公开记录中等
软件健康报告模式 0.27.0 · 指标 1.13.0 · 2026-07-27 07:16 UTC
atxp-dev / sdk
atxp-dev/sdk 的健康指数为 100 分中的 61 分，处于「中等」区间。 其得分最高的类别是Vitality（86/100），最低的是Community & Adoption（38/100）。 最近一次更新在 24 天前。 近期的大部分工作由 2 位贡献者完成。
61
总分 / 100软件健康指数
指标归入加权类别，统一采用 1–100 量表。总体分先取类别加权平均；当公开证据触发高风险司法辖区政策时，评级会按政策调整，并设置 49（有风险）的上限。AI 就绪度不计入总体分。
61
优秀85-100堪称典范；基本满足所有检验标准
良好70-84健康；仅有轻微不足
中等50-69可接受，但存在明显不足；建议进行审查
存在风险30-49存在重大薄弱环节；采用时应保持审慎
危急1-29问题严重（项目被弃置、仅有单一维护者、缺乏基本工程规范）
评分画像
每条轴代表一个类别。形状比平均值更重要——健康的对象会填满整个图形，而“一峰一谷”式画像意味着某一维度的优势正掩盖另一维度的风险。
所有权
软件包生态系统
| 注册表 | 软件包 | 版本 | 月下载量 | 版本数 | 最近发布 |
|---|---|---|---|---|---|
| npm | @atxp/mpp | 0.11.11 | 3,072 | 17 | 54 天前 |
| npm | @atxp/base | 0.11.11 | 321 | 54 | 54 天前 |
| npm | @atxp/x402 | 0.11.11 | 239 | 39 | 54 天前 |
| npm | @atxp/redis | 0.11.11 | 348 | 60 | 54 天前 |
| npm | @atxp/tempo | 0.11.11 | 195 | 16 | 54 天前 |
| npm | @atxp/client | 0.11.12 | 3,485 | 65 | 54 天前 |
| npm | @atxp/common | 0.11.11 | 3,275 | 65 | 54 天前 |
| npm | @atxp/server | 0.11.11 | 475 | 64 | 54 天前 |
按类别列示的指标
活力
项目是否仍有生命——是否仍在编写代码，是否仍在发布版本？
86
开发活跃度
76良好
评分方式
| 28.8/36 | 推送新近度 — 最近一次推送于 24 天前 |
| 18.7/36 | 提交节奏 — 52 周中有 27 周有提交 |
| 18/18 | 提交量 — 最近一年 249 次提交 |
| 10/10 | OpenSSF Scorecard：Maintained — 13 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10 |
所用输入
| commits_last_year | 249 |
| human_commit_share | 1 |
| days_since_last_push | 24 |
| active_weeks_last_year | 27 |
发布纪律
100优秀
评分方式
| 27/27 | 有发布版本 — 已发布 53 个发布版本 |
| 36/36 | 发布时效 — 最近一次发布版本于 54 天前 |
| 27/27 | 发布节奏 — 约每 10 天发布一次 |
| 0/10 | OpenSSF Scorecard：Signed-Releases — 无数据 |
所用输入
| releases_count | 53 |
| latest_release_tag | v0.11.12 |
| releases_from_tags | 否 |
| days_since_latest_release | 54 |
| mean_days_between_releases | 10 |
已排除计分（无数据或不适用）：OpenSSF Scorecard：Signed-Releases。 其余权重已重新归一化。
社区与采用
项目是否拥有用户、下载量与关注度，并具备欢迎贡献者参与的配置？
38
流行度与采用
10危急
评分方式
| 9.8/60 | 星标 — 5 个星标 |
| 0/25 | 复刻 — 1 个复刻 |
| 0/15 | 关注者 — 1 位关注者 |
所用输入
| forks | 1 |
| stars | 5 |
| watchers | 1 |
| growth_state | unverified |
| growth_factor_pct | 100 |
| growth_unverified_reason | no_history |
社区健康
50中等
评分方式
| 22.5/22.5 | README |
| 22.5/22.5 | 许可证 — 可识别的许可证（MIT） |
| 0/18 | CONTRIBUTING 指南 |
| 0/13.5 | 行为准则 |
| 0/7.2 | 议题模板 |
| 0/6.3 | PR 模板 |
所用输入
| has_readme | 是 |
| has_license | 是 |
| has_contributing | 否 |
| has_issue_template | 否 |
| has_code_of_conduct | 否 |
| has_pull_request_template | 否 |
生态采用（下载量）
68中等
评分方式
| 54.1/80 | 月度下载量 — npm 合计每月 11,410 次下载 |
| 0/20 | 注册表被依赖数 — 该生态系统不报告此项 |
所用输入
| packages | @atxp/mpp, @atxp/base, @atxp/x402, @atxp/redis, @atxp/tempo, @atxp/client, @atxp/common, @atxp/server |
| dependents | — |
| ecosystems | npm |
| total_downloads | — |
| monthly_downloads | 11,410 |
已排除计分（无数据或不适用）：注册表被依赖数。 其余权重已重新归一化。
可持续性与治理
项目能否在其成员之外延续——巴士系数、响应能力、由谁支持，以及软件包的维护状况？
66
维护者韧性（巴士系数）
61中等
评分方式
| 25.2/54 | 巴士系数 — 2 位贡献者贡献了半数提交 |
| 13.3/22.5 | 提交分布 — 头号贡献者编写了 41% 的提交 |
| 12.2/13.5 | 贡献者广度 — 9 位贡献者 |
| 10/10 | OpenSSF Scorecard：Contributors — project has 4 contributing companies or organizations |
所用输入
| bus_factor | 2 |
| contributors_sampled | 9 |
| top_contributor_share | 0.41 |
议题与 PR 响应能力
57中等
评分方式
| 23.4/46.8 | 议题解决 — 50% 的议题已关闭 |
| 33.7/38.3 | PR 接受 — 已裁定的 PR 中 155/176 已合并 |
| 0/15 | OpenSSF Scorecard：Code-Review — Found 0/30 approved changesets -- score normalized to 0 |
所用输入
| merged_prs | 155 |
| open_issues | 3 |
| closed_issues | 3 |
| issue_closed_ratio | 0.5 |
| closed_unmerged_prs | 21 |
所有权与托管责任
53中等
评分方式
| 30/30 | 所有权背书 — 组织持有 |
| 0/20 | 已验证域名 |
| 12.2/25 | 所有者影响力 — atxp-dev 有 49 位关注者 |
| 11/25 | 既往记录 — 17 个公开仓库，账户约 0 年 |
所用输入
| followers | 49 |
| owner_type | Organization |
| is_verified | — |
| owner_login | atxp-dev |
| public_repos | 17 |
| account_age_days | 346 |
软件包维护
100优秀
评分方式
| 25/25 | 已发布且可解析 — npm 上有 8 个软件包 |
| 35/35 | 发布时效 — 最近一次发布于 54 天前 |
| 20/20 | 版本历史 — 65 个已发布版本 |
| 20/20 | 未被弃用 — 活跃，未被弃用或撤回 |
所用输入
| packages | @atxp/mpp, @atxp/base, @atxp/x402, @atxp/redis, @atxp/tempo, @atxp/client, @atxp/common, @atxp/server |
| ecosystems | npm |
| any_deprecated | 否 |
| min_days_since_publish | 54 |
工程质量
基础的工程与文档实践是否到位？
63
工程实践
68中等
评分方式
| 24/24 | CI 工作流 — 4 个工作流 |
| 24/24 | 存在测试 |
| 0/16 | Linter 配置 |
| 0/9.6 | Pre-commit 钩子 |
| 0/6.4 | .editorconfig |
| 20/20 | OpenSSF Scorecard：CI-Tests — 21 out of 21 merged PRs checked by a CI test -- score normalized to 10 |
所用输入
| has_ci | 是 |
| has_tests | 是 |
| has_editorconfig | 否 |
| has_linter_config | 否 |
| has_precommit_config | 否 |
文档
55中等
评分方式
| 30/30 | README |
| 25/25 | 文档目录 |
| 0/15 | 文档 / 主页站点 |
| 0/10 | 仓库描述 |
| 0/10 | 主题标签 |
| 0/10 | Wiki |
所用输入
| topics | — |
| has_wiki | 否 |
| homepage | — |
| has_readme | 是 |
| has_docs_dir | 是 |
| has_description | 否 |
安全
可见的安全与供应链实践是否稳固，且不存在未解决的高风险司法辖区暴露？
43
安全态势
43存在风险
评分方式
| 7.5/7.5 | Binary-Artifacts — no binaries found in the repo |
| 0/7.5 | Branch-Protection — 无数据 |
| 2.5/2.5 | CI-Tests — 21 out of 21 merged PRs checked by a CI test -- score normalized to 10 |
| 0/2.5 | CII-Best-Practices — no effort to earn an OpenSSF best practices badge detected |
| 0/7.5 | Code-Review — Found 0/30 approved changesets -- score normalized to 0 |
| 2.5/2.5 | Contributors — project has 4 contributing companies or organizations |
| 10/10 | Dangerous-Workflow — no dangerous workflow patterns detected |
| 0/7.5 | Dependency-Update-Tool — no update tool detected |
| 0/5 | Fuzzing — project is not fuzzed |
| 2.5/2.5 | 许可证 — license file detected |
| 7.5/7.5 | Maintained — 13 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10 |
| 5/5 | Packaging — packaging workflow detected |
| 1/5 | Pinned-Dependencies — dependency not pinned by hash detected -- score normalized to 2 |
| 0/5 | SAST — SAST tool is not run on all commits -- score normalized to 0 |
| 0/5 | Security-Policy — security policy file not detected |
| 0/7.5 | Signed-Releases — 无数据 |
| 0/7.5 | Token-Permissions — detected GitHub workflow tokens with excessive permissions |
| 0/7.5 | Vulnerabilities — 197 existing vulnerabilities detected |
所用输入
| source | openssf_scorecard |
| checks_evaluated | 16 |
| scorecard_version | v5.5.0 |
| checks_inconclusive | 2 |
| scorecard_aggregate | 4.3 |
已排除计分（无数据或不适用）：branch_protection, signed_releases。 其余权重已重新归一化。
AI 就绪度
该仓库在多大程度上具备与 AI 编码代理协同开发与维护的条件？这是一枚独立的实验性徽章——权重为 0.0，因此单独呈现，不影响总体健康评分。
71
AI 代理上下文与指引
83良好
评分方式
| 45/45 | 代理指令 — CLAUDE.md |
| 0/15 | 机器可读文档（llms.txt） |
| 37.9/40 | 可读的提交历史 — 100 次人类提交中有 71 次说明了意图（结构化标题或解释性正文） |
所用输入
| has_llms_txt | 否 |
| legible_history_share | 0.71 |
| agent_instruction_files | CLAUDE.md |
| agent_instruction_max_bytes | 2,447 |
评分方式
| 0/18 | 一条命令的引导启动 |
| 22/22 | 自动化测试 |
| 0/11 | Lint / 格式化配置 |
| 11/11 | 静态类型检查 — examples/basic/tsconfig.json, examples/batch-payments/tsconfig.json, examples/chatgpt-server/tsconfig.json, examples/mastra/tsconfig.json, examples/multichain/tsconfig.json, examples/server/tsconfig.json, examples/vercel-sdk/tsconfig.json, examples/x402/tsconfig.json, packages/atxp-base/tsconfig.json, packages/atxp-client/tsconfig.json, packages/atxp-cloudflare/tsconfig.json, packages/atxp-common/tsconfig.json, packages/atxp-express/tsconfig.json, packages/atxp-mpp/tsconfig.json, packages/atxp-polygon/tsconfig.json, packages/atxp-redis/tsconfig.json, packages/atxp-server/tsconfig.json, packages/atxp-solana/tsconfig.json, packages/atxp-sqlite/tsconfig.json, packages/atxp-tempo/tsconfig.json, packages/atxp-worldchain/tsconfig.json, packages/atxp-x402/tsconfig.json, tsconfig.json |
| 10/10 | 可复现环境 — lockfile |
| 10/10 | 已体现的代理实践 — 最近 100 次提交中有 54 次由代理编写或署名代理 |
| 0/8 | 自动化维护 — 未观察到自动依赖更新 |
| 2/10 | OpenSSF Scorecard：Pinned-Dependencies — dependency not pinned by hash detected -- score normalized to 2 |
所用输入
| has_nix | 否 |
| has_tests | 是 |
| lockfiles | package-lock.json |
| has_dockerfile | 否 |
| typed_language | 是 |
| bootstrap_files | — |
| has_devcontainer | 否 |
| has_linter_config | 否 |
| typecheck_configs | examples/basic/tsconfig.json, examples/batch-payments/tsconfig.json, examples/chatgpt-server/tsconfig.json, examples/mastra/tsconfig.json, examples/multichain/tsconfig.json, examples/server/tsconfig.json, examples/vercel-sdk/tsconfig.json, examples/x402/tsconfig.json, packages/atxp-base/tsconfig.json, packages/atxp-client/tsconfig.json, packages/atxp-cloudflare/tsconfig.json, packages/atxp-common/tsconfig.json, packages/atxp-express/tsconfig.json, packages/atxp-mpp/tsconfig.json, packages/atxp-polygon/tsconfig.json, packages/atxp-redis/tsconfig.json, packages/atxp-server/tsconfig.json, packages/atxp-solana/tsconfig.json, packages/atxp-sqlite/tsconfig.json, packages/atxp-tempo/tsconfig.json, packages/atxp-worldchain/tsconfig.json, packages/atxp-x402/tsconfig.json, tsconfig.json |
| agent_commit_share | 0.54 |
| toolchain_manifests | — |
| dependency_bot_commit_share | 0 |
面向模型的代码可读性
100优秀
评分方式
| 45/45 | 可类型检查的代码 — TypeScript（静态类型） |
| 55/55 | 可控的文件大小 — 采样的 248 个源文件中有 0 个超过 60KB |
所用输入
| primary_language | TypeScript |
| largest_source_bytes | 37,681 |
| source_files_sampled | 248 |
| oversized_source_files | 0 |
机器可读接口
60中等
评分方式
| 0/40 | API 模式（OpenAPI/GraphQL/proto） |
| 20/20 | MCP 服务器 |
| 40/40 | 可运行示例 — examples |
所用输入
| example_dirs | examples |
| has_mcp_signal | 是 |
| api_schema_files | — |
关键数据
5GitHub 星标
9贡献者
249最近 12 个月提交数
24距最近推送天数
53发布版本数
2巴士系数（bus factor）
3开放议题
npm软件包生态系统数
数据采集警告
- Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token
- Could not fetch npm package '@atxp/atxp-monorepo' from its registry
- GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository
更多细节
OpenSSF Scorecard 4.3 / 10
4.3综合
来自开源项目 OpenSSF Scorecard 的独立、工具无关的安全评估。每项检查奖励的是安全实践本身，而非特定供应商的工具。Scorecard 无法判定的检查项标记为 不适用，并从安全评分中剔除（绝不按零分计）。
| 10 | Binary-Artifacts | no binaries found in the repo |
| 不适用 | Branch-Protection | internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md |
| 10 | CI-Tests | 21 out of 21 merged PRs checked by a CI test -- score normalized to 10 |
| 0 | CII-Best-Practices | no effort to earn an OpenSSF best practices badge detected |
| 0 | Code-Review | Found 0/30 approved changesets -- score normalized to 0 |
| 10 | Contributors | project has 4 contributing companies or organizations |
| 10 | Dangerous-Workflow | no dangerous workflow patterns detected |
| 0 | Dependency-Update-Tool | no update tool detected |
| 0 | Fuzzing | project is not fuzzed |
| 10 | License | license file detected |
| 10 | Maintained | 13 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10 |
| 10 | Packaging | packaging workflow detected |
| 2 | Pinned-Dependencies | dependency not pinned by hash detected -- score normalized to 2 |
| 0 | SAST | SAST tool is not run on all commits -- score normalized to 0 |
| 0 | Security-Policy | security policy file not detected |
| 不适用 | Signed-Releases | no releases found |
| 0 | Token-Permissions | detected GitHub workflow tokens with excessive permissions |
| 0 | Vulnerabilities | 197 existing vulnerabilities detected |
直接依赖 58
| 注册表 | 软件包 | 版本约束 | 清单文件 |
|---|---|---|---|
| npm | dotenv | ^17.2.3 | package.json |
| npm | @account-kit/infra | ^4.81.3 | packages/atxp-base/package.json |
| npm | @atxp/client | 0.11.10 | packages/atxp-base/package.json |
| npm | @atxp/common | 0.11.10 | packages/atxp-base/package.json |
| npm | @x402/core | ^2.9.0 | packages/atxp-base/package.json |
| npm | @x402/evm | ^2.9.0 | packages/atxp-base/package.json |
| npm | bignumber.js | ^9.3.0 | packages/atxp-base/package.json |
| npm | viem | ^2.34.0 | packages/atxp-base/package.json |
| npm | @atxp/common | 0.11.11 | packages/atxp-client/package.json |
| npm | @atxp/mpp | 0.11.11 | packages/atxp-client/package.json |
| npm | @modelcontextprotocol/sdk | ^1.15.0 | packages/atxp-client/package.json |
| npm | @x402/core | ^2.9.0 | packages/atxp-client/package.json |
| npm | @x402/evm | ^2.9.0 | packages/atxp-client/package.json |
| npm | bignumber.js | ^9.3.0 | packages/atxp-client/package.json |
| npm | oauth4webapi | ^3.8.3 | packages/atxp-client/package.json |
| npm | @atxp/common | 0.11.10 | packages/atxp-cloudflare/package.json |
| npm | @atxp/server | 0.11.10 | packages/atxp-cloudflare/package.json |
| npm | bignumber.js | ^9.3.0 | packages/atxp-common/package.json |
| npm | jose | ^6.0.11 | packages/atxp-common/package.json |
| npm | oauth4webapi | ^3.8.3 | packages/atxp-common/package.json |
| npm | tweetnacl | ^1.0.3 | packages/atxp-common/package.json |
| npm | tweetnacl-util | ^0.15.1 | packages/atxp-common/package.json |
| npm | @atxp/server | 0.11.10 | packages/atxp-express/package.json |
| npm | @atxp/client | 0.11.10 | packages/atxp-polygon/package.json |
| npm | @atxp/common | 0.11.10 | packages/atxp-polygon/package.json |
| npm | bignumber.js | ^9.3.0 | packages/atxp-polygon/package.json |
| npm | viem | ^2.34.0 | packages/atxp-polygon/package.json |
| npm | @atxp/common | 0.11.10 | packages/atxp-redis/package.json |
| npm | ioredis | ^5.7.0 | packages/atxp-redis/package.json |
| npm | @atxp/common | 0.11.10 | packages/atxp-server/package.json |
| npm | @atxp/mpp | 0.11.10 | packages/atxp-server/package.json |
| npm | @modelcontextprotocol/sdk | ^1.15.0 | packages/atxp-server/package.json |
| npm | bignumber.js | ^9.3.0 | packages/atxp-server/package.json |
| npm | oauth4webapi | ^3.8.3 | packages/atxp-server/package.json |
| npm | @atxp/client | 0.11.10 | packages/atxp-solana/package.json |
| npm | @atxp/common | 0.11.10 | packages/atxp-solana/package.json |
| npm | @solana/pay | ^0.2.5 | packages/atxp-solana/package.json |
| npm | @solana/web3.js | ^1.98.1 | packages/atxp-solana/package.json |
| npm | bignumber.js | ^9.3.0 | packages/atxp-solana/package.json |
| npm | bs58 | ^6.0.0 | packages/atxp-solana/package.json |
| npm | @atxp/common | 0.11.10 | packages/atxp-sqlite/package.json |
| npm | better-sqlite3 | ^12.2.0 | packages/atxp-sqlite/package.json |
| npm | @atxp/client | 0.11.10 | packages/atxp-tempo/package.json |
| npm | @atxp/common | 0.11.10 | packages/atxp-tempo/package.json |
| npm | bignumber.js | ^9.3.0 | packages/atxp-tempo/package.json |
| npm | viem | ^2.34.0 | packages/atxp-tempo/package.json |
| npm | @atxp/client | 0.11.10 | packages/atxp-worldchain/package.json |
| npm | @atxp/common | 0.11.10 | packages/atxp-worldchain/package.json |
| npm | @worldcoin/minikit-js | ^1.9.6 | packages/atxp-worldchain/package.json |
| npm | bignumber.js | ^9.3.0 | packages/atxp-worldchain/package.json |
| npm | viem | ^2.34.0 | packages/atxp-worldchain/package.json |
| npm | @atxp/base | 0.11.10 | packages/atxp-x402/package.json |
| npm | @atxp/client | 0.11.10 | packages/atxp-x402/package.json |
| npm | @atxp/common | 0.11.10 | packages/atxp-x402/package.json |
| npm | @x402/core | ^2.9.0 | packages/atxp-x402/package.json |
| npm | @x402/evm | ^2.9.0 | packages/atxp-x402/package.json |
| npm | bignumber.js | ^9.1.2 | packages/atxp-x402/package.json |
| npm | viem | ^2.21.54 | packages/atxp-x402/package.json |
全部依赖 未采集
本报告未能采集到解析后的依赖集合：GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository
原始 JSON 报告 机器可读
{
"data": {
"repo": {
"topics": [],
"is_fork": false,
"size_kb": 3350,
"has_wiki": false,
"homepage": null,
"languages": {
"HTML": 18778,
"JavaScript": 39057,
"TypeScript": 1339761
},
"pushed_at": "2026-07-02T17:40:27Z",
"created_at": "2025-08-18T21:45:27Z",
"owner_type": "Organization",
"updated_at": "2026-06-30T21:04:48Z",
"description": null,
"is_archived": false,
"is_disabled": false,
"license_spdx": "MIT",
"default_branch": "main",
"license_spdx_raw": "MIT",
