
npm@esbuild/win32-arm640.28.1间接
npm@esbuild/win32-ia320.28.1间接
npm@esbuild/win32-x640.28.1间接
npm@hono/node-server1.19.14间接
npm@jridgewell/resolve-uri3.1.2间接
npm@jridgewell/sourcemap-codec1.5.5间接
npm@jridgewell/trace-mapping0.3.31间接
npm@modelcontextprotocol/sdk1.29.0间接
npm@msgpackr-extract/msgpackr-extract-darwin-arm643.0.4间接
npm@msgpackr-extract/msgpackr-extract-darwin-x643.0.4间接
npm@msgpackr-extract/msgpackr-extract-linux-arm3.0.4间接
npm@msgpackr-extract/msgpackr-extract-linux-arm643.0.4间接
npm@msgpackr-extract/msgpackr-extract-linux-x643.0.4间接
npm@msgpackr-extract/msgpackr-extract-win32-x643.0.4间接
npm@napi-rs/keyring1.3.0间接
npm@napi-rs/keyring-darwin-arm641.3.0间接
npm@napi-rs/keyring-darwin-x641.3.0间接
npm@napi-rs/keyring-freebsd-x641.3.0间接
npm@napi-rs/keyring-linux-arm-gnueabihf1.3.0间接
npm@napi-rs/keyring-linux-arm64-gnu1.3.0间接
npm@napi-rs/keyring-linux-arm64-musl1.3.0间接
npm@napi-rs/keyring-linux-riscv64-gnu1.3.0间接
npm@napi-rs/keyring-linux-x64-gnu1.3.0间接
npm@napi-rs/keyring-linux-x64-musl1.3.0间接
npm@napi-rs/keyring-win32-arm64-msvc1.3.0间接
npm@napi-rs/keyring-win32-ia32-msvc1.3.0间接
npm@napi-rs/keyring-win32-x64-msvc1.3.0间接
npm@napi-rs/wasm-runtime1.1.6间接
npm@nodable/entities2.2.0间接
npm@oxc-project/types0.133.0间接
npm@redocly/ajv8.11.2间接
npm@redocly/config0.22.0间接
npm@redocly/openapi-core1.34.17间接
npm@rolldown/binding-android-arm641.0.3间接
npm@rolldown/binding-darwin-arm641.0.3间接
npm@rolldown/binding-darwin-x641.0.3间接
npm@rolldown/binding-freebsd-x641.0.3间接
npm@rolldown/binding-linux-arm-gnueabihf1.0.3间接
npm@rolldown/binding-linux-arm64-gnu1.0.3间接
npm@rolldown/binding-linux-arm64-musl1.0.3间接
npm@rolldown/binding-linux-ppc64-gnu1.0.3间接
npm@rolldown/binding-linux-s390x-gnu1.0.3间接
npm@rolldown/binding-linux-x64-gnu1.0.3间接
npm@rolldown/binding-linux-x64-musl1.0.3间接
npm@rolldown/binding-openharmony-arm641.0.3间接
npm@rolldown/binding-wasm32-wasi1.0.3间接
npm@rolldown/binding-win32-arm64-msvc1.0.3间接
npm@rolldown/binding-win32-x64-msvc1.0.3间接
npm@rolldown/pluginutils1.0.1间接
npm@smithy/core3.24.7间接
npm@smithy/credential-provider-imds4.3.9间接
npm@smithy/fetch-http-handler5.4.7间接
npm@smithy/is-array-buffer2.2.0间接
npm@smithy/node-http-handler4.7.8间接
npm@smithy/signature-v45.4.7间接
npm@smithy/types4.14.4间接
npm@smithy/util-buffer-from2.2.0间接
npm@smithy/util-utf82.3.0间接
npm@standard-schema/spec1.1.0间接
npm@tybys/wasm-util0.10.3间接
npm@types/chai5.2.3间接
npm@types/deep-eql4.0.2间接
npm@types/estree1.0.9间接
npm@types/node20.19.43间接
npm@types/react~18.3.0间接
npm@vitest/coverage-v84.1.8间接
npm@vitest/expect4.1.8间接
npm@vitest/mocker4.1.8间接
npm@vitest/pretty-format4.1.8间接
npm@vitest/runner4.1.8间接
npm@vitest/snapshot4.1.8间接
npm@vitest/spy4.1.8间接
npm@vitest/utils4.1.8间接
npmaccepts2.0.0间接
npmagent-base7.1.4间接
npmajv8.20.0间接
npmajv-formats3.0.1间接
npmansi-colors4.1.3间接
npmansi-escapes7.3.0间接
npmansi-regex6.2.2间接
npmansi-styles6.2.3间接
npmanynum1.0.0间接
npmargparse2.0.1间接
npmassertion-error2.0.1间接
npmast-v8-to-istanbul1.0.4间接
npmbalanced-match1.0.2间接
npmbody-parser2.3.0间接
npmbowser2.14.1间接
npmbrace-expansion2.1.1间接
npmbraces3.0.3间接
npmbytes3.1.2间接
npmcall-bind-apply-helpers1.0.2间接
npmcall-bound1.0.4间接
npmchai6.2.2间接
npmchange-case5.4.4间接
npmcli-cursor5.0.0间接
npmcli-truncate4.0.0间接
npmcolorette1.4.0间接
npmcolorette2.0.20间接
npmcontent-disposition1.1.0间接
npmcontent-type1.0.5间接
npmcontent-type2.0.0间接
npmconvert-source-map2.0.0间接
npmcookie0.7.2间接
npmcookie-signature1.2.2间接
npmcors2.8.6间接
npmcross-spawn7.0.6间接
npmdebug4.4.3间接
npmdepd2.0.0间接
npmdetect-libc2.1.2间接
npmdunder-proto1.0.1间接
npmee-first1.1.1间接
npmemoji-regex10.6.0间接
npmencodeurl2.0.0间接
npmenvironment1.1.0间接
npmes-define-property1.0.1间接
npmes-errors1.3.0间接
npmes-module-lexer2.1.0间接
npmes-object-atoms1.1.2间接
npmesbuild0.28.1间接
npmescape-html1.0.3间接
npmestree-walker3.0.3间接
npmetag1.8.1间接
npmeventemitter35.0.4间接
npmeventsource3.0.7间接
npmeventsource-parser3.1.0间接
npmexeca8.0.1间接
npmexpect-type1.3.0间接
npmexpo~52.0.0间接
npmexpo-status-bar~2.0.0间接
npmexpress5.2.1间接
npmexpress-rate-limit8.5.2间接
npmfast-check3.23.2间接
npmfast-deep-equal3.1.3间接
npmfast-string-truncated-width3.0.3间接
npmfast-string-width3.0.2间接
npmfast-uri3.1.2间接
npmfast-wrap-ansi0.2.2间接
npmfast-xml-builder1.2.0间接
npmfast-xml-parser5.7.3间接
npmfdir6.5.0间接
npmfill-range7.1.1间接
npmfinalhandler2.1.1间接
npmfind-my-way-ts0.1.6间接
npmforwarded0.2.0间接
npmfresh2.0.0间接
npmfsevents2.3.3间接
npmfunction-bind1.1.2间接
npmget-east-asian-width1.6.0间接
npmget-intrinsic1.3.0间接
npmget-proto1.0.1间接
npmget-stream8.0.1间接
npmgopd1.2.0间接
npmhas-flag4.0.0间接
npmhas-symbols1.1.0间接
npmhasown2.0.4间接
npmhono4.12.25间接
npmhtml-escaper2.0.2间接
npmhttp-errors2.0.1间接
npmhttps-proxy-agent7.0.6间接
npmhuman-signals5.0.0间接
npmhusky9.1.7间接
npmiconv-lite0.7.2间接
npmindex-to-position1.2.0间接
npminherits2.0.4间接
npmip-address10.2.0间接
npmipaddr.js1.9.1间接
npmis-fullwidth-code-point4.0.0间接
npmis-fullwidth-code-point5.1.0间接
npmis-number7.0.0间接
npmis-promise4.0.0间接
npmis-stream3.0.0间接
npmisexe2.0.0间接
npmistanbul-lib-coverage3.2.2间接
npmistanbul-lib-report3.0.1间接
npmistanbul-reports3.2.0间接
npmjs-levenshtein1.1.6间接
npmjs-tokens10.0.0间接
npmjs-tokens4.0.0间接
npmjs-yaml4.2.0间接
npmjson-schema-traverse1.0.0间接
npmjson-schema-typed8.0.2间接
npmlightningcss1.32.0间接
npmlightningcss-android-arm641.32.0间接
npmlightningcss-darwin-arm641.32.0间接
npmlightningcss-darwin-x641.32.0间接
npmlightningcss-freebsd-x641.32.0间接
npmlightningcss-linux-arm-gnueabihf1.32.0间接
npmlightningcss-linux-arm64-gnu1.32.0间接
npmlightningcss-linux-arm64-musl1.32.0间接
npmlightningcss-linux-x64-gnu1.32.0间接
npmlightningcss-linux-x64-musl1.32.0间接
npmlightningcss-win32-arm64-msvc1.32.0间接
npmlightningcss-win32-x64-msvc1.32.0间接
npmlilconfig3.1.3间接
npmlint-staged15.5.2间接
npmlistr28.3.3间接
npmlog-update6.1.0间接
npmmagic-string0.30.21间接
npmmagicast0.5.3间接
npmmake-dir4.0.0间接
npmmath-intrinsics1.1.0间接
npmmedia-typer1.1.0间接
npmmerge-descriptors2.0.0间接
npmmerge-stream2.0.0间接
npmmicromatch4.0.8间接
npmmime-db1.54.0间接
npmmime-types3.0.2间接
npmmimic-fn4.0.0间接
npmmimic-function5.0.1间接
npmminimatch5.1.9间接
npmms2.1.3间接
npmmsgpackr1.12.1间接
npmmsgpackr-extract3.0.4间接
npmmultipasta0.2.7间接
npmnanoid3.3.15间接
npmnegotiator1.0.0间接
npmnode-gyp-build-optional-packages5.2.2间接
npmnpm-run-path5.3.0间接
npmobject-assign4.1.1间接
npmobject-inspect1.13.4间接
npmobug2.1.3间接
npmon-finished2.4.1间接
npmonce1.4.0间接
npmonetime6.0.0间接
npmonetime7.0.0间接
npmopenapi-typescript7.13.0间接
npmparse-json8.3.0间接
npmparseurl1.3.3间接
npmpath-expression-matcher1.5.0间接
npmpath-key3.1.1间接
npmpath-key4.0.0间接
npmpath-to-regexp8.4.2间接
npmpathe2.0.3间接
npmpicocolors1.1.1间接
npmpicomatch2.3.2间接
npmpicomatch4.0.4间接
npmpicomatch4.0.5间接
npmpidtree0.6.1间接
npmpkce-challenge5.0.1间接
npmpluralize8.0.0间接
npmpostcss8.5.16间接
npmproxy-addr2.0.7间接
npmpure-rand6.1.0间接
npmqs6.15.2间接
npmrange-parser1.2.1间接
npmraw-body3.0.2间接
npmreact18.3.1间接
npmreact-native0.76.5间接
npmrequire-from-string2.0.2间接
npmrestore-cursor5.1.0间接
npmrfdc1.4.1间接
npmrolldown1.0.3间接
npmrouter2.2.0间接
npmsafer-buffer2.1.2间接
npmsemver7.8.4间接
npmsend1.2.1间接
npmserve-static2.2.1间接
npmsetprototypeof1.2.0间接
npmshebang-command2.0.0间接
npmshebang-regex3.0.0间接
npmside-channel1.1.1间接
npmside-channel-list1.0.1间接
npmside-channel-map1.0.1间接
npmside-channel-weakmap1.0.2间接
npmsiginfo2.0.0间接
npmsignal-exit4.1.0间接
npmsisteransi1.0.5间接
npmslice-ansi5.0.0间接
npmslice-ansi7.1.2间接
npmsource-map-js1.2.1间接
npmstackback0.0.2间接
npmstatuses2.0.2间接
npmstd-env4.1.0间接
npmstring-argv0.3.2间接
npmstring-width7.2.0间接
npmstrip-ansi7.2.0间接
npmstrip-final-newline3.0.0间接
npmstrnum2.4.0间接
npmsupports-color10.2.2间接
npmsupports-color7.2.0间接
npmtinybench2.9.0间接
npmtinyexec1.2.4间接
npmtinyglobby0.2.17间接
npmtinyrainbow3.1.0间接
npmto-regex-range5.0.1间接
npmtoidentifier1.0.1间接
npmtslib2.8.1间接
npmtsx4.22.4间接
npmtype-fest4.41.0间接
npmtype-is2.1.0间接
npmtypescript5.9.3间接
npmtypescript~5.3.3间接
npmundici-types6.21.0间接
npmunpipe1.0.0间接
npmuri-js-replace1.0.1间接
npmvary1.1.2间接
npmvite8.0.16间接
npmvitest4.1.8间接
npmwhich2.0.2间接
npmwhy-is-node-running2.3.0间接
npmwrap-ansi9.0.2间接
npmwrappy1.0.2间接
npmxml-naming0.1.0间接
npmyaml2.9.0间接
npmyaml-ast-parser0.0.43间接
npmyargs-parser21.1.1间接
npmzod4.4.3间接
npmzod-to-json-schema3.25.2间接
依赖安全公告 1

安装 npm:launch-store@0.32.8 会引入 165 个包(直接与传递):其中 1 个存在已知公告,0 个为直接依赖。

软件包版本关系严重程度公告数修复版本
@hono/node-server1.19.15间接12.0.5

公告表示依赖图中记录的版本落入某条公告的受影响范围。可达性未经分析,且依赖图包含开发与测试的版本固定——某项发现可能只涉及工具链而非交付的软件。

原始 JSON 报告 机器可读
{
  "data": {
    "repo": {
      "topics": [
        "android",
        "app-store",
        "app-store-connect",
        "ci-cd",
        "cli",
        "code-signing",
        "eas",
        "expo",
        "fastlane",
        "ios",
        "mobile",
        "play-store",
        "react-native",
        "testflight",
        "expo-updates",
        "google-play",
        "nodejs",
        "typescript"
      ],
      "is_fork": false,
      "size_kb": 18516,
      "has_wiki": true,
      "homepage": "https://www.npmjs.com/package/launch-store",
      "languages": {
        "JavaScript": 13754,
        "TypeScript": 8968545
      },
      "pushed_at": "2026-07-19T12:31:32Z",
      "created_at": "2026-06-13T18:49:45Z",
      "owner_type": "User",
      "updated_at": "2026-07-21T08:05:41Z",
      "description": "Self-hosted CLI for building, signing, and shipping Expo/React Native apps to TestFlight and Google Play.",
      "is_archived": false,
      "is_disabled": false,
      "license_spdx": "MIT",
      "default_branch": "main",
      "license_spdx_raw": "MIT",
      "primary_language": "TypeScript",
      "significant_languages": [
        "TypeScript"
      ]
    },
    "owner": {
      "blog": "https://yosefhayimsabag.com",
      "name": null,
      "type": "User",
      "login": "YosefHayim",
      "company": null,
      "location": "Israel, HaMarkeZ, Tel Aviv",
      "followers": 16,
      "avatar_url": "https://avatars.githubusercontent.com/u/179159376?v=4",
      "created_at": "2024-08-22T17:23:42Z",
      "is_verified": null,
      "public_repos": 12,
      "account_age_days": 701
    },
    "license": {
      "state": "standard",
      "spdx_id": "MIT",
      "raw_spdx": "MIT",
      "file_present": true,
      "scorecard_found": true,
      "profile_has_license": true
    },
    "activity": {
      "releases": [
        {
          "tag": "v0.32.8",
          "kind": "patch",
          "published_at": "2026-07-19T12:31:34Z"
        },
        {
          "tag": "v0.32.7",
          "kind": "patch",
          "published_at": "2026-07-11T11:25:53Z"
        },
        {
          "tag": "v0.32.6",
          "kind": "patch",
          "published_at": "2026-07-11T11:22:45Z"
        },
        {
          "tag": "v0.32.4",
          "kind": "patch",
          "published_at": "2026-07-02T17:44:31Z"
        },
        {
          "tag": "v0.32.3",
          "kind": "patch",
          "published_at": "2026-07-01T23:40:45Z"
        },
        {
          "tag": "v0.32.0",
          "kind": "minor",
          "published_at": "2026-07-01T18:49:13Z"
        },
        {
          "tag": "v0.31.2",
          "kind": "patch",
          "published_at": "2026-06-30T09:57:54Z"
        },
        {
          "tag": "v0.31.1",
          "kind": "patch",
          "published_at": "2026-06-30T09:56:25Z"
        },
        {
          "tag": "v0.31.0",
          "kind": "minor",
          "published_at": "2026-06-28T15:30:57Z"
        },
        {
          "tag": "v0.30.0",
          "kind": "minor",
          "published_at": "2026-06-27T17:13:29Z"
        },
        {
          "tag": "v0.29.1",
          "kind": "patch",
          "published_at": "2026-06-25T11:37:30Z"
        },
        {
          "tag": "v0.29.0",
          "kind": "minor",
          "published_at": "2026-06-22T23:15:05Z"
        },
        {
          "tag": "v0.28.0",
          "kind": "minor",
          "published_at": "2026-06-21T10:19:52Z"
        },
        {
          "tag": "v0.27.0",
          "kind": "minor",
          "published_at": "2026-06-19T15:27:44Z"
        },
        {
          "tag": "v0.26.1",
          "kind": "patch",
          "published_at": "2026-06-16T09:28:13Z"
        },
        {
          "tag": "v0.26.0",
          "kind": "minor",
          "published_at": "2026-06-15T23:42:30Z"
        },
        {
          "tag": "v0.18.0",
          "kind": "minor",
          "published_at": "2026-06-15T19:54:55Z"
        },
        {
          "tag": "v0.17.0",
          "kind": "minor",
          "published_at": "2026-06-15T18:17:49Z"
        },
        {
          "tag": "v0.16.1",
          "kind": "patch",
          "published_at": "2026-06-15T14:40:24Z"
        },
        {
          "tag": "v0.16.0",
          "kind": "minor",
          "published_at": "2026-06-15T13:38:15Z"
        },
        {
          "tag": "v0.15.0",
          "kind": "minor",
          "published_at": "2026-06-15T11:43:23Z"
        },
        {
          "tag": "v0.14.0",
          "kind": "minor",
          "published_at": "2026-06-15T11:34:35Z"
        },
        {
          "tag": "v0.13.3",
          "kind": "patch",
          "published_at": "2026-06-15T10:10:20Z"
        },
        {
          "tag": "v0.13.2",
          "kind": "patch",
          "published_at": "2026-06-15T09:16:22Z"
        },
        {
          "tag": "v0.13.1",
          "kind": "patch",
          "published_at": "2026-06-15T08:09:50Z"
        },
        {
          "tag": "v0.13.0",
          "kind": "minor",
          "published_at": "2026-06-15T07:50:29Z"
        },
        {
          "tag": "v0.12.0",
          "kind": "minor",
          "published_at": "2026-06-14T17:26:42Z"
        },
        {
          "tag": "v0.11.0",
          "kind": "minor",
          "published_at": "2026-06-14T06:01:18Z"
        },
        {
          "tag": "v0.10.0",
          "kind": "minor",
          "published_at": "2026-06-14T05:17:18Z"
        },
        {
          "tag": "v0.9.0",
          "kind": "minor",
          "published_at": "2026-06-14T04:34:18Z"
        },
        {
          "tag": "v0.8.0",
          "kind": "minor",
          "published_at": "2026-06-14T04:07:11Z"
        },
        {
          "tag": "v0.7.0",
          "kind": "minor",
          "published_at": "2026-06-14T02:10:16Z"
        },
        {
          "tag": "v0.6.0",
          "kind": "minor",
          "published_at": "2026-06-14T01:40:46Z"
        },
        {
          "tag": "v0.5.0",
          "kind": "minor",
          "published_at": "2026-06-14T01:17:00Z"
        },
        {
          "tag": "v0.4.1",
          "kind": "patch",
          "published_at": "2026-06-13T23:58:26Z"
        },
        {
          "tag": "v0.4.0",
          "kind": "minor",
          "published_at": "2026-06-13T23:37:02Z"
        },
        {
          "tag": "v0.3.0",
          "kind": "minor",
          "published_at": "2026-06-13T22:47:17Z"
        }
      ],
      "recent_commits": [
        {
          "oid": "a232009914c129d10ffc2e67387fc989cddf03ed",
          "body": "…e isolation)",
          "is_bot": false,
          "headline": "chore: release v0.32.8 (Effect Schema SSOT, pipeline extract, keystor…",
          "author_name": "YosefHayim",
          "author_login": "YosefHayim",
          "committed_at": "2026-07-19T12:31:08Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "89bc3778f13942a01297147ddfe4b80d1ef43fe7",
          "body": "… isolation\n\nComplete the Effect Schema config SSOT: annotate fields so JSON Schema\ndescriptions emit without a merge bridge, drop the gen-docs description\nmerge helper, and remove the zod dependency.\n\nExtract pipeline.ts into phase modules (types, providers, env, signing,\nversion, artifact, ios, android) and isolate Google keystore tests by\nredirecting HOME via vi.hoisted. Align contributor docs with pnpm.",
          "is_bot": false,
          "headline": "refactor: Effect Schema field descriptions, pipeline phases, keystore…",
          "author_name": "YosefHayim",
          "author_login": "YosefHayim",
          "committed_at": "2026-07-19T12:30:47Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "c12001434bef5d48921be14b2bc729374602480c",
          "body": null,
          "is_bot": false,
          "headline": "chore: release v0.32.7 (export compliance + publish CI fixes)",
          "author_name": "YosefHayim",
          "author_login": "YosefHayim",
          "committed_at": "2026-07-11T11:25:42Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "f210a80d56b55c17a9f0d70ae4d2c22b354d574a",
          "body": "llms.txt and README link to ./docs/adr/, but the directory was gitignored\nvia docs/*. Clean checkouts (publish CI) failed docsConsistency when the\ndirectory was missing. Exception + commit the ADRs so the public links resolve.",
          "is_bot": false,
          "headline": "docs: track docs/adr so CI can resolve public ADR links",
          "author_name": "YosefHayim",
          "author_login": "YosefHayim",
          "committed_at": "2026-07-11T11:25:38Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "f084da0b328df0d99132de3c61c573caa9544f47",
          "body": "setup-node with cache: pnpm shells out to `pnpm store path`, so\npnpm/action-setup must run first. Without it, v0.32.6 publish failed\nimmediately after checkout.",
          "is_bot": false,
          "headline": "ci(publish): install pnpm before setup-node cache",
          "author_name": "YosefHayim",
          "author_login": "YosefHayim",
          "committed_at": "2026-07-11T11:23:19Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "ca6371ef88179a6ed5a4e2ee1a39fcf51a3c2c02",
          "body": null,
          "is_bot": false,
          "headline": "chore: release v0.32.6 (export compliance 409 idempotent, #299)",
          "author_name": "YosefHayim",
          "author_login": "YosefHayim",
          "committed_at": "2026-07-11T11:22:35Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "8282a848e284822996836a8790e44e15daa2e817",
          "body": "Skip the export-compliance PATCH when App Store Connect already has the\ndesired usesNonExemptEncryption value, and treat Apple's 409 \"already\nset\" conflict as skipped success so a matching desired state does not\nfail the release run.",
          "is_bot": false,
          "headline": "fix(release): treat already-set export compliance 409 as success (#299)",
          "author_name": "YosefHayim",
          "author_login": "YosefHayim",
          "committed_at": "2026-07-11T11:22:31Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "eb1dd2d9afee948f050cdb085e667bb64703ae7d",
          "body": null,
          "is_bot": false,
          "headline": "chore: release v0.32.5 (iOS signing scope fix, #301)",
          "author_name": "YosefHayim",
          "author_login": "YosefHayim",
          "committed_at": "2026-07-08T16:45:33Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "27e851d12309544344ad4075807ec05ebed3b1b6",
          "body": "… Pods (#301)\n\n`launch build ios` failed at the archive step on Xcode 26 for a plain single-target\napp: gym passed CODE_SIGN_STYLE=Manual + PROVISIONING_PROFILE_SPECIFIER as workspace-\nwide xcargs, so xcodebuild applied the app's manual App Store profile to every\nCocoaPods library target. Xcode 26 p\n[…]\nIDs that were used as test fixtures / doc-comment examples with clearly-fake pseudonyms\n(com.example.sampleapp, ABCDE12345, KEY*).\n\nFixes #301.\n\nCo-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix(build): scope iOS signing to the app target so it can't leak onto…",
          "author_name": "YosefHayim",
          "author_login": "YosefHayim",
          "committed_at": "2026-07-08T16:44:48Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "931c8a09191e928ee63aa176a8143ac33a7733d8",
          "body": null,
          "is_bot": false,
          "headline": "docs: refresh agent and readme guidance",
          "author_name": "YosefHayim",
          "author_login": "YosefHayim",
          "committed_at": "2026-07-07T05:21:55Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "62004efa3b5365812c93930467f3b9b6986f5b48",
          "body": null,
          "is_bot": false,
          "headline": "chore: refresh openapi transitive dependencies",
          "author_name": "YosefHayim",
          "author_login": "YosefHayim",
          "committed_at": "2026-07-07T05:00:16Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "a481e7ed327f833608f71cfdd0c496a7fd082257",
          "body": null,
          "is_bot": false,
          "headline": "refactor: group core modules by purpose",
          "author_name": "YosefHayim",
          "author_login": "YosefHayim",
          "committed_at": "2026-07-07T04:52:28Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "2a9b35e84f16e94d2669468afa499dde17c8c781",
          "body": null,
          "is_bot": false,
          "headline": "docs: add official README links",
          "author_name": "YosefHayim",
          "author_login": "YosefHayim",
          "committed_at": "2026-07-07T03:59:34Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "9b5ba2747b53521140c2455a213dae59a30a0b1c",
          "body": null,
          "is_bot": false,
          "headline": "docs: sync generated launch docs",
          "author_name": "YosefHayim",
          "author_login": "YosefHayim",
          "committed_at": "2026-07-07T01:09:28Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "7fd9b2b80f4c6471b78052a52c6d9ecc397bf572",
          "body": null,
          "is_bot": false,
          "headline": "docs: refresh README feature map",
          "author_name": "YosefHayim",
          "author_login": "YosefHayim",
          "committed_at": "2026-07-07T01:07:18Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "60ed76bd9630a722b58cfc7ab5525914a568ed8d",
          "body": "- Replace npm/package-lock.json with pnpm/pnpm-lock.yaml\n- Add packageManager field to package.json\n- Update scripts: npm run → pnpm, npx → pnpm exec\n- Workflows: add pnpm/action-setup@v4, cache: pnpm, pnpm install --frozen-lockfile",
          "is_bot": false,
          "headline": "chore: migrate to pnpm, update CI workflows",
          "author_name": "YosefHayim",
          "author_login": "YosefHayim",
          "committed_at": "2026-07-04T21:01:03Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "b7adf9ec48c6f31dc1e4e7182440c4ce082e6be1",
          "body": null,
          "is_bot": false,
          "headline": "chore: remove obsolete dev script (moved to scripts/dev/, gitignored)",
          "author_name": "YosefHayim",
          "author_login": "YosefHayim",
          "committed_at": "2026-07-04T19:57:02Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "a6ad9925317b63560adba136c1e023ca1b54f864",
          "body": "…k, report-failure, ci)\n\nSynced from the canonical dufflebag/alg workflow set. Each workflow is\nsingle-purpose and reusable (workflow_call). ci.yml orchestrates them and\ngates merges via the CI Gate job.",
          "is_bot": false,
          "headline": "ci: add missing workflow templates (biome, build, e2e, test, typechec…",
          "author_name": "YosefHayim",
          "author_login": "YosefHayim",
          "committed_at": "2026-07-04T19:47:28Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "6e0ae15e087463eec8e56e54c3c61aa98884d027",
          "body": "- Move preview-wordmark.ts to scripts/dev/\n- Document scripts/dev/ convention in CODE-STYLE.md\n- Add scripts/dev/ to .gitignore",
          "is_bot": false,
          "headline": "chore: organize dev scripts into scripts/dev/ (gitignored)",
          "author_name": "YosefHayim",
          "author_login": "YosefHayim",
          "committed_at": "2026-07-04T14:02:23Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "97bb77c4bd8f88eab705c50dbbfe82d07f02a238",
          "body": null,
          "is_bot": false,
          "headline": "release: v0.32.4",
          "author_name": "YosefHayim",
          "author_login": "YosefHayim",
          "committed_at": "2026-07-02T17:44:12Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "8e23475d1e09f7795ffe529bb5922af799673505",
