公开记录存在风险
软件健康报告模式 0.27.0 · 指标 1.13.0 · 2026-07-26 22:59 UTC
andrewschristison / pondlog
Place-aware nature data for developers. 8 data sources, 7 MCP servers, 1000-crop garden planner, CLI.
andrewschristison/pondlog 的健康指数为 100 分中的 46 分，处于「存在风险」区间。 其得分最高的类别是Engineering Quality（70/100），最低的是Sustainability & Governance（25/100）。 最近一次更新在 19 天前。 近期的大部分工作由 1 位贡献者完成。
46
总分 / 100软件健康指数
指标归入加权类别，统一采用 1–100 量表。总体分先取类别加权平均；当公开证据触发高风险司法辖区政策时，评级会按政策调整，并设置 49（有风险）的上限。AI 就绪度不计入总体分。
46
优秀85-100堪称典范；基本满足所有检验标准
良好70-84健康；仅有轻微不足
中等50-69可接受，但存在明显不足；建议进行审查
存在风险30-49存在重大薄弱环节；采用时应保持审慎
危急1-29问题严重（项目被弃置、仅有单一维护者、缺乏基本工程规范）
评分画像
每条轴代表一个类别。形状比平均值更重要——健康的对象会填满整个图形，而“一峰一谷”式画像意味着某一维度的优势正掩盖另一维度的风险。
所有权
软件包生态系统
按类别列示的指标
活力
项目是否仍有生命——是否仍在编写代码，是否仍在发布版本？
63
开发活跃度
46存在风险
评分方式
| 28.8/36 | 推送新近度 — 最近一次推送于 19 天前 |
| 2.1/36 | 提交节奏 — 52 周中有 3 周有提交 |
| 15.3/18 | 提交量 — 最近一年 49 次提交 |
| 0/10 | OpenSSF Scorecard：Maintained — project was created within the last 90 days. Please review its contents carefully |
所用输入
| commits_last_year | 49 |
| human_commit_share | 1 |
| days_since_last_push | 19 |
| active_weeks_last_year | 3 |
发布纪律
88优秀
评分方式
| 16.2/27 | 有发布版本 — 8 个版本标签（无 GitHub 发布版本） |
| 36/36 | 发布时效 — 最近一次发布版本于 19 天前 |
| 27/27 | 发布节奏 — 约每 8.6 天发布一次 |
| 0/10 | OpenSSF Scorecard：Signed-Releases — 无数据 |
所用输入
| releases_count | 8 |
| latest_release_tag | v1.0.1 |
| releases_from_tags | 是 |
| days_since_latest_release | 19 |
| mean_days_between_releases | 8.6 |
已排除计分（无数据或不适用）：OpenSSF Scorecard：Signed-Releases。 其余权重已重新归一化。
社区与采用
项目是否拥有用户、下载量与关注度，并具备欢迎贡献者参与的配置？
32
流行度与采用
1危急
评分方式
| 0/60 | 星标 — 0 个星标 |
| 0/25 | 复刻 — 0 个复刻 |
| 0/15 | 关注者 — 0 位关注者 |
所用输入
| forks | 0 |
| stars | 0 |
| watchers | 0 |
| growth_state | unverified |
| growth_factor_pct | 100 |
| growth_unverified_reason | no_history |
社区健康
50中等
评分方式
| 22.5/22.5 | README |
| 22.5/22.5 | 许可证 — 可识别的许可证（MIT） |
| 0/18 | CONTRIBUTING 指南 |
| 0/13.5 | 行为准则 |
| 0/7.2 | 议题模板 |
| 0/6.3 | PR 模板 |
所用输入
| has_readme | 是 |
| has_license | 是 |
| has_contributing | 否 |
| has_issue_template | 否 |
| has_code_of_conduct | 否 |
| has_pull_request_template | 否 |
生态采用（下载量）
56中等
评分方式
| 44.5/80 | 月度下载量 — npm 合计每月 2,165 次下载 |
| 0/20 | 注册表被依赖数 — 该生态系统不报告此项 |
所用输入
| packages | pondlog, @pondlog/core, @pondlog/mcp-npn, @pondlog/mcp-usgs, @pondlog/mcp-ebird, @pondlog/mcp-garden, @pondlog/source-npn, @pondlog/mcp-pondlog |
| dependents | — |
| ecosystems | npm |
| total_downloads | — |
| monthly_downloads | 2,165 |
已排除计分（无数据或不适用）：注册表被依赖数。 其余权重已重新归一化。
可持续性与治理
项目能否在其成员之外延续——巴士系数、响应能力、由谁支持，以及软件包的维护状况？
25
维护者韧性（巴士系数）
13危急
评分方式
| 9/54 | 巴士系数 — 1 位贡献者贡献了半数提交 |
| 0/22.5 | 提交分布 — 头号贡献者编写了 100% 的提交 |
| 1.4/13.5 | 贡献者广度 — 1 位贡献者 |
| 3/10 | OpenSSF Scorecard：Contributors — project has 1 contributing companies or organizations -- score normalized to 3 |
所用输入
| bus_factor | 1 |
| contributors_sampled | 1 |
| top_contributor_share | 1 |
议题与 PR 响应能力
1危急
评分方式
| 0/46.8 | 议题解决 — 0% 的议题已关闭 |
| 0/38.3 | PR 接受 — 没有已裁定的拉取请求或无数据 |
| 0/15 | OpenSSF Scorecard：Code-Review — Found 0/30 approved changesets -- score normalized to 0 |
所用输入
| merged_prs | 0 |
| open_issues | 1 |
| closed_issues | 0 |
| issue_closed_ratio | 0 |
| closed_unmerged_prs | 0 |
已排除计分（无数据或不适用）：PR 接受。 其余权重已重新归一化。
所有权与托管责任
19危急
评分方式
| 10/30 | 所有权背书 — 个人（用户）账户 |
| 0/20 | 已验证域名 — 不适用于个人账户 |
| 0/25 | 所有者影响力 — andrewschristison 有 0 位关注者 |
| 4.9/25 | 既往记录 — 2 个公开仓库，账户约 0 年 |
所用输入
| followers | 0 |
| owner_type | User |
| is_verified | — |
| owner_login | andrewschristison |
| public_repos | 2 |
| account_age_days | 254 |
已排除计分（无数据或不适用）：已验证域名。 其余权重已重新归一化。
软件包维护
80良好
评分方式
| 25/25 | 已发布且可解析 — npm 上有 8 个软件包 |
| 35/35 | 发布时效 — 最近一次发布于 19 天前 |
| 20/20 | 版本历史 — 12 个已发布版本 |
| 0/20 | 未被弃用 — @pondlog/mcp-garden: Replaced by @cropgraph/mcp. Install: npx @cropgraph/mcp |
所用输入
| packages | pondlog, @pondlog/core, @pondlog/mcp-npn, @pondlog/mcp-usgs, @pondlog/mcp-ebird, @pondlog/mcp-garden, @pondlog/source-npn, @pondlog/mcp-pondlog |
| ecosystems | npm |
| any_deprecated | 是 |
| min_days_since_publish | 19 |
工程质量
基础的工程与文档实践是否到位？
70
工程实践
60中等
评分方式
| 24/24 | CI 工作流 — 3 个工作流 |
| 24/24 | 存在测试 |
| 0/16 | Linter 配置 |
| 0/9.6 | Pre-commit 钩子 |
| 0/6.4 | .editorconfig |
| 0/20 | OpenSSF Scorecard：CI-Tests — 无数据 |
所用输入
| has_ci | 是 |
| has_tests | 是 |
| has_editorconfig | 否 |
| has_linter_config | 否 |
| has_precommit_config | 否 |
已排除计分（无数据或不适用）：OpenSSF Scorecard：CI-Tests。 其余权重已重新归一化。
文档
85优秀
评分方式
| 30/30 | README |
| 25/25 | 文档目录 |
| 0/15 | 文档 / 主页站点 |
| 10/10 | 仓库描述 |
| 10/10 | 主题标签 — 13 个主题标签 |
| 10/10 | Wiki |
所用输入
| topics | agriculture, birds, cli, companion-planting, ebird, garden, inaturalist, mcp, model-context-protocol, nature, open-source, planting-calendar, typescript |
| has_wiki | 是 |
| homepage | — |
| has_readme | 是 |
| has_docs_dir | 是 |
| has_description | 是 |
安全
可见的安全与供应链实践是否稳固，且不存在未解决的高风险司法辖区暴露？
42
安全态势
27危急
评分方式
| 7.5/7.5 | Binary-Artifacts — no binaries found in the repo |
| 0/7.5 | Branch-Protection — branch protection not enabled on development/release branches |
| 0/2.5 | CI-Tests — 无数据 |
| 0/2.5 | CII-Best-Practices — no effort to earn an OpenSSF best practices badge detected |
| 0/7.5 | Code-Review — Found 0/30 approved changesets -- score normalized to 0 |
| 0.8/2.5 | Contributors — project has 1 contributing companies or organizations -- score normalized to 3 |
| 10/10 | Dangerous-Workflow — no dangerous workflow patterns detected |
| 0/7.5 | Dependency-Update-Tool — no update tool detected |
| 0/5 | Fuzzing — project is not fuzzed |
| 2.5/2.5 | 许可证 — license file detected |
| 0/7.5 | Maintained — project was created within the last 90 days. Please review its contents carefully |
| 5/5 | Packaging — packaging workflow detected |
| 0/5 | Pinned-Dependencies — dependency not pinned by hash detected -- score normalized to 0 |
| 0/5 | SAST — no SAST tool detected |
| 0/5 | Security-Policy — security policy file not detected |
| 0/7.5 | Signed-Releases — 无数据 |
| 0/7.5 | Token-Permissions — detected GitHub workflow tokens with excessive permissions |
| 0/7.5 | Vulnerabilities — 24 existing vulnerabilities detected |
所用输入
| source | openssf_scorecard |
| checks_evaluated | 16 |
| scorecard_version | v5.5.0 |
| checks_inconclusive | 2 |
| scorecard_aggregate | 2.7 |
已排除计分（无数据或不适用）：ci_tests, signed_releases。 其余权重已重新归一化。
依赖安全公告
100优秀
评分方式
| 35/35 | 直接依赖不含已知公告 — 没有直接依赖携带已知公告 |
| 25/25 | 间接依赖不含已知公告 — 没有间接依赖携带已知公告 |
| 0/40 | 没有长期未处理的公告 — 没有公告带有发布日期 |
所用输入
| source | osv |
| advisories | 0 |
| affected_packages | 0 |
| assessed_packages | 13 |
| unassessed_packages | 0 |
| affected_by_severity | none |
| direct_affected_packages | 0 |
已排除计分（无数据或不适用）：没有长期未处理的公告。 其余权重已重新归一化。 比对的是 npm:pondlog@0.8.0 的运行时依赖闭包——安装已发布的软件包时真正被拉取进来的内容——共 13 个软件包。 未对可达性进行分析。
AI 就绪度
该仓库在多大程度上具备与 AI 编码代理协同开发与维护的条件？这是一枚独立的实验性徽章——权重为 0.0，因此单独呈现，不影响总体健康评分。
52
AI 代理上下文与指引
55中等
评分方式
| 0/45 | 代理指令 — 没有 CLAUDE.md / AGENTS.md / 编辑器规则 |
| 15/15 | 机器可读文档（llms.txt） — 存在 llms.txt |
| 40/40 | 可读的提交历史 — 49 次人类提交中有 48 次说明了意图（结构化标题或解释性正文） |
所用输入
| has_llms_txt | 是 |
| legible_history_share | 0.98 |
| agent_instruction_files | — |
| agent_instruction_max_bytes | — |
验证循环（构建 / 测试 / 类型检查）
43存在风险
评分方式
| 0/18 | 一条命令的引导启动 |
| 22/22 | 自动化测试 |
| 0/11 | Lint / 格式化配置 |
| 11/11 | 静态类型检查 — packages/cli/tsconfig.json, packages/core/tsconfig.json, packages/mcp-ebird/tsconfig.json, packages/mcp-garden/tsconfig.json, packages/mcp-inaturalist/tsconfig.json, packages/mcp-mushroomobserver/tsconfig.json, packages/mcp-npn/tsconfig.json, packages/mcp-pondlog/tsconfig.json, packages/mcp-usgs/tsconfig.json, packages/source-ebird/tsconfig.json, packages/source-inaturalist/tsconfig.json, packages/source-mushroomobserver/tsconfig.json, packages/source-nightsky/tsconfig.json, packages/source-npn/tsconfig.json, packages/source-trefle/tsconfig.json, packages/source-usgs/tsconfig.json |
| 10/10 | 可复现环境 — lockfile |
| 0/10 | 已体现的代理实践 — 最近 49 次提交中没有代理编写的提交 |
| 0/8 | 自动化维护 — 未观察到自动依赖更新 |
| 0/10 | OpenSSF Scorecard：Pinned-Dependencies — dependency not pinned by hash detected -- score normalized to 0 |
所用输入
| has_nix | 否 |
| has_tests | 是 |
| lockfiles | pnpm-lock.yaml |
| has_dockerfile | 否 |
| typed_language | 是 |
| bootstrap_files | — |
| has_devcontainer | 否 |
| has_linter_config | 否 |
| typecheck_configs | packages/cli/tsconfig.json, packages/core/tsconfig.json, packages/mcp-ebird/tsconfig.json, packages/mcp-garden/tsconfig.json, packages/mcp-inaturalist/tsconfig.json, packages/mcp-mushroomobserver/tsconfig.json, packages/mcp-npn/tsconfig.json, packages/mcp-pondlog/tsconfig.json, packages/mcp-usgs/tsconfig.json, packages/source-ebird/tsconfig.json, packages/source-inaturalist/tsconfig.json, packages/source-mushroomobserver/tsconfig.json, packages/source-nightsky/tsconfig.json, packages/source-npn/tsconfig.json, packages/source-trefle/tsconfig.json, packages/source-usgs/tsconfig.json |
| agent_commit_share | 0 |
| toolchain_manifests | — |
| dependency_bot_commit_share | 0 |
面向模型的代码可读性
100优秀
评分方式
| 45/45 | 可类型检查的代码 — TypeScript（静态类型） |
| 55/55 | 可控的文件大小 — 采样的 142 个源文件中有 0 个超过 60KB |
所用输入
| primary_language | TypeScript |
| largest_source_bytes | 30,079 |
| source_files_sampled | 142 |
| oversized_source_files | 0 |
机器可读接口
20危急
评分方式
| 0/40 | API 模式（OpenAPI/GraphQL/proto） |
| 20/20 | MCP 服务器 |
| 0/40 | 可运行示例 |
所用输入
| example_dirs | — |
| has_mcp_signal | 是 |
| api_schema_files | — |
关键数据
0GitHub 星标
1贡献者
49最近 12 个月提交数
19距最近推送天数
8发布版本数
1巴士系数（bus factor）
1开放议题
npm软件包生态系统数
数据采集警告
- GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository
更多细节
OpenSSF Scorecard 2.7 / 10
2.7综合
来自开源项目 OpenSSF Scorecard 的独立、工具无关的安全评估。每项检查奖励的是安全实践本身，而非特定供应商的工具。Scorecard 无法判定的检查项标记为 不适用，并从安全评分中剔除（绝不按零分计）。
| 10 | Binary-Artifacts | no binaries found in the repo |
| 0 | Branch-Protection | branch protection not enabled on development/release branches |
| 不适用 | CI-Tests | no pull request found |
| 0 | CII-Best-Practices | no effort to earn an OpenSSF best practices badge detected |
| 0 | Code-Review | Found 0/30 approved changesets -- score normalized to 0 |
| 3 | Contributors | project has 1 contributing companies or organizations -- score normalized to 3 |
| 10 | Dangerous-Workflow | no dangerous workflow patterns detected |
| 0 | Dependency-Update-Tool | no update tool detected |
| 0 | Fuzzing | project is not fuzzed |
| 10 | License | license file detected |
| 0 | Maintained | project was created within the last 90 days. Please review its contents carefully |
| 10 | Packaging | packaging workflow detected |
| 0 | Pinned-Dependencies | dependency not pinned by hash detected -- score normalized to 0 |
| 0 | SAST | no SAST tool detected |
| 0 | Security-Policy | security policy file not detected |
| 不适用 | Signed-Releases | no releases found |
| 0 | Token-Permissions | detected GitHub workflow tokens with excessive permissions |
| 0 | Vulnerabilities | 24 existing vulnerabilities detected |
直接依赖 70
| 注册表 | 软件包 | 版本约束 | 清单文件 |
|---|---|---|---|
| npm | @cropgraph/core | ^3.0.0 | packages/cli/package.json |
| npm | @pondlog/core | workspace:^ | packages/cli/package.json |
| npm | @pondlog/source-ebird | workspace:^ | packages/cli/package.json |
| npm | @pondlog/source-inaturalist | workspace:^ | packages/cli/package.json |
| npm | @pondlog/source-mushroomobserver | workspace:^ | packages/cli/package.json |
| npm | @pondlog/source-nightsky | workspace:^ | packages/cli/package.json |
| npm | @pondlog/source-npn | workspace:^ | packages/cli/package.json |
| npm | @pondlog/source-usgs | workspace:^ | packages/cli/package.json |
| npm | commander | ^12.1.0 | packages/cli/package.json |
| npm | picocolors | ^1.1.1 | packages/cli/package.json |
| npm | zod | ^3.23.8 | packages/cli/package.json |
| npm | @cropgraph/core | ^3.0.0 | packages/core/package.json |
| npm | zod | ^3.23.8 | packages/core/package.json |
| npm | @cropgraph/core | ^3.0.0 | packages/mcp-ebird/package.json |
| npm | @modelcontextprotocol/sdk | ^1.0.4 | packages/mcp-ebird/package.json |
| npm | @pondlog/core | workspace:^ | packages/mcp-ebird/package.json |
| npm | @pondlog/source-ebird | workspace:^ | packages/mcp-ebird/package.json |
| npm | zod | ^3.23.8 | packages/mcp-ebird/package.json |
| npm | @cropgraph/core | ^3.0.0 | packages/mcp-garden/package.json |
| npm | @cropgraph/core | ^3.0.0 | packages/mcp-inaturalist/package.json |
| npm | @modelcontextprotocol/sdk | ^1.0.4 | packages/mcp-inaturalist/package.json |
| npm | @pondlog/core | workspace:^ | packages/mcp-inaturalist/package.json |
| npm | @pondlog/source-inaturalist | workspace:^ | packages/mcp-inaturalist/package.json |
| npm | zod | ^3.23.8 | packages/mcp-inaturalist/package.json |
| npm | @cropgraph/core | ^3.0.0 | packages/mcp-mushroomobserver/package.json |
| npm | @modelcontextprotocol/sdk | ^1.0.4 | packages/mcp-mushroomobserver/package.json |
| npm | @pondlog/core | workspace:^ | packages/mcp-mushroomobserver/package.json |