"primary_language": "TypeScript",
"significant_languages": [
"TypeScript"
]
},
"owner": {
"blog": null,
"name": "ATXP",
"type": "Organization",
"login": "atxp-dev",
"company": null,
"location": null,
"followers": 49,
"avatar_url": "https://avatars.githubusercontent.com/u/226535901?v=4",
"created_at": "2025-08-14T14:01:43Z",
"is_verified": null,
"public_repos": 17,
"account_age_days": 346
},
"license": {
"state": "standard",
"spdx_id": "MIT",
"raw_spdx": "MIT",
"file_present": true,
"scorecard_found": true,
"profile_has_license": true
},
"activity": {
"releases": [
{
"tag": "v0.11.12",
"kind": "patch",
"published_at": "2026-06-02T16:03:39Z"
},
{
"tag": "v0.11.11",
"kind": "patch",
"published_at": "2026-06-02T14:31:37Z"
},
{
"tag": "v0.11.10",
"kind": "patch",
"published_at": "2026-05-29T00:16:28Z"
},
{
"tag": "v0.11.9",
"kind": "patch",
"published_at": "2026-05-28T22:05:11Z"
},
{
"tag": "v0.11.8",
"kind": "patch",
"published_at": "2026-04-15T22:19:24Z"
},
{
"tag": "v0.10.10",
"kind": "patch",
"published_at": "2026-03-31T23:17:45Z"
},
{
"tag": "v0.10.9",
"kind": "patch",
"published_at": "2026-03-31T23:04:57Z"
},
{
"tag": "v0.10.8",
"kind": "patch",
"published_at": "2026-03-31T22:40:38Z"
},
{
"tag": "v0.10.7",
"kind": "patch",
"published_at": "2026-03-16T19:31:11Z"
},
{
"tag": "v0.10.6",
"kind": "patch",
"published_at": "2026-03-04T18:53:51Z"
},
{
"tag": "v0.10.5",
"kind": "patch",
"published_at": "2026-01-14T23:35:27Z"
},
{
"tag": "v0.10.4",
"kind": "patch",
"published_at": "2026-01-12T20:47:08Z"
},
{
"tag": "v0.10.3",
"kind": "patch",
"published_at": "2025-12-18T23:08:44Z"
},
{
"tag": "v0.10.2",
"kind": "patch",
"published_at": "2025-12-17T21:35:48Z"
},
{
"tag": "v0.10.1",
"kind": "patch",
"published_at": "2025-12-17T17:16:23Z"
},
{
"tag": "v0.10.0",
"kind": "minor",
"published_at": "2025-12-17T16:28:53Z"
},
{
"tag": "v0.9.2",
"kind": "patch",
"published_at": "2025-12-12T23:06:21Z"
},
{
"tag": "v0.9.1",
"kind": "patch",
"published_at": "2025-12-11T19:18:15Z"
},
{
"tag": "v0.9.0",
"kind": "minor",
"published_at": "2025-12-09T15:10:37Z"
},
{
"tag": "v0.8.3",
"kind": "patch",
"published_at": "2025-12-08T20:02:07Z"
},
{
"tag": "v0.8.2",
"kind": "patch",
"published_at": "2025-10-31T23:50:17Z"
},
{
"tag": "v0.8.1",
"kind": "patch",
"published_at": "2025-10-31T22:34:02Z"
},
{
"tag": "v0.8.0",
"kind": "minor",
"published_at": "2025-10-31T15:36:14Z"
},
{
"tag": "v0.7.4",
"kind": "patch",
"published_at": "2025-10-06T19:53:47Z"
},
{
"tag": "v0.7.3",
"kind": "patch",
"published_at": "2025-10-02T02:08:40Z"
},
{
"tag": "v0.7.2",
"kind": "patch",
"published_at": "2025-10-01T19:13:21Z"
},
{
"tag": "v0.7.1",
"kind": "patch",
"published_at": "2025-09-26T22:53:38Z"
},
{
"tag": "v0.7.0",
"kind": "minor",
"published_at": "2025-09-26T18:55:25Z"
},
{
"tag": "v0.6.4",
"kind": "patch",
"published_at": "2025-09-24T18:43:34Z"
},
{
"tag": "v0.6.3",
"kind": "patch",
"published_at": "2025-09-22T18:17:31Z"
},
{
"tag": "v0.6.2",
"kind": "patch",
"published_at": "2025-09-22T12:24:07Z"
},
{
"tag": "v0.6.1",
"kind": "patch",
"published_at": "2025-09-22T00:38:54Z"
},
{
"tag": "v0.6.0",
"kind": "minor",
"published_at": "2025-09-21T20:02:36Z"
},
{
"tag": "v0.5.1",
"kind": "patch",
"published_at": "2025-09-19T19:46:16Z"
},
{
"tag": "v0.5.0",
"kind": "minor",
"published_at": "2025-09-19T16:20:00Z"
},
{
"tag": "v0.4.0",
"kind": "minor",
"published_at": "2025-09-18T16:17:29Z"
},
{
"tag": "v0.3.0",
"kind": "minor",
"published_at": "2025-09-16T21:10:01Z"
},
{
"tag": "v0.2.22",
"kind": "patch",
"published_at": "2025-09-04T21:42:12Z"
},
{
"tag": "v0.2.21",
"kind": "patch",
"published_at": "2025-09-04T15:18:27Z"
},
{
"tag": "v0.2.20",
"kind": "patch",
"published_at": "2025-09-02T17:56:08Z"
},
{
"tag": "v0.2.19",
"kind": "patch",
"published_at": "2025-08-30T21:01:09Z"
},
{
"tag": "v0.2.18",
"kind": "patch",
"published_at": "2025-08-29T21:27:14Z"
},
{
"tag": "v0.2.17",
"kind": "patch",
"published_at": "2025-08-28T21:25:11Z"
},
{
"tag": "v0.2.16",
"kind": "patch",
"published_at": "2025-08-28T18:06:35Z"
},
{
"tag": "v0.2.15",
"kind": "patch",
"published_at": "2025-08-27T18:12:55Z"
},
{
"tag": "v0.2.14",
"kind": "patch",
"published_at": "2025-08-26T19:28:33Z"
},
{
"tag": "v0.2.13",
"kind": "patch",
"published_at": "2025-08-26T01:49:40Z"
},
{
"tag": "v0.2.12",
"kind": "patch",
"published_at": "2025-08-22T20:06:05Z"
},
{
"tag": "v0.2.11",
"kind": "patch",
"published_at": "2025-08-21T21:21:01Z"
},
{
"tag": "v0.2.10",
"kind": "patch",
"published_at": "2025-08-20T15:03:40Z"
},
{
"tag": "v0.2.9",
"kind": "patch",
"published_at": "2025-08-19T21:08:45Z"
},
{
"tag": "v0.2.8",
"kind": "patch",
"published_at": "2025-08-19T19:39:02Z"
},
{
"tag": "v0.2.7",
"kind": "patch",
"published_at": "2025-08-18T21:56:56Z"
}
],
"recent_commits": [
{
"oid": "1f83d6590b9e97424b9c0c98296439d7ac292076",
"body": "…se 4b) (#184)\n\nomniChallenge: fetchMppSupported now returns { tempo, solana } from auth's GET /mpp/supported\n(was Tempo-only); buildMppChallenges advertises a solana intent=session challenge alongside\nthe solana charge when auth exposes a Solana authorizedSigner. methodDetails carries only the\nauth\n[…]\nhrough.\n\nClient/metering/settle paths are already chain-agnostic (challenge.method drives accounts).\nomniChallenge tests green (39); tsc clean.\n\nCo-authored-by: Claude Opus 4.8 <noreply@anthropic.com>",
"is_bot": false,
"headline": "feat(mpp): advertise Solana MPP session challenges (@atxp/server, Pha…",
"author_name": "Brian DeJong",
"author_login": "badjer",
"committed_at": "2026-06-30T21:04:42Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "d16e880dbcde4083c03b9817ad5363629008ba92",
"body": "…rides (#183)\n\n* feat(mpp): advertise Tempo MPP session intent + thread settlementOverrides\n\nPhase 4 SDK wire contract for TIP-1034 Tempo MPP sessions. Backwards-compatible:\nthe session intent is advertised only when the auth server exposes a settler, and\ncharge stays the default.\n\n- omniChallenge.t\n[…]\nrotocol.ts and paymentSession.ts so both classify a credential identically.\n\nCo-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>\n\n---------\n\nCo-authored-by: Claude Opus 4.8 <noreply@anthropic.com>",
"is_bot": false,
"headline": "feat(mpp): advertise Tempo MPP session intent + thread settlementOver…",
"author_name": "Brian DeJong",
"author_login": "badjer",
"committed_at": "2026-06-25T23:50:45Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "2064c6cc1b9de1e3129ccd0e2a47afe4e90c93a9",
"body": "* feat(x402): advertise upto + send settlementOverrides for metered settle\n\n- omniChallenge buildX402Requirements advertises scheme=upto for EVM (Base) x402\n options (SVM stays exact; Solana upto not implemented). The deployed SDK version\n thus selects exact vs upto.\n- ProtocolSettlement.buildRequ\n[…]\nmbed accepted\" comment (createPaymentPayload\n does embed accepted for v2).\n\nCo-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>\n\n---------\n\nCo-authored-by: Claude Opus 4.8 <noreply@anthropic.com>",
"is_bot": false,
"headline": "feat(x402): advertise upto scheme + send settlementOverrides (#182)",
"author_name": "Brian DeJong",
"author_login": "badjer",
"committed_at": "2026-06-18T18:14:05Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "868f331c50f8266e27ca2207db0e4e2d6d295743",
"body": "…o) — Phase 2 (#181)\n\n* feat(payments): settle the metered actual at session close (atxp up-to)\n\nAt session close, settle the accumulated `session.spent` (the metered\n\"up-to\" actual) instead of the credential's full cap. `ProtocolSettlement.settle`\ngains an optional `actualAmount` that, for ATXP, ov\n[…]\nlied to the settled amount (no exponential notation for\n sub-1e-6 values).\n\nCo-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>\n\n---------\n\nCo-authored-by: Claude Opus 4.8 <noreply@anthropic.com>",
"is_bot": false,
"headline": "feat(payments): settle the metered actual at session close (ATXP up-t…",
"author_name": "Brian DeJong",
"author_login": "badjer",
"committed_at": "2026-06-17T22:53:55Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "5787827ddabc28a3b79f4aeb0be6969d371d5149",
"body": "* feat(payments): relocate settlement to session close (phase 1)\n\nIntroduce an implicit, request-scoped PaymentSession and move payment\nsettlement off the inbound express middleware and onto session close at\nthe end of the response.\n\n- @atxp/server: new PaymentSession (cap/spent/charge); ALS context\n[…]\nker flags genuinely stuck settles,\nwhile still bounding a hung auth server.\n\nCo-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>\n\n---------\n\nCo-authored-by: Claude Opus 4.8 <noreply@anthropic.com>",
"is_bot": false,
"headline": "feat(payments): relocate settlement to session close (phase 1) (#177)",
"author_name": "Brian DeJong",
"author_login": "badjer",
"committed_at": "2026-06-17T20:55:34Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "73bbf2de08f47d193511dcd7df6ab2c37b139590",
"body": null,
"is_bot": false,
"headline": "fix: propagate lifecycle id through ATXP account retries (#176)",
"author_name": "R-M-Naveen",
"author_login": "R-M-Naveen",
"committed_at": "2026-06-02T16:02:14Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2827140f70cd7b140f9badb4f4699636657b3ad3",
"body": null,
"is_bot": false,
"headline": "Propagate payment lifecycle id through retries (#175)",
"author_name": "R-M-Naveen",
"author_login": "R-M-Naveen",
"committed_at": "2026-06-02T14:19:04Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f7300d669b3bdb17f231798eb5cbd1a86015f174",
"body": null,
"is_bot": false,
"headline": "chore: sync published 0.11.10 package versions (#174)",
"author_name": "R-M-Naveen",
"author_login": "R-M-Naveen",
"committed_at": "2026-06-01T16:23:59Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "7b9cd38195a1da3a7428a9182beb042d2a37c0b8",
"body": null,
"is_bot": false,
"headline": "fix: avoid workspace installs during release version bump (#173)",
"author_name": "R-M-Naveen",
"author_login": "R-M-Naveen",
"committed_at": "2026-05-29T00:00:46Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "de138c0ca25755161ea89d019a5a19efa701865a",
"body": null,
"is_bot": false,
"headline": "test: serialize release-flaky package test files (#172)",
"author_name": "R-M-Naveen",
"author_login": "R-M-Naveen",
"committed_at": "2026-05-28T23:21:20Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1cb74e67973bdf9a1399294010941c0fb86684b5",
"body": "* test: run workspace vitest files serially\n\n* test: isolate express fetch stubs",
"is_bot": false,
"headline": "Fix express fetch stub isolation (#171)",
"author_name": "R-M-Naveen",
"author_login": "R-M-Naveen",
"committed_at": "2026-05-28T22:51:08Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0a11c6629cb010c049fbc1707ec01cfff5e9b644",
"body": null,
"is_bot": false,
"headline": "Carry resource metadata in MPP challenges (#170)",
"author_name": "R-M-Naveen",
"author_login": "R-M-Naveen",
"committed_at": "2026-05-28T21:56:06Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "89e9a6361d309ff27a50e65650fe29ebea2c0db5",
"body": "…dis/sqlite/memory) (#169)\n\n* fix(redis): bound default TTL for access tokens without expiry\n\nRedisOAuthDb.saveAccessToken stored access tokens with no expiry (plain SET) whenever the token had no expiresAt and no ttl was configured. The ATXP server middleware (atxpContext.withATXPContext) saves the\n[…]\nrkspace common. Per CLAUDE.md guidance (line 73).\n\nCo-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>\n\n---------\n\nCo-authored-by: Claude Opus 4.7 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "fix(oauth): bound OAuth access-token lifetime across all backends (re…",
"author_name": "Brian DeJong",
"author_login": "badjer",
"committed_at": "2026-05-27T00:28:47Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "e4656a080885990433e123a9b2e3b30bbc348c3e",
"body": "* feat: ProtocolSettlement sends X-ATXP-App-Name header to /settle/* and /verify/*\n\nLets auth (see circuitandchisel/auth#254) attribute settlement\nobservability events to the calling service — so Honeycomb/PostHog\ndashboards can slice revenue by llm / music / search / etc. Companion\nto the auth-side\n[…]\n. The docstring flags this so operators debugging absent\nobservability know where to look.\n\nNo runtime behavior change.\n\n---------\n\nCo-authored-by: Claude Opus 4.7 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "feat: ProtocolSettlement sends X-ATXP-App-Name header to auth (#167)",
"author_name": "Brian DeJong",
"author_login": "badjer",
"committed_at": "2026-04-20T22:24:15Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "a44df5820ab1935d23c2b61590dd2f498e975a21",
"body": "…(#166)\n\nThe release workflow bumps versions of atxp-mpp and atxp-tempo but never\nupdates cross-package dependencies onto them. Result: 0.11.8 was published\nwith atxp-client/atxp-server still pinning @atxp/mpp@0.11.7, and\natxp-tempo still pinning @atxp/client@0.11.7 and @atxp/common@0.11.7.\n\nAdd the 4 missing `npm pkg set` lines and sync the current package.jsons\nto 0.11.8 so the source tree is internally consistent.\n\nCo-authored-by: Claude Opus 4.7 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "fix: update @atxp/mpp and @atxp/tempo cross-deps in release workflow …",
"author_name": "Brian DeJong",
"author_login": "badjer",
"committed_at": "2026-04-17T18:56:03Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "3ac565a566aacdaada4d08047be151db78f7e134",
"body": "…165)\n\nAuth is adding a carve-out on /settle/x402 that returns 200 with\n{ alreadySettled: true, txHash: null, ... } when the CDP facilitator\nrejects a retry with \"duplicate transaction\" (see auth PR for details).\nThe SDK's SettleResult.txHash was typed as string (non-nullable), which\nwould be a lie \n[…]\nnder \"<already-settled>\" when txHash is null instead of the word\n\"null\". Behavior on the happy path (txHash: string) is unchanged.\n\nCo-authored-by: Claude Opus 4.7 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "fix: allow null txHash in SettleResult for already-settled retries (#…",
"author_name": "Brian DeJong",
"author_login": "badjer",
"committed_at": "2026-04-16T19:50:57Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "d94c96a8ed8828bd373351bf6a78b0070be2eb8f",
"body": null,
"is_bot": false,
"headline": "bump version to 0.11.8 [skip ci]",
"author_name": "GitHub Action",
"author_login": "actions-user",
"committed_at": "2026-04-15T22:26:51Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e6a2ff7c41f8ae71cc25127ae7e0d5c12938ead9",
"body": "Clean dist/node_modules and dist/_virtual from atxp-server and atxp-x402\ntarballs via prepack script to prevent Node module resolution conflicts\nin consumers.\n\nCo-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "v0.11.7",
"author_name": "bdj",
"author_login": "badjer",
"committed_at": "2026-04-15T02:33:36Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "07fcde8c0c8f7322dec11c0855402fe2baebfb08",
"body": "Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "v0.11.6",
"author_name": "bdj",
"author_login": "badjer",
"committed_at": "2026-04-15T02:24:37Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "d6827b9722eb174ef28f440162fd03c091b8d3cf",