          "body": "…the build path (#291, #292) (#293)\n\nfindBundleId resolved the wrong App ID for multi-target apps: Apple's filter[identifier]\nis a substring match, so a query for com.acme.app also returned com.acme.app.widget and\ndata[0] could be the widget. Select the exact identifier and raise the limit off 1. Th\n[…]\n decode grades as current so reuse stands (#292).\n\n7 unit tests; README/llms/commands test-count badge regenerated (1967 -> 1974).\n\nCo-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix(signing): exact App ID resolution + regenerate stale profiles on …",
          "author_name": "YosefHayim",
          "author_login": "YosefHayim",
          "committed_at": "2026-07-02T17:43:38Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "f77f4ae633b683b256aec1df703ef806cdd52470",
          "body": "…rget archives (#289) (#290)\n\nAfter #262 dropped the clobbering global PROVISIONING_PROFILE_SPECIFIER for\nmulti-target apps, nothing supplied each target its profile, so an app with an\nembedded extension (widget) failed the archive at exit 65 — \"requires a\nprovisioning profile — Select a provisionin\n[…]\n.ts: buildXcargs doc points at the writer.\n- Regenerated the README/llms/commands test-count badge (docs:gen) for the 8 new tests.\n\nCo-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix(build): stamp per-target manual signing into pbxproj for multi-ta…",
          "author_name": "YosefHayim",
          "author_login": "YosefHayim",
          "committed_at": "2026-07-02T17:28:46Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "dc64c09636302e85ccfc78893e3e91fb3b3f1aba",
          "body": null,
          "is_bot": false,
          "headline": "release: v0.32.3",
          "author_name": "YosefHayim",
          "author_login": "YosefHayim",
          "committed_at": "2026-07-01T23:40:18Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "8e569ae474669732d3ee1d7a3a6afc6019f52689",
          "body": "Fold the three hand-synced config artifacts — the TypeScript interfaces, the\nhand-rolled JSON-Schema validator, and the generated schema — into one zod\nschema per shape, so they can no longer drift.\n\n- The config type tree (app/catalog/storeSurface/remote/config) is now zod\n  schemas; every exported\n[…]\ne is introduced. Age rating stays the open `string | boolean`.\n- Drop the now-unused `ts-json-schema-generator` devDep; add `zod`.\n\nCo-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "migration: adopt zod v4 as the config SSOT (ADR 0008) (#274) (#288)",
          "author_name": "YosefHayim",
          "author_login": "YosefHayim",
          "committed_at": "2026-07-01T23:38:48Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "7ac4a9d198d2cad4b06b70ddd6e5b16d641b91f8",
          "body": "…76) (#287)\n\nCompletes the CODE-STYLE 'Never' enforcement (noDefaultExport was already error):\n\n- noNonNullAssertion -> error for production src/ (already 0 violations there, so the guarantee is locked). A scoped biome.json override keeps test files at warn; clearing those 142 test assertions is tra\n[…]\nrker-pool lane, retry backoff), each annotated with a justified biome-ignore. Behavior-preserving — none converted to Promise.all.\n\nCo-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "chore(lint): promote noNonNullAssertion + noAwaitInLoops to error (#2…",
          "author_name": "YosefHayim",
          "author_login": "YosefHayim",
          "committed_at": "2026-07-01T22:49:07Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "40dbb2567b3cf76c0cc963bf6702c481a6069864",
          "body": "… archives (#262) (#285)\n\nA command-line PROVISIONING_PROFILE_SPECIFIER applies to every target, so pinning the main app's profile clobbers an embedded app-extension bundle (its app-id differs) and fails the archive with exit 65 before export. Drop the global specifier when SigningAssets.extensionPr\n[…]\n via exportOptionsPlist. The remote path is single-target-only by construction (it uploads one profile) — documented, not touched.\n\nCo-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix(build): drop clobbering global profile specifier for multi-target…",
          "author_name": "YosefHayim",
          "author_login": "YosefHayim",
          "committed_at": "2026-07-01T22:33:21Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "f4a3242c786dc645b736772e5afdcd4e6ae4b4df",
          "body": "Split the monolithic CI check into reusable workflow_call legs\n(lint/typecheck/docs/test/build/e2e) composed by ci.yml, with a shared\ncached-install composite action (.github/actions/setup-node-cached), an\naggregated CI Gate status check, and report-failure that files a ci-failure\nissue when main go\n[…]\nage, mirroring *.testkit.ts.\n\nRationale recorded in ADR 0009 (reusable CI + report-failure) and ADR 0010\n(built-CLI e2e, not MSW).\n\nCo-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "ci: reusable single-purpose workflows + built-CLI e2e (#282) (#283)",
          "author_name": "YosefHayim",
          "author_login": "YosefHayim",
          "committed_at": "2026-07-01T22:14:58Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "396a7399bd7ce657e96bfecb1f0dc6f6701ba587",
          "body": null,
          "is_bot": false,
          "headline": "release: v0.32.0",
          "author_name": "YosefHayim",
          "author_login": "YosefHayim",
          "committed_at": "2026-07-01T18:48:41Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "c2e1aa60a1a24ee8c42a1a81b28fdf153f15cce0",
          "body": "…nsole.* (#273) (#281)\n\nAdds the plain-line seam primitive `Logger.line(message)` (a glyph-free `console.log`\npassthrough) and routes every raw `console.*` in the CLI through the logger, so the\nlogger is the single owner of content output.\n\n- Logger.line: the one owner of raw content output — a comm\n[…]\nentically; the content\nflow goes through log.line (=== console.log). Gate green: typecheck 0 · lint 0 errors ·\n1968 tests · build.\n\nCo-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "migration: route all CLI output through the logger seam — kill raw co…",
          "author_name": "YosefHayim",
          "author_login": "YosefHayim",
          "committed_at": "2026-07-01T18:43:03Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "9fa8bdec178c405e67cc38558021ed2cc90680cf",
          "body": "…el (#280)\n\n* migration: fold the 14 per-feature types.ts into the core/types/ barrel (#272)\n\nEvery exported domain shape now lives in a src/core/types/*.ts module re-exported by\nthe src/core/types.ts barrel and imported everywhere as `../core/types.js`. The 14\nper-feature `types.ts` modules are gon\n[…]\nhe\nrest of the codebase uses. No behavior change.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>\n\n---------\n\nCo-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "migration: fold the 14 per-feature types.ts into the core/types/ barr…",
          "author_name": "YosefHayim",
          "author_login": "YosefHayim",
          "committed_at": "2026-07-01T18:39:29Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "a8368a79e1e1ee1b2584b71e4f8e211e99c8dd23",
          "body": "…-loop cleanups) (#279)\n\n* migration: promote noDefaultExport to Biome error; annotate await-loops (#276)\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>\n\n* chore(biome): disable useImportExtensions — it fights NodeNext\n\nUnder module/moduleResolution \"NodeNext\" with real emit, \n[…]\n noise here; turn it off. Warnings: 5204 -> 3442.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>\n\n---------\n\nCo-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "migration: promote noDefaultExport to Biome error (+ non-null / await…",
          "author_name": "YosefHayim",
          "author_login": "YosefHayim",
          "committed_at": "2026-07-01T18:31:23Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "893db05bffe42387bb1758467a536f8765abb7be",
          "body": "Co-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "migration: consolidate shared test fakes into src/testkit/ (#275) (#278)",
          "author_name": "YosefHayim",
          "author_login": "YosefHayim",
          "committed_at": "2026-07-01T18:31:06Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "b9d6ac9460d91262ca570bd8f27d960d718b8274",
          "body": "… (#277)\n\nCo-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "docs: add CODE-STYLE.md style SSOT and refresh AGENTS.md rules digest…",
          "author_name": "YosefHayim",
          "author_login": "YosefHayim",
          "committed_at": "2026-07-01T18:30:43Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "d78b33d4aea64995f214a732f52d25e8a60128db",
          "body": null,
          "is_bot": false,
          "headline": "release: v0.31.2",
          "author_name": "YosefHayim",
          "author_login": "YosefHayim",
          "committed_at": "2026-06-30T09:57:48Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "f9fd6069acbde20d3d5fee949f8db1f4f800a0d7",
          "body": "Co-authored-by: Cursor <cursoragent@cursor.com>",
          "is_bot": false,
          "headline": "docs: regenerate badges after UTF-8 locale tests",
          "author_name": "YosefHayim",
          "author_login": "YosefHayim",
          "committed_at": "2026-06-30T09:57:44Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "43e13dea0f346c796c457a8a5e2b61607e86aca7",
          "body": null,
          "is_bot": false,
          "headline": "release: v0.31.1 — force UTF-8 locale for fastlane subprocesses",
          "author_name": "YosefHayim",
          "author_login": "YosefHayim",
          "committed_at": "2026-06-30T09:56:11Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "3013cd7a5b7ab9f192d2ad7d30f7545235c21e74",
          "body": "macOS shells defaulting to US-ASCII break xcpretty/gym with non-ASCII\nXcode output. Launch now sets LANG/LC_ALL on every child process and\ndoctor reports whether the interactive shell is already UTF-8.\n\nCo-authored-by: Cursor <cursoragent@cursor.com>",
          "is_bot": false,
          "headline": "fix(exec): force UTF-8 locale for fastlane subprocesses",
          "author_name": "YosefHayim",
          "author_login": "YosefHayim",
          "committed_at": "2026-06-30T09:54:58Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "b6dc2e5e331c6a079d7117368692f89885cf823c",
          "body": "…(#271)\n\n* refactor(apple): extract ASC resource type wall into ascResources.ts\n\nascClient.ts was 5,030 LOC: an 88-interface \"type wall\" of `*Resource`/\n`*Query`/enum shapes, one 190-method `AppStoreConnectClient` class over a\nsmall shared transport core, and its private mappers. The class can't mov\n[…]\nng still holds at the boundary it actually meant.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>\n\n---------\n\nCo-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "refactor(apple): extract ASC resource type wall into ascResources.ts …",
          "author_name": "YosefHayim",
          "author_login": "YosefHayim",
          "committed_at": "2026-06-28T21:33:09Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "314820a801a798838c1d4327a61894a913ec2575",
          "body": "…un (#270)\n\n* refactor(cli): dedup the readiness command family behind one shared run\n\n`audit`, `store doctor`, and `iap doctor` answer three distinct questions\n(submission / account / IAP readiness) but copy-pasted an identical ~20-line\nrun-flow: register probes → load config → build the read-only \n[…]\nhe live-stats badges for the\n+4 tests (docs:gen).\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>\n\n---------\n\nCo-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "refactor(cli): dedup the readiness command family behind one shared r…",
          "author_name": "YosefHayim",
          "author_login": "YosefHayim",
          "committed_at": "2026-06-28T20:28:31Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "f578cb851762ae589d92d53e1e8b9c027265fe50",
          "body": "feat(doctor): iOS signing preflight for App Groups + multi-target apps (#261)",
          "is_bot": false,
          "headline": "Merge pull request #269 from YosefHayim/feat/doctor-signing-preflight",
          "author_name": "YosefHayim",
          "author_login": "YosefHayim",
          "committed_at": "2026-06-28T15:38:33Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "04c783dbaeed28226d6b4bde5fe6d31ccfc2c218",
          "body": "Co-authored-by: Cursor <cursoragent@cursor.com>",
          "is_bot": false,
          "headline": "chore: merge main and regenerate docs after conflict resolution",
          "author_name": "YosefHayim",
          "author_login": "YosefHayim",
          "committed_at": "2026-06-28T15:36:49Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "14c18f696ac3aee17d20f1f9f4210ae8410e1920",
          "body": "fix(doctor): add --app flag for multi-app preflight checks",
          "is_bot": false,
          "headline": "Merge pull request #268 from YosefHayim/fix/doctor-app-flag",
          "author_name": "YosefHayim",
          "author_login": "YosefHayim",
          "committed_at": "2026-06-28T15:35:00Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "eaef013c3882e0a53d50b602a038964173f96974",
          "body": "…et apps (#261)\n\nExtract shared signing readiness checks from the build pipeline and run them in `launch doctor` so widget/extension App ID gaps and App Group portal steps surface before a long compile.\n\nCo-authored-by: Cursor <cursoragent@cursor.com>",
          "is_bot": false,
          "headline": "feat(doctor): add iOS signing preflight for App Groups and multi-targ…",
          "author_name": "YosefHayim",
          "author_login": "YosefHayim",
          "committed_at": "2026-06-28T15:34:20Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "528fd7a0d31f55360ecff4a090b7fbf23fb7ea69",
          "body": "Closes #266. Scope launch doctor to selected app handles so monorepos can\nrun toolchain and config checks for one app without evaluating every\nentry in launch.config.ts. Mirrors store doctor and build flag behavior.\n\nCo-authored-by: Cursor <cursoragent@cursor.com>",
          "is_bot": false,
          "headline": "fix(doctor): add --app flag for multi-app preflight checks",
          "author_name": "YosefHayim",
          "author_login": "YosefHayim",
          "committed_at": "2026-06-28T15:33:16Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "866fd653a13f6274f9295b67b8d935e03958d127",
          "body": "…ing safe slice (#267)\n\nRollup since v0.30.0:\n- feat(build): per-run `--size-budget`/`--budget` override + wizard step (#260, #263)\n- fix(apple): multi-target iOS signing safe slice — pbxproj target discovery,\n  stale-profile capability-diff regenerate, `creds setup --app`, build preflight\n  (#261 s\n[…]\ne, #264; archive-vector flip tracked in #262)\n- chore: finish the eslint+prettier → biome migration; repair the red CI gate (#265)\n\nCo-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "chore(release): v0.31.0 — per-run size budget + multi-target iOS sign…",
          "author_name": "YosefHayim",
          "author_login": "YosefHayim",
          "committed_at": "2026-06-28T15:30:53Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "fa20ff6a09cfccd40e2d33c5b9e78458e6fa8552",
          "body": "…-profile regen, creds --app, preflight (#261) (#264)\n\nThe CI-provable safe slice of #261. Does NOT touch the archive-step signing\nvector in buildFlags.ts (the exit-65→success per-target flip is #262); the\nno-extension iOS arg vector stays byte-identical (its pinned test is untouched).\n\n- creds setu\n[…]\ngen, matching the existing src/core/asc/schema.ts\nexclusion) so lint and docs:check no longer conflict on it.\n\nRefs #261\nRefs #262\n\nCo-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix(apple): multi-target signing safe slice — target discovery, stale…",
          "author_name": "YosefHayim",
          "author_login": "YosefHayim",
          "committed_at": "2026-06-28T15:17:21Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "27b0df238103034ec098a24a1be8283e044b92ee",
          "body": "Let a single build override the soft size budget without editing\nlaunch.config.ts. A new optional `BuildRunOptions.sizeBudgetMB` is\nresolved at the upload gate by `resolveSizeBudgetMB(options, profile)`\n— one shared helper for all three `confirmUpload` sites (local iOS,\nlocal Android, EAS handoff) w\n[…]\ncover the resolve order, CLI/wizard validation, and the\nprofile-default fallback. Docs regenerated for the new flags.\n\nCloses #260\n\nCo-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat(build): per-run size-budget override (#260) (#263)",
          "author_name": "YosefHayim",
          "author_login": "YosefHayim",
          "committed_at": "2026-06-28T15:12:53Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "6d08a2c06242e519fd6c2b342f19cfe251691a03",
          "body": "… (#265)\n\nThe biome migration (0be8b2d) replaced eslint+prettier as the source\nformatter with biome, but left the toolchain half-wired, which turned\nCI red on main:\n\n  - ci.yml still ran `npm run format:check`, a script 0be8b2d deleted\n    → \"Missing script\" → CI failed before tests on every push/PR\n[…]\ne reality;\n    regenerated docs reflect the prettier-free generator.\n\nGate green: typecheck, lint, test (1903), build, docs:check.\n\nCo-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "chore: finish the biome migration — drop prettier, repair the CI gate…",
          "author_name": "YosefHayim",
          "author_login": "YosefHayim",
          "committed_at": "2026-06-28T15:02:43Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "0be8b2d50ab83d51b49e0a70dd93835441d5f6c0",
          "body": "Co-authored-by: Cursor <cursoragent@cursor.com>",
          "is_bot": false,
          "headline": "chore: apply biome format and lint fixes",
          "author_name": "YosefHayim",
          "author_login": "YosefHayim",
          "committed_at": "2026-06-27T21:25:31Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "c029b9adff9a8e575f578305f24c3d3a50334949",
          "body": "…amily (#259)\n\nMinor release rolling up everything merged since v0.29.1:\n- #255 route every submit/store path through the config-aware storage resolver\n- #256 env/keychain reference for the App Review demoAccountPassword\n- #257 decouple the build platform from the submit store (ADR 0006)\n- #258 tvOS\n[…]\nly package.json and\npackage-lock.json change here; the tag created on the squashed commit\nfires the OIDC trusted-publish workflow.\n\nCo-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "chore(release): v0.30.0 — platform/store split + the Apple platform f…",
          "author_name": "YosefHayim",
          "author_login": "YosefHayim",
          "committed_at": "2026-06-27T17:12:54Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "6c911fab10b5a9effc736733d6b5d823e0ffc016",
          "body": "… (#258)\n\nWiden Platform to the four Apple build targets behind one pure vocabulary\nmodule (src/core/platform.ts): isApplePlatform, the two ASC mappers\n(toAscPlatform vs toBundleIdPlatform), profile-type mappers (visionOS reuses\nIOS_APP_STORE; macOS has no ad-hoc), and gymDestination (iOS -> undefin\n[…]\nbuild:resign are explicitly gated (not silently routed to\niOS). Enum/profile mappings verified against Apple's bundled ASC OpenAPI spec.\n\n🤖 Generated with [Claude Code](https://claude.com/claude-code)",
          "is_bot": false,
          "headline": "feat(apple): tvOS, macOS, and visionOS as first-class build platforms…",
          "author_name": "YosefHayim",
          "author_login": "YosefHayim",
          "committed_at": "2026-06-27T17:03:20Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "f3abbde921c69a7d0fbe04c47dc5d9f43ce51308",
          "body": "…R 0006) (#257)\n\n`config.submit` was a single string mapped 1:1 to a Submitter, welding the build platform\n(ios/android) to the store. Grow it to `string | SubmitByPlatform` so one build can fan out to\nseveral stores, resolving to a store LIST per platform — the foundation that alternative Android\ns\n[…]\n0006 is the local decision record)\n\nThe `Submitter` interface is untouched, so each new store stays a pure add-a-provider drop-in.\n\nCo-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "refactor(core): decouple the build platform from the submit store (AD…",
          "author_name": "YosefHayim",
          "author_login": "YosefHayim",
          "committed_at": "2026-06-27T14:52:47Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "f10f8c5041d858c70f1c8bf9d9ccc124da92f598",
          "body": "…ccountPassword (#249) (#256)\n\n`release.config.json`'s `reviewDetails.demoAccountPassword` could only be a plaintext literal in a\nrepo-committed file. Allow it to name an indirection resolved at submit time instead, per \"secrets\nnever touch the repo\":\n\n- `env:VAR_NAME`     → read from the environmen\n[…]\nnever reads, holds, or renders\nthe secret (the plan still shows the field by name only). Schema doc + generated config.md updated.\n\nCo-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat(core): accept an env/keychain reference for the App Review demoA…",
          "author_name": "YosefHayim",
          "author_login": "YosefHayim",
          "committed_at": "2026-06-27T14:48:42Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "e5df583b0468095f2135d717514d327124642680",
          "body": "…rage resolver (#251) (#255)\n\nThe release-train engine and `launch release` looked storage up through the registry\n(`getStorageProvider(config.storage)`), where only the default-bound `local` singleton is\nregistered — so an Android submit with `s3`/`supabase` threw \"Unknown storage provider\", and a\n\n[…]\nreArtifactPresent` (P2)\n- extract `ensureArtifactPresent` into core/storage.ts so `launch release` and the train guard identically\n\nCo-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix(core): route every submit/store path through the config-aware sto…",
          "author_name": "YosefHayim",
          "author_login": "YosefHayim",
          "committed_at": "2026-06-27T14:21:39Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "b7c9c8fac283cf2230c8099f74da799a6383c5f5",
          "body": "Behavior-preserving release. Every change since v0.29.0 is an internal\nrefactor that deepens a shallow module behind its existing interface —\nno new commands, flags, or behavior, so this is a drop-in upgrade.\n\n- #247 consolidate reconciler scaffolding into shared store-sync vocabulary\n- #248 split t\n[…]\nscClient behind typed JSON:API engine helpers\n- #253 name the build-transport seam and extract fork selection into a pure resolver\n\nCo-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "chore(release): v0.29.1 — architecture-deepening rollup (#254)",
          "author_name": "YosefHayim",
          "author_login": "YosefHayim",
          "committed_at": "2026-06-25T11:36:37Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "a072a6cad93170ff4cb6a3b71442cbb56cc00d1b",
          "body": "…ion into a pure resolver (#253)\n\nThe build → submit flow forks three ways — the local Mac spine, the remote-Mac\npipeline, and the EAS handoff — and the three implementations already share the\nsignature (PreparedBuild, BuildRunOptions) => Promise<void>. That contract was\nimplicit, and the choice bet\n[…]\nasync function` to `export const … : BuildTransport = async`,\nwhich is runtime-identical and leaves their named imports unchanged.\n\nCo-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "refactor(core): name the build-transport seam and extract fork select…",
          "author_name": "YosefHayim",
          "author_login": "YosefHayim",
          "committed_at": "2026-06-25T11:25:03Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "8c5ef6455de96708be4bfe3e47083a102bf1bed7",
          "body": "…s (#252)\n\n* refactor(apple): deepen ascClient behind typed JSON:API engine helpers\n\nThe App Store Connect client already had its HTTP/auth/retry/pagination behind\n`request`/`requestAll`, but every method still hand-rolled the JSON:API envelope\nand the \"404 means absent\" idiom. Consolidate that repe\n[…]\nus. Addresses CodeAnt's test-latency nit on #252.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>\n\n---------\n\nCo-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "refactor(apple): deepen ascClient behind typed JSON:API engine helper…",
