公开记录中等
软件健康报告模式 0.27.0 · 指标 1.13.0 · 2026-07-23 16:22 UTC
addon-stack / storage
Typed storage for browser extensions with namespaces, atomic updates, encrypted values, bucket-style storage, and React bindings.
addon-stack/storage 的健康指数为 100 分中的 62 分，处于「中等」区间。 其得分最高的类别是Vitality（81/100），最低的是Community & Adoption（44/100）。 最近一次更新在 5 天前。 近期的大部分工作由 1 位贡献者完成。
62
总分 / 100软件健康指数
指标归入加权类别，统一采用 1–100 量表。总体分先取类别加权平均；当公开证据触发高风险司法辖区政策时，评级会按政策调整，并设置 49（有风险）的上限。AI 就绪度不计入总体分。
62
优秀85-100堪称典范；基本满足所有检验标准
良好70-84健康；仅有轻微不足
中等50-69可接受，但存在明显不足；建议进行审查
存在风险30-49存在重大薄弱环节；采用时应保持审慎
危急1-29问题严重（项目被弃置、仅有单一维护者、缺乏基本工程规范）
评分画像
每条轴代表一个类别。形状比平均值更重要——健康的对象会填满整个图形，而“一峰一谷”式画像意味着某一维度的优势正掩盖另一维度的风险。
所有权
软件包生态系统
| 注册表 | 软件包 | 版本 | 月下载量 | 版本数 | 最近发布 | 标签 |
|---|---|---|---|---|---|---|
| npm | @addon-core/storage | 0.7.0 | 2,200 | 18 | 5 天前 | storageaddonextensionbrowserchromefirefoxedgeoperasafarireact |
按类别列示的指标
活力
项目是否仍有生命——是否仍在编写代码，是否仍在发布版本？
81
开发活跃度
69中等
评分方式
| 36/36 | 推送新近度 — 最近一次推送于 5 天前 |
| 4.8/36 | 提交节奏 — 52 周中有 7 周有提交 |
| 18/18 | 提交量 — 最近一年 176 次提交 |
| 10/10 | OpenSSF Scorecard：Maintained — 15 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10 |
所用输入
| commits_last_year | 176 |
| human_commit_share | 0.85 |
| days_since_last_push | 5 |
| active_weeks_last_year | 7 |
发布纪律
100优秀
评分方式
| 27/27 | 有发布版本 — 已发布 12 个发布版本 |
| 36/36 | 发布时效 — 最近一次发布版本于 5 天前 |
| 27/27 | 发布节奏 — 约每 33.1 天发布一次 |
| 0/10 | OpenSSF Scorecard：Signed-Releases — 无数据 |
所用输入
| releases_count | 12 |
| latest_release_tag | v0.7.0 |
| releases_from_tags | 否 |
| days_since_latest_release | 5 |
| mean_days_between_releases | 33.1 |
已排除计分（无数据或不适用）：OpenSSF Scorecard：Signed-Releases。 其余权重已重新归一化。
社区与采用
项目是否拥有用户、下载量与关注度，并具备欢迎贡献者参与的配置？
44
流行度与采用
1危急
评分方式
| 0/60 | 星标 — 2 个星标 |
| 0/25 | 复刻 — 0 个复刻 |
| 0/15 | 关注者 — 0 位关注者 |
所用输入
| forks | 0 |
| stars | 2 |
| watchers | 0 |
| growth_state | unverified |
| growth_factor_pct | 100 |
| growth_unverified_reason | no_history |
社区健康
85优秀
评分方式
| 22.5/22.5 | README |
| 22.5/22.5 | 许可证 — 可识别的许可证（MIT） |
| 18/18 | CONTRIBUTING 指南 |
| 13.5/13.5 | 行为准则 |
| 0/7.2 | 议题模板 |
| 0/6.3 | PR 模板 |
所用输入
| has_readme | 是 |
| has_license | 是 |
| has_contributing | 是 |
| has_issue_template | 否 |
| has_code_of_conduct | 是 |
| has_pull_request_template | 否 |
生态采用（下载量）
56中等
评分方式
| 44.6/80 | 月度下载量 — npm 合计每月 2,200 次下载 |
| 0/20 | 注册表被依赖数 — 该生态系统不报告此项 |
所用输入
| packages | @addon-core/storage |
| dependents | — |
| ecosystems | npm |
| total_downloads | — |
| monthly_downloads | 2,200 |
已排除计分（无数据或不适用）：注册表被依赖数。 其余权重已重新归一化。
可持续性与治理
项目能否在其成员之外延续——巴士系数、响应能力、由谁支持，以及软件包的维护状况？
56
维护者韧性（巴士系数）
23危急
评分方式
| 9/54 | 巴士系数 — 1 位贡献者贡献了半数提交 |
| 6.9/22.5 | 提交分布 — 头号贡献者编写了 69% 的提交 |
| 4.1/13.5 | 贡献者广度 — 3 位贡献者 |
| 3/10 | OpenSSF Scorecard：Contributors — project has 1 contributing companies or organizations -- score normalized to 3 |
所用输入
| bus_factor | 1 |
| contributors_sampled | 3 |
| top_contributor_share | 0.694 |
议题与 PR 响应能力
72良好
评分方式
| 0/46.8 | 议题解决 — 没有议题或无数据 |
| 38.2/38.3 | PR 接受 — 已裁定的 PR 中 13/13 已合并 |
| 0/15 | OpenSSF Scorecard：Code-Review — Found 0/7 approved changesets -- score normalized to 0 |
所用输入
| merged_prs | 13 |
| open_issues | 0 |
| closed_issues | 0 |
| issue_closed_ratio | — |
| closed_unmerged_prs | 0 |
已排除计分（无数据或不适用）：议题解决。 其余权重已重新归一化。
所有权与托管责任
45存在风险
评分方式
| 30/30 | 所有权背书 — 组织持有 |
| 0/20 | 已验证域名 |
| 6.5/25 | 所有者影响力 — addon-stack 有 7 位关注者 |
| 8.9/25 | 既往记录 — 12 个公开仓库，账户约 0 年 |
所用输入
| followers | 7 |
| owner_type | Organization |
| is_verified | — |
| owner_login | addon-stack |
| public_repos | 12 |
| account_age_days | 148 |
软件包维护
100优秀
评分方式
| 25/25 | 已发布且可解析 — npm 上有 1 个软件包 |
| 35/35 | 发布时效 — 最近一次发布于 5 天前 |
| 20/20 | 版本历史 — 18 个已发布版本 |
| 20/20 | 未被弃用 — 活跃，未被弃用或撤回 |
所用输入
| packages | @addon-core/storage |
| ecosystems | npm |
| any_deprecated | 否 |
| min_days_since_publish | 5 |
工程质量
基础的工程与文档实践是否到位？
70
工程实践
84良好
评分方式
| 24/24 | CI 工作流 — 2 个工作流 |
| 24/24 | 存在测试 |
| 16/16 | Linter 配置 — biome.json |
| 0/9.6 | Pre-commit 钩子 |
| 0/6.4 | .editorconfig |
| 20/20 | OpenSSF Scorecard：CI-Tests — 4 out of 4 merged PRs checked by a CI test -- score normalized to 10 |
所用输入
| has_ci | 是 |
| has_tests | 是 |
| has_editorconfig | 否 |
| has_linter_config | 是 |
| has_precommit_config | 否 |
文档
50中等
评分方式
| 30/30 | README |
| 0/25 | 文档目录 |
| 0/15 | 文档 / 主页站点 |
| 10/10 | 仓库描述 |
| 10/10 | 主题标签 — 5 个主题标签 |
| 0/10 | Wiki |
所用输入
| topics | browser-extension, chrome, chrome-extension, react, storage |
| has_wiki | 否 |
| homepage | — |
| has_readme | 是 |
| has_docs_dir | 否 |
| has_description | 是 |
安全
可见的安全与供应链实践是否稳固，且不存在未解决的高风险司法辖区暴露？
52
安全态势
40存在风险
评分方式
| 7.5/7.5 | Binary-Artifacts — no binaries found in the repo |
| 0/7.5 | Branch-Protection — branch protection not enabled on development/release branches |
| 2.5/2.5 | CI-Tests — 4 out of 4 merged PRs checked by a CI test -- score normalized to 10 |
| 0/2.5 | CII-Best-Practices — no effort to earn an OpenSSF best practices badge detected |
| 0/7.5 | Code-Review — Found 0/7 approved changesets -- score normalized to 0 |
| 0.8/2.5 | Contributors — project has 1 contributing companies or organizations -- score normalized to 3 |
| 10/10 | Dangerous-Workflow — no dangerous workflow patterns detected |
| 0/7.5 | Dependency-Update-Tool — no update tool detected |
| 0/5 | Fuzzing — project is not fuzzed |
| 2.5/2.5 | 许可证 — license file detected |
| 7.5/7.5 | Maintained — 15 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10 |
| 0/5 | Packaging — 无数据 |
| 1/5 | Pinned-Dependencies — dependency not pinned by hash detected -- score normalized to 2 |
| 0/5 | SAST — SAST tool is not run on all commits -- score normalized to 0 |
| 5/5 | Security-Policy — security policy file detected |
| 0/7.5 | Signed-Releases — 无数据 |
| 0/7.5 | Token-Permissions — detected GitHub workflow tokens with excessive permissions |
| 0/7.5 | Vulnerabilities — 20 existing vulnerabilities detected |
所用输入
| source | openssf_scorecard |
| checks_evaluated | 16 |
| scorecard_version | v5.5.0 |
| checks_inconclusive | 2 |
| scorecard_aggregate | 4 |
已排除计分（无数据或不适用）：packaging, signed_releases。 其余权重已重新归一化。
依赖安全公告
100优秀
评分方式
| 35/35 | 直接依赖不含已知公告 — 没有直接依赖携带已知公告 |
| 25/25 | 间接依赖不含已知公告 — 没有间接依赖携带已知公告 |
| 0/40 | 没有长期未处理的公告 — 没有公告带有发布日期 |
所用输入
| source | osv |
| advisories | 0 |
| affected_packages | 0 |
| assessed_packages | 2 |
| unassessed_packages | 0 |
| affected_by_severity | none |
| direct_affected_packages | 0 |
已排除计分（无数据或不适用）：没有长期未处理的公告。 其余权重已重新归一化。 比对的是 npm:@addon-core/storage@0.7.0 的运行时依赖闭包——安装已发布的软件包时真正被拉取进来的内容——共 2 个软件包。 未对可达性进行分析。
AI 就绪度
该仓库在多大程度上具备与 AI 编码代理协同开发与维护的条件？这是一枚独立的实验性徽章——权重为 0.0，因此单独呈现，不影响总体健康评分。
58
AI 代理上下文与指引
40存在风险
评分方式
| 0/45 | 代理指令 — 没有 CLAUDE.md / AGENTS.md / 编辑器规则 |
| 0/15 | 机器可读文档（llms.txt） |
| 40/40 | 可读的提交历史 — 85 次人类提交中有 68 次说明了意图（结构化标题或解释性正文） |
所用输入
| has_llms_txt | 否 |
| legible_history_share | 0.8 |
| agent_instruction_files | — |
| agent_instruction_max_bytes | — |
评分方式
| 0/18 | 一条命令的引导启动 |
| 22/22 | 自动化测试 |
| 11/11 | Lint / 格式化配置 — biome.json |
| 11/11 | 静态类型检查 — tsconfig.json |
| 10/10 | 可复现环境 — lockfile |
| 0/10 | 已体现的代理实践 — 最近 100 次提交中没有代理编写的提交 |
| 0/8 | 自动化维护 — 未观察到自动依赖更新 |
| 2/10 | OpenSSF Scorecard：Pinned-Dependencies — dependency not pinned by hash detected -- score normalized to 2 |
所用输入
| has_nix | 否 |
| has_tests | 是 |
| lockfiles | package-lock.json |
| has_dockerfile | 否 |
| typed_language | 是 |
| bootstrap_files | — |
| has_devcontainer | 否 |
| has_linter_config | 是 |
| typecheck_configs | tsconfig.json |
| agent_commit_share | 0 |
| toolchain_manifests | — |
| dependency_bot_commit_share | 0 |
面向模型的代码可读性
100优秀
评分方式
| 45/45 | 可类型检查的代码 — TypeScript（静态类型） |
| 55/55 | 可控的文件大小 — 采样的 40 个源文件中有 0 个超过 60KB |
所用输入
| primary_language | TypeScript |
| largest_source_bytes | 49,358 |
| source_files_sampled | 40 |
| oversized_source_files | 0 |
关键数据
2GitHub 星标
3贡献者
176最近 12 个月提交数
5距最近推送天数
12发布版本数
1巴士系数（bus factor）
0开放议题
npm软件包生态系统数
数据采集警告
- Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token
- GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository
更多细节
OpenSSF Scorecard 4.0 / 10
4.0综合
来自开源项目 OpenSSF Scorecard 的独立、工具无关的安全评估。每项检查奖励的是安全实践本身，而非特定供应商的工具。Scorecard 无法判定的检查项标记为 不适用，并从安全评分中剔除（绝不按零分计）。
| 10 | Binary-Artifacts | no binaries found in the repo |
| 0 | Branch-Protection | branch protection not enabled on development/release branches |
| 10 | CI-Tests | 4 out of 4 merged PRs checked by a CI test -- score normalized to 10 |
| 0 | CII-Best-Practices | no effort to earn an OpenSSF best practices badge detected |
| 0 | Code-Review | Found 0/7 approved changesets -- score normalized to 0 |
| 3 | Contributors | project has 1 contributing companies or organizations -- score normalized to 3 |
| 10 | Dangerous-Workflow | no dangerous workflow patterns detected |
| 0 | Dependency-Update-Tool | no update tool detected |
| 0 | Fuzzing | project is not fuzzed |
| 10 | License | license file detected |
| 10 | Maintained | 15 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10 |
| 不适用 | Packaging | packaging workflow not detected |
| 2 | Pinned-Dependencies | dependency not pinned by hash detected -- score normalized to 2 |
| 0 | SAST | SAST tool is not run on all commits -- score normalized to 0 |
| 10 | Security-Policy | security policy file detected |
| 不适用 | Signed-Releases | no releases found |
| 0 | Token-Permissions | detected GitHub workflow tokens with excessive permissions |
| 0 | Vulnerabilities | 20 existing vulnerabilities detected |
直接依赖 2
| 注册表 | 软件包 | 版本约束 | 清单文件 |
|---|---|---|---|
| npm | @addon-core/browser | ^0.5.0 | package.json |
| npm | dequal | ^2.0.3 | package.json |
全部依赖 未采集
本报告未能采集到解析后的依赖集合：GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository
依赖安全公告 0
安装 npm:@addon-core/storage@0.7.0 会引入 2 个包（直接与传递）：其中 0 个存在已知公告，0 个为直接依赖。
没有已知公告影响已评估的依赖。
公告表示依赖图中记录的版本落入某条公告的受影响范围。可达性未经分析，且依赖图包含开发与测试的版本固定——某项发现可能只涉及工具链而非交付的软件。
原始 JSON 报告 机器可读
{
"data": {
"repo": {
"topics": [
"browser-extension",
"chrome",
"chrome-extension",
"react",
"storage"
],
"is_fork": false,
"size_kb": 1112,
"has_wiki": false,
"homepage": null,
"languages": {
"Shell": 606,
"JavaScript": 10288,
"TypeScript": 256056
},
"pushed_at": "2026-07-18T08:41:21Z",
"created_at": "2025-09-17T20:24:38Z",
"owner_type": "Organization",
"updated_at": "2026-07-18T08:41:24Z",
"description": "Typed storage for browser extensions with namespaces, atomic updates, encrypted values, bucket-style storage, and React bindings.",
"is_archived": false,
"is_disabled": false,
"license_spdx": "MIT",
"default_branch": "main",
"license_spdx_raw": "MIT",
"primary_language": "TypeScript",
"significant_languages": [
"TypeScript"
]
},
"owner": {
"blog": "https://addonbone.com",
"name": "Addon Stack",
"type": "Organization",
"login": "addon-stack",
"company": null,
"location": null,
"followers": 7,
"avatar_url": "https://avatars.githubusercontent.com/u/263756765?v=4",
"created_at": "2026-02-24T20:52:19Z",