"body": "* fix: move payment settlement from requirePayment() to middleware\n\nSettlement now happens in the atxpExpress middleware before route code\nruns. This eliminates footguns where tool handlers call requirePayment()\nmultiple times (e.g., pre-flight balance check + post-generation charge)\nand the first c\n[…]\nectedCredential() returns null in route handlers.\n\nCo-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>\n\n---------\n\nCo-authored-by: Claude Opus 4.6 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "fix: move payment settlement from requirePayment() to middleware (#164)",
"author_name": "Brian DeJong",
"author_login": "badjer",
"committed_at": "2026-04-15T02:21:03Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "edb6d841e57f88e356b6c0fedea3657d08d13628",
"body": "Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "v0.11.5",
"author_name": "bdj",
"author_login": "badjer",
"committed_at": "2026-04-14T23:18:51Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "4f2f7993eaaa4ff72cfddf178c55b56d4bbfc23e",
"body": "* fix: only advertise protocols with actual challenge data in authorize\n\nATXPAccountHandler was hardcoding protocols: ['atxp', 'x402', 'mpp']\nregardless of what the MCP server's challenge actually contained. When\nthe server only sent a paymentRequestUrl (no x402 accepts or mpp\nchallenges), /authoriz\n[…]\natxp-base: remove unused eslint-disable directive\n\nCo-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>\n\n---------\n\nCo-authored-by: Claude Opus 4.6 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "fix: only advertise protocols with actual challenge data (#162)",
"author_name": "Brian DeJong",
"author_login": "badjer",
"committed_at": "2026-04-14T23:14:02Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "8be1a72205eb25056cb84f1c989d2c12d76f778c",
"body": "Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "v0.11.4",
"author_name": "bdj",
"author_login": "badjer",
"committed_at": "2026-04-14T18:51:18Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "5a2e9c95efd7a9d9758a2501ce0d8bbe41ca1dd1",
"body": "parseBody logs error-level on non-JSON bodies (SSE GETs), which is\nnormal operation. Replace with a comment; the undefined return already\nsignals \"no body\" to callers.\n\nCo-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "fix: silence expected parse error on SSE GET requests",
"author_name": "bdj",
"author_login": "badjer",
"committed_at": "2026-04-14T18:48:18Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "db4976d7014fdbec650f7b8599fa48a89d29b855",
"body": "Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "v0.11.3",
"author_name": "bdj",
"author_login": "badjer",
"committed_at": "2026-04-14T18:17:46Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "c55311bfcef44588f73dd8a5cda30f4513da0d05",
"body": "…rewriter (#161)\n\n* fix: defer writeHead in payment response rewriter to prevent Content-Length truncation\n\n@hono/node-server's responseViaCache sets Content-Length from the\noriginal body size and calls writeHead before res.end. When the payment\nresponse rewriter intercepts res.end and swaps in a la\n[…]\nlPaymentResponseRewriter for direct unit testing.\n\nCo-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>\n\n---------\n\nCo-authored-by: Claude Opus 4.6 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "fix: defer writeHead to prevent Content-Length truncation in payment …",
"author_name": "Brian DeJong",
"author_login": "badjer",
"committed_at": "2026-04-14T18:12:00Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "ab410f0c6b43561fc810b5f5f701ee574fd1b31b",
"body": null,
"is_bot": false,
"headline": "v0.11.2",
"author_name": "bdj",
"author_login": "badjer",
"committed_at": "2026-04-13T21:43:34Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "9f24b5f652f5cdfe5be58c765228d227dc1f2786",
"body": "* fix: unwrap JSON-RPC error envelope for MCP payment challenges\n\nWhen an MCP server returns a 402 payment challenge, the challenge data\n(chargeAmount, x402, mpp) is nested inside a JSON-RPC error envelope\nat error.data, not at the top level. The ATXPAccountHandler was parsing\nthe top level, finding\n[…]\n>\n\n* chore: remove debug logging from atxpFetcher\n\nCo-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>\n\n---------\n\nCo-authored-by: Claude Opus 4.6 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "fix: unwrap JSON-RPC error envelope for MCP payment challenges (#160)",
"author_name": "Brian DeJong",
"author_login": "badjer",
"committed_at": "2026-04-13T21:08:34Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "9c9f3d4f66410723eed57c34e81447e654bda5fb",
"body": "* feat: response rewriting to preserve omni-challenge data through McpServer\n\nMcpServer wraps McpError(-30402) into a CallToolResult, discarding error.data\n(which carries x402 accepts and mpp challenges). This breaks X402 and MPP\nprotocols over MCP transport while keeping ATXP working (text extracti\n[…]\nlient to abort before the credential is\nreturned.\n\nCo-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>\n\n---------\n\nCo-authored-by: Claude Opus 4.6 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "fix: preserve omni-challenge data through McpServer wrapping (#159)",
"author_name": "Brian DeJong",
"author_login": "badjer",
"committed_at": "2026-04-13T18:46:54Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "550a1951388c2f26d0c135873e7c8ba2477d559f",
"body": "Documents the issue where @modelcontextprotocol/sdk's McpServer wraps\npayment McpErrors into CallToolResult, stripping structured error data\n(x402 accepts, MPP challenges). Includes reproduction steps, what works\nvs what's broken, debug logging instructions, and key file references.\n\nCo-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "docs: MCP SDK payment error wrapping issue + testing guide",
"author_name": "bdj",
"author_login": "badjer",
"committed_at": "2026-04-11T02:36:32Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "bf16267ca63a3d1e028738e7ba296575d61531c5",
"body": null,
"is_bot": false,
"headline": "v0.11.1",
"author_name": "bdj",
"author_login": "badjer",
"committed_at": "2026-04-11T00:46:53Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1c01bd75a6bbc964290febc1d341d8ef15ebebca",
"body": "The omni-challenge server was sending MPP_ERROR_CODE (-32042) which\nbroke clients prior to v0.11.0 that only check for -30402.\n\nServer change:\n- omniChallengeMcpError now sends PAYMENT_REQUIRED_ERROR_CODE (-30402)\n instead of MPP_ERROR_CODE (-32042)\n\nClient change (both codes accepted):\n- mppProtoc\n[…]\n accepts -32042 OR -30402\n\nTODO: Once clients prior to v0.11.0 are phased out, servers can switch\nback to MPP_ERROR_CODE (-32042).\n\nCo-authored-by: Claude Opus 4.6 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "fix: restore legacy error code -30402 for backwards compatibility (#158)",
"author_name": "Brian DeJong",
"author_login": "badjer",
"committed_at": "2026-04-11T00:41:18Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "3401837e0ffac388a8ed44ee6a8e00047deb22ea",
"body": "…tion (#157)\n\n* fix: address X402 Solana SDK review — tests, dedup, routing\n\n1. Add 4 tests for Solana X402: accept generation, feePayer field,\n invalid address filtering, EVM vs Solana extra fields\n2. Remove duplicated SOLANA_USDC_MINT constants — use USDC_ADDRESSES\n from constants.ts (single s\n[…]\nst scripts in CI, not the root\nvitest invocation.\n\nCo-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>\n\n---------\n\nCo-authored-by: Claude Opus 4.6 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "fix: X402 Solana SDK review — tests, dedup, server-driven chain selec…",
"author_name": "Brian DeJong",
"author_login": "badjer",
"committed_at": "2026-04-10T22:18:11Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "10c99d9938b9e26ab74eef3c1b981419cb033412",
"body": "- Add Solana USDC addresses and CAIP-2 networks to constants\n- buildX402Requirements includes Solana SVM options alongside EVM,\n with CDP facilitator fee payer in extra field\n- Client prefers Solana X402 when available (lower fees)\n- Settlement routing detects SVM payloads (has 'transaction' field)\n and selects the matching solana: accept option\n\nCo-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "feat: X402 Solana support in SDK — omni-challenge + settlement routing",
"author_name": "bdj",
"author_login": "badjer",
"committed_at": "2026-04-10T21:04:40Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "460f34fee88f1acf370e3b724a4bd5834ea5f715",
"body": "* fix: MPP challenge expires + Tempo human-readable amount\n\n- Add expires field (5 min TTL) to all MPP challenges — required by\n mppx's verify() for Tempo settlement\n- Add expires to MppChallengeData type\n- Tempo challenges use human-readable amount (\"0.01\") instead of\n micro-units (\"10000\") — mpp\n[…]\nithout an index signature for caller type safety.\n\nCo-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>\n\n---------\n\nCo-authored-by: Claude Opus 4.6 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "fix: MPP challenge expires + Tempo human-readable amount (#156)",
"author_name": "Brian DeJong",
"author_login": "badjer",
"committed_at": "2026-04-10T15:54:53Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "34a0c275802d180d7386c2f0bd7bbc4f50e99dd7",
"body": "* feat: multi-chain MPP support (Solana + Tempo)\n\nServer now emits an array of MPP challenges (one per supported chain)\ninstead of a single Tempo-only challenge. Client extracts all challenges\nand forwards the array to accounts, which picks the chain via feature\nflag. Uses X-MPP-Payment header to ca\n[…]\n mainnet now uses USDC as the default stablecoin.\n\nCo-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>\n\n---------\n\nCo-authored-by: Claude Opus 4.6 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "feat: multi-chain MPP support (Solana + Tempo) (#155)",
"author_name": "Brian DeJong",
"author_login": "badjer",
"committed_at": "2026-04-09T02:08:37Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "7659c1f14443bb729e60a589f88fed6de1f57d1e",
"body": "… (#154)\n\n* feat: add context field to AuthorizeResult for settlement context passthrough\n\nEnable services like the LLM gateway to pass X402 paymentRequirements from\nthe authorize step to the settle step without bundling them into the credential\n(which must remain the raw payment header for HTTP ret\n[…]\ntency: PAYMENT-SIGNATURE / X-PAYMENT (both valid)\n\nCo-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>\n\n---------\n\nCo-authored-by: Claude Opus 4.6 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "feat: add context field to AuthorizeResult for settlement passthrough…",
"author_name": "Brian DeJong",
"author_login": "badjer",
"committed_at": "2026-04-08T16:26:11Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "13249383cc743dab6f4cb1bc7b82f7cef50e6e2d",
"body": "* feat: upgrade x402 v1 → v2 (@x402/core + @x402/evm)\n\nReplace x402/client with @x402/core and @x402/evm across client, base,\nand x402 packages. selectPaymentRequirements inlined (v2 doesn't export it).\nBaseAccount uses ExactEvmScheme + x402Client for signing.\nHandles both v1 (maxAmountRequired) and\n[…]\ninfo takes single string arg (no structured data)\n\nCo-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>\n\n---------\n\nCo-authored-by: Claude Opus 4.6 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "feat: x402 v2 upgrade + unit/identity fixes (#153)",
"author_name": "Brian DeJong",
"author_login": "badjer",
"committed_at": "2026-04-07T23:48:03Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "791e5d490cc6336109229dd314ed079e75aab15d",
"body": "…02) (#151)\n\n* feat: move settlement from middleware to requirePayment (stateless design)\n\nSettlement now happens inside requirePayment() instead of the Express\nmiddleware. This is the correct design because:\n\n1. requirePayment has the pricing context (amount, options, destination)\n needed to rege\n[…]\nling inconsistency\n- Remove temp cli-base-temp.ts\n\nCo-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>\n\n---------\n\nCo-authored-by: Claude Opus 4.6 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "feat: move settlement from middleware to requirePayment (stateless X4…",
"author_name": "Brian DeJong",
"author_login": "badjer",
"committed_at": "2026-04-07T20:48:05Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "ee00c699791a319e2c4916fb4b8a8aad8d9596f5",
"body": "ATXPDestinationMaker.parseDestinationsResponse now filters out\ndestinations with chains or currencies this SDK version doesn't\nrecognize, instead of throwing. This ensures server-side chain\nadditions don't break older SDK clients.\n\nCo-authored-by: Claude Opus 4.6 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "fix: skip unrecognized chains/currencies instead of throwing (#152)",
"author_name": "Brian DeJong",
"author_login": "badjer",
"committed_at": "2026-04-07T20:42:26Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "75ec9e049962a01dd8b0510d539e516dc7812d8d",
"body": "* fix: protocol handler retries use OAuth-authenticated fetch\n\nProtocol handlers (ATXPAccountHandler, X402, MPP) retry requests using\nfetchFn from ProtocolConfig. Previously this was the raw fetch, so retries\nwere missing the OAuth Bearer token. MCP servers require both the payment\ncredential header\n[…]\nX-ATXP-PAYMENT and\nAuthorization: Bearer headers.\n\nCo-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>\n\n---------\n\nCo-authored-by: Claude Opus 4.6 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "fix: protocol handler retries use OAuth-authenticated fetch (#150)",
"author_name": "Brian DeJong",
"author_login": "badjer",
"committed_at": "2026-04-07T18:38:37Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "0c585e67041f6ce5cdd2a5df6270bbdeda3604fb",
"body": "* feat: ATXPAccountHandler, settle-at-start, X402 fixes for Phase 3.9\n\nPhase 3.9 SDK changes:\n\nClient:\n- ATXPAccountHandler: exclusive handler for ATXPAccount, delegates to /authorize/auto\n- ATXPAccount never falls back to push mode (errors instead)\n- Handler guard: tryProtocolHandlers only runs on \n[…]\nsesAccountsAuthorize, tests, settle-at-start docs\n\nCo-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>\n\n---------\n\nCo-authored-by: Claude Opus 4.6 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "Phase 3.9: ATXPAccountHandler, settle-at-start, X402 fixes (#149)",
"author_name": "Brian DeJong",
"author_login": "badjer",
"committed_at": "2026-04-07T17:45:36Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "0acd5ed47d41fdbad3f38f02c6e5172e35f20855",
"body": "…lenge (#147)\n\n* feat: add MPP support to server protocol detection, settlement, and omni-challenge\n\n- detectProtocol() now detects Authorization: Payment header as MPP\n- ProtocolSettlement.buildRequestBody() handles MPP credential format\n (parses base64/JSON MppCredential, extracts amount for sett\n[…]\n\nMPP_ERROR_CODE at runtime, which resolves fine).\n\nCo-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>\n\n---------\n\nCo-authored-by: Claude Opus 4.6 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "feat: add MPP to server protocol detection, settlement, and omni-chal…",
"author_name": "Brian DeJong",
"author_login": "badjer",
"committed_at": "2026-04-02T23:14:52Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "55713720bfb0c23fbdd80c6e7961279800ef9390",
"body": null,
"is_bot": false,
"headline": "bump version to 0.10.13 [skip ci]",
"author_name": "bdj",
