公开记录良好
软件健康报告模式 0.27.0 · 指标 1.13.0 · 2026-07-28 21:02 UTC
dandi / dandi-archive
DANDI API server and Web app
dandi/dandi-archive 的健康指数为 100 分中的 76 分，处于「良好」区间。 其得分最高的类别是Engineering Quality（96/100），最低的是Community & Adoption（50/100）。 最近一次更新在今天。 近期的大部分工作由 3 位贡献者完成。
76
总分 / 100软件健康指数
指标归入加权类别，统一采用 1–100 量表。总体分先取类别加权平均；当公开证据触发高风险司法辖区政策时，评级会按政策调整，并设置 49（有风险）的上限。AI 就绪度不计入总体分。
76
优秀85-100堪称典范；基本满足所有检验标准
良好70-84健康；仅有轻微不足
中等50-69可接受，但存在明显不足；建议进行审查
存在风险30-49存在重大薄弱环节；采用时应保持审慎
危急1-29问题严重（项目被弃置、仅有单一维护者、缺乏基本工程规范）
评分画像
每条轴代表一个类别。形状比平均值更重要——健康的对象会填满整个图形，而“一峰一谷”式画像意味着某一维度的优势正掩盖另一维度的风险。
所有权
72 关注者74 个公开仓库始于 2019年7月
该仓库由组织支持——共同承担、可问责的托管责任，可延续于任何单一维护者之后。
按类别列示的指标
活力
项目是否仍有生命——是否仍在编写代码，是否仍在发布版本？
94
开发活跃度
96优秀
评分方式
| 36/36 | 推送新近度 — 最近一次推送于 0 天前 |
| 32.5/36 | 提交节奏 — 52 周中有 47 周有提交 |
| 18/18 | 提交量 — 最近一年 668 次提交 |
| 10/10 | OpenSSF Scorecard：Maintained — 30 commit(s) and 20 issue activity found in the last 90 days -- score normalized to 10 |
所用输入
| commits_last_year | 668 |
| human_commit_share | 0.86 |
| days_since_last_push | 0 |
| active_weeks_last_year | 47 |
发布纪律
90优秀
评分方式
| 27/27 | 有发布版本 — 已发布 100 个发布版本 |
| 27/36 | 发布时效 — 最近一次发布版本于 110 天前 |
| 27/27 | 发布节奏 — 约每 7 天发布一次 |
| 0/10 | OpenSSF Scorecard：Signed-Releases — 无数据 |
所用输入
| releases_count | 100 |
| latest_release_tag | v0.23.0 |
| releases_from_tags | 否 |
| days_since_latest_release | 110 |
| mean_days_between_releases | 7 |
已排除计分（无数据或不适用）：OpenSSF Scorecard：Signed-Releases。 其余权重已重新归一化。
社区与采用
项目是否拥有用户、下载量与关注度，并具备欢迎贡献者参与的配置？
50
流行度与采用
36存在风险
评分方式
| 22.4/60 | 星标 — 25 个星标 |
| 10.7/25 | 复刻 — 20 个复刻 |
| 2.7/15 | 关注者 — 4 位关注者 |
所用输入
| forks | 20 |
| stars | 25 |
| watchers | 4 |
| growth_state | unverified |
| growth_factor_pct | 100 |
| growth_unverified_reason | no_history |
社区健康
65中等
评分方式
| 22.5/22.5 | README |
| 22.5/22.5 | 许可证 — 可识别的许可证（Apache-2.0） |
| 0/18 | CONTRIBUTING 指南 |
| 13.5/13.5 | 行为准则 |
| 0/7.2 | 议题模板 |
| 0/6.3 | PR 模板 |
所用输入
| has_readme | 是 |
| has_license | 是 |
| has_contributing | 否 |
| has_issue_template | 否 |
| has_code_of_conduct | 是 |
| has_pull_request_template | 否 |
可持续性与治理
项目能否在其成员之外延续——巴士系数、响应能力、由谁支持，以及软件包的维护状况？
75
维护者韧性（巴士系数）
76良好
评分方式
| 36/54 | 巴士系数 — 3 位贡献者贡献了半数提交 |
| 16.9/22.5 | 提交分布 — 头号贡献者编写了 25% 的提交 |
| 13.5/13.5 | 贡献者广度 — 33 位贡献者 |
| 10/10 | OpenSSF Scorecard：Contributors — project has 63 contributing companies or organizations |
所用输入
| bus_factor | 3 |
| contributors_sampled | 33 |
| top_contributor_share | 0.251 |
议题与 PR 响应能力
80良好
评分方式
| 31.6/46.8 | 议题解决 — 68% 的议题已关闭 |
| 34.4/38.3 | PR 接受 — 已裁定的 PR 中 1,384/1,540 已合并 |
| 13.5/15 | OpenSSF Scorecard：Code-Review — Found 10/11 approved changesets -- score normalized to 9 |
所用输入
| merged_prs | 1,384 |
| open_issues | 398 |
| closed_issues | 835 |
| issue_closed_ratio | 0.677 |
| closed_unmerged_prs | 156 |
所有权与托管责任
68中等
评分方式
| 30/30 | 所有权背书 — 组织持有 |
| 0/20 | 已验证域名 |
| 13.4/25 | 所有者影响力 — dandi 有 72 位关注者 |
| 25/25 | 既往记录 — 74 个公开仓库，账户约 7 年 |
所用输入
| followers | 72 |
| owner_type | Organization |
| is_verified | — |
| owner_login | dandi |
| public_repos | 74 |
| account_age_days | 2,561 |
工程质量
基础的工程与文档实践是否到位？
96
工程实践
100优秀
评分方式
| 24/24 | CI 工作流 — 7 个工作流 |
| 24/24 | 存在测试 |
| 16/16 | Linter 配置 — eslint.config.js, tox.ini |
| 9.6/9.6 | Pre-commit 钩子 |
| 6.4/6.4 | .editorconfig |
| 20/20 | OpenSSF Scorecard：CI-Tests — 11 out of 11 merged PRs checked by a CI test -- score normalized to 10 |
所用输入
| has_ci | 是 |
| has_tests | 是 |
| has_editorconfig | 是 |
| has_linter_config | 是 |
| has_precommit_config | 是 |
文档
90优秀
评分方式
| 30/30 | README |
| 25/25 | 文档目录 |
| 15/15 | 文档 / 主页站点 — https://dandiarchive.org |
| 10/10 | 仓库描述 |
| 10/10 | 主题标签 — 3 个主题标签 |
| 0/10 | Wiki |
所用输入
| topics | python, django-rest-framework, hacktoberfest |
| has_wiki | 否 |
| homepage | https://dandiarchive.org |
| has_readme | 是 |
| has_docs_dir | 是 |
| has_description | 是 |
安全
可见的安全与供应链实践是否稳固，且不存在未解决的高风险司法辖区暴露？
56
安全态势
56中等
评分方式
| 7.5/7.5 | Binary-Artifacts — no binaries found in the repo |
| 0/7.5 | Branch-Protection — 无数据 |
| 2.5/2.5 | CI-Tests — 11 out of 11 merged PRs checked by a CI test -- score normalized to 10 |
| 0/2.5 | CII-Best-Practices — no effort to earn an OpenSSF best practices badge detected |
| 6.8/7.5 | Code-Review — Found 10/11 approved changesets -- score normalized to 9 |
| 2.5/2.5 | Contributors — project has 63 contributing companies or organizations |
| 10/10 | Dangerous-Workflow — no dangerous workflow patterns detected |
| 7.5/7.5 | Dependency-Update-Tool — update tool detected |
| 0/5 | Fuzzing — project is not fuzzed |
| 2.5/2.5 | 许可证 — license file detected |
| 7.5/7.5 | Maintained — 30 commit(s) and 20 issue activity found in the last 90 days -- score normalized to 10 |
| 0/5 | Packaging — 无数据 |
| 1/5 | Pinned-Dependencies — dependency not pinned by hash detected -- score normalized to 2 |
| 0/5 | SAST — SAST tool is not run on all commits -- score normalized to 0 |
| 0/5 | Security-Policy — security policy file not detected |
| 0/7.5 | Signed-Releases — 无数据 |
| 0/7.5 | Token-Permissions — detected GitHub workflow tokens with excessive permissions |
| 0/7.5 | Vulnerabilities — 158 existing vulnerabilities detected |
所用输入
| source | openssf_scorecard |
| checks_evaluated | 15 |
| scorecard_version | v5.5.0 |
| checks_inconclusive | 3 |
| scorecard_aggregate | 5.6 |
已排除计分（无数据或不适用）：branch_protection, packaging, signed_releases。 其余权重已重新归一化。
AI 就绪度
该仓库在多大程度上具备与 AI 编码代理协同开发与维护的条件？这是一枚独立的实验性徽章——权重为 0.0，因此单独呈现，不影响总体健康评分。
63
AI 代理上下文与指引
40存在风险
评分方式
| 0/45 | 代理指令 — 没有 CLAUDE.md / AGENTS.md / 编辑器规则 |
| 0/15 | 机器可读文档（llms.txt） |
| 40/40 | 可读的提交历史 — 86 次人类提交中有 71 次说明了意图（结构化标题或解释性正文） |
所用输入
| has_llms_txt | 否 |
| legible_history_share | 0.826 |
| agent_instruction_files | — |
| agent_instruction_max_bytes | — |
评分方式
| 0/18 | 一条命令的引导启动 |
| 22/22 | 自动化测试 |
| 11/11 | Lint / 格式化配置 — eslint.config.js, tox.ini |
| 11/11 | 静态类型检查 — web/tsconfig.json |
| 10/10 | 可复现环境 — devcontainer, Dockerfile, Nix, lockfile |
| 10/10 | 已体现的代理实践 — 最近 100 次提交中有 18 次由代理编写或署名代理 |
| 8/8 | 自动化维护 — 最近 100 次提交中有 14 次为自动依赖更新 |
| 2/10 | OpenSSF Scorecard：Pinned-Dependencies — dependency not pinned by hash detected -- score normalized to 2 |
所用输入
| has_nix | 是 |
| has_tests | 是 |
| lockfiles | package-lock.json, uv.lock |
| has_dockerfile | 是 |
| typed_language | 否 |
| bootstrap_files | — |
| has_devcontainer | 是 |
| has_linter_config | 是 |
| typecheck_configs | web/tsconfig.json |
| agent_commit_share | 0.18 |
| toolchain_manifests | — |
| dependency_bot_commit_share | 0.14 |
面向模型的代码可读性
82良好
评分方式
| 27/45 | 可类型检查的代码 — Python，已配置类型检查（web/tsconfig.json） |
| 54.5/55 | 可控的文件大小 — 采样的 239 个源文件中有 2 个超过 60KB |
所用输入
| primary_language | Python |
| largest_source_bytes | 74,743 |
| source_files_sampled | 239 |
| oversized_source_files | 2 |
关键数据
25GitHub 星标
33贡献者
668最近 12 个月提交数
0距最近推送天数
100发布版本数
3巴士系数（bus factor）
398开放议题
npm, PyPI软件包生态系统数
数据采集警告
- Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token
- Could not fetch pypi package 'dandiapi' from its registry
- Could not fetch npm package 'dandi-playwright-test' from its registry
- GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository
更多细节
Star 与 Fork 历史 0 ★ / 20 ⇿
0Star
20Fork
100发布
每颗 star 和每个 fork 的添加时间，来自 GitHub 并按天汇总。累计增长位于其构成来源——每日新增——的正上方，二者可相互对照：稳定的自然增长与短暂的突增形态截然不同。当这一差别可被衡量时，它会作为增长真实性予以报告。
主版本 0次版本 19修订 81
每个点涵盖 6 天。
OpenSSF Scorecard 5.6 / 10
5.6综合
来自开源项目 OpenSSF Scorecard 的独立、工具无关的安全评估。每项检查奖励的是安全实践本身，而非特定供应商的工具。Scorecard 无法判定的检查项标记为 不适用，并从安全评分中剔除（绝不按零分计）。
| 10 | Binary-Artifacts | no binaries found in the repo |
| 不适用 | Branch-Protection | internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md |
| 10 | CI-Tests | 11 out of 11 merged PRs checked by a CI test -- score normalized to 10 |
| 0 | CII-Best-Practices | no effort to earn an OpenSSF best practices badge detected |
| 9 | Code-Review | Found 10/11 approved changesets -- score normalized to 9 |
| 10 | Contributors | project has 63 contributing companies or organizations |
| 10 | Dangerous-Workflow | no dangerous workflow patterns detected |
| 10 | Dependency-Update-Tool | update tool detected |
| 0 | Fuzzing | project is not fuzzed |
| 10 | License | license file detected |
| 10 | Maintained | 30 commit(s) and 20 issue activity found in the last 90 days -- score normalized to 10 |
| 不适用 | Packaging | packaging workflow not detected |
| 2 | Pinned-Dependencies | dependency not pinned by hash detected -- score normalized to 2 |
| 0 | SAST | SAST tool is not run on all commits -- score normalized to 0 |
| 0 | Security-Policy | security policy file not detected |
| 不适用 | Signed-Releases | no releases found |
| 0 | Token-Permissions | detected GitHub workflow tokens with excessive permissions |
| 0 | Vulnerabilities | 158 existing vulnerabilities detected |
直接依赖 52
| 注册表 | 软件包 | 版本约束 | 清单文件 |
|---|---|---|---|
| PyPI | boto3 | ==1.42.97 | pyproject.toml |
| PyPI | celery | ==5.6.3 | pyproject.toml |
| PyPI | dandischema | ==0.12.1 | pyproject.toml |
| PyPI | django | ==5.2.13 | pyproject.toml |
| PyPI | django-allauth | ==65.16.1 | pyproject.toml |
| PyPI | django-auth-style | ==0.15.0 | pyproject.toml |
| PyPI | django-click | ==2.5.0 | pyproject.toml |
| PyPI | django-cors-headers | ==4.9.0 | pyproject.toml |
| PyPI | django-environ | ==0.13.0 | pyproject.toml |
| PyPI | django-extensions | ==4.1 | pyproject.toml |
| PyPI | django-filter | ==25.2 | pyproject.toml |
| PyPI | django-guardian | ==3.3.1 | pyproject.toml |
| PyPI | django-oauth-toolkit | ==3.2.0 | pyproject.toml |
| PyPI | django-resonant-settings | ==0.50.4 | pyproject.toml |
| PyPI | django-resonant-utils | ==0.19.0 | pyproject.toml |
| PyPI | django-stubs-ext | ==6.0.3 | pyproject.toml |
| PyPI | djangorestframework | ==3.17.1 | pyproject.toml |
| PyPI | drf-extensions | ==0.8.0 | pyproject.toml |
| PyPI | drf-yasg | ==1.21.15 | pyproject.toml |
| PyPI | jsonschema | ==4.26.0 | pyproject.toml |
| PyPI | more_itertools | ==11.0.2 | pyproject.toml |
| PyPI | psycopg | ==3.3.3 | pyproject.toml |
| PyPI | pyyaml | ==6.0.3 | pyproject.toml |
| PyPI | requests | ==2.33.1 | pyproject.toml |
| PyPI | rich | ==15.0.0 | pyproject.toml |
| PyPI | whitenoise | ==6.12.0 | pyproject.toml |
| PyPI | zarr-checksum | ==0.4.7 | pyproject.toml |
| PyPI | django-s3-file-field | ==1.1.0 | pyproject.toml |
| PyPI | django-storages | ==1.14.6 | pyproject.toml |
| PyPI | sentry-sdk | ==2.58.0 | pyproject.toml |
| PyPI | gunicorn | ==25.3.0 | pyproject.toml |
| PyPI | tqdm | ==4.67.3 | pyproject.toml |
| npm | @apidevtools/json-schema-ref-parser | 15.3.5 | web/package.json |
| npm | @koumoul/vjsf | 3.12.0 | web/package.json |
| npm | @mdi/font | 7.4.47 | web/package.json |
| npm | @resonant/oauth-client | 1.0.3 | web/package.json |
| npm | @sentry/vue | 10.44.0 | web/package.json |
| npm | axios | 1.8.1 | web/package.json |
| npm | core-js | 3.41.0 | web/package.json |
| npm | dompurify | 3.2.4 | web/package.json |
| npm | filesize | 11.0.14 | web/package.json |
| npm | js-yaml | 4.1.1 | web/package.json |
| npm | lodash | 4.17.21 | web/package.json |
| npm | marked | 18.0.2 | web/package.json |
| npm | moment | 2.30.1 | web/package.json |
| npm | pinia | 3.0.1 | web/package.json |
| npm | roboto-fontface | 0.10.0 | web/package.json |