"is_verified": null,
"public_repos": 12,
"account_age_days": 148
},
"license": {
"state": "standard",
"spdx_id": "MIT",
"raw_spdx": "MIT",
"file_present": true,
"scorecard_found": true,
"profile_has_license": true
},
"activity": {
"releases": [
{
"tag": "v0.7.0",
"kind": "minor",
"published_at": "2026-07-18T08:41:20Z"
},
{
"tag": "v0.6.0",
"kind": "minor",
"published_at": "2026-05-04T21:25:27Z"
},
{
"tag": "v0.5.0",
"kind": "minor",
"published_at": "2026-04-09T18:17:10Z"
},
{
"tag": "v0.4.0",
"kind": "minor",
"published_at": "2025-10-07T14:42:34Z"
},
{
"tag": "v0.3.6",
"kind": "patch",
"published_at": "2025-09-26T11:36:14Z"
},
{
"tag": "v0.3.5",
"kind": "patch",
"published_at": "2025-09-25T21:44:14Z"
},
{
"tag": "v0.3.1",
"kind": "patch",
"published_at": "2025-09-24T20:56:46Z"
},
{
"tag": "v0.3.0",
"kind": "minor",
"published_at": "2025-09-24T15:27:39Z"
},
{
"tag": "v0.2.3",
"kind": "patch",
"published_at": "2025-09-23T21:48:49Z"
},
{
"tag": "v0.2.2",
"kind": "patch",
"published_at": "2025-09-23T14:17:55Z"
},
{
"tag": "v0.2.1",
"kind": "patch",
"published_at": "2025-09-22T21:42:36Z"
},
{
"tag": "v0.2.0",
"kind": "minor",
"published_at": "2025-09-22T20:56:05Z"
}
],
"recent_commits": [
{
"oid": "c117117fb02e2b373e56dd20ac65408e8942fd99",
"body": null,
"is_bot": true,
"headline": "chore(release): v0.7.0",
"author_name": "github-actions[bot]",
"author_login": "github-actions[bot]",
"committed_at": "2026-07-18T08:41:18Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "8a72c7a752e925b4794d56d3e926229ecc32995d",
"body": "Add batch storage operations, subscriptions, and functional API",
"is_bot": false,
"headline": "chore: merge pull request #13 from addon-stack/develop",
"author_name": "Anjey Tsibylskij",
"author_login": "atldays",
"committed_at": "2026-07-18T08:38:54Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "053e844eb56504fd720c6bacce6450c584830356",
"body": "Highlight the functional API, type safety, batch operations,\nencryption, and subscriptions in npm package metadata.",
"is_bot": false,
"headline": "docs: update package description",
"author_name": "Anjey Tsibylskij",
"author_login": "atldays",
"committed_at": "2026-07-18T08:35:50Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f7f841ba78f495aaa97071339834c096d5059f5c",
"body": "- make functional helpers and storage-area selection the primary onboarding path\n- consolidate class, batch, locking, watch, secure, and MonoStorage documentation\n- clarify provider scope, recovery behavior, public errors, and runtime limits",
"is_bot": false,
"headline": "docs: restructure README around functional API",
"author_name": "Anjey Tsibylskij",
"author_login": "atldays",
"committed_at": "2026-07-18T08:33:04Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "18d9e785e14d1e1fd9d0c659959c62c0c71b361a",
"body": null,
"is_bot": false,
"headline": "feat!: support aggregate batch update comparison",
"author_name": "Anjey Tsibylskij",
"author_login": "atldays",
"committed_at": "2026-07-18T07:39:40Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5c2c43c6e719c9e3ef6ebec8790a64c05eba051c",
"body": "- add one-shot get/set and provider factories for all storage areas\n- support secure and mono providers through typed overloads\n- document provider reuse and cover runtime and type contracts",
"is_bot": false,
"headline": "feat(helpers): add functional storage API",
"author_name": "Anjey Tsibylskij",
"author_login": "atldays",
"committed_at": "2026-07-17T16:04:04Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "70dce436df13769c7c95432ce1898890d769de7f",
"body": "- add default state generics across providers, factories, and related public types\n- preserve strict schema typing while documenting the loose playground mode\n- cover genericless and typed usage with compile-time assertions",
"is_bot": false,
"headline": "feat(types): support storage without explicit state",
"author_name": "Anjey Tsibylskij",
"author_login": "atldays",
"committed_at": "2026-07-17T14:27:18Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "daecdaa5255a8904fe3ca34661f38c0c14f856ab",
"body": "- move the Web Locks implementation and tests into src/locking\n- add a locking barrel and re-export built-in lockers from the package root\n- keep WebLockManager as the default locker for storage providers\n- document the built-in implementation and verify its public type export\n\nBREAKING CHANGE: LockManager is now exported as WebLockManager. Update package-root imports to\nuse WebLockManager; the old LockManager alias is not retained.",
"is_bot": false,
"headline": "refactor(locking)!: rename LockManager to WebLockManager",
"author_name": "Anjey Tsibylskij",
"author_login": "atldays",
"committed_at": "2026-07-17T13:29:45Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "96c550cdcdecc87e9ab5a5f119a10022a5c7636d",
"body": "- treat breaking commits as minor releases on 0.x and major releases on 1.x\n- recognize bang syntax, parser flags, notes, and breaking footers consistently\n- preserve the minor release policy for revert commits\n- add focused release-policy tests and contributor documentation",
"is_bot": false,
"headline": "chore(release): align breaking-change bumps before 1.0",
"author_name": "Anjey Tsibylskij",
"author_login": "atldays",
"committed_at": "2026-07-17T13:17:20Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "dff46a71fcbdf0951c20e9e32c9c04c134a07129",
"body": "- add multi-key overloads for get, set, and update\n- add subscribe with FIFO event formatting and keep watch as a per-key projection\n- align Storage, SecureStorage, and MonoStorage locking, corruption, recovery, and no-op semantics\n- introduce strict physical-key decoding and explicit SecureStorage \n[…]\n use secure::<key> instead of secure:<key>, so legacy\nciphertext requires explicit raw migration. Listener data or corruption errors now terminate the\naffected registration and surface asynchronously.",
"is_bot": false,
"headline": "feat!: add batch storage operations and subscriptions",
"author_name": "Anjey Tsibylskij",
"author_login": "atldays",
"committed_at": "2026-07-17T13:16:52Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "82deaafd1aacba52a17ff05c231abdbfd476dc02",
"body": null,
"is_bot": true,
"headline": "Merge main into develop",
"author_name": "github-actions[bot]",
"author_login": "github-actions[bot]",
"committed_at": "2026-05-04T21:25:29Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "56f384a7474199c042906359cb0d2d79f89b3248",
"body": null,
"is_bot": true,
"headline": "chore(release): v0.6.0",
"author_name": "github-actions[bot]",
"author_login": "github-actions[bot]",
"committed_at": "2026-05-04T21:25:26Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "190a4e8375df1f4d665f62879cf34eccfb3c8468",
"body": "Add custom equality comparison for update method",
"is_bot": false,
"headline": "chore: merge pull request #12 from addon-stack/develop",
"author_name": "Anjey Tsibylskij",
"author_login": "atldays",
"committed_at": "2026-05-04T21:22:45Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f457ced9e0f06258bb221bb612a85a26bd1edf24",
"body": "- Expand explanation of atomic updates for browser extensions.\n- Provide examples for extension state shared across multiple contexts.\n- Clarify use cases such as counters, retries, toggles, and queue metadata.",
"is_bot": false,
"headline": "docs: improve atomic updates section in README",
"author_name": "Anjey Tsibylskij",
"author_login": "atldays",
"committed_at": "2026-05-04T21:20:39Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "89874b9654bc69803b39f7b34b6b4aeb78088dad",
"body": "- Introduce `compare` option for `update()` to skip writes based on custom equality logic.\n- Extend `StorageUpdateOptions` with `compare` field for precise control over update logic.\n- Ensure no-op writes do not trigger unnecessary updates or storage writes.\n- Add comprehensive test coverage for `compare` usage.\n- Update documentation with examples to demonstrate custom `compare` usage.",
"is_bot": false,
"headline": "feat: add custom equality comparison for `update` method",
"author_name": "Anjey Tsibylskij",
"author_login": "atldays",
"committed_at": "2026-05-04T21:14:20Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "62babc9866878145cc78d7f153ece3bf1dceec93",
"body": null,
"is_bot": true,
"headline": "Merge main into develop",
"author_name": "github-actions[bot]",
"author_login": "github-actions[bot]",
"committed_at": "2026-04-09T18:17:12Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "390efc0d4f4ef8ec649fff7af4b2c107dd1e6950",
"body": null,
"is_bot": true,
"headline": "chore(release): v0.5.0",
"author_name": "github-actions[bot]",
"author_login": "github-actions[bot]",
"committed_at": "2026-04-09T18:17:09Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f5bfc350951b5b9b7fb961ae27f0878cc7327b08",
"body": "Simplify and clean up release-it configuration",
"is_bot": false,
"headline": "chore: merge pull request #11 from addon-stack/develop",
"author_name": "Anjey Tsibylskij",
"author_login": "atldays",
"committed_at": "2026-04-09T18:14:53Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ff864e17c58e456abd9ffb9f82f248847faeac72",
"body": null,
"is_bot": false,
"headline": "refactor(release): simplify and clean up release-it configuration",
"author_name": "Anjey Tsibylskij",
"author_login": "atldays",
"committed_at": "2026-04-09T18:13:13Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5a291e0490634312b2491a443ad28b58be54547e",
"body": "Enhance storage features, update CI, and improve documentation",
"is_bot": false,
"headline": "chore: merge pull request #10 from addon-stack/develop",
"author_name": "Anjey Tsibylskij",
"author_login": "atldays",
"committed_at": "2026-04-09T18:01:25Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "65f3e9e8531ca2faa3ac2a9556d9b1a4ebcc8f57",
"body": null,
"is_bot": false,
"headline": "fix: handle non-string values in SecureStorage changes gracefully",
"author_name": "Anjey Tsibylskij",
"author_login": "atldays",
"committed_at": "2026-04-09T17:56:04Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "82b41d1909e05f42dfb185cf4c2e9d6e4a0de9c3",
"body": null,
"is_bot": false,
"headline": "chore(deps): update dependencies and lockfile to latest versions",
"author_name": "Anjey Tsibylskij",
"author_login": "atldays",
"committed_at": "2026-04-09T17:48:50Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ae61d0cdf2d8966f64100bb1fea7e1ec0f9864f3",
"body": "- Replace custom promises with `callWithPromise` for consistency and readability.\n- Remove unnecessary `throwRuntimeError` calls and redundant error handling.\n- Streamline `onChanged` listener management using `handleListener` helper.",
"is_bot": false,
"headline": "refactor: simplify and standardize async storage operations",
"author_name": "Anjey Tsibylskij",
"author_login": "atldays",