"author_login": "badjer",
"committed_at": "2026-04-01T21:37:25Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "950c7df97ab72b75129edba2df63f9b02f2e3cb1",
"body": "… via flag (#146)\n\n* feat: authorize() takes protocols[] array instead of single protocol\n\nEach account implementation picks the first protocol it supports from\nthe array. ATXPAccount calls /authorize/auto — accounts resolves the\nprotocol via feature flag server-side. Local accounts (Base, Solana,\ne\n[…]\nuthorize/mpp log message in mppProtocolHandler.ts\n\nCo-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>\n\n---------\n\nCo-authored-by: Claude Opus 4.6 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "feat: authorize() takes protocols[] array — accounts decides protocol…",
"author_name": "Brian DeJong",
"author_login": "badjer",
"committed_at": "2026-04-01T21:31:45Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "5b5737f2a09ef363e89e26f621c53faa6808f34f",
"body": "…mpo [skip ci]",
"is_bot": false,
"headline": "bump version to 0.10.12 — fix stale cross-deps in client (mpp) and te…",
"author_name": "bdj",
"author_login": "badjer",
"committed_at": "2026-04-01T00:23:49Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "51b21a2742a99e9d705fe36a8f8763c2fe45004c",
"body": null,
"is_bot": false,
"headline": "bump version to 0.10.11 [skip ci]",
"author_name": "bdj",
"author_login": "badjer",
"committed_at": "2026-04-01T00:02:45Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d7b8aab9bcb0e4d35545649843afd415ef2b45ab",
"body": "@atxp/server had its own PaymentProtocol = 'atxp' | 'x402' which didn't\ninclude 'mpp'. @atxp/common has the canonical type that includes all\nprotocols. Import and re-export from common for type consistency.\n\nCo-authored-by: Claude Opus 4.6 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "fix: unify PaymentProtocol type",
"author_name": "Brian DeJong",
"author_login": "badjer",
"committed_at": "2026-03-31T23:49:47Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "9d16ea1dc99910b053108941c9f9dbfd6d4fbe26",
"body": null,
"is_bot": false,
"headline": "bump version to 0.10.10 [skip ci]",
"author_name": "bdj",
"author_login": "badjer",
"committed_at": "2026-03-31T23:31:26Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "642e77f602261947d71bcd5a4268b984df1a8d80",
"body": "The old order (install → build → test → version bump → publish) failed\nbecause test resolved @atxp/common from npm (stale version) instead of\nthe local workspace. Moving version bump + npm install before build/test\nensures all workspace deps resolve to the new version.\n\nCo-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "fix: reorder release workflow — version bump before build/test",
"author_name": "bdj",
"author_login": "badjer",
"committed_at": "2026-03-31T23:17:37Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "082683647b065d426b04fc9bff1d3c96ce709bdd",
"body": "- --ignore-existing makes re-runs safe when some packages are already\n published (e.g. after a partial failure)\n- Add @atxp/mpp and @atxp/tempo to version bump and publish steps\n (new packages from Phase 1/3)\n\nCo-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "fix: add --ignore-existing to publish, add mpp + tempo packages",
"author_name": "bdj",
"author_login": "badjer",
"committed_at": "2026-03-31T22:58:17Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "e6bc1aff16e4731f320b4e02c9146f6e44c75430",
"body": null,
"is_bot": false,
"headline": "revert: remove as Account cast (no longer needed after 0.10.9 publish)",
"author_name": "bdj",
"author_login": "badjer",
"committed_at": "2026-03-31T22:57:49Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "df28a1d874ea996eb5523f6ce139f8ffa1d689c7",
"body": "Project references typecheck may run before common's .d.ts is built,\ncausing 'authorize does not exist in type Account'. The cast is safe\nsince this is a test helper.\n\nCo-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "fix: cast mock Account in serverTestHelpers to fix typecheck",
"author_name": "bdj",
"author_login": "badjer",
"committed_at": "2026-03-31T22:50:16Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "afb9149160722d04732acf41992a3ffc8c4be434",
"body": null,
"is_bot": false,
"headline": "bump version to 0.10.8 [skip ci]",
"author_name": "GitHub Action",
"author_login": "actions-user",
"committed_at": "2026-03-31T22:46:19Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1c63f537124d6bc19b80323d1a15ffbd24436efc",
"body": "* feat: add PaymentClient + buildPaymentHeaders, refactor handlers\n\nAdd PaymentClient class with authorize() method that centralizes the\n/authorize/{protocol} call pattern. Resolves protocol via protocolFlag,\nbuilds connection token auth headers, constructs protocol-specific\nrequest bodies, returns \n[…]\nus 4.6 (1M context) <noreply@anthropic.com>\n\n* fix: remove unused FetchLike, Logger, createPaymentHeader imports (lint)\n\n---------\n\nCo-authored-by: Claude Opus 4.6 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "feat: PaymentClient + buildPaymentHeaders (Phase 2) (#144)",
"author_name": "Brian DeJong",
"author_login": "badjer",
"committed_at": "2026-03-31T22:36:10Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "37a54ab5d9c8be7cab1442f4ce37084d67c86d6b",
"body": "…e 1) (#143)\n\n* feat: add multi-protocol support with feature flags and strategy pattern\n\nTask 1.5: Add PaymentProtocol, ProtocolFlag, and ChainFlag types to @atxp/common.\nTask 1.6: Refactor ATXPFetcher with strategy pattern for protocol handlers.\n\nCo-Authored-By: Claude Opus 4.6 <noreply@anthropic.\n[…]\n: Claude Opus 4.6 <noreply@anthropic.com>\nCo-authored-by: dave <dave_accounts@squads.email>\nCo-authored-by: Dave (Overseer) <dave_overseer@squads.email>\nCo-authored-by: eve <eve_accounts@squads.email>",
"is_bot": false,
"headline": "feat: multi-protocol support — unified fetcher + omni-challenge (Phas…",
"author_name": "Brian DeJong",
"author_login": "badjer",
"committed_at": "2026-03-31T17:02:25Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "a35b1213765231e0855777f81c3bbb1e6b9cd176",
"body": null,
"is_bot": false,
"headline": "bump version to 0.10.7 [skip ci]",
"author_name": "Emilio Amaya",
"author_login": "emilioacc",
"committed_at": "2026-03-16T19:30:46Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "87555876915f49a83361f193ec6c1613c99a4e2d",
"body": "Add a getBalance() function to @atxp/server that allows MCP servers to\ncheck a user's available balance without charging. This calls the auth\nserver's new POST /balance endpoint.\n\nChanges:\n- Add BalanceRequest type and getBalance to PaymentServer interface\n- Implement getBalance in ATXPPaymentServer\n[…]\nt like requirePayment)\n- Update serverTestHelpers mock to include getBalance\n- Add tests for ATXPPaymentServer.getBalance and getBalance() helper\n- Bump @atxp/server to 0.10.7\n\nLinear-issue: ATXP-1712",
"is_bot": false,
"headline": "feat(server): add getBalance() for balance lookups (#141)",
"author_name": "emilioacc",
"author_login": "emilioacc",
"committed_at": "2026-03-16T18:23:10Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "5279cc33952a9ba1d72dbbd9d34fafd1fb59a11d",
"body": null,
"is_bot": false,
"headline": "bump version to 0.10.6 [skip ci]",
"author_name": "GitHub Action",
"author_login": "actions-user",
"committed_at": "2026-03-04T18:59:12Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "01a216d00cf16ab54f329ee9689f974cf8e9468e",
"body": "* feat: add getProfile() to ATXPAccount\n\n- Add MeResponse type with account profile fields\n- Cache full /me response in ATXPAccount\n- Add getProfile() that returns cached profile data\n- Works whether account_id is in connection string or not\n\nCo-Authored-By: Claude Opus 4.6 (1M context) <noreply@ant\n[…]\nequests when getProfile() is called\nconcurrently.\n\nCo-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>\n\n---------\n\nCo-authored-by: Claude Opus 4.6 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "feat: add getProfile() to ATXPAccount (#139)",
"author_name": "emilioacc",
"author_login": "emilioacc",
"committed_at": "2026-03-04T18:53:00Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "36069fdc2fedf6cbcf0d405abd3e6c70843d9c74",
"body": "* fix(server): Use tsconfig.json for serverTestHelpers rollup build\n\nThe serverTestHelpers rollup config was using `tsconfig: false` with inline\ncompiler options, which bypassed TypeScript project references. During npm\nworkspace publishing, this caused the build to fail to resolve the updated\n`@atx\n[…]\nng @atxp/common@0.10.4\nwhich doesn't have the createSpendPermission method.\n\nCo-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>\n\n---------\n\nCo-authored-by: Claude Opus 4.5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "fix(server): Use tsconfig.json for serverTestHelpers rollup build (#138)",
"author_name": "Brian DeJong",
"author_login": "badjer",
"committed_at": "2026-01-15T01:01:46Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "bbb08e4c284539c636b4ac31c0bcd2becfc0c60e",
"body": null,
"is_bot": false,
"headline": "bump version to 0.10.5 [skip ci]",
"author_name": "GitHub Action",
"author_login": "actions-user",
"committed_at": "2026-01-14T23:40:42Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "863cfbeb4c0c676dbc46858f0cf9b52e39004ba5",
"body": "The auth service now returns HTTP 202 for async payments that are accepted\nbut still processing. This change treats 202 the same as 200 (success).\n\n- 200 = synchronous payment completed\n- 202 = async payment accepted (balance checked, executing in background)\n\nCo-authored-by: Claude Opus 4.5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "feat: Handle 202 Accepted from /charge endpoint (#137)",
"author_name": "Brian DeJong",
"author_login": "badjer",
"committed_at": "2026-01-14T19:02:20Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "23c5db382f0bbd64f82295b1aaa382d1a03a2b6d",
"body": "* feat: Add scoped spend token support to SDK\n\nEnables SDK clients to use scoped spend tokens during authorization,\nallowing async charging instead of blocking on payment before each operation.\n\nChanges:\n- Add ScopedSpendConfig type with spendLimit field\n- Add scopedSpendConfig option to ClientConfi\n[…]\n for future account types to support\nspend permissions without duck-typing.\n\nCo-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>\n\n---------\n\nCo-authored-by: Claude Opus 4.5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "feat: Use resource_url-based spend permissions (#133)",
"author_name": "Brian DeJong",
"author_login": "badjer",
"committed_at": "2026-01-14T18:02:43Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "ea7a1a58cd7b7aaeb96b92b06ab207d2ad23a78a",
"body": null,
"is_bot": false,
"headline": "bump version to 0.10.4 [skip ci]",
"author_name": "GitHub Action",
"author_login": "actions-user",
"committed_at": "2026-01-12T20:52:18Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "6e3aae3a5630ab07bd49043fbc0c16c814e47777",
"body": "* Fix: Use iss field for payment memo instead of payeeName\n\nResolves ATXP-1204 - Bad memo for proxy transactions\n\nWhen making payments through the MCP proxy, the transaction memo was\nbeing set to the MCP server name (e.g., \"Image\") instead of the auth\nserver ID (e.g., \"auth.atxp.ai\"), causing the au\n[…]\nt, fall back to payeeName for backward compatibility\n\nThese tests ensure the proxy transaction memo issue is properly resolved\nand that backward compatibility is maintained for older payment requests.",
"is_bot": false,
"headline": "Fix: Use iss field for payment memo instead of payeeName (#135)",
"author_name": "Rob Di Marco",
"author_login": "robdimarco-atxp",
"committed_at": "2026-01-12T20:46:30Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "db7df518ac693d088ecdd56e3df267559cce0c0f",
"body": "Major Version Upgrades:\n- @types/node: 22.13.0 → 25.0.3 (across all packages)\n- vitest: 3.0.9 → 4.0.16 (across all packages)\n- @rollup/plugin-commonjs: 28.0.6 → 29.0.0\n- x402: 0.6.1 → 1.1.0\n- jsdom: 25.0.1 → 27.4.0 (dev dependency)\n- dotenv: 16.5.0 → 17.2.3\n- react-native-url-polyfill: 2.0.0 → 3.0.0\n[…]\ng 4 are Solana bigint-buffer issues with no fix available\n\nUpdated all workspace package.json files with new version ranges.\nAll packages build successfully, tests pass, and package validation passes.",
"is_bot": false,
"headline": "chore: upgrade dependencies and fix security vulnerabilities (#131)",
"author_name": "Rob Di Marco",
"author_login": "robdimarco-atxp",
"committed_at": "2025-12-30T22:37:50Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "a30213cde7ab0296c521d5e2af250311f44dc27d",
"body": null,
"is_bot": false,
"headline": "bump version to 0.10.3 [skip ci]",
"author_name": "GitHub Action",
"author_login": "actions-user",
"committed_at": "2025-12-18T23:13:56Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "9604648f5c19d93676e169b0e147b824da64f3be",
"body": "* Support multi-tenant PRM (PRM URLs not at the domain root)\n\n* Fix tests for multi-tenant PRM URL format\n\n- Fix double-slash bug in PRM URL construction by stripping trailing slashes\n- Update mockResourceServer to use RFC 9728 compliant PRM URL format\n- Update test assertions to match new PRM URL p\n[…]\nefer-const)\n\n🤖 Generated with [Claude Code](https://claude.com/claude-code)\n\nCo-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>\n\n---------\n\nCo-authored-by: Claude Opus 4.5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "Support multi-tenant PRM (PRM URLs not at the domain root) (#130)",
"author_name": "Brian DeJong",
"author_login": "badjer",
"committed_at": "2025-12-18T23:07:10Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "9e8b2cc6a7046d9abb4e583e915096970a91da40",
"body": "ChatGPT's MCP app platform expects authentication challenges to be\nreturned as MCP tool results with `_meta[\"mcp/www_authenticate\"]`\nrather than HTTP 401 responses. This differs from the standard ATXP\nmiddleware which blocks unauthenticated requests at the HTTP level.\n\nThis commit adds:\n- examples/c\n[…]\nted_data: Auth required, no payment\n- premium_greeting: Auth + payment required\n\n🤖 Generated with [Claude Code](https://claude.com/claude-code)\n\nCo-authored-by: Claude Opus 4.5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "Add ChatGPT-compatible authentication example and documentation (#129)",
"author_name": "David N",
"author_login": "napoleond",
"committed_at": "2025-12-18T21:19:53Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "b7cc597e9a38efe50cddb51e4cfa54dc5cc83f45",
"body": null,
"is_bot": false,
"headline": "Use new accountId-only destination in dev:resource",
"author_name": "bdj",
"author_login": "badjer",
"committed_at": "2025-12-18T17:59:48Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "376f12787724f1d2442f10ae1b6c2783ad8ca7a6",
"body": null,
"is_bot": false,
"headline": "bump version to 0.10.2 [skip ci]",
"author_name": "GitHub Action",
"author_login": "actions-user",
"committed_at": "2025-12-17T21:41:08Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "94901f4eb2e5e33cdb623173660d49d3a1db574d",
