autoguru-au / octane

来自 GitHub 依赖图的完整解析依赖集合：110 个直接依赖与 23 个间接（传递）软件包。仓库提交锁文件时，传递闭包才是完整的。

安装 npm:gdu@13.23.0 会引入 1,328 个包（直接与传递）：其中 25 个存在已知公告，4 个为直接依赖。

公告表示依赖图中记录的版本落入某条公告的受影响范围。可达性未经分析，且依赖图包含开发与测试的版本固定——某项发现可能只涉及工具链而非交付的软件。

{
  "data": {
    "repo": {
      "topics": [
        "monorepo",
        "lerna",
        "react",
        "jest",
        "babel",
        "typescript",
        "tooling"
      ],
      "is_fork": false,
      "size_kb": 41597,
      "has_wiki": false,
      "homepage": null,
      "languages": {
        "Handlebars": 533,
        "JavaScript": 37476,
        "TypeScript": 319881
      },
      "pushed_at": "2026-07-20T04:21:32Z",
      "created_at": "2019-02-28T00:34:05Z",
      "owner_type": "Organization",
      "updated_at": "2026-07-20T04:21:35Z",
      "description": "A monorepo house for AutoGuru's peripheral TypeScript packages and libraries 😅",
      "is_archived": false,
      "is_disabled": false,
      "license_spdx": "MIT",
      "default_branch": "main",
      "license_spdx_raw": "MIT",
      "primary_language": "TypeScript",
      "significant_languages": [
        "TypeScript",
        "JavaScript"
      ]
    },
    "owner": {
      "blog": "https://www.autoguru.com.au/",
      "name": "AutoGuru",
      "type": "Organization",
      "login": "autoguru-au",
      "company": null,
      "location": "Gold Coast, Australia",
      "followers": 7,
      "avatar_url": "https://avatars.githubusercontent.com/u/47797810?v=4",
      "created_at": "2019-02-19T22:04:23Z",
      "is_verified": null,
      "public_repos": 9,
      "account_age_days": 2713
    },
    "license": {
      "state": "standard",
      "spdx_id": "MIT",
      "raw_spdx": "MIT",
      "file_present": true,
      "scorecard_found": true,
      "profile_has_license": true
    },
    "activity": {
      "releases": [
        {
          "tag": "@autoguru/eslint-plugin@2.0.1",
          "kind": "other",
          "published_at": "2026-03-19T02:42:30Z"
        },
        {
          "tag": "browserslist-config-autoguru@2.5.3",
          "kind": "other",
          "published_at": "2026-03-19T02:42:29Z"
        },
        {
          "tag": "gdu@13.19.0",
          "kind": "other",
          "published_at": "2026-03-19T02:42:27Z"
        },
        {
          "tag": "gdu@13.18.1",
          "kind": "other",
          "published_at": "2026-03-03T05:28:13Z"
        },
        {
          "tag": "gdu@13.18.0",
          "kind": "other",
          "published_at": "2026-02-26T19:13:49Z"
        },
        {
          "tag": "gdu@13.17.2",
          "kind": "other",
          "published_at": "2026-02-26T06:56:28Z"
        },
        {
          "tag": "gdu@13.17.1",
          "kind": "other",
          "published_at": "2026-02-26T04:02:15Z"
        },
        {
          "tag": "gdu@13.17.0",
          "kind": "other",
          "published_at": "2026-02-26T01:34:52Z"
        },
        {
          "tag": "gdu@13.16.2",
          "kind": "other",
          "published_at": "2026-02-25T19:13:37Z"
        },
        {
          "tag": "gdu@13.16.1",
          "kind": "other",
          "published_at": "2026-02-25T08:29:57Z"
        },
        {
          "tag": "gdu@13.16.0",
          "kind": "other",
          "published_at": "2026-02-25T04:57:18Z"
        },
        {
          "tag": "gdu@13.15.0",
          "kind": "other",
          "published_at": "2026-02-24T21:33:00Z"
        },
        {
          "tag": "gdu@13.14.1",
          "kind": "other",
          "published_at": "2026-02-24T09:57:36Z"
        },
        {
          "tag": "gdu@13.14.0",
          "kind": "other",
          "published_at": "2026-02-24T08:23:26Z"
        },
        {
          "tag": "gdu@13.13.0",
          "kind": "other",
          "published_at": "2026-02-23T11:16:42Z"
        },
        {
          "tag": "gdu@13.12.2",
          "kind": "other",
          "published_at": "2026-02-09T20:07:47Z"
        },
        {
          "tag": "gdu@13.12.1",
          "kind": "other",
          "published_at": "2026-01-23T04:46:35Z"
        },
        {
          "tag": "gdu@13.12.0",
          "kind": "other",
          "published_at": "2026-01-12T00:52:04Z"
        },
        {
          "tag": "gdu@13.11.0",
          "kind": "other",
          "published_at": "2026-01-02T22:23:55Z"
        },
        {
          "tag": "gdu@13.10.1",
          "kind": "other",
          "published_at": "2025-12-24T00:52:02Z"
        },
        {
          "tag": "gdu@13.10.0",
          "kind": "other",
          "published_at": "2025-12-16T06:15:57Z"
        },
        {
          "tag": "gdu@13.9.3",
          "kind": "other",
          "published_at": "2025-11-26T02:07:06Z"
        },
        {
          "tag": "gdu@13.9.2",
          "kind": "other",
          "published_at": "2025-11-13T23:22:50Z"
        },
        {
          "tag": "gdu@13.9.1",
          "kind": "other",
          "published_at": "2025-10-13T05:52:45Z"
        },
        {
          "tag": "gdu@13.9.0",
          "kind": "other",
          "published_at": "2025-10-13T03:38:43Z"
        },
        {
          "tag": "gdu@13.8.0",
          "kind": "other",
          "published_at": "2025-10-13T00:19:41Z"
        },
        {
          "tag": "gdu@13.7.0",
          "kind": "other",
          "published_at": "2025-10-08T23:18:25Z"
        },
        {
          "tag": "gdu@13.6.1",
          "kind": "other",
          "published_at": "2025-09-24T01:47:52Z"
        },
        {
          "tag": "browserslist-config-autoguru@2.5.2",
          "kind": "other",
          "published_at": "2025-09-23T23:53:18Z"
        },
        {
          "tag": "gdu@13.6.0",
          "kind": "other",
          "published_at": "2025-09-23T23:53:18Z"
        },
        {
          "tag": "gdu@13.5.0",
          "kind": "other",
          "published_at": "2025-09-10T06:00:35Z"
        },
        {
          "tag": "gdu@13.4.0",
          "kind": "other",
          "published_at": "2025-09-04T22:17:18Z"
        },
        {
          "tag": "gdu@13.3.0",
          "kind": "other",
          "published_at": "2025-09-03T05:23:00Z"
        },
        {
          "tag": "gdu@13.2.0",
          "kind": "other",
          "published_at": "2025-09-03T02:08:19Z"
        },
        {
          "tag": "browserslist-config-autoguru@2.5.1",
          "kind": "other",
          "published_at": "2025-08-26T00:56:53Z"
        },
        {
          "tag": "gdu@13.1.1",
          "kind": "other",
          "published_at": "2025-07-28T22:58:52Z"
        },
        {
          "tag": "gdu@13.1.0",
          "kind": "other",
          "published_at": "2025-07-21T03:43:22Z"
        },
        {
          "tag": "browserslist-config-autoguru@2.5.0",
          "kind": "other",
          "published_at": "2025-07-08T04:46:55Z"
        },
        {
          "tag": "gdu@13.0.0",
          "kind": "other",
          "published_at": "2025-07-08T04:46:55Z"
        },
        {
          "tag": "create-guru@13.0.0",
          "kind": "other",
          "published_at": "2025-07-08T04:46:55Z"
        },
        {
          "tag": "browserslist-config-autoguru@2.4.5",
          "kind": "other",
          "published_at": "2025-07-08T01:42:35Z"
        },
        {
          "tag": "gdu@12.6.6",
          "kind": "other",
          "published_at": "2025-06-10T22:58:42Z"
        },
        {
          "tag": "gdu@12.6.5",
          "kind": "other",
          "published_at": "2025-06-10T01:04:15Z"
        },
        {
          "tag": "gdu@12.6.4",
          "kind": "other",
          "published_at": "2025-06-09T05:35:46Z"
        },
        {
          "tag": "gdu@12.6.3",
          "kind": "other",
          "published_at": "2025-04-08T02:32:42Z"
        },
        {
          "tag": "gdu@12.6.1",
          "kind": "other",
          "published_at": "2025-03-10T06:31:22Z"
        },
        {
          "tag": "gdu@12.6.0",
          "kind": "other",
          "published_at": "2025-03-05T05:21:52Z"
        },
        {
          "tag": "gdu@12.5.4",
          "kind": "other",
          "published_at": "2025-03-04T06:49:15Z"
        },
        {
          "tag": "gdu@12.5.3",
          "kind": "other",
          "published_at": "2025-03-04T05:17:10Z"
        },
        {
          "tag": "gdu@12.5.2",
          "kind": "other",
          "published_at": "2025-03-04T04:51:24Z"
        },
        {
          "tag": "gdu@12.5.1",
          "kind": "other",
          "published_at": "2025-03-03T04:29:56Z"
        },
        {
          "tag": "@autoguru/babel-preset@3.2.0",
          "kind": "other",
          "published_at": "2025-02-28T05:45:53Z"
        },
        {
          "tag": "gdu@12.5.0",
          "kind": "other",
          "published_at": "2025-02-28T05:45:53Z"
        },
        {
          "tag": "@autoguru/babel-preset@3.1.4",
          "kind": "other",
          "published_at": "2025-02-26T06:28:04Z"
        },
        {
          "tag": "gdu@12.4.1",
          "kind": "other",
          "published_at": "2025-02-26T06:28:04Z"
        },
        {
          "tag": "browserslist-config-autoguru@2.4.4",
          "kind": "other",
          "published_at": "2025-02-26T06:28:04Z"
        },
        {
          "tag": "@autoguru/utilities@1.3.3",
          "kind": "other",
          "published_at": "2025-02-26T06:28:04Z"
        },
        {
          "tag": "browserslist-config-autoguru@2.4.3",
          "kind": "other",
          "published_at": "2025-02-24T06:09:48Z"
        },
        {
          "tag": "@autoguru/utilities@1.3.2",
          "kind": "other",
          "published_at": "2025-02-24T06:09:48Z"
        },
        {
          "tag": "gdu@12.4.0",
          "kind": "other",
          "published_at": "2025-02-24T06:09:48Z"
        },
        {
          "tag": "@autoguru/babel-preset@3.1.3",
          "kind": "other",
          "published_at": "2025-02-24T06:09:48Z"
        },
        {
          "tag": "@autoguru/tsconfig@1.3.1",
          "kind": "other",
          "published_at": "2025-02-24T02:10:52Z"
        },
        {
          "tag": "browserslist-config-autoguru@2.4.2",
          "kind": "other",
          "published_at": "2025-02-24T02:10:52Z"
        },
        {
          "tag": "@autoguru/jest-preset@3.0.1",
          "kind": "other",
          "published_at": "2025-02-24T02:10:52Z"
        },
        {
          "tag": "@autoguru/utilities@1.3.1",
          "kind": "other",
          "published_at": "2025-02-24T02:10:52Z"
        },
        {
          "tag": "@autoguru/babel-preset@3.1.2",
          "kind": "other",
          "published_at": "2025-02-24T02:10:52Z"
        },
        {
          "tag": "gdu@12.3.3",
          "kind": "other",
          "published_at": "2025-02-24T02:10:52Z"
        },
        {
          "tag": "renovate-config-autoguru@1.1.1",
          "kind": "other",
          "published_at": "2025-02-24T02:10:52Z"
        },
        {
          "tag": "create-guru@12.3.3",
          "kind": "other",
          "published_at": "2025-02-24T02:10:52Z"
        },
        {
          "tag": "@autoguru/eslint-plugin@2.0.0",
          "kind": "other",
          "published_at": "2025-02-20T23:46:19Z"
        },
        {
          "tag": "gdu@12.3.2",
          "kind": "other",
          "published_at": "2025-02-20T04:17:06Z"
        },
        {
          "tag": "@autoguru/babel-preset@3.1.1",
          "kind": "other",
          "published_at": "2025-02-20T04:17:06Z"
        },
        {
          "tag": "gdu@12.3.1",
          "kind": "other",
          "published_at": "2025-02-19T06:29:41Z"
        },
        {
          "tag": "gdu@12.3.0",
          "kind": "other",
          "published_at": "2025-02-19T01:59:20Z"
        },
        {
          "tag": "gdu@12.2.0",
          "kind": "other",
          "published_at": "2025-02-18T05:40:34Z"
        },
        {
          "tag": "@autoguru/tsconfig@1.3.0",
          "kind": "other",
          "published_at": "2025-02-18T05:40:34Z"
        },
        {
          "tag": "@autoguru/utilities@1.3.0",
          "kind": "other",
          "published_at": "2025-02-18T05:40:34Z"
        },
        {
          "tag": "@autoguru/babel-preset@3.1.0",
          "kind": "other",
          "published_at": "2025-02-18T05:40:34Z"
        },
        {
          "tag": "@autoguru/tsconfig@1.2.1",
          "kind": "other",
          "published_at": "2025-02-16T23:01:45Z"
        },
        {
          "tag": "gdu@12.1.1",
          "kind": "other",
          "published_at": "2025-02-16T23:01:45Z"
        },
        {
          "tag": "browserslist-config-autoguru@2.4.1",
          "kind": "other",
          "published_at": "2025-02-16T23:01:45Z"
        },
        {
          "tag": "gdu@12.1.0",
          "kind": "other",
          "published_at": "2025-01-29T00:54:41Z"
        },
        {
          "tag": "create-guru@12.0.0",
          "kind": "other",
          "published_at": "2025-01-27T22:16:16Z"
        },
        {
          "tag": "gdu@12.0.0",
          "kind": "other",
          "published_at": "2025-01-27T22:16:16Z"
        },
        {
          "tag": "gdu@11.7.0",
          "kind": "other",
          "published_at": "2025-01-21T03:02:28Z"
        },
        {
          "tag": "gdu@11.6.1",
          "kind": "other",
          "published_at": "2025-01-21T00:32:29Z"
        },
        {
          "tag": "gdu@11.6.0",
          "kind": "other",
          "published_at": "2025-01-17T00:21:00Z"
        },
        {
          "tag": "gdu@11.5.0",
          "kind": "other",
          "published_at": "2024-12-02T05:28:44Z"
        },
        {
          "tag": "@autoguru/utilities@1.2.2",
          "kind": "other",
          "published_at": "2024-12-02T04:08:46Z"
        },
        {
          "tag": "gdu@11.4.0",
          "kind": "other",
          "published_at": "2024-11-11T01:43:39Z"
        },
        {
          "tag": "gdu@11.3.0",
          "kind": "other",
          "published_at": "2024-10-29T22:51:35Z"
        },
        {
          "tag": "gdu@11.2.0",
          "kind": "other",
          "published_at": "2024-10-28T01:23:21Z"
        },
        {
          "tag": "@autoguru/utilities@1.2.1",
          "kind": "other",
          "published_at": "2024-10-01T04:00:29Z"
        },
        {
          "tag": "gdu@11.1.0",
          "kind": "other",
          "published_at": "2024-10-01T04:00:29Z"
        },
        {
          "tag": "gdu@11.0.1",
          "kind": "other",
          "published_at": "2024-09-11T05:15:21Z"
        },
        {
          "tag": "gdu@11.0.0",
          "kind": "other",
          "published_at": "2024-07-16T07:34:53Z"
        },
        {
          "tag": "create-guru@11.0.0",
          "kind": "other",
          "published_at": "2024-07-16T07:34:53Z"
        },
        {
          "tag": "gdu@10.0.2",
          "kind": "other",
          "published_at": "2024-06-12T02:33:15Z"
        },
        {
          "tag": "gdu@10.0.1",
          "kind": "other",
          "published_at": "2024-06-11T00:26:06Z"
        },
        {
          "tag": "@autoguru/babel-preset@3.0.0",
          "kind": "other",
          "published_at": "2024-05-30T04:52:39Z"
        }
      ],
      "recent_commits": [
        {
          "oid": "177f067962133230e849b878c06bdb94f0633887",
          "body": "Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "Version Packages (#448)",
          "author_name": "github-actions[bot]",
          "author_login": "github-actions[bot]",
          "committed_at": "2026-07-20T04:21:30Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "f989ed51470cc9295a4138136e601cd80fdf71a3",
          "body": "… clobbering each other (#447)\n\n* fix(AG-20532): namespace injected env per app so co-mounted MFEs stop clobbering each other\n\nCo-mounted MFEs shared one flat globalThis.__MFE_ENV__ object keyed only by\nconfig name, so two apps that read the same key (mfeBasePath being the\nload-bearing one) overwrot\n[…]\nack constant-folds config and never touches\n__MFE_ENV__, so it is unaffected; SSR keeps its #{TOKEN}+sed path.\n\n* refactor(AG-20532): address Copilot review — align docstrings, reuse appName, hoist ns",
          "is_bot": false,
          "headline": "fix(AG-20532): namespace injected env per app so co-mounted MFEs stop…",
          "author_name": "Amir Zahedi",
          "author_login": "amir-zahedi",
          "committed_at": "2026-07-20T04:20:08Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "06782f79130551974864cd475f0855f6a6bfe3dc",
          "body": "Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "Version Packages (#446)",
          "author_name": "github-actions[bot]",
          "author_login": "github-actions[bot]",
          "committed_at": "2026-07-11T23:16:59Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "078adc4a53b259c5dbe1a0fff227ba8732beb5a9",
          "body": "…mounted apps (#445)\n\nmultiEnvConfigEmitter emitted each per-env/tenant config script as a bare\nglobalThis.__MFE_ENV__={...} whole-object assignment. On a page that injects\nmore than one app's config script — the app-shell Lambda generator, the legacy\nportals, the shadow loader — the second script r\n[…]\n merge artefact still clobber; that\nclears as apps rebuild on this release.\n\nThe single-env init block in mfeEnvTokens.ts is left untouched — byte-locked to\nthe old host + 6-pipeline contract by test.",
          "is_bot": false,
          "headline": "fix(AG-20214): merge multi-env config seeds instead of clobbering co-…",
          "author_name": "Amir Zahedi",
          "author_login": "amir-zahedi",
          "committed_at": "2026-07-11T23:15:40Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "2cec03d89a3afd7b15fdad208edf6fae5be52669",
          "body": "Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "Version Packages (#444)",
          "author_name": "github-actions[bot]",
          "author_login": "github-actions[bot]",
          "committed_at": "2026-07-09T07:30:20Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "4d3ab29e3749ba3cb50b1d91990b7bd8858e358e",
          "body": "…default (#443)\n\nRestore the single-env config contract as the default SPA build behaviour and\ngate multi-env config emission behind the GDU_MULTI_ENV_CONFIG env var.\n\nSince 13.21.0 the build unconditionally dropped the baked\nglobalThis.__MFE_ENV__ init block and always emitted per-combo config scri\n[…]\nV_CONFIG=1 opts into the 13.21.0 behaviour unchanged.\nThe process.env key rewrite runs in both modes. The env var is read once at the\nconfig/vite/index.ts seam and threaded through as a plain boolean.",
          "is_bot": false,
          "headline": "feat(AG-20165): compat mode — old single-env config contract as safe …",
          "author_name": "Amir Zahedi",
          "author_login": "amir-zahedi",
          "committed_at": "2026-07-09T07:21:56Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "48f884bcc97b9161da0132c871c82a136e49deda",
          "body": "Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "Version Packages (#442)",
          "author_name": "github-actions[bot]",
          "author_login": "github-actions[bot]",
          "committed_at": "2026-07-09T04:07:21Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "3f959c262bf7895bb092f423d6ef14d4bc59cf15",
          "body": "* feat(AG-20098): upgrade GDU to Vite 8 stable and drop the single-config bake\n\nBump the SPA build's vite pin from ^8.0.0-beta.0 to ^8.1.3 (stable). Rolldown\nand OXC were already the active bundler and transform path, so this is a\nversion bump verified across the pilot SPA (fls-booking) dev server a\n[…]\nher\nchunks import its exports); and allowlist config keys by the app-read envTokenMap\nrather than a cross-repo global-configs lookup.\n\nRef: docs/unified-deployments/04-gdu-vite8.md, 00-overview.md §4c",
          "is_bot": false,
          "headline": "feat(AG-20099): multi-env manifest emission (#441)",
          "author_name": "Amir Zahedi",
          "author_login": "amir-zahedi",
          "committed_at": "2026-07-09T04:05:14Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "e41c8427297701cd0885b3f86bb9211b8ec8cf0c",
          "body": "…ig bake (#439)\n\nBump the SPA build's vite pin from ^8.0.0-beta.0 to ^8.1.3 (stable). Rolldown\nand OXC were already the active bundler and transform path, so this is a\nversion bump verified across the pilot SPA (fls-booking) dev server and\nproduction artefact build under Vite 8.\n\nDrop the renderChun\n[…]\nd by\nmultiEnvConfigEmitter (04-gdu-vite8.md 2.3), which lands separately in PR13\n(AG-20099). The dev server is unaffected since the plugin is build-only.\n\nRef: docs/unified-deployments/04-gdu-vite8.md",
          "is_bot": false,
          "headline": "feat(AG-20098): upgrade GDU to Vite 8 stable and drop the single-conf…",
          "author_name": "Amir Zahedi",
          "author_login": "amir-zahedi",
          "committed_at": "2026-07-09T03:53:11Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "7f2062a7d740d6f5055eb2037371acd1515201e0",
          "body": "The committed snapshot pinned browser versions (chrome 138, edge 138,\nfirefox 140, opera 120) that the browserslist config's \"last N\nversions\" windows no longer resolve now those majors have aged out.\nPinned caniuse-lite/baseline-browser-mapping to latest via\nupdate-browserslist-db and regenerated the snapshot off that fresh\ndata, matching the pattern from the last refresh (AG-19249). No\nchangeset — pure test-data refresh, the published config is\nunchanged.",
          "is_bot": false,
          "headline": "chore: refresh browserslist snapshot + caniuse-lite (#440)",
          "author_name": "Amir Zahedi",
          "author_login": "amir-zahedi",
          "committed_at": "2026-07-09T03:07:35Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "0d0281aa2bedca6085cb0f4532a2338ba2552773",
          "body": "Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "Version Packages (#438)",
          "author_name": "github-actions[bot]",
          "author_login": "github-actions[bot]",
          "committed_at": "2026-06-02T05:27:58Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "dd87c197dba6334d77796c39106b43bf4fcfbf93",