"committed_at": "2026-04-09T17:37:41Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "87a6a316ba50ec28ce83f6647d89bf306c9e3f4c",
"body": null,
"is_bot": false,
"headline": "feat: enhance package metadata and dependencies",
"author_name": "Anjey Tsibylskij",
"author_login": "atldays",
"committed_at": "2026-04-09T17:24:05Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "79fd044801bd5d8c3a55d644ec2fecd1c2e5d6af",
"body": null,
"is_bot": false,
"headline": "docs: add CI badge to README",
"author_name": "Anjey Tsibylskij",
"author_login": "atldays",
"committed_at": "2026-04-09T15:01:49Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "bb0af717f596abf41af4d72d896302bc2e26d75f",
"body": "- Provide clearer descriptions of storage APIs, features, and use cases.\n- Enhance examples for SecureStorage, MonoStorage, atomic updates, and React bindings.\n- Include notes on Web Locks API reliance, namespaces, and storage areas.\n- Update examples with modern TypeScript syntax and best practices.",
"is_bot": false,
"headline": "docs: improve and expand documentation for storage features",
"author_name": "Anjey Tsibylskij",
"author_login": "atldays",
"committed_at": "2026-04-09T14:58:27Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "8b9d49c9b34b12ec9881ff35cb3150020b399cf9",
"body": "- Introduce `LockManager` for atomic storage updates, leveraging the Web Locks API.\n- Enhance storage operations with lock options for `update`, `remove`, and `clear`.\n- Expand test coverage to include concurrency handling and custom locks implementation.",
"is_bot": false,
"headline": "feat: add LockManager to serialize concurrent operations",
"author_name": "Anjey Tsibylskij",
"author_login": "atldays",
"committed_at": "2026-04-09T14:34:56Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "6c14915479614103d9883dc5464e1b51360af50e",
"body": null,
"is_bot": false,
"headline": "ci(husky): update pre-commit hook to handle partially staged files",
"author_name": "Anjey Tsibylskij",
"author_login": "atldays",
"committed_at": "2026-04-09T13:03:23Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b54040536c7e13597e708d7dd1c42988d5320a94",
"body": null,
"is_bot": false,
"headline": "fix(release): specify npm registry in release-it config",
"author_name": "Anjey Tsibylskij",
"author_login": "atldays",
"committed_at": "2026-01-17T21:04:33Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f62686eb9bb00101a01f2549af4647f92bbb5da5",
"body": null,
"is_bot": false,
"headline": "ci(release): update release workflow, Node version, and npm config",
"author_name": "Anjey Tsibylskij",
"author_login": "atldays",
"committed_at": "2026-01-17T14:44:45Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4ee7b34e470a92b49f3cd0b01a9bf87e84799adf",
"body": "- Adjusted `.release-it.cjs` to include an icon for the \"test\" label.\n- Updated `jest.config.ts` to enforce consistent spacing within objects.\n- Added `.mailmap` file to consolidate and standardize author email aliases.",
"is_bot": false,
"headline": "chore: update formatting, mailmap, and test label icon",
"author_name": "Addon Stack",
"author_login": null,
"committed_at": "2026-01-17T14:41:19Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "3e1cc0f03761b7c081b6c9579b99a659c6315186",
"body": null,
"is_bot": true,
"headline": "Merge main into develop",
"author_name": "github-actions[bot]",
"author_login": "github-actions[bot]",
"committed_at": "2025-10-07T14:42:36Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0b943e0207c6dfcf91da176090abae7b0a72e7c8",
"body": null,
"is_bot": true,
"headline": "chore(release): v0.4.0",
"author_name": "github-actions[bot]",
"author_login": "github-actions[bot]",
"committed_at": "2025-10-07T14:42:33Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "6ca96eeb1285fb32a03862ff66887771a96d0acb",
"body": null,
"is_bot": false,
"headline": "chore: merge pull request #9 from addon-stack/develop",
"author_name": "Addon Stack",
"author_login": "addon-owner",
"committed_at": "2025-10-07T14:38:46Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "aa79667541fb440e1f1ebf45a24c06e650001e77",
"body": "- Expanded peer dependency details in README (including @types/react-dom).\n- Updated descriptions for `watch()` callbacks and `getAll()` behavior.\n- Clarified SecureStorage key formatting for namespaced storage.\n- Improved MonoStorage `watch()` explanation with deep comparison info.\n- Revised CONTRIBUTING.md to align with a Simplified GitFlow model.\n- Removed references to `release/*` and `hotfix/*` branches in release process.",
"is_bot": false,
"headline": "docs: update README and CONTRIBUTING guidelines for clarity",
"author_name": "Addon Stack",
"author_login": null,
"committed_at": "2025-10-07T14:36:57Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "fa3bbaad4f913d3b42365239694023442831ac38",
"body": "…e/browser\n\n- Updated `@addon-core/browser` to v0.2.1, replacing `@adnbn/browser`.\n- Bumped multiple Jest-related dependencies to v30.2.0 for consistency.\n- Included new transitive dependency `signal-exit` v4.1.0.",
"is_bot": false,
"headline": "chore: update dependencies and replace @adnbn/browser with @addon-cor…",
"author_name": "Addon Stack",
"author_login": null,
"committed_at": "2025-10-07T14:12:45Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a39f5d4a4d13254e94724608161d2b8edcb8f927",
"body": "- Consolidated `release-prepare.yml` and `release-publish.yml` into a single `release.yml`.\n- Streamlined CI with dynamic matrix computation for better flexibility and coverage.\n- Updated `.release-it.cjs` with enhanced contributor logic and changelog formatting.\n- Introduced `.gitattributes` to enforce consistent line endings across the repo.\n- Improved biome configuration to exclude coverage and dist directories.",
"is_bot": false,
"headline": "ci: replace release workflows with unified release pipeline",
"author_name": "Addon Stack",
"author_login": null,
"committed_at": "2025-10-07T13:42:45Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d2a5e43fcfa8100d6dee954293c4f2ec596f9846",
"body": "- Removed custom `shallowEqual` method in favor of using `dequal` for better accuracy.\n- Updated `MonoStorage` logic to apply deep equality checks with imported `dequal`.\n- Adjusted `.gitignore` with additional entries for environment and build artifacts.\n- Updated `package-lock.json` with `dequal` dependency and removed unused modules.",
"is_bot": false,
"headline": "refactor: replace shallowEqual with `dequal` for deep equality checks",
"author_name": "Addon Stack",
"author_login": null,
"committed_at": "2025-10-07T13:25:07Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "97e45572da416e9d04619db1b5715a2ecf2595d8",
"body": "- Updated `watch` to include key-specific callbacks and pass key names to global callbacks.\n- Refactored `StorageWatchOptions` into separate callback types for consistency.\n- Adjusted tests to validate key-specific callback behavior and new parameters.\n- Improved error handling in `AbstractStorage` for unhandled key changes.",
"is_bot": false,
"headline": "feat: enhance watch callbacks with key differentiation",
"author_name": "Addon Stack",
"author_login": null,
"committed_at": "2025-10-07T12:45:33Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "11e752d8a735b9566abf6a4b3a3ed7c505ca78cd",
"body": null,
"is_bot": false,
"headline": "Merge branch 'main' into develop",
"author_name": "Addon Stack",
"author_login": "addon-owner",
"committed_at": "2025-09-26T11:56:34Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0ebf00b488173555f07e199885b075f1f39e1734",
"body": null,
"is_bot": true,
"headline": "chore(release): v0.3.6 [skip ci]",
"author_name": "github-actions[bot]",
"author_login": "github-actions[bot]",
"committed_at": "2025-09-26T11:36:01Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "72bd2b06aa1da59de241199472542c1948e24757",
"body": null,
"is_bot": false,
"headline": "chore: merge conflict",
"author_name": "Addon Stack",
"author_login": "addon-owner",
"committed_at": "2025-09-26T11:33:57Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a7c5c81c6850b90e9b84a0cd92966c928978d36c",
"body": null,
"is_bot": true,
"headline": "chore(release): v0.3.5 [skip ci]",
"author_name": "github-actions[bot]",
"author_login": "github-actions[bot]",
"committed_at": "2025-09-26T11:28:39Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c22a4267fc2044d4a99afce8adce9979bc72a089",
"body": "- Introduced SECURITY.md outlining supported versions,\n reporting vulnerabilities, and coordinated disclosure practices.\n- Added CONTRIBUTING.md with detailed instructions for contributing,\n branch workflow, commit conventions, release process, and testing.",
"is_bot": false,
"headline": "docs: add SECURITY.md and CONTRIBUTING.md guidelines",
"author_name": "Addon Stack",
"author_login": "addon-owner",
"committed_at": "2025-09-26T11:26:46Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ca3d7dd39a6d8704dd89355b2855671d8606938c",
"body": "- Rewrote README with detailed library features and API examples.\n- Added installation instructions using popular package managers.\n- Included React adapter examples for integration with functional components.\n- Updated badges and clarified secure storage recommendations.\n- Provided practical tips for best practices when using the library.",
"is_bot": false,
"headline": "docs: update README with improved usage examples and descriptions",
"author_name": "Addon Stack",
"author_login": "addon-owner",
"committed_at": "2025-09-26T11:18:53Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1ce0a4d19dbba5c7a04806f6d683506970f44ceb",
"body": "- Updated configuration to hide `docs`, `build`, and `chore` sections in changelogs.\n- Removed `chore` and `build` from patch types for version bump logic.\n- Added `releaseName` field in GitHub releases for better naming consistency.",
"is_bot": false,
"headline": "refactor: update release-it config to hide unused sections",
"author_name": "Addon Stack",
"author_login": "addon-owner",
"committed_at": "2025-09-26T11:17:38Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ae54a77e7a603c8b842d2b2771bd847532e508f9",
"body": null,
"is_bot": false,
"headline": "refactor: update release-it configuration for better npm publish",
"author_name": "Addon Stack",
"author_login": "addon-owner",
"committed_at": "2025-09-25T21:55:53Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "bb472826df779c49eb879d4346a8c98e90e90dfe",
"body": null,
"is_bot": true,
"headline": "chore(release): v0.3.5 [skip ci]",
"author_name": "github-actions[bot]",
"author_login": "github-actions[bot]",
"committed_at": "2025-09-25T21:44:01Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "8081da5c60cad5e44098b8644d93b45b263597ae",
"body": null,
"is_bot": false,
"headline": "Merge branch 'main' into develop",