| npm | @pondlog/source-mushroomobserver | workspace:^ | packages/mcp-mushroomobserver/package.json |
| npm | zod | ^3.23.8 | packages/mcp-mushroomobserver/package.json |
| npm | @cropgraph/core | ^3.0.0 | packages/mcp-npn/package.json |
| npm | @modelcontextprotocol/sdk | ^1.0.4 | packages/mcp-npn/package.json |
| npm | @pondlog/core | workspace:^ | packages/mcp-npn/package.json |
| npm | @pondlog/source-npn | workspace:^ | packages/mcp-npn/package.json |
| npm | zod | ^3.23.8 | packages/mcp-npn/package.json |
| npm | @cropgraph/core | ^3.0.0 | packages/mcp-pondlog/package.json |
| npm | @modelcontextprotocol/sdk | ^1.0.4 | packages/mcp-pondlog/package.json |
| npm | @pondlog/core | workspace:^ | packages/mcp-pondlog/package.json |
| npm | @pondlog/source-ebird | workspace:^ | packages/mcp-pondlog/package.json |
| npm | @pondlog/source-inaturalist | workspace:^ | packages/mcp-pondlog/package.json |
| npm | @pondlog/source-mushroomobserver | workspace:^ | packages/mcp-pondlog/package.json |
| npm | @pondlog/source-nightsky | workspace:^ | packages/mcp-pondlog/package.json |
| npm | @pondlog/source-npn | workspace:^ | packages/mcp-pondlog/package.json |
| npm | @pondlog/source-usgs | workspace:^ | packages/mcp-pondlog/package.json |
| npm | zod | ^3.23.8 | packages/mcp-pondlog/package.json |
| npm | @cropgraph/core | ^3.0.0 | packages/mcp-usgs/package.json |
| npm | @modelcontextprotocol/sdk | ^1.0.4 | packages/mcp-usgs/package.json |
| npm | @pondlog/core | workspace:^ | packages/mcp-usgs/package.json |
| npm | @pondlog/source-usgs | workspace:^ | packages/mcp-usgs/package.json |
| npm | zod | ^3.23.8 | packages/mcp-usgs/package.json |
| npm | @cropgraph/core | ^3.0.0 | packages/source-ebird/package.json |
| npm | @pondlog/core | workspace:^ | packages/source-ebird/package.json |
| npm | zod | ^3.23.8 | packages/source-ebird/package.json |
| npm | @cropgraph/core | ^3.0.0 | packages/source-inaturalist/package.json |
| npm | @pondlog/core | workspace:^ | packages/source-inaturalist/package.json |
| npm | zod | ^3.23.8 | packages/source-inaturalist/package.json |
| npm | @cropgraph/core | ^3.0.0 | packages/source-mushroomobserver/package.json |
| npm | @pondlog/core | workspace:^ | packages/source-mushroomobserver/package.json |
| npm | zod | ^3.23.8 | packages/source-mushroomobserver/package.json |
| npm | @cropgraph/core | ^3.0.0 | packages/source-nightsky/package.json |
| npm | @pondlog/core | workspace:^ | packages/source-nightsky/package.json |
| npm | astronomy-engine | ^2.1.19 | packages/source-nightsky/package.json |
| npm | @cropgraph/core | ^3.0.0 | packages/source-npn/package.json |
| npm | @pondlog/core | workspace:^ | packages/source-npn/package.json |
| npm | zod | ^3.23.8 | packages/source-npn/package.json |
| npm | @cropgraph/core | ^3.0.0 | packages/source-trefle/package.json |
| npm | @pondlog/core | workspace:^ | packages/source-trefle/package.json |
| npm | zod | ^3.23.8 | packages/source-trefle/package.json |
| npm | @cropgraph/core | ^3.0.0 | packages/source-usgs/package.json |
| npm | @pondlog/core | workspace:^ | packages/source-usgs/package.json |
| npm | zod | ^3.23.8 | packages/source-usgs/package.json |
全部依赖 未采集
本报告未能采集到解析后的依赖集合：GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository
依赖安全公告 0
安装 npm:pondlog@0.8.0 会引入 13 个包（直接与传递）：其中 0 个存在已知公告，0 个为直接依赖。
没有已知公告影响已评估的依赖。
公告表示依赖图中记录的版本落入某条公告的受影响范围。可达性未经分析，且依赖图包含开发与测试的版本固定——某项发现可能只涉及工具链而非交付的软件。
原始 JSON 报告 机器可读
{
"data": {
"repo": {
"topics": [
"agriculture",
"birds",
"cli",
"companion-planting",
"ebird",
"garden",
"inaturalist",
"mcp",
"model-context-protocol",
"nature",
"open-source",
"planting-calendar",
"typescript"
],
"is_fork": false,
"size_kb": 1943,
"has_wiki": true,
"homepage": null,
"languages": {
"CSS": 25472,
"HTML": 41308,
"JavaScript": 39376,
"TypeScript": 606661
},
"pushed_at": "2026-07-07T03:41:50Z",
"created_at": "2026-05-07T17:57:37Z",
"owner_type": "User",
"updated_at": "2026-07-07T03:41:42Z",
"description": "Place-aware nature data for developers. 8 data sources, 7 MCP servers, 1000-crop garden planner, CLI.",
"is_archived": false,
"is_disabled": false,
"license_spdx": "MIT",
"default_branch": "main",
"license_spdx_raw": "MIT",
"primary_language": "TypeScript",
"significant_languages": [
"TypeScript"
]
},
"owner": {
"blog": null,
"name": null,
"type": "User",
"login": "andrewschristison",
"company": null,
"location": null,
"followers": 0,
"avatar_url": "https://avatars.githubusercontent.com/u/243887122?v=4",
"created_at": "2025-11-13T23:37:39Z",
"is_verified": null,
"public_repos": 2,
"account_age_days": 254
},
"license": {
"state": "standard",
"spdx_id": "MIT",
"raw_spdx": "MIT",
"file_present": true,
"scorecard_found": true,
"profile_has_license": true
},
"activity": {
"releases": [
{
"tag": "v1.0.1",
"kind": "patch",
"published_at": "2026-07-07T03:41:16Z"
},
{
"tag": "v1.0.0",
"kind": "major",
"published_at": "2026-05-13T02:25:22Z"
},
{
"tag": "v0.8.4",
"kind": "patch",
"published_at": "2026-05-12T23:03:42Z"
},
{
"tag": "v0.8.3",
"kind": "patch",
"published_at": "2026-05-12T22:59:25Z"
},
{
"tag": "v0.8.2",
"kind": "patch",
"published_at": "2026-05-12T17:14:38Z"
},
{
"tag": "v0.8.1",
"kind": "patch",
"published_at": "2026-05-12T17:02:15Z"
},
{
"tag": "v0.6.0",
"kind": "minor",
"published_at": "2026-05-10T04:24:42Z"
},
{
"tag": "v0.1.0",
"kind": "minor",
"published_at": "2026-05-07T18:39:28Z"
}
],
"recent_commits": [
{
"oid": "ad9ada0cb7a172079b2aa41028822ff442d2b81a",
"body": "…lData\n\nUSA-NPN made start_date/end_date required on getSiteLevelData around\n2026-05-26 (a bare years[] call now 400s with \"start_date and end_date\nare required\"), so every phenology fetch has failed since. Add\nstartDate/endDate params and send them on the wire; years[] is retained\nas a fallback tha\n[…]\nd the parser\nreads by name, so the next drift fails a named test.\n\ngetObservations verified still healthy and left unchanged; the drift is\nisolated to getSiteLevelData. Bump source-npn 0.1.3 -> 0.2.0.",
"is_bot": false,
"headline": "fix(source-npn): send NPN-required start_date/end_date on getSiteLeve…",
"author_name": "Andrew Christison",
"author_login": "andrewschristison",
"committed_at": "2026-07-07T03:41:16Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "1a51c9a5136716c874a84b0bd0e11dcd11e81cce",
"body": null,
"is_bot": false,
"headline": "chore: bump @cropgraph/core to 3.0.0",
"author_name": "Andrew Christison",
"author_login": "andrewschristison",
"committed_at": "2026-05-14T03:41:44Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "6d9a10daa29658e8d845a936dd194e56a378099d",
"body": "CropGraph v2.0.0 doubled the dataset (2,000 crops, 605 companions, 120 GDD\nmodels). Sync references in pondlog site copy, FAQ, and llms.txt.\n\nHold deploy until @cropgraph/core 2.0.0 lands on npm.",
"is_bot": false,
"headline": "Update CropGraph references for 2,000-crop expansion",
"author_name": "Andrew Christison",
"author_login": "andrewschristison",
"committed_at": "2026-05-13T21:46:41Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c9f3f2943a2338a57656b5294f1bf6008d8a6514",
"body": "When the upstream returns no recent observations or active phenophases for the visitor's coordinates, show 'no recent observations nearby' / 'no active events recorded' with the (live) label. The proxy call itself succeeded; only the data is empty. Falls back to (example) only when the proxy actually fails (timeout, network error).",
"is_bot": false,
"headline": "site: render empty MO/NPN proxy responses as honest live empty-states",
"author_name": "Andrew Christison",
"author_login": "andrewschristison",
"committed_at": "2026-05-13T21:17:06Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2697013c5d8381cdf8302b51c0358f2644fb8997",
"body": "…on, eBird, cropgraph)\n\nFive sources call CORS-friendly APIs directly from the browser; eBird, Mushroom Observer, and USA-NPN go through a new site/api/nature-proxy.js Vercel serverless function. Moon phase is computed inline from a Julian-date reference. Every hero line shows real data from the visitor's coordinates with a (source · live) tail in moss green, or a (source · example) tail in muted ink when the upstream returns empty or times out.",
"is_bot": false,
"headline": "feat(site): live nature data in pondlog.co hero (iNat, NOAA, USGS, mo…",
"author_name": "Andrew Christison",
"author_login": "andrewschristison",
"committed_at": "2026-05-13T21:07:22Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "9d82fa7e5e3efc1aa2f6ffc064c4558b796b9382",
"body": "@cropgraph/core 1.2.0 ships 12 rotation families and the MCP server\nnow exposes ten tools. Pondlog's FAQ references the count when\nexplaining the garden-MCP migration.",
"is_bot": false,
"headline": "site: mention CropGraph rotation families in garden-MCP callout",
"author_name": "Andrew Christison",
"author_login": "andrewschristison",
"committed_at": "2026-05-13T17:43:16Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "6d7ce28ceb85d094622b28ebd02764fecca0acd6",
"body": "@cropgraph/core 1.1.0 expanded the companion graph from 121 to 333\ndirected relationships. Pondlog's FAQ references the count in the\n\"What happened to the garden MCP?\" answer.",
"is_bot": false,
"headline": "site: update CropGraph companion count 121 to 333",
"author_name": "Andrew Christison",
"author_login": "andrewschristison",
"committed_at": "2026-05-13T17:13:57Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "618aa68147590cbc868a9918af1193e9f899835b",
"body": null,
"is_bot": false,
"headline": "chore: update mcp-garden registry entry to deprecated",
"author_name": "Andrew Christison",
"author_login": "andrewschristison",
"committed_at": "2026-05-13T16:46:20Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "cf385f0016c1bc91b066b2abf4b0929ff54afb13",
"body": "Update site/index.html, faq.html, privacy.html to reflect the\npondlog ↔ cropgraph product split that already shipped on the\npackage side.\n\nIndex:\n- MCP grid intro: six servers (was seven)\n- Bump card versions to match npm: mcp-pondlog 0.4.0, ebird 0.1.5,\n inaturalist 0.1.3, npn 0.1.5, usgs 0.1.6, m\n[…]\npanion\n graph contributions belong at github.com/Cropgraph/cropgraph\n\nNav: all internal links use clean URLs (/faq, /privacy) on every\npage, matching the existing vercel.json cleanUrls: true setting.",
"is_bot": false,
"headline": "site: post-separation audit pass",
"author_name": "Andrew Christison",
"author_login": "andrewschristison",
"committed_at": "2026-05-13T03:48:16Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "f213d3ef6c2733ed852f61fe5c3b13c1d2d24b3a",
"body": "- @pondlog/core 1.0.0: garden data + helpers removed\n- @pondlog/mcp-pondlog 0.4.0: garden block via @cropgraph/core\n- @pondlog/mcp-garden 0.3.4: deprecated stub, points to @cropgraph/mcp\n- pondlog 0.8.0: garden subcommand is a redirect; today.ts via @cropgraph/core\n- site, faq, llms.txt: 6 MCPs, CropGraph callout, garden card removed",
"is_bot": false,
"headline": "Slim pondlog for CropGraph separation (Sticky D.5b)",
"author_name": "Andrew Christison",
"author_login": "andrewschristison",
"committed_at": "2026-05-13T02:25:22Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0443df6326cb3e96c44a998a8abf35afe0748593",
"body": "- ci.yml: run build before typecheck so workspace packages can resolve\n @pondlog/core via its dist/ output (first CI run failed with\n 'Cannot find module @pondlog/core').\n- Shorten descriptions in mcp-ebird, mcp-garden, mcp-mushroomobserver,\n mcp-npn, and mcp-pondlog server.json to <=100 chars. The MCP registry\n schema caps description length at 100 and rejected the v0.8.3\n publish with HTTP 422 on mcp-ebird (was 112 chars).",
"is_bot": false,
"headline": "ci: fix typecheck-after-build order and shorten MCP descriptions",
"author_name": "Andrew Christison",
"author_login": "andrewschristison",
"committed_at": "2026-05-12T23:03:42Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "373bec12558f54364ab085828d2771c60654ae91",
"body": "pnpm 11.0.8 uses node:sqlite which is a Node 22+ builtin. Spec said\nNode 20 but the pinned pnpm version won't boot on it (first CI run\nfailed with ERR_UNKNOWN_BUILTIN_MODULE: node:sqlite).",
"is_bot": false,
"headline": "ci: bump workflow Node to 22 (pnpm 11.0.8 requires >=22.13)",
"author_name": "Andrew Christison",
"author_login": "andrewschristison",
"committed_at": "2026-05-12T22:59:25Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "8db55ed2efe5a81389fed75be95a175a9f490b25",
"body": "Adds three GitHub Actions workflows:\n\n- ci.yml: typecheck, build, and test on every PR and push to main.\n- publish.yml: on v* tags, publishes all workspace packages to npm\n via pnpm -r publish, then syncs every packages/mcp-*/server.json\n version with its package.json and publishes each MCP server\n[…]\n.\n- deploy-site.yml: on push to main with site/** changes, runs\n vercel pull/build/deploy against the production environment.\n\nSecrets used: NPM_TOKEN, VERCEL_TOKEN, VERCEL_ORG_ID, VERCEL_PROJECT_ID.",