          "body": "* fix(AG-19249): serve package (pkg-*) locales in Vite dev server\n\nThe Vite TranslationHashingPlugin runs at build time only, so the dev\nserver never made shared-package translation namespaces available — they\nrendered as raw i18n keys for every Vite MFE, even though the keys exist\nand resolve in pr\n[…]\nenerated so CI's Lint & Test goes green. Pure test-data\nrefresh — the published config is unchanged, so no changeset needed. Folded\nin here to unblock this PR; the drift is repo-wide and pre-dates it.",
          "is_bot": false,
          "headline": "fix(AG-19249): serve package (pkg-*) locales in Vite dev server (#437)",
          "author_name": "Amir Zahedi",
          "author_login": "amir-zahedi",
          "committed_at": "2026-06-02T05:26:27Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "6800700f8d6b34c19ae51f2b81381c036a048e59",
          "body": "Floating npm@11 was resolving to a release whose bundled\n@npmcli/arborist is broken on Node 22.22.2 (missing promise-retry).\nSibling overdrive repo pins 11.6.2 and publishes cleanly — match it.",
          "is_bot": false,
          "headline": "ci(publish): pin npm to 11.6.2 to match overdrive",
          "author_name": "Amir Zahedi",
          "author_login": "amir-zahedi",
          "committed_at": "2026-05-11T22:21:14Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "1588a67e46c6b1da41011e067e75ce96a0522644",
          "body": "Bundled npm shipped with Node 22.22.x has a broken @npmcli/arborist\ndep tree (missing promise-retry), causing `npm install -g npm@11` to\nfail during the rebuild step. `--force` bypasses the rebuild and lets\nthe OIDC-ready npm install cleanly.",
          "is_bot": false,
          "headline": "ci(publish): pass --force to npm@11 global install",
          "author_name": "Amir Zahedi",
          "author_login": "amir-zahedi",
          "committed_at": "2026-05-11T22:18:47Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "b3a15d58c8c38c7a98a9a7115cdbaed751109979",
          "body": "Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "Version Packages (#436)",
          "author_name": "github-actions[bot]",
          "author_login": "github-actions[bot]",
          "committed_at": "2026-05-11T22:13:49Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "ba8b20b36769ac2a19e0fdd6b81fe149ef51cedc",
          "body": "* feat(AG-18111): emit self-hosted CDN URLs for runtime externals\n\ngetExternals() now emits #{PUBLIC_PATH_BASE}/_shared/externals/<pkg>@<v>/<entry>.js\nfor the 8 React + DataDog externals in production builds (webpack and vite). Local\ndev server (runSPA-vite) continues to use esm.sh URLs via isDev: t\n[…]\nbecause the committed\nsnapshot lagged behind newer Chrome 145-148, Edge 145-147, Firefox 148-150,\netc. that the `last N versions` query now resolves.\n\nNo source changes — only data refresh + snapshot.",
          "is_bot": false,
          "headline": "feat(AG-18111): GDU emits self-hosted esm CDN URLs for externals (#435)",
          "author_name": "Amir Zahedi",
          "author_login": "amir-zahedi",
          "committed_at": "2026-05-11T22:00:45Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "27d1c2b80a7bb6800b5c9ec14cd8b68bc25e6440",
          "body": "Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "Version Packages (#433)",
          "author_name": "github-actions[bot]",
          "author_login": "github-actions[bot]",
          "committed_at": "2026-04-02T06:14:45Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "41e52599bb3bb264d194fa0bf50673d523dbb33d",
          "body": "Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "chore: add changeset for chunk import rewrite fix",
          "author_name": "Amir Zahedi",
          "author_login": "amir-zahedi",
          "committed_at": "2026-04-02T06:13:33Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "aed358190e3305e5e6611aecfa4e2f13fc3caba7",
          "body": "Chunks that import exports from the entry file (e.g. lazy-loaded page\ncomponents) would break because the wrapper has no exports. After\ncreating the wrapper, scan all non-entry chunks and rewrite references\nfrom the original entry filename to the inner filename.\n\nCo-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix: rewrite chunk imports from entry to inner file",
          "author_name": "Amir Zahedi",
          "author_login": "amir-zahedi",
          "committed_at": "2026-04-02T06:13:10Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "237acc8412370cc534fc3b6f89b20580cd2e7ade",
          "body": "Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "Version Packages (#432)",
          "author_name": "github-actions[bot]",
          "author_login": "github-actions[bot]",
          "committed_at": "2026-04-02T05:51:18Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "129b660648a39683995b58ec29315548a26f4a4d",
          "body": "* fix(AG-18443): fix rolldownExternalShim ESM import hoisting crash\n\nThe plugin used renderChunk to prepend a require() shim to the entry\nchunk. However, ES module static import declarations are always hoisted\nand evaluated before the module body runs, so chunks calling require()\nfor externals (reac\n[…]\np handling, non-entry skip, and missing dir guard\n\nCo-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>\n\n---------\n\nCo-authored-by: Claude Opus 4.6 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix(AG-18443): fix rolldownExternalShim ESM import hoisting crash (#431)",
          "author_name": "Amir Zahedi",
          "author_login": "amir-zahedi",
          "committed_at": "2026-04-02T05:50:17Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "cff99a3a77caff8b5949db183a6dc82515803bb1",
          "body": "Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "Version Packages (#430)",
          "author_name": "github-actions[bot]",
          "author_login": "github-actions[bot]",
          "committed_at": "2026-03-24T22:48:26Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "a9f075567688dea824337b751108452c21fc3099",
          "body": "…ldUntilCrawlEnd (#429)\n\n* fix: improve Vite dev server startup with optimizeDeps entries and holdUntilCrawlEnd\n\nWith appType: 'custom' Vite has no HTML to crawl for dependencies.\nThis caused all deps to be discovered at runtime, triggering repeated\nre-optimisation cycles and full-page reloads on ev\n[…]\n\n* chore: add changeset for Vite optimizeDeps fix\n\nCo-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>\n\n---------\n\nCo-authored-by: Claude Opus 4.6 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix: improve Vite dev server startup with optimizeDeps entries and ho…",
          "author_name": "Amir Zahedi",
          "author_login": "amir-zahedi",
          "committed_at": "2026-03-24T22:46:53Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "eab66e0fe3020e70c8c7f7182dfccce15428de92",
          "body": "Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "Version Packages (#428)",
          "author_name": "github-actions[bot]",
          "author_login": "github-actions[bot]",
          "committed_at": "2026-03-20T04:47:06Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "5f7a121cb9d242785d0d383a4f29a71308012cd7",
          "body": "* Replace yarn to bun\n\n* Changeset  added\n\n* chore: Replace remaining yarn references with bun equivalents in build commands and documentation",
          "is_bot": false,
          "headline": "chore: replace remaining yarn references with bun (#427)",
          "author_name": "Tima Mehro",
          "author_login": "timaMehro",
          "committed_at": "2026-03-20T04:35:53Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "9d3a05bb937cee350fec020424136c403d52b70f",
          "body": "* fix: push tags and create GitHub releases after npm publish\n\nchangeset publish creates git tags locally but the split workflow\nnever pushed them or created GitHub releases. This adds a post-publish\nstep that diffs tags before/after publish, pushes new ones, extracts\nchangelog content from each pac\n[…]\nbrittle grep matching\n\n* fix: stop awk changelog extraction after first matching section\n\nPrevents combining duplicate version headings in CHANGELOG.md by\nexiting after the first matched section ends.",
          "is_bot": false,
          "headline": "fix: Push tags and create GitHub releases after npm publish (#426)",
          "author_name": "Amir Zahedi",
          "author_login": "amir-zahedi",
          "committed_at": "2026-03-19T03:31:54Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "fbd3d47118837d9617609b2a8f16bf0e6e3ccb96",
          "body": "* fix: Add registry-url back for npm OIDC auth discovery\n\nnpm needs registry-url in .npmrc to know which registry to\nauthenticate against. With registry-url set and NODE_AUTH_TOKEN\nunset, npm falls through to OIDC when provenance is enabled.\n\nThe previous 404s were caused by changesets/action settin\n[…]\n- Add npm install -g npm@11 step to get OIDC Trusted Publishing\n- Replace simple version check with comprehensive OIDC readiness\n  verification (npm version assertion, OIDC env var check, config dump)",
          "is_bot": false,
          "headline": "fix: Add registry-url back for npm OIDC auth discovery (#425)",
          "author_name": "Amir Zahedi",
          "author_login": "amir-zahedi",
          "committed_at": "2026-03-19T02:33:46Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "8f181c2d5141d5bcbec4c2ae257f6e11ba2046b5",
          "body": "changeset is not on PATH — it's a local dependency that needs to be\ninvoked through bun.\n\nRef: AG-17631",
          "is_bot": false,
          "headline": "fix: Use bun to run changeset publish command (#424)",
          "author_name": "Amir Zahedi",
          "author_login": "amir-zahedi",
          "committed_at": "2026-03-19T01:58:07Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "d521d5cd0d3332508b4758099e6a5fa5f916fe85",
          "body": "actions/setup-node with registry-url writes an _authToken to .npmrc,\nwhich causes npm to use that token instead of its native OIDC flow.\nRemoving registry-url lets npm detect OIDC availability via the\nACTIONS_ID_TOKEN_REQUEST_URL env var and exchange the token with the\ncorrect audience for the npm registry.\n\nAlso switches from changesets/action to direct changeset publish to\navoid any middleware interfering with the OIDC flow.\n\nRef: AG-17631",
          "is_bot": false,
          "headline": "fix: Remove registry-url to allow npm native OIDC auth (#423)",
          "author_name": "Amir Zahedi",
          "author_login": "amir-zahedi",
          "committed_at": "2026-03-19T01:54:56Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "3f54803d51dc9e10c948aa7f5683cbb36ccf1089",
          "body": "* fix: Use Node 22 in publish workflow for npm OIDC support\n\nNode 20.9.0 (pinned via Volta) ships with npm 10.1.0, which is too old\nfor OIDC trusted publishing (requires >= 10.9.1). Node 22 ships with\nnpm >= 10.9.x which has full OIDC support.\n\nRef: AG-17631\n\n* chore: Remove OIDC migration manual steps document\n\nManual steps have been completed; document is no longer needed.\n\nRef: AG-17631",
          "is_bot": false,
          "headline": "fix: Use Node 22 in publish workflow for npm OIDC support (#422)",
          "author_name": "Amir Zahedi",
          "author_login": "amir-zahedi",
          "committed_at": "2026-03-19T01:46:22Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "6a00cf68ce577e26387cad91701a71601ad9b90e",
          "body": "* feat: Migrate npm publishing from NPM_TOKEN to OIDC Trusted Publishers\n\nSplit release.yml into two workflows: release.yml now only creates\nVersion Packages PRs, while the new publish.yml handles npm publishing\nvia OIDC with provenance attestations. This eliminates the need for\nlong-lived NPM_TOKEN credentials.\n\nRef: AG-17631\n\n* feat: Add workflow_dispatch trigger to publish workflow\n\nAllows manual re-triggering of npm publish for recovery scenarios.\n\nRef: AG-17631",
          "is_bot": false,
          "headline": "feat: Migrate npm publishing to OIDC Trusted Publishers (#421)",
          "author_name": "Amir Zahedi",
          "author_login": "amir-zahedi",
          "committed_at": "2026-03-19T01:38:54Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "5a9cee78f690cf9a307f256a5e76ed63ebd4825d",
          "body": "Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "Version Packages (#420)",
          "author_name": "github-actions[bot]",
          "author_login": "github-actions[bot]",
          "committed_at": "2026-03-19T01:10:54Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "31133ad410f43b282b85d3b4ec0f2d5c19fbc54f",
          "body": "* feat: migrate monorepo from Yarn 3.6.1 to Bun 1.3.9\n\nReplaces Yarn with Bun as the package manager across the entire octane\nmonorepo — source code, CI/CD, developer tooling, and documentation.\n\nCo-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>\n\n* fix: resolve remaining yarn references and bu\n[…]\nkfile after dependency resolution\n\n* chore: add changeset for Yarn to Bun migration\n\n---------\n\nCo-authored-by: Tima Mehro <f.f.mehro@gmail.com>\nCo-authored-by: Claude Opus 4.6 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "chore: add changeset for Yarn to Bun migration (#419)",
          "author_name": "Amir Zahedi",
          "author_login": "amir-zahedi",
          "committed_at": "2026-03-19T01:07:03Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "8fac8deb794426c516ac71fd1c293d9530c84c26",
          "body": "* feat: migrate monorepo from Yarn 3.6.1 to Bun 1.3.9\n\nReplaces Yarn with Bun as the package manager across the entire octane\nmonorepo — source code, CI/CD, developer tooling, and documentation.\n\nCo-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>\n\n* fix: resolve remaining yarn references and bu\n[…]\nversions rotated out).\n\n* chore: update bun lockfile after dependency resolution\n\n---------\n\nCo-authored-by: Claude Opus 4.6 <noreply@anthropic.com>\nCo-authored-by: Amir Zahedi <amir.zahedi@gmail.com>",
          "is_bot": false,
          "headline": "feat: Migrate monorepo from Yarn to Bun (#393)",
          "author_name": "Tima Mehro",
          "author_login": "timaMehro",
          "committed_at": "2026-03-19T00:58:14Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "5e7ca695124ea66dccef0749afebe9c3c0101cf2",
          "body": "Co-authored-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "Version Packages (#418)",
          "author_name": "github-actions[bot]",
          "author_login": "github-actions[bot]",
          "committed_at": "2026-03-03T05:27:19Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "d80cd6ba0638458f1bcd0f8caf69ca1dd1da379f",
          "body": "* fix(gdu): remove temp exclusion and add sourceType unambiguous to babel config\n\nRemove the temporary @autoguru/utilities exclusion that was no longer needed\nand add sourceType 'unambiguous' to babel-loader options to handle both ES\nmodules and CommonJS files correctly.\n\n🤖 Generated with [Claude Co\n[…]\nd browserslist snapshot\n\nCo-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>\n\n---------\n\nCo-authored-by: Claude Opus 4.5 <noreply@anthropic.com>\nCo-authored-by: Amir Zahedi <amir.zahedi@gmail.com>",
          "is_bot": false,
          "headline": "feat: Relay fix (#417)",
          "author_name": "Robert McLeish",
          "author_login": "robmcleishag",
          "committed_at": "2026-03-03T05:26:30Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "4528598ba11012462c6e4f4794f9663dc106140e",
          "body": "Co-authored-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "Version Packages (#416)",
          "author_name": "github-actions[bot]",
          "author_login": "github-actions[bot]",
          "committed_at": "2026-02-26T19:12:57Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "6031c1559e248b4d3f014b339028da42bf937698",
          "body": "* feat(gdu): add bundle analyser support for Vite builds\n\nEnable the existing `gdu build -a` / `ANALYZE=true` flag for Vite builds\nusing rollup-plugin-visualizer. Generates an interactive treemap report at\n`bundle-report.html` in the output directory, matching the webpack behaviour.\n\nThe plugin is d\n[…]\n need rollup-plugin-visualizer installed.\n\nAG-17604\n\nCo-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>\n\n* chore: Removes treat\n\n---------\n\nCo-authored-by: Claude Opus 4.6 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat(gdu): add bundle analyser for Vite builds (#415)",
          "author_name": "Amir Zahedi",
          "author_login": "amir-zahedi",
          "committed_at": "2026-02-26T19:11:14Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "2e1ed6746c5ca942b9de6f6f369229008ab3bc1d",
          "body": "Co-authored-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "Version Packages (#414)",
          "author_name": "github-actions[bot]",
          "author_login": "github-actions[bot]",
          "committed_at": "2026-02-26T06:55:37Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "3dcb7db7fcd595192dc1357db96ad3935e4cd4da",
          "body": "* fix(gdu): collect CSS from static imports in build manifest\n\nThe build manifest was only collecting CSS from dynamic chunk imports,\nmissing CSS files from statically imported modules. This adds a\nrecursive walk of static imports to ensure all CSS dependencies are\nincluded in the manifest entry for\n[…]\nies formatting\n\n* chore: add changeset for static import CSS collection fix\n\nCo-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>\n\n---------\n\nCo-authored-by: Claude Opus 4.6 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix(gdu): collect CSS from static imports in build manifest (#413)",
          "author_name": "Amir Zahedi",
          "author_login": "amir-zahedi",
          "committed_at": "2026-02-26T06:54:11Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "3235892f33f952e7187ed798660c4753c0326b6c",
          "body": "Co-authored-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "Version Packages (#412)",
          "author_name": "github-actions[bot]",
          "author_login": "github-actions[bot]",
          "committed_at": "2026-02-26T04:01:27Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "e39f3bf80521770c06a9c2efd27b0fb8d074ac90",
          "body": "* fix(gdu): namespace runtime public path per MFE to prevent collisions\n\nWhen multiple Vite-built MFEs load on the same page, they each set\nglobalThis.__GDU_PUBLIC_PATH__ from their entry chunk. The last MFE\nto load wins, so earlier MFEs resolve their lazy-loaded CSS chunks\nfrom the wrong CDN path (\n[…]\nectly.\n\nCo-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>\n\n---------\n\nCo-authored-by: Claude Opus 4.6 <noreply@anthropic.com>\nCo-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>",
          "is_bot": false,
          "headline": "fix(gdu): namespace runtime public path per MFE (#411)",
          "author_name": "Amir Zahedi",
          "author_login": "amir-zahedi",
          "committed_at": "2026-02-26T03:59:51Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "cf3db7c134b89031bc6f23e8ff3b7e3dc3cbac29",
          "body": "Co-authored-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "Version Packages (#410)",
          "author_name": "github-actions[bot]",
          "author_login": "github-actions[bot]",
          "committed_at": "2026-02-26T01:34:07Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "817122b7095d61e4050d98e72c1bb345b2b4ee5e",
          "body": "Co-authored-by: Claude Opus 4.6 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "chore(gdu): add changeset for Overdrive barrel-split plugin (#409)",
          "author_name": "Amir Zahedi",
          "author_login": "amir-zahedi",
          "committed_at": "2026-02-26T01:33:04Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "3e1a9caaa59c81bf28741166b02f574b21ca61f3",
          "body": "* feat(gdu): add Overdrive barrel-splitting Vite plugin\n\nRewrites `import { X } from '@autoguru/overdrive'` into deep component\nimports (e.g. `@autoguru/overdrive/components/Box`) during Vite builds,\nenabling granular tree-shaking and eliminating Vanilla Extract CSS\nside-effect leakage from unused c\n[…]\nfor $ in export names\n- Remove non-portable shebang from manifest generator\n\nCo-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>\n\n---------\n\nCo-authored-by: Claude Opus 4.6 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat(gdu): add Overdrive barrel-splitting Vite plugin (#408)",
          "author_name": "Amir Zahedi",
          "author_login": "amir-zahedi",
          "committed_at": "2026-02-26T01:28:40Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "75b314390932af20bc5f9564b3e5ccb29b2cf02d",
          "body": "Co-authored-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "Version Packages (#407)",
          "author_name": "github-actions[bot]",
          "author_login": "github-actions[bot]",
          "committed_at": "2026-02-25T19:12:49Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "01fbd46f3af485912696a3e90bacd9b93a35640a",
          "body": "* feat(gdu): add runtime public path resolution for Vite builds\n\n- Add runtimePublicPath plugin that derives CDN base URL at runtime from\n  import.meta.url, mirroring webpack's __webpack_require__.p mechanism\n- Pass publicPath to guruBuildManifest in makeViteConfig so\n  build-manifest.json has #{PUB\n[…]\no Octopus\nTokenReplacement can process it alongside the webpack convention.\n\nCo-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>\n\n---------\n\nCo-authored-by: Claude Opus 4.6 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix(gdu): centralise Octopus deploy tokens in mfe-configs chunk (#406)",
          "author_name": "Amir Zahedi",
          "author_login": "amir-zahedi",
          "committed_at": "2026-02-25T19:05:40Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "5813daf08ee2cb49ce17738d1c5be8f48fee989a",
          "body": "Co-authored-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "Version Packages (#405)",
          "author_name": "github-actions[bot]",
          "author_login": "github-actions[bot]",
          "committed_at": "2026-02-25T08:29:04Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "d313b1c9c56cec6eed3dc79318717b5284b6ea5c",
          "body": "* feat(gdu): add runtime public path resolution for Vite builds\n\n- Add runtimePublicPath plugin that derives CDN base URL at runtime from\n  import.meta.url, mirroring webpack's __webpack_require__.p mechanism\n- Pass publicPath to guruBuildManifest in makeViteConfig so\n  build-manifest.json has #{PUB\n[…]\nnoreply@anthropic.com>\n\n* chore: update changeset to patch for manifest fix\n\nCo-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>\n\n---------\n\nCo-authored-by: Claude Opus 4.6 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix(gdu): remove publicPath from Vite build manifest (#404)",