"author_name": "Addon Stack",
"author_login": "addon-owner",
"committed_at": "2025-09-25T21:41:54Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b0649c9859efc98c935576ab11d71e3c37b6ccc2",
"body": null,
"is_bot": false,
"headline": "fix(conflict): merge branch",
"author_name": "Addon Stack",
"author_login": "addon-owner",
"committed_at": "2025-09-25T21:41:37Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "7b9bf6d0211bbf0703a159489a631eeaa8d5cd2e",
"body": null,
"is_bot": true,
"headline": "chore(release): v0.3.4 [skip ci]",
"author_name": "github-actions[bot]",
"author_login": "github-actions[bot]",
"committed_at": "2025-09-25T21:36:13Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "92bfca48d19c2dcbaa9b08c022f1e8b5d34b0a16",
"body": "- Deleted the `releaseName` field under the GitHub section as it is not used.\n- Simplifies the configuration for release management.",
"is_bot": false,
"headline": "fix(release-it): remove redundant `releaseName` field from config",
"author_name": "Addon Stack",
"author_login": "addon-owner",
"committed_at": "2025-09-25T21:34:47Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "092cb7f8356373cf780c29d53271f4e21a5ad43a",
"body": null,
"is_bot": true,
"headline": "chore(release): v0.3.4 [skip ci]",
"author_name": "github-actions[bot]",
"author_login": "github-actions[bot]",
"committed_at": "2025-09-25T21:24:59Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2fca2d137c10aac28e236634fe14a78bc7d7eb13",
"body": null,
"is_bot": false,
"headline": "Merge branch 'main' into develop",
"author_name": "Addon Stack",
"author_login": "addon-owner",
"committed_at": "2025-09-25T21:22:24Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2a2e1c2171f6f7459f10a35e5b2cd3f235c2e78c",
"body": null,
"is_bot": false,
"headline": "Merge branch 'hotfix/publish-workflow'",
"author_name": "Addon Stack",
"author_login": "addon-owner",
"committed_at": "2025-09-25T21:20:29Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2abab3a1d58d7ef86d54d794e9b128efbe24d0c9",
"body": null,
"is_bot": true,
"headline": "chore(release): v0.3.3 [skip ci]",
"author_name": "github-actions[bot]",
"author_login": "github-actions[bot]",
"committed_at": "2025-09-25T21:18:52Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "af1858453d8459f8ffd7245d7468a20b95a7adfe",
"body": "- Added Git user configuration step in `release-publish.yml` for commits made by workflows.\n- Enabled `hotfix/**` branch triggering in `release-prepare.yml` for flexible hotfix management.",
"is_bot": false,
"headline": "ci: update workflows for release preparation and publishing",
"author_name": "Addon Stack",
"author_login": "addon-owner",
"committed_at": "2025-09-25T21:17:36Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2ac503c716c5d1221caa6b7525c86a489ba0033c",
"body": null,
"is_bot": false,
"headline": "Merge branch 'main' into develop",
"author_name": "Addon Stack",
"author_login": "addon-owner",
"committed_at": "2025-09-25T21:05:14Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "455f11c46524e5168aff9a136e91e2a7a8c70c29",
"body": null,
"is_bot": false,
"headline": "Merge branch 'release/next'",
"author_name": "Addon Stack",
"author_login": "addon-owner",
"committed_at": "2025-09-25T21:05:13Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "dd442eb4953304fdf0498c6e2bd4a50765f116d7",
"body": null,
"is_bot": true,
"headline": "chore(release): v0.3.2 [skip ci]",
"author_name": "github-actions[bot]",
"author_login": "github-actions[bot]",
"committed_at": "2025-09-25T21:02:50Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "85da77d8ed7259920651f1d9099245a95edbb727",
"body": "- Added `name` and `needs: ci` fields in `release-publish.yml` and `release-prepare.yml`.\n- Removed redundant `npm run build` step from `release-publish.yml`.\n- Cleaned up unused dependencies from `package-lock.json` for better maintenance.",
"is_bot": false,
"headline": "ci: update workflows for release management and clean up dependencies",
"author_name": "Addon Stack",
"author_login": "addon-owner",
"committed_at": "2025-09-25T21:01:34Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "009ec1ff2dd3e9d23e6c6019b01934b07f98622b",
"body": "- Introduced a reusable `ci` job in `release-publish.yml` and `release-prepare.yml` workflows.\n- Updated `npm ci` to `npm install` for dependency installation in both workflows.",
"is_bot": false,
"headline": "ci: add CI job and update npm install commands",
"author_name": "Addon Stack",
"author_login": "addon-owner",
"committed_at": "2025-09-25T20:52:33Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "87685bebac88484192b55ce57d4c277429f07501",
"body": null,
"is_bot": false,
"headline": "Merge branch 'feature/release-it' into develop",
"author_name": "Addon Stack",
"author_login": "addon-owner",
"committed_at": "2025-09-25T20:39:39Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "699854d787f23fe14ffde3d11d2cd89cf4befa67",
"body": "…ling",
"is_bot": false,
"headline": "chore: update configurations for formatting consistency and file hand…",
"author_name": "Addon Stack",
"author_login": "addon-owner",
"committed_at": "2025-09-25T20:37:12Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a8d52937443d61a92669d6908344a7f6996a50f2",
"body": null,
"is_bot": false,
"headline": "fix(release-it): update templates for consistent formatting and naming",
"author_name": "Addon Stack",
"author_login": "addon-owner",
"committed_at": "2025-09-25T20:28:04Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "af14a46768cdf91c6938e141448250fa8db99bc7",
"body": null,
"is_bot": false,
"headline": "fix(release-it): add shorthash fallback and adjust release name format",
"author_name": "Addon Stack",
"author_login": "addon-owner",
"committed_at": "2025-09-25T20:20:46Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5835e6857f46fa2f055b97682f135e4f85c1f6ea",
"body": null,
"is_bot": false,
"headline": "chore(release-it): add repoUrl for commit links in changelogs",
"author_name": "Addon Stack",
"author_login": "addon-owner",
"committed_at": "2025-09-25T20:15:52Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "034ea8ab24d008241e4908b2e914ccb7ab72b8b9",
"body": "…ump logic\n\n- Made \"chore\" commits visible in changelogs, aligning with structured release notes.\n- Enhanced `recommendedBumpOpts` to classify commit types and prioritize breaking changes.\n- Improved `writerOpts` templates for consistent formatting with fallback handling.\n- Adjusted `file` rules in `biome.json` for expanded file type handling in source and tests.",
"is_bot": false,
"headline": "chore(release-it): refine configuration for enhanced changelogs and b…",
"author_name": "Addon Stack",
"author_login": "addon-owner",
"committed_at": "2025-09-25T20:06:33Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "6b697bea35dc4ef1ee22e0150da009eda4300ccf",
"body": null,
"is_bot": false,
"headline": "fix(release-it): use `Map.get` for type lookup in commit transformation",
"author_name": "Addon Stack",
"author_login": "addon-owner",
"committed_at": "2025-09-25T18:09:37Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d11d849daaca350d667b7f8a91f1eec44a2fa368",
"body": "…ocessing\n\n- Refactored type definitions into a shared `types` array with additional metadata.\n- Introduced `typesMap` for better type lookup and handling during commit transformation.\n- Updated `context` to reuse parsed package information from `package.json`.\n- Enhanced `transform` to filter out hidden commit types and reformat body content.\n- Adjusted sorting and templates for structured and consistent release notes generation.",
"is_bot": false,
"headline": "chore(release-it): refactor types configuration and enhance commit pr…",
"author_name": "Addon Stack",
"author_login": "addon-owner",
"committed_at": "2025-09-25T18:03:48Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "405a9473ce543c5f7af15d26438eefba7aae132c",
"body": "- Added `context` to include package name in changelog and header templates.\n- Updated `headerPartial` and introduced `mainTemplate` for improved formatting.\n- Refined `commitPartial` to ensure proper handling of commit details.\n- Simplified npm and GitHub release configurations for consistency.",
"is_bot": false,
"headline": "chore(release-it): enhance configuration for structured release notes",
"author_name": "Addon Stack",
"author_login": "addon-owner",
"committed_at": "2025-09-25T16:57:08Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "157a07ba454bd29d0cd5f2460774aa2209f229e9",
"body": "- Removed all semantic-release-related configurations and workflows.\n- Added release-it configurations for preview and publish workflows.\n- Updated package dependencies to replace semantic-release with release-it.",
"is_bot": false,
"headline": "fix(ci): migrate from semantic-release to release-it",
"author_name": "Addon Stack",
"author_login": "addon-owner",
"committed_at": "2025-09-25T16:44:49Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "7913a4399b0938b0b2d7a7a30e2a49bc51bcbf22",
"body": null,
"is_bot": false,
"headline": "Merge remote-tracking branch 'origin/develop' into develop",
"author_name": "Addon Stack",
"author_login": "addon-owner",
"committed_at": "2025-09-25T15:31:57Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "dd2906e27b9388492da1dd2852f652f5f24fd7b9",
"body": null,
"is_bot": true,
"headline": "",
"author_name": "github-actions[bot]",
"author_login": "github-actions[bot]",
"committed_at": "2025-09-24T20:57:10Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1c359db9f82db25bc2d9c32282d52f74c736dc93",
"body": null,
"is_bot": false,
"headline": "chore(release): 0.3.1",
"author_name": "semantic-release-bot",
"author_login": "semantic-release-bot",
"committed_at": "2025-09-24T20:56:40Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5ca122e1817b7e85e7f197605b8904ecdd6e5d4c",
"body": null,
"is_bot": false,
"headline": "Merge branch 'main' into develop",
"author_name": "Addon Stack",
"author_login": "addon-owner",
"committed_at": "2025-09-24T20:54:20Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c9847550ea8c9324a88f2dd3be768b0d26365554",
"body": null,
"is_bot": false,
"headline": "Merge branch 'release/next'",
"author_name": "Addon Stack",
"author_login": "addon-owner",
"committed_at": "2025-09-24T20:54:19Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b8b0865da5b0c2098aceed0e983e79977d909f6d",
"body": "- Uncommented and refined `writerOpts` in `shared.cjs` for structured release notes.\n- Enhanced `commitPartial` to properly handle `subject` fallback and `body` rendering.\n- Restored and fine-tuned sorting for `type`, `scope`, and `subject` fields.",
"is_bot": false,
"headline": "chore: re-enable and refine writerOpts for release configuration",
"author_name": "Addon Stack",
"author_login": "addon-owner",