| npm | vue | 3.5.13 | web/package.json |
| npm | vue-router | 4.5.0 | web/package.json |
| npm | vue3-social-sharing | 1.3.1 | web/package.json |
| npm | vuedraggable | 4.1.0 | web/package.json |
| npm | vuetify | 3.7.15 | web/package.json |
全部依赖 未采集
本报告未能采集到解析后的依赖集合：GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository
原始 JSON 报告 机器可读
{
"data": {
"repo": {
"topics": [
"python",
"django-rest-framework",
"hacktoberfest"
],
"is_fork": false,
"size_kb": 11831,
"has_wiki": false,
"homepage": "https://dandiarchive.org",
"languages": {
"Nix": 648,
"Vue": 228236,
"HTML": 14213,
"SCSS": 786,
"Shell": 1912,
"Python": 862376,
"Procfile": 1043,
"Dockerfile": 896,
"JavaScript": 1554,
"TypeScript": 117062
},
"pushed_at": "2026-07-28T17:03:08Z",
"created_at": "2020-09-11T14:46:47Z",
"owner_type": "Organization",
"updated_at": "2026-07-28T16:39:03Z",
"description": "DANDI API server and Web app",
"is_archived": false,
"is_disabled": false,
"license_spdx": "Apache-2.0",
"default_branch": "master",
"license_spdx_raw": "Apache-2.0",
"primary_language": "Python",
"significant_languages": [
"Python",
"Vue"
]
},
"owner": {
"blog": "https://dandiarchive.org",
"name": "DANDI: Distributed Archives for Neurophysiology Data Integration",
"type": "Organization",
"login": "dandi",
"company": null,
"location": "United States of America",
"followers": 72,
"avatar_url": "https://avatars.githubusercontent.com/u/53260526?v=4",
"created_at": "2019-07-24T11:02:57Z",
"is_verified": null,
"public_repos": 74,
"account_age_days": 2561
},
"license": {
"state": "standard",
"spdx_id": "Apache-2.0",
"raw_spdx": "Apache-2.0",
"file_present": true,
"scorecard_found": true,
"profile_has_license": true
},
"activity": {
"releases": [
{
"tag": "v0.23.0",
"kind": "minor",
"published_at": "2026-04-09T15:23:27Z"
},
{
"tag": "v0.22.0",
"kind": "minor",
"published_at": "2026-03-24T18:42:39Z"
},
{
"tag": "v0.21.11",
"kind": "patch",
"published_at": "2026-03-24T16:57:01Z"
},
{
"tag": "v0.21.10",
"kind": "patch",
"published_at": "2026-03-18T14:59:08Z"
},
{
"tag": "v0.21.9",
"kind": "patch",
"published_at": "2026-03-11T15:18:11Z"
},
{
"tag": "v0.21.8",
"kind": "patch",
"published_at": "2026-03-06T20:26:43Z"
},
{
"tag": "v0.21.7",
"kind": "patch",
"published_at": "2026-03-06T20:12:52Z"
},
{
"tag": "v0.21.6",
"kind": "patch",
"published_at": "2026-02-18T18:57:03Z"
},
{
"tag": "v0.21.5",
"kind": "patch",
"published_at": "2026-02-17T18:12:29Z"
},
{
"tag": "v0.21.4",
"kind": "patch",
"published_at": "2026-02-05T18:39:24Z"
},
{
"tag": "v0.21.3",
"kind": "patch",
"published_at": "2026-02-02T19:12:33Z"
},
{
"tag": "v0.21.2",
"kind": "patch",
"published_at": "2026-01-13T19:21:12Z"
},
{
"tag": "v0.21.1",
"kind": "patch",
"published_at": "2026-01-13T01:36:37Z"
},
{
"tag": "v0.21.0",
"kind": "minor",
"published_at": "2026-01-08T21:19:56Z"
},
{
"tag": "v0.20.0",
"kind": "minor",
"published_at": "2025-12-17T20:45:43Z"
},
{
"tag": "v0.19.0",
"kind": "minor",
"published_at": "2025-11-13T19:29:38Z"
},
{
"tag": "v0.18.1",
"kind": "patch",
"published_at": "2025-11-12T02:34:17Z"
},
{
"tag": "v0.18.0",
"kind": "minor",
"published_at": "2025-11-04T21:57:21Z"
},
{
"tag": "v0.17.2",
"kind": "patch",
"published_at": "2025-10-24T19:49:53Z"
},
{
"tag": "v0.17.1",
"kind": "patch",
"published_at": "2025-10-24T17:45:14Z"
},
{
"tag": "v0.17.0",
"kind": "minor",
"published_at": "2025-10-24T16:09:53Z"
},
{
"tag": "v0.16.4",
"kind": "patch",
"published_at": "2025-10-24T15:45:15Z"
},
{
"tag": "v0.16.3",
"kind": "patch",
"published_at": "2025-10-23T17:44:56Z"
},
{
"tag": "v0.16.2",
"kind": "patch",
"published_at": "2025-10-10T14:39:17Z"
},
{
"tag": "v0.16.1",
"kind": "patch",
"published_at": "2025-10-07T15:34:06Z"
},
{
"tag": "v0.16.0",
"kind": "minor",
"published_at": "2025-10-06T16:16:57Z"
},
{
"tag": "v0.15.5",
"kind": "patch",
"published_at": "2025-09-29T19:29:51Z"
},
{
"tag": "v0.15.4",
"kind": "patch",
"published_at": "2025-09-24T22:11:46Z"
},
{
"tag": "v0.15.3",
"kind": "patch",
"published_at": "2025-09-23T20:57:41Z"
},
{
"tag": "v0.15.2",
"kind": "patch",
"published_at": "2025-09-23T20:48:25Z"
},
{
"tag": "v0.15.1",
"kind": "patch",
"published_at": "2025-09-18T17:47:53Z"
},
{
"tag": "v0.15.0",
"kind": "minor",
"published_at": "2025-09-17T16:15:53Z"
},
{
"tag": "v0.14.0",
"kind": "minor",
"published_at": "2025-09-15T15:05:11Z"
},
{
"tag": "v0.13.6",
"kind": "patch",
"published_at": "2025-09-12T19:01:23Z"
},
{
"tag": "v0.13.5",
"kind": "patch",
"published_at": "2025-09-09T14:50:13Z"
},
{
"tag": "v0.13.4",
"kind": "patch",
"published_at": "2025-08-28T17:16:41Z"
},
{
"tag": "v0.13.3",
"kind": "patch",
"published_at": "2025-08-28T11:15:08Z"
},
{
"tag": "v0.13.2",
"kind": "patch",
"published_at": "2025-08-27T20:27:39Z"
},
{
"tag": "v0.13.1",
"kind": "patch",
"published_at": "2025-08-26T21:08:04Z"
},
{
"tag": "v0.13.0",
"kind": "minor",
"published_at": "2025-08-26T18:51:43Z"
},
{
"tag": "v0.12.16",
"kind": "patch",
"published_at": "2025-08-25T16:56:06Z"
},
{
"tag": "v0.12.15",
"kind": "patch",
"published_at": "2025-08-22T16:47:01Z"
},
{
"tag": "v0.12.14",
"kind": "patch",
"published_at": "2025-08-22T15:25:11Z"
},
{
"tag": "v0.12.13",
"kind": "patch",
"published_at": "2025-08-18T21:15:39Z"
},
{
"tag": "v0.12.12",
"kind": "patch",
"published_at": "2025-08-18T18:27:35Z"
},
{
"tag": "v0.12.11",
"kind": "patch",
"published_at": "2025-08-14T21:51:08Z"
},
{
"tag": "v0.12.10",
"kind": "patch",
"published_at": "2025-08-14T21:40:32Z"
},
{
"tag": "v0.12.9",
"kind": "patch",
"published_at": "2025-08-11T21:01:44Z"
},
{
"tag": "v0.12.8",
"kind": "patch",
"published_at": "2025-08-11T20:19:48Z"
},
{
"tag": "v0.12.7",
"kind": "patch",
"published_at": "2025-08-07T19:11:17Z"
},
{
"tag": "v0.12.6",
"kind": "patch",
"published_at": "2025-08-07T14:39:42Z"
},
{
"tag": "v0.12.5",
"kind": "patch",
"published_at": "2025-08-05T13:10:38Z"
},
{
"tag": "v0.12.4",
"kind": "patch",
"published_at": "2025-07-30T17:58:47Z"
},
{
"tag": "v0.12.3",
"kind": "patch",
"published_at": "2025-07-30T14:40:39Z"
},
{
"tag": "v0.12.2",
"kind": "patch",
"published_at": "2025-07-22T22:44:41Z"
},
{
"tag": "v0.12.1",
"kind": "patch",
"published_at": "2025-07-18T18:56:54Z"
},
{
"tag": "v0.12.0",
"kind": "minor",
"published_at": "2025-07-18T18:32:32Z"
},
{
"tag": "v0.11.9",
"kind": "patch",
"published_at": "2025-07-14T15:41:51Z"
},
{
"tag": "v0.11.8",
"kind": "patch",
"published_at": "2025-07-11T18:32:30Z"
},
{
"tag": "v0.11.7",
"kind": "patch",
"published_at": "2025-07-11T17:16:07Z"
},
{
"tag": "v0.11.6",
"kind": "patch",
"published_at": "2025-07-10T18:55:01Z"
},
{
"tag": "v0.11.5",
"kind": "patch",
"published_at": "2025-07-03T17:44:38Z"
},
{
"tag": "v0.11.4",
"kind": "patch",
"published_at": "2025-07-01T20:10:40Z"
},
{
"tag": "v0.11.3",
"kind": "patch",
"published_at": "2025-06-30T15:54:19Z"
},
{
"tag": "v0.11.2",
"kind": "patch",
"published_at": "2025-06-23T16:31:54Z"
},
{
"tag": "v0.11.1",
"kind": "patch",
"published_at": "2025-06-05T18:57:06Z"
},
{
"tag": "v0.11.0",
"kind": "minor",
"published_at": "2025-06-04T19:13:50Z"
},
{
"tag": "v0.10.0",
"kind": "minor",
"published_at": "2025-04-30T20:00:19Z"
},
{
"tag": "v0.9.0",
"kind": "minor",
"published_at": "2025-04-30T19:50:33Z"
},
{
"tag": "v0.8.1",
"kind": "patch",
"published_at": "2025-04-21T21:08:41Z"
},
{
"tag": "v0.8.0",
"kind": "minor",
"published_at": "2025-04-18T20:37:35Z"
},
{
"tag": "v0.7.0",
"kind": "minor",
"published_at": "2025-04-16T20:04:19Z"
},
{
"tag": "v0.6.0",
"kind": "minor",
"published_at": "2025-04-16T19:14:50Z"
},
{
"tag": "v0.5.0",
"kind": "minor",
"published_at": "2025-04-16T18:57:15Z"
},
{
"tag": "v0.4.30",
"kind": "patch",
"published_at": "2025-03-26T20:54:26Z"
},
{
"tag": "v0.4.29",
"kind": "patch",
"published_at": "2025-03-21T17:40:51Z"
},
{
"tag": "v0.4.28",
"kind": "patch",
"published_at": "2025-03-17T16:08:18Z"
},
{
"tag": "v0.4.27",
"kind": "patch",
"published_at": "2025-03-14T19:45:42Z"
},
{
"tag": "v0.4.26",
"kind": "patch",
"published_at": "2025-03-14T13:10:56Z"
},
{
"tag": "v0.4.25",
"kind": "patch",
"published_at": "2025-03-13T22:06:02Z"
},
{
"tag": "v0.4.24",
"kind": "patch",
"published_at": "2025-03-06T20:13:51Z"
},
{
"tag": "v0.4.23",
"kind": "patch",
"published_at": "2025-03-06T18:02:34Z"
},
{
"tag": "v0.4.22",
"kind": "patch",
"published_at": "2025-03-06T16:34:09Z"
},
{
"tag": "v0.4.21",
"kind": "patch",
"published_at": "2025-03-05T16:39:49Z"
},
{
"tag": "v0.4.20",
"kind": "patch",
"published_at": "2025-02-27T18:48:23Z"
},
{
"tag": "v0.4.19",
"kind": "patch",
"published_at": "2025-02-19T18:43:53Z"
},
{
"tag": "v0.4.18",
"kind": "patch",
"published_at": "2025-02-07T19:28:32Z"
},
{
"tag": "v0.4.17",
"kind": "patch",
"published_at": "2025-02-05T21:40:25Z"
},
{
"tag": "v0.4.16",
"kind": "patch",
"published_at": "2025-02-05T20:47:06Z"
},
{
"tag": "v0.4.15",
"kind": "patch",
"published_at": "2025-02-03T18:13:03Z"
},
{
"tag": "v0.4.14",
"kind": "patch",
"published_at": "2025-01-28T19:46:03Z"
},
{
"tag": "v0.4.13",
"kind": "patch",
"published_at": "2025-01-23T16:37:34Z"
},
{
"tag": "v0.4.12",
"kind": "patch",
"published_at": "2025-01-22T16:50:13Z"
},
{
"tag": "v0.4.11",
"kind": "patch",
"published_at": "2025-01-22T16:33:52Z"
},
{
"tag": "v0.4.10",
"kind": "patch",
"published_at": "2025-01-22T00:05:56Z"
},
{
"tag": "v0.4.9",
"kind": "patch",
"published_at": "2025-01-22T00:00:34Z"
},
{
"tag": "v0.4.8",
"kind": "patch",
"published_at": "2025-01-21T23:40:53Z"
},
{
"tag": "v0.4.7",
"kind": "patch",
"published_at": "2025-01-08T18:34:07Z"
},
{
"tag": "v0.4.6",
"kind": "patch",
"published_at": "2025-01-08T18:10:00Z"
},
{
"tag": "v0.4.5",
"kind": "patch",
"published_at": "2025-01-03T16:50:04Z"
}
],
"recent_commits": [
{
"oid": "c72204035e3840d22d8090beed3be502e764de90",
"body": "Reduce zarr stuckness",
"is_bot": false,
"headline": "Merge pull request #2872 from dandi/reduce-zarr-stuckness",
"author_name": "Jacob Nesbitt",
"author_login": "jjnesbitt",
"committed_at": "2026-07-28T16:38:54Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "188c477ce06f810a53e5736e90608749ce8a8df1",
"body": null,
"is_bot": false,
"headline": "Add deadlock retries for ingest_zarr_archive",
"author_name": "Dan LaManna",
"author_login": "danlamanna",
"committed_at": "2026-07-13T16:07:42Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "bf85f4dfc0339414b5165778c9e70855d2a5fc1e",
"body": "This was an accidental overeager locking as a result of the\nselect_related call. The dandiset doesn't need to be locked during\nthis (relatively slow) transaction.",
"is_bot": false,
"headline": "Stop locking the dandiset for zarr ingestion",
"author_name": "Dan LaManna",
"author_login": "danlamanna",
"committed_at": "2026-07-13T16:07:41Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "79304b9640eba184054c2568fac6bfd6bd891d4f",
"body": "…empty-loc\n\nGuard against empty `loc` in `_encode_pydantic_error`",
"is_bot": false,
"headline": "Merge pull request #2853 from candleindark/fix-encode-pydantic-error-…",
"author_name": "Yaroslav Halchenko",
"author_login": "yarikoptic",
"committed_at": "2026-07-10T19:00:44Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5e94e06db0b1f9b47e2f08ae4e4201c1f027be61",
"body": "Add search operator autocomplete dropdown (#2828)",