          "author_name": "Amir Zahedi",
          "author_login": "amir-zahedi",
          "committed_at": "2026-02-25T08:26:37Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "f42cab30ea10f33d2286c748d65b91a288d6696b",
          "body": "Co-authored-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "Version Packages (#403)",
          "author_name": "github-actions[bot]",
          "author_login": "github-actions[bot]",
          "committed_at": "2026-02-25T04:56:35Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "dd591836f146d0d9e8c38516b8f80ac8f03d5b2c",
          "body": "* feat(gdu): add runtime public path resolution for Vite builds\n\n- Add runtimePublicPath plugin that derives CDN base URL at runtime from\n  import.meta.url, mirroring webpack's __webpack_require__.p mechanism\n- Pass publicPath to guruBuildManifest in makeViteConfig so\n  build-manifest.json has #{PUB\n[…]\n to 'development'\n\nCo-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>\n\n* style(gdu): replace if/else with ternary in setEnvProd\n\n---------\n\nCo-authored-by: Claude Opus 4.6 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat(gdu): add runtime public path resolution for Vite builds (#402)",
          "author_name": "Amir Zahedi",
          "author_login": "amir-zahedi",
          "committed_at": "2026-02-25T04:54:46Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "fdab55013714cbc7f4d688a6be1ac93ef7f96926",
          "body": "Co-authored-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "Version Packages (#401)",
          "author_name": "github-actions[bot]",
          "author_login": "github-actions[bot]",
          "committed_at": "2026-02-24T21:32:08Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "dcb50b32ae74ecd66b65414aff6f3d195d22efcb",
          "body": "* feat(gdu): add manualChunks to Vite config for mfe-configs chunk naming\n\nRoute all packages/global-configs modules into a mfe-configs named chunk,\nmirroring webpack's splitChunks convention. Ensures CI tokenReplacement.sh\ncan find and replace #{...} config tokens in Vite/Rolldown builds, fixing\nWe\n[…]\nthored-by: Copilot <175728472+Copilot@users.noreply.github.com>\n\n---------\n\nCo-authored-by: Claude Opus 4.6 <noreply@anthropic.com>\nCo-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>",
          "is_bot": false,
          "headline": "feat(gdu): add manualChunks for mfe-configs chunk naming (#400)",
          "author_name": "Amir Zahedi",
          "author_login": "amir-zahedi",
          "committed_at": "2026-02-24T21:02:40Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "79be5ec65b06172f0ee18f98bfcf0825d3e32d48",
          "body": "Co-authored-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "Version Packages (#399)",
          "author_name": "github-actions[bot]",
          "author_login": "github-actions[bot]",
          "committed_at": "2026-02-24T09:56:46Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "a6194f951ed793f952f5502963fb00b7bb1f841c",
          "body": "…ce (#398)\n\n- Use chunk.isEntry instead of filename pattern matching (H1)\n- Remove fragile code.includes() content heuristic (H2)\n- Switch Promise.all to Promise.allSettled with per-import catch (H3)\n- Chain to existing globalThis.require for multi-MFE safety (H4)\n\nCo-authored-by: Claude Opus 4.6 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat(gdu): harden rolldownExternalShim plugin for production resilien…",
          "author_name": "Amir Zahedi",
          "author_login": "amir-zahedi",
          "committed_at": "2026-02-24T09:55:41Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "557bf8f678a71df06b5a9b4d4a8fdfe96325febd",
          "body": "Co-authored-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "Version Packages (#397)",
          "author_name": "github-actions[bot]",
          "author_login": "github-actions[bot]",
          "committed_at": "2026-02-24T08:22:37Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "8f084efd763bca7af7a90b4538cd52ca918cb997",
          "body": "* feat(gdu): replace require() with dynamic import and add Rolldown ESM external plugin\n\nSwitch Vite and Vanilla Extract imports from synchronous require() to\nnative dynamic import() to prevent TypeScript CJS output from rewriting\nthem. Integrate Rolldown's esmExternalRequirePlugin to properly conve\n[…]\n status and testing guide for Vite 8\n\n* refactor: Simplify dynamic import function and clean up type definitions in Vite integration\n\n---------\n\nCo-authored-by: Claude Opus 4.6 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat(gdu): upgrade Vite 7 to Vite 8 + Rolldown (#396)",
          "author_name": "Amir Zahedi",
          "author_login": "amir-zahedi",
          "committed_at": "2026-02-24T08:20:30Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "15421b86aecdb13ad05f9501f2f8b6cecef72271",
          "body": "Co-authored-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "Version Packages (#395)",
          "author_name": "github-actions[bot]",
          "author_login": "github-actions[bot]",
          "committed_at": "2026-02-23T11:15:50Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "b62650972a2e78b5dc03493d90ee80b6ca45bef7",
          "body": "* chore: add changeset for Vite base config integration\n\nCo-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>\n\n* chore(gdu): clean up Vite config and lock file\n\nCo-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>\n\n* feat: enhance Vite configuration by adding environment variable parsing and r\n[…]\nVite configs.\n\nCo-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>\n\n* chore: reorder imports and format code in buildSPA-vite.ts\n\n---------\n\nCo-authored-by: Claude Opus 4.6 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat(gdu): add Vite production build and refactor config plugins (#394)",
          "author_name": "Amir Zahedi",
          "author_login": "amir-zahedi",
          "committed_at": "2026-02-23T11:12:31Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "3629ad9fdc654170af4e7047f2989529ff931ca6",
          "body": "…dating dependencies, and enhancing translation handling",
          "is_bot": false,
          "headline": "feat: refactor Vite integration by consolidating type definitions, up…",
          "author_name": "Amir Zahedi",
          "author_login": "amir-zahedi",
          "committed_at": "2026-02-23T09:23:34Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "af0770d47ec965b726ad5d456bb664dd378d9d84",
          "body": null,
          "is_bot": false,
          "headline": "chore: consolidate empty code change entries for clarity",
          "author_name": "Amir Zahedi",
          "author_login": "amir-zahedi",
          "committed_at": "2026-02-22T04:56:39Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "d4001fff7818d98d55df2d882ad4cc700383169d",
          "body": "…nfiguration, and implement build manifest plugin",
          "is_bot": false,
          "headline": "feat: integrate Vite support for SPA and SSR builds, add externals co…",
          "author_name": "Amir Zahedi",
          "author_login": "amir-zahedi",
          "committed_at": "2026-02-22T04:56:27Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "b04206d38ba060bb9f7459e968be085280a8a24e",
          "body": "Co-authored-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "Version Packages (#392)",
          "author_name": "github-actions[bot]",
          "author_login": "github-actions[bot]",
          "committed_at": "2026-02-09T20:07:03Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "8b893e58cb19668ff964fd78553ae863fd8a97e3",
          "body": "* fix(gdu): pass baseUrl to TsconfigPathsPlugin for tsgo compatibility\n\ntsgo rejects baseUrl in tsconfig.json (TS5102), but TsconfigPathsPlugin\nrequires it for path alias resolution. Passing baseUrl explicitly to the\nplugin decouples it from the tsconfig, allowing apps to drop baseUrl\nwithout breaki\n[…]\nist): update snapshot by removing outdated browser versions\n\n* refactor(env-parser.test): clean up import statements for consistency\n\n---------\n\nCo-authored-by: Claude Opus 4.6 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix(gdu): pass baseUrl to TsconfigPathsPlugin for tsgo compat (#391)",
          "author_name": "Amir Zahedi",
          "author_login": "amir-zahedi",
          "committed_at": "2026-02-09T20:05:19Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "09ffb48e7194cc09e386533936f7cd5c80a0bad6",
          "body": "Co-authored-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "Version Packages (#390)",
          "author_name": "github-actions[bot]",
          "author_login": "github-actions[bot]",
          "committed_at": "2026-01-23T04:45:42Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "70243d99631db318e97cb992e13af91ac47d9240",
          "body": "…el config (#389)\n\n* fix(gdu): remove temp exclusion and add sourceType unambiguous to babel config\n\nRemove the temporary @autoguru/utilities exclusion that was no longer needed\nand add sourceType 'unambiguous' to babel-loader options to handle both ES\nmodules and CommonJS files correctly.\n\n🤖 Genera\n[…]\n-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>\n\n* test: Updates snapshots\n\n---------\n\nCo-authored-by: Claude Opus 4.5 <noreply@anthropic.com>\nCo-authored-by: Amir Zahedi <amir.zahedi@gmail.com>",
          "is_bot": false,
          "headline": "fix(gdu): remove temp exclusion and add sourceType unambiguous to bab…",
          "author_name": "Robert McLeish",
          "author_login": "robmcleishag",
          "committed_at": "2026-01-23T04:44:03Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "e08c83f7887a6e9da4076e5700ce7b753c119204",
          "body": "Co-authored-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "Version Packages (#388)",
          "author_name": "github-actions[bot]",
          "author_login": "github-actions[bot]",
          "committed_at": "2026-01-12T00:51:19Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "550ee8f7a83f0877c7c3b2d50471fcaae8e32d26",
          "body": "* feat(gdu): add @datadog/browser-logs to webpack externals\n\nAdd `@datadog/browser-logs` SDK to the webpack externals configuration,\nmatching the pattern used for @datadog/browser-rum and @datadog/browser-rum-react.\n\nThis enables MFEs to import @datadog/browser-logs without bundling the SDK,\ninstead\n[…]\ngdu jest config to prevent .d.ts files\n  from being picked up as test files\n\nCo-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>\n\n---------\n\nCo-authored-by: Claude Opus 4.5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat(gdu): add @datadog/browser-logs to webpack externals (#385)",
          "author_name": "Amir Zahedi",
          "author_login": "amir-zahedi",
          "committed_at": "2026-01-12T00:40:07Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "5565f891eade257d7e321cb41976e21220e4001e",
          "body": "Co-authored-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "Version Packages (#387)",
          "author_name": "github-actions[bot]",
          "author_login": "github-actions[bot]",
          "committed_at": "2026-01-02T22:23:10Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "bf6b0e4a1f8aa3f74e238f90bb9d15333c1f7eea",
          "body": "…p_config (#386)\n\n* feat(gdu): add codegen command for generating TypeScript from .gdu_app_config\n\nAdd `gdu codegen` command that generates TypeScript code from environment\nconfiguration files. This enables apps to derive build-time constants from\ntheir .gdu_app_config directory without bespoke scri\n[…]\n and tests.\n\n🤖 Generated with [Claude Code](https://claude.com/claude-code)\n\nCo-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>\n\n---------\n\nCo-authored-by: Claude Opus 4.5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat(gdu): add codegen command for generating TypeScript from .gdu_ap…",
          "author_name": "Amir Zahedi",
          "author_login": "amir-zahedi",
          "committed_at": "2026-01-02T22:21:58Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "76d112f1764c17a922c0a723eef478b96495fbd1",
          "body": "Co-authored-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "Version Packages (#383)",
          "author_name": "github-actions[bot]",
          "author_login": "github-actions[bot]",
          "committed_at": "2025-12-24T00:51:13Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "0bea8c7ebd8e098d7423f682aacdce4a4e0959ad",
          "body": "* Added `mfe.ngrok.io` to allowed hosts in webpack dev server configuration.\n\n* Added snapshot\n\n* Refactor webpack configuration for improved clarity and maintainability\n\n* Revert unrelated changes, keep only DataDog SDK externalization\n\n🤖 Generated with [Claude Code](https://claude.com/claude-code)\n[…]\n-code)\n\nCo-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>\n\n* Fix regex in getDataDogVersion to remove version prefix correctly\n\n---------\n\nCo-authored-by: Claude Opus 4.5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat(gdu): externalise DataDog SDK externalization (#382)",
          "author_name": "Tima Mehro",
          "author_login": "timaMehro",
          "committed_at": "2025-12-24T00:48:46Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "339596710576ef06d7c2d09701318b24e04191fd",
          "body": "Co-authored-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "Version Packages (#380)",
          "author_name": "github-actions[bot]",
          "author_login": "github-actions[bot]",
          "committed_at": "2025-12-16T06:00:44Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "83c0962013538414746530ee6c5a6f37466a106c",
          "body": "* feat(gdu): Add --webpack flag support for Next.js 16\n\n- Add --webpack flag to Next.js dev server command (config/ssr/server.ts)\n- Add --webpack flag to Next.js build command (commands/build/buildSSR.ts)\n- Add Vanilla Extract refresh stub loader for SSR compatibility\n\nNext.js 16 defaults to Turbopa\n[…]\natting fixes in related files.\n\n* test: refactors complexity out\n\n* test: refactors complexity out\n\n* test: refactors complexity out\n\n---------\n\nCo-authored-by: Claude Opus 4.5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat(gdu): Add --webpack flag support for Next.js 16 (#379)",
          "author_name": "Amir Zahedi",
          "author_login": "amir-zahedi",
          "committed_at": "2025-12-16T05:58:43Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "63f418196b4942e089065fd30c55561c534a2473",
          "body": "Co-authored-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "Version Packages (#378)",
          "author_name": "github-actions[bot]",
          "author_login": "github-actions[bot]",
          "committed_at": "2025-11-26T02:06:23Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "03df6912fb46a98b450460e09d74d71cbe557876",
          "body": "* Added `mfe.ngrok.io` to allowed hosts in webpack dev server configuration.",
          "is_bot": false,
          "headline": "Added `mfe.ngrok.io` to allowed hosts(#377)",
          "author_name": "Tima Mehro",
          "author_login": "timaMehro",
          "committed_at": "2025-11-26T01:57:35Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "a13cf498177fa93a407ea4012fb1432c5596c1eb",
          "body": "Co-authored-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "Version Packages (#376)",
          "author_name": "github-actions[bot]",
          "author_login": "github-actions[bot]",
          "committed_at": "2025-11-13T23:22:02Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "9ecaa295622afd3d4b6f225df0202747d547ef12",
          "body": "* fix(gdu): add Node types reference to generated tokens.ts\n\nFixes TypeScript errors when GDU generates tokens.ts file that uses\nprocess.env.* but lacks proper type declarations.\n\nChanges:\n- Add /// <reference types=\"node\" /> directive to generated tokens.ts\n- Ensures TypeScript can resolve process \n[…]\n.com/claude-code)\n\nCo-Authored-By: Claude <noreply@anthropic.com>\n\n* fix(browserslist): update snapshot by removing outdated browser versions\n\n---------\n\nCo-authored-by: Claude <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix(gdu): add Node types reference to generated tokens.ts (#375)",
          "author_name": "Amir Zahedi",
          "author_login": "amir-zahedi",
          "committed_at": "2025-11-13T23:19:50Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "de977d7cc2ad46113adbb8eba5157b43bbfb408e",
          "body": "Co-authored-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "Version Packages (#374)",
          "author_name": "github-actions[bot]",
          "author_login": "github-actions[bot]",
          "committed_at": "2025-10-13T05:51:55Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "6af5710541d753c90eae2ea31eb2a1fe2e06f1fc",
          "body": "…Compiler (#373)\n\n* fix(gdu): update React Compiler configuration for development build\n\n* fix(gdu): resolve production and development build issues with React Compiler\n\n* style(gdu): format CHANGELOG and webpack configuration\n\n- Improve CHANGELOG markdown formatting with proper line breaks\n- Format webpack loader path for better readability",
          "is_bot": false,
          "headline": "fix(gdu): resolve production and development build issues with React …",
          "author_name": "Amir Zahedi",
          "author_login": "amir-zahedi",
          "committed_at": "2025-10-13T05:49:48Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "553f34c1949e99d5a6bb7317d83b7bbe0721ee3a",
          "body": "Co-authored-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "Version Packages (#372)",
          "author_name": "github-actions[bot]",
          "author_login": "github-actions[bot]",
          "committed_at": "2025-10-13T03:37:48Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "6d19dfe713e70cd9c66e825710d7e67197f3d46e",
          "body": "* fix(gdu): resolve React Compiler production build failures\n\n- Remove duplicate React Compiler processing from Babel config\n- Implement custom webpack loader using babel-plugin-react-compiler v1.0.0\n- Apply critical jsescOption fix for webpack compatibility (React #29120)\n- Upgrade babel-plugin-rea\n[…]\nnction signature and improve loader configuration\n\n* fix(gdu): update babel-plugin-relay to version 20.1.1\n\n* fix(gdu): simplify reactCompilerLoader function signature and improve loader configuration",
          "is_bot": false,
          "headline": "fix(gdu): resolve React Compiler production build failures (#371)",
          "author_name": "Amir Zahedi",
          "author_login": "amir-zahedi",
          "committed_at": "2025-10-13T03:35:04Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "052d64f5a9452195309a2cafb4cf82403748fda0",
          "body": "Co-authored-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "Version Packages (#370)",
          "author_name": "github-actions[bot]",
          "author_login": "github-actions[bot]",
          "committed_at": "2025-10-13T00:18:44Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "c233d8b1a862f42aa340c7afa571dde191872cd1",
          "body": "…n (#369)",
          "is_bot": false,
          "headline": "revert(gdu): downgrade babel-plugin-react-compiler to previous versio…",
          "author_name": "Amir Zahedi",
          "author_login": "amir-zahedi",
          "committed_at": "2025-10-13T00:16:33Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "3f87a4f09237606ba67e9012d9ea3ad06019c6da",
          "body": "Co-authored-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "Version Packages (#368)",
          "author_name": "github-actions[bot]",
          "author_login": "github-actions[bot]",
          "committed_at": "2025-10-08T23:17:35Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "471fae602e8c40b2cbd1f74c335d59c1a7a38095",
          "body": "* chore(gdu): upgrade babel-plugin-react-compiler to 1.0.0\n\nRemove react-compiler-webpack package and update babel-plugin-react-compiler\nfrom beta version to stable 1.0.0 release. Remove webpack loader configuration\nas it's no longer needed with the stable compiler version.\n\n* fix(workflow): update \n[…]\nion constraint\n\n* Update .claude/commands/test.md\n\nCo-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>\n\n---------\n\nCo-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>",
          "is_bot": false,
          "headline": "chore(gdu): upgrade babel-plugin-react-compiler to 1.0.0 (#367)",
          "author_name": "Amir Zahedi",
          "author_login": "amir-zahedi",
          "committed_at": "2025-10-08T23:14:18Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "42e121864b54a299281442e76a8560cdf52b5a18",
          "body": "Co-authored-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "Version Packages (#366)",
          "author_name": "github-actions[bot]",
          "author_login": "github-actions[bot]",
          "committed_at": "2025-09-24T01:46:58Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "a81773cc5df8e207ebc7505cfb20baec668e1ad4",
          "body": "* feat(gdu): implement hot reload for package translations\n\n- Add file watching system to monitor package translation changes\n- Implement automatic change detection and file copying\n- Integrate with webpack HMR for instant updates\n- Add cache busting with version timestamps\n- Clean up watchers on sh\n[…]\ner the reliability of the file watching system.\n\n* Remove obsolete documentation files for package translations and hot reload implementation\n\n---------\n\nCo-authored-by: Claude <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat(gdu): implement hot reload for package translations (#363)",
          "author_name": "Amir Zahedi",
          "author_login": "amir-zahedi",
          "committed_at": "2025-09-24T01:43:43Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "52eefeae8ae7c764ea3244c8d5fcbffe47471a89",
          "body": "* \"Claude PR Assistant workflow\"\n\n* \"Claude Code Review workflow\"",
          "is_bot": false,
          "headline": "Add Claude Code GitHub Workflow (#365)",