          "author_name": "YosefHayim",
          "author_login": "YosefHayim",
          "committed_at": "2026-06-25T11:07:37Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "0f21a5ebb8d98328749341c2f96a3de389c60e19",
          "body": "…the CLI seam into core (#250)\n\nThe `src/cli` layer owns thin commander wiring; the domain lives in `src/core`\n(AGENTS.md). Two pieces of real domain logic had leaked into command files —\nmove them behind core seams, behavior-preserving:\n\n- `core/releaseInputs.ts` (new) — the four pure release-input\n[…]\nline creds.ts account-orchestration is left for a follow-up\nissue; it's I/O- and prompt-heavy and wants its own tested extraction.\n\nCo-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "refactor(cli): move release-input + train-engine domain logic out of …",
          "author_name": "YosefHayim",
          "author_login": "YosefHayim",
          "committed_at": "2026-06-25T10:11:29Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "e3335ad97ae1b1890ab9bec470f81517aa20fb30",
          "body": "…ules behind barrels (#248)\n\nSplits the two longest single-file slabs in `src/core` into co-located modules behind a re-export barrel, so `import … from \"../core/types.js\"` and `\"./commandDocs.js\"` stay unchanged for every caller.\n\n- **types.ts** (1695 lines) → `types/` barrel (`export type *`): 9 c\n[…]\ncal). Addressed cubic's review (moved `{@link import()}` paths, credentials-header secret-accuracy, `spliceRegion` end-fence hardening).\n\n🤖 Generated with [Claude Code](https://claude.com/claude-code)",
          "is_bot": false,
          "headline": "refactor(core): split types.ts and commandDocs.ts into co-located mod…",
          "author_name": "YosefHayim",
          "author_login": "YosefHayim",
          "committed_at": "2026-06-25T09:23:12Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "ed9e67ff780a25a2dff98c08ed9279def5d753fa",
          "body": "…sync vocabulary (#247)\n\nThe per-feature App Store Connect / Play reconcilers had each grown their own\nverbatim copies of the same scaffolding helpers — `plan`, `skip`, the\n`ReconcileContext` interface, the \"no app record\" error, and the\n`error instanceof Error ? … : String(error)` narrowing — one s\n[…]\nrMessage.test.ts`; `storeSync.test.ts` extended for `plan`,\n`appRecordMissing`, `appRecordNotFound`, and the non-Error `act` path.\n\nCo-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "refactor(core): consolidate reconciler scaffolding into shared store-…",
          "author_name": "YosefHayim",
          "author_login": "YosefHayim",
          "committed_at": "2026-06-24T00:22:08Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "5655fef30ae26c9aed3d99266f69e96010fef42d",
          "body": "Cuts v0.29.0 (notify transitions #239, play-reports vitals #240, play-pricing localize #242, Play catalog restore #244, ai screenshots #243, glossary catch-up #245) and renders the README FAQ as per-question collapsible <details> (English README only; llms.txt stays flat).",
          "is_bot": false,
          "headline": "chore(release): v0.29.0 + collapsible README FAQ (#246)",
          "author_name": "YosefHayim",
          "author_login": "YosefHayim",
          "committed_at": "2026-06-22T23:14:03Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "d0063e29e206bd11385e5b4bdf15ee7aeadf2c31",
          "body": "…launch ai screenshots` (#243)\n\n* feat(screenshots): canonical store dimension specs + hard-gate, and `launch ai screenshots`\n\nLaunch held no screenshot dimension truth — `KNOWN_DISPLAY_TYPES` is labels-only\nand the ascClient width/height is read back off already-uploaded shots. This adds\nthe canoni\n[…]\n- Re-sync the README live-stats test-count badge.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>\n\n---------\n\nCo-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat(screenshots): canonical store dimension specs + hard-gate, and `…",
          "author_name": "YosefHayim",
          "author_login": "YosefHayim",
          "committed_at": "2026-06-22T17:45:48Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "b3e7e3d1d1a1df250977f171cb01ab65e47724e6",
          "body": "…ncepts (#245)\n\nThe ubiquitous language froze around v0.13–v0.20; every store surface\nshipped since (App Clips, Game Center, in-app events, custom product\npages, PPO experiments, Wallet/Apple Pay ids, privacy/data-safety,\naccessibility labels, EU/DMA distribution, app availability, store\nreviews & r\n[…]\nling\n(dashboard, mcp, ci, agents, artifactDir, diagnose, secret) is\ndeliberately excluded. Docs-only: no runtime behavior changes.\n\nCo-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "docs(glossary): catch up language.md + glossary on 20 store-domain co…",
          "author_name": "YosefHayim",
          "author_login": "YosefHayim",
          "committed_at": "2026-06-22T17:40:59Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "3423ab8c7f91dab82a65049a7a0e71f511acc716",
          "body": "`launch snapshot restore` now pushes a saved Play catalog back to live,\nnot just the App Store listing. Both Play sources gain a `restore` pass\nthat inverts their capture and reconciles additively via the same\n`reconcilePlayProducts` / `reconcilePlaySubscriptions` `launch sync` uses\n— create-or-patc\n[…]\nchase's current price/territory, so its capture can't be\nmade config-complete. Covered by new restore test suites with Play fakes.\n\nCo-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat(snapshot): config-complete Play catalog restore (#236) (#244)",
          "author_name": "YosefHayim",
          "author_login": "YosefHayim",
          "committed_at": "2026-06-22T17:39:34Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "ee4688bb0250521c1cf7ea257634d176af97e873",
          "body": "…ices (#241) (#242)\n\nGiven one base price, call the Play Developer API's\n`monetization.convertRegionPrices` and print Google's recommended local\nprice for every Play market (plus the USD/EUR fallback for markets with no\nlocal currency). `--json` for scripting.\n\nAdvisory and read-only: it computes a \n[…]\ny),\n  region→price table render, --json.\n- Tests for price parsing/formatting + client fetch sequence/normalization.\n\nCloses #241.\n\nCo-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat(cli): `launch play-pricing localize` — recommended per-region pr…",
          "author_name": "YosefHayim",
          "author_login": "YosefHayim",
          "committed_at": "2026-06-22T16:39:22Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "0c7eb7cec25b13051fcfbe2271cc0d0040e96dbc",
          "body": "…a the Play Developer Reporting API (#226) (#240)\n\n* feat(cli): `launch play-reports vitals` — Android crash/ANR vitals via the Play Developer Reporting API (#226)\n\nAdd `launch play-reports vitals` reading Android quality vitals (crash rate,\nANR rate) from the Play Developer Reporting API — the Andr\n[…]\ne exception. Pure relocation; no\nbehavior change.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>\n\n---------\n\nCo-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat(cli): `launch play-reports vitals` — Android crash/ANR vitals vi…",
          "author_name": "YosefHayim",
          "author_login": "YosefHayim",
          "committed_at": "2026-06-22T12:00:16Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "678a8d7e72efdae37c422f9d68238aeb4a2a3d6e",
          "body": "…nsitions (#225) (#239)\n\n* feat(notify): fire notifications on review-state & phased-rollout transitions (#225)\n\nExtend the notification hook beyond build/submit completion to the milestones a\ndev actually waits on — Apple's review verdict and a phased rollout's day-N\nadvance — so they can walk away\n[…]\nn)` instead, and cover it with a regression test.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>\n\n---------\n\nCo-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat(notify): fire notifications on review-state & phased-rollout tra…",
          "author_name": "YosefHayim",
          "author_login": "YosefHayim",
          "committed_at": "2026-06-21T10:58:51Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "b3a6b0b037f04f9dec5a6da68097ce941bfd32a1",
          "body": "Rollup release covering the feature surface landed since v0.27.0:\nsnapshot restore + App ID capabilities capture & housekeeping (#191),\nplan/drift offers & screenshots surface planners (#140), shell completions\n(#232), testflight feedback (#234), and the maximalist agent skills +\ncollapsible README features (#237).\n\nCo-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "chore(release): v0.28.0 (#238)",
          "author_name": "YosefHayim",
          "author_login": "YosefHayim",
          "committed_at": "2026-06-21T10:18:41Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "b5b232c1a20f3a8b11928dd960d1dc3acf5d72a6",
          "body": "…ible README features (#237)\n\nSeven new consumer skills cover the command surface shipped since the\noriginal six (verify, plan, snapshot, migrate, insights, ai-listing,\nagent-access), each with CLI-validated steps; plus base-context guardrail\nupdates, a release-train step on launch-release, and plan\n[…]\n Features` now renders each group as a default-collapsed\n`<details>` (English README only; `llms.txt` stays a flat numbered list).\n\nCo-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "docs(agents): maximalist skills for the new feature surface + collaps…",
          "author_name": "YosefHayim",
          "author_login": "YosefHayim",
          "committed_at": "2026-06-21T10:14:14Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "0edbe8d4e73d289b6be3abd2acd803b920dd17c2",
          "body": "… & screenshot feedback (#234)\n\n* feat(testflight): `launch testflight feedback` — surface tester crash & screenshot feedback (#224)\n\nAdd `launch testflight feedback [--build <ver>] [--type crash|screenshot] [--out <dir>] [--json] [-a <app>]`\nto list TestFlight beta feedback — crash and screenshot s\n[…]\nr-strip ids produce distinct,\nin-directory files.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>\n\n---------\n\nCo-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat(testflight): `launch testflight feedback` — surface tester crash…",
          "author_name": "YosefHayim",
          "author_login": "YosefHayim",
          "committed_at": "2026-06-21T10:06:32Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "e33efcf16acbad8d109a379791fd73bdde36044b",
          "body": "…#191) (#235)\n\nThree deliverables on the snapshot layer:\n\n- restore: `launch snapshot restore <name>` pushes a saved capture back to\n  live, gated behind --yes (dry-run plan by default). Wired as an optional\n  per-source capability — App Store listing (config-complete capture)\n  implements it via th\n[…]\ne needs their capture enriched first. Restore is wired as\nan optional per-source capability so they gain it without an API change.\n\nCo-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat(snapshot): restore, App ID capabilities capture & housekeeping (…",
          "author_name": "YosefHayim",
          "author_login": "YosefHayim",
          "committed_at": "2026-06-21T09:51:54Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "6f748ff5b0cb43ad3b9480667f9252c84219a18c",
          "body": "…ldable plan/drift surfaces (#140) (#233)\n\nWire the last two diffable App Store surfaces into `launch plan` / `launch drift`:\n\n- **offers** — wraps `reconcileOffers` in dry-run over the typed `products[bundleId]`\n  catalog. Additive (Apple offer terms are immutable, so the reconciler only creates).\n\n[…]\ne config and no reconciler, so it\nhas no diff substrate. Making in-app events plannable would mean a new events config section\nplus a reconciler — a separate feature, worth its own issue.\n\nCloses #140",
          "is_bot": false,
          "headline": "feat(plan): offers & screenshots surface planners — completes the bui…",
          "author_name": "YosefHayim",
          "author_login": "YosefHayim",
          "committed_at": "2026-06-21T08:59:31Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "c694658e75eadb17929e957fca786d36da7a1f52",
          "body": "…th dynamic completion (#232)\n\n* feat(cli): `launch completion` — shell completions (bash/zsh/fish) with dynamic completion\n\nAdd `launch completion <bash|zsh|fish>` (prints the script), `launch completion\ninstall` (idempotently wires it into the shell rc via a fenced managed block,\nor prints the man\n[…]\n) —\nonly the shared Shell enum lives in types.ts.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>\n\n---------\n\nCo-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat(cli): `launch completion` — shell completions (bash/zsh/fish) wi…",
          "author_name": "YosefHayim",
          "author_login": "YosefHayim",
          "committed_at": "2026-06-21T08:51:36Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "be7a07ecdafb3ea433d051a45f761923c7cc924f",
          "body": "…account, profile entitlements, screenshots (#188) (#231)\n\nAdd the remaining submit-blocking readiness probes behind `launch audit`,\neach a read-only check that grades live App Store Connect state against a\nsubmission prerequisite and degrades to a warn (never a false blocker) when\nthe app record or\n[…]\nr `submit` (and their domain tag), so `launch audit` picks\nthem up via the existing category selector with no orchestrator change.\n\nCo-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat(audit): deferred pre-submit probes — account-deletion URL, demo …",
          "author_name": "YosefHayim",
          "author_login": "YosefHayim",
          "committed_at": "2026-06-20T18:50:53Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "55e657be8618a4321e7fca083c8d7fe241f78e07",
          "body": "…ofiles; guide the App Group portal step (#221) (#229)\n\nApps with embedded extensions (WidgetKit, share, notification-service\ntargets) need their own App ID + App Store profile per target, all signed\nby the team's single distribution certificate. Without per-target profiles\nxcodebuild falls back to \n[…]\n5), since the JWT\n  API can't create or assign group containers\n- setup ios report: declared-extension provisioning status section\n\nCo-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat(creds/build): provision app-extension bundle IDs + per-target pr…",
          "author_name": "YosefHayim",
          "author_login": "YosefHayim",
          "committed_at": "2026-06-20T13:27:51Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "187cfe4608bac0c5273c01f6878b201402d895f0",
          "body": "…ole / TestFlight / live listing (#230)\n\n* feat(cli): `launch open [target]` — deep-link to App Store Connect / Play Console / TestFlight / live listing (#223)\n\nAdd `launch open [target]` to jump from a read-only finding to the irreducible\nUI step that fixes it. Targets: asc | play | testflight | li\n[…]\nemoved as the CLI no longer holds testable logic.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>\n\n---------\n\nCo-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat(cli): `launch open` — deep-link to App Store Connect / Play Cons…",
          "author_name": "YosefHayim",
          "author_login": "YosefHayim",
          "committed_at": "2026-06-20T13:17:31Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "15167a65a7c45545bf8ed96007647f9288683140",
          "body": "…migrate, mcp, insights, ai listing, privacy, dashboard, artifactDir (#220)\n\nBundles all 25 commits since v0.26.1 into one minor release. New surfaces:\nlaunch store doctor / audit / iap doctor, launch snapshot, launch migrate\neas|fastlane, launch config schema|validate|docs, launch mcp (read + write\n[…]\n insights, launch ai listing, launch privacy scan,\nlaunch dashboard, and the configurable in-repo `artifactDir` (auto-gitignored).\n\nCo-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "chore(release): v0.27.0 — store doctor, audit, iap doctor, snapshot, …",
          "author_name": "YosefHayim",
          "author_login": "YosefHayim",
          "committed_at": "2026-06-18T17:06:35Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "ebaa878ac0c72b231c99e3a9c81102f680472a4d",
          "body": "…output + auto-gitignore (#219)\n\nLet users choose where the `local` storage provider writes build binaries\ninstead of always burying them in the global `~/.launch/artifacts`. `launch\ninit` and the no-args wizard now scaffold an in-repo `./.launch/artifacts` and\nauto-add it to `.gitignore`, so artifa\n[…]\n and a real-git\ngitignore suite (in-repo add, idempotency, broader-pattern respect, out-of-repo\nand non-repo no-ops).\n\nCloses #218\n\nCo-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat(config): `artifactDir` — configurable, in-repo-by-default build …",
          "author_name": "YosefHayim",
          "author_login": "YosefHayim",
          "committed_at": "2026-06-18T16:33:53Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "56e17e7b9cff7d31e35bd72e3b0cf2a2dce5c5f8",
          "body": "…er CLI state (#217)\n\nA tiny `node:http` server (no new dependency) serves one self-contained HTML\npage summarising everything readable from `launch.config.ts` + `~/.launch`:\ndiscovered apps, profiles, the provider wiring, Apple accounts, recent build\nartifacts, build-secret coordinates (names only \n[…]\ns first cut — they need ASC auth and belong on the confirmed\n`plan`/`reports` read path, not an always-on local page.\n\nCloses #177\n\nCo-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat(cli): `launch dashboard` — a strictly-local, read-only web UI ov…",
          "author_name": "YosefHayim",
          "author_login": "YosefHayim",
          "committed_at": "2026-06-18T16:30:08Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "e708a167cb3eb49e21a263cb9c5b4c06f16e8411",
          "body": "…eclarations (#175) (#214)\n\nAdd `launch privacy scan`: a read-only sweep that reconciles an app's actual\npermission/data surface against its declared iOS privacy manifest, catching the\nopaque, common rejection causes before App Review does.\n\nIt can't diff against the *published* App Privacy label or\n[…]\non`\nfor CI/agents. Tests cover the parsers, every reconcile rule, the exit codes, and\nthe renderer. Docs regenerated.\n\nCloses #175\n\nCo-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat(cli): `launch privacy scan` — reconcile permissions vs privacy d…",
          "author_name": "YosefHayim",
          "author_login": "YosefHayim",
          "committed_at": "2026-06-18T16:26:43Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "8b8fc4445f9085dc5508a8bc81aff3bae00311e4",
          "body": "…o store.config.json (#179) (#212)\n\nAdd `launch ai listing`: draft App Store / Play listing copy with a model and\nwrite it into the app's versioned `store.config.json`. It never touches a store —\nthe draft lands in the same file `launch metadata` reads, so the user reviews the\ndiff with `launch plan\n[…]\nidLocale, renderDraftPreview,\nbuildListingPrompt, parseDraftListing, and the no-API-key error path. Docs regenerated.\n\nCloses #179\n\nCo-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat(cli): `launch ai listing` — AI-drafted App Store / Play copy int…",
          "author_name": "YosefHayim",
          "author_login": "YosefHayim",
          "committed_at": "2026-06-18T16:23:14Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "e43228e57207ca3198551a8a6448520d40982cb1",
          "body": "…(#178) (#210)\n\nThe synthesis layer (Axis 4 of the differentiation roadmap) over the review\ndata Launch already pulls via `reviews` / `play-reviews` — no new data source.\n`launch insights` resolves the read-only ASC + Play clients once, pulls each\napp's reviews, normalizes them to a store-agnostic `\n[…]\n warning).\n\nAll numeric work + the renderer live in the pure `core/insights` aggregator,\nunit-tested without a network or account.\n\nCo-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat(insights): `launch insights` — aggregate rating & review trends …",
          "author_name": "YosefHayim",
          "author_login": "YosefHayim",
          "committed_at": "2026-06-18T16:19:11Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "b90cccab03033727a9f869e534ee41656b42bdd6",
          "body": "… offer codes (#189) (#216)\n\nAdds the three App Store Connect API-backed iap-doctor readiness probes that\nPR #213 (file-based code-reference + StoreKit config) does not cover:\n\n- apple-sandbox-testers (iap): warns when an account selling IAP has no sandbox\n  tester to test-buy the StoreKit flow befo\n[…]\ned iapReadiness scoping helpers. New probes auto-appear under\n`launch iap doctor` / `launch audit` through the readiness registry.\n\nCo-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat(iap-doctor): ASC-API deferred probes — sandbox testers, pricing,…",
          "author_name": "YosefHayim",
          "author_login": "YosefHayim",
          "committed_at": "2026-06-18T01:04:08Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "4825798e0108a2cc7304ee20051b28656a2867ea",
          "body": "Turn more of a fastlane setup into real Launch config instead of manual\nnotes, extending the existing tolerant line-scan parser (no new files):\n\n- Metadata import — read the `fastlane/metadata` (deliver) and\n  `fastlane/metadata/android` (supply) folders into `store.config.json`,\n  reusing storeConf\n[…]\nne formatter.\n\nStill deferred (noted in #195): Gymfile/Scanfile hints and multi-platform\n`for_platform`/`for_lane` Appfile blocks.\n\nCo-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat(migrate): deepen `launch migrate fastlane` coverage (#195) (#209)",
          "author_name": "YosefHayim",
          "author_login": "YosefHayim",
          "committed_at": "2026-06-18T00:59:26Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "a9935440ef00d899427357d56a73a266f5b96317",
          "body": "…nv, app facts (#193) (#211)\n\n`launch migrate eas` now carries over three pieces of an EAS setup it previously\ndropped, each as a non-secret report note or artifact:\n\n- **credentials.json** — when `credentialsSource: \"local\"`, surface the iOS cert /\n  provisioning-profile paths and the Android keyst\n[…]\nrationResult | Promise<MigrationResult>` and awaits the result —\n`migrateFastlane` stays sync and remains assignable.\n\nCloses #193\n\nCo-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat(migrate): deepen `migrate eas` — credentials.json, per-profile e…",
          "author_name": "YosefHayim",
          "author_login": "YosefHayim",
          "committed_at": "2026-06-18T00:14:40Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "2cb5eb2956acf00eb358cf5b1d2b6d00d22c19d6",
          "body": "… (#191) (#215)\n\nRicher snapshot coverage and a reversible-by-default `launch sync`:\n\n- New `apple-listing` snapshot source captures per-locale App Store listing\n  copy (app-level name/subtitle/privacy URL merged with version-level\n  description/keywords/whatsNew/…), keyed by locale. Read-only — reu\n[…]\n never touching a user's manually-named snapshots.\n\nDestructive `snapshot restore` stays deferred (issue remains open). Refs #191.\n\nCo-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat(snapshot): App Store listing surface + auto-snapshot before sync…",
          "author_name": "YosefHayim",
          "author_login": "YosefHayim",
          "committed_at": "2026-06-18T00:11:01Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "9e0704d0d7f6b85031ff286838bca117a3349afe",