"is_bot": false,
"headline": "ci: add CI, publish, and site deploy workflows",
"author_name": "Andrew Christison",
"author_login": "andrewschristison",
"committed_at": "2026-05-12T22:25:27Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "79c1a0a9f1ddfda619cbb016377474256ba6a6e2",
"body": null,
"is_bot": false,
"headline": "chore: add Vercel analytics + update privacy policy",
"author_name": "Andrew Christison",
"author_login": "andrewschristison",
"committed_at": "2026-05-12T21:58:04Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e499b6e157925044e1d6fab4d7dee18d414a6d74",
"body": null,
"is_bot": false,
"headline": "feat: pondlog.co landing page + SEO + FAQ + privacy",
"author_name": "Andrew Christison",
"author_login": "andrewschristison",
"committed_at": "2026-05-12T20:42:54Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "de4e45637a55ac1e0dc007033a6d3b8419dc325e",
"body": "…up 2)\n\nRemoved 130 em dashes from packages/cli/src/ and packages/source-*/src/.\nSame contextual replacement as 0.18.2: period before capital, comma\nbefore lowercase. Also swept two bundled fixtures in source-nightsky\n(meteor-showers.json, constellations.json) so the night-sky briefing\noutput is cle\n[…]\nh that does not\n collide with separator hyphens needs its own design pass.\n- Historical CHANGELOG entries (Stickies 1 to 23) still contain em\n dashes; not retconned.\n\npnpm typecheck and build clean.",
"is_bot": false,
"headline": "chore(cli, source): strip prose em dashes from src (sticky 25 follow-…",
"author_name": "Andrew Christison",
"author_login": "andrewschristison",
"committed_at": "2026-05-12T17:21:20Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "215c134c379f8aa02a09f78382613dc922fc89a6",
"body": "Removed 122 em dashes from packages/core/src/ and packages/mcp-*/src/.\nZod .describe() strings, schema field descriptions, comments, and the\nruntime noteParts.join() separator in crop-calendar.ts.\n\nReplacements use commas before lowercase clauses and periods before\ncapitalized ones, with a handful o\n[…]\nckstep.\n\nOut of scope for this commit: packages/cli/src/, packages/source-*/src/,\nand older CHANGELOG entries. Follow-up sticky can sweep those.\n\npnpm typecheck and build clean across all 16 packages.",
"is_bot": false,
"headline": "chore(core, mcp): strip em dashes from src (sticky 25 follow-up)",
"author_name": "Andrew Christison",
"author_login": "andrewschristison",
"committed_at": "2026-05-12T17:14:38Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "dabf208c5756f313903d445aa3a69a4177aa5e90",
"body": "Metadata, README, and presentation polish across all 16 packages ahead\nof organic MCP-registry traffic. No source code, type, or test changes.\n\n* npm pkg fix + normalized homepage/repository/keywords on every\n package.json; stripped em dashes from every package.json and\n server.json description.\n*\n[…]\nry workspace package; server.json versions bumped\n in lockstep for the 7 MCPs.\n* Verified: pnpm typecheck and build clean. CropGraph API docs render;\n all 8 documented curl examples return HTTP 200.",
"is_bot": false,
"headline": "chore: distribution polish (sticky 25)",
"author_name": "Andrew Christison",
"author_login": "andrewschristison",
"committed_at": "2026-05-12T17:02:15Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "c5e9fa264422e4e1b7413bbb122b3a35820e4d3e",
"body": null,
"is_bot": false,
"headline": "chore: register all 7 MCPs on official MCP Registry",
"author_name": "Andrew Christison",
"author_login": "andrewschristison",
"committed_at": "2026-05-12T04:09:20Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "25983844bd277fae54b69f2cf553ccd4422ac7a9",
"body": "Surfaces the 121-edge companion fixture and six core helpers (shipped\nin @pondlog/core 0.8.0) through the CLI and MCP layers. No core\nchanges — wiring only.\n\nCLI — three new subcommands under `pondlog garden`, all with --json:\n- garden companions <crop>: calls getCompanions(slug); renders\n companio\n[…]\nminor — three new subcommands)\n- @pondlog/mcp-garden 0.2.0 → 0.3.0 (minor — three new tools)\n- @pondlog/mcp-pondlog 0.3.4 → 0.3.5 (patch — sibling field on briefing)\n- @pondlog/core unchanged at 0.8.0",
"is_bot": false,
"headline": "feat(cli, mcp): companion planting commands + tools (sticky 23)",
"author_name": "Andrew Christison",
"author_login": "andrewschristison",
"committed_at": "2026-05-11T01:52:26Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "5cffb11445d269291e567c2f0b5723ab7ede165f",
"body": "…y 22)\n\nAdds the first relationship layer to the crop knowledge graph: directed\nedges between crops (beneficial or antagonist) with categorized\nmechanisms and cited sources. Resolves the most-asked gardening\nquestion that no public API answers today — \"what should I plant next\nto my tomatoes?\"\n\n- da\n[…]\nup transparently so\ncallers don't need to know storage direction.\n\nCLI / MCP wiring intentionally deferred to a follow-up sticky.\n\n@pondlog/core 0.7.1 → 0.8.0 (minor — new public API + new data file).",
"is_bot": false,
"headline": "feat(core): companion planting fixture — first cropgraph edges (stick…",
"author_name": "Andrew Christison",
"author_login": "andrewschristison",
"committed_at": "2026-05-11T01:23:08Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "0f90e0d84c4ce82d848759aa4008ce279766ec71",
"body": "Pure data enrichment of the climate-modifier system shipped in 0.7.0.\nThe 10 anchor crops proved the system end-to-end; this fills in 55\nmore across warm-season staples, cool-season crops, perennials/fruits,\nand climate-sensitive herbs.\n\n- Warm-season (20): pepper-hot, eggplant, zucchini, summer-squ\n[…]\n\nBackward compat preserved (26 core tests all green). No API surface\nchange. @pondlog/core 0.7.0 → 0.7.1; CLI / mcp packages re-resolve\nthrough workspace deps and pick up the new modifiers on rebuild.",
"is_bot": false,
"headline": "feat(core): expand climate modifiers from 10 to 65 crops (sticky 21)",
"author_name": "Andrew Christison",
"author_login": "andrewschristison",
"committed_at": "2026-05-10T16:00:35Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "9010c133aba2f6ab6e31e1b734b7ea756ad6ad16",
"body": "Adds a six-type climate layer (maritime, mediterranean, continental,\nhumid_subtropical, arid, semi_arid) on top of USDA hardiness zones, so\nthe crop calendar can shift planting windows and surface\nclimate-specific advice for places where zone alone is too coarse —\nzone 8b in Port Angeles vs Tucson v\n[…]\ned); arid +7d; mcp-garden\n JSON-RPC handshake echoes climateType.\n\nVersions: @pondlog/core 0.6.0 → 0.7.0; pondlog 0.5.2 → 0.6.0;\n@pondlog/mcp-garden 0.1.3 → 0.2.0; @pondlog/mcp-pondlog 0.3.3 → 0.3.4.",
"is_bot": false,
"headline": "feat(core, cli, mcp): climate-aware crop calendar (sticky 20)",
"author_name": "Andrew Christison",
"author_login": "andrewschristison",
"committed_at": "2026-05-10T15:41:47Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "c653e59d72e6c9268db0585986feee1a331abcd2",
"body": "Doubles the bundled hand-curated planting calendar with no schema or API\nshape change. Each new entry includes the growingContext field added in\nsticky 18.1, frost-anchored windows, realistic days-to-harvest from\nextension publications, conservative zone limits, per-entry source\ncitation, and garden\n[…]\nto bundle core 0.6.0)\n- @pondlog/mcp-pondlog: 0.3.2 -> 0.3.3 (patch — copy refresh +\n republish to bundle core 0.6.0)\n\nserver.json files for both MCPs match package.json with 2026-05-09\nrelease date.",
"is_bot": false,
"headline": "feat(core): expand crop calendar from 500 to 1000 entries (sticky 19)",
"author_name": "Andrew Christison",
"author_login": "andrewschristison",
"committed_at": "2026-05-10T04:24:42Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "72c93879eef387698c3f55074bb20e05adc79121",
"body": "…y 18.2)\n\nWire the new core 0.5.1 includeIndoor filter through to both human and\nagent surfaces. Default behavior is unchanged for existing users\n(microgreens/sprouts hidden); the flag is the opt-in path.\n\n- pondlog garden now: new --include-indoor boolean flag. Help text and\n examples updated.\n- @\n[…]\neason, harvest ≥ Jun 7)\n --include-indoor → Lentil Sprouts / Mung Bean Sprouts / Alfalfa\n Sprouts / Clover Sprouts / Radish Microgreens\n (year-round indoor, harvest ≥ May 11-14)",
"is_bot": false,
"headline": "feat(cli, mcp): surface --include-indoor on cli and mcp-garden (stick…",
"author_name": "Andrew Christison",
"author_login": "andrewschristison",
"committed_at": "2026-05-09T03:02:12Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "8197174d3b7a31b933c4841c2687c5057d758e82",
"body": "…8.1)\n\nPre-publish polish. The 16 microgreen/sprout entries added in sticky 18\nuse indoor-only year-round windows (-180..180 from frost dates) and\nwere dominating earliest-harvest sorting in pondlog garden now. This\nrelease adds the missing piece of context to the schema and a default\nfilter that hi\n[…]\nsponding bump because it doesn't yet expose an\n--include-indoor flag — the default change happens transparently\nthrough @pondlog/core 0.5.1. Adding the CLI flag is a separate\nfollow-up if you want it.",
"is_bot": false,
"headline": "feat(core): add growingContext field + includeIndoor filter (sticky 1…",
"author_name": "Andrew Christison",
"author_login": "andrewschristison",
"committed_at": "2026-05-09T02:57:36Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "cbe1e120b81b99eab69099ebb5c0b8aef40e10a8",
"body": "Triples the bundled hand-curated planting calendar with no schema or API\nchange. Each new entry has frost-anchored windows, realistic days-to-harvest\nranges from extension-service publications, conservative zone limits, a\nper-entry source field, and gardener-facing notes (toxicity flags,\nregulatory \n[…]\nre minor release may add an outdoor-only flag.\n\nClimate-modifier work (zone alone is insufficient: 8b maritime is not\n8b arid) is intentionally deferred to a follow-up sticky and noted in\nauto-memory.",
"is_bot": false,
"headline": "feat(core): expand crop calendar from 150 to 500 entries (sticky 18)",
"author_name": "Andrew Christison",
"author_login": "andrewschristison",
"committed_at": "2026-05-09T02:45:52Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "09986ce79d07d5e1f0d1a8e6f25f1101c17d4b6a",
"body": "…urce-trefle tests",
"is_bot": false,
"headline": "fix: widen workspace deps to workspace:^, bump patch versions, add so…",
"author_name": "Andrew Christison",
"author_login": "andrewschristison",
"committed_at": "2026-05-08T21:37:43Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d13a5969cd6a1f1dc1ee38878db7e13808e84ea4",
"body": null,
"is_bot": false,
"headline": "chore: bump @pondlog/core to 0.4.0 (missed in sticky 17 commit)",
"author_name": "Andrew Christison",
"author_login": "andrewschristison",
"committed_at": "2026-05-08T17:51:09Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "962b33d92c174ba0577de44682f8cf4be60955bf",
"body": "…y (sticky 17)\n\nPondlog gardens. Three new packages + the world's first plant/garden MCP:\n\n- @pondlog/core gains hardiness-zone + crop-calendar utilities. Bundled\n data: PRISM 2023 USDA zone map (40,283 ZIP centroids) + a hand-curated\n 150-crop planting calendar sourced from USDA Cooperative Exten\n[…]\n.1.0,\nnew @pondlog/mcp-garden 0.1.0.\n\nLive verified: Port Angeles 48.118,-123.4307 → zone 8b, 25 in-window\ncrops on 2026-05-08. Full mcp-garden JSON-RPC handshake green; bad-input\nrejection confirmed.",
"is_bot": false,
"headline": "ship garden planning: usda zones + 150-crop calendar + trefle taxonom…",
"author_name": "Andrew Christison",
"author_login": "andrewschristison",
"committed_at": "2026-05-08T17:49:58Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "14357fb3dc82d2aa92b599a92066a4439db6a0e5",
"body": "…icky 16)\n\n- @pondlog/source-mushroomobserver v0.1.0: Zod-validated MO API2 client\n (7 fns) with 20 req/min limiter and required-narrowing guard.\n- pondlog mushroom recent|search|observation|regions: CLI subcommand group;\n picocolors output, --json on every command. New `set-mushroom-region`\n con\n[…]\nl JSON-RPC handshake\n green on both mcp-mushroomobserver and mcp-pondlog.\n- Versions: @pondlog/core 0.2.0->0.3.0, pondlog CLI 0.2.0->0.3.0,\n @pondlog/mcp-pondlog 0.1.0->0.2.0; new packages at 0.1.0.",
"is_bot": false,
"headline": "ship Mushroom Observer: source client, CLI, MCP, aggregate wiring (st…",
"author_name": "Andrew Christison",
"author_login": "andrewschristison",
"committed_at": "2026-05-08T02:26:20Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "36b05072259e52ecbbe8eb6100e2cb4fdc81e05a",