          "author_name": "Amir Zahedi",
          "author_login": "amir-zahedi",
          "committed_at": "2025-09-24T01:07:12Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "537ad2e39f3414709f220283e1d893a8ec8f222d",
          "body": "* \"Update Claude PR Assistant workflow\"\n\n* \"Claude Code Review workflow\"\n\n* docs: update README for clarity and formatting improvements",
          "is_bot": false,
          "headline": "Add Claude Code GitHub Workflow (#364)",
          "author_name": "Amir Zahedi",
          "author_login": "amir-zahedi",
          "committed_at": "2025-09-24T01:03:30Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "e8ae57e697b26f139ea9fc0dd274bb72f744fb6c",
          "body": "Fix TypeScript build error by making packageTranslationMergeStrategy\noptional since it defaults to 'prefix' in the constructor anyway.",
          "is_bot": false,
          "headline": "fix(gdu): make packageTranslationMergeStrategy optional in PluginOptions",
          "author_name": "Amir Zahedi",
          "author_login": "amir-zahedi",
          "committed_at": "2025-09-23T23:51:02Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "3e478a405f793e0cf17ed10d1cfac37b149b57aa",
          "body": null,
          "is_bot": false,
          "headline": "docs: update README for clarity and formatting improvements",
          "author_name": "Amir Zahedi",
          "author_login": "amir-zahedi",
          "committed_at": "2025-09-23T23:46:13Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "0efd82a36ece19e8432b5067d1e5eafe5ffb3d3c",
          "body": "Co-authored-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "Version Packages (#362)",
          "author_name": "github-actions[bot]",
          "author_login": "github-actions[bot]",
          "committed_at": "2025-09-23T23:42:54Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "e6a102efb1098c55be282205dfb18805cdab83cd",
          "body": "…e (#361)\n\n* fix(gdu): enable TranslationHashingPlugin in development mode\n\nThe TranslationHashingPlugin was only configured in production webpack config,\ncausing package translations to not be discovered in development mode.\n\nThis fix adds the plugin to webpack.development.config.ts with proper con\n[…]\ntionality\nis now fully integrated and documented inline within the code.\n\n---------\n\nCo-authored-by: Claude <noreply@anthropic.com>\nCo-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>",
          "is_bot": false,
          "headline": "fix(gdu): resolve package translation issues and improve test coverag…",
          "author_name": "Amir Zahedi",
          "author_login": "amir-zahedi",
          "committed_at": "2025-09-23T23:36:37Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "4f276b19061f5a5f8de7a9dbb1b924962e5e0e25",
          "body": "* Initial plan\n\n* feat: add Claude Code GitHub Actions workflow for automated PR reviews\n\nCo-authored-by: amir-zahedi <1334204+amir-zahedi@users.noreply.github.com>\n\n---------\n\nCo-authored-by: copilot-swe-agent[bot] <198982749+Copilot@users.noreply.github.com>\nCo-authored-by: amir-zahedi <1334204+amir-zahedi@users.noreply.github.com>",
          "is_bot": false,
          "headline": "Add Claude Code GitHub Actions Workflow for Automated PR Reviews (#360)",
          "author_name": "Copilot",
          "author_login": "Copilot",
          "committed_at": "2025-09-23T07:20:57Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "82c152714b4bea0c7c6f61cab51a3113edd9d01e",
          "body": "Co-authored-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "Version Packages (#358)",
          "author_name": "github-actions[bot]",
          "author_login": "github-actions[bot]",
          "committed_at": "2025-09-10T05:59:45Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "3bfd29aa81c7fee2cf4971e3248eaf5e902d19dd",
          "body": "…s (#357)\n\n* feat(gdu): add empty manifest generation for MFEs without translations\n\nGenerate placeholder i18n manifest files when no locales directory exists to ensure consistent build output and prevent runtime errors for MFEs that don't require localisation support.\n\n* chore: add changeset for empty i18n manifest support",
          "is_bot": false,
          "headline": "feat(gdu): add empty manifest generation for MFEs without translation…",
          "author_name": "Amir Zahedi",
          "author_login": "amir-zahedi",
          "committed_at": "2025-09-10T05:58:22Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "447b72743d9146354577850724bf2868503c15d5",
          "body": "Co-authored-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "Version Packages (#356)",
          "author_name": "github-actions[bot]",
          "author_login": "github-actions[bot]",
          "committed_at": "2025-09-04T22:16:27Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "969dd6f846d73fce6b368431fb503d252b3fa2ff",
          "body": "…nd local serving (#355)\n\n* feat: Add TranslationHashingPlugin and i18n manifest configuration to webpack setup\n\n* chore: Adds changeset\n\n* Update packages/gdu/config/webpack/plugins/TranslationHashingPlugin.ts\n\nCo-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>\n\n* Update packages/\n[…]\nwserslist config snapshot\n\nRemoved Firefox 130 from supported browsers list as it's no longer within the coverage range\n\n---------\n\nCo-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>",
          "is_bot": false,
          "headline": "fix(gdu): use relative path for translation manifest to support CDN a…",
          "author_name": "Amir Zahedi",
          "author_login": "amir-zahedi",
          "committed_at": "2025-09-04T22:12:54Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "3347c8137b5312d8058ca66097c26cd036801525",
          "body": "Co-authored-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "Version Packages (#354)",
          "author_name": "github-actions[bot]",
          "author_login": "github-actions[bot]",
          "committed_at": "2025-09-03T05:22:10Z",
          "body_truncated": false,
          "is_coding_agent": false
        }
      ],
      "releases_count": 100,
      "commits_last_year": 107,
      "latest_release_at": "2026-03-19T02:42:30Z",
      "latest_release_tag": "@autoguru/eslint-plugin@2.0.1",
      "releases_from_tags": false,
      "days_since_last_push": 6,
      "active_weeks_last_year": 24,
      "days_since_latest_release": 129,
      "mean_days_between_releases": 2.4
    },
    "community": {
      "has_readme": true,
      "has_license": true,
      "has_description": true,
      "has_contributing": false,
      "health_percentage": 37,
      "has_issue_template": false,
      "has_code_of_conduct": false,
      "has_pull_request_template": false
    },
    "ecosystem": {
      "packages": [
        {
          "name": "gdu",
          "exists": true,
          "license": "MIT",
          "keywords": [],
          "ecosystem": "npm",
          "matches_repo": true,
          "registry_url": "https://www.npmjs.com/package/gdu",
          "is_deprecated": false,
          "latest_version": "13.23.0",
          "repository_url": "https://github.com/autoguru-au/octane",
          "versions_count": 352,
          "total_downloads": null,
          "dependents_count": null,
          "deprecation_note": null,
          "maintainers_count": 2,
          "monthly_downloads": 3200,
          "first_published_at": "2019-09-18T23:47:27.130000Z",
          "latest_published_at": "2026-07-20T04:22:12.781000Z",
          "latest_version_yanked": null,
          "days_since_latest_publish": 6
        },
        {
          "name": "@autoguru/tsconfig",
          "exists": true,
          "license": "MIT",
          "keywords": [],
          "ecosystem": "npm",
          "matches_repo": true,
          "registry_url": "https://www.npmjs.com/package/@autoguru/tsconfig",
          "is_deprecated": false,
          "latest_version": "1.3.1",
          "repository_url": "https://github.com/autoguru-au/octane",
          "versions_count": 13,
          "total_downloads": null,
          "dependents_count": null,
          "deprecation_note": null,
          "maintainers_count": 3,
          "monthly_downloads": 1412,
          "first_published_at": "2019-03-01T00:18:34.001000Z",
          "latest_published_at": "2025-02-24T02:10:46.689000Z",
          "latest_version_yanked": null,
          "days_since_latest_publish": 517
        },
        {
          "name": "@autoguru/utilities",
          "exists": true,
          "license": "MIT",
          "keywords": [],
          "ecosystem": "npm",
          "matches_repo": true,
          "registry_url": "https://www.npmjs.com/package/@autoguru/utilities",
          "is_deprecated": false,
          "latest_version": "1.3.3",
          "repository_url": "https://github.com/autoguru-au/octane",
          "versions_count": 66,
          "total_downloads": null,
          "dependents_count": null,
          "deprecation_note": null,
          "maintainers_count": 3,
          "monthly_downloads": 1184,
          "first_published_at": "2019-03-01T00:43:14.408000Z",
          "latest_published_at": "2025-02-26T06:27:59.079000Z",
          "latest_version_yanked": null,
          "days_since_latest_publish": 514
        },
        {
          "name": "create-guru",
          "exists": true,
          "license": "MIT",
          "keywords": [],
          "ecosystem": "npm",
          "matches_repo": true,
          "registry_url": "https://www.npmjs.com/package/create-guru",
          "is_deprecated": false,
          "latest_version": "13.0.0",
          "repository_url": "https://github.com/autoguru-au/octane",
          "versions_count": 59,
          "total_downloads": null,
          "dependents_count": null,
          "deprecation_note": null,
          "maintainers_count": 2,
          "monthly_downloads": 89,
          "first_published_at": "2020-01-21T23:34:14.544000Z",
          "latest_published_at": "2025-07-08T04:46:49.617000Z",
          "latest_version_yanked": null,
          "days_since_latest_publish": 382
        },
        {
          "name": "@autoguru/jest-preset",
          "exists": true,
          "license": "MIT",
          "keywords": [],
          "ecosystem": "npm",
          "matches_repo": true,
          "registry_url": "https://www.npmjs.com/package/@autoguru/jest-preset",
          "is_deprecated": false,
          "latest_version": "3.0.1",
          "repository_url": "https://github.com/autoguru-au/octane",
          "versions_count": 61,
          "total_downloads": null,
          "dependents_count": null,
          "deprecation_note": null,
          "maintainers_count": 3,
          "monthly_downloads": 188,
          "first_published_at": "2019-02-28T01:15:57.474000Z",
          "latest_published_at": "2025-02-24T02:10:46.774000Z",
          "latest_version_yanked": null,
          "days_since_latest_publish": 517
        },
        {
          "name": "@autoguru/babel-preset",
          "exists": true,
          "license": "MIT",
          "keywords": [],
          "ecosystem": "npm",
          "matches_repo": true,
          "registry_url": "https://www.npmjs.com/package/@autoguru/babel-preset",
          "is_deprecated": false,
          "latest_version": "3.2.0",
          "repository_url": "https://github.com/autoguru-au/octane",
          "versions_count": 74,
          "total_downloads": null,
          "dependents_count": null,
          "deprecation_note": null,
          "maintainers_count": 1,
          "monthly_downloads": 1092,
          "first_published_at": "2019-02-11T00:21:56.655000Z",
          "latest_published_at": "2025-02-28T05:45:48.356000Z",
          "latest_version_yanked": null,
          "days_since_latest_publish": 512
        },
        {
          "name": "@autoguru/eslint-plugin",
          "exists": true,
          "license": "MIT",
          "keywords": [],
          "ecosystem": "npm",
          "matches_repo": true,
          "registry_url": "https://www.npmjs.com/package/@autoguru/eslint-plugin",
          "is_deprecated": false,
          "latest_version": "2.0.1",
          "repository_url": "https://github.com/autoguru-au/octane",
          "versions_count": 28,
          "total_downloads": null,
          "dependents_count": null,
          "deprecation_note": null,
          "maintainers_count": 3,
          "monthly_downloads": 228,
          "first_published_at": "2019-08-13T03:43:23.165000Z",
          "latest_published_at": "2026-03-19T02:34:50.991000Z",
          "latest_version_yanked": null,
          "days_since_latest_publish": 129
        },
        {
          "name": "renovate-config-autoguru",
          "exists": true,
          "license": "MIT",
          "keywords": [],
          "ecosystem": "npm",
          "matches_repo": true,
          "registry_url": "https://www.npmjs.com/package/renovate-config-autoguru",
          "is_deprecated": false,
          "latest_version": "1.1.1",
          "repository_url": "https://github.com/autoguru-au/octane",
          "versions_count": 19,
          "total_downloads": null,
          "dependents_count": null,
          "deprecation_note": null,
          "maintainers_count": 1,
          "monthly_downloads": 65,
          "first_published_at": "2019-04-05T03:03:25.182000Z",
          "latest_published_at": "2025-02-24T02:10:46.447000Z",
          "latest_version_yanked": null,
          "days_since_latest_publish": 517
        }
      ]
    },
    "popularity": {
      "forks": 0,
      "stars": 2,
      "watchers": 4,
      "fork_history": {
        "days": [],
        "complete": true,
        "collected": 0,
        "total_forks": 0
      },
      "star_history": null,
      "open_issues_and_prs": 3
    },
    "ai_readiness": {
      "has_nix": false,
      "example_dirs": [],
      "has_llms_txt": false,
      "has_dockerfile": false,
      "has_mcp_signal": false,
      "bootstrap_files": [],
      "api_schema_files": [],
      "has_devcontainer": false,
      "typecheck_configs": [
        "packages/gdu/tsconfig.json",
        "packages/utilities/tsconfig.json"
      ],
      "toolchain_manifests": [],
      "largest_source_bytes": 31971,
      "source_files_sampled": 144,
      "oversized_source_files": 0,
      "agent_instruction_files": [],
      "agent_instruction_max_bytes": null
    },
    "dependencies": {
      "manifests": [
        "package.json"
      ],
      "advisories": {
        "error": null,
        "scope": "published_package",
        "source": "osv",
        "findings": [
          {
            "name": "minimist",
            "direct": false,
            "version": "0.0.10",
            "severity": "critical",
            "ecosystem": "npm",
            "cvss_score": 9.8,
            "advisory_ids": [
              "GHSA-vh95-rmgr-6w4m",
              "GHSA-xvch-5gv4-984h"
            ],
            "fixed_version": "1.2.6",
            "advisory_count": 2,
            "oldest_advisory_days": 2304
          },
          {
            "name": "vm2",
            "direct": false,
            "version": "3.9.2",
            "severity": "critical",
            "ecosystem": "npm",
            "cvss_score": 10,
            "advisory_ids": [
              "GHSA-248r-7h7q-cr24",
              "GHSA-2cm2-m3w5-gp2f",
              "GHSA-47x8-96vw-5wg6",
              "GHSA-4w2j-2rg4-5mjw",
              "GHSA-55hx-c926-fr95",
              "GHSA-6785-pvv7-mvg7",
              "GHSA-6j2x-vhqr-qr7q",
              "GHSA-6pw2-5hjv-9pf7",
              "GHSA-76w7-j9cq-rx2j",
              "GHSA-7jxr-cg7f-gpgv"
            ],
            "fixed_version": "3.11.4",
            "advisory_count": 39,
            "oldest_advisory_days": 1740
          },
          {
            "name": "ip",
            "direct": true,
            "version": "1.1.9",
            "severity": "high",
            "ecosystem": "npm",
            "cvss_score": 8.1,
            "advisory_ids": [
              "GHSA-2p57-rm9w-gvfp"
            ],
            "fixed_version": null,
            "advisory_count": 1,
            "oldest_advisory_days": 783
          },
          {
            "name": "next",
            "direct": true,
            "version": "14.2.35",
            "severity": "high",
            "ecosystem": "npm",
            "cvss_score": 8.6,
            "advisory_ids": [
              "GHSA-36qx-fr4f-26g5",
              "GHSA-3g8h-86w9-wvmq",
              "GHSA-3x4c-7xq6-9pq8",
              "GHSA-4633-3j49-mh5q",
              "GHSA-4c39-4ccg-62r3",
              "GHSA-68g3-v927-f742",
              "GHSA-89xv-2m56-2m9x",
              "GHSA-8h8q-6873-q5fj",
              "GHSA-955p-x3mx-jcvp",
              "GHSA-9g9p-9gw9-jx7f"
            ],
            "fixed_version": "16.2.11",
            "advisory_count": 21,
            "oldest_advisory_days": 179
          },
          {
            "name": "node-static",
            "direct": true,
            "version": "0.7.11",
            "severity": "high",
            "ecosystem": "npm",
            "cvss_score": 7.5,
            "advisory_ids": [
              "GHSA-5g97-whc9-8g7j",
              "GHSA-8r4g-cg4m-x23c"
            ],
            "fixed_version": null,
            "advisory_count": 2,
            "oldest_advisory_days": 1767
          },
          {
            "name": "brace-expansion",
            "direct": false,
            "version": "1.1.16",
            "severity": "high",
            "ecosystem": "npm",
            "cvss_score": 7.5,
            "advisory_ids": [
              "GHSA-mh99-v99m-4gvg"
            ],
            "fixed_version": "5.0.8",
            "advisory_count": 1,
            "oldest_advisory_days": 1
          },
          {
            "name": "form-data",
            "direct": false,
            "version": "2.3.3",
            "severity": "high",
            "ecosystem": "npm",
            "cvss_score": 7.5,
            "advisory_ids": [
              "GHSA-fjxv-7rqg-78g4",
              "GHSA-hmw2-7cc7-3qxx"
            ],
            "fixed_version": "4.0.6",
            "advisory_count": 2,
            "oldest_advisory_days": 369
          },
          {
            "name": "form-data",
            "direct": false,
            "version": "4.0.0",
            "severity": "high",
            "ecosystem": "npm",
            "cvss_score": 7.5,
            "advisory_ids": [
              "GHSA-fjxv-7rqg-78g4",
              "GHSA-hmw2-7cc7-3qxx"
            ],
            "fixed_version": "4.0.6",
            "advisory_count": 2,
            "oldest_advisory_days": 369
          },
          {
            "name": "lodash",
            "direct": false,
            "version": "4.17.21",
            "severity": "high",
            "ecosystem": "npm",
            "cvss_score": 8.1,
            "advisory_ids": [
              "GHSA-f23m-r3pf-42rh",
              "GHSA-r5fr-rjxr-66jc",
              "GHSA-xxjr-mmjv-4gpg"
            ],
            "fixed_version": "4.18.0",
            "advisory_count": 3,
            "oldest_advisory_days": 185
          },
          {
            "name": "marked",
            "direct": false,
            "version": "0.3.19",
            "severity": "high",
            "ecosystem": "npm",
            "cvss_score": 7.5,
            "advisory_ids": [
              "GHSA-5v2h-r2cx-5xgj",
              "GHSA-rrrm-qjm4-v8hf",
              "GHSA-xf5p-87ch-gxw2"
            ],
            "fixed_version": "4.0.10",
            "advisory_count": 3,
            "oldest_advisory_days": 2607
          },
          {
            "name": "minimatch",
            "direct": false,
            "version": "3.0.4",
            "severity": "high",
            "ecosystem": "npm",
            "cvss_score": 7.5,
            "advisory_ids": [
              "GHSA-23c5-xmqv-rm74",
              "GHSA-3ppc-4f35-3m26",
              "GHSA-7r86-cg39-jmmj",
              "GHSA-f8q6-p94x-37v3"
            ],
            "fixed_version": "10.2.3",
            "advisory_count": 4,
            "oldest_advisory_days": 1376
          },
          {
            "name": "node-fetch",
            "direct": false,
            "version": "2.6.1",
            "severity": "high",
            "ecosystem": "npm",
            "cvss_score": 8.8,
            "advisory_ids": [
              "GHSA-r683-j2x4-v87g"
            ],
            "fixed_version": "3.1.1",
            "advisory_count": 1,
            "oldest_advisory_days": 1646
          },
          {
            "name": "nth-check",
            "direct": false,
            "version": "1.0.2",
            "severity": "high",
            "ecosystem": "npm",
            "cvss_score": 7.5,
            "advisory_ids": [
              "GHSA-rp65-9cf3-cjxr"
            ],
            "fixed_version": "2.0.1",
            "advisory_count": 1,
            "oldest_advisory_days": 1769
          },
          {
            "name": "postcss",
            "direct": false,
            "version": "7.0.36",
            "severity": "high",
            "ecosystem": "npm",
            "cvss_score": 7.5,
            "advisory_ids": [
              "GHSA-6g55-p6wh-862q",
              "GHSA-7fh5-64p2-3v2j",
              "GHSA-qx2v-qp2m-jg93",
              "GHSA-r28c-9q8g-f849"
            ],
            "fixed_version": "8.5.18",
            "advisory_count": 4,
            "oldest_advisory_days": 1030
          },
          {
            "name": "postcss",
            "direct": false,
            "version": "7.0.39",
            "severity": "high",
            "ecosystem": "npm",
            "cvss_score": 7.5,
            "advisory_ids": [
              "GHSA-6g55-p6wh-862q",
              "GHSA-7fh5-64p2-3v2j",
              "GHSA-qx2v-qp2m-jg93",
              "GHSA-r28c-9q8g-f849"
            ],
            "fixed_version": "8.5.18",
            "advisory_count": 4,
            "oldest_advisory_days": 1030
          },
          {
            "name": "postcss",
            "direct": false,
            "version": "8.4.31",
            "severity": "high",
            "ecosystem": "npm",
            "cvss_score": 7.5,
            "advisory_ids": [
              "GHSA-6g55-p6wh-862q",
              "GHSA-qx2v-qp2m-jg93",
              "GHSA-r28c-9q8g-f849"
            ],
            "fixed_version": "8.5.18",
            "advisory_count": 3,
            "oldest_advisory_days": 92
          },
          {