          "body": "…eference + StoreKit config (#189) (#213)\n\nTwo new `iap`-tagged readiness probes, both purely local (no credentials, never\nskip) and advisory (`warn`, not a submission blocker):\n\n- **apple-iap-code-reference** — every product id declared in `launch.config.ts`\n  (one-off IAPs + every subscription acr\n[…]\n#189 probes (sandbox testers, pricing/\nterritory, offer verification) need new networked ASC readers and stay deferred.\n\nRefs #189\n\nCo-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat(iap-doctor): add the two file-based deferred IAP probes — code-r…",
          "author_name": "YosefHayim",
          "author_login": "YosefHayim",
          "committed_at": "2026-06-18T00:04:45Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "d4455c8d459e3dd5d9d195b80fe0a694d70473b5",
          "body": "…208)\n\nAll three are pure App Store Connect request-shape fixes in apple/ascClient.ts,\nindependent of config, that break `launch sync` against a live account with IAPs:\n\n- Bug 1: drop `limit=200` from the `bundleIdCapabilities` to-many related read —\n  Apple's related endpoint rejects `limit` (400);\n[…]\ntime IAP now prices successfully (bug 3), and the re-plan no longer\nsurfaces the price action (bug 2b detects it via the v2 path).\n\nCo-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix(apple): correct 3 ASC request-shape bugs in launch sync (#204) (#…",
          "author_name": "YosefHayim",
          "author_login": "YosefHayim",
          "committed_at": "2026-06-17T14:02:55Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "5799e15a65c26992077a51555d488e27dce85d7c",
          "body": "…(#187) (#207)\n\nFollow-up to #170. Adds the deferred Apple account-onboarding probe and the\nASC reader it needs.\n\n- `apple-agreements` probe (`account` + `submit`): an unsigned or expired\n  Apple Developer Program License Agreement, Paid Applications Agreement, or\n  its banking/tax forms 403s every \n[…]\nmandatory for all new apps, and `play-app-access` + `play-first-upload`\nalready cover the real Play account blockers.\n\nCloses #187\n\nCo-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat(store-doctor): Apple agreements / banking & tax readiness probe …",
          "author_name": "YosefHayim",
          "author_login": "YosefHayim",
          "committed_at": "2026-06-17T12:31:02Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "7cbededa93098e4722fde066ea4cda1857b2b7d3",
          "body": "…206)\n\nExpose `launch sync` to AI agents over MCP behind the `write` and\n`dangerous` capability tiers — the first mutating MCP tools.\n\n- Extract the headless reconcile engine into `core/syncRun.ts`\n  (`reconcileJob`/`summarize`/`summarizeRun`/`mergeOutcomes`/`runSyncBatch`),\n  shared verbatim by the\n[…]\nus registry composition and per-tier gating; the\n  choreography reuses the already-tested `reconcileApp` + `runPool`.\n\nCloses #202\n\nCo-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat(mcp): `sync` + `sync_destructive` write-tier MCP tools (#202) (#…",
          "author_name": "YosefHayim",
          "author_login": "YosefHayim",
          "committed_at": "2026-06-17T06:57:33Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "929fea591315ea118b0ea411e5ee271e9e08fb93",
          "body": "…ic checks (#197) (#205)\n\nAdd `core/configSemantics.ts` — a pure, dependency-free cross-field validator\n(the config twin of `configCheck.ts`) covering invariants the JSON Schema can't\nexpress: cloud storage requires `storageConfig`, `SCHEDULED` releases require a\nvalid `earliestReleaseDate`, per-loc\n[…]\nich also collapses 20 lines of conditional spreads. Expand the\nconfig docs intro to document the `$schema` autocomplete path end to end (part 3).\n\nCo-authored-by: Claude Opus 4 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat(config): deepen `launch config validate` with cross-field semant…",
          "author_name": "YosefHayim",
          "author_login": "YosefHayim",
          "committed_at": "2026-06-16T21:56:34Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "28fc532c76038556e24b21f8e5428e2b7f4e0d24",
          "body": "…er (#201) (#203)\n\nAdds a write-free `build_plan` MCP tool that rehearses `launch build <platform>`:\nit resolves the engine, submitter, profile, distribution, and (on Android) track +\nrollout from config via the pipeline's own pure resolvers, touching no toolchain,\nnetwork, or stdout. Lives behind t\n[…]\n\n- server defaults to `ALL_TOOLS`; the gate filters to enabled tiers\n- tests for previewBuild + the new registries; docs regenerated\n\nCloses #201\n\nCo-authored-by: Claude Opus 4 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat(mcp): build_plan dry-run tool — the first `dryRun` capability ti…",
          "author_name": "YosefHayim",
          "author_login": "YosefHayim",
          "committed_at": "2026-06-16T21:25:03Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "717ed819c40ba23286df6fdf72d6f3473cf9946e",
          "body": "…sync language.md (#199)\n\n* docs(glossary): teach offers/plan/drift/adopt/migrate + IAP terms, resync language.md\n\nAdds six glossary topics for first-class commands and IAP concepts that\nshipped without teaching text — subscription-group, subscription-offer,\nconfig-reconcile, plan-drift, adopt, migr\n[…]\nd after merging #200,\nso docs:check passes now that the file is tracked (#198).\n\nCo-Authored-By: Claude Opus 4 <noreply@anthropic.com>\n\n---------\n\nCo-authored-by: Claude Opus 4 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "docs(glossary): teach offers/plan/drift/adopt/migrate + IAP terms, re…",
          "author_name": "YosefHayim",
          "author_login": "YosefHayim",
          "committed_at": "2026-06-16T21:20:04Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "f8bafad4bbce6a69cce0f5daf959cd64f07c5ad4",
          "body": "…resh checkout (#198)\n\nPR #196 added docs/config.md to the gen-docs output and the docs:check gate\nbut left it under the docs/* gitignore rule, so CI's clean checkout had no\nfile for `docs:check` to diff and threw ENOENT. Un-ignore and commit it,\nmirroring the existing docs/commands.md exception.\n\nCo-authored-by: Claude Opus 4 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix(docs): track generated docs/config.md so docs:check passes on a f…",
          "author_name": "YosefHayim",
          "author_login": "YosefHayim",
          "committed_at": "2026-06-16T21:13:29Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "019f704b90deab1595463f71c494d511d9c483b0",
          "body": "…s over MCP (#176) (#200)\n\nServe Launch as an MCP (Model Context Protocol) server over stdio so a coding\nagent can call its read-only introspection in-process: plan, drift, audit,\nstore/iap doctors, config validate/schema/docs, snapshot list/diff/export, and\nthe local doctor. Each tool calls the sam\n[…]\nrReport\n  with a shared buildDoctorContext, so the CLI and the `doctor` tool share one\n  inspection (the --fix network reconcile stays CLI-only).\n\nCo-authored-by: Claude Opus 4 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat(mcp): `launch mcp` — expose Launch's read-only tools to AI agent…",
          "author_name": "YosefHayim",
          "author_login": "YosefHayim",
          "committed_at": "2026-06-16T19:02:08Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "6f793dd5773a84c4ffb64244fa8aab0d94dca73b",
          "body": "…+ typed reference from the config types (#173) (#196)\n\nAdds a `config` command group that lets humans and AI agents edit `launch.config.ts`\nsafely with editor autocomplete + validation, generated from the config types so the\ntypes stay the single source of truth.\n\n- `config schema [--out]` — emit t\n[…]\nkeys. The\n`<file>.json` path validates verbatim (full shape, incl. unknown-key detection) — the\nAI/programmatic case.\n\nCloses #173\n\nCo-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat(config): `launch config schema`/`validate`/`docs` — JSON Schema …",
          "author_name": "YosefHayim",
          "author_login": "YosefHayim",
          "committed_at": "2026-06-16T12:56:14Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "122f30d7a45e3e1a88d9bfd2760c7a744755ab68",
          "body": "…to a Launch config (#172) (#194)\n\nAdd the fastlane sibling of `launch migrate eas`: read an existing fastlane\nsetup (Appfile / Fastfile / Matchfile / Supplyfile / Deliverfile) off disk and\nemit the equivalent Launch artifacts plus a report of what carries over and what\nneeds a human.\n\n- `core/migra\n[…]\nor, options)` helper.\n- Tests for the parsers, `migrateFastlane`, the shared scaffold, and the command\n  wiring; docs regenerated.\n\nCo-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat(migrate): `launch migrate fastlane` — import a fastlane setup in…",
          "author_name": "YosefHayim",
          "author_login": "YosefHayim",
          "committed_at": "2026-06-16T12:17:13Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "e5011f8540f59333d6d0a898f69c49540cdb43ce",
          "body": "…onfig (#171) (#192)\n\nRead an existing Expo/EAS project's eas.json (plus the app facts Launch\nalready discovers from app.json) and emit the equivalent launch.config.ts,\n.env.example, store.config.json, and a migration-report.md of what mapped and\nwhat needs manual follow-up. File-based and read-only\n[…]\nal mapped profiles (init/adopt callers unchanged).\n- Never overwrites without --force; --dry-run previews; --out redirects output.\n\nCo-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat(migrate): `launch migrate eas` — import eas.json into a Launch c…",
          "author_name": "YosefHayim",
          "author_login": "YosefHayim",
          "committed_at": "2026-06-16T11:55:16Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "15d7fde500007ce4103b5b716491c5b8a3046c89",
          "body": "…e (#169) (#190)\n\nAdd `launch snapshot` — a read-only, point-in-time capture of live App Store\nConnect + Google Play catalog state, saved as a named record under\n~/.launch/snapshots. It is the trustworthy \"before\" that makes destructive\nstore automation (`launch sync` / `apply`) reversible.\n\nArchite\n[…]\ninst] (default: live),\nexport <name>. Read-only end to end. Partial restore and\nauto-snapshot-before-sync are deferred follow-ups.\n\nCo-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat(snapshot): launch snapshot — capture/diff/export live store stat…",
          "author_name": "YosefHayim",
          "author_login": "YosefHayim",
          "committed_at": "2026-06-16T11:31:31Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "2e3ef8ff8d448608ced4f24bfc11810770450ded",
          "body": "…174) (#186)\n\nAdd `launch iap doctor`, the third command in the trust-layer family, as a thin\nselector over the readiness registry. IAP is the most error-prone surface to\nship: a green build says nothing about whether a purchase actually works, because\na product can be undeclared, missing metadata, \n[…]\nlability depth, offer verification.\n\nExit codes mirror plan/status (0 ready · 2 blockers · 1 unreadable, error wins).\n\nCloses #174\n\nCo-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat(iap): launch iap doctor — read-only in-app-purchase readiness (#…",
          "author_name": "YosefHayim",
          "author_login": "YosefHayim",
          "committed_at": "2026-06-16T10:44:59Z",
          "body_truncated": true,
          "is_coding_agent": true
        }
      ],
      "releases_count": 37,
      "commits_last_year": 311,
      "latest_release_at": "2026-07-19T12:31:34Z",
      "latest_release_tag": "v0.32.8",
      "releases_from_tags": false,
      "days_since_last_push": 5,
      "active_weeks_last_year": 6,
      "days_since_latest_release": 5,
      "mean_days_between_releases": 2.4
    },
    "community": {
      "has_readme": true,
      "has_license": true,
      "has_description": true,
      "has_contributing": true,
      "health_percentage": 57,
      "has_issue_template": false,
      "has_code_of_conduct": false,
      "has_pull_request_template": false
    },
    "ecosystem": {
      "packages": [
        {
          "name": "launch-store",
          "exists": true,
          "license": "MIT",
          "keywords": [
            "cli",
            "mobile",
            "ios",
            "android",
            "app-store",
            "testflight",
            "play-store",
            "fastlane",
            "react-native",
            "expo",
            "eas",
            "code-signing",
            "app-store-connect",
            "ci-cd",
            "eas-alternative",
            "expo-eas",
            "ota-updates",
            "self-hosted"
          ],
          "ecosystem": "npm",
          "matches_repo": true,
          "registry_url": "https://www.npmjs.com/package/launch-store",
          "is_deprecated": false,
          "latest_version": "0.32.8",
          "repository_url": "https://github.com/YosefHayim/launch-store",
          "versions_count": 36,
          "total_downloads": null,
          "dependents_count": null,
          "deprecation_note": null,
          "maintainers_count": 1,
          "monthly_downloads": 2629,
          "first_published_at": "2026-06-13T19:26:12.374000Z",
          "latest_published_at": "2026-07-19T12:32:52.779000Z",
          "latest_version_yanked": null,
          "days_since_latest_publish": 5
        }
      ]
    },
    "popularity": {
      "forks": 1,
      "stars": 3,
      "watchers": 0,
      "fork_history": {
        "days": [
          {
            "date": "2026-07-10",
            "count": 1
          }
        ],
        "complete": true,
        "collected": 1,
        "total_forks": 1
      },
      "star_history": null,
      "open_issues_and_prs": 1
    },
    "ai_readiness": {
      "has_nix": false,
      "example_dirs": [
        "examples"
      ],
      "has_llms_txt": true,
      "has_dockerfile": false,
      "has_mcp_signal": false,
      "bootstrap_files": [],
      "api_schema_files": [],
      "has_devcontainer": false,
      "typecheck_configs": [
        "examples/hello-world/tsconfig.json",
        "tsconfig.json"
      ],
      "toolchain_manifests": [],
      "largest_source_bytes": 5069338,
      "source_files_sampled": 525,
      "oversized_source_files": 4,
      "agent_instruction_files": [
        ".cursor/rules/core-types.mdc",
        ".cursor/rules/exec-secrets.mdc",
        ".cursor/rules/launch.mdc",
        ".cursor/rules/providers.mdc",
        "AGENTS.md",
        "CLAUDE.md"
      ],
      "agent_instruction_max_bytes": 7397
    },
    "dependencies": {
      "manifests": [
        "package.json"
      ],
      "advisories": {
        "error": null,
        "scope": "published_package",
        "source": "osv",
        "findings": [
          {
            "name": "@hono/node-server",
            "direct": false,
            "version": "1.19.15",
            "severity": "moderate",
            "ecosystem": "npm",
            "cvss_score": 5.9,
            "advisory_ids": [
              "GHSA-frvp-7c67-39w9"
            ],
            "fixed_version": "2.0.5",
            "advisory_count": 1,
            "oldest_advisory_days": 3
          }
        ],
        "collected": true,
        "malicious": [],
        "truncated": false,
        "by_severity": {
          "moderate": 1
        },
        "advisory_count": 1,
        "affected_count": 1,
        "assessed_count": 165,
        "malicious_count": 0,
        "assessed_package": "npm:launch-store@0.32.8",
        "unassessed_count": 0,
        "direct_affected_count": 0
      },
      "ecosystems": [
        "npm"
      ],
      "dependencies": [
        {
          "name": "@clack/prompts",
          "manifest": "package.json",
          "ecosystem": "npm",
          "version_constraint": "^1.5.1"
        },
        {
          "name": "@effect/platform",
          "manifest": "package.json",
          "ecosystem": "npm",
          "version_constraint": "^0.96.2"
        },
        {
          "name": "chalk",
          "manifest": "package.json",
          "ecosystem": "npm",
          "version_constraint": "^5.6.2"
        },
        {
          "name": "commander",
          "manifest": "package.json",
          "ecosystem": "npm",
          "version_constraint": "^12.1.0"
        },
        {
          "name": "effect",
          "manifest": "package.json",
          "ecosystem": "npm",
          "version_constraint": "^3.21.4"
        },
        {
          "name": "jiti",
          "manifest": "package.json",
          "ecosystem": "npm",
          "version_constraint": "^2.4.0"
        },
        {
          "name": "jose",
          "manifest": "package.json",
          "ecosystem": "npm",
          "version_constraint": "^5.9.6"
        }
      ],
      "all_dependencies": {
        "error": null,
        "source": "github-sbom",
        "packages": [
          {
            "name": "@clack/prompts",
            "direct": true,
            "version": "1.5.1",
            "ecosystem": "npm"
          },
          {
            "name": "@effect/platform",
            "direct": true,
            "version": "0.96.2",
            "ecosystem": "npm"
          },
          {
            "name": "chalk",
            "direct": true,
            "version": "5.6.2",
            "ecosystem": "npm"
          },
          {
            "name": "commander",
            "direct": true,
            "version": "12.1.0",
            "ecosystem": "npm"
          },
          {
            "name": "commander",
            "direct": true,
            "version": "13.1.0",
            "ecosystem": "npm"
          },
          {
            "name": "effect",
            "direct": true,
            "version": "3.21.4",
            "ecosystem": "npm"
          },
          {
            "name": "jiti",
            "direct": true,
            "version": "2.7.0",
            "ecosystem": "npm"
          },
          {
            "name": "jose",
            "direct": true,
            "version": "5.10.0",
            "ecosystem": "npm"
          },
          {
            "name": "jose",
            "direct": true,
            "version": "6.2.3",
            "ecosystem": "npm"
          },
          {
            "name": "@aws-crypto/crc32",
            "direct": false,
            "version": "5.2.0",
            "ecosystem": "npm"
          },
          {
            "name": "@aws-crypto/crc32c",
            "direct": false,
            "version": "5.2.0",
            "ecosystem": "npm"
          },
          {
            "name": "@aws-crypto/sha1-browser",
            "direct": false,
            "version": "5.2.0",
            "ecosystem": "npm"
          },
          {
            "name": "@aws-crypto/sha256-browser",
            "direct": false,
            "version": "5.2.0",
            "ecosystem": "npm"
          },
          {
            "name": "@aws-crypto/sha256-js",
            "direct": false,
            "version": "5.2.0",
            "ecosystem": "npm"
          },
          {
            "name": "@aws-crypto/supports-web-crypto",
            "direct": false,
            "version": "5.2.0",
            "ecosystem": "npm"
          },
          {
            "name": "@aws-crypto/util",
            "direct": false,
            "version": "5.2.0",
            "ecosystem": "npm"
          },
          {
            "name": "@aws-sdk/checksums",
            "direct": false,
            "version": "3.1000.5",
            "ecosystem": "npm"
          },
          {
            "name": "@aws-sdk/client-cognito-identity",
            "direct": false,
            "version": "3.1068.0",
            "ecosystem": "npm"
          },
          {
            "name": "@aws-sdk/client-ec2",
            "direct": false,
            "version": "3.1068.0",
            "ecosystem": "npm"
          },
          {
            "name": "@aws-sdk/client-s3",
            "direct": false,
            "version": "3.1068.0",
            "ecosystem": "npm"
          },
          {
            "name": "@aws-sdk/core",
            "direct": false,
            "version": "3.974.20",
            "ecosystem": "npm"
          },
          {
            "name": "@aws-sdk/credential-provider-cognito-identity",
            "direct": false,
            "version": "3.972.45",
            "ecosystem": "npm"
          },
          {
            "name": "@aws-sdk/credential-provider-env",
            "direct": false,
            "version": "3.972.46",
            "ecosystem": "npm"
          },
          {
            "name": "@aws-sdk/credential-provider-http",
            "direct": false,
            "version": "3.972.48",
            "ecosystem": "npm"
          },
          {
            "name": "@aws-sdk/credential-provider-ini",
            "direct": false,
            "version": "3.972.53",
            "ecosystem": "npm"
          },
          {
            "name": "@aws-sdk/credential-provider-login",
            "direct": false,
            "version": "3.972.52",
            "ecosystem": "npm"
          },
          {
            "name": "@aws-sdk/credential-provider-node",
            "direct": false,
            "version": "3.972.55",
            "ecosystem": "npm"
          },
          {
            "name": "@aws-sdk/credential-provider-process",
            "direct": false,
            "version": "3.972.46",
            "ecosystem": "npm"
          },
          {
            "name": "@aws-sdk/credential-provider-sso",
            "direct": false,
            "version": "3.972.52",
            "ecosystem": "npm"
          },
          {
            "name": "@aws-sdk/credential-provider-web-identity",
            "direct": false,
            "version": "3.972.52",
            "ecosystem": "npm"
          },
          {
            "name": "@aws-sdk/credential-providers",
            "direct": false,
            "version": "3.1068.0",
            "ecosystem": "npm"
          },
          {
            "name": "@aws-sdk/middleware-flexible-checksums",
            "direct": false,
            "version": "3.974.30",
            "ecosystem": "npm"
          },
          {
            "name": "@aws-sdk/middleware-sdk-ec2",
            "direct": false,
            "version": "3.972.34",
            "ecosystem": "npm"
          },
          {
            "name": "@aws-sdk/middleware-sdk-s3",
            "direct": false,
            "version": "3.972.51",
            "ecosystem": "npm"
          },
          {
            "name": "@aws-sdk/nested-clients",
            "direct": false,
            "version": "3.997.20",
            "ecosystem": "npm"
          },
          {
            "name": "@aws-sdk/signature-v4-multi-region",
            "direct": false,
            "version": "3.996.34",
            "ecosystem": "npm"
          },
          {
            "name": "@aws-sdk/token-providers",
            "direct": false,
            "version": "3.1066.0",
            "ecosystem": "npm"
          },
          {
            "name": "@aws-sdk/types",
            "direct": false,
            "version": "3.973.12",
            "ecosystem": "npm"
          },
          {
            "name": "@aws-sdk/util-locate-window",
            "direct": false,
            "version": "3.965.7",
            "ecosystem": "npm"
          },
          {
            "name": "@aws-sdk/xml-builder",
            "direct": false,
            "version": "3.972.29",
            "ecosystem": "npm"
          },
          {
            "name": "@aws/lambda-invoke-store",
            "direct": false,
            "version": "0.2.4",
            "ecosystem": "npm"
          },
          {
            "name": "@babel/code-frame",
            "direct": false,
            "version": "7.29.7",
            "ecosystem": "npm"
          },
          {
            "name": "@babel/core",
            "direct": false,
            "version": "^7.25.0",
            "ecosystem": "npm"
          },
          {
            "name": "@babel/helper-string-parser",
            "direct": false,
            "version": "7.29.7",
            "ecosystem": "npm"
          },
          {
            "name": "@babel/helper-validator-identifier",
            "direct": false,
            "version": "7.29.7",
            "ecosystem": "npm"
          },