"is_bot": false,
"headline": "Merge pull request #2843 from dandi/search-operators-autocomplete",
"author_name": "Ben Dichter",
"author_login": "bendichter",
"committed_at": "2026-07-06T18:42:58Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "60ae5fbe759c9f30bc099a3fda700df7d17f3a81",
"body": "…tocomplete\n\nResolve conflict in DandisetSearchField.vue performSearch: combine this\nbranch's searchText naming + empty-query navigation + unchanged no-op with\nmaster's myDandisets handling (stay on the current search page).\n\nCo-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>",
"is_bot": false,
"headline": "Merge remote-tracking branch 'origin/master' into search-operators-au…",
"author_name": "Ben Dichter",
"author_login": "bendichter",
"committed_at": "2026-07-06T18:29:57Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "a50c30b42d0c14144003ff279730fde4666768b7",
"body": "Fix search within \"My Dandisets\" to include owned/embargoed dandisets",
"is_bot": false,
"headline": "Merge pull request #2841 from dandi/fix-search-my-dandisets-2834",
"author_name": "Ben Dichter",
"author_login": "bendichter",
"committed_at": "2026-07-06T18:14:06Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4b199036f1e2fe800865a3aead8aeda3786c2e1a",
"body": "`_encode_pydantic_error` accessed `error['loc'][0]`, which raises\n`IndexError` when a Pydantic validation error has an empty `loc` tuple.\nPydantic attaches errors raised by a top-level `@model_validator` to the\nmodel root, so their `loc` is `()`. Because the encoder runs inside the\n`except` handler \n[…]\nmodel validators on `Dandiset`/`Asset`, but it is a correct,\nlow-risk robustness fix independent of that.\n\nCo-Authored-By: Claude Code 2.1.173 / Claude Opus 4.8 claude-opus-4-8 <noreply@anthropic.com>",
"is_bot": false,
"headline": "Guard against empty `loc` in `_encode_pydantic_error`",
"author_name": "Isaac To",
"author_login": "candleindark",
"committed_at": "2026-06-11T20:52:17Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "4216eabdac63e6c59c39ac98ac0757172b1f2c67",
"body": "`performSearch` short-circuited whenever `searchText` equaled the route's\n`search` param (normalized with `|| ''`). On a dandiset landing page or the\nhome page the param is absent, so an empty Enter — which previously navigated\nto the search results page (listing all dandisets) — became a no-op. Thi\n[…]\npage always\nnavigates there (empty query allowed), and only apply the unchanged-query\nno-op guard when already on the search page.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "Fix empty-query Enter not navigating to search results page",
"author_name": "Ben Dichter",
"author_login": "bendichter",
"committed_at": "2026-06-09T13:06:34Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "1fe8a7a2ab66d5eace9813253b72a3be8b0bfb0d",
"body": "Vuetify renders role=\"combobox\" on the search field's wrapper element, but the\ninner <input> still exposes the implicit textbox role with the placeholder as\nits accessible name. `getByRole('combobox', { name: 'Search Dandisets' })`\ntherefore never matched (the combobox wrapper has no accessible name), so the\ndandisets-page search test timed out. Revert to matching the textbox, which is\nwhat the field actually exposes.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "E2E: target search field by textbox role, not combobox",
"author_name": "Ben Dichter",
"author_login": "bendichter",
"committed_at": "2026-06-08T22:47:49Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "a6054d159d823aea062a085715d222cf8e13cb51",
"body": "The Playwright E2E job runs the API via `manage.py runserver`, which spawns a\nthread per request. With the inherited CONN_MAX_AGE of 10 minutes, each thread\nholds its Postgres connection for the whole run, so the connection count grows\nwith the number of requests. Past Postgres's default max_connect\n[…]\nd set DJANGO_CONN_MAX_AGE=0 for the\nE2E job so connections close per-request and the count stays bounded regardless\nof test count.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "E2E CI: bound runserver DB connections to avoid Postgres exhaustion",
"author_name": "Ben Dichter",
"author_login": "bendichter",
"committed_at": "2026-06-08T19:58:16Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "eac7f2ec6074b4c1eff035be69d323b92c490a34",
"body": "…sets-2834",
"is_bot": false,
"headline": "Merge remote-tracking branch 'origin/master' into fix-search-my-dandi…",
"author_name": "Ben Dichter",
"author_login": "bendichter",
"committed_at": "2026-06-08T19:29:13Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d5f02eb7fc40c7767c0a91fefcc63f1d129e8acc",
"body": "Cover the operator dropdown end-to-end on the home page search field:\nfull list on focus, filtering as you type, insertion via Enter/click,\nmid-query insertion on the token under the cursor, Escape-to-dismiss, and\nEnter-submits-while-browsing.\n\nAlso update the existing dandisets-page search test to target the field by\nits combobox role, since the search input now exposes role=\"combobox\".\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "Add E2E tests for search operator autocomplete",
"author_name": "Ben Dichter",
"author_login": "bendichter",
"committed_at": "2026-06-08T19:21:45Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "61ff960268166700059360c5623a466e77026877",
"body": "…tocomplete",
"is_bot": false,
"headline": "Merge remote-tracking branch 'origin/master' into search-operators-au…",
"author_name": "Ben Dichter",
"author_login": "bendichter",
"committed_at": "2026-06-08T19:06:08Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "fa378fff5619966b0ad9d303af289843968c4673",
"body": "Remove `standard:` search operator",
"is_bot": false,
"headline": "Merge pull request #2844 from dandi/fix-standard-search-operator",
"author_name": "Ben Dichter",
"author_login": "bendichter",
"committed_at": "2026-06-08T19:01:38Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "05fda3c2c4a256e36951fd2ec012220168cdec4b",
"body": "The standard: operator never worked reliably against real data and isn't\nproviding enough value to keep. Remove it from the parser operator set,\nfilter logic, API help text, and frontend examples. Can be re-added later\nonce it's matched against the right metadata source.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "Remove standard: search operator",
"author_name": "Ben Dichter",
"author_login": "bendichter",
"committed_at": "2026-06-02T22:46:09Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "94266f2c4c84947c1b563a685f4376bc89097d07",
"body": "…-operator",
"is_bot": false,
"headline": "Merge remote-tracking branch 'origin/master' into fix-standard-search…",
"author_name": "Ben Dichter",
"author_login": "bendichter",
"committed_at": "2026-06-02T22:14:43Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "97cb450a53068da56a0c440f785b8f464226a4bc",
"body": "ci: bump @playwright/test 1.51.1 -> 1.60.0 to fix E2E stall (#2845)",
"is_bot": false,
"headline": "Merge pull request #2849 from dandi/bf-playwright-bump",
"author_name": "Yaroslav Halchenko",
"author_login": "yarikoptic",
"committed_at": "2026-06-02T22:02:33Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "451c872b55bdc4fda4b8ba8190c0b536281099be",
"body": "When I regenerated e2e/package-lock.json on Linux during the\nplaywright bump, npm omitted the optional macOS-only `fsevents`\nentries entirely. CI then refused with:\n\n npm error `npm ci` can only install packages when your package.json\n and package-lock.json or npm-shrinkwrap.json are in sync.\n np\n[…]\n=x64\n--package-lock-only`, which forces npm to include the platform-\nspecific optional deps in the lockfile.\n\nCo-Authored-By: Claude Code 2.1.160 / Claude Opus 4.7 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "ci: include darwin fsevents in e2e lockfile so `npm ci` passes (#2845)",
"author_name": "Yaroslav Halchenko",
"author_login": "yarikoptic",
"committed_at": "2026-06-02T21:46:35Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "a96a93614be02c327e57f972d7c5babbfd0d4111",
"body": "Frontend E2E jobs have stalled at `npx playwright install --with-deps`\nsince the GitHub-hosted `ubuntu-24.04` runner image moved from\n`20260518.149.1` to `20260525.161.1` (May 28-29 2026). The Chromium zip\ndownload streams to 100% on `cdn.playwright.dev/dbazure/...` and the\nprocess then never procee\n[…]\nl back to the container or\ncurl-prefetch approach.\n\nRefs: https://github.com/dandi/dandi-archive/issues/2845\n\nCo-Authored-By: Claude Code 2.1.160 / Claude Opus 4.7 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "ci: bump @playwright/test 1.51.1 -> 1.60.0 to fix E2E stall (#2845)",
"author_name": "Yaroslav Halchenko",
"author_login": "yarikoptic",
"committed_at": "2026-06-02T18:01:06Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "a232b1fdd72e549781db91d28e49cc63f7d5ff93",
"body": "The `standard:` operator matched `$.dataStandard[*].name` against asset\nmetadata, but `dataStandard` is reported on the Version's assetsSummary,\nnot on individual assets — so it never matched and always returned 0\nresults in production.\n\nMatch `standard:` against the Version metadata\n(`$.assetsSumma\n[…]\nxisting\ntest was rewritten to seed `dataStandard` on the version assetsSummary\n(where it actually lives) rather than on the asset.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "Fix standard: search operator to match version dataStandard",
"author_name": "Ben Dichter",
"author_login": "bendichter",
"committed_at": "2026-06-01T16:45:42Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "016db3793a95bf2e4716b62bd334c7ae8dde3b0b",
"body": "Display the example value (e.g. the 2024-01-01 date format for date\noperators) as a muted hint after each operator key, so users can see the\nexpected value format. Derived from the same operatorHelp examples.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "Show example/format hint next to each operator in the dropdown",
"author_name": "Ben Dichter",
"author_login": "bendichter",
"committed_at": "2026-06-01T16:16:00Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "e082c32f02396ede4ea35fac665b50a40ddad0c6",
"body": "Surface the available GitHub-style search operators (species:, approach:,\ncreated_after:, etc.) in a dropdown beneath the search field to make them\ndiscoverable, as requested in #2828.\n\n- Suggestions are derived from the existing operatorHelp list, so the help\n table and the dropdown stay in sync.\n\n[…]\nlist is teleported to <body> and positioned manually so the\n toolbar's overflow:hidden doesn't clip it; focus stays in the input.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "Add operator autocomplete dropdown to dandiset search (#2828)",
"author_name": "Ben Dichter",
"author_login": "bendichter",
"committed_at": "2026-06-01T16:10:47Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "7da3e92b5eddaa6d453e033f47d38225b1f322d5",