            "name": "svgo",
            "direct": false,
            "version": "1.3.2",
            "severity": "high",
            "ecosystem": "npm",
            "cvss_score": 8.2,
            "advisory_ids": [
              "GHSA-2p49-hgcm-8545"
            ],
            "fixed_version": "4.0.2",
            "advisory_count": 1,
            "oldest_advisory_days": 4
          },
          {
            "name": "uuid",
            "direct": false,
            "version": "3.4.0",
            "severity": "high",
            "ecosystem": "npm",
            "cvss_score": 7.5,
            "advisory_ids": [
              "GHSA-w5hq-g745-h8pq"
            ],
            "fixed_version": "13.0.1",
            "advisory_count": 1,
            "oldest_advisory_days": 94
          },
          {
            "name": "uuid",
            "direct": false,
            "version": "8.3.2",
            "severity": "high",
            "ecosystem": "npm",
            "cvss_score": 7.5,
            "advisory_ids": [
              "GHSA-w5hq-g745-h8pq"
            ],
            "fixed_version": "13.0.1",
            "advisory_count": 1,
            "oldest_advisory_days": 94
          },
          {
            "name": "ws",
            "direct": false,
            "version": "7.4.5",
            "severity": "high",
            "ecosystem": "npm",
            "cvss_score": 7.5,
            "advisory_ids": [
              "GHSA-3h5v-q93c-6h6q",
              "GHSA-6fc8-4gx4-v693",
              "GHSA-96hv-2xvq-fx4p"
            ],
            "fixed_version": "8.21.0",
            "advisory_count": 3,
            "oldest_advisory_days": 1884
          },
          {
            "name": "esbuild",
            "direct": false,
            "version": "0.11.23",
            "severity": "moderate",
            "ecosystem": "npm",
            "cvss_score": 5.3,
            "advisory_ids": [
              "GHSA-67mh-4wv8-2f99"
            ],
            "fixed_version": "0.25.0",
            "advisory_count": 1,
            "oldest_advisory_days": 530
          },
          {
            "name": "qs",
            "direct": false,
            "version": "6.5.5",
            "severity": "moderate",
            "ecosystem": "npm",
            "cvss_score": 5.3,
            "advisory_ids": [
              "GHSA-6rw7-vpxm-498p"
            ],
            "fixed_version": "6.14.1",
            "advisory_count": 1,
            "oldest_advisory_days": 207
          },
          {
            "name": "request",
            "direct": false,
            "version": "2.88.2",
            "severity": "moderate",
            "ecosystem": "npm",
            "cvss_score": 6.1,
            "advisory_ids": [
              "GHSA-p8p7-x288-28g6"
            ],
            "fixed_version": "3.0.0",
            "advisory_count": 1,
            "oldest_advisory_days": 1227
          },
          {
            "name": "tough-cookie",
            "direct": false,
            "version": "2.5.0",
            "severity": "moderate",
            "ecosystem": "npm",
            "cvss_score": 6.5,
            "advisory_ids": [
              "GHSA-72xf-g2v4-qvf3"
            ],
            "fixed_version": "4.1.3",
            "advisory_count": 1,
            "oldest_advisory_days": 1120
          },
          {
            "name": "webpack",
            "direct": true,
            "version": "5.96.1",
            "severity": "low",
            "ecosystem": "npm",
            "cvss_score": 3.7,
            "advisory_ids": [
              "GHSA-38r7-794h-5758",
              "GHSA-8fgc-7cc6-rx7x"
            ],
            "fixed_version": "5.104.1",
            "advisory_count": 2,
            "oldest_advisory_days": 170
          }
        ],
        "collected": true,
        "malicious": [],
        "truncated": false,
        "by_severity": {
          "low": 1,
          "high": 18,
          "critical": 2,
          "moderate": 4
        },
        "advisory_count": 105,
        "affected_count": 25,
        "assessed_count": 1328,
        "malicious_count": 0,
        "assessed_package": "npm:gdu@13.23.0",
        "unassessed_count": 0,
        "direct_affected_count": 4
      },
      "ecosystems": [
        "npm"
      ],
      "dependencies": [
        {
          "name": "@babel/helper-annotate-as-pure",
          "manifest": "packages/babel-preset/package.json",
          "ecosystem": "npm",
          "version_constraint": "^7.22.5"
        },
        {
          "name": "@babel/helper-plugin-utils",
          "manifest": "packages/babel-preset/package.json",
          "ecosystem": "npm",
          "version_constraint": "^7.24.5"
        },
        {
          "name": "@babel/plugin-proposal-class-properties",
          "manifest": "packages/babel-preset/package.json",
          "ecosystem": "npm",
          "version_constraint": "^7.18.6"
        },
        {
          "name": "@babel/plugin-proposal-export-default-from",
          "manifest": "packages/babel-preset/package.json",
          "ecosystem": "npm",
          "version_constraint": "^7.24.1"
        },
        {
          "name": "@babel/plugin-proposal-nullish-coalescing-operator",
          "manifest": "packages/babel-preset/package.json",
          "ecosystem": "npm",
          "version_constraint": "^7.18.6"
        },
        {
          "name": "@babel/plugin-proposal-object-rest-spread",
          "manifest": "packages/babel-preset/package.json",
          "ecosystem": "npm",
          "version_constraint": "^7.20.7"
        },
        {
          "name": "@babel/plugin-proposal-optional-chaining",
          "manifest": "packages/babel-preset/package.json",
          "ecosystem": "npm",
          "version_constraint": "^7.21.0"
        },
        {
          "name": "@babel/plugin-syntax-dynamic-import",
          "manifest": "packages/babel-preset/package.json",
          "ecosystem": "npm",
          "version_constraint": "^7.8.3"
        },
        {
          "name": "@babel/plugin-transform-classes",
          "manifest": "packages/babel-preset/package.json",
          "ecosystem": "npm",
          "version_constraint": "^7.24.5"
        },
        {
          "name": "@babel/plugin-transform-react-constant-elements",
          "manifest": "packages/babel-preset/package.json",
          "ecosystem": "npm",
          "version_constraint": "^7.24.1"
        },
        {
          "name": "@babel/plugin-transform-runtime",
          "manifest": "packages/babel-preset/package.json",
          "ecosystem": "npm",
          "version_constraint": "^7.24.3"
        },
        {
          "name": "@babel/plugin-transform-spread",
          "manifest": "packages/babel-preset/package.json",
          "ecosystem": "npm",
          "version_constraint": "^7.24.1"
        },
        {
          "name": "@babel/plugin-transform-strict-mode",
          "manifest": "packages/babel-preset/package.json",
          "ecosystem": "npm",
          "version_constraint": "^7.24.1"
        },
        {
          "name": "@babel/preset-env",
          "manifest": "packages/babel-preset/package.json",
          "ecosystem": "npm",
          "version_constraint": "^7.24.5"
        },
        {
          "name": "@babel/preset-react",
          "manifest": "packages/babel-preset/package.json",
          "ecosystem": "npm",
          "version_constraint": "^7.26.3"
        },
        {
          "name": "@babel/preset-typescript",
          "manifest": "packages/babel-preset/package.json",
          "ecosystem": "npm",
          "version_constraint": "^7.24.1"
        },
        {
          "name": "@babel/runtime-corejs3",
          "manifest": "packages/babel-preset/package.json",
          "ecosystem": "npm",
          "version_constraint": "^7.24.5"
        },
        {
          "name": "babel-plugin-dev-expression",
          "manifest": "packages/babel-preset/package.json",
          "ecosystem": "npm",
          "version_constraint": "^0.2.3"
        },
        {
          "name": "babel-plugin-macros",
          "manifest": "packages/babel-preset/package.json",
          "ecosystem": "npm",
          "version_constraint": "^3.1.0"
        },
        {
          "name": "browserslist",
          "manifest": "packages/browserslist-config/package.json",
          "ecosystem": "npm",
          "version_constraint": "^4.25.1"
        },
        {
          "name": "gdu",
          "manifest": "packages/create-guru/package.json",
          "ecosystem": "npm",
          "version_constraint": "^13.0.0"
        },
        {
          "name": "mri",
          "manifest": "packages/create-guru/package.json",
          "ecosystem": "npm",
          "version_constraint": "^1.1.6"
        },
        {
          "name": "@eslint/compat",
          "manifest": "packages/eslint-plugin/package.json",
          "ecosystem": "npm",
          "version_constraint": "^1.2.6"
        },
        {
          "name": "@eslint/eslintrc",
          "manifest": "packages/eslint-plugin/package.json",
          "ecosystem": "npm",
          "version_constraint": "^3.2.0"
        },
        {
          "name": "@eslint/js",
          "manifest": "packages/eslint-plugin/package.json",
          "ecosystem": "npm",
          "version_constraint": "^9.20.0"
        },
        {
          "name": "@typescript-eslint/parser",
          "manifest": "packages/eslint-plugin/package.json",
          "ecosystem": "npm",
          "version_constraint": "^8.24.1"
        },
        {
          "name": "eslint-config-prettier",
          "manifest": "packages/eslint-plugin/package.json",
          "ecosystem": "npm",
          "version_constraint": "^10.0.1"
        },
        {
          "name": "eslint-import-resolver-typescript",
          "manifest": "packages/eslint-plugin/package.json",
          "ecosystem": "npm",
          "version_constraint": "^3.8.2"
        },
        {
          "name": "eslint-plugin-import",
          "manifest": "packages/eslint-plugin/package.json",
          "ecosystem": "npm",
          "version_constraint": "^2.31.0"
        },
        {
          "name": "eslint-plugin-jest",
          "manifest": "packages/eslint-plugin/package.json",
          "ecosystem": "npm",
          "version_constraint": "^26.9.0"
        },
        {
          "name": "eslint-plugin-jsx-a11y",
          "manifest": "packages/eslint-plugin/package.json",
          "ecosystem": "npm",
          "version_constraint": "^6.10.2"
        },
        {
          "name": "eslint-plugin-promise",
          "manifest": "packages/eslint-plugin/package.json",
          "ecosystem": "npm",
          "version_constraint": "^7.2.1"
        },
        {
          "name": "eslint-plugin-react",
          "manifest": "packages/eslint-plugin/package.json",
          "ecosystem": "npm",
          "version_constraint": "^7.37.4"
        },
        {
          "name": "eslint-plugin-react-hooks",
          "manifest": "packages/eslint-plugin/package.json",
          "ecosystem": "npm",
          "version_constraint": "^5.1.0"
        },
        {
          "name": "eslint-plugin-sonarjs",
          "manifest": "packages/eslint-plugin/package.json",
          "ecosystem": "npm",
          "version_constraint": "^3.0.2"
        },
        {
          "name": "eslint-plugin-unicorn",
          "manifest": "packages/eslint-plugin/package.json",
          "ecosystem": "npm",
          "version_constraint": "^56.0.0"
        },
        {
          "name": "globals",
          "manifest": "packages/eslint-plugin/package.json",
          "ecosystem": "npm",
          "version_constraint": "^15.15.0"
        },
        {
          "name": "typescript-eslint",
          "manifest": "packages/eslint-plugin/package.json",
          "ecosystem": "npm",
          "version_constraint": "^8.24.1"
        },
        {
          "name": "@2fd/graphdoc",
          "manifest": "packages/gdu/package.json",
          "ecosystem": "npm",
          "version_constraint": "^2.4.0"
        },
        {
          "name": "@autoguru/babel-preset",
          "manifest": "packages/gdu/package.json",
          "ecosystem": "npm",
          "version_constraint": "^3.2.0"
        },
        {
          "name": "@autoguru/tsconfig",
          "manifest": "packages/gdu/package.json",
          "ecosystem": "npm",
          "version_constraint": "1.3.1"
        },
        {
          "name": "@autoguru/utilities",
          "manifest": "packages/gdu/package.json",
          "ecosystem": "npm",
          "version_constraint": "^1.3.2"
        },
        {
          "name": "@babel/helper-plugin-utils",
          "manifest": "packages/gdu/package.json",
          "ecosystem": "npm",
          "version_constraint": "^7.24.5"
        },
        {
          "name": "@babel/preset-env",
          "manifest": "packages/gdu/package.json",
          "ecosystem": "npm",
          "version_constraint": "^7.24.5"
        },
        {
          "name": "@babel/preset-react",
          "manifest": "packages/gdu/package.json",
          "ecosystem": "npm",
          "version_constraint": "^7.26.3"
        },
        {
          "name": "@babel/preset-typescript",
          "manifest": "packages/gdu/package.json",
          "ecosystem": "npm",
          "version_constraint": "^7.24.1"
        },
        {
          "name": "@babel/runtime-corejs3",
          "manifest": "packages/gdu/package.json",
          "ecosystem": "npm",
          "version_constraint": "^7.24.5"
        },
        {
          "name": "@babel/template",
          "manifest": "packages/gdu/package.json",
          "ecosystem": "npm",
          "version_constraint": "^7.14.5"
        },
        {
          "name": "@graphql-cli/generate",
          "manifest": "packages/gdu/package.json",
          "ecosystem": "npm",
          "version_constraint": "^4.1.0"
        },
        {
          "name": "@graphql-inspector/diff-command",
          "manifest": "packages/gdu/package.json",
          "ecosystem": "npm",
          "version_constraint": "^3.3.0"
        },
        {
          "name": "@graphql-tools/json-file-loader",
          "manifest": "packages/gdu/package.json",
          "ecosystem": "npm",
          "version_constraint": "^6.2.6"
        },
        {
          "name": "@vanilla-extract/babel-plugin",
          "manifest": "packages/gdu/package.json",
          "ecosystem": "npm",
          "version_constraint": "^1.2.0"
        },
        {
          "name": "@vanilla-extract/css",
          "manifest": "packages/gdu/package.json",
          "ecosystem": "npm",
          "version_constraint": "^1.9.1"
        },
        {
          "name": "@vanilla-extract/dynamic",
          "manifest": "packages/gdu/package.json",
          "ecosystem": "npm",
          "version_constraint": "^2.0.2"
        },
        {
          "name": "@vanilla-extract/next-plugin",
          "manifest": "packages/gdu/package.json",
          "ecosystem": "npm",
          "version_constraint": "^2.1.1"
        },
        {
          "name": "@vanilla-extract/vite-plugin",
          "manifest": "packages/gdu/package.json",
          "ecosystem": "npm",
          "version_constraint": "^5.0.0"
        },
        {
          "name": "@vanilla-extract/webpack-plugin",
          "manifest": "packages/gdu/package.json",
          "ecosystem": "npm",
          "version_constraint": "^2.2.0"
        },
        {
          "name": "babel-loader",
          "manifest": "packages/gdu/package.json",
          "ecosystem": "npm",
          "version_constraint": "^9.1.3"
        },
        {
          "name": "babel-plugin-react-compiler",
          "manifest": "packages/gdu/package.json",
          "ecosystem": "npm",
          "version_constraint": "^1.0.0"
        },
        {
          "name": "babel-plugin-relay",
          "manifest": "packages/gdu/package.json",
          "ecosystem": "npm",
          "version_constraint": "^20.1.1"
        },
        {
          "name": "clean-webpack-plugin",
          "manifest": "packages/gdu/package.json",
          "ecosystem": "npm",
          "version_constraint": "^4.0.0-alpha.0"
        },
        {
          "name": "core-js",
          "manifest": "packages/gdu/package.json",
          "ecosystem": "npm",
          "version_constraint": "^3.40.0"
        },
        {
          "name": "css-loader",
          "manifest": "packages/gdu/package.json",
          "ecosystem": "npm",
          "version_constraint": "^6.7.1"
        },
        {
          "name": "cssnano",
          "manifest": "packages/gdu/package.json",
          "ecosystem": "npm",
          "version_constraint": "^4.1.10"
        },
        {
          "name": "date-fns",
          "manifest": "packages/gdu/package.json",
          "ecosystem": "npm",
          "version_constraint": "^2.29.3"
        },
        {
          "name": "debug",
          "manifest": "packages/gdu/package.json",
          "ecosystem": "npm",
          "version_constraint": "^4.3.1"
        },
        {
          "name": "deepmerge",
          "manifest": "packages/gdu/package.json",
          "ecosystem": "npm",
          "version_constraint": "^4.2.2"
        },
        {
          "name": "diary",
          "manifest": "packages/gdu/package.json",
          "ecosystem": "npm",
          "version_constraint": "^0.0.12"
        },
        {
          "name": "dotenv-webpack",
          "manifest": "packages/gdu/package.json",
          "ecosystem": "npm",
          "version_constraint": "^7.1.0"
        },
        {
          "name": "ensure-gitignore",
          "manifest": "packages/gdu/package.json",
          "ecosystem": "npm",
          "version_constraint": "^1.1.2"
        },
        {
          "name": "env-ci",
          "manifest": "packages/gdu/package.json",
          "ecosystem": "npm",
          "version_constraint": "^5.0.2"
        },
        {
          "name": "execa",
          "manifest": "packages/gdu/package.json",
          "ecosystem": "npm",
          "version_constraint": "^5.0.0"
        },
        {
          "name": "find-up",
          "manifest": "packages/gdu/package.json",
          "ecosystem": "npm",
          "version_constraint": "^5.0.0"
        },
        {
          "name": "glob",
          "manifest": "packages/gdu/package.json",
          "ecosystem": "npm",
          "version_constraint": "^11.0.1"
        },
        {
          "name": "graphql",
          "manifest": "packages/gdu/package.json",
          "ecosystem": "npm",
          "version_constraint": "^15.5.0"
        },
        {
          "name": "graphql-config",
          "manifest": "packages/gdu/package.json",
          "ecosystem": "npm",
          "version_constraint": "^3.2.0"
        },
        {
          "name": "graphql-schema-diff",
          "manifest": "packages/gdu/package.json",
          "ecosystem": "npm",
          "version_constraint": "^2.5.0"
        },
        {
          "name": "html-webpack-plugin",
          "manifest": "packages/gdu/package.json",
          "ecosystem": "npm",
          "version_constraint": "^5.6.3"
        },
        {
          "name": "ip",
          "manifest": "packages/gdu/package.json",
          "ecosystem": "npm",
          "version_constraint": "^1.1.5"
        },
        {
          "name": "js-yaml",
          "manifest": "packages/gdu/package.json",
          "ecosystem": "npm",
          "version_constraint": "^3.14.0"
        },
        {
          "name": "js-yaml-loader",
          "manifest": "packages/gdu/package.json",
          "ecosystem": "npm",
          "version_constraint": "^1.2.2"
        },
        {
          "name": "kleur",
          "manifest": "packages/gdu/package.json",
          "ecosystem": "npm",
          "version_constraint": "^4.1.4"
        },
        {
          "name": "mini-css-extract-plugin",
          "manifest": "packages/gdu/package.json",
          "ecosystem": "npm",
          "version_constraint": "^2.4.2"
        },
        {
          "name": "mkdirp",
          "manifest": "packages/gdu/package.json",
          "ecosystem": "npm",
          "version_constraint": "^1.0.4"
        },
        {
          "name": "next",
          "manifest": "packages/gdu/package.json",
          "ecosystem": "npm",
          "version_constraint": "^14.2.3"
        },
        {
          "name": "node-fetch",
          "manifest": "packages/gdu/package.json",
          "ecosystem": "npm",
          "version_constraint": "^2.6.1"
        },
        {
          "name": "node-static",
          "manifest": "packages/gdu/package.json",
          "ecosystem": "npm",
          "version_constraint": "^0.7.11"
        },
        {
          "name": "null-loader",
          "manifest": "packages/gdu/package.json",
          "ecosystem": "npm",
          "version_constraint": "^4.0.1"
        },
        {
          "name": "open",
          "manifest": "packages/gdu/package.json",
          "ecosystem": "npm",
          "version_constraint": "^8.4.0"
        },
        {
          "name": "postcss-flexbugs-fixes",
          "manifest": "packages/gdu/package.json",
          "ecosystem": "npm",
          "version_constraint": "^4.2.1"
        },
        {
          "name": "postcss-loader",
          "manifest": "packages/gdu/package.json",
          "ecosystem": "npm",
          "version_constraint": "^3.0.0"
        },
        {
          "name": "postcss-preset-env",
          "manifest": "packages/gdu/package.json",
          "ecosystem": "npm",
          "version_constraint": "^6.7.0"
        },
        {
          "name": "prettier",
          "manifest": "packages/gdu/package.json",
          "ecosystem": "npm",
          "version_constraint": "^3.5.1"
        },
        {
          "name": "react-compiler-webpack",
          "manifest": "packages/gdu/package.json",
          "ecosystem": "npm",
          "version_constraint": "^0.1.2"
        },
        {
          "name": "recursive-readdir",
          "manifest": "packages/gdu/package.json",
          "ecosystem": "npm",
          "version_constraint": "^2.2.2"
        },
        {
          "name": "resolve-url-loader",
          "manifest": "packages/gdu/package.json",
          "ecosystem": "npm",
          "version_constraint": "^3.1.2"
        },
        {
          "name": "sade",
          "manifest": "packages/gdu/package.json",
          "ecosystem": "npm",
          "version_constraint": "^1.7.4"
        },