          {
            "name": "@babel/parser",
            "direct": false,
            "version": "7.29.7",
            "ecosystem": "npm"
          },
          {
            "name": "@babel/types",
            "direct": false,
            "version": "7.29.7",
            "ecosystem": "npm"
          },
          {
            "name": "@bcoe/v8-coverage",
            "direct": false,
            "version": "1.0.2",
            "ecosystem": "npm"
          },
          {
            "name": "@biomejs/biome",
            "direct": false,
            "version": "2.5.1",
            "ecosystem": "npm"
          },
          {
            "name": "@biomejs/cli-darwin-arm64",
            "direct": false,
            "version": "2.5.1",
            "ecosystem": "npm"
          },
          {
            "name": "@biomejs/cli-darwin-x64",
            "direct": false,
            "version": "2.5.1",
            "ecosystem": "npm"
          },
          {
            "name": "@biomejs/cli-linux-arm64",
            "direct": false,
            "version": "2.5.1",
            "ecosystem": "npm"
          },
          {
            "name": "@biomejs/cli-linux-arm64-musl",
            "direct": false,
            "version": "2.5.1",
            "ecosystem": "npm"
          },
          {
            "name": "@biomejs/cli-linux-x64",
            "direct": false,
            "version": "2.5.1",
            "ecosystem": "npm"
          },
          {
            "name": "@biomejs/cli-linux-x64-musl",
            "direct": false,
            "version": "2.5.1",
            "ecosystem": "npm"
          },
          {
            "name": "@biomejs/cli-win32-arm64",
            "direct": false,
            "version": "2.5.1",
            "ecosystem": "npm"
          },
          {
            "name": "@biomejs/cli-win32-x64",
            "direct": false,
            "version": "2.5.1",
            "ecosystem": "npm"
          },
          {
            "name": "@clack/core",
            "direct": false,
            "version": "1.4.1",
            "ecosystem": "npm"
          },
          {
            "name": "@emnapi/core",
            "direct": false,
            "version": "1.10.0",
            "ecosystem": "npm"
          },
          {
            "name": "@emnapi/runtime",
            "direct": false,
            "version": "1.10.0",
            "ecosystem": "npm"
          },
          {
            "name": "@emnapi/wasi-threads",
            "direct": false,
            "version": "1.2.1",
            "ecosystem": "npm"
          },
          {
            "name": "@esbuild/aix-ppc64",
            "direct": false,
            "version": "0.28.1",
            "ecosystem": "npm"
          },
          {
            "name": "@esbuild/android-arm",
            "direct": false,
            "version": "0.28.1",
            "ecosystem": "npm"
          },
          {
            "name": "@esbuild/android-arm64",
            "direct": false,
            "version": "0.28.1",
            "ecosystem": "npm"
          },
          {
            "name": "@esbuild/android-x64",
            "direct": false,
            "version": "0.28.1",
            "ecosystem": "npm"
          },
          {
            "name": "@esbuild/darwin-arm64",
            "direct": false,
            "version": "0.28.1",
            "ecosystem": "npm"
          },
          {
            "name": "@esbuild/darwin-x64",
            "direct": false,
            "version": "0.28.1",
            "ecosystem": "npm"
          },
          {
            "name": "@esbuild/freebsd-arm64",
            "direct": false,
            "version": "0.28.1",
            "ecosystem": "npm"
          },
          {
            "name": "@esbuild/freebsd-x64",
            "direct": false,
            "version": "0.28.1",
            "ecosystem": "npm"
          },
          {
            "name": "@esbuild/linux-arm",
            "direct": false,
            "version": "0.28.1",
            "ecosystem": "npm"
          },
          {
            "name": "@esbuild/linux-arm64",
            "direct": false,
            "version": "0.28.1",
            "ecosystem": "npm"
          },
          {
            "name": "@esbuild/linux-ia32",
            "direct": false,
            "version": "0.28.1",
            "ecosystem": "npm"
          },
          {
            "name": "@esbuild/linux-loong64",
            "direct": false,
            "version": "0.28.1",
            "ecosystem": "npm"
          },
          {
            "name": "@esbuild/linux-mips64el",
            "direct": false,
            "version": "0.28.1",
            "ecosystem": "npm"
          },
          {
            "name": "@esbuild/linux-ppc64",
            "direct": false,
            "version": "0.28.1",
            "ecosystem": "npm"
          },
          {
            "name": "@esbuild/linux-riscv64",
            "direct": false,
            "version": "0.28.1",
            "ecosystem": "npm"
          },
          {
            "name": "@esbuild/linux-s390x",
            "direct": false,
            "version": "0.28.1",
            "ecosystem": "npm"
          },
          {
            "name": "@esbuild/linux-x64",
            "direct": false,
            "version": "0.28.1",
            "ecosystem": "npm"
          },
          {
            "name": "@esbuild/netbsd-arm64",
            "direct": false,
            "version": "0.28.1",
            "ecosystem": "npm"
          },
          {
            "name": "@esbuild/netbsd-x64",
            "direct": false,
            "version": "0.28.1",
            "ecosystem": "npm"
          },
          {
            "name": "@esbuild/openbsd-arm64",
            "direct": false,
            "version": "0.28.1",
            "ecosystem": "npm"
          },
          {
            "name": "@esbuild/openbsd-x64",
            "direct": false,
            "version": "0.28.1",
            "ecosystem": "npm"
          },
          {
            "name": "@esbuild/openharmony-arm64",
            "direct": false,
            "version": "0.28.1",
            "ecosystem": "npm"
          },
          {
            "name": "@esbuild/sunos-x64",
            "direct": false,
            "version": "0.28.1",
            "ecosystem": "npm"
          },
          {
            "name": "@esbuild/win32-arm64",
            "direct": false,
            "version": "0.28.1",
            "ecosystem": "npm"
          },
          {
            "name": "@esbuild/win32-ia32",
            "direct": false,
            "version": "0.28.1",
            "ecosystem": "npm"
          },
          {
            "name": "@esbuild/win32-x64",
            "direct": false,
            "version": "0.28.1",
            "ecosystem": "npm"
          },
          {
            "name": "@hono/node-server",
            "direct": false,
            "version": "1.19.14",
            "ecosystem": "npm"
          },
          {
            "name": "@jridgewell/resolve-uri",
            "direct": false,
            "version": "3.1.2",
            "ecosystem": "npm"
          },
          {
            "name": "@jridgewell/sourcemap-codec",
            "direct": false,
            "version": "1.5.5",
            "ecosystem": "npm"
          },
          {
            "name": "@jridgewell/trace-mapping",
            "direct": false,
            "version": "0.3.31",
            "ecosystem": "npm"
          },
          {
            "name": "@modelcontextprotocol/sdk",
            "direct": false,
            "version": "1.29.0",
            "ecosystem": "npm"
          },
          {
            "name": "@msgpackr-extract/msgpackr-extract-darwin-arm64",
            "direct": false,
            "version": "3.0.4",
            "ecosystem": "npm"
          },
          {
            "name": "@msgpackr-extract/msgpackr-extract-darwin-x64",
            "direct": false,
            "version": "3.0.4",
            "ecosystem": "npm"
          },
          {
            "name": "@msgpackr-extract/msgpackr-extract-linux-arm",
            "direct": false,
            "version": "3.0.4",
            "ecosystem": "npm"
          },
          {
            "name": "@msgpackr-extract/msgpackr-extract-linux-arm64",
            "direct": false,
            "version": "3.0.4",
            "ecosystem": "npm"
          },
          {
            "name": "@msgpackr-extract/msgpackr-extract-linux-x64",
            "direct": false,
            "version": "3.0.4",
            "ecosystem": "npm"
          },
          {
            "name": "@msgpackr-extract/msgpackr-extract-win32-x64",
            "direct": false,
            "version": "3.0.4",
            "ecosystem": "npm"
          },
          {
            "name": "@napi-rs/keyring",
            "direct": false,
            "version": "1.3.0",
            "ecosystem": "npm"
          },
          {
            "name": "@napi-rs/keyring-darwin-arm64",
            "direct": false,
            "version": "1.3.0",
            "ecosystem": "npm"
          },
          {
            "name": "@napi-rs/keyring-darwin-x64",
            "direct": false,
            "version": "1.3.0",
            "ecosystem": "npm"
          },
          {
            "name": "@napi-rs/keyring-freebsd-x64",
            "direct": false,
            "version": "1.3.0",
            "ecosystem": "npm"
          },
          {
            "name": "@napi-rs/keyring-linux-arm-gnueabihf",
            "direct": false,
            "version": "1.3.0",
            "ecosystem": "npm"
          },
          {
            "name": "@napi-rs/keyring-linux-arm64-gnu",
            "direct": false,
            "version": "1.3.0",
            "ecosystem": "npm"
          },
          {
            "name": "@napi-rs/keyring-linux-arm64-musl",
            "direct": false,
            "version": "1.3.0",
            "ecosystem": "npm"
          },
          {
            "name": "@napi-rs/keyring-linux-riscv64-gnu",
            "direct": false,
            "version": "1.3.0",
            "ecosystem": "npm"
          },
          {
            "name": "@napi-rs/keyring-linux-x64-gnu",
            "direct": false,
            "version": "1.3.0",
            "ecosystem": "npm"
          },
          {
            "name": "@napi-rs/keyring-linux-x64-musl",
            "direct": false,
            "version": "1.3.0",
            "ecosystem": "npm"
          },
          {
            "name": "@napi-rs/keyring-win32-arm64-msvc",
            "direct": false,
            "version": "1.3.0",
            "ecosystem": "npm"
          },
          {
            "name": "@napi-rs/keyring-win32-ia32-msvc",
            "direct": false,
            "version": "1.3.0",
            "ecosystem": "npm"
          },
          {
            "name": "@napi-rs/keyring-win32-x64-msvc",
            "direct": false,
            "version": "1.3.0",
            "ecosystem": "npm"
          },
          {
            "name": "@napi-rs/wasm-runtime",
            "direct": false,
            "version": "1.1.6",
            "ecosystem": "npm"
          },
          {
            "name": "@nodable/entities",
            "direct": false,
            "version": "2.2.0",
            "ecosystem": "npm"
          },
          {
            "name": "@oxc-project/types",
            "direct": false,
            "version": "0.133.0",
            "ecosystem": "npm"
          },
          {
            "name": "@redocly/ajv",
            "direct": false,
            "version": "8.11.2",
            "ecosystem": "npm"
          },
          {
            "name": "@redocly/config",
            "direct": false,
            "version": "0.22.0",
            "ecosystem": "npm"
          },
          {
            "name": "@redocly/openapi-core",
            "direct": false,
            "version": "1.34.17",
            "ecosystem": "npm"
          },
          {
            "name": "@rolldown/binding-android-arm64",
            "direct": false,
            "version": "1.0.3",
            "ecosystem": "npm"
          },
          {
            "name": "@rolldown/binding-darwin-arm64",
            "direct": false,
            "version": "1.0.3",
            "ecosystem": "npm"
          },
          {
            "name": "@rolldown/binding-darwin-x64",
            "direct": false,
            "version": "1.0.3",
            "ecosystem": "npm"
          },
          {
            "name": "@rolldown/binding-freebsd-x64",
            "direct": false,
            "version": "1.0.3",
            "ecosystem": "npm"
          },
          {
            "name": "@rolldown/binding-linux-arm-gnueabihf",
            "direct": false,
            "version": "1.0.3",
            "ecosystem": "npm"
          },
          {
            "name": "@rolldown/binding-linux-arm64-gnu",
            "direct": false,
            "version": "1.0.3",
            "ecosystem": "npm"
          },
          {
            "name": "@rolldown/binding-linux-arm64-musl",
            "direct": false,
            "version": "1.0.3",
            "ecosystem": "npm"
          },
          {
            "name": "@rolldown/binding-linux-ppc64-gnu",
            "direct": false,
            "version": "1.0.3",
            "ecosystem": "npm"
          },
          {
            "name": "@rolldown/binding-linux-s390x-gnu",
            "direct": false,
            "version": "1.0.3",
            "ecosystem": "npm"
          },
          {
            "name": "@rolldown/binding-linux-x64-gnu",
            "direct": false,
            "version": "1.0.3",
            "ecosystem": "npm"
          },
          {
            "name": "@rolldown/binding-linux-x64-musl",
            "direct": false,
            "version": "1.0.3",
            "ecosystem": "npm"
          },
          {
            "name": "@rolldown/binding-openharmony-arm64",
            "direct": false,
            "version": "1.0.3",
            "ecosystem": "npm"
          },
          {
            "name": "@rolldown/binding-wasm32-wasi",
            "direct": false,
            "version": "1.0.3",
            "ecosystem": "npm"
          },
          {
            "name": "@rolldown/binding-win32-arm64-msvc",
            "direct": false,
            "version": "1.0.3",
            "ecosystem": "npm"
          },
          {
            "name": "@rolldown/binding-win32-x64-msvc",
            "direct": false,
            "version": "1.0.3",
            "ecosystem": "npm"
          },
          {
            "name": "@rolldown/pluginutils",
            "direct": false,
            "version": "1.0.1",
            "ecosystem": "npm"
          },
          {
            "name": "@smithy/core",
            "direct": false,
            "version": "3.24.7",
            "ecosystem": "npm"
          },
          {
            "name": "@smithy/credential-provider-imds",
            "direct": false,
            "version": "4.3.9",
            "ecosystem": "npm"
          },
          {
            "name": "@smithy/fetch-http-handler",
            "direct": false,
            "version": "5.4.7",
            "ecosystem": "npm"
          },
          {
            "name": "@smithy/is-array-buffer",
            "direct": false,
            "version": "2.2.0",
            "ecosystem": "npm"
          },
          {
            "name": "@smithy/node-http-handler",
            "direct": false,
            "version": "4.7.8",
            "ecosystem": "npm"
          },
          {
            "name": "@smithy/signature-v4",
            "direct": false,
            "version": "5.4.7",
            "ecosystem": "npm"
          },
          {
            "name": "@smithy/types",
            "direct": false,
            "version": "4.14.4",
            "ecosystem": "npm"
          },
          {
            "name": "@smithy/util-buffer-from",
            "direct": false,
            "version": "2.2.0",
            "ecosystem": "npm"
          },
          {
            "name": "@smithy/util-utf8",
            "direct": false,
            "version": "2.3.0",
            "ecosystem": "npm"
          },
          {
            "name": "@standard-schema/spec",
            "direct": false,
            "version": "1.1.0",
            "ecosystem": "npm"
          },
          {
            "name": "@tybys/wasm-util",
            "direct": false,
            "version": "0.10.3",
            "ecosystem": "npm"
          },
          {
            "name": "@types/chai",
            "direct": false,
            "version": "5.2.3",
            "ecosystem": "npm"
          },
          {
            "name": "@types/deep-eql",
            "direct": false,
            "version": "4.0.2",
            "ecosystem": "npm"
          },
          {
            "name": "@types/estree",
            "direct": false,
            "version": "1.0.9",
            "ecosystem": "npm"
          },
          {
            "name": "@types/node",
            "direct": false,
            "version": "20.19.43",
            "ecosystem": "npm"
          },
          {
            "name": "@types/react",
            "direct": false,
            "version": "~18.3.0",
            "ecosystem": "npm"
          },
          {
            "name": "@vitest/coverage-v8",
            "direct": false,
            "version": "4.1.8",
            "ecosystem": "npm"
          },
          {
            "name": "@vitest/expect",
            "direct": false,
            "version": "4.1.8",
            "ecosystem": "npm"
          },
          {
            "name": "@vitest/mocker",
            "direct": false,
            "version": "4.1.8",
            "ecosystem": "npm"
          },
          {
            "name": "@vitest/pretty-format",
            "direct": false,
            "version": "4.1.8",
            "ecosystem": "npm"
          },
          {
            "name": "@vitest/runner",
            "direct": false,
            "version": "4.1.8",
            "ecosystem": "npm"
          },
          {
            "name": "@vitest/snapshot",
            "direct": false,
            "version": "4.1.8",
            "ecosystem": "npm"
          },
          {
            "name": "@vitest/spy",
            "direct": false,
            "version": "4.1.8",
            "ecosystem": "npm"
          },
          {
            "name": "@vitest/utils",
            "direct": false,
            "version": "4.1.8",
            "ecosystem": "npm"
          },
          {
            "name": "accepts",
            "direct": false,
            "version": "2.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "agent-base",
            "direct": false,
            "version": "7.1.4",
            "ecosystem": "npm"
          },
          {
            "name": "ajv",
            "direct": false,
            "version": "8.20.0",
            "ecosystem": "npm"
          },
          {
            "name": "ajv-formats",
            "direct": false,
            "version": "3.0.1",
            "ecosystem": "npm"
          },
          {
            "name": "ansi-colors",
            "direct": false,
            "version": "4.1.3",
            "ecosystem": "npm"
          },
          {
            "name": "ansi-escapes",
            "direct": false,
            "version": "7.3.0",
            "ecosystem": "npm"
          },
          {
            "name": "ansi-regex",
            "direct": false,
            "version": "6.2.2",
            "ecosystem": "npm"
          },
          {
            "name": "ansi-styles",
            "direct": false,
            "version": "6.2.3",
            "ecosystem": "npm"
          },
          {
            "name": "anynum",
            "direct": false,
            "version": "1.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "argparse",
            "direct": false,
            "version": "2.0.1",
            "ecosystem": "npm"
          },
          {
            "name": "assertion-error",
            "direct": false,
            "version": "2.0.1",
            "ecosystem": "npm"
          },
          {
            "name": "ast-v8-to-istanbul",
            "direct": false,
            "version": "1.0.4",
            "ecosystem": "npm"
          },
          {
            "name": "balanced-match",
            "direct": false,
            "version": "1.0.2",
            "ecosystem": "npm"
          },
          {
            "name": "body-parser",
            "direct": false,
            "version": "2.3.0",
            "ecosystem": "npm"
          },
          {
            "name": "bowser",
            "direct": false,
            "version": "2.14.1",
            "ecosystem": "npm"
          },
          {
            "name": "brace-expansion",
            "direct": false,
            "version": "2.1.1",
            "ecosystem": "npm"
          },
          {
            "name": "braces",
            "direct": false,
            "version": "3.0.3",
            "ecosystem": "npm"
          },
          {
            "name": "bytes",
            "direct": false,
            "version": "3.1.2",
            "ecosystem": "npm"
          },
          {
            "name": "call-bind-apply-helpers",
            "direct": false,
            "version": "1.0.2",
            "ecosystem": "npm"
          },
          {
            "name": "call-bound",
            "direct": false,
            "version": "1.0.4",
            "ecosystem": "npm"
          },
          {
            "name": "chai",
            "direct": false,
            "version": "6.2.2",
            "ecosystem": "npm"
          },
          {
            "name": "change-case",
            "direct": false,
            "version": "5.4.4",
            "ecosystem": "npm"
          },
          {
            "name": "cli-cursor",
            "direct": false,
            "version": "5.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "cli-truncate",
            "direct": false,
            "version": "4.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "colorette",
            "direct": false,
            "version": "1.4.0",
            "ecosystem": "npm"
          },
          {
            "name": "colorette",
            "direct": false,
            "version": "2.0.20",
            "ecosystem": "npm"
          },
          {
            "name": "content-disposition",
            "direct": false,
            "version": "1.1.0",
            "ecosystem": "npm"
          },
          {
            "name": "content-type",
            "direct": false,
            "version": "1.0.5",
            "ecosystem": "npm"
          },
          {
            "name": "content-type",
            "direct": false,
            "version": "2.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "convert-source-map",
            "direct": false,
            "version": "2.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "cookie",
            "direct": false,
            "version": "0.7.2",
            "ecosystem": "npm"
          },
          {
            "name": "cookie-signature",
            "direct": false,
            "version": "1.2.2",
            "ecosystem": "npm"
          },
          {
            "name": "cors",
            "direct": false,
            "version": "2.8.6",
            "ecosystem": "npm"
          },
          {
            "name": "cross-spawn",
            "direct": false,
            "version": "7.0.6",
            "ecosystem": "npm"
          },
          {
            "name": "debug",
            "direct": false,
            "version": "4.4.3",
            "ecosystem": "npm"
          },
          {
            "name": "depd",
            "direct": false,
            "version": "2.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "detect-libc",
            "direct": false,
            "version": "2.1.2",
            "ecosystem": "npm"
          },
          {
            "name": "dunder-proto",
            "direct": false,
            "version": "1.0.1",
            "ecosystem": "npm"
          },
          {
            "name": "ee-first",
            "direct": false,