"body": "Searching from the \"My Dandisets\" page silently fell through to the\npublic search, omitting the user's embargoed dandisets (#2834).\n\n- DandisetSearchField: keep the search in context on the myDandisets\n route instead of always pushing to the public searchDandisets route.\n- DandisetsPage: send the `\n[…]\nsame flag.\n- MyDandisetsView: show a search-aware empty state instead of the\n misleading \"You haven't created any dandisets yet\".\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "Fix search within \"My Dandisets\" to include owned/embargoed dandisets",
"author_name": "Ben Dichter",
"author_login": "bendichter",
"committed_at": "2026-06-01T15:04:19Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "b4c0367556899d46358082d0fb711b2c025b6563",
"body": null,
"is_bot": false,
"headline": "Merge pull request #2833 from dandi/display-embargoed-until-date",
"author_name": "Ben Dichter",
"author_login": "bendichter",
"committed_at": "2026-05-29T16:39:57Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "28790e2157ea0d56c91bdf6ca15944072a4dfc31",
"body": "Updated the S3 backup documentation to include detailed sections on proposed solutions, requirements, advantages, limitations, and cost analysis for various backup strategies.",
"is_bot": false,
"headline": "Revise S3 backup documentation with detailed analysis (#2830)",
"author_name": "Cody Baker",
"author_login": "CodyCBakerPhD",
"committed_at": "2026-05-27T19:08:37Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "667dfd156d374f14c65e5b565e55b7c206b825f8",
"body": "…ppet\n\nUpdate code snippet to show correct instance",
"is_bot": false,
"headline": "Merge pull request #2689 from aplbrain/add-dandi-instance-to-code-sni…",
"author_name": "Yaroslav Halchenko",
"author_login": "yarikoptic",
"committed_at": "2026-05-21T16:34:52Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0aaad46fbc390dbe8388fe8c4e93e843a13ecf3f",
"body": "Show the embargo end date next to the access status in the\nlanding page's Access Information section, so owners, curators,\nand reviewers can see when an embargo lifts without querying the\nAPI. Falls back to the plain status when embargoedUntil is absent.\n\nCloses #2832\n\nCo-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "Display embargoedUntil date on the dandiset landing page",
"author_name": "Ben Dichter",
"author_login": "bendichter",
"committed_at": "2026-05-20T18:11:43Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "62e131f9686dbb039a775d755d9a91192b1bf913",
"body": "Display total data size on the homepage with one decimal place",
"is_bot": false,
"headline": "Merge pull request #2802 from kabilar/filesize",
"author_name": "Yaroslav Halchenko",
"author_login": "yarikoptic",
"committed_at": "2026-05-18T19:03:05Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "cd57e5524e780af010758ac4ca14aa399acd3673",
"body": "* Design doc for S3 backup\n\n* Fix outdated info\n\nWe are no longer considering the use of a bucket in a different region.\n\n* Update cost analysis with accurate inputs\n\nWe are expecting a bulk of 6PB over the next 5 years, not 30PB.\n\n* Fix typo in bulk retrieval cost\n\n* Add worst-case disaster recover\n[…]\nd-by: Roni Choudhury <roni.choudhury@kitware.com>\nCo-authored-by: Roni Choudhury <2903332+waxlamp@users.noreply.github.com>\nCo-authored-by: Cody Baker <51133164+CodyCBakerPhD@users.noreply.github.com>",
"is_bot": false,
"headline": "S3 Backup design doc (#2627)",
"author_name": "Mike VanDenburgh",
"author_login": "mvandenburgh",
"committed_at": "2026-05-18T19:02:57Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "f3d55fc58d271e2d5276bb0a08ad3d1bc6fc53f9",
"body": "Add support to open NIfTI assets in Neurosift",
"is_bot": false,
"headline": "Merge pull request #2700 from kabilar/neurosift",
"author_name": "Yaroslav Halchenko",
"author_login": "yarikoptic",
"committed_at": "2026-05-18T18:54:49Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "eecb54c0c52b170283c10ea960d087e1399ab3c1",
"body": "…/add-to-project-2.0.0\n\n[gh-actions](deps): Bump actions/add-to-project from 1.0.2 to 2.0.0",
"is_bot": false,
"headline": "Merge pull request #2813 from dandi/dependabot/github_actions/actions…",
"author_name": "Kabilar Gunalan",
"author_login": "kabilar",
"committed_at": "2026-05-18T18:47:14Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a77b4dc52e6f82f36f1dce4de9563a561ede0979",
"body": "…-4.3\n\nFix native Celery instructions for RabbitMQ 4.3",
"is_bot": false,
"headline": "Merge pull request #2815 from candleindark/fix-native-celery-rabbitmq…",
"author_name": "Yaroslav Halchenko",
"author_login": "yarikoptic",
"committed_at": "2026-05-18T18:46:34Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "7aa46103eb3c745b562c03a95cc5c4b1fefeb23a",
"body": "Fix documentation link in email template",
"is_bot": false,
"headline": "Merge pull request #2803 from kabilar/email2",
"author_name": "Yaroslav Halchenko",
"author_login": "yarikoptic",
"committed_at": "2026-05-18T18:45:41Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "bb07de2741a64478572aec2f2b976518bf30a4c5",
"body": "[codex] Fix citation author filtering",
"is_bot": false,
"headline": "Merge pull request #2794 from dandi/codex/fix-citation-author-filter",
"author_name": "Ben Dichter",
"author_login": "bendichter",
"committed_at": "2026-05-14T12:47:15Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b29fd936d3317dd3c77176259973a6acb3024a24",
"body": "Each citation formatter now early-returns when there are no authors,\nwith a dedicated template per format. The previous approach stuffed\nthe title into authorString and then blanked out the title slot\ndownstream, which conflated two variables (authorString held the\ntitle) and forced six near-identic\n[…]\nng quote (\"Title.\")\n- IEEE: comma inside the closing quote (\"Title,\")\n- authorString is now typed as string and only holds authors\n\nCo-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "Refactor no-author citation handling per-format",
"author_name": "Ben Dichter",
"author_login": "bendichter",
"committed_at": "2026-05-14T01:26:08Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "48d4f8cf037e08785325cc308d799c2d033b254a",
"body": "Wider, responsive advanced-search help popover (closes #2818)",
"is_bot": false,
"headline": "Merge pull request #2820 from bendichter/advanced-search-wider-popover",
"author_name": "Ben Dichter",
"author_login": "bendichter",
"committed_at": "2026-05-07T15:15:39Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "69f0886293dec58e2d8157380ff659bd08d2b315",
"body": "The popover was hard-capped at max-width: 420px, which forced the\ndescription column to wrap awkwardly even when there was plenty of\nviewport room.\n\nUse a responsive cap (min-width: 420px; max-width: min(80vw, 720px))\nso the popover comfortably fits the longest operator example on\nordinary monitors and shrinks gracefully on small screens. Also pin\nthe example column with white-space: nowrap so operator strings stay\nreadable as code.",
"is_bot": false,
"headline": "Make advanced-search help popover responsive (closes #2818)",
"author_name": "Ben Dichter",
"author_login": "bendichter",
"committed_at": "2026-05-07T14:45:54Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2692ef6c96e237303df04c0763476f1e29392339",
"body": "Gmail-style advanced search for dandiset listing",
"is_bot": false,
"headline": "Merge pull request #2814 from bendichter/advanced-search",
"author_name": "Ben Dichter",
"author_login": "bendichter",
"committed_at": "2026-05-07T12:06:31Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "334938c9ec6ac80723027f362fb0f08711b48704",
"body": "Per @yarikoptic: it's a one-time-use helper that returns None just so\nthe caller can raise. Drop the indirection — strptime + try/except in\nplace, raise SearchSyntaxError directly from the except.",
"is_bot": false,
"headline": "Inline _parse_date into apply_search_filters",
"author_name": "Ben Dichter",
"author_login": "bendichter",
"committed_at": "2026-05-06T23:56:44Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "65659e23e3ecf4301588cab5083958ae7d707e79",
"body": "Co-authored-by: Yaroslav Halchenko <debian@onerussian.com>",
"is_bot": false,
"headline": "Update web/src/components/DandisetSearchField.vue",
"author_name": "Ben Dichter",
"author_login": "bendichter",
"committed_at": "2026-05-06T20:45:52Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "7dc3afb6ddef3766fd4a75a0cdf0bc17e4d544fe",
"body": "Fix \"This Version\" header style on DLP",
"is_bot": false,
"headline": "Merge pull request #2816 from dandi/fix-this-version-header",
"author_name": "Ben Dichter",
"author_login": "bendichter",
"committed_at": "2026-05-06T19:46:43Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0cf78efd63defd2a8052f5d2fb16fa522d647ef4",
"body": "Replace the v-row + v-list-subheader with a v-card-title so the\nheading matches the \"Owners\" and \"Dandiset Actions\" cards on the\ndandiset landing page.\n\nCo-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "Fix \"This Version\" header style on DLP",
"author_name": "Ben Dichter",
"author_login": "bendichter",
"committed_at": "2026-05-06T13:53:30Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "ca7f283794c38c9d67ba3969f27be0ecf57ebc04",
"body": "- Drop the `\\\"` claim from the unbalanced-quote message; the parser\n doesn't support that escape (no_R2#2).\n- Empty operator value (e.g. `species:\" \"`) now raises 400 instead of\n being silently dropped (no_R2#6).\n- Override OpenAPI help text on the `search` parameter to document the\n operator voc\n[…]\niously generated\"\n comment in views/dandiset.py; trim __all__ in services.search to\n the public surface (parse_search, SearchSyntaxError); add a clarifying\n comment to the cross-key intersect test.",
"is_bot": false,
"headline": "Address round-2 review feedback",
"author_name": "Ben Dichter",
"author_login": "bendichter",
"committed_at": "2026-05-05T20:55:32Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "f39473d5924594a76acfba40b36e6846eacc8b10",
"body": "`species:` was still using the AssetSearch.species denormalized column,\nwhich the materialized view defines as `wasAttributedTo[0].species.name`\n(only the first attributed subject). That diverged from how the other\nasset operators (approach/technique/standard) now match — they scan the\nfull array vi\n[…]\n_apply_asset_filter` and unifies the four NAME_PATH operators behind a\nsingle jsonpath dispatch.\n\nAdds a regression test that asserts a multi-subject asset matches\n`species:Human` AND `species:mouse`.",
"is_bot": false,
"headline": "species: scan all attributed subjects, not just the first",
"author_name": "Ben Dichter",
"author_login": "bendichter",
"committed_at": "2026-05-05T20:50:22Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "4dd19c180d43e3f5a2586349307c84e2bd2cc668",
"body": "Per @yarikoptic's review: GitHub, Jira, Linear, Notion, etc. all use\nbare operators like `label:bug` for multi-valued filters; Gmail reserves\n`has:` for boolean checks (`has:attachment`), not for valued ones. The\n`has_` prefix here was a redundant disambiguator that the broader\necosystem doesn't nee\n[…]\nys comparison direction, not is/has semantics.\n\nAlso surface backend SearchSyntaxError 400s inline in DandisetsPage.vue\ninstead of letting them bubble up to the global \"something went wrong\"\nsnackbar.",