        {
          "name": "tapable",
          "manifest": "packages/gdu/package.json",
          "ecosystem": "npm",
          "version_constraint": "^2.2.0"
        },
        {
          "name": "terser",
          "manifest": "packages/gdu/package.json",
          "ecosystem": "npm",
          "version_constraint": "^5.31.1"
        },
        {
          "name": "terser-webpack-plugin",
          "manifest": "packages/gdu/package.json",
          "ecosystem": "npm",
          "version_constraint": "^5.3.11"
        },
        {
          "name": "ts-dedent",
          "manifest": "packages/gdu/package.json",
          "ecosystem": "npm",
          "version_constraint": "^2.2.0"
        },
        {
          "name": "ts-node",
          "manifest": "packages/gdu/package.json",
          "ecosystem": "npm",
          "version_constraint": "^9.0.0"
        },
        {
          "name": "tsconfig-paths-webpack-plugin",
          "manifest": "packages/gdu/package.json",
          "ecosystem": "npm",
          "version_constraint": "^3.5.2"
        },
        {
          "name": "url-loader",
          "manifest": "packages/gdu/package.json",
          "ecosystem": "npm",
          "version_constraint": "^4.1.1"
        },
        {
          "name": "vite",
          "manifest": "packages/gdu/package.json",
          "ecosystem": "npm",
          "version_constraint": "^8.1.3"
        },
        {
          "name": "vite-tsconfig-paths",
          "manifest": "packages/gdu/package.json",
          "ecosystem": "npm",
          "version_constraint": "^5.1.0"
        },
        {
          "name": "webpack",
          "manifest": "packages/gdu/package.json",
          "ecosystem": "npm",
          "version_constraint": "5.96.1"
        },
        {
          "name": "webpack-dev-server",
          "manifest": "packages/gdu/package.json",
          "ecosystem": "npm",
          "version_constraint": "^5.2.0"
        },
        {
          "name": "whatwg-fetch",
          "manifest": "packages/gdu/package.json",
          "ecosystem": "npm",
          "version_constraint": "^3.6.2"
        },
        {
          "name": "@autoguru/babel-preset",
          "manifest": "packages/jest-preset/package.json",
          "ecosystem": "npm",
          "version_constraint": "^3.1.2"
        },
        {
          "name": "@babel/core",
          "manifest": "packages/jest-preset/package.json",
          "ecosystem": "npm",
          "version_constraint": "^7.15.0"
        },
        {
          "name": "@babel/preset-typescript",
          "manifest": "packages/jest-preset/package.json",
          "ecosystem": "npm",
          "version_constraint": "^7.24.1"
        },
        {
          "name": "babel-jest",
          "manifest": "packages/jest-preset/package.json",
          "ecosystem": "npm",
          "version_constraint": "^26.6.3"
        },
        {
          "name": "tiny-invariant",
          "manifest": "packages/utilities/package.json",
          "ecosystem": "npm",
          "version_constraint": "^1.0.6"
        },
        {
          "name": "tiny-warning",
          "manifest": "packages/utilities/package.json",
          "ecosystem": "npm",
          "version_constraint": "^1.0.3"
        }
      ],
      "all_dependencies": {
        "error": null,
        "source": "github-sbom",
        "packages": [
          {
            "name": "@2fd/graphdoc",
            "direct": true,
            "version": "^2.4.0",
            "ecosystem": "npm"
          },
          {
            "name": "@autoguru/babel-preset",
            "direct": true,
            "version": "^3.1.2",
            "ecosystem": "npm"
          },
          {
            "name": "@autoguru/babel-preset",
            "direct": true,
            "version": "^3.2.0",
            "ecosystem": "npm"
          },
          {
            "name": "@autoguru/tsconfig",
            "direct": true,
            "version": "*",
            "ecosystem": "npm"
          },
          {
            "name": "@autoguru/tsconfig",
            "direct": true,
            "version": "1.3.1",
            "ecosystem": "npm"
          },
          {
            "name": "@autoguru/utilities",
            "direct": true,
            "version": "^1.3.2",
            "ecosystem": "npm"
          },
          {
            "name": "@babel/core",
            "direct": true,
            "version": "^7.15.0",
            "ecosystem": "npm"
          },
          {
            "name": "@babel/helper-annotate-as-pure",
            "direct": true,
            "version": "^7.22.5",
            "ecosystem": "npm"
          },
          {
            "name": "@babel/helper-plugin-utils",
            "direct": true,
            "version": "^7.24.5",
            "ecosystem": "npm"
          },
          {
            "name": "@babel/plugin-proposal-class-properties",
            "direct": true,
            "version": "^7.18.6",
            "ecosystem": "npm"
          },
          {
            "name": "@babel/plugin-proposal-export-default-from",
            "direct": true,
            "version": "^7.24.1",
            "ecosystem": "npm"
          },
          {
            "name": "@babel/plugin-proposal-nullish-coalescing-operator",
            "direct": true,
            "version": "^7.18.6",
            "ecosystem": "npm"
          },
          {
            "name": "@babel/plugin-proposal-object-rest-spread",
            "direct": true,
            "version": "^7.20.7",
            "ecosystem": "npm"
          },
          {
            "name": "@babel/plugin-proposal-optional-chaining",
            "direct": true,
            "version": "^7.21.0",
            "ecosystem": "npm"
          },
          {
            "name": "@babel/plugin-syntax-dynamic-import",
            "direct": true,
            "version": "^7.8.3",
            "ecosystem": "npm"
          },
          {
            "name": "@babel/plugin-transform-classes",
            "direct": true,
            "version": "^7.24.5",
            "ecosystem": "npm"
          },
          {
            "name": "@babel/plugin-transform-react-constant-elements",
            "direct": true,
            "version": "^7.24.1",
            "ecosystem": "npm"
          },
          {
            "name": "@babel/plugin-transform-runtime",
            "direct": true,
            "version": "^7.24.3",
            "ecosystem": "npm"
          },
          {
            "name": "@babel/plugin-transform-spread",
            "direct": true,
            "version": "^7.24.1",
            "ecosystem": "npm"
          },
          {
            "name": "@babel/plugin-transform-strict-mode",
            "direct": true,
            "version": "^7.24.1",
            "ecosystem": "npm"
          },
          {
            "name": "@babel/preset-env",
            "direct": true,
            "version": "^7.24.5",
            "ecosystem": "npm"
          },
          {
            "name": "@babel/preset-react",
            "direct": true,
            "version": "^7.26.3",
            "ecosystem": "npm"
          },
          {
            "name": "@babel/preset-typescript",
            "direct": true,
            "version": "^7.24.1",
            "ecosystem": "npm"
          },
          {
            "name": "@babel/runtime-corejs3",
            "direct": true,
            "version": "^7.24.5",
            "ecosystem": "npm"
          },
          {
            "name": "@babel/template",
            "direct": true,
            "version": "^7.14.5",
            "ecosystem": "npm"
          },
          {
            "name": "@eslint/compat",
            "direct": true,
            "version": "^1.2.6",
            "ecosystem": "npm"
          },
          {
            "name": "@eslint/eslintrc",
            "direct": true,
            "version": "^3.2.0",
            "ecosystem": "npm"
          },
          {
            "name": "@eslint/js",
            "direct": true,
            "version": "^9.20.0",
            "ecosystem": "npm"
          },
          {
            "name": "@graphql-cli/generate",
            "direct": true,
            "version": "^4.1.0",
            "ecosystem": "npm"
          },
          {
            "name": "@graphql-inspector/diff-command",
            "direct": true,
            "version": "^3.3.0",
            "ecosystem": "npm"
          },
          {
            "name": "@graphql-tools/json-file-loader",
            "direct": true,
            "version": "^6.2.6",
            "ecosystem": "npm"
          },
          {
            "name": "@typescript-eslint/parser",
            "direct": true,
            "version": "^8.24.1",
            "ecosystem": "npm"
          },
          {
            "name": "@vanilla-extract/babel-plugin",
            "direct": true,
            "version": "^1.2.0",
            "ecosystem": "npm"
          },
          {
            "name": "@vanilla-extract/css",
            "direct": true,
            "version": "^1.9.1",
            "ecosystem": "npm"
          },
          {
            "name": "@vanilla-extract/dynamic",
            "direct": true,
            "version": "^2.0.2",
            "ecosystem": "npm"
          },
          {
            "name": "@vanilla-extract/next-plugin",
            "direct": true,
            "version": "^2.1.1",
            "ecosystem": "npm"
          },
          {
            "name": "@vanilla-extract/vite-plugin",
            "direct": true,
            "version": "^5.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "@vanilla-extract/webpack-plugin",
            "direct": true,
            "version": "^2.2.0",
            "ecosystem": "npm"
          },
          {
            "name": "babel-jest",
            "direct": true,
            "version": "^26.6.3",
            "ecosystem": "npm"
          },
          {
            "name": "babel-loader",
            "direct": true,
            "version": "^9.1.3",
            "ecosystem": "npm"
          },
          {
            "name": "babel-plugin-dev-expression",
            "direct": true,
            "version": "^0.2.3",
            "ecosystem": "npm"
          },
          {
            "name": "babel-plugin-macros",
            "direct": true,
            "version": "^3.1.0",
            "ecosystem": "npm"
          },
          {
            "name": "babel-plugin-react-compiler",
            "direct": true,
            "version": "^1.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "babel-plugin-relay",
            "direct": true,
            "version": "^20.1.1",
            "ecosystem": "npm"
          },
          {
            "name": "browserslist",
            "direct": true,
            "version": "^4.25.1",
            "ecosystem": "npm"
          },
          {
            "name": "clean-webpack-plugin",
            "direct": true,
            "version": "^4.0.0-alpha.0",
            "ecosystem": "npm"
          },
          {
            "name": "core-js",
            "direct": true,
            "version": "^3.40.0",
            "ecosystem": "npm"
          },
          {
            "name": "css-loader",
            "direct": true,
            "version": "^6.7.1",
            "ecosystem": "npm"
          },
          {
            "name": "cssnano",
            "direct": true,
            "version": "^4.1.10",
            "ecosystem": "npm"
          },
          {
            "name": "date-fns",
            "direct": true,
            "version": "^2.29.3",
            "ecosystem": "npm"
          },
          {
            "name": "debug",
            "direct": true,
            "version": "^4.3.1",
            "ecosystem": "npm"
          },
          {
            "name": "deepmerge",
            "direct": true,
            "version": "^4.2.2",
            "ecosystem": "npm"
          },
          {
            "name": "diary",
            "direct": true,
            "version": "^0.0.12",
            "ecosystem": "npm"
          },
          {
            "name": "dotenv-webpack",
            "direct": true,
            "version": "^7.1.0",
            "ecosystem": "npm"
          },
          {
            "name": "ensure-gitignore",
            "direct": true,
            "version": "^1.1.2",
            "ecosystem": "npm"
          },
          {
            "name": "env-ci",
            "direct": true,
            "version": "^5.0.2",
            "ecosystem": "npm"
          },
          {
            "name": "eslint-config-prettier",
            "direct": true,
            "version": "^10.0.1",
            "ecosystem": "npm"
          },
          {
            "name": "eslint-import-resolver-typescript",
            "direct": true,
            "version": "^3.8.2",
            "ecosystem": "npm"
          },
          {
            "name": "eslint-plugin-import",
            "direct": true,
            "version": "^2.31.0",
            "ecosystem": "npm"
          },
          {
            "name": "eslint-plugin-jest",
            "direct": true,
            "version": "^26.9.0",
            "ecosystem": "npm"
          },
          {
            "name": "eslint-plugin-jsx-a11y",
            "direct": true,
            "version": "^6.10.2",
            "ecosystem": "npm"
          },
          {
            "name": "eslint-plugin-promise",
            "direct": true,
            "version": "^7.2.1",
            "ecosystem": "npm"
          },
          {
            "name": "eslint-plugin-react",
            "direct": true,
            "version": "^7.37.4",
            "ecosystem": "npm"
          },
          {
            "name": "eslint-plugin-react-hooks",
            "direct": true,
            "version": "^5.1.0",
            "ecosystem": "npm"
          },
          {
            "name": "eslint-plugin-sonarjs",
            "direct": true,
            "version": "^3.0.2",
            "ecosystem": "npm"
          },
          {
            "name": "eslint-plugin-unicorn",
            "direct": true,
            "version": "^56.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "execa",
            "direct": true,
            "version": "^5.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "find-up",
            "direct": true,
            "version": "^5.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "gdu",
            "direct": true,
            "version": "^13.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "glob",
            "direct": true,
            "version": "^11.0.1",
            "ecosystem": "npm"
          },
          {
            "name": "globals",
            "direct": true,
            "version": "^15.15.0",
            "ecosystem": "npm"
          },
          {
            "name": "graphql",
            "direct": true,
            "version": "^15.5.0",
            "ecosystem": "npm"
          },
          {
            "name": "graphql-config",
            "direct": true,
            "version": "^3.2.0",
            "ecosystem": "npm"
          },
          {
            "name": "graphql-schema-diff",
            "direct": true,
            "version": "^2.5.0",
            "ecosystem": "npm"
          },
          {
            "name": "html-webpack-plugin",
            "direct": true,
            "version": "^5.6.3",
            "ecosystem": "npm"
          },
          {
            "name": "ip",
            "direct": true,
            "version": "^1.1.5",
            "ecosystem": "npm"
          },
          {
            "name": "js-yaml",
            "direct": true,
            "version": "^3.14.0",
            "ecosystem": "npm"
          },
          {
            "name": "js-yaml-loader",
            "direct": true,
            "version": "^1.2.2",
            "ecosystem": "npm"
          },
          {
            "name": "kleur",
            "direct": true,
            "version": "^4.1.4",
            "ecosystem": "npm"
          },
          {
            "name": "mini-css-extract-plugin",
            "direct": true,
            "version": "^2.4.2",
            "ecosystem": "npm"
          },
          {
            "name": "mkdirp",
            "direct": true,
            "version": "^1.0.4",
            "ecosystem": "npm"
          },
          {
            "name": "mri",
            "direct": true,
            "version": "^1.1.6",
            "ecosystem": "npm"
          },
          {
            "name": "next",
            "direct": true,
            "version": "^14.2.3",
            "ecosystem": "npm"
          },
          {
            "name": "node-fetch",
            "direct": true,
            "version": "^2.6.1",
            "ecosystem": "npm"
          },
          {
            "name": "node-static",
            "direct": true,
            "version": "^0.7.11",
            "ecosystem": "npm"
          },
          {
            "name": "null-loader",
            "direct": true,
            "version": "^4.0.1",
            "ecosystem": "npm"
          },
          {
            "name": "open",
            "direct": true,
            "version": "^8.4.0",
            "ecosystem": "npm"
          },
          {
            "name": "postcss-flexbugs-fixes",
            "direct": true,
            "version": "^4.2.1",
            "ecosystem": "npm"
          },
          {
            "name": "postcss-loader",
            "direct": true,
            "version": "^3.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "postcss-preset-env",
            "direct": true,
            "version": "^6.7.0",
            "ecosystem": "npm"
          },
          {
            "name": "prettier",
            "direct": true,
            "version": "^3.5.1",
            "ecosystem": "npm"
          },
          {
            "name": "react-compiler-webpack",
            "direct": true,
            "version": "^0.1.2",
            "ecosystem": "npm"
          },
          {
            "name": "recursive-readdir",
            "direct": true,
            "version": "^2.2.2",
            "ecosystem": "npm"
          },
          {
            "name": "resolve-url-loader",
            "direct": true,
            "version": "^3.1.2",
            "ecosystem": "npm"
          },
          {
            "name": "sade",
            "direct": true,
            "version": "^1.7.4",
            "ecosystem": "npm"
          },
          {
            "name": "tapable",
            "direct": true,
            "version": "^2.2.0",
            "ecosystem": "npm"
          },
          {
            "name": "terser",
            "direct": true,
            "version": "^5.31.1",
            "ecosystem": "npm"
          },
          {
            "name": "terser-webpack-plugin",
            "direct": true,
            "version": "^5.3.11",
            "ecosystem": "npm"
          },
          {
            "name": "tiny-invariant",
            "direct": true,
            "version": "^1.0.6",
            "ecosystem": "npm"
          },
          {
            "name": "tiny-warning",
            "direct": true,
            "version": "^1.0.3",
            "ecosystem": "npm"
          },
          {
            "name": "ts-dedent",
            "direct": true,
            "version": "^2.2.0",
            "ecosystem": "npm"
          },
          {
            "name": "ts-node",
            "direct": true,
            "version": "^9.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "tsconfig-paths-webpack-plugin",
            "direct": true,
            "version": "^3.5.2",
            "ecosystem": "npm"
          },
          {
            "name": "typescript-eslint",
            "direct": true,
            "version": "^8.24.1",
            "ecosystem": "npm"
          },
          {
            "name": "url-loader",
            "direct": true,
            "version": "^4.1.1",
            "ecosystem": "npm"
          },
          {
            "name": "vite",
            "direct": true,
            "version": "^8.1.3",
            "ecosystem": "npm"
          },
          {
            "name": "vite-tsconfig-paths",
            "direct": true,
            "version": "^5.1.0",
            "ecosystem": "npm"
          },
          {
            "name": "webpack",
            "direct": true,
            "version": "5.96.1",
            "ecosystem": "npm"
          },
          {
            "name": "webpack-dev-server",
            "direct": true,
            "version": "^5.2.0",
            "ecosystem": "npm"
          },
          {
            "name": "whatwg-fetch",
            "direct": true,
            "version": "^3.6.2",
            "ecosystem": "npm"
          },
          {
            "name": "@autoguru/eslint-plugin",
            "direct": false,
            "version": "*",
            "ecosystem": "npm"
          },
          {
            "name": "@autoguru/jest-preset",
            "direct": false,
            "version": "*",
            "ecosystem": "npm"
          },
          {
            "name": "@changesets/cli",
            "direct": false,
            "version": "^2.28.0",
            "ecosystem": "npm"
          },
          {
            "name": "@manypkg/cli",
            "direct": false,
            "version": "^0.23.0",
            "ecosystem": "npm"
          },
          {
            "name": "@types/babel-types",
            "direct": false,
            "version": "^7.0.10",
            "ecosystem": "npm"
          },
          {
            "name": "@types/eslint",
            "direct": false,
            "version": "^9.6.1",
            "ecosystem": "npm"
          },
          {
            "name": "@types/glob",
            "direct": false,
            "version": "^7.1.4",
            "ecosystem": "npm"
          },
          {
            "name": "@types/node",
            "direct": false,
            "version": "^16.4.13",
            "ecosystem": "npm"
          },
          {
            "name": "@types/node-fetch",
            "direct": false,
            "version": "^2.5.12",
            "ecosystem": "npm"
          },
          {
            "name": "@types/sade",
            "direct": false,
            "version": "^1.7.3",
            "ecosystem": "npm"
          },
          {
            "name": "@types/webpack",
            "direct": false,
            "version": "^5.28.5",
            "ecosystem": "npm"
          },
          {
            "name": "@types/webpack-dev-server",
            "direct": false,
            "version": "^4.7.2",
            "ecosystem": "npm"