            "version": "1.1.1",
            "ecosystem": "npm"
          },
          {
            "name": "emoji-regex",
            "direct": false,
            "version": "10.6.0",
            "ecosystem": "npm"
          },
          {
            "name": "encodeurl",
            "direct": false,
            "version": "2.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "environment",
            "direct": false,
            "version": "1.1.0",
            "ecosystem": "npm"
          },
          {
            "name": "es-define-property",
            "direct": false,
            "version": "1.0.1",
            "ecosystem": "npm"
          },
          {
            "name": "es-errors",
            "direct": false,
            "version": "1.3.0",
            "ecosystem": "npm"
          },
          {
            "name": "es-module-lexer",
            "direct": false,
            "version": "2.1.0",
            "ecosystem": "npm"
          },
          {
            "name": "es-object-atoms",
            "direct": false,
            "version": "1.1.2",
            "ecosystem": "npm"
          },
          {
            "name": "esbuild",
            "direct": false,
            "version": "0.28.1",
            "ecosystem": "npm"
          },
          {
            "name": "escape-html",
            "direct": false,
            "version": "1.0.3",
            "ecosystem": "npm"
          },
          {
            "name": "estree-walker",
            "direct": false,
            "version": "3.0.3",
            "ecosystem": "npm"
          },
          {
            "name": "etag",
            "direct": false,
            "version": "1.8.1",
            "ecosystem": "npm"
          },
          {
            "name": "eventemitter3",
            "direct": false,
            "version": "5.0.4",
            "ecosystem": "npm"
          },
          {
            "name": "eventsource",
            "direct": false,
            "version": "3.0.7",
            "ecosystem": "npm"
          },
          {
            "name": "eventsource-parser",
            "direct": false,
            "version": "3.1.0",
            "ecosystem": "npm"
          },
          {
            "name": "execa",
            "direct": false,
            "version": "8.0.1",
            "ecosystem": "npm"
          },
          {
            "name": "expect-type",
            "direct": false,
            "version": "1.3.0",
            "ecosystem": "npm"
          },
          {
            "name": "expo",
            "direct": false,
            "version": "~52.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "expo-status-bar",
            "direct": false,
            "version": "~2.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "express",
            "direct": false,
            "version": "5.2.1",
            "ecosystem": "npm"
          },
          {
            "name": "express-rate-limit",
            "direct": false,
            "version": "8.5.2",
            "ecosystem": "npm"
          },
          {
            "name": "fast-check",
            "direct": false,
            "version": "3.23.2",
            "ecosystem": "npm"
          },
          {
            "name": "fast-deep-equal",
            "direct": false,
            "version": "3.1.3",
            "ecosystem": "npm"
          },
          {
            "name": "fast-string-truncated-width",
            "direct": false,
            "version": "3.0.3",
            "ecosystem": "npm"
          },
          {
            "name": "fast-string-width",
            "direct": false,
            "version": "3.0.2",
            "ecosystem": "npm"
          },
          {
            "name": "fast-uri",
            "direct": false,
            "version": "3.1.2",
            "ecosystem": "npm"
          },
          {
            "name": "fast-wrap-ansi",
            "direct": false,
            "version": "0.2.2",
            "ecosystem": "npm"
          },
          {
            "name": "fast-xml-builder",
            "direct": false,
            "version": "1.2.0",
            "ecosystem": "npm"
          },
          {
            "name": "fast-xml-parser",
            "direct": false,
            "version": "5.7.3",
            "ecosystem": "npm"
          },
          {
            "name": "fdir",
            "direct": false,
            "version": "6.5.0",
            "ecosystem": "npm"
          },
          {
            "name": "fill-range",
            "direct": false,
            "version": "7.1.1",
            "ecosystem": "npm"
          },
          {
            "name": "finalhandler",
            "direct": false,
            "version": "2.1.1",
            "ecosystem": "npm"
          },
          {
            "name": "find-my-way-ts",
            "direct": false,
            "version": "0.1.6",
            "ecosystem": "npm"
          },
          {
            "name": "forwarded",
            "direct": false,
            "version": "0.2.0",
            "ecosystem": "npm"
          },
          {
            "name": "fresh",
            "direct": false,
            "version": "2.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "fsevents",
            "direct": false,
            "version": "2.3.3",
            "ecosystem": "npm"
          },
          {
            "name": "function-bind",
            "direct": false,
            "version": "1.1.2",
            "ecosystem": "npm"
          },
          {
            "name": "get-east-asian-width",
            "direct": false,
            "version": "1.6.0",
            "ecosystem": "npm"
          },
          {
            "name": "get-intrinsic",
            "direct": false,
            "version": "1.3.0",
            "ecosystem": "npm"
          },
          {
            "name": "get-proto",
            "direct": false,
            "version": "1.0.1",
            "ecosystem": "npm"
          },
          {
            "name": "get-stream",
            "direct": false,
            "version": "8.0.1",
            "ecosystem": "npm"
          },
          {
            "name": "gopd",
            "direct": false,
            "version": "1.2.0",
            "ecosystem": "npm"
          },
          {
            "name": "has-flag",
            "direct": false,
            "version": "4.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "has-symbols",
            "direct": false,
            "version": "1.1.0",
            "ecosystem": "npm"
          },
          {
            "name": "hasown",
            "direct": false,
            "version": "2.0.4",
            "ecosystem": "npm"
          },
          {
            "name": "hono",
            "direct": false,
            "version": "4.12.25",
            "ecosystem": "npm"
          },
          {
            "name": "html-escaper",
            "direct": false,
            "version": "2.0.2",
            "ecosystem": "npm"
          },
          {
            "name": "http-errors",
            "direct": false,
            "version": "2.0.1",
            "ecosystem": "npm"
          },
          {
            "name": "https-proxy-agent",
            "direct": false,
            "version": "7.0.6",
            "ecosystem": "npm"
          },
          {
            "name": "human-signals",
            "direct": false,
            "version": "5.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "husky",
            "direct": false,
            "version": "9.1.7",
            "ecosystem": "npm"
          },
          {
            "name": "iconv-lite",
            "direct": false,
            "version": "0.7.2",
            "ecosystem": "npm"
          },
          {
            "name": "index-to-position",
            "direct": false,
            "version": "1.2.0",
            "ecosystem": "npm"
          },
          {
            "name": "inherits",
            "direct": false,
            "version": "2.0.4",
            "ecosystem": "npm"
          },
          {
            "name": "ip-address",
            "direct": false,
            "version": "10.2.0",
            "ecosystem": "npm"
          },
          {
            "name": "ipaddr.js",
            "direct": false,
            "version": "1.9.1",
            "ecosystem": "npm"
          },
          {
            "name": "is-fullwidth-code-point",
            "direct": false,
            "version": "4.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "is-fullwidth-code-point",
            "direct": false,
            "version": "5.1.0",
            "ecosystem": "npm"
          },
          {
            "name": "is-number",
            "direct": false,
            "version": "7.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "is-promise",
            "direct": false,
            "version": "4.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "is-stream",
            "direct": false,
            "version": "3.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "isexe",
            "direct": false,
            "version": "2.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "istanbul-lib-coverage",
            "direct": false,
            "version": "3.2.2",
            "ecosystem": "npm"
          },
          {
            "name": "istanbul-lib-report",
            "direct": false,
            "version": "3.0.1",
            "ecosystem": "npm"
          },
          {
            "name": "istanbul-reports",
            "direct": false,
            "version": "3.2.0",
            "ecosystem": "npm"
          },
          {
            "name": "js-levenshtein",
            "direct": false,
            "version": "1.1.6",
            "ecosystem": "npm"
          },
          {
            "name": "js-tokens",
            "direct": false,
            "version": "10.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "js-tokens",
            "direct": false,
            "version": "4.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "js-yaml",
            "direct": false,
            "version": "4.2.0",
            "ecosystem": "npm"
          },
          {
            "name": "json-schema-traverse",
            "direct": false,
            "version": "1.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "json-schema-typed",
            "direct": false,
            "version": "8.0.2",
            "ecosystem": "npm"
          },
          {
            "name": "lightningcss",
            "direct": false,
            "version": "1.32.0",
            "ecosystem": "npm"
          },
          {
            "name": "lightningcss-android-arm64",
            "direct": false,
            "version": "1.32.0",
            "ecosystem": "npm"
          },
          {
            "name": "lightningcss-darwin-arm64",
            "direct": false,
            "version": "1.32.0",
            "ecosystem": "npm"
          },
          {
            "name": "lightningcss-darwin-x64",
            "direct": false,
            "version": "1.32.0",
            "ecosystem": "npm"
          },
          {
            "name": "lightningcss-freebsd-x64",
            "direct": false,
            "version": "1.32.0",
            "ecosystem": "npm"
          },
          {
            "name": "lightningcss-linux-arm-gnueabihf",
            "direct": false,
            "version": "1.32.0",
            "ecosystem": "npm"
          },
          {
            "name": "lightningcss-linux-arm64-gnu",
            "direct": false,
            "version": "1.32.0",
            "ecosystem": "npm"
          },
          {
            "name": "lightningcss-linux-arm64-musl",
            "direct": false,
            "version": "1.32.0",
            "ecosystem": "npm"
          },
          {
            "name": "lightningcss-linux-x64-gnu",
            "direct": false,
            "version": "1.32.0",
            "ecosystem": "npm"
          },
          {
            "name": "lightningcss-linux-x64-musl",
            "direct": false,
            "version": "1.32.0",
            "ecosystem": "npm"
          },
          {
            "name": "lightningcss-win32-arm64-msvc",
            "direct": false,
            "version": "1.32.0",
            "ecosystem": "npm"
          },
          {
            "name": "lightningcss-win32-x64-msvc",
            "direct": false,
            "version": "1.32.0",
            "ecosystem": "npm"
          },
          {
            "name": "lilconfig",
            "direct": false,
            "version": "3.1.3",
            "ecosystem": "npm"
          },
          {
            "name": "lint-staged",
            "direct": false,
            "version": "15.5.2",
            "ecosystem": "npm"
          },
          {
            "name": "listr2",
            "direct": false,
            "version": "8.3.3",
            "ecosystem": "npm"
          },
          {
            "name": "log-update",
            "direct": false,
            "version": "6.1.0",
            "ecosystem": "npm"
          },
          {
            "name": "magic-string",
            "direct": false,
            "version": "0.30.21",
            "ecosystem": "npm"
          },
          {
            "name": "magicast",
            "direct": false,
            "version": "0.5.3",
            "ecosystem": "npm"
          },
          {
            "name": "make-dir",
            "direct": false,
            "version": "4.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "math-intrinsics",
            "direct": false,
            "version": "1.1.0",
            "ecosystem": "npm"
          },
          {
            "name": "media-typer",
            "direct": false,
            "version": "1.1.0",
            "ecosystem": "npm"
          },
          {
            "name": "merge-descriptors",
            "direct": false,
            "version": "2.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "merge-stream",
            "direct": false,
            "version": "2.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "micromatch",
            "direct": false,
            "version": "4.0.8",
            "ecosystem": "npm"
          },
          {
            "name": "mime-db",
            "direct": false,
            "version": "1.54.0",
            "ecosystem": "npm"
          },
          {
            "name": "mime-types",
            "direct": false,
            "version": "3.0.2",
            "ecosystem": "npm"
          },
          {
            "name": "mimic-fn",
            "direct": false,
            "version": "4.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "mimic-function",
            "direct": false,
            "version": "5.0.1",
            "ecosystem": "npm"
          },
          {
            "name": "minimatch",
            "direct": false,
            "version": "5.1.9",
            "ecosystem": "npm"
          },
          {
            "name": "ms",
            "direct": false,
            "version": "2.1.3",
            "ecosystem": "npm"
          },
          {
            "name": "msgpackr",
            "direct": false,
            "version": "1.12.1",
            "ecosystem": "npm"
          },
          {
            "name": "msgpackr-extract",
            "direct": false,
            "version": "3.0.4",
            "ecosystem": "npm"
          },
          {
            "name": "multipasta",
            "direct": false,
            "version": "0.2.7",
            "ecosystem": "npm"
          },
          {
            "name": "nanoid",
            "direct": false,
            "version": "3.3.15",
            "ecosystem": "npm"
          },
          {
            "name": "negotiator",
            "direct": false,
            "version": "1.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "node-gyp-build-optional-packages",
            "direct": false,
            "version": "5.2.2",
            "ecosystem": "npm"
          },
          {
            "name": "npm-run-path",
            "direct": false,
            "version": "5.3.0",
            "ecosystem": "npm"
          },
          {
            "name": "object-assign",
            "direct": false,
            "version": "4.1.1",
            "ecosystem": "npm"
          },
          {
            "name": "object-inspect",
            "direct": false,
            "version": "1.13.4",
            "ecosystem": "npm"
          },
          {
            "name": "obug",
            "direct": false,
            "version": "2.1.3",
            "ecosystem": "npm"
          },
          {
            "name": "on-finished",
            "direct": false,
            "version": "2.4.1",
            "ecosystem": "npm"
          },
          {
            "name": "once",
            "direct": false,
            "version": "1.4.0",
            "ecosystem": "npm"
          },
          {
            "name": "onetime",
            "direct": false,
            "version": "6.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "onetime",
            "direct": false,
            "version": "7.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "openapi-typescript",
            "direct": false,
            "version": "7.13.0",
            "ecosystem": "npm"
          },
          {
            "name": "parse-json",
            "direct": false,
            "version": "8.3.0",
            "ecosystem": "npm"
          },
          {
            "name": "parseurl",
            "direct": false,
            "version": "1.3.3",
            "ecosystem": "npm"
          },
          {
            "name": "path-expression-matcher",
            "direct": false,
            "version": "1.5.0",
            "ecosystem": "npm"
          },
          {
            "name": "path-key",
            "direct": false,
            "version": "3.1.1",
            "ecosystem": "npm"
          },
          {
            "name": "path-key",
            "direct": false,
            "version": "4.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "path-to-regexp",
            "direct": false,
            "version": "8.4.2",
            "ecosystem": "npm"
          },
          {
            "name": "pathe",
            "direct": false,
            "version": "2.0.3",
            "ecosystem": "npm"
          },
          {
            "name": "picocolors",
            "direct": false,
            "version": "1.1.1",
            "ecosystem": "npm"
          },
          {
            "name": "picomatch",
            "direct": false,
            "version": "2.3.2",
            "ecosystem": "npm"
          },
          {
            "name": "picomatch",
            "direct": false,
            "version": "4.0.4",
            "ecosystem": "npm"
          },
          {
            "name": "picomatch",
            "direct": false,
            "version": "4.0.5",
            "ecosystem": "npm"
          },
          {
            "name": "pidtree",
            "direct": false,
            "version": "0.6.1",
            "ecosystem": "npm"
          },
          {
            "name": "pkce-challenge",
            "direct": false,
            "version": "5.0.1",
            "ecosystem": "npm"
          },
          {
            "name": "pluralize",
            "direct": false,
            "version": "8.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "postcss",
            "direct": false,
            "version": "8.5.16",
            "ecosystem": "npm"
          },
          {
            "name": "proxy-addr",
            "direct": false,
            "version": "2.0.7",
            "ecosystem": "npm"
          },
          {
            "name": "pure-rand",
            "direct": false,
            "version": "6.1.0",
            "ecosystem": "npm"
          },
          {
            "name": "qs",
            "direct": false,
            "version": "6.15.2",
            "ecosystem": "npm"
          },
          {
            "name": "range-parser",
            "direct": false,
            "version": "1.2.1",
            "ecosystem": "npm"
          },
          {
            "name": "raw-body",
            "direct": false,
            "version": "3.0.2",
            "ecosystem": "npm"
          },
          {
            "name": "react",
            "direct": false,
            "version": "18.3.1",
            "ecosystem": "npm"
          },
          {
            "name": "react-native",
            "direct": false,
            "version": "0.76.5",
            "ecosystem": "npm"
          },
          {
            "name": "require-from-string",
            "direct": false,
            "version": "2.0.2",
            "ecosystem": "npm"
          },
          {
            "name": "restore-cursor",
            "direct": false,
            "version": "5.1.0",
            "ecosystem": "npm"
          },
          {
            "name": "rfdc",
            "direct": false,
            "version": "1.4.1",
            "ecosystem": "npm"
          },
          {
            "name": "rolldown",
            "direct": false,
            "version": "1.0.3",
            "ecosystem": "npm"
          },
          {
            "name": "router",
            "direct": false,
            "version": "2.2.0",
            "ecosystem": "npm"
          },
          {
            "name": "safer-buffer",
            "direct": false,
            "version": "2.1.2",
            "ecosystem": "npm"
          },
          {
            "name": "semver",
            "direct": false,
            "version": "7.8.4",
            "ecosystem": "npm"
          },
          {
            "name": "send",
            "direct": false,
            "version": "1.2.1",
            "ecosystem": "npm"
          },
          {
            "name": "serve-static",
            "direct": false,
            "version": "2.2.1",
            "ecosystem": "npm"
          },
          {
            "name": "setprototypeof",
            "direct": false,
            "version": "1.2.0",
            "ecosystem": "npm"
          },
          {
            "name": "shebang-command",
            "direct": false,
            "version": "2.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "shebang-regex",
            "direct": false,
            "version": "3.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "side-channel",
            "direct": false,
            "version": "1.1.1",
            "ecosystem": "npm"
          },
          {
            "name": "side-channel-list",
            "direct": false,
            "version": "1.0.1",
            "ecosystem": "npm"
          },
          {
            "name": "side-channel-map",
            "direct": false,
            "version": "1.0.1",
            "ecosystem": "npm"
          },
          {
            "name": "side-channel-weakmap",
            "direct": false,
            "version": "1.0.2",
            "ecosystem": "npm"
          },
          {
            "name": "siginfo",
            "direct": false,
            "version": "2.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "signal-exit",
            "direct": false,
            "version": "4.1.0",
            "ecosystem": "npm"
          },
          {
            "name": "sisteransi",
            "direct": false,
            "version": "1.0.5",
            "ecosystem": "npm"
          },
          {
            "name": "slice-ansi",
            "direct": false,
            "version": "5.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "slice-ansi",
            "direct": false,
            "version": "7.1.2",
            "ecosystem": "npm"
          },
          {
            "name": "source-map-js",
            "direct": false,
            "version": "1.2.1",
            "ecosystem": "npm"
          },
          {
            "name": "stackback",
            "direct": false,
            "version": "0.0.2",
            "ecosystem": "npm"
          },
          {
            "name": "statuses",
            "direct": false,
            "version": "2.0.2",
            "ecosystem": "npm"
          },
          {
            "name": "std-env",
            "direct": false,
            "version": "4.1.0",
            "ecosystem": "npm"