"committed_at": "2025-09-24T20:49:46Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5c8b59c75f7c11054c5b4c043249496d215e6abc",
"body": "- Temporarily disabled `writerOpts` block by commenting it out in `shared.cjs`.\n- Ensures configuration is bypassed while retaining the original logic for reference.",
"is_bot": false,
"headline": "chore(shared.cjs): comment out writerOpts in release configuration",
"author_name": "Addon Stack",
"author_login": "addon-owner",
"committed_at": "2025-09-24T18:58:07Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1d86de1aaa9ca544183dae2bec303ee18883fe90",
"body": "- Updated `commitPartial` in `shared.cjs` to include `type` and `scope` formatting enhancements.\n- Enabled grouping of commits by `type` with sorting on `scope` and `subject`.\n- Adjusted `commitGroupsSort` and `commitsSort` for better structured release notes.",
"is_bot": false,
"headline": "fix(ci): improve commitPartial and release notes grouping logic",
"author_name": "Addon Stack",
"author_login": "addon-owner",
"committed_at": "2025-09-24T18:48:22Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "9f6149d44f1d02621d79eed237c3b16e6e47f44e",
"body": "- Updated `committed.cjs` to remove release notes from commit message template.\n- Improved `shared.cjs` by adjusting `commitPartial` to use headers for better readability.\n- Added `headerPartial` to include version information in generated release notes.",
"is_bot": false,
"headline": "fix(ci): streamline release messaging and enhance template structure",
"author_name": "Addon Stack",
"author_login": "addon-owner",
"committed_at": "2025-09-24T16:10:11Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "6db8f736c471b75958ecfc183f6016034e27d60e",
"body": "- Updated `release-sync.yml` to use `devmasx/merge-branch@master` for branch syncing.\n- Migrated workflow syntax to use `from_branch` and `target_branch` for clarity.\n- Improved `commitPartial` in `shared.cjs` by adjusting templates and ensuring better alignment.\n- Enabled `hidden` attribute for all Semantic Release type presets.",
"is_bot": false,
"headline": "fix(ci): update release-sync workflow and enhance commitPartial",
"author_name": "Addon Stack",
"author_login": "addon-owner",
"committed_at": "2025-09-24T15:49:04Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5d73fb07414c91f4cfd20918dd455a7e458d0131",
"body": "## 0.3.0 (2025-09-24)\n\n**ci:** add workflow to sync main into develop upon release\n\n- Introduced `release-sync.yml` to automatically merge `main` into `develop` post-release.\n- Utilizes `tibdex/merge-branch@v3` to handle the branch sync process.\n- Triggers on successful completion of the `Release Pu\n[…]\ntype` is present.\nadd keywords, author, and contributors metadata\n\n- Added `keywords` for improved discoverability of the package.\n- Included `author` and `contributors` fields for better attribution.",
"is_bot": false,
"headline": "chore(release): 0.3.0",
"author_name": "semantic-release-bot",
"author_login": "semantic-release-bot",
"committed_at": "2025-09-24T15:27:34Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "fc88ee3d00d098844b97f5e467dc7a47e81f6a73",
"body": null,
"is_bot": false,
"headline": "Merge branch 'main' into develop",
"author_name": "Addon Stack",
"author_login": "addon-owner",
"committed_at": "2025-09-24T15:25:16Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1f6cbeefcdf4f394b0b18c259b76fc77d227b515",
"body": null,
"is_bot": false,
"headline": "Merge branch 'release/next'",
"author_name": "Addon Stack",
"author_login": "addon-owner",
"committed_at": "2025-09-24T15:25:15Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5dde8f8160c94c9e5c4d8992426dcc51521766c1",
"body": "- Introduced `release-sync.yml` to automatically merge `main` into `develop` post-release.\n- Utilizes `tibdex/merge-branch@v3` to handle the branch sync process.\n- Triggers on successful completion of the `Release Publish` workflow.",
"is_bot": false,
"headline": "fix(ci): add workflow to sync main into develop upon release",
"author_name": "Addon Stack",
"author_login": "addon-owner",
"committed_at": "2025-09-24T15:22:10Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0e2a404a40f09a014457e335f2dd27f095fb63ee",
"body": "- Added `keywords` for improved discoverability of the package.\n- Included `author` and `contributors` fields for better attribution.",
"is_bot": false,
"headline": "feat: add keywords, author, and contributors metadata",
"author_name": "Addon Stack",
"author_login": "addon-owner",
"committed_at": "2025-09-24T12:11:57Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d882539a09f9368d964ef61558e567040fd25878",
"body": "- Updated `commitPartial` template in `shared.cjs` to include a type check.\n- Ensures release notes are generated only if a valid `type` is present.",
"is_bot": false,
"headline": "fix(ci): enhance commitPartial to properly handle type and scope checks",
"author_name": "Addon Stack",
"author_login": "addon-owner",
"committed_at": "2025-09-24T10:41:46Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "47abc184c0c76570ef2625ce958155f45bda3f38",
"body": "## <small>0.2.3 (2025-09-23)</small>\n\nMerge branch 'main' into develop\n\nMerge branch 'release/next'\n\nMerge remote-tracking branch 'origin/main'\n\nstandardize indentation and adjust lint-staged configuration\n\n- Updated indentation in all Semantic Release config files for consistency.\n- Standardized im\n[…]\njs` indentation for consistency.\n- Added `esbuild-fix-imports-plugin` and `tsup` to `devDependencies` for improved module bundling.\n- Updated import in `useStorage.ts` to reflect proper module export.",
"is_bot": false,
"headline": "chore(release): 0.2.3",
"author_name": "semantic-release-bot",
"author_login": "semantic-release-bot",
"committed_at": "2025-09-23T21:48:43Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "92a2812cb8cb618011fcefb8d2105179f47451b8",
"body": null,
"is_bot": false,
"headline": "Merge remote-tracking branch 'origin/main'",
"author_name": "Addon Stack",
"author_login": "addon-owner",
"committed_at": "2025-09-23T21:46:00Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "9a852d6c1ef23e57a34075f8a75f07d2ab41f29c",
"body": null,
"is_bot": false,
"headline": "Merge branch 'main' into develop",
"author_name": "Addon Stack",
"author_login": "addon-owner",
"committed_at": "2025-09-23T21:45:26Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a21d90ecae60128d4ca9602a02b73194a670b07b",
"body": null,
"is_bot": false,
"headline": "Merge branch 'release/next'",
"author_name": "Addon Stack",
"author_login": "addon-owner",
"committed_at": "2025-09-23T21:45:25Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "098c514f2936135ed9b75923e12bed8927dfad86",
"body": "- Updated indentation in all Semantic Release config files for consistency.\n- Standardized import format for `commonPlugins` across configs.\n- Enhanced `lint-staged` and `biome.json` to include `.cjs` and `.mjs` file formats.",
"is_bot": false,
"headline": "style: standardize indentation and adjust lint-staged configuration",
"author_name": "Addon Stack",
"author_login": "addon-owner",
"committed_at": "2025-09-23T21:42:05Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e46429606fb048825eef89debf246685f4591e2f",
"body": "- Moved release configs to `release` directory for better organization.\n- Split shared plugins into `shared.cjs` for reduced duplication across configs.\n- Updated `release-publish.yml` and `release-prepare.yml` to reference new config paths.\n- Removed outdated `semantic-release.config.cjs` and `semantic-release.preview.cjs`.\n- Excluded `src/types.ts` from the build entrypoint in `tsup.config.ts`.",
"is_bot": false,
"headline": "refactor: restructure Semantic Release configs and update workflows",
"author_name": "Addon Stack",
"author_login": "addon-owner",
"committed_at": "2025-09-23T21:38:45Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "60a5778ba47ad90c3926b4cb80e8153fe6ad3e5d",
"body": "- Replaced `@rslib/core` build config with `tsup` for a streamlined setup.\n- Removed `.changeset` directory and `rslib.config.ts` as part of build tool migration.\n- Updated `semantic-release.preview.cjs` indentation for consistency.\n- Added `esbuild-fix-imports-plugin` and `tsup` to `devDependencies` for improved module bundling.\n- Updated import in `useStorage.ts` to reflect proper module export.",
"is_bot": false,
"headline": "chore: migrate build tooling to `tsup` and update dependencies",
"author_name": "Addon Stack",
"author_login": "addon-owner",
"committed_at": "2025-09-23T20:54:08Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0666d23506c3d129eb77aa0de6b0ad6b4233905d",
"body": "## [0.2.2](https://github.com/addon-stack/storage/compare/v0.2.1...v0.2.2) (2025-09-23)\n\n### Bug Fixes\n\n* remove unused `--debug` flag from Semantic Release dry run ([9108ff3](https://github.com/addon-stack/storage/commit/9108ff3e5a257053a8f4c969d308e44714b20dec))",
"is_bot": false,
"headline": "chore(release): 0.2.2 [skip ci]",
"author_name": "semantic-release-bot",
"author_login": "semantic-release-bot",
"committed_at": "2025-09-23T14:17:49Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d24b16fc7bc0de97e500e2dd0be93482d613a98f",
"body": null,
"is_bot": false,
"headline": "Merge branch 'release/next'",
"author_name": "Addon Stack",
"author_login": "addon-owner",
"committed_at": "2025-09-23T14:14:58Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e93a803dd8b4bff9efaf0e09a3fbda2e451efccc",
"body": null,
"is_bot": false,
"headline": "Merge branch 'main' into develop",
"author_name": "Addon Stack",
"author_login": "addon-owner",
"committed_at": "2025-09-23T14:14:58Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "9108ff3e5a257053a8f4c969d308e44714b20dec",
"body": "- Updated `release-prepare.yml` to drop the redundant `--debug` flag.\n- Simplifies command usage while maintaining the existing preview configuration.",
"is_bot": false,
"headline": "fix: remove unused `--debug` flag from Semantic Release dry run",
"author_name": "Addon Stack",
"author_login": "addon-owner",
"committed_at": "2025-09-23T14:12:04Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0a4d60585284d48fe33987a8dd62a53c7ae7ca0d",
"body": "- Changed `--config` to `--extends` for `release-publish.yml` and `release-prepare.yml`.\n- Ensures proper usage of extended configurations in Semantic Release workflows.",
"is_bot": false,
"headline": "chore: update workflows to use `--extends` in Semantic Release commands",
"author_name": "Addon Stack",
"author_login": "addon-owner",
"committed_at": "2025-09-23T14:00:40Z",
"body_truncated": false,
"is_coding_agent": false
}
],
"releases_count": 12,
"commits_last_year": 176,
"latest_release_at": "2026-07-18T08:41:20Z",
"latest_release_tag": "v0.7.0",
"releases_from_tags": false,
"days_since_last_push": 5,