          },
          {
            "name": "baseline-browser-mapping",
            "direct": false,
            "version": "^2.10.42",
            "ecosystem": "npm"
          },
          {
            "name": "browserslist-config-autoguru",
            "direct": false,
            "version": "*",
            "ecosystem": "npm"
          },
          {
            "name": "caniuse-lite",
            "direct": false,
            "version": "^1.0.30001803",
            "ecosystem": "npm"
          },
          {
            "name": "dotenv",
            "direct": false,
            "version": "^16.4.7",
            "ecosystem": "npm"
          },
          {
            "name": "eslint",
            "direct": false,
            "version": "^9.20.1",
            "ecosystem": "npm"
          },
          {
            "name": "jest",
            "direct": false,
            "version": "^26.6.1",
            "ecosystem": "npm"
          },
          {
            "name": "nx",
            "direct": false,
            "version": "^20.4.5",
            "ecosystem": "npm"
          },
          {
            "name": "plop",
            "direct": false,
            "version": "^4.0.1",
            "ecosystem": "npm"
          },
          {
            "name": "rollup-plugin-visualizer",
            "direct": false,
            "version": "^5.12.0",
            "ecosystem": "npm"
          },
          {
            "name": "typescript",
            "direct": false,
            "version": "5.3.3",
            "ecosystem": "npm"
          },
          {
            "name": "webpack-bundle-analyzer",
            "direct": false,
            "version": "^4.10.1",
            "ecosystem": "npm"
          }
        ],
        "collected": true,
        "truncated": false,
        "total_count": 133,
        "direct_count": 110,
        "indirect_count": 23
      }
    },
    "maintainership": {
      "issues": {
        "open_prs": 2,
        "merged_prs": 433,
        "open_issues": 1,
        "closed_ratio": 0.5,
        "closed_issues": 1,
        "closed_unmerged_prs": 11
      },
      "bus_factor": 1,
      "bot_contributors": 3,
      "top_contributors": [
        {
          "type": "User",
          "login": "maraisr",
          "commits": 372,
          "avatar_url": "https://avatars.githubusercontent.com/u/599459?v=4"
        },
        {
          "type": "User",
          "login": "amir-zahedi",
          "commits": 245,
          "avatar_url": "https://avatars.githubusercontent.com/u/1334204?v=4"
        },
        {
          "type": "User",
          "login": "sgimama",
          "commits": 10,
          "avatar_url": "https://avatars.githubusercontent.com/u/36163163?v=4"
        },
        {
          "type": "User",
          "login": "skinread",
          "commits": 4,
          "avatar_url": "https://avatars.githubusercontent.com/u/1177190?v=4"
        },
        {
          "type": "User",
          "login": "timaMehro",
          "commits": 4,
          "avatar_url": "https://avatars.githubusercontent.com/u/36493303?v=4"
        },
        {
          "type": "User",
          "login": "benmccallum",
          "commits": 2,
          "avatar_url": "https://avatars.githubusercontent.com/u/157336?v=4"
        },
        {
          "type": "User",
          "login": "robmcleishag",
          "commits": 2,
          "avatar_url": "https://avatars.githubusercontent.com/u/155689073?v=4"
        },
        {
          "type": "User",
          "login": "smccarthy94",
          "commits": 2,
          "avatar_url": "https://avatars.githubusercontent.com/u/7938575?v=4"
        },
        {
          "type": "User",
          "login": "autoguru-ci",
          "commits": 1,
          "avatar_url": "https://avatars.githubusercontent.com/u/48422265?v=4"
        },
        {
          "type": "User",
          "login": "xavicosco",
          "commits": 1,
          "avatar_url": "https://avatars.githubusercontent.com/u/20331969?v=4"
        }
      ],
      "contributors_sampled": 10,
      "top_contributor_share": 0.579
    },
    "quality_signals": {
      "has_ci": true,
      "has_tests": true,
      "ci_workflows": [
        "ci.yml",
        "claude-code-review.yml",
        "claude.yml",
        "publish.yml",
        "release.yml"
      ],
      "has_docs_dir": true,
      "linter_configs": [
        "eslint.config.mjs"
      ],
      "has_editorconfig": true,
      "has_linter_config": true,
      "has_precommit_config": false
    },
    "security_signals": {
      "lockfiles": [],
      "scorecard": {
        "checks": [
          {
            "name": "Binary-Artifacts",
            "score": 10,
            "reason": "no binaries found in the repo",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#binary-artifacts"
          },
          {
            "name": "Branch-Protection",
            "score": null,
            "reason": "internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#branch-protection"
          },
          {
            "name": "CI-Tests",
            "score": 6,
            "reason": "16 out of 26 merged PRs checked by a CI test -- score normalized to 6",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#ci-tests"
          },
          {
            "name": "CII-Best-Practices",
            "score": 0,
            "reason": "no effort to earn an OpenSSF best practices badge detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#cii-best-practices"
          },
          {
            "name": "Code-Review",
            "score": 3,
            "reason": "Found 7/20 approved changesets -- score normalized to 3",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#code-review"
          },
          {
            "name": "Contributors",
            "score": 10,
            "reason": "project has 8 contributing companies or organizations",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#contributors"
          },
          {
            "name": "Dangerous-Workflow",
            "score": 10,
            "reason": "no dangerous workflow patterns detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dangerous-workflow"
          },
          {
            "name": "Dependency-Update-Tool",
            "score": 10,
            "reason": "update tool detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dependency-update-tool"
          },
          {
            "name": "Fuzzing",
            "score": 0,
            "reason": "project is not fuzzed",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#fuzzing"
          },
          {
            "name": "License",
            "score": 10,
            "reason": "license file detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#license"
          },
          {
            "name": "Maintained",
            "score": 10,
            "reason": "16 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#maintained"
          },
          {
            "name": "Packaging",
            "score": null,
            "reason": "packaging workflow not detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#packaging"
          },
          {
            "name": "Pinned-Dependencies",
            "score": 0,
            "reason": "dependency not pinned by hash detected -- score normalized to 0",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#pinned-dependencies"
          },
          {
            "name": "SAST",
            "score": 0,
            "reason": "SAST tool is not run on all commits -- score normalized to 0",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#sast"
          },
          {
            "name": "Security-Policy",
            "score": 0,
            "reason": "security policy file not detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#security-policy"
          },
          {
            "name": "Signed-Releases",
            "score": null,
            "reason": "no releases found",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#signed-releases"
          },
          {
            "name": "Token-Permissions",
            "score": 0,
            "reason": "detected GitHub workflow tokens with excessive permissions",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#token-permissions"
          },
          {
            "name": "Vulnerabilities",
            "score": 0,
            "reason": "173 existing vulnerabilities detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#vulnerabilities"
          }
        ],
        "commit": "177f067962133230e849b878c06bdb94f0633887",
        "ran_at": "2026-07-26T04:27:13Z",
        "aggregate_score": 4.9,
        "scorecard_version": "v5.5.0"
      },
      "has_codeql_workflow": false,
      "has_security_policy": false,
      "has_dependabot_config": false
    },
    "contribution_flow": {
      "collected": true,
      "ci_last_run_at": "2026-07-20T04:21:59Z",
      "oldest_open_prs": [
        {
          "number": 296,
          "created_at": "2025-02-18T19:16:01Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 434,
          "created_at": "2026-04-08T04:53:01Z",
          "last_comment_at": null,
          "last_comment_author": null
        }
      ],
      "last_merged_pr_at": "2026-07-20T04:21:31Z",
      "ci_last_conclusion": "SUCCESS",
      "oldest_open_issues": [
        {
          "number": 331,
          "created_at": "2025-06-04T04:58:22Z",
          "last_comment_at": null,
          "last_comment_author": null
        }
      ]
    }
  },
  "config": {
    "disabled_metrics": [],
    "disabled_categories": [],
    "disabled_components": {}
  },
  "source": {
    "url": "https://github.com/autoguru-au/octane",
    "host": "github.com",
    "name": "octane",
    "owner": "autoguru-au"
  },
  "metrics": {
    "overall": {
      "key": "overall",
      "band": "moderate",
      "name": "Overall health",
      "note": null,
      "notes": [],
      "value": 63,
      "inputs": {
        "security": 42,
        "vitality": 85,
        "community": 35,
        "governance": 63,
        "engineering": 79
      },
      "components": []
    },
    "categories": [
      {
        "key": "vitality",
        "band": "excellent",
        "name": "Vitality",
        "value": 85,
        "weight": 0.22,
        "metrics": [
          {
            "key": "development_activity",
            "band": "good",
            "name": "Development activity",
            "note": null,
            "notes": [],
            "value": 81,
            "inputs": {
              "commits_last_year": 107,
              "human_commit_share": 0.6,
              "days_since_last_push": 6,
              "active_weeks_last_year": 24
            },
            "components": [
              {
                "key": "push_recency",
                "name": "Push recency",
                "detail": "last push 6 days ago",
                "points": 36,
                "status": "met",
                "details": [
                  {
                    "code": "push_recency",
                    "params": {
                      "days": 6
                    }
                  }
                ],
                "max_points": 36
              },
              {
                "key": "commit_cadence",
                "name": "Commit cadence",
                "detail": "24/52 weeks with commits",
                "points": 16.6,
                "status": "partial",
                "details": [
                  {
                    "code": "commit_cadence_weeks",
                    "params": {
                      "weeks": 24
                    }
                  }
                ],
                "max_points": 36
              },
              {
                "key": "commit_volume",
                "name": "Commit volume",
                "detail": "107 commits in the last year",
                "points": 18,
                "status": "met",
                "details": [
                  {
                    "code": "commits_last_year",
                    "params": {
                      "count": 107
                    }
                  }
                ],
                "max_points": 18
              },
              {
                "key": "openssf_scorecard_maintained",
                "name": "OpenSSF Scorecard: Maintained",
                "detail": "16 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10",
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "release_discipline",
            "band": "excellent",
            "name": "Release discipline",
            "note": "Excluded from scoring (no data or not applicable): OpenSSF Scorecard: Signed-Releases. Remaining weights renormalized.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "openssf_scorecard_signed_releases"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              }
            ],
            "value": 90,
            "inputs": {
              "releases_count": 100,
              "latest_release_tag": "@autoguru/eslint-plugin@2.0.1",
              "releases_from_tags": false,
              "days_since_latest_release": 129,
              "mean_days_between_releases": 2.4
            },
            "components": [
              {
                "key": "ships_releases",
                "name": "Ships releases",
                "detail": "100 releases published",
                "points": 27,
                "status": "met",
                "details": [
                  {
                    "code": "releases_published",
                    "params": {
                      "count": 100
                    }
                  }
                ],
                "max_points": 27
              },
              {
                "key": "release_recency",
                "name": "Release recency",
                "detail": "latest release 129 days ago",
                "points": 27,
                "status": "partial",
                "details": [
                  {
                    "code": "release_recency",
                    "params": {
                      "days": 129
                    }
                  }
                ],
                "max_points": 36
              },
              {
                "key": "release_cadence",
                "name": "Release cadence",
                "detail": "a release every ~2.4 days",
                "points": 27,
                "status": "met",
                "details": [
                  {
                    "code": "release_cadence",
                    "params": {
                      "gap": 2.4
                    }
                  }
                ],
                "max_points": 27
              },
              {
                "key": "openssf_scorecard_signed_releases",
                "name": "OpenSSF Scorecard: Signed-Releases",
                "detail": "no releases found",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_data",
                    "params": {}
                  }
                ],
                "max_points": 10
              }
            ]
          },
          {
            "key": "abandonment",
            "band": "excellent",
            "name": "Abandonment",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "cap": null,
              "state": "maintained",
              "guards": [],
              "signals": [],
              "red_flag": false,
              "multiplier_pct": 100,
              "declared_reason": null,
              "unverified_reason": null,
              "unanswered_open_prs": null,
              "unanswered_open_issues": null,
              "days_since_last_merged_pr": null,
              "days_since_last_human_commit": 6,
              "days_since_last_human_commit_is_floor": false
            },
            "components": [
              {
                "key": "project_is_still_maintained",
                "name": "Project is still maintained",
                "detail": "last human commit 6 days ago",
                "points": 100,
                "status": "met",
                "details": [
                  {
                    "code": "abandonment_maintained",
                    "params": {
                      "days": 6
                    }
                  }
                ],
                "max_points": 100
              }
            ]
          }
        ],
        "description": "Is the project alive — is code being written and are releases shipping?"
      },
      {
        "key": "community",
        "band": "at_risk",
        "name": "Community & Adoption",
        "value": 35,
        "weight": 0.18,
        "metrics": [
          {
            "key": "popularity",
            "band": "critical",
            "name": "Popularity & adoption",
            "note": null,
            "notes": [],
            "value": 3,
            "inputs": {
              "forks": 0,
              "stars": 2,
              "watchers": 4,
              "growth_state": "unverified",
              "growth_factor_pct": 100,
              "growth_unverified_reason": "no_history"
            },
            "components": [
              {
                "key": "stars",
                "name": "Stars",
                "detail": "2 stars",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "stars",
                    "params": {
                      "count": 2
                    }
                  }
                ],
                "max_points": 60
              },
              {
                "key": "forks",
                "name": "Forks",
                "detail": "0 forks",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "forks",
                    "params": {
                      "count": 0
                    }
                  }
                ],
                "max_points": 25
              },
              {
                "key": "watchers",
                "name": "Watchers",
                "detail": "4 watchers",
                "points": 2.7,
                "status": "partial",
                "details": [
                  {
                    "code": "watchers",
                    "params": {
                      "count": 4
                    }
                  }
                ],
                "max_points": 15
              }
            ]
          },
          {
            "key": "community_health",
            "band": "moderate",
            "name": "Community health",
            "note": null,
            "notes": [],
            "value": 50,
            "inputs": {
              "has_readme": true,
              "has_license": true,
              "has_contributing": false,
              "has_issue_template": false,
              "has_code_of_conduct": false,
              "has_pull_request_template": false
            },
            "components": [
              {
                "key": "readme",
                "name": "README",
                "detail": null,
                "points": 22.5,
                "status": "met",
                "details": [],
                "max_points": 22.5
              },
              {
                "key": "license",
                "name": "License",
                "detail": "recognized license (MIT)",
                "points": 22.5,
                "status": "met",
                "details": [
                  {
                    "code": "license_standard",
                    "params": {}
                  },
                  {
                    "code": "license_spdx",
                    "params": {
                      "spdx": "MIT"
                    }
                  }
                ],
                "max_points": 22.5
              },
              {
                "key": "contributing_guide",
                "name": "CONTRIBUTING guide",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 18
              },
              {
                "key": "code_of_conduct",
                "name": "Code of conduct",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 13.5
              },
              {
                "key": "issue_template",
                "name": "Issue template",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.2
              },
              {
                "key": "pr_template",
                "name": "PR template",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 6.3
              }
            ]
          },
          {
            "key": "ecosystem_adoption",
            "band": "moderate",
            "name": "Ecosystem adoption (downloads)",
            "note": "Excluded from scoring (no data or not applicable): Registry dependents. Remaining weights renormalized.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "registry_dependents"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              }
            ],
            "value": 64,
            "inputs": {
              "packages": [
                "gdu",
                "@autoguru/tsconfig",
                "@autoguru/utilities",
                "create-guru",
                "@autoguru/jest-preset",
                "@autoguru/babel-preset",
                "@autoguru/eslint-plugin",
                "renovate-config-autoguru"
              ],
              "dependents": null,
              "ecosystems": "npm",
              "total_downloads": null,
              "monthly_downloads": 7458
            },
            "components": [
              {
                "key": "monthly_downloads",
                "name": "Monthly downloads",
                "detail": "7,458 downloads/month across npm",
                "points": 51.6,
                "status": "partial",
                "details": [
                  {
                    "code": "downloads_monthly",
                    "params": {
                      "count": 7458,
                      "ecosystems": "npm"
                    }
                  }
                ],
                "max_points": 80
              },
              {
                "key": "registry_dependents",
                "name": "Registry dependents",
                "detail": "not reported by this ecosystem",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "not_reported_by_this_ecosystem",
                    "params": {}
                  }
                ],
                "max_points": 20
              }
            ]
          }
        ],
        "description": "Does the project have users, downloads, attention, and a welcoming setup for contributors?"