          },
          {
            "name": "string-argv",
            "direct": false,
            "version": "0.3.2",
            "ecosystem": "npm"
          },
          {
            "name": "string-width",
            "direct": false,
            "version": "7.2.0",
            "ecosystem": "npm"
          },
          {
            "name": "strip-ansi",
            "direct": false,
            "version": "7.2.0",
            "ecosystem": "npm"
          },
          {
            "name": "strip-final-newline",
            "direct": false,
            "version": "3.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "strnum",
            "direct": false,
            "version": "2.4.0",
            "ecosystem": "npm"
          },
          {
            "name": "supports-color",
            "direct": false,
            "version": "10.2.2",
            "ecosystem": "npm"
          },
          {
            "name": "supports-color",
            "direct": false,
            "version": "7.2.0",
            "ecosystem": "npm"
          },
          {
            "name": "tinybench",
            "direct": false,
            "version": "2.9.0",
            "ecosystem": "npm"
          },
          {
            "name": "tinyexec",
            "direct": false,
            "version": "1.2.4",
            "ecosystem": "npm"
          },
          {
            "name": "tinyglobby",
            "direct": false,
            "version": "0.2.17",
            "ecosystem": "npm"
          },
          {
            "name": "tinyrainbow",
            "direct": false,
            "version": "3.1.0",
            "ecosystem": "npm"
          },
          {
            "name": "to-regex-range",
            "direct": false,
            "version": "5.0.1",
            "ecosystem": "npm"
          },
          {
            "name": "toidentifier",
            "direct": false,
            "version": "1.0.1",
            "ecosystem": "npm"
          },
          {
            "name": "tslib",
            "direct": false,
            "version": "2.8.1",
            "ecosystem": "npm"
          },
          {
            "name": "tsx",
            "direct": false,
            "version": "4.22.4",
            "ecosystem": "npm"
          },
          {
            "name": "type-fest",
            "direct": false,
            "version": "4.41.0",
            "ecosystem": "npm"
          },
          {
            "name": "type-is",
            "direct": false,
            "version": "2.1.0",
            "ecosystem": "npm"
          },
          {
            "name": "typescript",
            "direct": false,
            "version": "5.9.3",
            "ecosystem": "npm"
          },
          {
            "name": "typescript",
            "direct": false,
            "version": "~5.3.3",
            "ecosystem": "npm"
          },
          {
            "name": "undici-types",
            "direct": false,
            "version": "6.21.0",
            "ecosystem": "npm"
          },
          {
            "name": "unpipe",
            "direct": false,
            "version": "1.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "uri-js-replace",
            "direct": false,
            "version": "1.0.1",
            "ecosystem": "npm"
          },
          {
            "name": "vary",
            "direct": false,
            "version": "1.1.2",
            "ecosystem": "npm"
          },
          {
            "name": "vite",
            "direct": false,
            "version": "8.0.16",
            "ecosystem": "npm"
          },
          {
            "name": "vitest",
            "direct": false,
            "version": "4.1.8",
            "ecosystem": "npm"
          },
          {
            "name": "which",
            "direct": false,
            "version": "2.0.2",
            "ecosystem": "npm"
          },
          {
            "name": "why-is-node-running",
            "direct": false,
            "version": "2.3.0",
            "ecosystem": "npm"
          },
          {
            "name": "wrap-ansi",
            "direct": false,
            "version": "9.0.2",
            "ecosystem": "npm"
          },
          {
            "name": "wrappy",
            "direct": false,
            "version": "1.0.2",
            "ecosystem": "npm"
          },
          {
            "name": "xml-naming",
            "direct": false,
            "version": "0.1.0",
            "ecosystem": "npm"
          },
          {
            "name": "yaml",
            "direct": false,
            "version": "2.9.0",
            "ecosystem": "npm"
          },
          {
            "name": "yaml-ast-parser",
            "direct": false,
            "version": "0.0.43",
            "ecosystem": "npm"
          },
          {
            "name": "yargs-parser",
            "direct": false,
            "version": "21.1.1",
            "ecosystem": "npm"
          },
          {
            "name": "zod",
            "direct": false,
            "version": "4.4.3",
            "ecosystem": "npm"
          },
          {
            "name": "zod-to-json-schema",
            "direct": false,
            "version": "3.25.2",
            "ecosystem": "npm"
          }
        ],
        "collected": true,
        "truncated": false,
        "total_count": 393,
        "direct_count": 9,
        "indirect_count": 384
      }
    },
    "maintainership": {
      "issues": {
        "open_prs": 0,
        "merged_prs": 167,
        "open_issues": 1,
        "closed_ratio": 0.992,
        "closed_issues": 132,
        "closed_unmerged_prs": 3
      },
      "bus_factor": 1,
      "bot_contributors": 0,
      "top_contributors": [
        {
          "type": "User",
          "login": "YosefHayim",
          "commits": 311,
          "avatar_url": "https://avatars.githubusercontent.com/u/179159376?v=4"
        }
      ],
      "contributors_sampled": 1,
      "top_contributor_share": 1
    },
    "quality_signals": {
      "has_ci": true,
      "has_tests": true,
      "ci_workflows": [
        "biome.yml",
        "build.yml",
        "ci.yml",
        "docs.yml",
        "e2e.yml",
        "lint.yml",
        "publish.yml",
        "report-failure.yml",
        "schema-drift.yml",
        "test.yml",
        "typecheck.yml"
      ],
      "has_docs_dir": true,
      "linter_configs": [
        "biome.json"
      ],
      "has_editorconfig": false,
      "has_linter_config": true,
      "has_precommit_config": false
    },
    "security_signals": {
      "lockfiles": [
        "pnpm-lock.yaml"
      ],
      "scorecard": {
        "checks": [
          {
            "name": "Binary-Artifacts",
            "score": 10,
            "reason": "no binaries found in the repo",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#binary-artifacts"
          },
          {
            "name": "Branch-Protection",
            "score": null,
            "reason": "internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#branch-protection"
          },
          {
            "name": "CI-Tests",
            "score": null,
            "reason": "no pull request found",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#ci-tests"
          },
          {
            "name": "CII-Best-Practices",
            "score": 0,
            "reason": "no effort to earn an OpenSSF best practices badge detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#cii-best-practices"
          },
          {
            "name": "Code-Review",
            "score": 0,
            "reason": "Found 0/30 approved changesets -- score normalized to 0",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#code-review"
          },
          {
            "name": "Contributors",
            "score": 0,
            "reason": "project has 0 contributing companies or organizations -- score normalized to 0",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#contributors"
          },
          {
            "name": "Dangerous-Workflow",
            "score": 10,
            "reason": "no dangerous workflow patterns detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dangerous-workflow"
          },
          {
            "name": "Dependency-Update-Tool",
            "score": 0,
            "reason": "no update tool detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dependency-update-tool"
          },
          {
            "name": "Fuzzing",
            "score": 0,
            "reason": "project is not fuzzed",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#fuzzing"
          },
          {
            "name": "License",
            "score": 10,
            "reason": "license file detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#license"
          },
          {
            "name": "Maintained",
            "score": 0,
            "reason": "project was created within the last 90 days. Please review its contents carefully",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#maintained"
          },
          {
            "name": "Packaging",
            "score": 10,
            "reason": "packaging workflow detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#packaging"
          },
          {
            "name": "Pinned-Dependencies",
            "score": 0,
            "reason": "dependency not pinned by hash detected -- score normalized to 0",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#pinned-dependencies"
          },
          {
            "name": "SAST",
            "score": 0,
            "reason": "no SAST tool detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#sast"
          },
          {
            "name": "Security-Policy",
            "score": 0,
            "reason": "security policy file not detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#security-policy"
          },
          {
            "name": "Signed-Releases",
            "score": null,
            "reason": "no releases found",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#signed-releases"
          },
          {
            "name": "Token-Permissions",
            "score": 10,
            "reason": "GitHub workflow tokens follow principle of least privilege",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#token-permissions"
          },
          {
            "name": "Vulnerabilities",
            "score": 0,
            "reason": "10 existing vulnerabilities detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#vulnerabilities"
          }
        ],
        "commit": "a232009914c129d10ffc2e67387fc989cddf03ed",
        "ran_at": "2026-07-25T09:56:25Z",
        "aggregate_score": 3.7,
        "scorecard_version": "v5.5.0"
      },
      "has_codeql_workflow": false,
      "has_security_policy": false,
      "has_dependabot_config": false
    },
    "contribution_flow": {
      "collected": true,
      "ci_last_run_at": "2026-07-24T08:14:23Z",
      "oldest_open_prs": [],
      "last_merged_pr_at": "2026-07-02T17:43:38Z",
      "ci_last_conclusion": "SUCCESS",
      "oldest_open_issues": [
        {
          "number": 303,
          "created_at": "2026-07-23T07:47:16Z",
          "last_comment_at": "2026-07-23T08:15:28Z",
          "last_comment_author": "YosefHayim"
        }
      ]
    }
  },
  "config": {
    "disabled_metrics": [],
    "disabled_categories": [],
    "disabled_components": {}
  },
  "source": {
    "url": "https://github.com/YosefHayim/launch-store",
    "host": "github.com",
    "name": "launch-store",
    "owner": "YosefHayim"
  },
  "metrics": {
    "overall": {
      "key": "overall",
      "band": "moderate",
      "name": "Overall health",
      "note": null,
      "notes": [],
      "value": 62,
      "inputs": {
        "security": 47,
        "vitality": 75,
        "community": 41,
        "governance": 54,
        "engineering": 88
      },
      "components": []
    },
    "categories": [
      {
        "key": "vitality",
        "band": "good",
        "name": "Vitality",
        "value": 75,
        "weight": 0.22,
        "metrics": [
          {
            "key": "development_activity",
            "band": "moderate",
            "name": "Development activity",
            "note": null,
            "notes": [],
            "value": 58,
            "inputs": {
              "commits_last_year": 311,
              "human_commit_share": 1,
              "days_since_last_push": 5,
              "active_weeks_last_year": 6
            },
            "components": [
              {
                "key": "push_recency",
                "name": "Push recency",
                "detail": "last push 5 days ago",
                "points": 36,
                "status": "met",
                "details": [
                  {
                    "code": "push_recency",
                    "params": {
                      "days": 5
                    }
                  }
                ],
                "max_points": 36
              },
              {
                "key": "commit_cadence",
                "name": "Commit cadence",
                "detail": "6/52 weeks with commits",
                "points": 4.2,
                "status": "partial",
                "details": [
                  {
                    "code": "commit_cadence_weeks",
                    "params": {
                      "weeks": 6
                    }
                  }
                ],
                "max_points": 36
              },
              {
                "key": "commit_volume",
                "name": "Commit volume",
                "detail": "311 commits in the last year",
                "points": 18,
                "status": "met",
                "details": [
                  {
                    "code": "commits_last_year",
                    "params": {
                      "count": 311
                    }
                  }
                ],
                "max_points": 18
              },
              {
                "key": "openssf_scorecard_maintained",
                "name": "OpenSSF Scorecard: Maintained",
                "detail": "project was created within the last 90 days. Please review its contents carefully",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "release_discipline",
            "band": "excellent",
            "name": "Release discipline",
            "note": "Excluded from scoring (no data or not applicable): OpenSSF Scorecard: Signed-Releases. Remaining weights renormalized.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "openssf_scorecard_signed_releases"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              }
            ],
            "value": 100,
            "inputs": {
              "releases_count": 37,
              "latest_release_tag": "v0.32.8",
              "releases_from_tags": false,
              "days_since_latest_release": 5,
              "mean_days_between_releases": 2.4
            },
            "components": [
              {
                "key": "ships_releases",
                "name": "Ships releases",
                "detail": "37 releases published",
                "points": 27,
                "status": "met",
                "details": [
                  {
                    "code": "releases_published",
                    "params": {
                      "count": 37
                    }
                  }
                ],
                "max_points": 27
              },
              {
                "key": "release_recency",
                "name": "Release recency",
                "detail": "latest release 5 days ago",
                "points": 36,
                "status": "met",
                "details": [
                  {
                    "code": "release_recency",
                    "params": {
                      "days": 5
                    }
                  }
                ],
                "max_points": 36
              },
              {
                "key": "release_cadence",
                "name": "Release cadence",
                "detail": "a release every ~2.4 days",
                "points": 27,
                "status": "met",
                "details": [
                  {
                    "code": "release_cadence",
                    "params": {
                      "gap": 2.4
                    }
                  }
                ],
                "max_points": 27
              },
              {
                "key": "openssf_scorecard_signed_releases",
                "name": "OpenSSF Scorecard: Signed-Releases",
                "detail": "no releases found",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_data",
                    "params": {}
                  }
                ],
                "max_points": 10
              }
            ]
          },
          {
            "key": "abandonment",
            "band": "excellent",
            "name": "Abandonment",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "cap": null,
              "state": "unverified",
              "guards": [],
              "signals": [],
              "red_flag": false,
              "multiplier_pct": 100,
              "declared_reason": null,
              "unverified_reason": "repository_too_young",
              "unanswered_open_prs": null,
              "unanswered_open_issues": null,
              "days_since_last_merged_pr": null,
              "days_since_last_human_commit": null,
              "days_since_last_human_commit_is_floor": false
            },
            "components": [
              {
                "key": "project_is_still_maintained",
                "name": "Project is still maintained",
                "detail": "maintenance record not established from the collected data",
                "points": 100,
                "status": "met",
                "details": [
                  {
                    "code": "abandonment_unverified",
                    "params": {}
                  }
                ],
                "max_points": 100
              }
            ]
          }
        ],
        "description": "Is the project alive — is code being written and are releases shipping?"
      },
      {
        "key": "community",
        "band": "at_risk",
        "name": "Community & Adoption",
        "value": 41,
        "weight": 0.18,
        "metrics": [
          {
            "key": "popularity",
            "band": "critical",
            "name": "Popularity & adoption",
            "note": null,
            "notes": [],
            "value": 5,
            "inputs": {
              "forks": 1,
              "stars": 3,
              "watchers": 0,
              "growth_state": "unverified",
              "growth_factor_pct": 100,
              "growth_unverified_reason": "no_history"
            },
            "components": [
              {
                "key": "stars",
                "name": "Stars",
                "detail": "3 stars",
                "points": 4.9,
                "status": "partial",
                "details": [
                  {
                    "code": "stars",
                    "params": {
                      "count": 3
                    }
                  }
                ],
                "max_points": 60
              },
              {
                "key": "forks",
                "name": "Forks",
                "detail": "1 forks",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "forks",
                    "params": {
                      "count": 1
                    }
                  }
                ],
                "max_points": 25
              },
              {
                "key": "watchers",
                "name": "Watchers",
                "detail": "0 watchers",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "watchers",
                    "params": {
                      "count": 0
                    }
                  }
                ],
                "max_points": 15
              }
            ]
          },
          {
            "key": "community_health",
            "band": "good",
            "name": "Community health",
            "note": null,
            "notes": [],
            "value": 70,
            "inputs": {
              "has_readme": true,
              "has_license": true,
              "has_contributing": true,
              "has_issue_template": false,
              "has_code_of_conduct": false,
              "has_pull_request_template": false
            },
            "components": [
              {
                "key": "readme",
                "name": "README",
                "detail": null,
                "points": 22.5,
                "status": "met",
                "details": [],
                "max_points": 22.5
              },
              {
                "key": "license",
                "name": "License",
                "detail": "recognized license (MIT)",
                "points": 22.5,
                "status": "met",
                "details": [
                  {
                    "code": "license_standard",
                    "params": {}
                  },
                  {
                    "code": "license_spdx",
                    "params": {
                      "spdx": "MIT"
                    }
                  }
                ],
                "max_points": 22.5
              },
              {
                "key": "contributing_guide",
                "name": "CONTRIBUTING guide",
                "detail": null,
                "points": 18,
                "status": "met",
                "details": [],
                "max_points": 18
              },
              {
                "key": "code_of_conduct",
                "name": "Code of conduct",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 13.5
              },
              {
                "key": "issue_template",
                "name": "Issue template",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.2
              },
              {
                "key": "pr_template",
                "name": "PR template",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 6.3
              }
            ]
          },
          {
            "key": "ecosystem_adoption",
            "band": "moderate",
            "name": "Ecosystem adoption (downloads)",
            "note": "Excluded from scoring (no data or not applicable): Registry dependents. Remaining weights renormalized.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "registry_dependents"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              }
            ],
            "value": 57,
            "inputs": {
              "packages": [
                "launch-store"
              ],
              "dependents": null,
              "ecosystems": "npm",
              "total_downloads": null,
              "monthly_downloads": 2629
            },
            "components": [
              {
                "key": "monthly_downloads",
                "name": "Monthly downloads",
                "detail": "2,629 downloads/month across npm",
                "points": 45.6,
                "status": "partial",
                "details": [
                  {
                    "code": "downloads_monthly",
                    "params": {
                      "count": 2629,
                      "ecosystems": "npm"
                    }
                  }
                ],
                "max_points": 80
              },
              {
                "key": "registry_dependents",
                "name": "Registry dependents",
                "detail": "not reported by this ecosystem",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "not_reported_by_this_ecosystem",
                    "params": {}
                  }
                ],
                "max_points": 20
              }
            ]
          }
        ],
        "description": "Does the project have users, downloads, attention, and a welcoming setup for contributors?"