"body": "One MCP tool call replaces six API integrations. get_nature_briefing\nreturns recent wildlife (iNat + eBird), tides (NOAA), streamflow (USGS),\nphenology (NPN), and a full night-sky briefing (astronomy-engine) for\nany coordinates in one response. Four focused secondary tools\n(get_nearby_wildlife, get_\n[…]\npath get_nature_briefing\nreturns 217 observations + nightSky + phenology, bad input rejected\nby SDK Zod, missing-EBIRD_API_KEY case degrades gracefully (50 inat\nobservations, eBird error in errors[]).",
"is_bot": false,
"headline": "ship mcp-pondlog: aggregate MCP server with five tools (sticky 15)",
"author_name": "Andrew Christison",
"author_login": "andrewschristison",
"committed_at": "2026-05-08T01:33:00Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "aae3b9cc42ee71aac99ff6aaa6179e1f8b5c8fd6",
"body": null,
"is_bot": false,
"headline": "chore: bump core and cli to 0.2.0",
"author_name": "Andrew Christison",
"author_login": "andrewschristison",
"committed_at": "2026-05-08T01:15:25Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "65f4bb6f4eec08014d692fb28b6751c8d4b36751",
"body": "The unified \"what's happening at these coordinates\" briefing ships, closing\nthe loop on the original pondlog charter: one CLI command, six sources fanned\nout in parallel via Promise.allSettled, partial-failure tolerant, file-cached.\n\n@pondlog/core\n- getTidePredictions({stationId, date?}) — thin NOAA\n[…]\ni, 6 core/noaa). pnpm typecheck +\npnpm build clean across all 11 packages. Live at Port Angeles: cold ~2.5s,\nwarm ~0.13s (~20× cache speedup); partial-failure path verified by unsetting\nEBIRD_API_KEY.",
"is_bot": false,
"headline": "ship pondlog today: aggregate briefing across six sources (sticky 14)",
"author_name": "Andrew Christison",
"author_login": "andrewschristison",
"committed_at": "2026-05-08T01:12:56Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "38f8ff74a5cfac76b166f67f964e682b21006747",
"body": "@pondlog/source-nightsky v0.1.0 — pure local computation built on\nastronomy-engine (^2.1.19), replacing the original SunCalc+NOAA plan\nwith a strict superset that adds planets, magnitudes, and\nconstellation lookup. 7 functions: getTonightsBriefing (top-level\ncomposer), getSunTimes, getMoonPhase, get\n[…]\ndeferred to Sticky 14 where it belongs with the\nother network sources.\n\n28 unit tests + 2 deterministic smoke tests at Port Angeles pass;\npnpm typecheck + build clean across all 11 workspace packages.",
"is_bot": false,
"headline": "ship Night Sky: source client + CLI (sticky 13)",
"author_name": "Andrew Christison",
"author_login": "andrewschristison",
"committed_at": "2026-05-07T23:00:12Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "e529c3e61ecec7aef3733a6b64312291e5ce6fb3",
"body": "@pondlog/source-usgs v0.1.0 — 4 USGS Water Services functions\n(getInstantaneousValues, getDailyValues, getSiteInfo, searchSites)\nplus bboxAround helper. Result<T>, Zod-validated, polite-rate-limited.\nHandles WaterML JSON envelope, RDB-only /site/ endpoint, and the\n-999999 noDataValue sentinel.\n\npond\n[…]\nturns HTML 400), unknown sites return HTTP\n200 with empty timeSeries.\n\nVerified: 16 unit + 8 live smoke tests, full MCP JSON-RPC handshake,\npnpm typecheck/build clean across all 10 workspace packages.",
"is_bot": false,
"headline": "ship USGS: source client, CLI subcommands, MCP server (stickies 11 + 12)",
"author_name": "Andrew Christison",
"author_login": "andrewschristison",
"committed_at": "2026-05-07T22:20:21Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "4d3222fb460cbba20ba16ef2bc68013ea5ae3099",
"body": "Real base URL is services.usanpn.org/npn_portal/ (the audit doc had the\nwrong host). NPN spatial model is WKT polygons, not lat/lng/radius —\nadded bboxWkt + haversineKm helpers. Discovered live: station_id\n(singular) on getSiteLevelData but station_ids (plural) on\ngetObservations; -9999 is the null \n[…]\npecheck + build clean across all 8 packages; 12 unit\n+ 9 live smoke tests pass; full MCP JSON-RPC handshake (initialize +\ntools/list + 3 live tools/call + bad-input rejection) per\nmcp-server SKILL.md.",
"is_bot": false,
"headline": "ship NPN: source client, CLI subcommands, MCP server (stickies 9 + 10)",
"author_name": "Andrew Christison",
"author_login": "andrewschristison",
"committed_at": "2026-05-07T21:50:12Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "2282f0445ba542e8faae237e865069a0d4ed355b",
"body": "Ships @pondlog/mcp-ebird v0.1.0 — 21 MCP tools covering all 21 endpoints\nof the eBird API v2: observations (7), product (3), hotspots (3),\ntaxonomy (5), regions (3). Each tool is a thin wrapper over the\nmatching @pondlog/source-ebird function via @modelcontextprotocol/sdk\nv1, stdio transport, NPX-re\n[…]\nfo, tools/list returns\n21, bad-input tools/call (lat=999) is rejected with isError: true\nbefore the handler runs, live tools/call get_nearby_recent for Port\nAngeles returned ok: true with 138 species.",
"is_bot": false,
"headline": "feat(mcp-ebird): eBird MCP server (21 tools, 100% API coverage)",
"author_name": "Andrew Christison",
"author_login": "andrewschristison",
"committed_at": "2026-05-07T20:41:19Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "847d89b161974d4f15e3c633928bdc09c9ccf133",
"body": "Adds `pondlog ebird recent | notable | species <code> | historic <date>\n--region | hotspots | checklist <subId>`. Mirrors the `pondlog inat`\nflag conventions (--lat/--lng/--radius/--days/--json) with location\nresolution from flags → ~/.pondlog/config.json → friendly error.\n\nEvery eBird subcommand re\n[…]\n smoke\nof all 6 commands against the real eBird API for Port Angeles\nreturned the expected output (166 species nearby, 1 notable Mountain\nBluebird, 100 hotspots, 125 historic obs across 27 locations).",
"is_bot": false,
"headline": "feat(cli): pondlog ebird subcommands (6 commands)",
"author_name": "Andrew Christison",
"author_login": "andrewschristison",
"committed_at": "2026-05-07T20:09:17Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "51aefe07998c645948f7b1b5a129aa83b6f4269d",
"body": "Ships @pondlog/source-ebird v0.1.0 covering all 21 documented endpoints\nacross Observations (7), Product (3), Hotspots (3), Taxonomy (5), and\nRegions (3). Mirrors @pondlog/source-inaturalist conventions:\nResult<T> everywhere, Zod-validated responses, shared 100 req/min\nRateLimiter, exponential backo\n[…]\ns bounds).\n\nVerified: typecheck + build clean across all 5 workspace packages;\n15/15 Zod schema + normalization unit tests pass; 5/5 live smoke\nagainst the real eBird API in 3.58s (Port Angeles area).",
"is_bot": false,
"headline": "feat(source-ebird): 100% eBird API v2 client (21 endpoints)",
"author_name": "Andrew Christison",
"author_login": "andrewschristison",
"committed_at": "2026-05-07T19:51:43Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "e378e3a0f5cd325321bdc61278b747bd3d248e6b",
"body": null,
"is_bot": false,
"headline": "chore: remove AI workflow files from tracking",
"author_name": "Andrew Christison",
"author_login": "andrewschristison",
"committed_at": "2026-05-07T18:39:28Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "bd77b191ffe64c74d3154ccf25d21d94a19d4a0f",
"body": null,
"is_bot": false,
"headline": "chore: remove CLAUDE.md from tracking",
"author_name": "Andrew Christison",
"author_login": "andrewschristison",
"committed_at": "2026-05-07T18:38:48Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "bd01b8c76b2a13174c02a1ef29b555ec0719e611",
"body": null,
"is_bot": false,
"headline": "chore: move internal dev docs out of public repo",
"author_name": "Andrew Christison",
"author_login": "andrewschristison",
"committed_at": "2026-05-07T18:37:26Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "72838c8a98b1646c2bd59e438605e3c26f81ac22",
"body": "Sticky 4 prep — get the workspace ready for the first npm push of the\n@pondlog scope and the pondlog CLI.\n\n- Fix GitHub username refs to andrewschristison (npm scope and login\n remain andrewchristison without the s).\n- Add repository / homepage / bugs / keywords to every package.json,\n plus publis\n[…]\n package.json (+ server.json for mcp-inaturalist). No src, no tests,\nno tsconfig. workspace:* references are rewritten to 0.1.0 in the\npublished metadata.\n\nThe actual publish runs in a follow-up step.",
"is_bot": false,
"headline": "chore: pre-publish hardening for v0.1.0",
"author_name": "Andrew Christison",
"author_login": "andrewschristison",
"committed_at": "2026-05-07T18:24:07Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "82c07208d2277d478e695495258161e551bac562",
"body": "Sticky 3.5 — distill the patterns that emerged while building\n@pondlog/mcp-inaturalist into a reusable skill. Future stickies\nthat ship MCP servers (7 eBird, 10 NPN, 12 USGS, 15 aggregate)\nread this file before writing any tool code.\n\nCovers nine sections: the SDK API gotcha (inputSchema is a Zod ra\n[…]\nsystem-design, harden) that point at a sibling\nrepo. .gitignore now ignores everything under .agents/skills/* with\nan explicit allow for this in-repo skill, so future local skills\nmust opt in by name.",
"is_bot": false,
"headline": "docs(skills): extract mcp-server skill from Sticky 3 patterns",
"author_name": "Andrew Christison",
"author_login": "andrewschristison",
"committed_at": "2026-05-07T17:36:13Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "5af103dd8538c4b60217f0fe9f9eb78c56896a68",
"body": "Sticky 3 — @pondlog/mcp-inaturalist exposes the source-inaturalist\nclient via Model Context Protocol over stdio. Each of the nine tools\n(search_observations, get_observation, get_species_counts, search_taxa,\nget_taxon, get_nearby_observations, get_iconic_taxa_summary,\nsearch_places, get_observers) i\n[…]\nturns 9 tools with the expected schemas, live\ntools/call get_nearby_observations near Port Angeles returns 50 real\nobservations, and invalid input is rejected with isError before\nreaching the handler.",
"is_bot": false,
"headline": "feat(mcp): iNaturalist MCP server with 9 tools",
"author_name": "Andrew Christison",
"author_login": "andrewschristison",
"committed_at": "2026-05-07T17:28:01Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "983963a5a8d8e9601ecf61aa57bf127079976e13",
"body": "Sticky 2 — pondlog config (set-location with --lat/--lng flags + name,\nshow with --json) backed by ~/.pondlog/config.json (versioned, Zod-\nvalidated, atomic write, mode-0600 file in mode-0700 dir; PONDLOG_\nCONFIG_DIR env override). Four iNat commands — nearby, species, search,\ntaxon — each with --la\n[…]\nt API at Port Angeles: all sticky-listed\ncommands work, --json output is valid JSON, and negative cases (bad\nlat, bad radius, --lat without --lng, missing config) all surface\nuseful errors and exit 1.",
"is_bot": false,
"headline": "feat(cli): iNaturalist commands, config system, and validation",
"author_name": "Andrew Christison",
"author_login": "andrewschristison",
"committed_at": "2026-05-07T17:01:40Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "c0587e3a3a78f8f3cfc96e4190690eab800da355",
"body": "Sticky 1 — pnpm workspace with strict TypeScript (ES2022 / NodeNext) and\nfour packages: @pondlog/core (shared types, Result<T>, token-bucket\nRateLimiter, retry, coord parsing), @pondlog/source-inaturalist (Zod\nschemas, normalizers, rate-limited fetch client, 9 functions returning\nResult<T>), pondlog\n[…]\nst MCP shell.\n\nVerified: typecheck + tsup build clean across all 4 packages, 16 unit\ntests passing, 9 live smoke tests against the real iNaturalist API at\nPort Angeles (48.118, -123.4307) all passing.",
"is_bot": false,
"headline": "feat: scaffold monorepo and iNaturalist source client",
"author_name": "Andrew Christison",
"author_login": "andrewschristison",
"committed_at": "2026-05-07T16:35:45Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "90ba11a680112480ddb8bdb4c87c5f67990a0350",
"body": "…, stickies",
"is_bot": false,
"headline": "Initial project docs: CLAUDE.md, architecture, API audit, methodology…",
"author_name": "Andrew Christison",
"author_login": "andrewschristison",
"committed_at": "2026-05-07T16:22:00Z",
"body_truncated": false,
"is_coding_agent": false
}
],
"releases_count": 8,
"commits_last_year": 49,
"latest_release_at": "2026-07-07T03:41:16Z",
"latest_release_tag": "v1.0.1",
"releases_from_tags": true,
"days_since_last_push": 19,
"active_weeks_last_year": 3,
"days_since_latest_release": 19,
"mean_days_between_releases": 8.6
},
"community": {
"has_readme": true,
"has_license": true,
"has_description": true,
"has_contributing": false,
"health_percentage": 42,
"has_issue_template": false,
"has_code_of_conduct": false,
"has_pull_request_template": false
},
"ecosystem": {
"packages": [
{
"name": "pondlog",
"exists": true,
"license": "MIT",
"keywords": [
"pondlog",
"cli",
"nature",
"garden",