"is_bot": false,
"headline": "Drop has_ prefix from asset operators",
"author_name": "Ben Dichter",
"author_login": "bendichter",
"committed_at": "2026-05-05T20:43:35Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "2a9f13e7f23e1af008b9c635bbec6701980ba5ad",
"body": "Match the syntax used in the Dev Containers section and\ndocker-compose.override.yml (--queues instead of -Q, --beat\ninstead of -B) so all three invocations read identically.\n\nCo-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>",
"is_bot": false,
"headline": "Use long-form Celery options in native instructions",
"author_name": "Isaac To",
"author_login": "candleindark",
"committed_at": "2026-05-05T20:21:04Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "6a007789bcc389d4951a65a3a8af33f08a15bf31",
"body": "The \"Develop Natively\" section was missed by c10a585c. Without\n--without-mingle and --without-gossip, the worker tries to declare\nnon-exclusive, non-durable pidbox and celeryev queues, which\nRabbitMQ 4.3 rejects.\n\nCo-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>",
"is_bot": false,
"headline": "Fix native Celery command for RabbitMQ 4.3",
"author_name": "Isaac To",
"author_login": "candleindark",
"committed_at": "2026-05-05T20:17:04Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "e087cdf492b137c9a579bdb4d80627123c1c24fc",
"body": "Per @yarikoptic's review of #2814:\n\n- Drop the create_search_test_data management command. It was a dev-only\n seeder, never exercised by the test suite, and posed a risk of bit-rot\n and accidental destructive use against a real DB.\n\n- Tighten the parser's error handling: unbalanced quotes and unkn\n[…]\ns as two parametrized tests (10 happy-path\n cases, 6 error cases) instead of 13 individual tests.\n\nTest count: 35 (16 parametrized parser cases + 19 integration). All\npass; ruff check + format clean.",
"is_bot": false,
"headline": "Address review: strict parser, AI-marked tests, cleanup",
"author_name": "Ben Dichter",
"author_login": "bendichter",
"committed_at": "2026-05-05T19:05:52Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "65752ed31690a43efa88bcacb31585be2c20e138",
"body": "fix: use datePublished for citation year on published versions",
"is_bot": false,
"headline": "Merge pull request #2771 from dandi/fix-citation-missing-year",
"author_name": "Ben Dichter",
"author_login": "bendichter",
"committed_at": "2026-05-05T16:51:59Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2857c57262dcbac4ff1291075ddd6984cb00d0b3",
"body": "The Playwright test located the search field by accessibility name\n\"Search Dandisets by name,\", which was the original full placeholder.\nThe advanced-search PR shortened that placeholder to surface operator\nhints, breaking the locator. Switch to the shorter substring \"Search\nDandisets\" so the test survives future copy tweaks.",
"is_bot": false,
"headline": "e2e: match search placeholder by stable substring",
"author_name": "Ben Dichter",
"author_login": "bendichter",
"committed_at": "2026-05-05T01:47:30Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "185b36b8a09930b9087073ef5d11a3212928f970",
"body": "The seeder used to call delete_dandiset(user=owner, ...) but switched to\nraw ORM .delete() to bypass the published-version guard. The parameter\nwas left behind with a noqa: ARG001 comment, but the project's ruff\nconfig doesn't enable ARG001, so the noqa itself failed RUF100 in CI.\nJust drop the parameter and the comment.",
"is_bot": false,
"headline": "Drop unused owner parameter from _delete_existing",
"author_name": "Ben Dichter",
"author_login": "bendichter",
"committed_at": "2026-05-05T01:34:50Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2047c6cf33edc585bd2b613657b7bf3cb76e3565",
"body": "Recognize key:value operators inside the existing /api/dandisets/?search=\nparameter so users can filter by structured properties without leaving the\nlisting's search box. Same syntax works from the dandi CLI, curl, or any\nHTTP client.\n\nv1 operators (AND-combined; quoted multi-word values supported):\n[…]\nach\n operator, multi-element JSON array matching, repeated operators\n (intersection / annotation reuse), free text + operator combinations,\n embargoed-asset visibility, and fail-closed date parsing",
"is_bot": false,
"headline": "Add Gmail-style advanced search to dandiset listing",
"author_name": "Ben Dichter",
"author_login": "bendichter",
"committed_at": "2026-05-05T01:20:52Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "98bfd3886df8a5b93defead2f5f1d6d5872f1419",
"body": "Bumps [actions/add-to-project](https://github.com/actions/add-to-project) from 1.0.2 to 2.0.0.\n- [Release notes](https://github.com/actions/add-to-project/releases)\n- [Commits](https://github.com/actions/add-to-project/compare/v1.0.2...v2.0.0)\n\n---\nupdated-dependencies:\n- dependency-name: actions/add-to-project\n dependency-version: 2.0.0\n dependency-type: direct:production\n update-type: version-update:semver-major\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
"is_bot": true,
"headline": "[gh-actions](deps): Bump actions/add-to-project from 1.0.2 to 2.0.0",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-05-05T00:53:09Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "40d5a1411618e32248e509507a32fd46d167bade",
"body": "Get `fsspec` from `dandi[extras]`",
"is_bot": false,
"headline": "Merge pull request #2809 from dandi/fsspec",
"author_name": "Jacob Nesbitt",
"author_login": "jjnesbitt",
"committed_at": "2026-05-01T21:54:25Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "dad78a306ac0c8196a1094ec1b4a075d1b045b78",
"body": "`fsspec[http]` was added by #1545 as a transitive\ndependency of the CLI. Enabling the `[extras]` extra\ncauses `dandi` to depend on it automatically.",
"is_bot": false,
"headline": "Get `fsspec` from `dandi[extras]`",
"author_name": "Brian Helba",
"author_login": "brianhelba",
"committed_at": "2026-05-01T19:26:33Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e8bbc167be5a03ab8355f9d00eb1ea18fcc21d4d",
"body": null,
"is_bot": false,
"headline": "Merge pull request #2792 from dandi/celery-fix",
"author_name": "Brian Helba",
"author_login": "brianhelba",
"committed_at": "2026-05-01T14:58:27Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c10a585c90a6b6ed66801ee19be47a94006083e0",
"body": "RabbitMQ 4.3 disallows a queue configuration (non-exclusive,\nnon-durable) that Celery is still using by default. Celery\ncreates such queues for:\n* remote control (`pidbox`)\n* events (`celeryev`)\n\nTo disable the (remote) control queue:\n* `--without-mingle`\n* `worker_enable_remote_control = False`\n\nTo\n[…]\n(already the default)\n\nNote, gossip, mingle, and heartbeat features provide no\nvalue. They generate extra traffic and are only used for\ntask revocation (which DANDI doesn't use) and worker\nmonitoring.",
"is_bot": false,
"headline": "Fix incompatibility with RabbitMQ 4.3",
"author_name": "Brian Helba",
"author_login": "brianhelba",
"committed_at": "2026-05-01T14:04:47Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "7691821db6591d89c4ca908d4366729819901f5d",
"body": null,
"is_bot": false,
"headline": "Merge pull request #2807 from dandi/renovate/fsspec-2026.x",
"author_name": "Brian Helba",
"author_login": "brianhelba",
"committed_at": "2026-05-01T02:31:54Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5d74e292a5d0a7534a37c0f468d3cbda23bf5df0",
"body": null,
"is_bot": true,
"headline": "Update dependency fsspec to v2026",
"author_name": "renovate[bot]",
"author_login": "renovate[bot]",
"committed_at": "2026-05-01T02:16:35Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b87448e2b3f06064106d4b9eac27f7f6b41eae90",
"body": null,
"is_bot": false,
"headline": "Merge pull request #2808 from dandi/renovate/marked-18.x",
"author_name": "Brian Helba",
"author_login": "brianhelba",
"committed_at": "2026-05-01T02:15:44Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b242ed6a55d41bc176e9b557f7750900bff467f3",
"body": null,
"is_bot": true,
"headline": "Update dependency marked to v18",
"author_name": "renovate[bot]",
"author_login": "renovate[bot]",
"committed_at": "2026-05-01T02:04:40Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "61e177f3b0d2f561181a1f7d6521ba304a19a06f",
"body": null,
"is_bot": false,
"headline": "Merge pull request #2795 from dandi/renovate/all-minor-patch",
"author_name": "Brian Helba",
"author_login": "brianhelba",
"committed_at": "2026-05-01T02:03:40Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0d8a30fe2af9d299066669e4ab6e36118968dbd8",
"body": null,
"is_bot": false,
"headline": "Fix compatability between Allauth rate limiting and Heroku",
"author_name": "Brian Helba",
"author_login": "brianhelba",
"committed_at": "2026-05-01T01:49:29Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5e55591672845b72b75cca60bb0879a62637fcdd",
"body": null,
"is_bot": true,
"headline": "Pin dependencies",
"author_name": "renovate[bot]",
"author_login": "renovate[bot]",
"committed_at": "2026-05-01T01:48:49Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "af0da679527222d12f18f892db0c27fb7fdb846d",
"body": null,
"is_bot": false,
"headline": "Merge pull request #2804 from dandi/renovate/pytest-9.x",
"author_name": "Brian Helba",
"author_login": "brianhelba",
"committed_at": "2026-05-01T01:47:14Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "38d3a5b93d58ae039c530ce7fcb98a41a50ded5f",
"body": null,
"is_bot": true,
"headline": "Update dependency pytest to v9",
"author_name": "renovate[bot]",
"author_login": "renovate[bot]",
"committed_at": "2026-04-30T22:51:08Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b2aba89e6cfa907b59b060854d004525798514f3",
"body": null,
"is_bot": false,
"headline": "Merge pull request #2589 from dandi/drf-upgrade",
"author_name": "Brian Helba",
"author_login": "brianhelba",
"committed_at": "2026-04-30T22:47:41Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a192be974501e4daaa841ee3101453a8486902ca",
"body": null,
"is_bot": false,
"headline": "Merge remote-tracking branch 'origin/master' into drf-upgrade",
"author_name": "Brian Helba",
"author_login": "brianhelba",
"committed_at": "2026-04-30T22:33:44Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "fb0d8969cb2a3f186a92e85e23abe0f432a8da02",
"body": null,
"is_bot": false,
"headline": "Merge pull request #2796 from dandi/renovate/dev-deps",
"author_name": "Brian Helba",
"author_login": "brianhelba",
"committed_at": "2026-04-30T21:01:20Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "21c26a03336b8137432c12024ebb952ed1925d95",
"body": "* Add support for zarr multi-part uploads\n\n* Update tests/factories\n\n* Use DRF ValidationError instead of Django\n\nThis is to preserve existing behavior with how exceptions are handled in\nthe drf_utils module\n\n* Ensure zarr is marked pending on validated upload\n\n* Update swagger description of zarr upload views\n\n* Disallow multipart upload if zarr file size <= 5GB\n\n* Refactor use of common upload complete function",
"is_bot": false,
"headline": "Add support for zarr multi-part uploads (#2784)",
"author_name": "Jacob Nesbitt",
"author_login": "jjnesbitt",