"body": "…(#128)\n\nIntroduces a minimal PaymentDestination interface that only requires\ngetAccountId() and getSources() - the bare minimum needed for server\nmiddleware destinations. This allows sprites and other services to\noperate without a full connection_token.\n\nChanges:\n- Add PaymentDestination interface \n[…]\nXPAccount continues to work unchanged since\nAccount extends PaymentDestination.\n\n🤖 Generated with [Claude Code](https://claude.com/claude-code)\n\nCo-authored-by: Claude Opus 4.5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "Add PaymentDestination interface for lightweight server destinations …",
"author_name": "Brian DeJong",
"author_login": "badjer",
"committed_at": "2025-12-17T21:34:57Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "cc2e14905b670ca73111b672af349288869105f7",
"body": null,
"is_bot": false,
"headline": "bump version to 0.10.1 [skip ci]",
"author_name": "GitHub Action",
"author_login": "actions-user",
"committed_at": "2025-12-17T17:22:04Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5316d2506fa9ebc95fc69e6058fd14f55a620a4b",
"body": "The accounts server returns `accountId` but the SDK was expecting\n`account_id` (snake_case). This fixes the mismatch so getAccountId()\nworks correctly when fetching from the /me endpoint.\n\n🤖 Generated with [Claude Code](https://claude.com/claude-code)\n\nCo-authored-by: Claude Opus 4.5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "Fix /me endpoint to expect accountId (camelCase) (#127)",
"author_name": "Brian DeJong",
"author_login": "badjer",
"committed_at": "2025-12-17T17:15:30Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "ccff8609b80a71f22e65ce7d6fbab101bd47d343",
"body": null,
"is_bot": false,
"headline": "bump version to 0.10.0 [skip ci]",
"author_name": "GitHub Action",
"author_login": "actions-user",
"committed_at": "2025-12-17T16:34:21Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "80f9fed89382b4b30494f26add53562dd81e0a85",
"body": "…ction strings (#125)\n\nThis is a breaking change to the Account interface.\n\nChanges:\n- Changed Account interface from `accountId: AccountId` to `getAccountId(): Promise<AccountId>`\n- ATXPAccount now supports connection strings with only `connection_token` (without `account_id`)\n- When `account_id` i\n[…]\nnts in tests need `getAccountId: async () => 'id'` instead of `accountId: 'id'`\n\n🤖 Generated with [Claude Code](https://claude.com/claude-code)\n\nCo-authored-by: Claude Opus 4.5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "BREAKING: Make accountId async to support connection_token-only conne…",
"author_name": "Brian DeJong",
"author_login": "badjer",
"committed_at": "2025-12-17T16:27:57Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "7130b36dfbcf9398d58f23b789a80007e7a59fda",
"body": "This reverts commit 553d1aab094564a0cf8c252ee9a1454decd0cc58.",
"is_bot": false,
"headline": "Revert \"feat: Add X-ATXP-Token header fallback for auth (#126)\"",
"author_name": "Emilio Amaya",
"author_login": "emilioacc",
"committed_at": "2025-12-17T01:09:41Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "553d1aab094564a0cf8c252ee9a1454decd0cc58",
"body": "* feat: Add X-ATXP-Token header fallback for auth\n\nSome proxies (like Daytona) intercept the Authorization header before\nit reaches the target server. This adds support for X-ATXP-Token as\na fallback header that gets converted to Bearer format.\n\nAlso improves error logging for client registration fa\n[…]\n.9.3-beta.1\n\n🤖 Generated with [Claude Code](https://claude.com/claude-code)\n\nCo-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>\n\n---------\n\nCo-authored-by: Claude Opus 4.5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "feat: Add X-ATXP-Token header fallback for auth (#126)",
"author_name": "emilioacc",
"author_login": "emilioacc",
"committed_at": "2025-12-16T22:01:49Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "3b1d735bca3e6e4c9980b44fb4d32a3a8182e99d",
"body": null,
"is_bot": false,
"headline": "bump version to 0.9.2 [skip ci]",
"author_name": "GitHub Action",
"author_login": "actions-user",
"committed_at": "2025-12-12T23:11:39Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ec54071ffbdd52ea317c937eff294292a2530aa7",
"body": null,
"is_bot": false,
"headline": "Pick up dependency security fixes (#124)",
"author_name": "Rob Di Marco",
"author_login": "robdimarco-atxp",
"committed_at": "2025-12-12T22:47:29Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "05a3b53fd2b81b944eef49ad191dbb6a2f3effaa",
"body": null,
"is_bot": false,
"headline": "bump version to 0.9.1 [skip ci]",
"author_name": "GitHub Action",
"author_login": "actions-user",
"committed_at": "2025-12-11T19:23:37Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "56c69eb11ec082a459d082b589e18aa882430790",
"body": "When ALCHEMY_API_KEY and ALCHEMY_GAS_POLICY_ID environment variables\nare set, the SDK will use Alchemy's bundler and paymaster infrastructure\ninstead of Coinbase. Falls back to Coinbase if either env var is missing.\n\n- Add @account-kit/infra dependency for official Alchemy transport\n- Add isAlchemyC\n[…]\n configuration\n- Add comprehensive unit tests for provider selection (15 tests)\n\n🤖 Generated with [Claude Code](https://claude.com/claude-code)\n\nCo-authored-by: Claude Opus 4.5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "Add Alchemy bundler/paymaster support as alternative to Coinbase (#122)",
"author_name": "David N",
"author_login": "napoleond",
"committed_at": "2025-12-11T19:16:41Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "c48ce55f686ceba0ab4ce6aa09340cadcc33fa81",
"body": "…guidance (#123)\n\n## What Changed\n\n### 1. Structured Error Classes\n- Added `ATXPPaymentError` base class with error codes, retry flags, and actionable messages\n- Created specific error types: `TransactionRevertedError`, `UnsupportedCurrencyError`,\n `GasEstimationError`, `RpcError`, `UserRejectedErr\n[…]\n Better user experience with specific, actionable error messages\n- Programmatic error handling via error codes\n- Improved debugging with structured telemetry\n- Clear retry guidance based on error type",
"is_bot": false,
"headline": "Improve payment error handling with structured errors and actionable …",
"author_name": "Rob Di Marco",
"author_login": "robdimarco-atxp",
"committed_at": "2025-12-11T19:02:12Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "8f7949a029d1076eefe00c417424228fd4c3c6bf",
"body": null,
"is_bot": false,
"headline": "Update dev: scripts so they can still be used for testing",
"author_name": "bdj",
"author_login": "badjer",
"committed_at": "2025-12-09T23:34:37Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "9a55d7c181ed92ffbc0e235f2563f2335f516188",
"body": null,
"is_bot": false,
"headline": "bump version to 0.9.0 [skip ci]",
"author_name": "GitHub Action",
"author_login": "actions-user",
"committed_at": "2025-12-09T15:15:51Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "328838b79f831a695957a01133763485c1e45164",
"body": "…120)\n\nBREAKING CHANGE: Blockchain-specific code has been moved to separate packages\n\n- Created @atxp/solana package for all Solana wallet/payment code\n- Moved all Base chain code to @atxp/base (both Mini App and generic implementations)\n- Removed Solana peer dependencies from @atxp/client\n- @atxp/c\n[…]\nrom packages not using Solana\n- Clear package boundaries and separation of concerns\n- Users only install blockchain dependencies they need\n- No confusing peer dependency flags required\n\nFixes ATXP-867",
"is_bot": false,
"headline": "Make blockchain dependencies optional via modular exports (v0.9.0) (#…",
"author_name": "Rob Di Marco",
"author_login": "robdimarco-atxp",
"committed_at": "2025-12-09T14:30:01Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "fbd926d407496588ef7cc674788d1808966a4ef5",
"body": "Replace secure_data tool with interactive tic-tac-toe game demonstrating\nMCP Apps interactivity:\n\nServer-side:\n- Game state management with per-user state storage\n- tictactoe_move tool: make a move, AI responds automatically\n- tictactoe_new_game tool: reset the game\n- Simple AI that tries to win, bl\n[…]\ncalls\n- Requests size via ui-size-change (both MCP Apps SEP and MCP-UI formats)\n\n🤖 Generated with [Claude Code](https://claude.com/claude-code)\n\nCo-authored-by: Claude Opus 4.5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "WIP: Interactive tic-tac-toe MCP App demo (#119)",
"author_name": "Brian DeJong",
"author_login": "badjer",
"committed_at": "2025-12-08T23:19:56Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "55c900722b96c2888b829c964bc93975258b3c30",
"body": null,
"is_bot": false,
"headline": "bump version to 0.8.3 [skip ci]",
"author_name": "GitHub Action",
"author_login": "actions-user",
"committed_at": "2025-12-08T20:07:13Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a0d1707e8c3828b41e6c3fa49c21774801541d32",
"body": "…esource",
"is_bot": false,
"headline": "Configurable port for testing multiple MCP servers with npm run dev:r…",
"author_name": "bdj",
"author_login": "badjer",
"committed_at": "2025-12-03T00:20:37Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c31f8682d9c68f6e67f407d88951fa0c2682ca81",
"body": null,
"is_bot": false,
"headline": "Use prod auth",
"author_name": "bdj",
"author_login": "badjer",
"committed_at": "2025-12-02T01:15:52Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "75a8e000df111046244a5bf62bb7234b32b547ab",
"body": "* Server: submit OAuth token to /charge endpoint\n\n* Update tests",
"is_bot": false,
"headline": "Server: submit OAuth token to /charge endpoint (#118)",
"author_name": "Brian DeJong",
"author_login": "badjer",
"committed_at": "2025-12-01T23:06:39Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "60d9782e0e0e28525a23248dfe802158da30c042",
"body": null,
"is_bot": false,
"headline": "Add UI to dev:resource MCP server (#117)",
"author_name": "Brian DeJong",
"author_login": "badjer",
"committed_at": "2025-12-01T22:15:45Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0b320a5cd3eeb137cdf66f219406dac8cd0a4e80",
"body": "* Update types to reflect PaymentRequest current state\n\n* Update codebase for PaymentRequest type changes\n\nUpdates all code to use the new PaymentRequest type structure:\n- Rename PaymentRequestData to PaymentRequest throughout\n- Change destinations array to options array\n- Remove deprecated source f\n[…]\ncharge() to return a boolean.\n\n🤖 Generated with [Claude Code](https://claude.com/claude-code)\n\nCo-Authored-By: Claude <noreply@anthropic.com>\n\n---------\n\nCo-authored-by: Claude <noreply@anthropic.com>",
"is_bot": false,
"headline": "Update codebase for PaymentRequest type changes (#116)",
"author_name": "Brian DeJong",
"author_login": "badjer",
"committed_at": "2025-12-01T17:49:47Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "1087f90ca251b8c909d6927759631b0f116da8ce",
"body": "…d clients! (#112)\n\n* Developer Mode | Add atxpConnectionToken to various configurations and clients\n\n* Developer Mode | Remove atxpConnectionToken from various configurations and tests\n\n* Developer Mode | Update server URL to use HTTPS for ATXP Express\n\n* Developer Mode | Add registrationType to OAuthResourceClient and OAuthClient configurations\n\n* Making Brian Happy! | Moving connection-token to header instead of body!",
"is_bot": false,
"headline": "Developer Mode | Add atxpConnectionToken to various configurations an…",
"author_name": "R-M-Naveen",
"author_login": "R-M-Naveen",
"committed_at": "2025-11-20T23:25:57Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b34cbaec0c9ae2290881bd489e1f86d1c1eb13e7",
"body": "Previously, when an empty string, undefined, or null was passed to\nATXPAccount constructor, it would throw a generic \"Invalid URL\" error.\nThis was not helpful for debugging.\n\nNow, the parseConnectionString function checks for empty/null/undefined\nconnection strings upfront and throws a clear error m\n[…]\nalue\n- Malformed URL\n- Missing connection_token parameter\n- Missing account_id parameter\n\n🤖 Generated with [Claude Code](https://claude.com/claude-code)\n\nCo-authored-by: Claude <noreply@anthropic.com>",
"is_bot": false,
"headline": "Improve ATXPAccount error message for empty connection strings (#114)",
"author_name": "Brian DeJong",
"author_login": "badjer",
"committed_at": "2025-11-18T20:31:29Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "b43df2ea3fd638a0b82604d444f04b417a2cbae5",
"body": null,
"is_bot": false,
"headline": "Cleared unused env variables check that fails cli invocation (#113)",
"author_name": "Henry Tsai",
"author_login": "thehenrytsai",
"committed_at": "2025-11-18T20:29:31Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4573ed838e0e80163175a74f785dcbf023c1951a",
"body": null,
"is_bot": false,
"headline": "bump version to 0.8.2 [skip ci]",
"author_name": "bdj",
"author_login": "badjer",
"committed_at": "2025-11-01T00:07:33Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "afff13ffdfa2e396fbc88b603dd1fbd3b2ad83f2",
"body": "The npm install step was creating additional file changes after the initial\ncommit, causing 'unstaged changes' error during rebase. Now using git add -A\nto capture all changes, and making the push non-fatal since publishing is\nthe critical operation.",
"is_bot": false,
"headline": "Fix git pull rebase failure by adding all changes before commit",
"author_name": "bdj",
"author_login": "badjer",
"committed_at": "2025-11-01T00:00:17Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4b3ab6053cd93164d0b95b90ab4be9aec4c3e78c",
"body": "The rebuild after version bump was trying to resolve dependencies from NPM\nbefore they were published, causing TypeScript errors for workspace dependencies.\nThe packages are already built correctly at the start of the workflow.",
"is_bot": false,
"headline": "Remove unnecessary rebuild step that causes publish failures",
"author_name": "bdj",
"author_login": "badjer",
"committed_at": "2025-10-31T23:46:36Z",
"body_truncated": false,
"is_coding_agent": false
}
],
"releases_count": 53,
"commits_last_year": 249,
"latest_release_at": "2026-06-02T16:03:39Z",
"latest_release_tag": "v0.11.12",
"releases_from_tags": false,
"days_since_last_push": 24,
"active_weeks_last_year": 27,
"days_since_latest_release": 54,
"mean_days_between_releases": 10
},
"community": {
"has_readme": true,
"has_license": true,
"has_description": false,
"has_contributing": false,
"health_percentage": 37,
"has_issue_template": false,
"has_code_of_conduct": false,
"has_pull_request_template": false
},
"ecosystem": {
"packages": [
{
"name": "@atxp/mpp",
"exists": true,
"license": "MIT",
"keywords": [],
"ecosystem": "npm",
"matches_repo": true,
"registry_url": "https://www.npmjs.com/package/@atxp/mpp",
"is_deprecated": false,
"latest_version": "0.11.11",
"repository_url": "https://github.com/atxp-dev/sdk",
"versions_count": 17,
"total_downloads": null,
"dependents_count": null,
"deprecation_note": null,
"maintainers_count": 6,
"monthly_downloads": 3072,
"first_published_at": "2026-03-31T23:11:18.022000Z",
"latest_published_at": "2026-06-02T14:39:28.773000Z",
"latest_version_yanked": null,
"days_since_latest_publish": 54
},
{
"name": "@atxp/base",
"exists": true,
"license": "MIT",
"keywords": [],
"ecosystem": "npm",
"matches_repo": true,
"registry_url": "https://www.npmjs.com/package/@atxp/base",
"is_deprecated": false,
"latest_version": "0.11.11",
"repository_url": "https://github.com/atxp-dev/sdk",
"versions_count": 54,
"total_downloads": null,
"dependents_count": null,
"deprecation_note": null,
"maintainers_count": 6,
"monthly_downloads": 321,
"first_published_at": "2025-08-27T16:29:53.704000Z",