"planting-calendar",
"wildlife",
"birds",
"inaturalist",
"ebird",
"biodiversity"
],
"ecosystem": "npm",
"matches_repo": true,
"registry_url": "https://www.npmjs.com/package/pondlog",
"is_deprecated": false,
"latest_version": "0.8.0",
"repository_url": "https://github.com/andrewschristison/pondlog",
"versions_count": 12,
"total_downloads": null,
"dependents_count": null,
"deprecation_note": null,
"maintainers_count": 1,
"monthly_downloads": 105,
"first_published_at": "2026-05-07T18:46:24.311000Z",
"latest_published_at": "2026-05-13T02:25:45.289000Z",
"latest_version_yanked": null,
"days_since_latest_publish": 74
},
{
"name": "@pondlog/core",
"exists": true,
"license": "MIT",
"keywords": [
"pondlog",
"nature",
"wildlife",
"biodiversity",
"noaa",
"tides",
"types",
"rate-limiter",
"result",
"zod"
],
"ecosystem": "npm",
"matches_repo": true,
"registry_url": "https://www.npmjs.com/package/@pondlog/core",
"is_deprecated": false,
"latest_version": "1.0.0",
"repository_url": "https://github.com/andrewschristison/pondlog",
"versions_count": 12,
"total_downloads": null,
"dependents_count": null,
"deprecation_note": null,
"maintainers_count": 1,
"monthly_downloads": 542,
"first_published_at": "2026-05-07T18:46:20.304000Z",
"latest_published_at": "2026-05-13T02:25:38.813000Z",
"latest_version_yanked": null,
"days_since_latest_publish": 74
},
{
"name": "@pondlog/mcp-npn",
"exists": true,
"license": "MIT",
"keywords": [
"pondlog",
"mcp",
"model-context-protocol",
"ai",
"tools",
"claude-desktop",
"cursor",
"phenology",
"bloom",
"seasons",
"national-phenology-network",
"nature",
"npn",
"usa-npn",
"wildlife"
],
"ecosystem": "npm",
"matches_repo": true,
"registry_url": "https://www.npmjs.com/package/@pondlog/mcp-npn",
"is_deprecated": false,
"latest_version": "0.1.5",
"repository_url": "https://github.com/andrewschristison/pondlog",
"versions_count": 6,
"total_downloads": null,
"dependents_count": null,
"deprecation_note": null,
"maintainers_count": 1,
"monthly_downloads": 140,
"first_published_at": "2026-05-07T21:53:24.795000Z",
"latest_published_at": "2026-05-12T17:16:36.957000Z",
"latest_version_yanked": null,
"days_since_latest_publish": 75
},
{
"name": "@pondlog/mcp-usgs",
"exists": true,
"license": "MIT",
"keywords": [
"pondlog",
"mcp",
"model-context-protocol",
"ai",
"tools",
"claude-desktop",
"cursor",
"usgs",
"streamflow",
"water",
"hydrology",
"rivers",
"nwis"
],
"ecosystem": "npm",
"matches_repo": true,
"registry_url": "https://www.npmjs.com/package/@pondlog/mcp-usgs",
"is_deprecated": false,
"latest_version": "0.1.6",
"repository_url": "https://github.com/andrewschristison/pondlog",
"versions_count": 7,
"total_downloads": null,
"dependents_count": null,
"deprecation_note": null,
"maintainers_count": 1,
"monthly_downloads": 160,
"first_published_at": "2026-05-07T22:24:09.231000Z",
"latest_published_at": "2026-05-12T17:16:38.969000Z",
"latest_version_yanked": null,
"days_since_latest_publish": 75
},
{
"name": "@pondlog/mcp-ebird",
"exists": true,
"license": "MIT",
"keywords": [
"pondlog",
"mcp",
"model-context-protocol",
"ai",
"tools",
"claude-desktop",
"cursor",
"ebird",
"birds",
"birding",
"ornithology",
"birdwatching",
"wildlife"
],
"ecosystem": "npm",
"matches_repo": true,
"registry_url": "https://www.npmjs.com/package/@pondlog/mcp-ebird",
"is_deprecated": false,
"latest_version": "0.1.5",
"repository_url": "https://github.com/andrewschristison/pondlog",
"versions_count": 6,
"total_downloads": null,
"dependents_count": null,
"deprecation_note": null,
"maintainers_count": 1,
"monthly_downloads": 157,
"first_published_at": "2026-05-07T20:45:08.613000Z",
"latest_published_at": "2026-05-12T17:16:34.075000Z",
"latest_version_yanked": null,
"days_since_latest_publish": 75
},
{
"name": "@pondlog/mcp-garden",
"exists": true,
"license": "MIT",
"keywords": [
"deprecated"
],
"ecosystem": "npm",
"matches_repo": true,
"registry_url": "https://www.npmjs.com/package/@pondlog/mcp-garden",
"is_deprecated": true,
"latest_version": "0.3.4",
"repository_url": "https://github.com/andrewschristison/pondlog",
"versions_count": 10,
"total_downloads": null,
"dependents_count": null,
"deprecation_note": "Replaced by @cropgraph/mcp. Install: npx @cropgraph/mcp",
"maintainers_count": 1,
"monthly_downloads": 160,
"first_published_at": "2026-05-08T18:00:53.749000Z",
"latest_published_at": "2026-05-13T02:25:43.284000Z",
"latest_version_yanked": null,
"days_since_latest_publish": 74
},
{
"name": "@pondlog/source-npn",
"exists": true,
"license": "MIT",
"keywords": [
"pondlog",
"phenology",
"bloom",
"seasons",
"national-phenology-network",
"nature",
"api-client",
"zod",
"npn",
"usa-npn"
],
"ecosystem": "npm",
"matches_repo": true,
"registry_url": "https://www.npmjs.com/package/@pondlog/source-npn",
"is_deprecated": false,
"latest_version": "0.2.0",
"repository_url": "https://github.com/andrewschristison/pondlog",
"versions_count": 5,
"total_downloads": null,
"dependents_count": null,
"deprecation_note": null,
"maintainers_count": 1,
"monthly_downloads": 358,
"first_published_at": "2026-05-07T21:53:23.274000Z",
"latest_published_at": "2026-07-07T03:47:15.378000Z",
"latest_version_yanked": null,
"days_since_latest_publish": 19
},
{
"name": "@pondlog/mcp-pondlog",
"exists": true,
"license": "MIT",
"keywords": [
"pondlog",
"mcp",
"model-context-protocol",
"ai",
"tools",
"claude-desktop",
"cursor",
"nature",
"aggregate",
"briefing",
"birds",
"weather",
"wildlife",
"tides",
"streamflow",
"phenology",
"astronomy",
"inaturalist",
"ebird",
"noaa",
"usgs",
"npn"
],
"ecosystem": "npm",
"matches_repo": true,
"registry_url": "https://www.npmjs.com/package/@pondlog/mcp-pondlog",
"is_deprecated": false,
"latest_version": "0.4.0",
"repository_url": "https://github.com/andrewschristison/pondlog",
"versions_count": 12,
"total_downloads": null,
"dependents_count": null,
"deprecation_note": null,
"maintainers_count": 1,
"monthly_downloads": 543,
"first_published_at": "2026-05-08T01:38:38.072000Z",
"latest_published_at": "2026-05-13T02:25:41.008000Z",
"latest_version_yanked": null,
"days_since_latest_publish": 74
}
]
},
"popularity": {
"forks": 0,
"stars": 0,
"watchers": 0,
"fork_history": {
"days": [],
"complete": true,
"collected": 0,
"total_forks": 0
},
"star_history": {
"days": [],
"complete": true,
"collected": 0,
"total_stars": 0,
"collected_at": null
},
"open_issues_and_prs": 1
},
"ai_readiness": {
"has_nix": false,
"example_dirs": [],
"has_llms_txt": true,
"has_dockerfile": false,
"has_mcp_signal": true,
"bootstrap_files": [],
"api_schema_files": [],
"has_devcontainer": false,
"typecheck_configs": [
"packages/cli/tsconfig.json",
"packages/core/tsconfig.json",
"packages/mcp-ebird/tsconfig.json",
"packages/mcp-garden/tsconfig.json",
"packages/mcp-inaturalist/tsconfig.json",
"packages/mcp-mushroomobserver/tsconfig.json",
"packages/mcp-npn/tsconfig.json",
"packages/mcp-pondlog/tsconfig.json",
"packages/mcp-usgs/tsconfig.json",
"packages/source-ebird/tsconfig.json",
"packages/source-inaturalist/tsconfig.json",
"packages/source-mushroomobserver/tsconfig.json",
"packages/source-nightsky/tsconfig.json",
"packages/source-npn/tsconfig.json",
"packages/source-trefle/tsconfig.json",
"packages/source-usgs/tsconfig.json"
],
"toolchain_manifests": [],
"largest_source_bytes": 30079,
"source_files_sampled": 142,
"oversized_source_files": 0,
"agent_instruction_files": [],
"agent_instruction_max_bytes": null
},
"dependencies": {
"manifests": [
"package.json"
],
"advisories": {
"error": null,
"scope": "published_package",
"source": "osv",
"findings": [],
"collected": true,
"malicious": [],
"truncated": false,
"by_severity": {},
"advisory_count": 0,
"affected_count": 0,
"assessed_count": 13,
"malicious_count": 0,
"assessed_package": "npm:pondlog@0.8.0",
"unassessed_count": 0,
"direct_affected_count": 0
},
"ecosystems": [
"npm"
],
"dependencies": [
{
"name": "@cropgraph/core",
"manifest": "packages/cli/package.json",
"ecosystem": "npm",
"version_constraint": "^3.0.0"
},
{
"name": "@pondlog/core",
"manifest": "packages/cli/package.json",
"ecosystem": "npm",
"version_constraint": "workspace:^"
},
{
"name": "@pondlog/source-ebird",
"manifest": "packages/cli/package.json",
"ecosystem": "npm",
"version_constraint": "workspace:^"
},
{
"name": "@pondlog/source-inaturalist",
"manifest": "packages/cli/package.json",
"ecosystem": "npm",
"version_constraint": "workspace:^"
},
{
"name": "@pondlog/source-mushroomobserver",
"manifest": "packages/cli/package.json",
"ecosystem": "npm",
"version_constraint": "workspace:^"
},
{
"name": "@pondlog/source-nightsky",
"manifest": "packages/cli/package.json",
"ecosystem": "npm",
"version_constraint": "workspace:^"
},
{
"name": "@pondlog/source-npn",
"manifest": "packages/cli/package.json",
"ecosystem": "npm",
"version_constraint": "workspace:^"
},
{
"name": "@pondlog/source-usgs",
"manifest": "packages/cli/package.json",
"ecosystem": "npm",
"version_constraint": "workspace:^"
},
{
"name": "commander",
"manifest": "packages/cli/package.json",
"ecosystem": "npm",
"version_constraint": "^12.1.0"
},
{
"name": "picocolors",
"manifest": "packages/cli/package.json",
"ecosystem": "npm",
"version_constraint": "^1.1.1"
},
{
"name": "zod",
"manifest": "packages/cli/package.json",
"ecosystem": "npm",
"version_constraint": "^3.23.8"
},
{
"name": "@cropgraph/core",
"manifest": "packages/core/package.json",
"ecosystem": "npm",
"version_constraint": "^3.0.0"
},
{
"name": "zod",
"manifest": "packages/core/package.json",
"ecosystem": "npm",
"version_constraint": "^3.23.8"
},
{
"name": "@cropgraph/core",
"manifest": "packages/mcp-ebird/package.json",
"ecosystem": "npm",
"version_constraint": "^3.0.0"
},
{
"name": "@modelcontextprotocol/sdk",
"manifest": "packages/mcp-ebird/package.json",
"ecosystem": "npm",
"version_constraint": "^1.0.4"
},
{
"name": "@pondlog/core",
"manifest": "packages/mcp-ebird/package.json",
"ecosystem": "npm",
"version_constraint": "workspace:^"
},
{
"name": "@pondlog/source-ebird",
"manifest": "packages/mcp-ebird/package.json",
"ecosystem": "npm",
"version_constraint": "workspace:^"
},
{
"name": "zod",
"manifest": "packages/mcp-ebird/package.json",
"ecosystem": "npm",
"version_constraint": "^3.23.8"
},
{
"name": "@cropgraph/core",
"manifest": "packages/mcp-garden/package.json",
"ecosystem": "npm",
"version_constraint": "^3.0.0"
},
{
"name": "@cropgraph/core",
"manifest": "packages/mcp-inaturalist/package.json",
"ecosystem": "npm",
"version_constraint": "^3.0.0"
},
{
"name": "@modelcontextprotocol/sdk",
"manifest": "packages/mcp-inaturalist/package.json",
"ecosystem": "npm",
"version_constraint": "^1.0.4"
},
{
"name": "@pondlog/core",
"manifest": "packages/mcp-inaturalist/package.json",
"ecosystem": "npm",
"version_constraint": "workspace:^"
},
{
"name": "@pondlog/source-inaturalist",
"manifest": "packages/mcp-inaturalist/package.json",
"ecosystem": "npm",
"version_constraint": "workspace:^"
},
{
"name": "zod",
"manifest": "packages/mcp-inaturalist/package.json",
"ecosystem": "npm",
"version_constraint": "^3.23.8"
},
{
"name": "@cropgraph/core",
"manifest": "packages/mcp-mushroomobserver/package.json",
"ecosystem": "npm",
"version_constraint": "^3.0.0"
},
{
"name": "@modelcontextprotocol/sdk",
"manifest": "packages/mcp-mushroomobserver/package.json",
"ecosystem": "npm",
"version_constraint": "^1.0.4"
},
{
"name": "@pondlog/core",
"manifest": "packages/mcp-mushroomobserver/package.json",
"ecosystem": "npm",
"version_constraint": "workspace:^"
},
{
"name": "@pondlog/source-mushroomobserver",
"manifest": "packages/mcp-mushroomobserver/package.json",
"ecosystem": "npm",
"version_constraint": "workspace:^"
},
{
"name": "zod",
"manifest": "packages/mcp-mushroomobserver/package.json",
"ecosystem": "npm",
"version_constraint": "^3.23.8"
},
{
"name": "@cropgraph/core",
"manifest": "packages/mcp-npn/package.json",
"ecosystem": "npm",
"version_constraint": "^3.0.0"
},
{
"name": "@modelcontextprotocol/sdk",
"manifest": "packages/mcp-npn/package.json",
"ecosystem": "npm",
"version_constraint": "^1.0.4"
},
{
"name": "@pondlog/core",
"manifest": "packages/mcp-npn/package.json",
"ecosystem": "npm",
"version_constraint": "workspace:^"
},
{
"name": "@pondlog/source-npn",
"manifest": "packages/mcp-npn/package.json",
"ecosystem": "npm",
"version_constraint": "workspace:^"
},
{
"name": "zod",
"manifest": "packages/mcp-npn/package.json",
"ecosystem": "npm",
"version_constraint": "^3.23.8"
},
{
"name": "@cropgraph/core",
"manifest": "packages/mcp-pondlog/package.json",
"ecosystem": "npm",
"version_constraint": "^3.0.0"
},
{
"name": "@modelcontextprotocol/sdk",
"manifest": "packages/mcp-pondlog/package.json",
"ecosystem": "npm",
"version_constraint": "^1.0.4"
},
{
"name": "@pondlog/core",
"manifest": "packages/mcp-pondlog/package.json",
"ecosystem": "npm",
"version_constraint": "workspace:^"
},
{
"name": "@pondlog/source-ebird",