"committed_at": "2026-04-30T19:15:20Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ca7b2f58da4dd7058550db022fb37412e1bb6753",
"body": null,
"is_bot": false,
"headline": "Fix documentation link in email template",
"author_name": "Kabilar Gunalan",
"author_login": "kabilar",
"committed_at": "2026-04-30T17:20:11Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "093e8db1545f4f3302c87f80d912c0e970cc62fb",
"body": null,
"is_bot": false,
"headline": "Display total data size with single decimal precision on homepage",
"author_name": "Kabilar Gunalan",
"author_login": "kabilar",
"committed_at": "2026-04-30T17:01:17Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2bda600c0d537c0bbdff9122b22984750eaac4c1",
"body": null,
"is_bot": false,
"headline": "Apply updated Ruff formatting",
"author_name": "Brian Helba",
"author_login": "brianhelba",
"committed_at": "2026-04-30T15:31:23Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1428d27ebf06abe9c76363110250ba2401212195",
"body": null,
"is_bot": true,
"headline": "Pin dependencies",
"author_name": "renovate[bot]",
"author_login": "renovate[bot]",
"committed_at": "2026-04-30T15:22:06Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "bad3c071aa574a555e23a68e919ad4207cb70003",
"body": null,
"is_bot": false,
"headline": "Merge pull request #2801 from dandi/type-packages",
"author_name": "Brian Helba",
"author_login": "brianhelba",
"committed_at": "2026-04-30T15:17:35Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a57962a97577b36a2b1310f28acf421e7e50b149",
"body": "Also add `types-requests`.",
"is_bot": false,
"headline": "Upgrade type-checking packages",
"author_name": "Brian Helba",
"author_login": "brianhelba",
"committed_at": "2026-04-30T15:01:08Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "edb24d40c7c361526d759b6828a708d5c58d5d4c",
"body": "Update dependency more_itertools to v11",
"is_bot": false,
"headline": "Merge pull request #2791 from dandi/renovate/more_itertools-11.x",
"author_name": "Brian Helba",
"author_login": "brianhelba",
"committed_at": "2026-04-29T22:02:44Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0674fa5b5a731fa113641fa95de4815b2a4fd789",
"body": "Update dependency rich to v15",
"is_bot": false,
"headline": "Merge pull request #2788 from dandi/renovate/rich-15.x",
"author_name": "Brian Helba",
"author_login": "brianhelba",
"committed_at": "2026-04-29T22:01:16Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a7dc2d48cf2ca88cffa5aacea7d6c02747f8d73e",
"body": null,
"is_bot": true,
"headline": "Update dependency rich to v15",
"author_name": "renovate[bot]",
"author_login": "renovate[bot]",
"committed_at": "2026-04-29T21:38:41Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "62b88f78bfe390038888c528364783c1855ef859",
"body": null,
"is_bot": true,
"headline": "Update dependency more_itertools to v11",
"author_name": "renovate[bot]",
"author_login": "renovate[bot]",
"committed_at": "2026-04-29T21:38:30Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2d93f6dd7f37ed052bd348ceb84d96366fe6f280",
"body": "Update dependency faker to v40",
"is_bot": false,
"headline": "Merge pull request #2790 from dandi/renovate/faker-40.x",
"author_name": "Brian Helba",
"author_login": "brianhelba",
"committed_at": "2026-04-29T21:36:30Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f45eae1931bb81431560e0cd3c9af0d2e89a3c68",
"body": "Update astral-sh/setup-uv action to v8",
"is_bot": false,
"headline": "Merge pull request #2786 from dandi/renovate/astral-sh-setup-uv-8.x",
"author_name": "Brian Helba",
"author_login": "brianhelba",
"committed_at": "2026-04-29T21:36:14Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "00bd1ce65e150e687f3192e74bb0534b7e15ab27",
"body": "Update dependency gunicorn to v25",
"is_bot": false,
"headline": "Merge pull request #2787 from dandi/renovate/gunicorn-25.x",
"author_name": "Brian Helba",
"author_login": "brianhelba",
"committed_at": "2026-04-29T21:35:50Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f0143fa88835a32c704fae26016eabb78427ce12",
"body": null,
"is_bot": true,
"headline": "Update dependency gunicorn to v25",
"author_name": "renovate[bot]",
"author_login": "renovate[bot]",
"committed_at": "2026-04-29T21:21:00Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "6c398c7bb7d6bca75af462a8f98c9167e20287ff",
"body": null,
"is_bot": true,
"headline": "Update dependency faker to v40",
"author_name": "renovate[bot]",
"author_login": "renovate[bot]",
"committed_at": "2026-04-29T21:20:50Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e005d6fb36cd6a9aa3df246ba4fd61c35243106d",
"body": null,
"is_bot": true,
"headline": "Update astral-sh/setup-uv action to v8",
"author_name": "renovate[bot]",
"author_login": "renovate[bot]",
"committed_at": "2026-04-29T21:20:39Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "8a05689e77fb6852e00daa0399fbf7f9277a5e7c",
"body": "…ref-parser-15.x",
"is_bot": false,
"headline": "Merge pull request #2783 from dandi/renovate/apidevtools-json-schema-…",
"author_name": "Brian Helba",
"author_login": "brianhelba",
"committed_at": "2026-04-29T21:18:14Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4b0a547eb6094c561f0167162e7cdccc3efc2b88",
"body": null,
"is_bot": true,
"headline": "Update dependency @apidevtools/json-schema-ref-parser to v15",
"author_name": "renovate[bot]",
"author_login": "renovate[bot]",
"committed_at": "2026-04-29T21:10:26Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d64b034c283fa6511465d5d1a96c3c7639ca5c1e",
"body": "Truncate long filenames in file browser",
"is_bot": false,
"headline": "Merge pull request #2726 from dandi/fix-long-filename-rendering",
"author_name": "Ben Dichter",
"author_login": "bendichter",
"committed_at": "2026-04-29T14:53:41Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "39dd0139e59164b9af08fe182c8704d4f44379af",
"body": null,
"is_bot": false,
"headline": "Fix citation author filtering",
"author_name": "Ben Dichter",
"author_login": "bendichter",
"committed_at": "2026-04-26T02:28:10Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c696bce61d5f08ec6bc44e5d7d221ea739d7e281",
"body": null,
"is_bot": false,
"headline": "Merge pull request #2747 from dandi/renovate/tsconfig-node22-replacement",
"author_name": "Brian Helba",
"author_login": "brianhelba",
"committed_at": "2026-04-24T19:23:19Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c4e775ccf4ea205fd2eccdbb7fcf6ff725185c28",
"body": null,
"is_bot": true,
"headline": "Replace dependency @tsconfig/node22 with @tsconfig/node24",
"author_name": "renovate[bot]",
"author_login": "renovate[bot]",
"committed_at": "2026-04-24T18:49:07Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "229cd65d724d3798693f592ab3b8592625fdfda8",
"body": "…ref-parser-13.x",
"is_bot": false,
"headline": "Merge pull request #2781 from dandi/renovate/apidevtools-json-schema-…",
"author_name": "Brian Helba",
"author_login": "brianhelba",
"committed_at": "2026-04-24T18:48:11Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "575a9757ea2542f31584a8dd6527c06b601533f6",
"body": null,
"is_bot": true,
"headline": "Update dependency @apidevtools/json-schema-ref-parser to v13",
"author_name": "renovate[bot]",
"author_login": "renovate[bot]",
"committed_at": "2026-04-24T18:25:45Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "cef7925c47ba0d7a16dd4b98147372483824ab88",
"body": null,
"is_bot": false,
"headline": "Merge pull request #2785 from dandi/vue-router",
"author_name": "Brian Helba",
"author_login": "brianhelba",
"committed_at": "2026-04-24T18:22:47Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4ca860aa867515fc3f28c3ad0d59c1d5c1b0e1e2",
"body": null,
"is_bot": false,
"headline": "Use `DandisetIdentifierField` in appropriate Serializers",
"author_name": "Brian Helba",
"author_login": "brianhelba",
"committed_at": "2026-04-24T16:12:19Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "421df0fca452fd8e3dadce6eb4737cda81c6a146",
"body": "The latest DRF now enforces uniqueness constraints in serializer validation,\nso all other validation should happen at the same time to avoid incorrect\nerror codes being returned.",
"is_bot": false,
"headline": "Move validation logic into `ZarrArchiveSerializer`",
"author_name": "Brian Helba",
"author_login": "brianhelba",
"committed_at": "2026-04-24T16:12:14Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "59be17e619ff0e32f19131792c95943e8e344bcc",
"body": null,
"is_bot": false,
"headline": "Move `vue-router` to runtime dependencies",
"author_name": "Brian Helba",
"author_login": "brianhelba",
"committed_at": "2026-04-24T15:45:52Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "dde539bc2523beeb6882822fc47a6f1b5321eee9",
"body": "Also rename the `VersionViewSet` for consistency.",
"is_bot": false,
"headline": "Rename the `NestedAssetViewSet` URL basename to avoid a conflict",
"author_name": "Brian Helba",
"author_login": "brianhelba",
"committed_at": "2026-04-24T00:02:12Z",
"body_truncated": false,
"is_coding_agent": false
}
],
"releases_count": 100,
"commits_last_year": 668,
"latest_release_at": "2026-04-09T15:23:27Z",
"latest_release_tag": "v0.23.0",
"releases_from_tags": false,
"days_since_last_push": 0,
"active_weeks_last_year": 47,
"days_since_latest_release": 110,
"mean_days_between_releases": 7
},
"community": {
"has_readme": true,
"has_license": true,
"has_description": true,
"has_contributing": false,
"health_percentage": 50,
"has_issue_template": false,
"has_code_of_conduct": true,
"has_pull_request_template": false
},
"ecosystem": {
"packages": []
},
"popularity": {
"forks": 20,
"stars": 25,
"watchers": 4,
"fork_history": {
"days": [
{
"date": "2020-09-15",
"count": 1
},
{
"date": "2021-03-23",
"count": 1
},
{
"date": "2021-10-12",
"count": 1
},
{
"date": "2023-02-23",
"count": 1
},
{
"date": "2023-10-20",
"count": 1
},
{
"date": "2023-11-03",
"count": 1
},
{
"date": "2023-11-17",
"count": 1
},
{
"date": "2024-01-23",
"count": 1
},
{
"date": "2024-10-21",
"count": 1
},
{
"date": "2024-10-31",
"count": 1
},
{
"date": "2024-11-04",
"count": 1
},
{
"date": "2024-11-20",
"count": 1
},
{
"date": "2025-03-06",
"count": 1
},
{
"date": "2025-06-04",
"count": 1
},
{
"date": "2025-09-04",
"count": 1
},
{
"date": "2025-09-23",
"count": 1
},
{
"date": "2025-11-11",
"count": 1
},
{
"date": "2026-01-19",
"count": 1
},
{
"date": "2026-03-05",
"count": 1
},
{
"date": "2026-04-14",
"count": 1
}
],
"complete": true,
"collected": 20,
"total_forks": 20
},
"star_history": null,
"open_issues_and_prs": 451
},
"ai_readiness": {
"has_nix": true,
"example_dirs": [],
"has_llms_txt": false,
"has_dockerfile": true,
"has_mcp_signal": false,
"bootstrap_files": [],
"api_schema_files": [],
"has_devcontainer": true,
"typecheck_configs": [
"web/tsconfig.json"
],
"toolchain_manifests": [],
"largest_source_bytes": 74743,
"source_files_sampled": 239,
"oversized_source_files": 2,
"agent_instruction_files": [],
"agent_instruction_max_bytes": null
},
"dependencies": {
"manifests": [
"e2e/package.json",
"pyproject.toml",
"web/package.json"
],
"advisories": {
"error": null,
"scope": null,
"source": null,
"findings": [],
"collected": false,
"malicious": [],
"truncated": false,
"by_severity": {},