      },
      {
        "key": "governance",
        "band": "moderate",
        "name": "Sustainability & Governance",
        "value": 54,
        "weight": 0.24,
        "metrics": [
          {
            "key": "maintainer_resilience",
            "band": "critical",
            "name": "Maintainer resilience (bus factor)",
            "note": null,
            "notes": [],
            "value": 10,
            "inputs": {
              "bus_factor": 1,
              "contributors_sampled": 1,
              "top_contributor_share": 1
            },
            "components": [
              {
                "key": "bus_factor",
                "name": "Bus factor",
                "detail": "1 contributor(s) cover half of all commits",
                "points": 9,
                "status": "partial",
                "details": [
                  {
                    "code": "bus_factor",
                    "params": {
                      "count": 1
                    }
                  }
                ],
                "max_points": 54
              },
              {
                "key": "commit_distribution",
                "name": "Commit distribution",
                "detail": "top contributor authored 100% of commits",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "top_contributor_share",
                    "params": {
                      "share": 100
                    }
                  }
                ],
                "max_points": 22.5
              },
              {
                "key": "contributor_breadth",
                "name": "Contributor breadth",
                "detail": "1 contributors",
                "points": 1.4,
                "status": "partial",
                "details": [
                  {
                    "code": "contributors_sampled",
                    "params": {
                      "count": 1
                    }
                  }
                ],
                "max_points": 13.5
              },
              {
                "key": "openssf_scorecard_contributors",
                "name": "OpenSSF Scorecard: Contributors",
                "detail": "project has 0 contributing companies or organizations -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "responsiveness",
            "band": "good",
            "name": "Issue & PR responsiveness",
            "note": null,
            "notes": [],
            "value": 84,
            "inputs": {
              "merged_prs": 167,
              "open_issues": 1,
              "closed_issues": 132,
              "issue_closed_ratio": 0.992,
              "closed_unmerged_prs": 3
            },
            "components": [
              {
                "key": "issue_resolution",
                "name": "Issue resolution",
                "detail": "99% of issues closed",
                "points": 46.4,
                "status": "partial",
                "details": [
                  {
                    "code": "issues_closed_share",
                    "params": {
                      "share": 99
                    }
                  }
                ],
                "max_points": 46.75
              },
              {
                "key": "pr_acceptance",
                "name": "PR acceptance",
                "detail": "167/170 decided PRs merged",
                "points": 37.6,
                "status": "partial",
                "details": [
                  {
                    "code": "decided_prs_merged",
                    "params": {
                      "merged": 167,
                      "decided": 170
                    }
                  }
                ],
                "max_points": 38.25
              },
              {
                "key": "openssf_scorecard_code_review",
                "name": "OpenSSF Scorecard: Code-Review",
                "detail": "Found 0/30 approved changesets -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 15
              }
            ]
          },
          {
            "key": "stewardship",
            "band": "at_risk",
            "name": "Ownership & stewardship",
            "note": "Excluded from scoring (no data or not applicable): Verified domain. Remaining weights renormalized.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "verified_domain"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              }
            ],
            "value": 38,
            "inputs": {
              "followers": 16,
              "owner_type": "User",
              "is_verified": null,
              "owner_login": "YosefHayim",
              "public_repos": 12,
              "account_age_days": 701
            },
            "components": [
              {
                "key": "ownership_backing",
                "name": "Ownership backing",
                "detail": "personal (user) account",
                "points": 10,
                "status": "partial",
                "details": [
                  {
                    "code": "owner_personal",
                    "params": {}
                  }
                ],
                "max_points": 30
              },
              {
                "key": "verified_domain",
                "name": "Verified domain",
                "detail": "not applicable to user accounts",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "not_applicable_to_user_accounts",
                    "params": {}
                  }
                ],
                "max_points": 20
              },
              {
                "key": "owner_reach",
                "name": "Owner reach",
                "detail": "16 followers of YosefHayim",
                "points": 8.8,
                "status": "partial",
                "details": [
                  {
                    "code": "owner_followers",
                    "params": {
                      "count": 16,
                      "login": "YosefHayim"
                    }
                  }
                ],
                "max_points": 25
              },
              {
                "key": "track_record",
                "name": "Track record",
                "detail": "12 public repos, account ~1 yr old",
                "points": 11.9,
                "status": "partial",
                "details": [
                  {
                    "code": "public_repos",
                    "params": {
                      "count": 12
                    }
                  },
                  {
                    "code": "account_age_years",
                    "params": {
                      "years": 1
                    }
                  }
                ],
                "max_points": 25
              }
            ]
          },
          {
            "key": "package_maintenance",
            "band": "excellent",
            "name": "Package maintenance",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "packages": [
                "launch-store"
              ],
              "ecosystems": "npm",
              "any_deprecated": false,
              "min_days_since_publish": 5
            },
            "components": [
              {
                "key": "published_resolvable",
                "name": "Published & resolvable",
                "detail": "1 package(s) on npm",
                "points": 25,
                "status": "met",
                "details": [
                  {
                    "code": "packages_published",
                    "params": {
                      "count": 1,
                      "ecosystems": "npm"
                    }
                  }
                ],
                "max_points": 25
              },
              {
                "key": "publish_recency",
                "name": "Publish recency",
                "detail": "latest publish 5 days ago",
                "points": 35,
                "status": "met",
                "details": [
                  {
                    "code": "publish_recency",
                    "params": {
                      "days": 5
                    }
                  }
                ],
                "max_points": 35
              },
              {
                "key": "version_history",
                "name": "Version history",
                "detail": "36 published versions",
                "points": 20,
                "status": "met",
                "details": [
                  {
                    "code": "published_versions",
                    "params": {
                      "count": 36
                    }
                  }
                ],
                "max_points": 20
              },
              {
                "key": "not_deprecated",
                "name": "Not deprecated",
                "detail": "active, not deprecated or yanked",
                "points": 20,
                "status": "met",
                "details": [
                  {
                    "code": "package_not_deprecated",
                    "params": {}
                  }
                ],
                "max_points": 20
              }
            ]
          }
        ],
        "description": "Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?"
      },
      {
        "key": "engineering",
        "band": "excellent",
        "name": "Engineering Quality",
        "value": 88,
        "weight": 0.2,
        "metrics": [
          {
            "key": "engineering_practices",
            "band": "good",
            "name": "Engineering practices",
            "note": "Excluded from scoring (no data or not applicable): OpenSSF Scorecard: CI-Tests. Remaining weights renormalized.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "openssf_scorecard_ci_tests"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              }
            ],
            "value": 80,
            "inputs": {
              "has_ci": true,
              "has_tests": true,
              "has_editorconfig": false,
              "has_linter_config": true,
              "has_precommit_config": false
            },
            "components": [
              {
                "key": "ci_workflows",
                "name": "CI workflows",
                "detail": "11 workflow(s)",
                "points": 24,
                "status": "met",
                "details": [
                  {
                    "code": "ci_workflows",
                    "params": {
                      "count": 11
                    }
                  }
                ],
                "max_points": 24
              },
              {
                "key": "tests_present",
                "name": "Tests present",
                "detail": null,
                "points": 24,
                "status": "met",
                "details": [],
                "max_points": 24
              },
              {
                "key": "linter_config",
                "name": "Linter config",
                "detail": "biome.json",
                "points": 16,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": "biome.json"
                    }
                  }
                ],
                "max_points": 16
              },
              {
                "key": "pre_commit_hooks",
                "name": "Pre-commit hooks",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 9.6
              },
              {
                "key": "editorconfig",
                "name": ".editorconfig",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 6.4
              },
              {
                "key": "openssf_scorecard_ci_tests",
                "name": "OpenSSF Scorecard: CI-Tests",
                "detail": "no pull request found",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_data",
                    "params": {}
                  }
                ],
                "max_points": 20
              }
            ]
          },
          {
            "key": "documentation",
            "band": "excellent",
            "name": "Documentation",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "topics": [
                "android",
                "app-store",
                "app-store-connect",
                "ci-cd",
                "cli",
                "code-signing",
                "eas",
                "expo",
                "fastlane",
                "ios",
                "mobile",
                "play-store",
                "react-native",
                "testflight",
                "expo-updates",
                "google-play",
                "nodejs",
                "typescript"
              ],
              "has_wiki": true,
              "homepage": "https://www.npmjs.com/package/launch-store",
              "has_readme": true,
              "has_docs_dir": true,
              "has_description": true
            },
            "components": [
              {
                "key": "readme",
                "name": "README",
                "detail": null,
                "points": 30,
                "status": "met",
                "details": [],
                "max_points": 30
              },
              {
                "key": "documentation_directory",
                "name": "Documentation directory",
                "detail": null,
                "points": 25,
                "status": "met",
                "details": [],
                "max_points": 25
              },
              {
                "key": "documentation_homepage_site",
                "name": "Documentation / homepage site",
                "detail": "https://www.npmjs.com/package/launch-store",
                "points": 15,
                "status": "met",
                "details": [],
                "max_points": 15
              },
              {
                "key": "repository_description",
                "name": "Repository description",
                "detail": null,
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              },
              {
                "key": "topics",
                "name": "Topics",
                "detail": "18 topics",
                "points": 10,
                "status": "met",
                "details": [
                  {
                    "code": "topics_count",
                    "params": {
                      "count": 18
                    }
                  }
                ],
                "max_points": 10
              },
              {
                "key": "wiki",
                "name": "Wiki",
                "detail": null,
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              }
            ]
          }
        ],
        "description": "Are baseline engineering and documentation practices in place?"
      },
      {
        "key": "security",
        "band": "at_risk",
        "name": "Security",
        "value": 47,
        "weight": 0.16,
        "metrics": [
          {
            "key": "security_posture",
            "band": "at_risk",
            "name": "Security posture",
            "note": "Excluded from scoring (no data or not applicable): Branch-Protection, CI-Tests, Signed-Releases. Remaining weights renormalized.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "branch_protection",
                    "ci_tests",
                    "signed_releases"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              }
            ],
            "value": 37,
            "inputs": {
              "source": "openssf_scorecard",
              "checks_evaluated": 15,
              "scorecard_version": "v5.5.0",
              "checks_inconclusive": 3,
              "scorecard_aggregate": 3.7
            },
            "components": [
              {
                "key": "binary_artifacts",
                "name": "Binary-Artifacts",
                "detail": "no binaries found in the repo",
                "points": 7.5,
                "status": "met",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "branch_protection",
                "name": "Branch-Protection",
                "detail": "internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_data",
                    "params": {}
                  }
                ],
                "max_points": 7.5
              },
              {
                "key": "ci_tests",
                "name": "CI-Tests",
                "detail": "no pull request found",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_data",
                    "params": {}
                  }
                ],
                "max_points": 2.5
              },
              {
                "key": "cii_best_practices",
                "name": "CII-Best-Practices",
                "detail": "no effort to earn an OpenSSF best practices badge detected",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "code_review",
                "name": "Code-Review",
                "detail": "Found 0/30 approved changesets -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "contributors",
                "name": "Contributors",
                "detail": "project has 0 contributing companies or organizations -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "dangerous_workflow",
                "name": "Dangerous-Workflow",
                "detail": "no dangerous workflow patterns detected",
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              },
              {
                "key": "dependency_update_tool",
                "name": "Dependency-Update-Tool",
                "detail": "no update tool detected",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "fuzzing",
                "name": "Fuzzing",
                "detail": "project is not fuzzed",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 5
              },
              {
                "key": "license",
                "name": "License",
                "detail": "license file detected",
                "points": 2.5,
                "status": "met",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "maintained",
                "name": "Maintained",
                "detail": "project was created within the last 90 days. Please review its contents carefully",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "packaging",
                "name": "Packaging",
                "detail": "packaging workflow detected",
                "points": 5,
                "status": "met",
                "details": [],
                "max_points": 5
              },
              {
                "key": "pinned_dependencies",
                "name": "Pinned-Dependencies",
                "detail": "dependency not pinned by hash detected -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 5
              },
              {
                "key": "sast",
                "name": "SAST",
                "detail": "no SAST tool detected",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 5
              },
              {
                "key": "security_policy",
                "name": "Security-Policy",
                "detail": "security policy file not detected",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 5
              },
              {
                "key": "signed_releases",
                "name": "Signed-Releases",
                "detail": "no releases found",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_data",
                    "params": {}
                  }
                ],
                "max_points": 7.5
              },
              {
                "key": "token_permissions",
                "name": "Token-Permissions",
                "detail": "GitHub workflow tokens follow principle of least privilege",
                "points": 7.5,
                "status": "met",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "vulnerabilities",
                "name": "Vulnerabilities",
                "detail": "10 existing vulnerabilities detected",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              }
            ]
          },
          {
            "key": "dependency_advisories",
            "band": "excellent",
            "name": "Dependency advisories",
            "note": "Matched the npm:launch-store@0.32.8 runtime dependency closure — what installing the published package pulls in — 165 packages. Reachability is not analyzed.",
            "notes": [
              {
                "code": "advisories_scope_published",
                "params": {
                  "package": "npm:launch-store@0.32.8",
                  "assessed": 165
                }
              },
              {
                "code": "advisories_reachability",
                "params": {}
              }
            ],
            "value": 88,
            "inputs": {
              "source": "osv",
              "advisories": 1,
              "affected_packages": 1,
              "assessed_packages": 165,
              "unassessed_packages": 0,
              "affected_by_severity": "moderate 1",
              "direct_affected_packages": 0
            },
            "components": [
              {
                "key": "direct_dependencies_free_of_known_advisories",
                "name": "Direct dependencies free of known advisories",
                "detail": "no direct dependency carries a known advisory",
                "points": 35,
                "status": "met",
                "details": [
                  {
                    "code": "no_direct_advisories",
                    "params": {}
                  }
                ],
                "max_points": 35
              },
              {
                "key": "indirect_dependencies_free_of_known_advisories",
                "name": "Indirect dependencies free of known advisories",
                "detail": "1 affected: @hono/node-server 1.19.15 (moderate 5.9)",
                "points": 13.2,
                "status": "partial",
                "details": [
                  {
                    "code": "advisories_affected",
                    "params": {
                      "count": 1,
                      "packages": "@hono/node-server 1.19.15 (moderate 5.9)"
                    }
                  }
                ],
                "max_points": 25
              },
              {
                "key": "no_advisories_left_outstanding",
                "name": "No advisories left outstanding",
                "detail": "no advisory has been public longer than 90 days",
                "points": 40,
                "status": "met",
                "details": [
                  {
                    "code": "advisories_none_stale",
                    "params": {
                      "days": 90
                    }
                  }
                ],
                "max_points": 40
              }
            ]
          },
          {
            "key": "malicious_dependencies",
            "band": "excellent",
            "name": "Malicious dependencies",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "source": "osv",
              "meaning": "reported as a malicious package by the OpenSSF corpus; the remedy is removal or moving off the compromised name, never an upgrade of the same artifact. Versions the registry has since pulled are listed but not scored",
              "packages": [],
              "red_flag": false,
              "assessed_packages": 165,
              "malicious_packages": 0,
              "direct_malicious_packages": 0,
              "withdrawn_malicious_packages": 0,
              "installable_malicious_packages": 0
            },
            "components": [
              {
                "key": "no_dependency_reported_as_a_malicious_package",
                "name": "No dependency reported as a malicious package",
                "detail": "no dependency is reported as a malicious package",
                "points": 100,
                "status": "met",
                "details": [
                  {
                    "code": "no_malicious_dependencies",
                    "params": {}
                  }
                ],
                "max_points": 100
              }
            ]
          },
          {
            "key": "high_risk_jurisdiction_exposure",
            "band": "excellent",
            "name": "High-Risk Jurisdiction Exposure",
            "note": "Only high-confidence self-published location evidence affects this multiplier. Ambiguous matches are review-only; country evidence is not proof of nationality, citizenship, legal registration, malicious intent, or sanctions status.",
            "notes": [
              {
                "code": "jurisdiction_evidence_limits",
                "params": {}
              }
            ],
            "value": 100,
            "inputs": {
              "meaning": "self-published location evidence; not nationality or citizenship",
              "red_flag": false,
              "exposures": [],
              "policy_countries": [
                "Russia",
                "Iran",
                "North Korea"
              ],
              "review_only_matches": 0,
              "assessed_self_published_locations": 2
            },
            "components": [
              {
                "key": "policy_exposure_multiplier",
                "name": "Policy exposure multiplier",
                "detail": "no confirmed policy-scope location match",
                "points": 100,
                "status": "met",
                "details": [
                  {
                    "code": "jurisdiction_no_match",
                    "params": {}
                  }
                ],
                "max_points": 100
              }
            ]
          }
        ],
        "description": "Are visible security and supply-chain practices strong, with no malicious dependency and no unresolved high-risk jurisdiction exposure?"
      },
      {
        "key": "ai_readiness",
        "band": "good",
        "name": "AI Readiness",
        "value": 77,
        "weight": 0,
        "metrics": [
          {
            "key": "ai_agent_context",
            "band": "excellent",
            "name": "Agent context & guidance",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "has_llms_txt": true,
              "legible_history_share": 1,
              "agent_instruction_files": [
                ".cursor/rules/core-types.mdc",
                ".cursor/rules/exec-secrets.mdc",
                ".cursor/rules/launch.mdc",
                ".cursor/rules/providers.mdc",
                "AGENTS.md",
                "CLAUDE.md"
              ],
              "agent_instruction_max_bytes": 7397
            },
            "components": [
              {
                "key": "agent_instructions",
                "name": "Agent instructions",
                "detail": ".cursor/rules/core-types.mdc, .cursor/rules/exec-secrets.mdc, .cursor/rules/launch.mdc, .cursor/rules/providers.mdc, AGENTS.md, CLAUDE.md",
                "points": 45,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": ".cursor/rules/core-types.mdc, .cursor/rules/exec-secrets.mdc, .cursor/rules/launch.mdc, .cursor/rules/providers.mdc, AGENTS.md, CLAUDE.md"
                    }
                  }
                ],
                "max_points": 45
              },
              {
                "key": "machine_readable_docs_llms_txt",
                "name": "Machine-readable docs (llms.txt)",
                "detail": "llms.txt present",
                "points": 15,
                "status": "met",
                "details": [
                  {
                    "code": "llms_txt_present",
                    "params": {}
                  }
                ],
                "max_points": 15
              },
              {
                "key": "legible_commit_history",
                "name": "Legible commit history",
                "detail": "100 of 100 human commits state their intent (structured subject or explanatory body)",
                "points": 40,
                "status": "met",
                "details": [
                  {
                    "code": "legible_history",
                    "params": {
                      "legible": 100,
                      "sampled": 100
                    }
                  }
                ],
                "max_points": 40
              }
            ]
          },
          {
            "key": "ai_verify_loop",
            "band": "moderate",
            "name": "Verify loop (build / test / typecheck)",
            "note": null,
            "notes": [],
            "value": 64,
            "inputs": {
              "has_nix": false,
              "has_tests": true,
              "lockfiles": [
                "pnpm-lock.yaml"
              ],
              "has_dockerfile": false,
              "typed_language": true,
              "bootstrap_files": [],
              "has_devcontainer": false,
              "has_linter_config": true,
              "typecheck_configs": [
                "examples/hello-world/tsconfig.json",
                "tsconfig.json"
              ],
              "agent_commit_share": 0.73,
              "toolchain_manifests": [],
              "dependency_bot_commit_share": 0
            },
            "components": [
              {
                "key": "one_command_bootstrap",
                "name": "One-command bootstrap",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 18
              },
              {
                "key": "automated_tests",
                "name": "Automated tests",
                "detail": null,
                "points": 22,
                "status": "met",
                "details": [],
                "max_points": 22
              },
              {
                "key": "lint_format_config",
                "name": "Lint / format config",
                "detail": "biome.json",
                "points": 11,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": "biome.json"
                    }
                  }
                ],
                "max_points": 11
              },
              {
                "key": "static_type_checking",
                "name": "Static type checking",
                "detail": "examples/hello-world/tsconfig.json, tsconfig.json",
                "points": 11,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": "examples/hello-world/tsconfig.json, tsconfig.json"
                    }
                  }
                ],
                "max_points": 11
              },
              {
                "key": "reproducible_environment",
                "name": "Reproducible environment",
                "detail": "lockfile",
                "points": 10,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": "lockfile"
                    }
                  }
                ],
                "max_points": 10
              },
              {
                "key": "demonstrated_agent_practice",
                "name": "Demonstrated agent practice",
                "detail": "73 of the last 100 commits agent-authored or agent-credited",
                "points": 10,
                "status": "met",
                "details": [
                  {
                    "code": "agent_authored_commits",
                    "params": {
                      "count": 73,
                      "sampled": 100
                    }
                  }
                ],
                "max_points": 10
              },
              {
                "key": "automated_maintenance",
                "name": "Automated maintenance",
                "detail": "no automated dependency updates observed",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "no_dependency_automation",
                    "params": {}
                  }
                ],
                "max_points": 8
              },
              {
                "key": "openssf_scorecard_pinned_dependencies",
                "name": "OpenSSF Scorecard: Pinned-Dependencies",
                "detail": "dependency not pinned by hash detected -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "ai_code_legibility",
            "band": "excellent",
            "name": "Code legibility for models",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "primary_language": "TypeScript",
              "largest_source_bytes": 5069338,
              "source_files_sampled": 525,
              "oversized_source_files": 4
            },
            "components": [
              {
                "key": "type_checkable_code",
                "name": "Type-checkable code",
                "detail": "TypeScript (statically typed)",
                "points": 45,
                "status": "met",
                "details": [
                  {
                    "code": "statically_typed_language",
                    "params": {
                      "language": "TypeScript"
                    }
                  }
                ],
                "max_points": 45
              },
              {
                "key": "manageable_file_sizes",
                "name": "Manageable file sizes",
                "detail": "4/525 source files over 60KB",
                "points": 54.6,
                "status": "partial",
                "details": [
                  {
                    "code": "oversized_source_files",
                    "params": {
                      "kb": 60,
                      "sampled": 525,
                      "oversized": 4
                    }
                  }
                ],
                "max_points": 55
              }
            ]
          },
          {
            "key": "ai_interfaces",
            "band": "at_risk",
            "name": "Machine-readable interfaces",
            "note": null,
            "notes": [],
            "value": 40,
            "inputs": {
              "example_dirs": [
                "examples"
              ],
              "has_mcp_signal": false,
              "api_schema_files": []
            },
            "components": [
              {
                "key": "api_schema_openapi_graphql_proto",
                "name": "API schema (OpenAPI/GraphQL/proto)",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 40
              },
              {
                "key": "mcp_server",
                "name": "MCP server",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 20
              },
              {
                "key": "runnable_examples",
                "name": "Runnable examples",
                "detail": "examples",
                "points": 40,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": "examples"
                    }
                  }
                ],
                "max_points": 40
              }
            ]
          }
        ],
        "description": "How well is the repo equipped to be developed and maintained with AI coding agents? An independent, experimental badge — weight 0.0, so it is surfaced on its own and does not affect the overall health score."
      }
    ],
    "metrics_version": "1.13.0"
  },
  "warnings": [
    "Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token"
  ],
  "report_type": "repository",
  "generated_at": "2026-07-25T09:56:31.982278Z",
  "schema_version": "0.27.0",
  "badge_url": "https://raw.githubusercontent.com/inspect-software/badges/main/v1/y/YosefHayim/launch-store.svg",
  "full_name": "YosefHayim/launch-store",
  "license_state": "standard",
  "license_spdx": "MIT"
}

评分是信号,而非担保。 评分反映的是 GitHub 上公开可见的实践——不是代码审计,也不是安全保证。

缺失数据将被剔除并重新归一化权重,绝不按零分计。方法论已版本化并公开:指标 v1.13.0、模式 v0.27.0—— 完整方法论 · 指标知识库.

单项结果在整体记录中的位置: 汇总统计npm.