"active_weeks_last_year": 7,
"days_since_latest_release": 5,
"mean_days_between_releases": 33.1
},
"community": {
"has_readme": true,
"has_license": true,
"has_description": true,
"has_contributing": true,
"health_percentage": 75,
"has_issue_template": false,
"has_code_of_conduct": true,
"has_pull_request_template": false
},
"ecosystem": {
"packages": [
{
"name": "@addon-core/storage",
"exists": true,
"license": "MIT",
"keywords": [
"storage",
"addon",
"extension",
"browser",
"chrome",
"firefox",
"edge",
"opera",
"safari",
"react"
],
"ecosystem": "npm",
"matches_repo": true,
"registry_url": "https://www.npmjs.com/package/@addon-core/storage",
"is_deprecated": false,
"latest_version": "0.7.0",
"repository_url": "https://github.com/addon-stack/storage",
"versions_count": 18,
"total_downloads": null,
"dependents_count": null,
"deprecation_note": null,
"maintainers_count": 2,
"monthly_downloads": 2200,
"first_published_at": "2025-09-19T22:23:30.735000Z",
"latest_published_at": "2026-07-18T08:41:18.092000Z",
"latest_version_yanked": null,
"days_since_latest_publish": 5
}
]
},
"popularity": {
"forks": 0,
"stars": 2,
"watchers": 0,
"fork_history": {
"days": [],
"complete": true,
"collected": 0,
"total_forks": 0
},
"star_history": null,
"open_issues_and_prs": 0
},
"ai_readiness": {
"has_nix": false,
"example_dirs": [],
"has_llms_txt": false,
"has_dockerfile": false,
"has_mcp_signal": false,
"bootstrap_files": [],
"api_schema_files": [],
"has_devcontainer": false,
"typecheck_configs": [
"tsconfig.json"
],
"toolchain_manifests": [],
"largest_source_bytes": 49358,
"source_files_sampled": 40,
"oversized_source_files": 0,
"agent_instruction_files": [],
"agent_instruction_max_bytes": null
},
"dependencies": {
"manifests": [
"package.json"
],
"advisories": {
"error": null,
"scope": "published_package",
"source": "osv",
"findings": [],
"collected": true,
"malicious": [],
"truncated": false,
"by_severity": {},
"advisory_count": 0,
"affected_count": 0,
"assessed_count": 2,
"malicious_count": 0,
"assessed_package": "npm:@addon-core/storage@0.7.0",
"unassessed_count": 0,
"direct_affected_count": 0
},
"ecosystems": [
"npm"
],
"dependencies": [
{
"name": "@addon-core/browser",
"manifest": "package.json",
"ecosystem": "npm",
"version_constraint": "^0.5.0"
},
{
"name": "dequal",
"manifest": "package.json",
"ecosystem": "npm",
"version_constraint": "^2.0.3"
}
],
"all_dependencies": {
"error": "GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository",
"source": null,
"packages": [],
"collected": false,
"truncated": false,
"total_count": null,
"direct_count": null,
"indirect_count": null
}
},
"maintainership": {
"issues": {
"open_prs": 0,
"merged_prs": 13,
"open_issues": 0,
"closed_ratio": null,
"closed_issues": 0,
"closed_unmerged_prs": 0
},
"bus_factor": 1,
"bot_contributors": 1,
"top_contributors": [
{
"type": "User",
"login": "atldays",
"commits": 25,
"avatar_url": "https://avatars.githubusercontent.com/u/130153594?v=4"
},
{
"type": "User",
"login": "addon-owner",
"commits": 7,
"avatar_url": "https://avatars.githubusercontent.com/u/191148085?v=4"
},
{
"type": "User",
"login": "semantic-release-bot",
"commits": 4,
"avatar_url": "https://avatars.githubusercontent.com/u/32174276?v=4"
}
],
"contributors_sampled": 3,
"top_contributor_share": 0.694
},
"quality_signals": {
"has_ci": true,
"has_tests": true,
"ci_workflows": [
"ci.yml",
"release.yml"
],
"has_docs_dir": false,
"linter_configs": [
"biome.json"
],
"has_editorconfig": false,
"has_linter_config": true,
"has_precommit_config": false
},
"security_signals": {
"lockfiles": [
"package-lock.json"
],
"scorecard": {
"checks": [
{
"name": "Binary-Artifacts",
"score": 10,
"reason": "no binaries found in the repo",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#binary-artifacts"
},
{
"name": "Branch-Protection",
"score": 0,
"reason": "branch protection not enabled on development/release branches",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#branch-protection"
},
{
"name": "CI-Tests",
"score": 10,
"reason": "4 out of 4 merged PRs checked by a CI test -- score normalized to 10",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#ci-tests"
},
{
"name": "CII-Best-Practices",
"score": 0,
"reason": "no effort to earn an OpenSSF best practices badge detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#cii-best-practices"
},
{
"name": "Code-Review",
"score": 0,
"reason": "Found 0/7 approved changesets -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#code-review"
},
{
"name": "Contributors",
"score": 3,
"reason": "project has 1 contributing companies or organizations -- score normalized to 3",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#contributors"
},
{
"name": "Dangerous-Workflow",
"score": 10,
"reason": "no dangerous workflow patterns detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dangerous-workflow"
},
{
"name": "Dependency-Update-Tool",
"score": 0,
"reason": "no update tool detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dependency-update-tool"
},
{
"name": "Fuzzing",
"score": 0,
"reason": "project is not fuzzed",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#fuzzing"
},
{
"name": "License",
"score": 10,
"reason": "license file detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#license"
},
{
"name": "Maintained",
"score": 10,
"reason": "15 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#maintained"
},
{
"name": "Packaging",
"score": null,
"reason": "packaging workflow not detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#packaging"
},
{
"name": "Pinned-Dependencies",
"score": 2,
"reason": "dependency not pinned by hash detected -- score normalized to 2",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#pinned-dependencies"
},
{
"name": "SAST",
"score": 0,
"reason": "SAST tool is not run on all commits -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#sast"
},
{
"name": "Security-Policy",
"score": 10,
"reason": "security policy file detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#security-policy"
},
{
"name": "Signed-Releases",
"score": null,
"reason": "no releases found",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#signed-releases"
},
{
"name": "Token-Permissions",
"score": 0,
"reason": "detected GitHub workflow tokens with excessive permissions",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#token-permissions"
},
{
"name": "Vulnerabilities",
"score": 0,
"reason": "20 existing vulnerabilities detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#vulnerabilities"
}
],
"commit": "c117117fb02e2b373e56dd20ac65408e8942fd99",
"ran_at": "2026-07-23T16:22:18Z",
"aggregate_score": 4,
"scorecard_version": "v5.5.0"
},
"has_codeql_workflow": false,
"has_security_policy": true,
"has_dependabot_config": false
},
"contribution_flow": {
"collected": true,
"ci_last_run_at": null,
"oldest_open_prs": [],
"last_merged_pr_at": "2026-07-18T08:38:55Z",
"ci_last_conclusion": null,
"oldest_open_issues": []
}
},
"config": {
"disabled_metrics": [],
"disabled_categories": [],
"disabled_components": {}
},
"source": {
"url": "https://github.com/addon-stack/storage",
"host": "github.com",
"name": "storage",
"owner": "addon-stack"
},
"metrics": {
"overall": {
"key": "overall",
"band": "moderate",
"name": "Overall health",
"note": null,
"notes": [],
"value": 62,
"inputs": {
"security": 52,
"vitality": 81,
"community": 44,
"governance": 56,
"engineering": 70
},
"components": []
},
"categories": [
{
"key": "vitality",
"band": "good",
"name": "Vitality",
"value": 81,
"weight": 0.22,
"metrics": [
{
"key": "development_activity",
"band": "moderate",
"name": "Development activity",
"note": null,
"notes": [],
"value": 69,
"inputs": {
"commits_last_year": 176,
"human_commit_share": 0.85,
"days_since_last_push": 5,
"active_weeks_last_year": 7
},
"components": [
{
"key": "push_recency",
"name": "Push recency",
"detail": "last push 5 days ago",
"points": 36,
"status": "met",
"details": [
{
"code": "push_recency",
"params": {
"days": 5
}
}
],
"max_points": 36
},
{
"key": "commit_cadence",
"name": "Commit cadence",
"detail": "7/52 weeks with commits",
"points": 4.8,
"status": "partial",
"details": [
{
"code": "commit_cadence_weeks",
"params": {
"weeks": 7
}
}
],
"max_points": 36
},
{
"key": "commit_volume",
"name": "Commit volume",
"detail": "176 commits in the last year",
"points": 18,
"status": "met",
"details": [
{
"code": "commits_last_year",
"params": {
"count": 176
}
}
],
"max_points": 18
},
{
"key": "openssf_scorecard_maintained",
"name": "OpenSSF Scorecard: Maintained",
"detail": "15 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10",
"points": 10,
"status": "met",
"details": [],
"max_points": 10
}
]
},
{
"key": "release_discipline",
"band": "excellent",
"name": "Release discipline",
"note": "Excluded from scoring (no data or not applicable): OpenSSF Scorecard: Signed-Releases. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"openssf_scorecard_signed_releases"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 100,
"inputs": {
"releases_count": 12,
"latest_release_tag": "v0.7.0",
"releases_from_tags": false,
"days_since_latest_release": 5,
"mean_days_between_releases": 33.1
},
"components": [
{
"key": "ships_releases",
"name": "Ships releases",
"detail": "12 releases published",
"points": 27,
"status": "met",
"details": [
{
"code": "releases_published",
"params": {
"count": 12
}
}
],
"max_points": 27
},
{
"key": "release_recency",
"name": "Release recency",
"detail": "latest release 5 days ago",
"points": 36,
"status": "met",
"details": [
{
"code": "release_recency",
"params": {
"days": 5
}
}
],
"max_points": 36
},
{
"key": "release_cadence",
"name": "Release cadence",
"detail": "a release every ~33.1 days",
"points": 27,
"status": "met",
"details": [
{
"code": "release_cadence",
"params": {
"gap": 33.1
}
}
],
"max_points": 27
},
{
"key": "openssf_scorecard_signed_releases",
"name": "OpenSSF Scorecard: Signed-Releases",
"detail": "no releases found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 10
}
]
},
{
"key": "abandonment",
"band": "excellent",
"name": "Abandonment",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"cap": null,
"state": "maintained",
"guards": [],
"signals": [],
"red_flag": false,
"multiplier_pct": 100,
"declared_reason": null,
"unverified_reason": null,
"unanswered_open_prs": null,
"unanswered_open_issues": null,
"days_since_last_merged_pr": null,
"days_since_last_human_commit": 5,
"days_since_last_human_commit_is_floor": false
},
"components": [
{
"key": "project_is_still_maintained",
"name": "Project is still maintained",
"detail": "last human commit 5 days ago",
"points": 100,
"status": "met",
"details": [
{
"code": "abandonment_maintained",
"params": {
"days": 5
}
}
],
"max_points": 100
}
]
}
],
"description": "Is the project alive — is code being written and are releases shipping?"