"latest_published_at": "2026-06-02T14:39:53.331000Z",
"latest_version_yanked": null,
"days_since_latest_publish": 54
},
{
"name": "@atxp/x402",
"exists": true,
"license": "MIT",
"keywords": [],
"ecosystem": "npm",
"matches_repo": true,
"registry_url": "https://www.npmjs.com/package/@atxp/x402",
"is_deprecated": false,
"latest_version": "0.11.11",
"repository_url": "https://github.com/atxp-dev/sdk",
"versions_count": 39,
"total_downloads": null,
"dependents_count": null,
"deprecation_note": null,
"maintainers_count": 6,
"monthly_downloads": 239,
"first_published_at": "2025-09-21T23:53:19.516000Z",
"latest_published_at": "2026-06-02T14:40:35.538000Z",
"latest_version_yanked": null,
"days_since_latest_publish": 54
},
{
"name": "@atxp/redis",
"exists": true,
"license": "MIT",
"keywords": [],
"ecosystem": "npm",
"matches_repo": true,
"registry_url": "https://www.npmjs.com/package/@atxp/redis",
"is_deprecated": false,
"latest_version": "0.11.11",
"repository_url": "https://github.com/atxp-dev/sdk",
"versions_count": 60,
"total_downloads": null,
"dependents_count": null,
"deprecation_note": null,
"maintainers_count": 6,
"monthly_downloads": 348,
"first_published_at": "2025-08-21T17:28:52.841000Z",
"latest_published_at": "2026-06-02T14:39:24.439000Z",
"latest_version_yanked": null,
"days_since_latest_publish": 54
},
{
"name": "@atxp/tempo",
"exists": true,
"license": "MIT",
"keywords": [],
"ecosystem": "npm",
"matches_repo": true,
"registry_url": "https://www.npmjs.com/package/@atxp/tempo",
"is_deprecated": false,
"latest_version": "0.11.11",
"repository_url": "https://github.com/atxp-dev/sdk",
"versions_count": 16,
"total_downloads": null,
"dependents_count": null,
"deprecation_note": null,
"maintainers_count": 6,
"monthly_downloads": 195,
"first_published_at": "2026-03-31T23:28:22.998000Z",
"latest_published_at": "2026-06-02T14:40:20.306000Z",
"latest_version_yanked": null,
"days_since_latest_publish": 54
},
{
"name": "@atxp/client",
"exists": true,
"license": "MIT",
"keywords": [],
"ecosystem": "npm",
"matches_repo": true,
"registry_url": "https://www.npmjs.com/package/@atxp/client",
"is_deprecated": false,
"latest_version": "0.11.12",
"repository_url": "https://github.com/atxp-dev/sdk",
"versions_count": 65,
"total_downloads": null,
"dependents_count": null,
"deprecation_note": null,
"maintainers_count": 6,
"monthly_downloads": 3485,
"first_published_at": "2025-08-18T20:36:40.385000Z",
"latest_published_at": "2026-06-02T16:04:07.853000Z",
"latest_version_yanked": null,
"days_since_latest_publish": 54
},
{
"name": "@atxp/common",
"exists": true,
"license": "MIT",
"keywords": [],
"ecosystem": "npm",
"matches_repo": true,
"registry_url": "https://www.npmjs.com/package/@atxp/common",
"is_deprecated": false,
"latest_version": "0.11.11",
"repository_url": "https://github.com/atxp-dev/sdk",
"versions_count": 65,
"total_downloads": null,
"dependents_count": null,
"deprecation_note": null,
"maintainers_count": 6,
"monthly_downloads": 3275,
"first_published_at": "2025-08-18T20:36:24.236000Z",
"latest_published_at": "2026-06-02T14:39:15.322000Z",
"latest_version_yanked": null,
"days_since_latest_publish": 54
},
{
"name": "@atxp/server",
"exists": true,
"license": "MIT",
"keywords": [],
"ecosystem": "npm",
"matches_repo": true,
"registry_url": "https://www.npmjs.com/package/@atxp/server",
"is_deprecated": false,
"latest_version": "0.11.11",
"repository_url": "https://github.com/atxp-dev/sdk",
"versions_count": 64,
"total_downloads": null,
"dependents_count": null,
"deprecation_note": null,
"maintainers_count": 6,
"monthly_downloads": 475,
"first_published_at": "2025-08-18T20:36:34Z",
"latest_published_at": "2026-06-02T14:39:34.449000Z",
"latest_version_yanked": null,
"days_since_latest_publish": 54
}
]
},
"popularity": {
"forks": 1,
"stars": 5,
"watchers": 1,
"fork_history": {
"days": [
{
"date": "2025-09-29",
"count": 1
}
],
"complete": true,
"collected": 1,
"total_forks": 1
},
"star_history": null,
"open_issues_and_prs": 5
},
"ai_readiness": {
"has_nix": false,
"example_dirs": [
"examples"
],
"has_llms_txt": false,
"has_dockerfile": false,
"has_mcp_signal": true,
"bootstrap_files": [],
"api_schema_files": [],
"has_devcontainer": false,
"typecheck_configs": [
"examples/basic/tsconfig.json",
"examples/batch-payments/tsconfig.json",
"examples/chatgpt-server/tsconfig.json",
"examples/mastra/tsconfig.json",
"examples/multichain/tsconfig.json",
"examples/server/tsconfig.json",
"examples/vercel-sdk/tsconfig.json",
"examples/x402/tsconfig.json",
"packages/atxp-base/tsconfig.json",
"packages/atxp-client/tsconfig.json",
"packages/atxp-cloudflare/tsconfig.json",
"packages/atxp-common/tsconfig.json",
"packages/atxp-express/tsconfig.json",
"packages/atxp-mpp/tsconfig.json",
"packages/atxp-polygon/tsconfig.json",
"packages/atxp-redis/tsconfig.json",
"packages/atxp-server/tsconfig.json",
"packages/atxp-solana/tsconfig.json",
"packages/atxp-sqlite/tsconfig.json",
"packages/atxp-tempo/tsconfig.json",
"packages/atxp-worldchain/tsconfig.json",
"packages/atxp-x402/tsconfig.json",
"tsconfig.json"
],
"toolchain_manifests": [],
"largest_source_bytes": 37681,
"source_files_sampled": 248,
"oversized_source_files": 0,
"agent_instruction_files": [
"CLAUDE.md"
],
"agent_instruction_max_bytes": 2447
},
"dependencies": {
"manifests": [
"package.json"
],
"advisories": {
"error": null,
"scope": null,
"source": null,
"findings": [],
"collected": false,
"malicious": [],
"truncated": false,
"by_severity": {},
"advisory_count": 0,
"affected_count": 0,
"assessed_count": 0,
"malicious_count": 0,
"assessed_package": null,
"unassessed_count": 0,
"direct_affected_count": 0
},
"ecosystems": [
"npm"
],
"dependencies": [
{
"name": "dotenv",
"manifest": "package.json",
"ecosystem": "npm",
"version_constraint": "^17.2.3"
},
{
"name": "@account-kit/infra",
"manifest": "packages/atxp-base/package.json",
"ecosystem": "npm",
"version_constraint": "^4.81.3"
},
{
"name": "@atxp/client",
"manifest": "packages/atxp-base/package.json",
"ecosystem": "npm",
"version_constraint": "0.11.10"
},
{
"name": "@atxp/common",
"manifest": "packages/atxp-base/package.json",
"ecosystem": "npm",
"version_constraint": "0.11.10"
},
{
"name": "@x402/core",
"manifest": "packages/atxp-base/package.json",
"ecosystem": "npm",
"version_constraint": "^2.9.0"
},
{
"name": "@x402/evm",
"manifest": "packages/atxp-base/package.json",
"ecosystem": "npm",
"version_constraint": "^2.9.0"
},
{
"name": "bignumber.js",
"manifest": "packages/atxp-base/package.json",
"ecosystem": "npm",
"version_constraint": "^9.3.0"
},
{
"name": "viem",
"manifest": "packages/atxp-base/package.json",
"ecosystem": "npm",
"version_constraint": "^2.34.0"
},
{
"name": "@atxp/common",
"manifest": "packages/atxp-client/package.json",
"ecosystem": "npm",
"version_constraint": "0.11.11"
},
{
"name": "@atxp/mpp",
"manifest": "packages/atxp-client/package.json",
"ecosystem": "npm",
"version_constraint": "0.11.11"
},
{
"name": "@modelcontextprotocol/sdk",
"manifest": "packages/atxp-client/package.json",
"ecosystem": "npm",
"version_constraint": "^1.15.0"
},
{
"name": "@x402/core",
"manifest": "packages/atxp-client/package.json",
"ecosystem": "npm",
"version_constraint": "^2.9.0"
},
{
"name": "@x402/evm",
"manifest": "packages/atxp-client/package.json",
"ecosystem": "npm",
"version_constraint": "^2.9.0"
},
{
"name": "bignumber.js",
"manifest": "packages/atxp-client/package.json",
"ecosystem": "npm",
"version_constraint": "^9.3.0"
},
{
"name": "oauth4webapi",
"manifest": "packages/atxp-client/package.json",
"ecosystem": "npm",
"version_constraint": "^3.8.3"
},
{
"name": "@atxp/common",
"manifest": "packages/atxp-cloudflare/package.json",
"ecosystem": "npm",
"version_constraint": "0.11.10"
},
{
"name": "@atxp/server",
"manifest": "packages/atxp-cloudflare/package.json",
"ecosystem": "npm",
"version_constraint": "0.11.10"
},
{
"name": "bignumber.js",
"manifest": "packages/atxp-common/package.json",
"ecosystem": "npm",
"version_constraint": "^9.3.0"
},
{
"name": "jose",
"manifest": "packages/atxp-common/package.json",
"ecosystem": "npm",
"version_constraint": "^6.0.11"
},
{
"name": "oauth4webapi",
"manifest": "packages/atxp-common/package.json",
"ecosystem": "npm",
"version_constraint": "^3.8.3"
},
{
"name": "tweetnacl",
"manifest": "packages/atxp-common/package.json",
"ecosystem": "npm",
"version_constraint": "^1.0.3"
},
{
"name": "tweetnacl-util",
"manifest": "packages/atxp-common/package.json",
"ecosystem": "npm",
"version_constraint": "^0.15.1"
},
{
"name": "@atxp/server",
"manifest": "packages/atxp-express/package.json",
"ecosystem": "npm",
"version_constraint": "0.11.10"
},
{
"name": "@atxp/client",
"manifest": "packages/atxp-polygon/package.json",
"ecosystem": "npm",
"version_constraint": "0.11.10"
},
{
"name": "@atxp/common",
"manifest": "packages/atxp-polygon/package.json",
"ecosystem": "npm",
"version_constraint": "0.11.10"
},
{
"name": "bignumber.js",
"manifest": "packages/atxp-polygon/package.json",
"ecosystem": "npm",
"version_constraint": "^9.3.0"
},
{
"name": "viem",
"manifest": "packages/atxp-polygon/package.json",
"ecosystem": "npm",
"version_constraint": "^2.34.0"
},
{
"name": "@atxp/common",
"manifest": "packages/atxp-redis/package.json",
"ecosystem": "npm",
"version_constraint": "0.11.10"
},
{
"name": "ioredis",
"manifest": "packages/atxp-redis/package.json",
"ecosystem": "npm",
"version_constraint": "^5.7.0"
},
{
"name": "@atxp/common",
"manifest": "packages/atxp-server/package.json",
"ecosystem": "npm",
"version_constraint": "0.11.10"
},
{
"name": "@atxp/mpp",
"manifest": "packages/atxp-server/package.json",
"ecosystem": "npm",
"version_constraint": "0.11.10"
},
{
"name": "@modelcontextprotocol/sdk",
"manifest": "packages/atxp-server/package.json",
"ecosystem": "npm",
"version_constraint": "^1.15.0"
},
{
"name": "bignumber.js",
"manifest": "packages/atxp-server/package.json",
"ecosystem": "npm",
"version_constraint": "^9.3.0"
},
{
"name": "oauth4webapi",
"manifest": "packages/atxp-server/package.json",
"ecosystem": "npm",
"version_constraint": "^3.8.3"
},
{
"name": "@atxp/client",
"manifest": "packages/atxp-solana/package.json",
"ecosystem": "npm",
"version_constraint": "0.11.10"
},
{
"name": "@atxp/common",
"manifest": "packages/atxp-solana/package.json",
"ecosystem": "npm",
"version_constraint": "0.11.10"
},
{
"name": "@solana/pay",
"manifest": "packages/atxp-solana/package.json",
"ecosystem": "npm",
"version_constraint": "^0.2.5"
},
{
"name": "@solana/web3.js",
"manifest": "packages/atxp-solana/package.json",
"ecosystem": "npm",
"version_constraint": "^1.98.1"
},
{
"name": "bignumber.js",
"manifest": "packages/atxp-solana/package.json",
"ecosystem": "npm",
"version_constraint": "^9.3.0"
},
{
"name": "bs58",
"manifest": "packages/atxp-solana/package.json",
"ecosystem": "npm",
"version_constraint": "^6.0.0"
},
{
"name": "@atxp/common",
"manifest": "packages/atxp-sqlite/package.json",
"ecosystem": "npm",
"version_constraint": "0.11.10"
},
{
"name": "better-sqlite3",
"manifest": "packages/atxp-sqlite/package.json",
"ecosystem": "npm",
"version_constraint": "^12.2.0"
},
{
"name": "@atxp/client",
"manifest": "packages/atxp-tempo/package.json",
"ecosystem": "npm",
"version_constraint": "0.11.10"
},
{
"name": "@atxp/common",
"manifest": "packages/atxp-tempo/package.json",
"ecosystem": "npm",
"version_constraint": "0.11.10"
},
{
"name": "bignumber.js",
"manifest": "packages/atxp-tempo/package.json",
"ecosystem": "npm",
"version_constraint": "^9.3.0"
},
{
"name": "viem",
"manifest": "packages/atxp-tempo/package.json",
"ecosystem": "npm",
"version_constraint": "^2.34.0"
},
{
"name": "@atxp/client",
"manifest": "packages/atxp-worldchain/package.json",
"ecosystem": "npm",
"version_constraint": "0.11.10"
},
{
"name": "@atxp/common",
"manifest": "packages/atxp-worldchain/package.json",
"ecosystem": "npm",
"version_constraint": "0.11.10"
},
{
"name": "@worldcoin/minikit-js",
"manifest": "packages/atxp-worldchain/package.json",
"ecosystem": "npm",
"version_constraint": "^1.9.6"
},
{
"name": "bignumber.js",
"manifest": "packages/atxp-worldchain/package.json",
"ecosystem": "npm",
"version_constraint": "^9.3.0"
},
{
"name": "viem",
"manifest": "packages/atxp-worldchain/package.json",
"ecosystem": "npm",
"version_constraint": "^2.34.0"
},
{
"name": "@atxp/base",
"manifest": "packages/atxp-x402/package.json",
"ecosystem": "npm",
"version_constraint": "0.11.10"
},
{
"name": "@atxp/client",
"manifest": "packages/atxp-x402/package.json",
"ecosystem": "npm",
"version_constraint": "0.11.10"
},
{
"name": "@atxp/common",
"manifest": "packages/atxp-x402/package.json",
"ecosystem": "npm",
"version_constraint": "0.11.10"
},
{
"name": "@x402/core",
"manifest": "packages/atxp-x402/package.json",
"ecosystem": "npm",
"version_constraint": "^2.9.0"
},
{
"name": "@x402/evm",
"manifest": "packages/atxp-x402/package.json",
"ecosystem": "npm",
"version_constraint": "^2.9.0"
},
{
"name": "bignumber.js",
"manifest": "packages/atxp-x402/package.json",
"ecosystem": "npm",
"version_constraint": "^9.1.2"
},
{
"name": "viem",
"manifest": "packages/atxp-x402/package.json",
"ecosystem": "npm",
"version_constraint": "^2.21.54"
}
],
"all_dependencies": {
"error": "GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository",
"source": null,
"packages": [],
"collected": false,
"truncated": false,
"total_count": null,
"direct_count": null,
"indirect_count": null
}
},
"maintainership": {
"issues": {
"open_prs": 2,
"merged_prs": 155,
"open_issues": 3,
"closed_ratio": 0.5,
"closed_issues": 3,
"closed_unmerged_prs": 21
},
"bus_factor": 2,
"bot_contributors": 0,
"top_contributors": [
{
"type": "User",
"login": "badjer",
"commits": 102,
"avatar_url": "https://avatars.githubusercontent.com/u/159024?v=4"
},
{
"type": "User",
"login": "robdimarco-atxp",
"commits": 81,
"avatar_url": "https://avatars.githubusercontent.com/u/214184701?v=4"
},
{
"type": "User",
"login": "actions-user",
"commits": 45,
"avatar_url": "https://avatars.githubusercontent.com/u/65916846?v=4"
},
{
"type": "User",
"login": "R-M-Naveen",
"commits": 8,
"avatar_url": "https://avatars.githubusercontent.com/u/243160589?v=4"
},
{
"type": "User",
"login": "emilioacc",
"commits": 5,
"avatar_url": "https://avatars.githubusercontent.com/u/240322964?v=4"
},
{
"type": "User",
"login": "napoleond",
"commits": 4,
"avatar_url": "https://avatars.githubusercontent.com/u/1054155?v=4"
},
{
"type": "User",
"login": "zachwick",
"commits": 2,
"avatar_url": "https://avatars.githubusercontent.com/u/406510?v=4"
},
{
"type": "User",
"login": "thehenrytsai",
"commits": 1,
"avatar_url": "https://avatars.githubusercontent.com/u/17891086?v=4"
},
{
"type": "User",
"login": "naveen-rm",
"commits": 1,
"avatar_url": "https://avatars.githubusercontent.com/u/236294277?v=4"
}
],
"contributors_sampled": 9,
"top_contributor_share": 0.41
},
"quality_signals": {
"has_ci": true,
"has_tests": true,
"ci_workflows": [
"github-releases-to-discord.yaml",
"package-manager-integration.yml",
"release.yaml",
"test.yml"
],
"has_docs_dir": true,
"linter_configs": [],
"has_editorconfig": false,
"has_linter_config": false,
"has_precommit_config": false
},
"security_signals": {
"lockfiles": [
"package-lock.json"
],
"scorecard": {
"checks": [
{
"name": "Binary-Artifacts",
"score": 10,
"reason": "no binaries found in the repo",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#binary-artifacts"
},
{
"name": "Branch-Protection",
"score": null,