      },
      {
        "key": "governance",
        "band": "moderate",
        "name": "Sustainability & Governance",
        "value": 63,
        "weight": 0.24,
        "metrics": [
          {
            "key": "maintainer_resilience",
            "band": "at_risk",
            "name": "Maintainer resilience (bus factor)",
            "note": null,
            "notes": [],
            "value": 42,
            "inputs": {
              "bus_factor": 1,
              "contributors_sampled": 10,
              "top_contributor_share": 0.579
            },
            "components": [
              {
                "key": "bus_factor",
                "name": "Bus factor",
                "detail": "1 contributor(s) cover half of all commits",
                "points": 9,
                "status": "partial",
                "details": [
                  {
                    "code": "bus_factor",
                    "params": {
                      "count": 1
                    }
                  }
                ],
                "max_points": 54
              },
              {
                "key": "commit_distribution",
                "name": "Commit distribution",
                "detail": "top contributor authored 58% of commits",
                "points": 9.5,
                "status": "partial",
                "details": [
                  {
                    "code": "top_contributor_share",
                    "params": {
                      "share": 58
                    }
                  }
                ],
                "max_points": 22.5
              },
              {
                "key": "contributor_breadth",
                "name": "Contributor breadth",
                "detail": "10 contributors",
                "points": 13.5,
                "status": "met",
                "details": [
                  {
                    "code": "contributors_sampled",
                    "params": {
                      "count": 10
                    }
                  }
                ],
                "max_points": 13.5
              },
              {
                "key": "openssf_scorecard_contributors",
                "name": "OpenSSF Scorecard: Contributors",
                "detail": "project has 8 contributing companies or organizations",
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "responsiveness",
            "band": "moderate",
            "name": "Issue & PR responsiveness",
            "note": null,
            "notes": [],
            "value": 65,
            "inputs": {
              "merged_prs": 433,
              "open_issues": 1,
              "closed_issues": 1,
              "issue_closed_ratio": 0.5,
              "closed_unmerged_prs": 11
            },
            "components": [
              {
                "key": "issue_resolution",
                "name": "Issue resolution",
                "detail": "50% of issues closed",
                "points": 23.4,
                "status": "partial",
                "details": [
                  {
                    "code": "issues_closed_share",
                    "params": {
                      "share": 50
                    }
                  }
                ],
                "max_points": 46.75
              },
              {
                "key": "pr_acceptance",
                "name": "PR acceptance",
                "detail": "433/444 decided PRs merged",
                "points": 37.3,
                "status": "partial",
                "details": [
                  {
                    "code": "decided_prs_merged",
                    "params": {
                      "merged": 433,
                      "decided": 444
                    }
                  }
                ],
                "max_points": 38.25
              },
              {
                "key": "openssf_scorecard_code_review",
                "name": "OpenSSF Scorecard: Code-Review",
                "detail": "Found 7/20 approved changesets -- score normalized to 3",
                "points": 4.5,
                "status": "partial",
                "details": [],
                "max_points": 15
              }
            ]
          },
          {
            "key": "stewardship",
            "band": "moderate",
            "name": "Ownership & stewardship",
            "note": null,
            "notes": [],
            "value": 56,
            "inputs": {
              "followers": 7,
              "owner_type": "Organization",
              "is_verified": null,
              "owner_login": "autoguru-au",
              "public_repos": 9,
              "account_age_days": 2713
            },
            "components": [
              {
                "key": "ownership_backing",
                "name": "Ownership backing",
                "detail": "organization-owned",
                "points": 30,
                "status": "met",
                "details": [
                  {
                    "code": "owner_organization",
                    "params": {}
                  }
                ],
                "max_points": 30
              },
              {
                "key": "verified_domain",
                "name": "Verified domain",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 20
              },
              {
                "key": "owner_reach",
                "name": "Owner reach",
                "detail": "7 followers of autoguru-au",
                "points": 6.5,
                "status": "partial",
                "details": [
                  {
                    "code": "owner_followers",
                    "params": {
                      "count": 7,
                      "login": "autoguru-au"
                    }
                  }
                ],
                "max_points": 25
              },
              {
                "key": "track_record",
                "name": "Track record",
                "detail": "9 public repos, account ~7 yr old",
                "points": 19.3,
                "status": "partial",
                "details": [
                  {
                    "code": "public_repos",
                    "params": {
                      "count": 9
                    }
                  },
                  {
                    "code": "account_age_years",
                    "params": {
                      "years": 7
                    }
                  }
                ],
                "max_points": 25
              }
            ]
          },
          {
            "key": "package_maintenance",
            "band": "excellent",
            "name": "Package maintenance",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "packages": [
                "gdu",
                "@autoguru/tsconfig",
                "@autoguru/utilities",
                "create-guru",
                "@autoguru/jest-preset",
                "@autoguru/babel-preset",
                "@autoguru/eslint-plugin",
                "renovate-config-autoguru"
              ],
              "ecosystems": "npm",
              "any_deprecated": false,
              "min_days_since_publish": 6
            },
            "components": [
              {
                "key": "published_resolvable",
                "name": "Published & resolvable",
                "detail": "8 package(s) on npm",
                "points": 25,
                "status": "met",
                "details": [
                  {
                    "code": "packages_published",
                    "params": {
                      "count": 8,
                      "ecosystems": "npm"
                    }
                  }
                ],
                "max_points": 25
              },
              {
                "key": "publish_recency",
                "name": "Publish recency",
                "detail": "latest publish 6 days ago",
                "points": 35,
                "status": "met",
                "details": [
                  {
                    "code": "publish_recency",
                    "params": {
                      "days": 6
                    }
                  }
                ],
                "max_points": 35
              },
              {
                "key": "version_history",
                "name": "Version history",
                "detail": "352 published versions",
                "points": 20,
                "status": "met",
                "details": [
                  {
                    "code": "published_versions",
                    "params": {
                      "count": 352
                    }
                  }
                ],
                "max_points": 20
              },
              {
                "key": "not_deprecated",
                "name": "Not deprecated",
                "detail": "active, not deprecated or yanked",
                "points": 20,
                "status": "met",
                "details": [
                  {
                    "code": "package_not_deprecated",
                    "params": {}
                  }
                ],
                "max_points": 20
              }
            ]
          }
        ],
        "description": "Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?"
      },
      {
        "key": "engineering",
        "band": "good",
        "name": "Engineering Quality",
        "value": 79,
        "weight": 0.2,
        "metrics": [
          {
            "key": "engineering_practices",
            "band": "good",
            "name": "Engineering practices",
            "note": null,
            "notes": [],
            "value": 82,
            "inputs": {
              "has_ci": true,
              "has_tests": true,
              "has_editorconfig": true,
              "has_linter_config": true,
              "has_precommit_config": false
            },
            "components": [
              {
                "key": "ci_workflows",
                "name": "CI workflows",
                "detail": "5 workflow(s)",
                "points": 24,
                "status": "met",
                "details": [
                  {
                    "code": "ci_workflows",
                    "params": {
                      "count": 5
                    }
                  }
                ],
                "max_points": 24
              },
              {
                "key": "tests_present",
                "name": "Tests present",
                "detail": null,
                "points": 24,
                "status": "met",
                "details": [],
                "max_points": 24
              },
              {
                "key": "linter_config",
                "name": "Linter config",
                "detail": "eslint.config.mjs",
                "points": 16,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": "eslint.config.mjs"
                    }
                  }
                ],
                "max_points": 16
              },
              {
                "key": "pre_commit_hooks",
                "name": "Pre-commit hooks",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 9.6
              },
              {
                "key": "editorconfig",
                "name": ".editorconfig",
                "detail": null,
                "points": 6.4,
                "status": "met",
                "details": [],
                "max_points": 6.4
              },
              {
                "key": "openssf_scorecard_ci_tests",
                "name": "OpenSSF Scorecard: CI-Tests",
                "detail": "16 out of 26 merged PRs checked by a CI test -- score normalized to 6",
                "points": 12,
                "status": "partial",
                "details": [],
                "max_points": 20
              }
            ]
          },
          {
            "key": "documentation",
            "band": "good",
            "name": "Documentation",
            "note": null,
            "notes": [],
            "value": 75,
            "inputs": {
              "topics": [
                "monorepo",
                "lerna",
                "react",
                "jest",
                "babel",
                "typescript",
                "tooling"
              ],
              "has_wiki": false,
              "homepage": null,
              "has_readme": true,
              "has_docs_dir": true,
              "has_description": true
            },
            "components": [
              {
                "key": "readme",
                "name": "README",
                "detail": null,
                "points": 30,
                "status": "met",
                "details": [],
                "max_points": 30
              },
              {
                "key": "documentation_directory",
                "name": "Documentation directory",
                "detail": null,
                "points": 25,
                "status": "met",
                "details": [],
                "max_points": 25
              },
              {
                "key": "documentation_homepage_site",
                "name": "Documentation / homepage site",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 15
              },
              {
                "key": "repository_description",
                "name": "Repository description",
                "detail": null,
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              },
              {
                "key": "topics",
                "name": "Topics",
                "detail": "7 topics",
                "points": 10,
                "status": "met",
                "details": [
                  {
                    "code": "topics_count",
                    "params": {
                      "count": 7
                    }
                  }
                ],
                "max_points": 10
              },
              {
                "key": "wiki",
                "name": "Wiki",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 10
              }
            ]
          }
        ],
        "description": "Are baseline engineering and documentation practices in place?"
      },
      {
        "key": "security",
        "band": "at_risk",
        "name": "Security",
        "value": 42,
        "weight": 0.16,
        "metrics": [
          {
            "key": "security_posture",
            "band": "at_risk",
            "name": "Security posture",
            "note": "Excluded from scoring (no data or not applicable): Branch-Protection, Packaging, Signed-Releases. Remaining weights renormalized.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "branch_protection",
                    "packaging",
                    "signed_releases"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              }
            ],
            "value": 48,
            "inputs": {
              "source": "openssf_scorecard",
              "checks_evaluated": 15,
              "scorecard_version": "v5.5.0",
              "checks_inconclusive": 3,
              "scorecard_aggregate": 4.9
            },
            "components": [
              {
                "key": "binary_artifacts",
                "name": "Binary-Artifacts",
                "detail": "no binaries found in the repo",
                "points": 7.5,
                "status": "met",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "branch_protection",
                "name": "Branch-Protection",
                "detail": "internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_data",
                    "params": {}
                  }
                ],
                "max_points": 7.5
              },
              {
                "key": "ci_tests",
                "name": "CI-Tests",
                "detail": "16 out of 26 merged PRs checked by a CI test -- score normalized to 6",
                "points": 1.5,
                "status": "partial",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "cii_best_practices",
                "name": "CII-Best-Practices",
                "detail": "no effort to earn an OpenSSF best practices badge detected",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "code_review",
                "name": "Code-Review",
                "detail": "Found 7/20 approved changesets -- score normalized to 3",
                "points": 2.2,
                "status": "partial",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "contributors",
                "name": "Contributors",
                "detail": "project has 8 contributing companies or organizations",
                "points": 2.5,
                "status": "met",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "dangerous_workflow",
                "name": "Dangerous-Workflow",
                "detail": "no dangerous workflow patterns detected",
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              },
              {
                "key": "dependency_update_tool",
                "name": "Dependency-Update-Tool",
                "detail": "update tool detected",
                "points": 7.5,
                "status": "met",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "fuzzing",
                "name": "Fuzzing",
                "detail": "project is not fuzzed",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 5
              },
              {
                "key": "license",
                "name": "License",
                "detail": "license file detected",
                "points": 2.5,
                "status": "met",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "maintained",
                "name": "Maintained",
                "detail": "16 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10",
                "points": 7.5,
                "status": "met",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "packaging",
                "name": "Packaging",
                "detail": "packaging workflow not detected",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_data",
                    "params": {}
                  }
                ],
                "max_points": 5
              },
              {
                "key": "pinned_dependencies",
                "name": "Pinned-Dependencies",
                "detail": "dependency not pinned by hash detected -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 5
              },
              {
                "key": "sast",
                "name": "SAST",
                "detail": "SAST tool is not run on all commits -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 5
              },
              {
                "key": "security_policy",
                "name": "Security-Policy",
                "detail": "security policy file not detected",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 5
              },
              {
                "key": "signed_releases",
                "name": "Signed-Releases",
                "detail": "no releases found",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_data",
                    "params": {}
                  }
                ],
                "max_points": 7.5
              },
              {
                "key": "token_permissions",
                "name": "Token-Permissions",
                "detail": "detected GitHub workflow tokens with excessive permissions",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "vulnerabilities",
                "name": "Vulnerabilities",
                "detail": "173 existing vulnerabilities detected",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              }
            ]
          },
          {
            "key": "dependency_advisories",
            "band": "critical",
            "name": "Dependency advisories",
            "note": "Matched the npm:gdu@13.23.0 runtime dependency closure — what installing the published package pulls in — 1328 packages. Reachability is not analyzed.",
            "notes": [
              {
                "code": "advisories_scope_published",
                "params": {
                  "package": "npm:gdu@13.23.0",
                  "assessed": 1328
                }
              },
              {
                "code": "advisories_reachability",
                "params": {}
              }
            ],
            "value": 16,
            "inputs": {
              "source": "osv",
              "advisories": 105,
              "affected_packages": 25,
              "assessed_packages": 1328,
              "unassessed_packages": 0,
              "affected_by_severity": "critical 2, high 18, moderate 4, low 1",
              "direct_affected_packages": 4
            },
            "components": [
              {
                "key": "direct_dependencies_free_of_known_advisories",
                "name": "Direct dependencies free of known advisories",
                "detail": "4 affected: ip 1.1.9 (high 8.1), next 14.2.35 (high 8.6), node-static 0.7.11 (high 7.5), +1 more",
                "points": 7.4,
                "status": "partial",
                "details": [
                  {
                    "code": "advisories_affected",
                    "params": {
                      "count": 4,
                      "packages": "ip 1.1.9 (high 8.1), next 14.2.35 (high 8.6), node-static 0.7.11 (high 7.5)"
                    }
                  },
                  {
                    "code": "advisories_affected_more",
                    "params": {
                      "count": 1
                    }
                  }
                ],
                "max_points": 35
              },
              {
                "key": "indirect_dependencies_free_of_known_advisories",
                "name": "Indirect dependencies free of known advisories",
                "detail": "21 affected: minimist 0.0.10 (critical 9.8), vm2 3.9.2 (critical 10.0), brace-expansion 1.1.16 (high 7.5), +18 more",
                "points": 1.1,
                "status": "partial",
                "details": [
                  {
                    "code": "advisories_affected",
                    "params": {
                      "count": 21,
                      "packages": "minimist 0.0.10 (critical 9.8), vm2 3.9.2 (critical 10.0), brace-expansion 1.1.16 (high 7.5)"
                    }
                  },
                  {
                    "code": "advisories_affected_more",
                    "params": {
                      "count": 18
                    }
                  }
                ],
                "max_points": 25
              },
              {
                "key": "no_advisories_left_outstanding",
                "name": "No advisories left outstanding",
                "detail": "23 advisory-carrying package(s) unaddressed past 90 days; oldest published 2607 days ago",
                "points": 7.6,
                "status": "partial",
                "details": [
                  {
                    "code": "advisories_stale",
                    "params": {
                      "days": 90,
                      "count": 23,
                      "oldest": 2607
                    }
                  }
                ],
                "max_points": 40
              }
            ]
          },
          {
            "key": "malicious_dependencies",
            "band": "excellent",
            "name": "Malicious dependencies",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "source": "osv",
              "meaning": "reported as a malicious package by the OpenSSF corpus; the remedy is removal or moving off the compromised name, never an upgrade of the same artifact. Versions the registry has since pulled are listed but not scored",
              "packages": [],
              "red_flag": false,
              "assessed_packages": 1328,
              "malicious_packages": 0,
              "direct_malicious_packages": 0,
              "withdrawn_malicious_packages": 0,
              "installable_malicious_packages": 0
            },
            "components": [
              {
                "key": "no_dependency_reported_as_a_malicious_package",
                "name": "No dependency reported as a malicious package",
                "detail": "no dependency is reported as a malicious package",
                "points": 100,
                "status": "met",
                "details": [
                  {
                    "code": "no_malicious_dependencies",
                    "params": {}
                  }
                ],
                "max_points": 100
              }
            ]
          },
          {
            "key": "high_risk_jurisdiction_exposure",
            "band": "excellent",
            "name": "High-Risk Jurisdiction Exposure",
            "note": "Only high-confidence self-published location evidence affects this multiplier. Ambiguous matches are review-only; country evidence is not proof of nationality, citizenship, legal registration, malicious intent, or sanctions status.",
            "notes": [
              {
                "code": "jurisdiction_evidence_limits",
                "params": {}
              }
            ],
            "value": 100,
            "inputs": {
              "meaning": "self-published location evidence; not nationality or citizenship",
              "red_flag": false,
              "exposures": [],
              "policy_countries": [
                "Russia",
                "Iran",
                "North Korea"
              ],
              "review_only_matches": 0,
              "assessed_self_published_locations": 16
            },
            "components": [
              {
                "key": "policy_exposure_multiplier",
                "name": "Policy exposure multiplier",
                "detail": "no confirmed policy-scope location match",
                "points": 100,
                "status": "met",
                "details": [
                  {
                    "code": "jurisdiction_no_match",
                    "params": {}
                  }
                ],
                "max_points": 100
              }
            ]
          }
        ],
        "description": "Are visible security and supply-chain practices strong, with no malicious dependency and no unresolved high-risk jurisdiction exposure?"
      },
      {
        "key": "ai_readiness",
        "band": "moderate",
        "name": "AI Readiness",
        "value": 57,
        "weight": 0,
        "metrics": [
          {
            "key": "ai_agent_context",
            "band": "at_risk",
            "name": "Agent context & guidance",
            "note": null,
            "notes": [],
            "value": 40,
            "inputs": {
              "has_llms_txt": false,
              "legible_history_share": 1,
              "agent_instruction_files": [],
              "agent_instruction_max_bytes": null
            },
            "components": [
              {
                "key": "agent_instructions",
                "name": "Agent instructions",
                "detail": "no CLAUDE.md / AGENTS.md / editor rules",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "no_agent_instructions",
                    "params": {}
                  }
                ],
                "max_points": 45
              },
              {
                "key": "machine_readable_docs_llms_txt",
                "name": "Machine-readable docs (llms.txt)",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 15
              },
              {
                "key": "legible_commit_history",
                "name": "Legible commit history",
                "detail": "60 of 60 human commits state their intent (structured subject or explanatory body)",
                "points": 40,
                "status": "met",
                "details": [
                  {
                    "code": "legible_history",
                    "params": {
                      "legible": 60,
                      "sampled": 60
                    }
                  }
                ],
                "max_points": 40
              }
            ]
          },
          {
            "key": "ai_verify_loop",
            "band": "moderate",
            "name": "Verify loop (build / test / typecheck)",
            "note": null,
            "notes": [],
            "value": 54,
            "inputs": {
              "has_nix": false,
              "has_tests": true,
              "lockfiles": [],
              "has_dockerfile": false,
              "typed_language": true,
              "bootstrap_files": [],
              "has_devcontainer": false,
              "has_linter_config": true,
              "typecheck_configs": [
                "packages/gdu/tsconfig.json",
                "packages/utilities/tsconfig.json"
              ],
              "agent_commit_share": 0.31,
              "toolchain_manifests": [],
              "dependency_bot_commit_share": 0
            },
            "components": [
              {
                "key": "one_command_bootstrap",
                "name": "One-command bootstrap",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 18
              },
              {
                "key": "automated_tests",
                "name": "Automated tests",
                "detail": null,
                "points": 22,
                "status": "met",
                "details": [],
                "max_points": 22
              },
              {
                "key": "lint_format_config",
                "name": "Lint / format config",
                "detail": "eslint.config.mjs",
                "points": 11,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": "eslint.config.mjs"
                    }
                  }
                ],
                "max_points": 11
              },
              {
                "key": "static_type_checking",
                "name": "Static type checking",
                "detail": "packages/gdu/tsconfig.json, packages/utilities/tsconfig.json",
                "points": 11,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": "packages/gdu/tsconfig.json, packages/utilities/tsconfig.json"
                    }
                  }
                ],
                "max_points": 11
              },
              {
                "key": "reproducible_environment",
                "name": "Reproducible environment",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 10
              },
              {
                "key": "demonstrated_agent_practice",
                "name": "Demonstrated agent practice",
                "detail": "31 of the last 100 commits agent-authored or agent-credited",
                "points": 10,
                "status": "met",
                "details": [
                  {
                    "code": "agent_authored_commits",
                    "params": {
                      "count": 31,
                      "sampled": 100
                    }
                  }
                ],
                "max_points": 10
              },
              {
                "key": "automated_maintenance",
                "name": "Automated maintenance",
                "detail": "no automated dependency updates observed",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "no_dependency_automation",
                    "params": {}
                  }
                ],
                "max_points": 8
              },
              {
                "key": "openssf_scorecard_pinned_dependencies",
                "name": "OpenSSF Scorecard: Pinned-Dependencies",
                "detail": "dependency not pinned by hash detected -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "ai_code_legibility",
            "band": "excellent",
            "name": "Code legibility for models",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "primary_language": "TypeScript",
              "largest_source_bytes": 31971,
              "source_files_sampled": 144,
              "oversized_source_files": 0
            },
            "components": [
              {
                "key": "type_checkable_code",
                "name": "Type-checkable code",
                "detail": "TypeScript (statically typed)",
                "points": 45,
                "status": "met",
                "details": [
                  {
                    "code": "statically_typed_language",
                    "params": {
                      "language": "TypeScript"
                    }
                  }
                ],
                "max_points": 45
              },
              {
                "key": "manageable_file_sizes",
                "name": "Manageable file sizes",
                "detail": "0/144 source files over 60KB",
                "points": 55,
                "status": "met",
                "details": [
                  {
                    "code": "oversized_source_files",
                    "params": {
                      "kb": 60,
                      "sampled": 144,
                      "oversized": 0
                    }
                  }
                ],
                "max_points": 55
              }
            ]
          }
        ],
        "description": "How well is the repo equipped to be developed and maintained with AI coding agents? An independent, experimental badge — weight 0.0, so it is surfaced on its own and does not affect the overall health score."
      }
    ],
    "metrics_version": "1.13.0"
  },
  "warnings": [
    "Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token"
  ],
  "report_type": "repository",
  "generated_at": "2026-07-26T04:27:32.544820Z",
  "schema_version": "0.27.0",
  "badge_url": "https://raw.githubusercontent.com/inspect-software/badges/main/v1/a/autoguru-au/octane.svg",
  "full_name": "autoguru-au/octane",
  "license_state": "standard",
  "license_spdx": "MIT"
}