"advisory_count": 0,
"affected_count": 0,
"assessed_count": 0,
"malicious_count": 0,
"assessed_package": null,
"unassessed_count": 0,
"direct_affected_count": 0
},
"ecosystems": [
"npm",
"pypi"
],
"dependencies": [
{
"name": "boto3",
"manifest": "pyproject.toml",
"ecosystem": "pypi",
"version_constraint": "==1.42.97"
},
{
"name": "celery",
"manifest": "pyproject.toml",
"ecosystem": "pypi",
"version_constraint": "==5.6.3"
},
{
"name": "dandischema",
"manifest": "pyproject.toml",
"ecosystem": "pypi",
"version_constraint": "==0.12.1"
},
{
"name": "django",
"manifest": "pyproject.toml",
"ecosystem": "pypi",
"version_constraint": "==5.2.13"
},
{
"name": "django-allauth",
"manifest": "pyproject.toml",
"ecosystem": "pypi",
"version_constraint": "==65.16.1"
},
{
"name": "django-auth-style",
"manifest": "pyproject.toml",
"ecosystem": "pypi",
"version_constraint": "==0.15.0"
},
{
"name": "django-click",
"manifest": "pyproject.toml",
"ecosystem": "pypi",
"version_constraint": "==2.5.0"
},
{
"name": "django-cors-headers",
"manifest": "pyproject.toml",
"ecosystem": "pypi",
"version_constraint": "==4.9.0"
},
{
"name": "django-environ",
"manifest": "pyproject.toml",
"ecosystem": "pypi",
"version_constraint": "==0.13.0"
},
{
"name": "django-extensions",
"manifest": "pyproject.toml",
"ecosystem": "pypi",
"version_constraint": "==4.1"
},
{
"name": "django-filter",
"manifest": "pyproject.toml",
"ecosystem": "pypi",
"version_constraint": "==25.2"
},
{
"name": "django-guardian",
"manifest": "pyproject.toml",
"ecosystem": "pypi",
"version_constraint": "==3.3.1"
},
{
"name": "django-oauth-toolkit",
"manifest": "pyproject.toml",
"ecosystem": "pypi",
"version_constraint": "==3.2.0"
},
{
"name": "django-resonant-settings",
"manifest": "pyproject.toml",
"ecosystem": "pypi",
"version_constraint": "==0.50.4"
},
{
"name": "django-resonant-utils",
"manifest": "pyproject.toml",
"ecosystem": "pypi",
"version_constraint": "==0.19.0"
},
{
"name": "django-stubs-ext",
"manifest": "pyproject.toml",
"ecosystem": "pypi",
"version_constraint": "==6.0.3"
},
{
"name": "djangorestframework",
"manifest": "pyproject.toml",
"ecosystem": "pypi",
"version_constraint": "==3.17.1"
},
{
"name": "drf-extensions",
"manifest": "pyproject.toml",
"ecosystem": "pypi",
"version_constraint": "==0.8.0"
},
{
"name": "drf-yasg",
"manifest": "pyproject.toml",
"ecosystem": "pypi",
"version_constraint": "==1.21.15"
},
{
"name": "jsonschema",
"manifest": "pyproject.toml",
"ecosystem": "pypi",
"version_constraint": "==4.26.0"
},
{
"name": "more_itertools",
"manifest": "pyproject.toml",
"ecosystem": "pypi",
"version_constraint": "==11.0.2"
},
{
"name": "psycopg",
"manifest": "pyproject.toml",
"ecosystem": "pypi",
"version_constraint": "==3.3.3"
},
{
"name": "pyyaml",
"manifest": "pyproject.toml",
"ecosystem": "pypi",
"version_constraint": "==6.0.3"
},
{
"name": "requests",
"manifest": "pyproject.toml",
"ecosystem": "pypi",
"version_constraint": "==2.33.1"
},
{
"name": "rich",
"manifest": "pyproject.toml",
"ecosystem": "pypi",
"version_constraint": "==15.0.0"
},
{
"name": "whitenoise",
"manifest": "pyproject.toml",
"ecosystem": "pypi",
"version_constraint": "==6.12.0"
},
{
"name": "zarr-checksum",
"manifest": "pyproject.toml",
"ecosystem": "pypi",
"version_constraint": "==0.4.7"
},
{
"name": "django-s3-file-field",
"manifest": "pyproject.toml",
"ecosystem": "pypi",
"version_constraint": "==1.1.0"
},
{
"name": "django-storages",
"manifest": "pyproject.toml",
"ecosystem": "pypi",
"version_constraint": "==1.14.6"
},
{
"name": "sentry-sdk",
"manifest": "pyproject.toml",
"ecosystem": "pypi",
"version_constraint": "==2.58.0"
},
{
"name": "gunicorn",
"manifest": "pyproject.toml",
"ecosystem": "pypi",
"version_constraint": "==25.3.0"
},
{
"name": "tqdm",
"manifest": "pyproject.toml",
"ecosystem": "pypi",
"version_constraint": "==4.67.3"
},
{
"name": "@apidevtools/json-schema-ref-parser",
"manifest": "web/package.json",
"ecosystem": "npm",
"version_constraint": "15.3.5"
},
{
"name": "@koumoul/vjsf",
"manifest": "web/package.json",
"ecosystem": "npm",
"version_constraint": "3.12.0"
},
{
"name": "@mdi/font",
"manifest": "web/package.json",
"ecosystem": "npm",
"version_constraint": "7.4.47"
},
{
"name": "@resonant/oauth-client",
"manifest": "web/package.json",
"ecosystem": "npm",
"version_constraint": "1.0.3"
},
{
"name": "@sentry/vue",
"manifest": "web/package.json",
"ecosystem": "npm",
"version_constraint": "10.44.0"
},
{
"name": "axios",
"manifest": "web/package.json",
"ecosystem": "npm",
"version_constraint": "1.8.1"
},
{
"name": "core-js",
"manifest": "web/package.json",
"ecosystem": "npm",
"version_constraint": "3.41.0"
},
{
"name": "dompurify",
"manifest": "web/package.json",
"ecosystem": "npm",
"version_constraint": "3.2.4"
},
{
"name": "filesize",
"manifest": "web/package.json",
"ecosystem": "npm",
"version_constraint": "11.0.14"
},
{
"name": "js-yaml",
"manifest": "web/package.json",
"ecosystem": "npm",
"version_constraint": "4.1.1"
},
{
"name": "lodash",
"manifest": "web/package.json",
"ecosystem": "npm",
"version_constraint": "4.17.21"
},
{
"name": "marked",
"manifest": "web/package.json",
"ecosystem": "npm",
"version_constraint": "18.0.2"
},
{
"name": "moment",
"manifest": "web/package.json",
"ecosystem": "npm",
"version_constraint": "2.30.1"
},
{
"name": "pinia",
"manifest": "web/package.json",
"ecosystem": "npm",
"version_constraint": "3.0.1"
},
{
"name": "roboto-fontface",
"manifest": "web/package.json",
"ecosystem": "npm",
"version_constraint": "0.10.0"
},
{
"name": "vue",
"manifest": "web/package.json",
"ecosystem": "npm",
"version_constraint": "3.5.13"
},
{
"name": "vue-router",
"manifest": "web/package.json",
"ecosystem": "npm",
"version_constraint": "4.5.0"
},
{
"name": "vue3-social-sharing",
"manifest": "web/package.json",
"ecosystem": "npm",
"version_constraint": "1.3.1"
},
{
"name": "vuedraggable",
"manifest": "web/package.json",
"ecosystem": "npm",
"version_constraint": "4.1.0"
},
{
"name": "vuetify",
"manifest": "web/package.json",
"ecosystem": "npm",
"version_constraint": "3.7.15"
}
],
"all_dependencies": {
"error": "GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository",
"source": null,
"packages": [],
"collected": false,
"truncated": false,
"total_count": null,
"direct_count": null,
"indirect_count": null
}
},
"maintainership": {
"issues": {
"open_prs": 53,
"merged_prs": 1384,
"open_issues": 398,
"closed_ratio": 0.677,
"closed_issues": 835,
"closed_unmerged_prs": 156
},
"bus_factor": 3,
"bot_contributors": 2,
"top_contributors": [
{
"type": "User",
"login": "mvandenburgh",
"commits": 1803,
"avatar_url": "https://avatars.githubusercontent.com/u/37340715?v=4"
},
{
"type": "User",
"login": "dchiquito",
"commits": 1637,
"avatar_url": "https://avatars.githubusercontent.com/u/577946?v=4"
},
{
"type": "User",
"login": "jjnesbitt",
"commits": 1302,
"avatar_url": "https://avatars.githubusercontent.com/u/11370025?v=4"
},
{
"type": "User",
"login": "waxlamp",
"commits": 549,
"avatar_url": "https://avatars.githubusercontent.com/u/2903332?v=4"
},
{
"type": "User",
"login": "brianhelba",
"commits": 519,
"avatar_url": "https://avatars.githubusercontent.com/u/1282879?v=4"
},
{
"type": "User",
"login": "dandibot",
"commits": 275,
"avatar_url": "https://avatars.githubusercontent.com/u/56163584?v=4"
},
{
"type": "User",
"login": "danlamanna",
"commits": 244,
"avatar_url": "https://avatars.githubusercontent.com/u/608229?v=4"
},
{
"type": "User",
"login": "yarikoptic",
"commits": 222,
"avatar_url": "https://avatars.githubusercontent.com/u/39889?v=4"
},
{
"type": "User",
"login": "satra",
"commits": 112,
"avatar_url": "https://avatars.githubusercontent.com/u/184063?v=4"
},
{
"type": "User",
"login": "bendichter",
"commits": 90,
"avatar_url": "https://avatars.githubusercontent.com/u/844306?v=4"
}
],
"contributors_sampled": 33,
"top_contributor_share": 0.251
},
"quality_signals": {
"has_ci": true,
"has_tests": true,
"ci_workflows": [
"auto-add-issues.yml",
"backend-ci.yml",
"backend-production-deploy.yml",
"backend-staging-deploy.yml",
"cli-integration.yml",
"frontend-ci.yml",
"release.yml"
],
"has_docs_dir": true,
"linter_configs": [
"eslint.config.js",
"tox.ini"
],
"has_editorconfig": true,
"has_linter_config": true,
"has_precommit_config": true
},
"security_signals": {
"lockfiles": [
"package-lock.json",
"uv.lock"
],
"scorecard": {
"checks": [
{
"name": "Binary-Artifacts",
"score": 10,
"reason": "no binaries found in the repo",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#binary-artifacts"
},
{
"name": "Branch-Protection",
"score": null,
"reason": "internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#branch-protection"
},
{
"name": "CI-Tests",
"score": 10,
"reason": "11 out of 11 merged PRs checked by a CI test -- score normalized to 10",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#ci-tests"
},
{
"name": "CII-Best-Practices",
"score": 0,
"reason": "no effort to earn an OpenSSF best practices badge detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#cii-best-practices"
},
{
"name": "Code-Review",
"score": 9,
"reason": "Found 10/11 approved changesets -- score normalized to 9",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#code-review"
},
{
"name": "Contributors",
"score": 10,
"reason": "project has 63 contributing companies or organizations",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#contributors"
},
{
"name": "Dangerous-Workflow",
"score": 10,
"reason": "no dangerous workflow patterns detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dangerous-workflow"
},
{
"name": "Dependency-Update-Tool",
"score": 10,
"reason": "update tool detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dependency-update-tool"
},
{
"name": "Fuzzing",
"score": 0,
"reason": "project is not fuzzed",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#fuzzing"
},
{
"name": "License",
"score": 10,
"reason": "license file detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#license"
},
{
"name": "Maintained",
"score": 10,
"reason": "30 commit(s) and 20 issue activity found in the last 90 days -- score normalized to 10",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#maintained"
},
{
"name": "Packaging",
"score": null,
"reason": "packaging workflow not detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#packaging"
},
{
"name": "Pinned-Dependencies",
"score": 2,
"reason": "dependency not pinned by hash detected -- score normalized to 2",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#pinned-dependencies"
},
{
"name": "SAST",
"score": 0,
"reason": "SAST tool is not run on all commits -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#sast"
},
{
"name": "Security-Policy",
"score": 0,
"reason": "security policy file not detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#security-policy"
},
{
"name": "Signed-Releases",
"score": null,
"reason": "no releases found",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#signed-releases"
},
{
"name": "Token-Permissions",
"score": 0,
"reason": "detected GitHub workflow tokens with excessive permissions",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#token-permissions"
},
{
"name": "Vulnerabilities",
"score": 0,