"reason": "internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#branch-protection"
},
{
"name": "CI-Tests",
"score": 10,
"reason": "21 out of 21 merged PRs checked by a CI test -- score normalized to 10",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#ci-tests"
},
{
"name": "CII-Best-Practices",
"score": 0,
"reason": "no effort to earn an OpenSSF best practices badge detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#cii-best-practices"
},
{
"name": "Code-Review",
"score": 0,
"reason": "Found 0/30 approved changesets -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#code-review"
},
{
"name": "Contributors",
"score": 10,
"reason": "project has 4 contributing companies or organizations",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#contributors"
},
{
"name": "Dangerous-Workflow",
"score": 10,
"reason": "no dangerous workflow patterns detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dangerous-workflow"
},
{
"name": "Dependency-Update-Tool",
"score": 0,
"reason": "no update tool detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dependency-update-tool"
},
{
"name": "Fuzzing",
"score": 0,
"reason": "project is not fuzzed",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#fuzzing"
},
{
"name": "License",
"score": 10,
"reason": "license file detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#license"
},
{
"name": "Maintained",
"score": 10,
"reason": "13 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#maintained"
},
{
"name": "Packaging",
"score": 10,
"reason": "packaging workflow detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#packaging"
},
{
"name": "Pinned-Dependencies",
"score": 2,
"reason": "dependency not pinned by hash detected -- score normalized to 2",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#pinned-dependencies"
},
{
"name": "SAST",
"score": 0,
"reason": "SAST tool is not run on all commits -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#sast"
},
{
"name": "Security-Policy",
"score": 0,
"reason": "security policy file not detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#security-policy"
},
{
"name": "Signed-Releases",
"score": null,
"reason": "no releases found",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#signed-releases"
},
{
"name": "Token-Permissions",
"score": 0,
"reason": "detected GitHub workflow tokens with excessive permissions",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#token-permissions"
},
{
"name": "Vulnerabilities",
"score": 0,
"reason": "197 existing vulnerabilities detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#vulnerabilities"
}
],
"commit": "1f83d6590b9e97424b9c0c98296439d7ac292076",
"ran_at": "2026-07-27T07:16:29Z",
"aggregate_score": 4.3,
"scorecard_version": "v5.5.0"
},
"has_codeql_workflow": false,
"has_security_policy": false,
"has_dependabot_config": false
},
"contribution_flow": {
"collected": true,
"ci_last_run_at": "2026-06-30T21:10:25Z",
"oldest_open_prs": [
{
"number": 168,
"created_at": "2026-05-07T03:16:46Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 185,
"created_at": "2026-06-30T23:25:36Z",
"last_comment_at": null,
"last_comment_author": null
}
],
"last_merged_pr_at": "2026-06-30T21:04:42Z",
"ci_last_conclusion": "SUCCESS",
"oldest_open_issues": [
{
"number": 178,
"created_at": "2026-06-17T20:18:11Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 179,
"created_at": "2026-06-17T20:30:43Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 180,
"created_at": "2026-06-17T20:30:44Z",
"last_comment_at": null,
"last_comment_author": null
}
]
}
},
"config": {
"disabled_metrics": [],
"disabled_categories": [],
"disabled_components": {}
},
"source": {
"url": "https://github.com/atxp-dev/sdk",
"host": "github.com",
"name": "sdk",
"owner": "atxp-dev"
},
"metrics": {
"overall": {
"key": "overall",
"band": "moderate",
"name": "Overall health",
"note": null,
"notes": [],
"value": 61,
"inputs": {
"security": 43,
"vitality": 86,
"community": 38,
"governance": 66,
"engineering": 63
},
"components": []
},
"categories": [
{
"key": "vitality",
"band": "excellent",
"name": "Vitality",
"value": 86,
"weight": 0.22,
"metrics": [
{
"key": "development_activity",
"band": "good",
"name": "Development activity",
"note": null,
"notes": [],
"value": 76,
"inputs": {
"commits_last_year": 249,
"human_commit_share": 1,
"days_since_last_push": 24,
"active_weeks_last_year": 27
},
"components": [
{
"key": "push_recency",
"name": "Push recency",
"detail": "last push 24 days ago",
"points": 28.8,
"status": "partial",
"details": [
{
"code": "push_recency",
"params": {
"days": 24
}
}
],
"max_points": 36
},
{
"key": "commit_cadence",
"name": "Commit cadence",
"detail": "27/52 weeks with commits",
"points": 18.7,
"status": "partial",
"details": [
{
"code": "commit_cadence_weeks",
"params": {
"weeks": 27
}
}
],
"max_points": 36
},
{
"key": "commit_volume",
"name": "Commit volume",
"detail": "249 commits in the last year",
"points": 18,
"status": "met",
"details": [
{
"code": "commits_last_year",
"params": {
"count": 249
}
}
],
"max_points": 18
},
{
"key": "openssf_scorecard_maintained",
"name": "OpenSSF Scorecard: Maintained",
"detail": "13 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10",
"points": 10,
"status": "met",
"details": [],
"max_points": 10
}
]
},
{
"key": "release_discipline",
"band": "excellent",
"name": "Release discipline",
"note": "Excluded from scoring (no data or not applicable): OpenSSF Scorecard: Signed-Releases. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"openssf_scorecard_signed_releases"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 100,
"inputs": {
"releases_count": 53,
"latest_release_tag": "v0.11.12",
"releases_from_tags": false,
"days_since_latest_release": 54,
"mean_days_between_releases": 10
},
"components": [
{
"key": "ships_releases",
"name": "Ships releases",
"detail": "53 releases published",
"points": 27,
"status": "met",
"details": [
{
"code": "releases_published",
"params": {
"count": 53
}
}
],
"max_points": 27
},
{
"key": "release_recency",
"name": "Release recency",
"detail": "latest release 54 days ago",
"points": 36,
"status": "met",
"details": [
{
"code": "release_recency",
"params": {
"days": 54
}
}
],
"max_points": 36
},
{
"key": "release_cadence",
"name": "Release cadence",
"detail": "a release every ~10 days",
"points": 27,
"status": "met",
"details": [
{
"code": "release_cadence",
"params": {
"gap": 10
}
}
],
"max_points": 27
},
{
"key": "openssf_scorecard_signed_releases",
"name": "OpenSSF Scorecard: Signed-Releases",
"detail": "no releases found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 10
}
]
},
{
"key": "abandonment",
"band": "excellent",
"name": "Abandonment",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"cap": null,
"state": "maintained",
"guards": [],
"signals": [],
"red_flag": false,
"multiplier_pct": 100,
"declared_reason": null,
"unverified_reason": null,
"unanswered_open_prs": null,
"unanswered_open_issues": null,
"days_since_last_merged_pr": null,
"days_since_last_human_commit": 26,
"days_since_last_human_commit_is_floor": false
},
"components": [
{
"key": "project_is_still_maintained",
"name": "Project is still maintained",
"detail": "last human commit 26 days ago",
"points": 100,
"status": "met",
"details": [
{
"code": "abandonment_maintained",
"params": {
"days": 26
}
}
],
"max_points": 100
}
]
}
],
"description": "Is the project alive — is code being written and are releases shipping?"
},
{
"key": "community",
"band": "at_risk",
"name": "Community & Adoption",
"value": 38,
"weight": 0.18,
"metrics": [
{
"key": "popularity",
"band": "critical",
"name": "Popularity & adoption",
"note": null,
"notes": [],
"value": 10,
"inputs": {
"forks": 1,
"stars": 5,
"watchers": 1,
"growth_state": "unverified",
"growth_factor_pct": 100,
"growth_unverified_reason": "no_history"
},
"components": [
{
"key": "stars",
"name": "Stars",
"detail": "5 stars",
"points": 9.8,
"status": "partial",
"details": [
{
"code": "stars",
"params": {
"count": 5
}
}
],
"max_points": 60
},
{
"key": "forks",
"name": "Forks",
"detail": "1 forks",
"points": 0,
"status": "missed",
"details": [
{
"code": "forks",
"params": {
"count": 1
}
}
],
"max_points": 25
},
{
"key": "watchers",
"name": "Watchers",
"detail": "1 watchers",
"points": 0,
"status": "missed",
"details": [
{
"code": "watchers",
"params": {
"count": 1
}
}
],
"max_points": 15
}
]
},
{
"key": "community_health",
"band": "moderate",
"name": "Community health",
"note": null,
"notes": [],
"value": 50,
"inputs": {
"has_readme": true,
"has_license": true,
"has_contributing": false,
"has_issue_template": false,
"has_code_of_conduct": false,
"has_pull_request_template": false
},
"components": [
{
"key": "readme",
"name": "README",
"detail": null,
"points": 22.5,
"status": "met",
"details": [],
"max_points": 22.5
},
{
"key": "license",
"name": "License",
"detail": "recognized license (MIT)",
"points": 22.5,
"status": "met",
"details": [
{
"code": "license_standard",
"params": {}
},
{
"code": "license_spdx",
"params": {
"spdx": "MIT"
}
}
],
"max_points": 22.5
},
{
"key": "contributing_guide",
"name": "CONTRIBUTING guide",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 18
},
{
"key": "code_of_conduct",
"name": "Code of conduct",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 13.5
},
{
"key": "issue_template",
"name": "Issue template",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.2
},
{
"key": "pr_template",
"name": "PR template",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 6.3
}
]
},
{
"key": "ecosystem_adoption",
"band": "moderate",
"name": "Ecosystem adoption (downloads)",
"note": "Excluded from scoring (no data or not applicable): Registry dependents. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"registry_dependents"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 68,
"inputs": {
"packages": [
"@atxp/mpp",
"@atxp/base",
"@atxp/x402",
"@atxp/redis",
"@atxp/tempo",
"@atxp/client",
"@atxp/common",
"@atxp/server"
],
"dependents": null,
"ecosystems": "npm",
"total_downloads": null,
"monthly_downloads": 11410
},
"components": [
{
"key": "monthly_downloads",
"name": "Monthly downloads",
"detail": "11,410 downloads/month across npm",
"points": 54.1,
"status": "partial",
"details": [
{
"code": "downloads_monthly",
"params": {
"count": 11410,
"ecosystems": "npm"
}
}
],
"max_points": 80
},
{
"key": "registry_dependents",
"name": "Registry dependents",
"detail": "not reported by this ecosystem",
"points": 0,
"status": "excluded",
"details": [
{
"code": "not_reported_by_this_ecosystem",
"params": {}
}
],
"max_points": 20
}
]
}
],
"description": "Does the project have users, downloads, attention, and a welcoming setup for contributors?"
},
{
"key": "governance",
"band": "moderate",
"name": "Sustainability & Governance",
"value": 66,
"weight": 0.24,
"metrics": [
{
"key": "maintainer_resilience",
"band": "moderate",
"name": "Maintainer resilience (bus factor)",
"note": null,
"notes": [],
"value": 61,
"inputs": {
"bus_factor": 2,
"contributors_sampled": 9,
"top_contributor_share": 0.41
},
"components": [
{
"key": "bus_factor",
"name": "Bus factor",
"detail": "2 contributor(s) cover half of all commits",
"points": 25.2,
"status": "partial",
"details": [
{
"code": "bus_factor",
"params": {
"count": 2
}
}
],
"max_points": 54
},
{
"key": "commit_distribution",
"name": "Commit distribution",
"detail": "top contributor authored 41% of commits",
"points": 13.3,
"status": "partial",
"details": [
{
"code": "top_contributor_share",
"params": {
"share": 41
}
}
],
"max_points": 22.5
},
{
"key": "contributor_breadth",
"name": "Contributor breadth",
"detail": "9 contributors",
"points": 12.2,
"status": "partial",
"details": [
{
"code": "contributors_sampled",
"params": {
"count": 9
}
}
],
"max_points": 13.5
},
{
"key": "openssf_scorecard_contributors",
"name": "OpenSSF Scorecard: Contributors",
"detail": "project has 4 contributing companies or organizations",
"points": 10,
"status": "met",
"details": [],
"max_points": 10
}
]
},
{
"key": "responsiveness",
"band": "moderate",
"name": "Issue & PR responsiveness",
"note": null,
"notes": [],
"value": 57,
"inputs": {
"merged_prs": 155,
"open_issues": 3,
"closed_issues": 3,
"issue_closed_ratio": 0.5,
"closed_unmerged_prs": 21
},
"components": [
{
"key": "issue_resolution",
"name": "Issue resolution",
"detail": "50% of issues closed",
"points": 23.4,
"status": "partial",
"details": [
{
"code": "issues_closed_share",
"params": {
"share": 50
}
}
],
"max_points": 46.75
},
{
"key": "pr_acceptance",
"name": "PR acceptance",
"detail": "155/176 decided PRs merged",
"points": 33.7,
"status": "partial",
"details": [
{
"code": "decided_prs_merged",
"params": {
"merged": 155,
"decided": 176
}
}
],
"max_points": 38.25
},
{
"key": "openssf_scorecard_code_review",
"name": "OpenSSF Scorecard: Code-Review",
"detail": "Found 0/30 approved changesets -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
}
]
},
{
"key": "stewardship",
"band": "moderate",
"name": "Ownership & stewardship",
"note": null,
"notes": [],
"value": 53,
"inputs": {
"followers": 49,
"owner_type": "Organization",
"is_verified": null,
"owner_login": "atxp-dev",
"public_repos": 17,
"account_age_days": 346
},
"components": [
{
"key": "ownership_backing",
"name": "Ownership backing",
"detail": "organization-owned",
"points": 30,
"status": "met",
"details": [
{
"code": "owner_organization",
"params": {}
}
],
"max_points": 30
},
{
"key": "verified_domain",
"name": "Verified domain",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 20
},
{
"key": "owner_reach",
"name": "Owner reach",
"detail": "49 followers of atxp-dev",
"points": 12.2,
"status": "partial",
"details": [
{
"code": "owner_followers",
"params": {
"count": 49,
"login": "atxp-dev"
}
}
],
"max_points": 25
},
{
"key": "track_record",
"name": "Track record",
"detail": "17 public repos, account ~0 yr old",
"points": 11,
"status": "partial",
"details": [
{
"code": "public_repos",
"params": {
"count": 17
}
},
{
"code": "account_age_years",
"params": {
"years": 0
}
}
],
"max_points": 25
}
]
},
{
"key": "package_maintenance",
"band": "excellent",
"name": "Package maintenance",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"packages": [
"@atxp/mpp",
"@atxp/base",
"@atxp/x402",
"@atxp/redis",
"@atxp/tempo",
"@atxp/client",
"@atxp/common",
"@atxp/server"
],
"ecosystems": "npm",
"any_deprecated": false,
"min_days_since_publish": 54
},
"components": [
{
"key": "published_resolvable",
"name": "Published & resolvable",
"detail": "8 package(s) on npm",
"points": 25,
"status": "met",
"details": [
{
"code": "packages_published",
"params": {
"count": 8,
"ecosystems": "npm"
}
}
],
"max_points": 25
},
{
"key": "publish_recency",
"name": "Publish recency",
"detail": "latest publish 54 days ago",
"points": 35,
"status": "met",
"details": [
{
"code": "publish_recency",
"params": {
"days": 54
}
}
],
"max_points": 35
},
{
"key": "version_history",
"name": "Version history",
"detail": "65 published versions",
"points": 20,
"status": "met",
"details": [
{
"code": "published_versions",
"params": {
"count": 65
}
}
],
"max_points": 20
},
{
"key": "not_deprecated",
"name": "Not deprecated",
"detail": "active, not deprecated or yanked",
"points": 20,
"status": "met",
"details": [
{
"code": "package_not_deprecated",
"params": {}
}
],
"max_points": 20
}
]
}
],
"description": "Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?"