},
{
"key": "community",
"band": "at_risk",
"name": "Community & Adoption",
"value": 44,
"weight": 0.18,
"metrics": [
{
"key": "popularity",
"band": "critical",
"name": "Popularity & adoption",
"note": null,
"notes": [],
"value": 1,
"inputs": {
"forks": 0,
"stars": 2,
"watchers": 0,
"growth_state": "unverified",
"growth_factor_pct": 100,
"growth_unverified_reason": "no_history"
},
"components": [
{
"key": "stars",
"name": "Stars",
"detail": "2 stars",
"points": 0,
"status": "missed",
"details": [
{
"code": "stars",
"params": {
"count": 2
}
}
],
"max_points": 60
},
{
"key": "forks",
"name": "Forks",
"detail": "0 forks",
"points": 0,
"status": "missed",
"details": [
{
"code": "forks",
"params": {
"count": 0
}
}
],
"max_points": 25
},
{
"key": "watchers",
"name": "Watchers",
"detail": "0 watchers",
"points": 0,
"status": "missed",
"details": [
{
"code": "watchers",
"params": {
"count": 0
}
}
],
"max_points": 15
}
]
},
{
"key": "community_health",
"band": "excellent",
"name": "Community health",
"note": null,
"notes": [],
"value": 85,
"inputs": {
"has_readme": true,
"has_license": true,
"has_contributing": true,
"has_issue_template": false,
"has_code_of_conduct": true,
"has_pull_request_template": false
},
"components": [
{
"key": "readme",
"name": "README",
"detail": null,
"points": 22.5,
"status": "met",
"details": [],
"max_points": 22.5
},
{
"key": "license",
"name": "License",
"detail": "recognized license (MIT)",
"points": 22.5,
"status": "met",
"details": [
{
"code": "license_standard",
"params": {}
},
{
"code": "license_spdx",
"params": {
"spdx": "MIT"
}
}
],
"max_points": 22.5
},
{
"key": "contributing_guide",
"name": "CONTRIBUTING guide",
"detail": null,
"points": 18,
"status": "met",
"details": [],
"max_points": 18
},
{
"key": "code_of_conduct",
"name": "Code of conduct",
"detail": null,
"points": 13.5,
"status": "met",
"details": [],
"max_points": 13.5
},
{
"key": "issue_template",
"name": "Issue template",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.2
},
{
"key": "pr_template",
"name": "PR template",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 6.3
}
]
},
{
"key": "ecosystem_adoption",
"band": "moderate",
"name": "Ecosystem adoption (downloads)",
"note": "Excluded from scoring (no data or not applicable): Registry dependents. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"registry_dependents"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 56,
"inputs": {
"packages": [
"@addon-core/storage"
],
"dependents": null,
"ecosystems": "npm",
"total_downloads": null,
"monthly_downloads": 2200
},
"components": [
{
"key": "monthly_downloads",
"name": "Monthly downloads",
"detail": "2,200 downloads/month across npm",
"points": 44.6,
"status": "partial",
"details": [
{
"code": "downloads_monthly",
"params": {
"count": 2200,
"ecosystems": "npm"
}
}
],
"max_points": 80
},
{
"key": "registry_dependents",
"name": "Registry dependents",
"detail": "not reported by this ecosystem",
"points": 0,
"status": "excluded",
"details": [
{
"code": "not_reported_by_this_ecosystem",
"params": {}
}
],
"max_points": 20
}
]
}
],
"description": "Does the project have users, downloads, attention, and a welcoming setup for contributors?"
},
{
"key": "governance",
"band": "moderate",
"name": "Sustainability & Governance",
"value": 56,
"weight": 0.24,
"metrics": [
{
"key": "maintainer_resilience",
"band": "critical",
"name": "Maintainer resilience (bus factor)",
"note": null,
"notes": [],
"value": 23,
"inputs": {
"bus_factor": 1,
"contributors_sampled": 3,
"top_contributor_share": 0.694
},
"components": [
{
"key": "bus_factor",
"name": "Bus factor",
"detail": "1 contributor(s) cover half of all commits",
"points": 9,
"status": "partial",
"details": [
{
"code": "bus_factor",
"params": {
"count": 1
}
}
],
"max_points": 54
},
{
"key": "commit_distribution",
"name": "Commit distribution",
"detail": "top contributor authored 69% of commits",
"points": 6.9,
"status": "partial",
"details": [
{
"code": "top_contributor_share",
"params": {
"share": 69
}
}
],
"max_points": 22.5
},
{
"key": "contributor_breadth",
"name": "Contributor breadth",
"detail": "3 contributors",
"points": 4.1,
"status": "partial",
"details": [
{
"code": "contributors_sampled",
"params": {
"count": 3
}
}
],
"max_points": 13.5
},
{
"key": "openssf_scorecard_contributors",
"name": "OpenSSF Scorecard: Contributors",
"detail": "project has 1 contributing companies or organizations -- score normalized to 3",
"points": 3,
"status": "partial",
"details": [],
"max_points": 10
}
]
},
{
"key": "responsiveness",
"band": "good",
"name": "Issue & PR responsiveness",
"note": "Excluded from scoring (no data or not applicable): Issue resolution. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"issue_resolution"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 72,
"inputs": {
"merged_prs": 13,
"open_issues": 0,
"closed_issues": 0,
"issue_closed_ratio": null,
"closed_unmerged_prs": 0
},
"components": [
{
"key": "issue_resolution",
"name": "Issue resolution",
"detail": "no issues or no data",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_issues_or_data",
"params": {}
}
],
"max_points": 46.75
},
{
"key": "pr_acceptance",
"name": "PR acceptance",
"detail": "13/13 decided PRs merged",
"points": 38.2,
"status": "met",
"details": [
{
"code": "decided_prs_merged",
"params": {
"merged": 13,
"decided": 13
}
}
],
"max_points": 38.25
},
{
"key": "openssf_scorecard_code_review",
"name": "OpenSSF Scorecard: Code-Review",
"detail": "Found 0/7 approved changesets -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
}
]
},
{
"key": "stewardship",
"band": "at_risk",
"name": "Ownership & stewardship",
"note": null,
"notes": [],
"value": 45,
"inputs": {
"followers": 7,
"owner_type": "Organization",
"is_verified": null,
"owner_login": "addon-stack",
"public_repos": 12,
"account_age_days": 148
},
"components": [
{
"key": "ownership_backing",
"name": "Ownership backing",
"detail": "organization-owned",
"points": 30,
"status": "met",
"details": [
{
"code": "owner_organization",
"params": {}
}
],
"max_points": 30
},
{
"key": "verified_domain",
"name": "Verified domain",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 20
},
{
"key": "owner_reach",
"name": "Owner reach",
"detail": "7 followers of addon-stack",
"points": 6.5,
"status": "partial",
"details": [
{
"code": "owner_followers",
"params": {
"count": 7,
"login": "addon-stack"
}
}
],
"max_points": 25
},
{
"key": "track_record",
"name": "Track record",
"detail": "12 public repos, account ~0 yr old",
"points": 8.9,
"status": "partial",
"details": [
{
"code": "public_repos",
"params": {
"count": 12
}
},
{
"code": "account_age_years",
"params": {
"years": 0
}
}
],
"max_points": 25
}
]
},
{
"key": "package_maintenance",
"band": "excellent",
"name": "Package maintenance",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"packages": [
"@addon-core/storage"
],
"ecosystems": "npm",
"any_deprecated": false,
"min_days_since_publish": 5
},
"components": [
{
"key": "published_resolvable",
"name": "Published & resolvable",
"detail": "1 package(s) on npm",
"points": 25,
"status": "met",
"details": [
{
"code": "packages_published",
"params": {
"count": 1,
"ecosystems": "npm"
}
}
],
"max_points": 25
},
{
"key": "publish_recency",
"name": "Publish recency",
"detail": "latest publish 5 days ago",
"points": 35,
"status": "met",
"details": [
{
"code": "publish_recency",
"params": {
"days": 5
}
}
],
"max_points": 35
},
{
"key": "version_history",
"name": "Version history",
"detail": "18 published versions",
"points": 20,
"status": "met",
"details": [
{
"code": "published_versions",
"params": {
"count": 18
}
}
],
"max_points": 20
},
{
"key": "not_deprecated",
"name": "Not deprecated",
"detail": "active, not deprecated or yanked",
"points": 20,
"status": "met",
"details": [
{
"code": "package_not_deprecated",
"params": {}
}
],
"max_points": 20
}
]
}
],
"description": "Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?"
},
{
"key": "engineering",
"band": "good",
"name": "Engineering Quality",
"value": 70,
"weight": 0.2,
"metrics": [
{
"key": "engineering_practices",
"band": "good",
"name": "Engineering practices",
"note": null,
"notes": [],
"value": 84,
"inputs": {
"has_ci": true,
"has_tests": true,
"has_editorconfig": false,
"has_linter_config": true,
"has_precommit_config": false
},
"components": [
{
"key": "ci_workflows",
"name": "CI workflows",
"detail": "2 workflow(s)",
"points": 24,
"status": "met",
"details": [
{
"code": "ci_workflows",
"params": {
"count": 2
}
}
],
"max_points": 24
},
{
"key": "tests_present",
"name": "Tests present",
"detail": null,
"points": 24,
"status": "met",
"details": [],
"max_points": 24
},
{
"key": "linter_config",
"name": "Linter config",
"detail": "biome.json",
"points": 16,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "biome.json"
}
}
],
"max_points": 16
},
{
"key": "pre_commit_hooks",
"name": "Pre-commit hooks",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 9.6
},
{
"key": "editorconfig",
"name": ".editorconfig",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 6.4
},
{
"key": "openssf_scorecard_ci_tests",
"name": "OpenSSF Scorecard: CI-Tests",
"detail": "4 out of 4 merged PRs checked by a CI test -- score normalized to 10",
"points": 20,
"status": "met",
"details": [],
"max_points": 20
}
]
},
{
"key": "documentation",
"band": "moderate",
"name": "Documentation",
"note": null,
"notes": [],
"value": 50,
"inputs": {
"topics": [
"browser-extension",
"chrome",
"chrome-extension",
"react",
"storage"
],
"has_wiki": false,
"homepage": null,
"has_readme": true,
"has_docs_dir": false,
"has_description": true
},
"components": [
{
"key": "readme",
"name": "README",
"detail": null,
"points": 30,
"status": "met",
"details": [],
"max_points": 30
},
{
"key": "documentation_directory",
"name": "Documentation directory",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 25
},
{
"key": "documentation_homepage_site",
"name": "Documentation / homepage site",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
},
{
"key": "repository_description",
"name": "Repository description",
"detail": null,
"points": 10,
"status": "met",
"details": [],
"max_points": 10
},
{
"key": "topics",
"name": "Topics",
"detail": "5 topics",
"points": 10,
"status": "met",
"details": [
{
"code": "topics_count",
"params": {
"count": 5
}
}
],
"max_points": 10
},
{
"key": "wiki",
"name": "Wiki",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
}
]
}
],
"description": "Are baseline engineering and documentation practices in place?"