"manifest": "packages/mcp-pondlog/package.json",
"ecosystem": "npm",
"version_constraint": "workspace:^"
},
{
"name": "@pondlog/source-inaturalist",
"manifest": "packages/mcp-pondlog/package.json",
"ecosystem": "npm",
"version_constraint": "workspace:^"
},
{
"name": "@pondlog/source-mushroomobserver",
"manifest": "packages/mcp-pondlog/package.json",
"ecosystem": "npm",
"version_constraint": "workspace:^"
},
{
"name": "@pondlog/source-nightsky",
"manifest": "packages/mcp-pondlog/package.json",
"ecosystem": "npm",
"version_constraint": "workspace:^"
},
{
"name": "@pondlog/source-npn",
"manifest": "packages/mcp-pondlog/package.json",
"ecosystem": "npm",
"version_constraint": "workspace:^"
},
{
"name": "@pondlog/source-usgs",
"manifest": "packages/mcp-pondlog/package.json",
"ecosystem": "npm",
"version_constraint": "workspace:^"
},
{
"name": "zod",
"manifest": "packages/mcp-pondlog/package.json",
"ecosystem": "npm",
"version_constraint": "^3.23.8"
},
{
"name": "@cropgraph/core",
"manifest": "packages/mcp-usgs/package.json",
"ecosystem": "npm",
"version_constraint": "^3.0.0"
},
{
"name": "@modelcontextprotocol/sdk",
"manifest": "packages/mcp-usgs/package.json",
"ecosystem": "npm",
"version_constraint": "^1.0.4"
},
{
"name": "@pondlog/core",
"manifest": "packages/mcp-usgs/package.json",
"ecosystem": "npm",
"version_constraint": "workspace:^"
},
{
"name": "@pondlog/source-usgs",
"manifest": "packages/mcp-usgs/package.json",
"ecosystem": "npm",
"version_constraint": "workspace:^"
},
{
"name": "zod",
"manifest": "packages/mcp-usgs/package.json",
"ecosystem": "npm",
"version_constraint": "^3.23.8"
},
{
"name": "@cropgraph/core",
"manifest": "packages/source-ebird/package.json",
"ecosystem": "npm",
"version_constraint": "^3.0.0"
},
{
"name": "@pondlog/core",
"manifest": "packages/source-ebird/package.json",
"ecosystem": "npm",
"version_constraint": "workspace:^"
},
{
"name": "zod",
"manifest": "packages/source-ebird/package.json",
"ecosystem": "npm",
"version_constraint": "^3.23.8"
},
{
"name": "@cropgraph/core",
"manifest": "packages/source-inaturalist/package.json",
"ecosystem": "npm",
"version_constraint": "^3.0.0"
},
{
"name": "@pondlog/core",
"manifest": "packages/source-inaturalist/package.json",
"ecosystem": "npm",
"version_constraint": "workspace:^"
},
{
"name": "zod",
"manifest": "packages/source-inaturalist/package.json",
"ecosystem": "npm",
"version_constraint": "^3.23.8"
},
{
"name": "@cropgraph/core",
"manifest": "packages/source-mushroomobserver/package.json",
"ecosystem": "npm",
"version_constraint": "^3.0.0"
},
{
"name": "@pondlog/core",
"manifest": "packages/source-mushroomobserver/package.json",
"ecosystem": "npm",
"version_constraint": "workspace:^"
},
{
"name": "zod",
"manifest": "packages/source-mushroomobserver/package.json",
"ecosystem": "npm",
"version_constraint": "^3.23.8"
},
{
"name": "@cropgraph/core",
"manifest": "packages/source-nightsky/package.json",
"ecosystem": "npm",
"version_constraint": "^3.0.0"
},
{
"name": "@pondlog/core",
"manifest": "packages/source-nightsky/package.json",
"ecosystem": "npm",
"version_constraint": "workspace:^"
},
{
"name": "astronomy-engine",
"manifest": "packages/source-nightsky/package.json",
"ecosystem": "npm",
"version_constraint": "^2.1.19"
},
{
"name": "@cropgraph/core",
"manifest": "packages/source-npn/package.json",
"ecosystem": "npm",
"version_constraint": "^3.0.0"
},
{
"name": "@pondlog/core",
"manifest": "packages/source-npn/package.json",
"ecosystem": "npm",
"version_constraint": "workspace:^"
},
{
"name": "zod",
"manifest": "packages/source-npn/package.json",
"ecosystem": "npm",
"version_constraint": "^3.23.8"
},
{
"name": "@cropgraph/core",
"manifest": "packages/source-trefle/package.json",
"ecosystem": "npm",
"version_constraint": "^3.0.0"
},
{
"name": "@pondlog/core",
"manifest": "packages/source-trefle/package.json",
"ecosystem": "npm",
"version_constraint": "workspace:^"
},
{
"name": "zod",
"manifest": "packages/source-trefle/package.json",
"ecosystem": "npm",
"version_constraint": "^3.23.8"
},
{
"name": "@cropgraph/core",
"manifest": "packages/source-usgs/package.json",
"ecosystem": "npm",
"version_constraint": "^3.0.0"
},
{
"name": "@pondlog/core",
"manifest": "packages/source-usgs/package.json",
"ecosystem": "npm",
"version_constraint": "workspace:^"
},
{
"name": "zod",
"manifest": "packages/source-usgs/package.json",
"ecosystem": "npm",
"version_constraint": "^3.23.8"
}
],
"all_dependencies": {
"error": "GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository",
"source": null,
"packages": [],
"collected": false,
"truncated": false,
"total_count": null,
"direct_count": null,
"indirect_count": null
}
},
"maintainership": {
"issues": {
"open_prs": 0,
"merged_prs": 0,
"open_issues": 1,
"closed_ratio": 0,
"closed_issues": 0,
"closed_unmerged_prs": 0
},
"bus_factor": 1,
"bot_contributors": 0,
"top_contributors": [
{
"type": "User",
"login": "andrewschristison",
"commits": 49,
"avatar_url": "https://avatars.githubusercontent.com/u/243887122?v=4"
}
],
"contributors_sampled": 1,
"top_contributor_share": 1
},
"quality_signals": {
"has_ci": true,
"has_tests": true,
"ci_workflows": [
"ci.yml",
"deploy-site.yml",
"publish.yml"
],
"has_docs_dir": true,
"linter_configs": [],
"has_editorconfig": false,
"has_linter_config": false,
"has_precommit_config": false
},
"security_signals": {
"lockfiles": [
"pnpm-lock.yaml"
],
"scorecard": {
"checks": [
{
"name": "Binary-Artifacts",
"score": 10,
"reason": "no binaries found in the repo",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#binary-artifacts"
},
{
"name": "Branch-Protection",
"score": 0,
"reason": "branch protection not enabled on development/release branches",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#branch-protection"
},
{
"name": "CI-Tests",
"score": null,
"reason": "no pull request found",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#ci-tests"
},
{
"name": "CII-Best-Practices",
"score": 0,
"reason": "no effort to earn an OpenSSF best practices badge detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#cii-best-practices"
},
{
"name": "Code-Review",
"score": 0,
"reason": "Found 0/30 approved changesets -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#code-review"
},
{
"name": "Contributors",
"score": 3,
"reason": "project has 1 contributing companies or organizations -- score normalized to 3",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#contributors"
},
{
"name": "Dangerous-Workflow",
"score": 10,
"reason": "no dangerous workflow patterns detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dangerous-workflow"
},
{
"name": "Dependency-Update-Tool",
"score": 0,
"reason": "no update tool detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dependency-update-tool"
},
{
"name": "Fuzzing",
"score": 0,
"reason": "project is not fuzzed",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#fuzzing"
},
{
"name": "License",
"score": 10,
"reason": "license file detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#license"
},
{
"name": "Maintained",
"score": 0,
"reason": "project was created within the last 90 days. Please review its contents carefully",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#maintained"
},
{
"name": "Packaging",
"score": 10,
"reason": "packaging workflow detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#packaging"
},
{
"name": "Pinned-Dependencies",
"score": 0,
"reason": "dependency not pinned by hash detected -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#pinned-dependencies"
},
{
"name": "SAST",
"score": 0,
"reason": "no SAST tool detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#sast"
},
{
"name": "Security-Policy",
"score": 0,
"reason": "security policy file not detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#security-policy"
},
{
"name": "Signed-Releases",
"score": null,
"reason": "no releases found",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#signed-releases"
},
{
"name": "Token-Permissions",
"score": 0,
"reason": "detected GitHub workflow tokens with excessive permissions",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#token-permissions"
},
{
"name": "Vulnerabilities",
"score": 0,
"reason": "24 existing vulnerabilities detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#vulnerabilities"
}
],
"commit": "ad9ada0cb7a172079b2aa41028822ff442d2b81a",
"ran_at": "2026-07-26T22:59:21Z",
"aggregate_score": 2.7,
"scorecard_version": "v5.5.0"
},
"has_codeql_workflow": false,
"has_security_policy": false,
"has_dependabot_config": false
},
"contribution_flow": {
"collected": true,
"ci_last_run_at": "2026-07-07T03:42:26Z",
"oldest_open_prs": [],
"last_merged_pr_at": null,
"ci_last_conclusion": "FAILURE",
"oldest_open_issues": [
{
"number": 1,
"created_at": "2026-07-12T21:22:16Z",
"last_comment_at": null,
"last_comment_author": null
}
]
}
},
"config": {
"disabled_metrics": [],
"disabled_categories": [],
"disabled_components": {}
},
"source": {
"url": "https://github.com/andrewschristison/pondlog",
"host": "github.com",
"name": "pondlog",
"owner": "andrewschristison"
},
"metrics": {
"overall": {
"key": "overall",
"band": "at_risk",
"name": "Overall health",
"note": null,
"notes": [],
"value": 46,
"inputs": {
"security": 42,
"vitality": 63,
"community": 32,
"governance": 25,
"engineering": 70
},
"components": []
},
"categories": [
{
"key": "vitality",
"band": "moderate",
"name": "Vitality",
"value": 63,
"weight": 0.22,
"metrics": [
{
"key": "development_activity",
"band": "at_risk",
"name": "Development activity",
"note": null,
"notes": [],
"value": 46,
"inputs": {
"commits_last_year": 49,
"human_commit_share": 1,
"days_since_last_push": 19,
"active_weeks_last_year": 3
},
"components": [
{
"key": "push_recency",
"name": "Push recency",
"detail": "last push 19 days ago",
"points": 28.8,
"status": "partial",
"details": [
{
"code": "push_recency",
"params": {
"days": 19
}
}
],
"max_points": 36
},
{
"key": "commit_cadence",
"name": "Commit cadence",
"detail": "3/52 weeks with commits",
"points": 2.1,
"status": "partial",
"details": [
{
"code": "commit_cadence_weeks",
"params": {
"weeks": 3
}
}
],
"max_points": 36
},
{
"key": "commit_volume",
"name": "Commit volume",
"detail": "49 commits in the last year",
"points": 15.3,
"status": "partial",
"details": [
{
"code": "commits_last_year",
"params": {
"count": 49
}
}
],
"max_points": 18
},
{
"key": "openssf_scorecard_maintained",
"name": "OpenSSF Scorecard: Maintained",
"detail": "project was created within the last 90 days. Please review its contents carefully",
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
}
]
},
{
"key": "release_discipline",
"band": "excellent",
"name": "Release discipline",
"note": "Excluded from scoring (no data or not applicable): OpenSSF Scorecard: Signed-Releases. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"openssf_scorecard_signed_releases"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 88,
"inputs": {
"releases_count": 8,
"latest_release_tag": "v1.0.1",
"releases_from_tags": true,
"days_since_latest_release": 19,
"mean_days_between_releases": 8.6
},
"components": [
{
"key": "ships_releases",
"name": "Ships releases",
"detail": "8 version tags (no GitHub releases)",
"points": 16.2,
"status": "partial",
"details": [
{
"code": "version_tags_no_releases",
"params": {
"count": 8
}
}
],
"max_points": 27
},
{
"key": "release_recency",
"name": "Release recency",
"detail": "latest release 19 days ago",
"points": 36,
"status": "met",
"details": [
{
"code": "release_recency",
"params": {
"days": 19
}
}
],
"max_points": 36
},
{
"key": "release_cadence",
"name": "Release cadence",
"detail": "a release every ~8.6 days",
"points": 27,
"status": "met",
"details": [
{
"code": "release_cadence",
"params": {
"gap": 8.6
}
}
],
"max_points": 27
},
{
"key": "openssf_scorecard_signed_releases",
"name": "OpenSSF Scorecard: Signed-Releases",
"detail": "no releases found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 10
}
]
},
{
"key": "abandonment",
"band": "excellent",
"name": "Abandonment",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"cap": null,
"state": "unverified",
"guards": [],
"signals": [],
"red_flag": false,
"multiplier_pct": 100,
"declared_reason": null,
"unverified_reason": "repository_too_young",
"unanswered_open_prs": null,
"unanswered_open_issues": null,
"days_since_last_merged_pr": null,
"days_since_last_human_commit": null,
"days_since_last_human_commit_is_floor": false
},
"components": [
{
"key": "project_is_still_maintained",
"name": "Project is still maintained",
"detail": "maintenance record not established from the collected data",
"points": 100,
"status": "met",
"details": [
{
"code": "abandonment_unverified",
"params": {}
}
],
"max_points": 100
}
]
}
],
"description": "Is the project alive — is code being written and are releases shipping?"