},
{
"key": "engineering",
"band": "moderate",
"name": "Engineering Quality",
"value": 63,
"weight": 0.2,
"metrics": [
{
"key": "engineering_practices",
"band": "moderate",
"name": "Engineering practices",
"note": null,
"notes": [],
"value": 68,
"inputs": {
"has_ci": true,
"has_tests": true,
"has_editorconfig": false,
"has_linter_config": false,
"has_precommit_config": false
},
"components": [
{
"key": "ci_workflows",
"name": "CI workflows",
"detail": "4 workflow(s)",
"points": 24,
"status": "met",
"details": [
{
"code": "ci_workflows",
"params": {
"count": 4
}
}
],
"max_points": 24
},
{
"key": "tests_present",
"name": "Tests present",
"detail": null,
"points": 24,
"status": "met",
"details": [],
"max_points": 24
},
{
"key": "linter_config",
"name": "Linter config",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 16
},
{
"key": "pre_commit_hooks",
"name": "Pre-commit hooks",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 9.6
},
{
"key": "editorconfig",
"name": ".editorconfig",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 6.4
},
{
"key": "openssf_scorecard_ci_tests",
"name": "OpenSSF Scorecard: CI-Tests",
"detail": "21 out of 21 merged PRs checked by a CI test -- score normalized to 10",
"points": 20,
"status": "met",
"details": [],
"max_points": 20
}
]
},
{
"key": "documentation",
"band": "moderate",
"name": "Documentation",
"note": null,
"notes": [],
"value": 55,
"inputs": {
"topics": [],
"has_wiki": false,
"homepage": null,
"has_readme": true,
"has_docs_dir": true,
"has_description": false
},
"components": [
{
"key": "readme",
"name": "README",
"detail": null,
"points": 30,
"status": "met",
"details": [],
"max_points": 30
},
{
"key": "documentation_directory",
"name": "Documentation directory",
"detail": null,
"points": 25,
"status": "met",
"details": [],
"max_points": 25
},
{
"key": "documentation_homepage_site",
"name": "Documentation / homepage site",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
},
{
"key": "repository_description",
"name": "Repository description",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
},
{
"key": "topics",
"name": "Topics",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
},
{
"key": "wiki",
"name": "Wiki",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
}
]
}
],
"description": "Are baseline engineering and documentation practices in place?"
},
{
"key": "security",
"band": "at_risk",
"name": "Security",
"value": 43,
"weight": 0.16,
"metrics": [
{
"key": "security_posture",
"band": "at_risk",
"name": "Security posture",
"note": "Excluded from scoring (no data or not applicable): Branch-Protection, Signed-Releases. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"branch_protection",
"signed_releases"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 43,
"inputs": {
"source": "openssf_scorecard",
"checks_evaluated": 16,
"scorecard_version": "v5.5.0",
"checks_inconclusive": 2,
"scorecard_aggregate": 4.3
},
"components": [
{
"key": "binary_artifacts",
"name": "Binary-Artifacts",
"detail": "no binaries found in the repo",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "branch_protection",
"name": "Branch-Protection",
"detail": "internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 7.5
},
{
"key": "ci_tests",
"name": "CI-Tests",
"detail": "21 out of 21 merged PRs checked by a CI test -- score normalized to 10",
"points": 2.5,
"status": "met",
"details": [],
"max_points": 2.5
},
{
"key": "cii_best_practices",
"name": "CII-Best-Practices",
"detail": "no effort to earn an OpenSSF best practices badge detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 2.5
},
{
"key": "code_review",
"name": "Code-Review",
"detail": "Found 0/30 approved changesets -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "contributors",
"name": "Contributors",
"detail": "project has 4 contributing companies or organizations",
"points": 2.5,
"status": "met",
"details": [],
"max_points": 2.5
},
{
"key": "dangerous_workflow",
"name": "Dangerous-Workflow",
"detail": "no dangerous workflow patterns detected",
"points": 10,
"status": "met",
"details": [],
"max_points": 10
},
{
"key": "dependency_update_tool",
"name": "Dependency-Update-Tool",
"detail": "no update tool detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "fuzzing",
"name": "Fuzzing",
"detail": "project is not fuzzed",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "license",
"name": "License",
"detail": "license file detected",
"points": 2.5,
"status": "met",
"details": [],
"max_points": 2.5
},
{
"key": "maintained",
"name": "Maintained",
"detail": "13 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "packaging",
"name": "Packaging",
"detail": "packaging workflow detected",
"points": 5,
"status": "met",
"details": [],
"max_points": 5
},
{
"key": "pinned_dependencies",
"name": "Pinned-Dependencies",
"detail": "dependency not pinned by hash detected -- score normalized to 2",
"points": 1,
"status": "partial",
"details": [],
"max_points": 5
},
{
"key": "sast",
"name": "SAST",
"detail": "SAST tool is not run on all commits -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "security_policy",
"name": "Security-Policy",
"detail": "security policy file not detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "signed_releases",
"name": "Signed-Releases",
"detail": "no releases found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 7.5
},
{
"key": "token_permissions",
"name": "Token-Permissions",
"detail": "detected GitHub workflow tokens with excessive permissions",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "vulnerabilities",
"name": "Vulnerabilities",
"detail": "197 existing vulnerabilities detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
}
]
},
{
"key": "high_risk_jurisdiction_exposure",
"band": "excellent",
"name": "High-Risk Jurisdiction Exposure",
"note": "Only high-confidence self-published location evidence affects this multiplier. Ambiguous matches are review-only; country evidence is not proof of nationality, citizenship, legal registration, malicious intent, or sanctions status.",
"notes": [
{
"code": "jurisdiction_evidence_limits",
"params": {}
}
],
"value": 100,
"inputs": {
"meaning": "self-published location evidence; not nationality or citizenship",
"red_flag": false,
"exposures": [],
"policy_countries": [
"Russia",
"Iran",
"North Korea"
],
"review_only_matches": 0,
"assessed_self_published_locations": 3
},
"components": [
{
"key": "policy_exposure_multiplier",
"name": "Policy exposure multiplier",
"detail": "no confirmed policy-scope location match",
"points": 100,
"status": "met",
"details": [
{
"code": "jurisdiction_no_match",
"params": {}
}
],
"max_points": 100
}
]
}
],
"description": "Are visible security and supply-chain practices strong, with no malicious dependency and no unresolved high-risk jurisdiction exposure?"
},
{
"key": "ai_readiness",
"band": "good",
"name": "AI Readiness",
"value": 71,
"weight": 0,
"metrics": [
{
"key": "ai_agent_context",
"band": "good",
"name": "Agent context & guidance",
"note": null,
"notes": [],
"value": 83,
"inputs": {
"has_llms_txt": false,
"legible_history_share": 0.71,
"agent_instruction_files": [
"CLAUDE.md"
],
"agent_instruction_max_bytes": 2447
},
"components": [
{
"key": "agent_instructions",
"name": "Agent instructions",
"detail": "CLAUDE.md",
"points": 45,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "CLAUDE.md"
}
}
],
"max_points": 45
},
{
"key": "machine_readable_docs_llms_txt",
"name": "Machine-readable docs (llms.txt)",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
},
{
"key": "legible_commit_history",
"name": "Legible commit history",
"detail": "71 of 100 human commits state their intent (structured subject or explanatory body)",
"points": 37.9,
"status": "partial",
"details": [
{
"code": "legible_history",
"params": {
"legible": 71,
"sampled": 100
}
}
],
"max_points": 40
}
]
},
{
"key": "ai_verify_loop",
"band": "moderate",
"name": "Verify loop (build / test / typecheck)",
"note": null,
"notes": [],
"value": 55,
"inputs": {
"has_nix": false,
"has_tests": true,
"lockfiles": [
"package-lock.json"
],
"has_dockerfile": false,
"typed_language": true,
"bootstrap_files": [],
"has_devcontainer": false,
"has_linter_config": false,
"typecheck_configs": [
"examples/basic/tsconfig.json",
"examples/batch-payments/tsconfig.json",
"examples/chatgpt-server/tsconfig.json",
"examples/mastra/tsconfig.json",
"examples/multichain/tsconfig.json",
"examples/server/tsconfig.json",
"examples/vercel-sdk/tsconfig.json",
"examples/x402/tsconfig.json",
"packages/atxp-base/tsconfig.json",
"packages/atxp-client/tsconfig.json",
"packages/atxp-cloudflare/tsconfig.json",
"packages/atxp-common/tsconfig.json",
"packages/atxp-express/tsconfig.json",
"packages/atxp-mpp/tsconfig.json",
"packages/atxp-polygon/tsconfig.json",
"packages/atxp-redis/tsconfig.json",
"packages/atxp-server/tsconfig.json",
"packages/atxp-solana/tsconfig.json",
"packages/atxp-sqlite/tsconfig.json",
"packages/atxp-tempo/tsconfig.json",
"packages/atxp-worldchain/tsconfig.json",
"packages/atxp-x402/tsconfig.json",
"tsconfig.json"
],
"agent_commit_share": 0.54,
"toolchain_manifests": [],
"dependency_bot_commit_share": 0
},
"components": [
{
"key": "one_command_bootstrap",
"name": "One-command bootstrap",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 18
},
{
"key": "automated_tests",
"name": "Automated tests",
"detail": null,
"points": 22,
"status": "met",
"details": [],
"max_points": 22
},
{
"key": "lint_format_config",
"name": "Lint / format config",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 11
},
{
"key": "static_type_checking",
"name": "Static type checking",
"detail": "examples/basic/tsconfig.json, examples/batch-payments/tsconfig.json, examples/chatgpt-server/tsconfig.json, examples/mastra/tsconfig.json, examples/multichain/tsconfig.json, examples/server/tsconfig.json, examples/vercel-sdk/tsconfig.json, examples/x402/tsconfig.json, packages/atxp-base/tsconfig.json, packages/atxp-client/tsconfig.json, packages/atxp-cloudflare/tsconfig.json, packages/atxp-common/tsconfig.json, packages/atxp-express/tsconfig.json, packages/atxp-mpp/tsconfig.json, packages/atxp-polygon/tsconfig.json, packages/atxp-redis/tsconfig.json, packages/atxp-server/tsconfig.json, packages/atxp-solana/tsconfig.json, packages/atxp-sqlite/tsconfig.json, packages/atxp-tempo/tsconfig.json, packages/atxp-worldchain/tsconfig.json, packages/atxp-x402/tsconfig.json, tsconfig.json",
"points": 11,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "examples/basic/tsconfig.json, examples/batch-payments/tsconfig.json, examples/chatgpt-server/tsconfig.json, examples/mastra/tsconfig.json, examples/multichain/tsconfig.json, examples/server/tsconfig.json, examples/vercel-sdk/tsconfig.json, examples/x402/tsconfig.json, packages/atxp-base/tsconfig.json, packages/atxp-client/tsconfig.json, packages/atxp-cloudflare/tsconfig.json, packages/atxp-common/tsconfig.json, packages/atxp-express/tsconfig.json, packages/atxp-mpp/tsconfig.json, packages/atxp-polygon/tsconfig.json, packages/atxp-redis/tsconfig.json, packages/atxp-server/tsconfig.json, packages/atxp-solana/tsconfig.json, packages/atxp-sqlite/tsconfig.json, packages/atxp-tempo/tsconfig.json, packages/atxp-worldchain/tsconfig.json, packages/atxp-x402/tsconfig.json, tsconfig.json"
}
}
],
"max_points": 11
},
{
"key": "reproducible_environment",
"name": "Reproducible environment",
"detail": "lockfile",
"points": 10,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "lockfile"
}
}
],
"max_points": 10
},
{
"key": "demonstrated_agent_practice",
"name": "Demonstrated agent practice",
"detail": "54 of the last 100 commits agent-authored or agent-credited",
"points": 10,
"status": "met",
"details": [
{
"code": "agent_authored_commits",
"params": {
"count": 54,
"sampled": 100
}
}
],
"max_points": 10
},
{
"key": "automated_maintenance",
"name": "Automated maintenance",
"detail": "no automated dependency updates observed",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_dependency_automation",
"params": {}
}
],
"max_points": 8
},
{
"key": "openssf_scorecard_pinned_dependencies",
"name": "OpenSSF Scorecard: Pinned-Dependencies",
"detail": "dependency not pinned by hash detected -- score normalized to 2",
"points": 2,
"status": "partial",
"details": [],
"max_points": 10
}
]
},
{
"key": "ai_code_legibility",
"band": "excellent",
"name": "Code legibility for models",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"primary_language": "TypeScript",
"largest_source_bytes": 37681,
"source_files_sampled": 248,
"oversized_source_files": 0
},
"components": [
{
"key": "type_checkable_code",
"name": "Type-checkable code",
"detail": "TypeScript (statically typed)",
"points": 45,
"status": "met",
"details": [
{
"code": "statically_typed_language",
"params": {
"language": "TypeScript"
}
}
],
"max_points": 45
},
{
"key": "manageable_file_sizes",
"name": "Manageable file sizes",
"detail": "0/248 source files over 60KB",
"points": 55,
"status": "met",
"details": [
{
"code": "oversized_source_files",
"params": {
"kb": 60,
"sampled": 248,
"oversized": 0
}
}
],
"max_points": 55
}
]
},
{
"key": "ai_interfaces",
"band": "moderate",
"name": "Machine-readable interfaces",
"note": null,
"notes": [],
"value": 60,
"inputs": {
"example_dirs": [
"examples"
],
"has_mcp_signal": true,
"api_schema_files": []
},
"components": [
{
"key": "api_schema_openapi_graphql_proto",
"name": "API schema (OpenAPI/GraphQL/proto)",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 40
},
{
"key": "mcp_server",
"name": "MCP server",
"detail": null,
"points": 20,
"status": "met",
"details": [],
"max_points": 20
},
{
"key": "runnable_examples",
"name": "Runnable examples",
"detail": "examples",
"points": 40,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "examples"
}
}
],
"max_points": 40
}
]
}
],
"description": "How well is the repo equipped to be developed and maintained with AI coding agents? An independent, experimental badge — weight 0.0, so it is surfaced on its own and does not affect the overall health score."
}
],
"metrics_version": "1.13.0"
},
"warnings": [
"Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token",
"Could not fetch npm package '@atxp/atxp-monorepo' from its registry",
"GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository"
],
"report_type": "repository",
"generated_at": "2026-07-27T07:16:50.338677Z",
"schema_version": "0.27.0",
"badge_url": "https://raw.githubusercontent.com/inspect-software/badges/main/v1/a/atxp-dev/sdk.svg",
"full_name": "atxp-dev/sdk",
"license_state": "standard",
"license_spdx": "MIT"
}