},
{
"key": "security",
"band": "moderate",
"name": "Security",
"value": 52,
"weight": 0.16,
"metrics": [
{
"key": "security_posture",
"band": "at_risk",
"name": "Security posture",
"note": "Excluded from scoring (no data or not applicable): Packaging, Signed-Releases. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"packaging",
"signed_releases"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 40,
"inputs": {
"source": "openssf_scorecard",
"checks_evaluated": 16,
"scorecard_version": "v5.5.0",
"checks_inconclusive": 2,
"scorecard_aggregate": 4
},
"components": [
{
"key": "binary_artifacts",
"name": "Binary-Artifacts",
"detail": "no binaries found in the repo",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "branch_protection",
"name": "Branch-Protection",
"detail": "branch protection not enabled on development/release branches",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "ci_tests",
"name": "CI-Tests",
"detail": "4 out of 4 merged PRs checked by a CI test -- score normalized to 10",
"points": 2.5,
"status": "met",
"details": [],
"max_points": 2.5
},
{
"key": "cii_best_practices",
"name": "CII-Best-Practices",
"detail": "no effort to earn an OpenSSF best practices badge detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 2.5
},
{
"key": "code_review",
"name": "Code-Review",
"detail": "Found 0/7 approved changesets -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "contributors",
"name": "Contributors",
"detail": "project has 1 contributing companies or organizations -- score normalized to 3",
"points": 0.8,
"status": "partial",
"details": [],
"max_points": 2.5
},
{
"key": "dangerous_workflow",
"name": "Dangerous-Workflow",
"detail": "no dangerous workflow patterns detected",
"points": 10,
"status": "met",
"details": [],
"max_points": 10
},
{
"key": "dependency_update_tool",
"name": "Dependency-Update-Tool",
"detail": "no update tool detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "fuzzing",
"name": "Fuzzing",
"detail": "project is not fuzzed",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "license",
"name": "License",
"detail": "license file detected",
"points": 2.5,
"status": "met",
"details": [],
"max_points": 2.5
},
{
"key": "maintained",
"name": "Maintained",
"detail": "15 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "packaging",
"name": "Packaging",
"detail": "packaging workflow not detected",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 5
},
{
"key": "pinned_dependencies",
"name": "Pinned-Dependencies",
"detail": "dependency not pinned by hash detected -- score normalized to 2",
"points": 1,
"status": "partial",
"details": [],
"max_points": 5
},
{
"key": "sast",
"name": "SAST",
"detail": "SAST tool is not run on all commits -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "security_policy",
"name": "Security-Policy",
"detail": "security policy file detected",
"points": 5,
"status": "met",
"details": [],
"max_points": 5
},
{
"key": "signed_releases",
"name": "Signed-Releases",
"detail": "no releases found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 7.5
},
{
"key": "token_permissions",
"name": "Token-Permissions",
"detail": "detected GitHub workflow tokens with excessive permissions",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "vulnerabilities",
"name": "Vulnerabilities",
"detail": "20 existing vulnerabilities detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
}
]
},
{
"key": "dependency_advisories",
"band": "excellent",
"name": "Dependency advisories",
"note": "Excluded from scoring (no data or not applicable): No advisories left outstanding. Remaining weights renormalized. Matched the npm:@addon-core/storage@0.7.0 runtime dependency closure — what installing the published package pulls in — 2 packages. Reachability is not analyzed.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"no_advisories_left_outstanding"
]
}
},
{
"code": "weights_renormalized",
"params": {}
},
{
"code": "advisories_scope_published",
"params": {
"package": "npm:@addon-core/storage@0.7.0",
"assessed": 2
}
},
{
"code": "advisories_reachability",
"params": {}
}
],
"value": 100,
"inputs": {
"source": "osv",
"advisories": 0,
"affected_packages": 0,
"assessed_packages": 2,
"unassessed_packages": 0,
"affected_by_severity": "none",
"direct_affected_packages": 0
},
"components": [
{
"key": "direct_dependencies_free_of_known_advisories",
"name": "Direct dependencies free of known advisories",
"detail": "no direct dependency carries a known advisory",
"points": 35,
"status": "met",
"details": [
{
"code": "no_direct_advisories",
"params": {}
}
],
"max_points": 35
},
{
"key": "indirect_dependencies_free_of_known_advisories",
"name": "Indirect dependencies free of known advisories",
"detail": "no indirect dependency carries a known advisory",
"points": 25,
"status": "met",
"details": [
{
"code": "no_indirect_advisories",
"params": {}
}
],
"max_points": 25
},
{
"key": "no_advisories_left_outstanding",
"name": "No advisories left outstanding",
"detail": "no advisory carries a publication date",
"points": 0,
"status": "excluded",
"details": [
{
"code": "advisories_no_publication_date",
"params": {}
}
],
"max_points": 40
}
]
},
{
"key": "malicious_dependencies",
"band": "excellent",
"name": "Malicious dependencies",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"source": "osv",
"meaning": "reported as a malicious package by the OpenSSF corpus; the remedy is removal or moving off the compromised name, never an upgrade of the same artifact. Versions the registry has since pulled are listed but not scored",
"packages": [],
"red_flag": false,
"assessed_packages": 2,
"malicious_packages": 0,
"direct_malicious_packages": 0,
"withdrawn_malicious_packages": 0,
"installable_malicious_packages": 0
},
"components": [
{
"key": "no_dependency_reported_as_a_malicious_package",
"name": "No dependency reported as a malicious package",
"detail": "no dependency is reported as a malicious package",
"points": 100,
"status": "met",
"details": [
{
"code": "no_malicious_dependencies",
"params": {}
}
],
"max_points": 100
}
]
},
{
"key": "high_risk_jurisdiction_exposure",
"band": "excellent",
"name": "High-Risk Jurisdiction Exposure",
"note": "Only high-confidence self-published location evidence affects this multiplier. Ambiguous matches are review-only; country evidence is not proof of nationality, citizenship, legal registration, malicious intent, or sanctions status.",
"notes": [
{
"code": "jurisdiction_evidence_limits",
"params": {}
}
],
"value": 100,
"inputs": {
"meaning": "self-published location evidence; not nationality or citizenship",
"red_flag": false,
"exposures": [],
"policy_countries": [
"Russia",
"Iran",
"North Korea"
],
"review_only_matches": 0,
"assessed_self_published_locations": 1
},
"components": [
{
"key": "policy_exposure_multiplier",
"name": "Policy exposure multiplier",
"detail": "no confirmed policy-scope location match",
"points": 100,
"status": "met",
"details": [
{
"code": "jurisdiction_no_match",
"params": {}
}
],
"max_points": 100
}
]
}
],
"description": "Are visible security and supply-chain practices strong, with no malicious dependency and no unresolved high-risk jurisdiction exposure?"
},
{
"key": "ai_readiness",
"band": "moderate",
"name": "AI Readiness",
"value": 58,
"weight": 0,
"metrics": [
{
"key": "ai_agent_context",
"band": "at_risk",
"name": "Agent context & guidance",
"note": null,
"notes": [],
"value": 40,
"inputs": {
"has_llms_txt": false,
"legible_history_share": 0.8,
"agent_instruction_files": [],
"agent_instruction_max_bytes": null
},
"components": [
{
"key": "agent_instructions",
"name": "Agent instructions",
"detail": "no CLAUDE.md / AGENTS.md / editor rules",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_agent_instructions",
"params": {}
}
],
"max_points": 45
},
{
"key": "machine_readable_docs_llms_txt",
"name": "Machine-readable docs (llms.txt)",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
},
{
"key": "legible_commit_history",
"name": "Legible commit history",
"detail": "68 of 85 human commits state their intent (structured subject or explanatory body)",
"points": 40,
"status": "met",
"details": [
{
"code": "legible_history",
"params": {
"legible": 68,
"sampled": 85
}
}
],
"max_points": 40
}
]
},
{
"key": "ai_verify_loop",
"band": "moderate",
"name": "Verify loop (build / test / typecheck)",
"note": null,
"notes": [],
"value": 56,
"inputs": {
"has_nix": false,
"has_tests": true,
"lockfiles": [
"package-lock.json"
],
"has_dockerfile": false,
"typed_language": true,
"bootstrap_files": [],
"has_devcontainer": false,
"has_linter_config": true,
"typecheck_configs": [
"tsconfig.json"
],
"agent_commit_share": 0,
"toolchain_manifests": [],
"dependency_bot_commit_share": 0
},
"components": [
{
"key": "one_command_bootstrap",
"name": "One-command bootstrap",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 18
},
{
"key": "automated_tests",
"name": "Automated tests",
"detail": null,
"points": 22,
"status": "met",
"details": [],
"max_points": 22
},
{
"key": "lint_format_config",
"name": "Lint / format config",
"detail": "biome.json",
"points": 11,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "biome.json"
}
}
],
"max_points": 11
},
{
"key": "static_type_checking",
"name": "Static type checking",
"detail": "tsconfig.json",
"points": 11,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "tsconfig.json"
}
}
],
"max_points": 11
},
{
"key": "reproducible_environment",
"name": "Reproducible environment",
"detail": "lockfile",
"points": 10,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "lockfile"
}
}
],
"max_points": 10
},
{
"key": "demonstrated_agent_practice",
"name": "Demonstrated agent practice",
"detail": "no agent-authored commits among the last 100",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_agent_authored_commits",
"params": {
"sampled": 100
}
}
],
"max_points": 10
},
{
"key": "automated_maintenance",
"name": "Automated maintenance",
"detail": "no automated dependency updates observed",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_dependency_automation",
"params": {}
}
],
"max_points": 8
},
{
"key": "openssf_scorecard_pinned_dependencies",
"name": "OpenSSF Scorecard: Pinned-Dependencies",
"detail": "dependency not pinned by hash detected -- score normalized to 2",
"points": 2,
"status": "partial",
"details": [],
"max_points": 10
}
]
},
{
"key": "ai_code_legibility",
"band": "excellent",
"name": "Code legibility for models",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"primary_language": "TypeScript",
"largest_source_bytes": 49358,
"source_files_sampled": 40,
"oversized_source_files": 0
},
"components": [
{
"key": "type_checkable_code",
"name": "Type-checkable code",
"detail": "TypeScript (statically typed)",
"points": 45,
"status": "met",
"details": [
{
"code": "statically_typed_language",
"params": {
"language": "TypeScript"
}
}
],
"max_points": 45
},
{
"key": "manageable_file_sizes",
"name": "Manageable file sizes",
"detail": "0/40 source files over 60KB",
"points": 55,
"status": "met",
"details": [
{
"code": "oversized_source_files",
"params": {
"kb": 60,
"sampled": 40,
"oversized": 0
}
}
],
"max_points": 55
}
]
}
],
"description": "How well is the repo equipped to be developed and maintained with AI coding agents? An independent, experimental badge — weight 0.0, so it is surfaced on its own and does not affect the overall health score."
}
],
"metrics_version": "1.13.0"
},
"warnings": [
"Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token",
"GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository"
],
"report_type": "repository",
"generated_at": "2026-07-23T16:22:33.105255Z",
"schema_version": "0.27.0",
"badge_url": "https://raw.githubusercontent.com/inspect-software/badges/main/v1/a/addon-stack/storage.svg",
"full_name": "addon-stack/storage",
"license_state": "standard",
"license_spdx": "MIT"
}