},
{
"key": "community",
"band": "at_risk",
"name": "Community & Adoption",
"value": 32,
"weight": 0.18,
"metrics": [
{
"key": "popularity",
"band": "critical",
"name": "Popularity & adoption",
"note": null,
"notes": [],
"value": 1,
"inputs": {
"forks": 0,
"stars": 0,
"watchers": 0,
"growth_state": "unverified",
"growth_factor_pct": 100,
"growth_unverified_reason": "no_history"
},
"components": [
{
"key": "stars",
"name": "Stars",
"detail": "0 stars",
"points": 0,
"status": "missed",
"details": [
{
"code": "stars",
"params": {
"count": 0
}
}
],
"max_points": 60
},
{
"key": "forks",
"name": "Forks",
"detail": "0 forks",
"points": 0,
"status": "missed",
"details": [
{
"code": "forks",
"params": {
"count": 0
}
}
],
"max_points": 25
},
{
"key": "watchers",
"name": "Watchers",
"detail": "0 watchers",
"points": 0,
"status": "missed",
"details": [
{
"code": "watchers",
"params": {
"count": 0
}
}
],
"max_points": 15
}
]
},
{
"key": "community_health",
"band": "moderate",
"name": "Community health",
"note": null,
"notes": [],
"value": 50,
"inputs": {
"has_readme": true,
"has_license": true,
"has_contributing": false,
"has_issue_template": false,
"has_code_of_conduct": false,
"has_pull_request_template": false
},
"components": [
{
"key": "readme",
"name": "README",
"detail": null,
"points": 22.5,
"status": "met",
"details": [],
"max_points": 22.5
},
{
"key": "license",
"name": "License",
"detail": "recognized license (MIT)",
"points": 22.5,
"status": "met",
"details": [
{
"code": "license_standard",
"params": {}
},
{
"code": "license_spdx",
"params": {
"spdx": "MIT"
}
}
],
"max_points": 22.5
},
{
"key": "contributing_guide",
"name": "CONTRIBUTING guide",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 18
},
{
"key": "code_of_conduct",
"name": "Code of conduct",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 13.5
},
{
"key": "issue_template",
"name": "Issue template",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.2
},
{
"key": "pr_template",
"name": "PR template",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 6.3
}
]
},
{
"key": "ecosystem_adoption",
"band": "moderate",
"name": "Ecosystem adoption (downloads)",
"note": "Excluded from scoring (no data or not applicable): Registry dependents. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"registry_dependents"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 56,
"inputs": {
"packages": [
"pondlog",
"@pondlog/core",
"@pondlog/mcp-npn",
"@pondlog/mcp-usgs",
"@pondlog/mcp-ebird",
"@pondlog/mcp-garden",
"@pondlog/source-npn",
"@pondlog/mcp-pondlog"
],
"dependents": null,
"ecosystems": "npm",
"total_downloads": null,
"monthly_downloads": 2165
},
"components": [
{
"key": "monthly_downloads",
"name": "Monthly downloads",
"detail": "2,165 downloads/month across npm",
"points": 44.5,
"status": "partial",
"details": [
{
"code": "downloads_monthly",
"params": {
"count": 2165,
"ecosystems": "npm"
}
}
],
"max_points": 80
},
{
"key": "registry_dependents",
"name": "Registry dependents",
"detail": "not reported by this ecosystem",
"points": 0,
"status": "excluded",
"details": [
{
"code": "not_reported_by_this_ecosystem",
"params": {}
}
],
"max_points": 20
}
]
}
],
"description": "Does the project have users, downloads, attention, and a welcoming setup for contributors?"
},
{
"key": "governance",
"band": "critical",
"name": "Sustainability & Governance",
"value": 25,
"weight": 0.24,
"metrics": [
{
"key": "maintainer_resilience",
"band": "critical",
"name": "Maintainer resilience (bus factor)",
"note": null,
"notes": [],
"value": 13,
"inputs": {
"bus_factor": 1,
"contributors_sampled": 1,
"top_contributor_share": 1
},
"components": [
{
"key": "bus_factor",
"name": "Bus factor",
"detail": "1 contributor(s) cover half of all commits",
"points": 9,
"status": "partial",
"details": [
{
"code": "bus_factor",
"params": {
"count": 1
}
}
],
"max_points": 54
},
{
"key": "commit_distribution",
"name": "Commit distribution",
"detail": "top contributor authored 100% of commits",
"points": 0,
"status": "missed",
"details": [
{
"code": "top_contributor_share",
"params": {
"share": 100
}
}
],
"max_points": 22.5
},
{
"key": "contributor_breadth",
"name": "Contributor breadth",
"detail": "1 contributors",
"points": 1.4,
"status": "partial",
"details": [
{
"code": "contributors_sampled",
"params": {
"count": 1
}
}
],
"max_points": 13.5
},
{
"key": "openssf_scorecard_contributors",
"name": "OpenSSF Scorecard: Contributors",
"detail": "project has 1 contributing companies or organizations -- score normalized to 3",
"points": 3,
"status": "partial",
"details": [],
"max_points": 10
}
]
},
{
"key": "responsiveness",
"band": "critical",
"name": "Issue & PR responsiveness",
"note": "Excluded from scoring (no data or not applicable): PR acceptance. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"pr_acceptance"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 1,
"inputs": {
"merged_prs": 0,
"open_issues": 1,
"closed_issues": 0,
"issue_closed_ratio": 0,
"closed_unmerged_prs": 0
},
"components": [
{
"key": "issue_resolution",
"name": "Issue resolution",
"detail": "0% of issues closed",
"points": 0,
"status": "missed",
"details": [
{
"code": "issues_closed_share",
"params": {
"share": 0
}
}
],
"max_points": 46.75
},
{
"key": "pr_acceptance",
"name": "PR acceptance",
"detail": "no decided pull requests or no data",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_decided_prs_or_data",
"params": {}
}
],
"max_points": 38.25
},
{
"key": "openssf_scorecard_code_review",
"name": "OpenSSF Scorecard: Code-Review",
"detail": "Found 0/30 approved changesets -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
}
]
},
{
"key": "stewardship",
"band": "critical",
"name": "Ownership & stewardship",
"note": "Excluded from scoring (no data or not applicable): Verified domain. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"verified_domain"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 19,
"inputs": {
"followers": 0,
"owner_type": "User",
"is_verified": null,
"owner_login": "andrewschristison",
"public_repos": 2,
"account_age_days": 254
},
"components": [
{
"key": "ownership_backing",
"name": "Ownership backing",
"detail": "personal (user) account",
"points": 10,
"status": "partial",
"details": [
{
"code": "owner_personal",
"params": {}
}
],
"max_points": 30
},
{
"key": "verified_domain",
"name": "Verified domain",
"detail": "not applicable to user accounts",
"points": 0,
"status": "excluded",
"details": [
{
"code": "not_applicable_to_user_accounts",
"params": {}
}
],
"max_points": 20
},
{
"key": "owner_reach",
"name": "Owner reach",
"detail": "0 followers of andrewschristison",
"points": 0,
"status": "missed",
"details": [
{
"code": "owner_followers",
"params": {
"count": 0,
"login": "andrewschristison"
}
}
],
"max_points": 25
},
{
"key": "track_record",
"name": "Track record",
"detail": "2 public repos, account ~0 yr old",
"points": 4.9,
"status": "partial",
"details": [
{
"code": "public_repos",
"params": {
"count": 2
}
},
{
"code": "account_age_years",
"params": {
"years": 0
}
}
],
"max_points": 25
}
]
},
{
"key": "package_maintenance",
"band": "good",
"name": "Package maintenance",
"note": null,
"notes": [],
"value": 80,
"inputs": {
"packages": [
"pondlog",
"@pondlog/core",
"@pondlog/mcp-npn",
"@pondlog/mcp-usgs",
"@pondlog/mcp-ebird",
"@pondlog/mcp-garden",
"@pondlog/source-npn",
"@pondlog/mcp-pondlog"
],
"ecosystems": "npm",
"any_deprecated": true,
"min_days_since_publish": 19
},
"components": [
{
"key": "published_resolvable",
"name": "Published & resolvable",
"detail": "8 package(s) on npm",
"points": 25,
"status": "met",
"details": [
{
"code": "packages_published",
"params": {
"count": 8,
"ecosystems": "npm"
}
}
],
"max_points": 25
},
{
"key": "publish_recency",
"name": "Publish recency",
"detail": "latest publish 19 days ago",
"points": 35,
"status": "met",
"details": [
{
"code": "publish_recency",
"params": {
"days": 19
}
}
],
"max_points": 35
},
{
"key": "version_history",
"name": "Version history",
"detail": "12 published versions",
"points": 20,
"status": "met",
"details": [
{
"code": "published_versions",
"params": {
"count": 12
}
}
],
"max_points": 20
},
{
"key": "not_deprecated",
"name": "Not deprecated",
"detail": "@pondlog/mcp-garden: Replaced by @cropgraph/mcp. Install: npx @cropgraph/mcp",
"points": 0,
"status": "missed",
"details": [],
"max_points": 20
}
]
}
],
"description": "Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?"
},
{
"key": "engineering",
"band": "good",
"name": "Engineering Quality",
"value": 70,
"weight": 0.2,
"metrics": [
{
"key": "engineering_practices",
"band": "moderate",
"name": "Engineering practices",
"note": "Excluded from scoring (no data or not applicable): OpenSSF Scorecard: CI-Tests. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"openssf_scorecard_ci_tests"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 60,
"inputs": {
"has_ci": true,
"has_tests": true,
"has_editorconfig": false,
"has_linter_config": false,
"has_precommit_config": false
},
"components": [
{
"key": "ci_workflows",
"name": "CI workflows",
"detail": "3 workflow(s)",
"points": 24,
"status": "met",
"details": [
{
"code": "ci_workflows",
"params": {
"count": 3
}
}
],
"max_points": 24
},
{
"key": "tests_present",
"name": "Tests present",
"detail": null,
"points": 24,
"status": "met",
"details": [],
"max_points": 24
},
{
"key": "linter_config",
"name": "Linter config",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 16
},
{
"key": "pre_commit_hooks",
"name": "Pre-commit hooks",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 9.6
},
{
"key": "editorconfig",
"name": ".editorconfig",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 6.4
},
{
"key": "openssf_scorecard_ci_tests",
"name": "OpenSSF Scorecard: CI-Tests",
"detail": "no pull request found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 20
}
]
},
{
"key": "documentation",
"band": "excellent",
"name": "Documentation",
"note": null,
"notes": [],
"value": 85,
"inputs": {
"topics": [
"agriculture",
"birds",
"cli",
"companion-planting",
"ebird",
"garden",
"inaturalist",
"mcp",
"model-context-protocol",
"nature",
"open-source",
"planting-calendar",
"typescript"
],
"has_wiki": true,
"homepage": null,
"has_readme": true,
"has_docs_dir": true,
"has_description": true
},
"components": [
{
"key": "readme",
"name": "README",
"detail": null,
"points": 30,
"status": "met",
"details": [],
"max_points": 30
},
{
"key": "documentation_directory",
"name": "Documentation directory",
"detail": null,
"points": 25,
"status": "met",
"details": [],
"max_points": 25
},
{
"key": "documentation_homepage_site",
"name": "Documentation / homepage site",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
},
{
"key": "repository_description",
"name": "Repository description",
"detail": null,
"points": 10,
"status": "met",
"details": [],
"max_points": 10
},
{
"key": "topics",
"name": "Topics",
"detail": "13 topics",
"points": 10,
"status": "met",
"details": [
{
"code": "topics_count",
"params": {
"count": 13
}
}
],
"max_points": 10
},
{
"key": "wiki",
"name": "Wiki",
"detail": null,
"points": 10,
"status": "met",
"details": [],
"max_points": 10
}
]
}
],
"description": "Are baseline engineering and documentation practices in place?"
},
{
"key": "security",
"band": "at_risk",
"name": "Security",
"value": 42,
"weight": 0.16,
"metrics": [
{
"key": "security_posture",
"band": "critical",
"name": "Security posture",
"note": "Excluded from scoring (no data or not applicable): CI-Tests, Signed-Releases. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"ci_tests",
"signed_releases"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 27,
"inputs": {
"source": "openssf_scorecard",
"checks_evaluated": 16,
"scorecard_version": "v5.5.0",
"checks_inconclusive": 2,
"scorecard_aggregate": 2.7
},
"components": [
{
"key": "binary_artifacts",
"name": "Binary-Artifacts",
"detail": "no binaries found in the repo",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "branch_protection",
"name": "Branch-Protection",
"detail": "branch protection not enabled on development/release branches",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "ci_tests",
"name": "CI-Tests",
"detail": "no pull request found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 2.5
},
{
"key": "cii_best_practices",
"name": "CII-Best-Practices",
"detail": "no effort to earn an OpenSSF best practices badge detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 2.5
},
{
"key": "code_review",
"name": "Code-Review",
"detail": "Found 0/30 approved changesets -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "contributors",
"name": "Contributors",
"detail": "project has 1 contributing companies or organizations -- score normalized to 3",
"points": 0.8,
"status": "partial",
"details": [],
"max_points": 2.5
},
{
"key": "dangerous_workflow",
"name": "Dangerous-Workflow",
"detail": "no dangerous workflow patterns detected",
"points": 10,
"status": "met",
"details": [],
"max_points": 10
},
{
"key": "dependency_update_tool",
"name": "Dependency-Update-Tool",
"detail": "no update tool detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "fuzzing",
"name": "Fuzzing",
"detail": "project is not fuzzed",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "license",
"name": "License",
"detail": "license file detected",
"points": 2.5,
"status": "met",
"details": [],
"max_points": 2.5
},
{
"key": "maintained",
"name": "Maintained",
"detail": "project was created within the last 90 days. Please review its contents carefully",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "packaging",
"name": "Packaging",
"detail": "packaging workflow detected",
"points": 5,
"status": "met",
"details": [],
"max_points": 5
},
{
"key": "pinned_dependencies",
"name": "Pinned-Dependencies",
"detail": "dependency not pinned by hash detected -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "sast",
"name": "SAST",
"detail": "no SAST tool detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "security_policy",
"name": "Security-Policy",
"detail": "security policy file not detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "signed_releases",
"name": "Signed-Releases",
"detail": "no releases found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 7.5
},
{
"key": "token_permissions",
"name": "Token-Permissions",
"detail": "detected GitHub workflow tokens with excessive permissions",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "vulnerabilities",
"name": "Vulnerabilities",
"detail": "24 existing vulnerabilities detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
}
]
},
{
"key": "dependency_advisories",
"band": "excellent",
"name": "Dependency advisories",
"note": "Excluded from scoring (no data or not applicable): No advisories left outstanding. Remaining weights renormalized. Matched the npm:pondlog@0.8.0 runtime dependency closure — what installing the published package pulls in — 13 packages. Reachability is not analyzed.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"no_advisories_left_outstanding"
]
}
},
{
"code": "weights_renormalized",
"params": {}
},
{
"code": "advisories_scope_published",
"params": {
"package": "npm:pondlog@0.8.0",
"assessed": 13
}
},
{
"code": "advisories_reachability",
"params": {}
}
],
"value": 100,
"inputs": {
"source": "osv",
"advisories": 0,
"affected_packages": 0,
"assessed_packages": 13,
"unassessed_packages": 0,
"affected_by_severity": "none",
"direct_affected_packages": 0
},
"components": [
{
"key": "direct_dependencies_free_of_known_advisories",
"name": "Direct dependencies free of known advisories",
"detail": "no direct dependency carries a known advisory",
"points": 35,
"status": "met",
"details": [
{
"code": "no_direct_advisories",
"params": {}
}
],
"max_points": 35
},
{
"key": "indirect_dependencies_free_of_known_advisories",
"name": "Indirect dependencies free of known advisories",
"detail": "no indirect dependency carries a known advisory",
"points": 25,
"status": "met",
"details": [
{
"code": "no_indirect_advisories",
"params": {}
}
],
"max_points": 25
},
{
"key": "no_advisories_left_outstanding",
"name": "No advisories left outstanding",
"detail": "no advisory carries a publication date",
"points": 0,
"status": "excluded",
"details": [
{
"code": "advisories_no_publication_date",
"params": {}
}
],
"max_points": 40
}
]
},
{
"key": "malicious_dependencies",
"band": "excellent",
"name": "Malicious dependencies",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"source": "osv",
"meaning": "reported as a malicious package by the OpenSSF corpus; the remedy is removal or moving off the compromised name, never an upgrade of the same artifact. Versions the registry has since pulled are listed but not scored",
"packages": [],
"red_flag": false,
"assessed_packages": 13,
"malicious_packages": 0,
"direct_malicious_packages": 0,
"withdrawn_malicious_packages": 0,
"installable_malicious_packages": 0
},
"components": [
{
"key": "no_dependency_reported_as_a_malicious_package",
"name": "No dependency reported as a malicious package",
"detail": "no dependency is reported as a malicious package",
"points": 100,
"status": "met",
"details": [
{
"code": "no_malicious_dependencies",
"params": {}
}
],
"max_points": 100
}
]
}
],
"description": "Are visible security and supply-chain practices strong, with no malicious dependency and no unresolved high-risk jurisdiction exposure?"
},
{
"key": "ai_readiness",
"band": "moderate",
"name": "AI Readiness",
"value": 52,
"weight": 0,
"metrics": [
{
"key": "ai_agent_context",
"band": "moderate",
"name": "Agent context & guidance",
"note": null,
"notes": [],
"value": 55,
"inputs": {
"has_llms_txt": true,
"legible_history_share": 0.98,
"agent_instruction_files": [],
"agent_instruction_max_bytes": null
},
"components": [
{
"key": "agent_instructions",
"name": "Agent instructions",
"detail": "no CLAUDE.md / AGENTS.md / editor rules",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_agent_instructions",
"params": {}
}
],
"max_points": 45
},
{
"key": "machine_readable_docs_llms_txt",
"name": "Machine-readable docs (llms.txt)",
"detail": "llms.txt present",
"points": 15,
"status": "met",
"details": [
{
"code": "llms_txt_present",
"params": {}
}
],
"max_points": 15
},
{
"key": "legible_commit_history",
"name": "Legible commit history",
"detail": "48 of 49 human commits state their intent (structured subject or explanatory body)",
"points": 40,
"status": "met",
"details": [
{
"code": "legible_history",
"params": {
"legible": 48,
"sampled": 49
}
}
],
"max_points": 40
}
]
},
{
"key": "ai_verify_loop",
"band": "at_risk",
"name": "Verify loop (build / test / typecheck)",
"note": null,
"notes": [],
"value": 43,
"inputs": {
"has_nix": false,
"has_tests": true,
"lockfiles": [
"pnpm-lock.yaml"
],
"has_dockerfile": false,
"typed_language": true,
"bootstrap_files": [],
"has_devcontainer": false,
"has_linter_config": false,
"typecheck_configs": [
"packages/cli/tsconfig.json",
"packages/core/tsconfig.json",
"packages/mcp-ebird/tsconfig.json",
"packages/mcp-garden/tsconfig.json",
"packages/mcp-inaturalist/tsconfig.json",
"packages/mcp-mushroomobserver/tsconfig.json",
"packages/mcp-npn/tsconfig.json",
"packages/mcp-pondlog/tsconfig.json",
"packages/mcp-usgs/tsconfig.json",
"packages/source-ebird/tsconfig.json",
"packages/source-inaturalist/tsconfig.json",
"packages/source-mushroomobserver/tsconfig.json",
"packages/source-nightsky/tsconfig.json",
"packages/source-npn/tsconfig.json",
"packages/source-trefle/tsconfig.json",
"packages/source-usgs/tsconfig.json"
],
"agent_commit_share": 0,
"toolchain_manifests": [],
"dependency_bot_commit_share": 0
},
"components": [
{
"key": "one_command_bootstrap",
"name": "One-command bootstrap",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 18
},
{
"key": "automated_tests",
"name": "Automated tests",
"detail": null,
"points": 22,
"status": "met",
"details": [],
"max_points": 22
},
{
"key": "lint_format_config",
"name": "Lint / format config",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 11
},
{
"key": "static_type_checking",
"name": "Static type checking",
"detail": "packages/cli/tsconfig.json, packages/core/tsconfig.json, packages/mcp-ebird/tsconfig.json, packages/mcp-garden/tsconfig.json, packages/mcp-inaturalist/tsconfig.json, packages/mcp-mushroomobserver/tsconfig.json, packages/mcp-npn/tsconfig.json, packages/mcp-pondlog/tsconfig.json, packages/mcp-usgs/tsconfig.json, packages/source-ebird/tsconfig.json, packages/source-inaturalist/tsconfig.json, packages/source-mushroomobserver/tsconfig.json, packages/source-nightsky/tsconfig.json, packages/source-npn/tsconfig.json, packages/source-trefle/tsconfig.json, packages/source-usgs/tsconfig.json",
"points": 11,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "packages/cli/tsconfig.json, packages/core/tsconfig.json, packages/mcp-ebird/tsconfig.json, packages/mcp-garden/tsconfig.json, packages/mcp-inaturalist/tsconfig.json, packages/mcp-mushroomobserver/tsconfig.json, packages/mcp-npn/tsconfig.json, packages/mcp-pondlog/tsconfig.json, packages/mcp-usgs/tsconfig.json, packages/source-ebird/tsconfig.json, packages/source-inaturalist/tsconfig.json, packages/source-mushroomobserver/tsconfig.json, packages/source-nightsky/tsconfig.json, packages/source-npn/tsconfig.json, packages/source-trefle/tsconfig.json, packages/source-usgs/tsconfig.json"
}
}
],
"max_points": 11
},
{
"key": "reproducible_environment",
"name": "Reproducible environment",
"detail": "lockfile",
"points": 10,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "lockfile"
}
}
],
"max_points": 10
},
{
"key": "demonstrated_agent_practice",
"name": "Demonstrated agent practice",
"detail": "no agent-authored commits among the last 49",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_agent_authored_commits",
"params": {
"sampled": 49
}
}
],
"max_points": 10
},
{
"key": "automated_maintenance",
"name": "Automated maintenance",
"detail": "no automated dependency updates observed",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_dependency_automation",
"params": {}
}
],
"max_points": 8
},
{
"key": "openssf_scorecard_pinned_dependencies",
"name": "OpenSSF Scorecard: Pinned-Dependencies",
"detail": "dependency not pinned by hash detected -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
}
]
},
{
"key": "ai_code_legibility",
"band": "excellent",
"name": "Code legibility for models",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"primary_language": "TypeScript",
"largest_source_bytes": 30079,
"source_files_sampled": 142,
"oversized_source_files": 0
},
"components": [
{
"key": "type_checkable_code",
"name": "Type-checkable code",
"detail": "TypeScript (statically typed)",
"points": 45,
"status": "met",
"details": [
{
"code": "statically_typed_language",
"params": {
"language": "TypeScript"
}
}
],
"max_points": 45
},
{
"key": "manageable_file_sizes",
"name": "Manageable file sizes",
"detail": "0/142 source files over 60KB",
"points": 55,
"status": "met",
"details": [
{
"code": "oversized_source_files",
"params": {
"kb": 60,
"sampled": 142,
"oversized": 0
}
}
],
"max_points": 55
}
]
},
{
"key": "ai_interfaces",
"band": "critical",
"name": "Machine-readable interfaces",
"note": null,
"notes": [],
"value": 20,
"inputs": {
"example_dirs": [],
"has_mcp_signal": true,
"api_schema_files": []
},
"components": [
{
"key": "api_schema_openapi_graphql_proto",
"name": "API schema (OpenAPI/GraphQL/proto)",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 40
},
{
"key": "mcp_server",
"name": "MCP server",
"detail": null,
"points": 20,
"status": "met",
"details": [],
"max_points": 20
},
{
"key": "runnable_examples",
"name": "Runnable examples",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 40
}
]
}
],
"description": "How well is the repo equipped to be developed and maintained with AI coding agents? An independent, experimental badge — weight 0.0, so it is surfaced on its own and does not affect the overall health score."
}
],
"metrics_version": "1.13.0"
},
"warnings": [
"GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository"
],
"report_type": "repository",
"generated_at": "2026-07-26T22:59:25.719197Z",
"schema_version": "0.27.0",
"badge_url": "https://raw.githubusercontent.com/inspect-software/badges/main/v1/a/andrewschristison/pondlog.svg",
"full_name": "andrewschristison/pondlog",
"license_state": "standard",
"license_spdx": "MIT"
}