"reason": "158 existing vulnerabilities detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#vulnerabilities"
}
],
"commit": "c72204035e3840d22d8090beed3be502e764de90",
"ran_at": "2026-07-28T21:01:48Z",
"aggregate_score": 5.6,
"scorecard_version": "v5.5.0"
},
"has_codeql_workflow": false,
"has_security_policy": false,
"has_dependabot_config": true
},
"contribution_flow": {
"collected": true,
"ci_last_run_at": "2026-07-28T16:39:24Z",
"oldest_open_prs": [
{
"number": 2227,
"created_at": "2025-03-20T18:08:20Z",
"last_comment_at": "2025-11-07T17:57:02Z",
"last_comment_author": "asmacdo"
},
{
"number": 2246,
"created_at": "2025-03-27T14:57:55Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 2295,
"created_at": "2025-04-08T20:52:37Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 2367,
"created_at": "2025-04-30T15:54:50Z",
"last_comment_at": "2025-10-07T17:06:30Z",
"last_comment_author": "mvandenburgh"
},
{
"number": 2368,
"created_at": "2025-04-30T16:01:19Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 2370,
"created_at": "2025-05-06T19:12:57Z",
"last_comment_at": "2026-01-05T19:31:26Z",
"last_comment_author": "yarikoptic"
},
{
"number": 2586,
"created_at": "2025-10-07T17:03:02Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 2590,
"created_at": "2025-10-08T15:10:51Z",
"last_comment_at": "2026-03-23T18:29:38Z",
"last_comment_author": "yarikoptic"
},
{
"number": 2606,
"created_at": "2025-10-20T15:30:02Z",
"last_comment_at": "2026-06-28T22:41:44Z",
"last_comment_author": "bendichter"
},
{
"number": 2613,
"created_at": "2025-10-24T23:00:01Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 2631,
"created_at": "2025-11-04T20:27:30Z",
"last_comment_at": "2026-03-23T19:27:02Z",
"last_comment_author": "yarikoptic"
},
{
"number": 2654,
"created_at": "2025-11-26T14:43:46Z",
"last_comment_at": "2025-11-26T15:14:42Z",
"last_comment_author": "yarikoptic"
},
{
"number": 2656,
"created_at": "2025-11-26T14:55:48Z",
"last_comment_at": "2026-01-05T19:29:54Z",
"last_comment_author": "yarikoptic"
},
{
"number": 2669,
"created_at": "2025-12-12T18:45:07Z",
"last_comment_at": "2025-12-24T23:39:06Z",
"last_comment_author": "waxlamp"
},
{
"number": 2673,
"created_at": "2025-12-14T15:19:31Z",
"last_comment_at": "2025-12-22T15:10:21Z",
"last_comment_author": "bendichter"
},
{
"number": 2679,
"created_at": "2025-12-17T15:31:33Z",
"last_comment_at": "2025-12-23T16:39:30Z",
"last_comment_author": "jjnesbitt"
},
{
"number": 2702,
"created_at": "2026-02-06T17:57:44Z",
"last_comment_at": "2026-03-02T19:02:05Z",
"last_comment_author": "waxlamp"
},
{
"number": 2719,
"created_at": "2026-02-26T23:00:59Z",
"last_comment_at": "2026-04-30T19:07:13Z",
"last_comment_author": "jjnesbitt"
},
{
"number": 2723,
"created_at": "2026-03-05T14:40:40Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 2729,
"created_at": "2026-03-12T21:31:18Z",
"last_comment_at": null,
"last_comment_author": null
}
],
"last_merged_pr_at": "2026-07-28T16:38:54Z",
"ci_last_conclusion": "SUCCESS",
"oldest_open_issues": [
{
"number": 794,
"created_at": "2020-02-29T01:40:21Z",
"last_comment_at": "2021-05-18T15:25:18Z",
"last_comment_author": "waxlamp"
},
{
"number": 772,
"created_at": "2020-03-01T17:30:37Z",
"last_comment_at": "2022-01-04T00:19:20Z",
"last_comment_author": "satra"
},
{
"number": 773,
"created_at": "2020-03-31T23:46:18Z",
"last_comment_at": "2020-04-01T00:11:15Z",
"last_comment_author": "bendichter"
},
{
"number": 774,
"created_at": "2020-06-29T16:33:26Z",
"last_comment_at": "2021-12-28T05:36:11Z",
"last_comment_author": "yarikoptic"
},
{
"number": 771,
"created_at": "2021-02-26T14:15:55Z",
"last_comment_at": "2022-01-04T18:39:56Z",
"last_comment_author": "yarikoptic"
},
{
"number": 177,
"created_at": "2021-03-24T13:55:46Z",
"last_comment_at": "2023-03-01T23:16:39Z",
"last_comment_author": "waxlamp"
},
{
"number": 189,
"created_at": "2021-03-26T22:18:17Z",
"last_comment_at": "2025-10-20T11:47:31Z",
"last_comment_author": "satra"
},
{
"number": 230,
"created_at": "2021-04-10T14:19:13Z",
"last_comment_at": "2022-09-19T14:52:50Z",
"last_comment_author": "waxlamp"
},
{
"number": 779,
"created_at": "2021-04-15T16:31:57Z",
"last_comment_at": "2021-11-18T15:35:58Z",
"last_comment_author": "jtomeck"
},
{
"number": 780,
"created_at": "2021-05-07T15:04:13Z",
"last_comment_at": "2024-01-31T17:18:10Z",
"last_comment_author": "yarikoptic"
},
{
"number": 787,
"created_at": "2021-05-14T22:08:02Z",
"last_comment_at": "2022-01-03T23:08:56Z",
"last_comment_author": "waxlamp"
},
{
"number": 289,
"created_at": "2021-05-17T20:33:25Z",
"last_comment_at": "2021-07-21T21:00:05Z",
"last_comment_author": "dchiquito"
},
{
"number": 770,
"created_at": "2021-06-17T20:58:30Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 764,
"created_at": "2021-06-18T14:23:05Z",
"last_comment_at": "2021-08-10T19:52:41Z",
"last_comment_author": "waxlamp"
},
{
"number": 352,
"created_at": "2021-06-22T02:04:16Z",
"last_comment_at": "2022-01-21T14:47:55Z",
"last_comment_author": "waxlamp"
},
{
"number": 356,
"created_at": "2021-06-23T13:15:25Z",
"last_comment_at": "2022-06-22T22:19:16Z",
"last_comment_author": "waxlamp"
},
{
"number": 763,
"created_at": "2021-06-28T18:48:24Z",
"last_comment_at": "2021-12-29T15:16:06Z",
"last_comment_author": "waxlamp"
},
{
"number": 391,
"created_at": "2021-07-06T13:44:21Z",
"last_comment_at": "2022-01-04T15:48:54Z",
"last_comment_author": "dchiquito"
},
{
"number": 392,
"created_at": "2021-07-06T14:45:05Z",
"last_comment_at": "2022-01-04T15:38:46Z",
"last_comment_author": "dchiquito"
},
{
"number": 397,
"created_at": "2021-07-06T22:01:15Z",
"last_comment_at": "2022-07-26T16:03:47Z",
"last_comment_author": "jwodder"
}
]
}
},
"config": {
"disabled_metrics": [],
"disabled_categories": [],
"disabled_components": {}
},
"source": {
"url": "https://github.com/dandi/dandi-archive",
"host": "github.com",
"name": "dandi-archive",
"owner": "dandi"
},
"metrics": {
"overall": {
"key": "overall",
"band": "good",
"name": "Overall health",
"note": null,
"notes": [],
"value": 76,
"inputs": {
"security": 56,
"vitality": 94,
"community": 50,
"governance": 75,
"engineering": 96
},
"components": []
},
"categories": [
{
"key": "vitality",
"band": "excellent",
"name": "Vitality",
"value": 94,
"weight": 0.22,
"metrics": [
{
"key": "development_activity",
"band": "excellent",
"name": "Development activity",
"note": null,
"notes": [],
"value": 96,
"inputs": {
"commits_last_year": 668,
"human_commit_share": 0.86,
"days_since_last_push": 0,
"active_weeks_last_year": 47
},
"components": [
{
"key": "push_recency",
"name": "Push recency",
"detail": "last push 0 days ago",
"points": 36,
"status": "met",
"details": [
{
"code": "push_recency",
"params": {
"days": 0
}
}
],
"max_points": 36
},
{
"key": "commit_cadence",
"name": "Commit cadence",
"detail": "47/52 weeks with commits",
"points": 32.5,
"status": "partial",
"details": [
{
"code": "commit_cadence_weeks",
"params": {
"weeks": 47
}
}
],
"max_points": 36
},
{
"key": "commit_volume",
"name": "Commit volume",
"detail": "668 commits in the last year",
"points": 18,
"status": "met",
"details": [
{
"code": "commits_last_year",
"params": {
"count": 668
}
}
],
"max_points": 18
},
{
"key": "openssf_scorecard_maintained",
"name": "OpenSSF Scorecard: Maintained",
"detail": "30 commit(s) and 20 issue activity found in the last 90 days -- score normalized to 10",
"points": 10,
"status": "met",
"details": [],
"max_points": 10
}
]
},
{
"key": "release_discipline",
"band": "excellent",
"name": "Release discipline",
"note": "Excluded from scoring (no data or not applicable): OpenSSF Scorecard: Signed-Releases. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"openssf_scorecard_signed_releases"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 90,
"inputs": {
"releases_count": 100,
"latest_release_tag": "v0.23.0",
"releases_from_tags": false,
"days_since_latest_release": 110,
"mean_days_between_releases": 7
},
"components": [
{
"key": "ships_releases",
"name": "Ships releases",
"detail": "100 releases published",
"points": 27,
"status": "met",
"details": [
{
"code": "releases_published",
"params": {
"count": 100
}
}
],
"max_points": 27
},
{
"key": "release_recency",
"name": "Release recency",
"detail": "latest release 110 days ago",
"points": 27,
"status": "partial",
"details": [
{
"code": "release_recency",
"params": {
"days": 110
}
}
],
"max_points": 36
},
{
"key": "release_cadence",
"name": "Release cadence",
"detail": "a release every ~7 days",
"points": 27,
"status": "met",
"details": [
{
"code": "release_cadence",
"params": {
"gap": 7
}
}
],
"max_points": 27
},
{
"key": "openssf_scorecard_signed_releases",
"name": "OpenSSF Scorecard: Signed-Releases",
"detail": "no releases found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 10
}
]
},
{
"key": "abandonment",
"band": "excellent",
"name": "Abandonment",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"cap": null,
"state": "maintained",
"guards": [],
"signals": [],
"red_flag": false,
"multiplier_pct": 100,
"declared_reason": null,
"unverified_reason": null,
"unanswered_open_prs": null,
"unanswered_open_issues": null,
"days_since_last_merged_pr": null,
"days_since_last_human_commit": 0,
"days_since_last_human_commit_is_floor": false
},
"components": [
{
"key": "project_is_still_maintained",
"name": "Project is still maintained",
"detail": "last human commit 0 days ago",
"points": 100,
"status": "met",
"details": [
{
"code": "abandonment_maintained",
"params": {
"days": 0
}
}
],
"max_points": 100
}
]
}
],
"description": "Is the project alive — is code being written and are releases shipping?"
},
{
"key": "community",
"band": "moderate",
"name": "Community & Adoption",
"value": 50,
"weight": 0.18,
"metrics": [
{
"key": "popularity",
"band": "at_risk",
"name": "Popularity & adoption",
"note": null,
"notes": [],
"value": 36,
"inputs": {
"forks": 20,
"stars": 25,
"watchers": 4,
"growth_state": "unverified",
"growth_factor_pct": 100,
"growth_unverified_reason": "no_history"
},
"components": [
{
"key": "stars",
"name": "Stars",
"detail": "25 stars",
"points": 22.4,
"status": "partial",
"details": [
{
"code": "stars",
"params": {
"count": 25
}
}
],
"max_points": 60
},
{
"key": "forks",
"name": "Forks",
"detail": "20 forks",
"points": 10.7,
"status": "partial",
"details": [
{
"code": "forks",
"params": {
"count": 20
}
}
],
"max_points": 25
},
{
"key": "watchers",
"name": "Watchers",
"detail": "4 watchers",
"points": 2.7,
"status": "partial",
"details": [
{
"code": "watchers",
"params": {
"count": 4
}
}
],
"max_points": 15
}
]
},
{
"key": "community_health",
"band": "moderate",
"name": "Community health",
"note": null,
"notes": [],
"value": 65,
"inputs": {
"has_readme": true,
"has_license": true,
"has_contributing": false,
"has_issue_template": false,
"has_code_of_conduct": true,
"has_pull_request_template": false
},
"components": [
{
"key": "readme",
"name": "README",
"detail": null,
"points": 22.5,
"status": "met",
"details": [],
"max_points": 22.5
},
{
"key": "license",
"name": "License",
"detail": "recognized license (Apache-2.0)",
"points": 22.5,
"status": "met",
"details": [
{
"code": "license_standard",
"params": {}
},
{
"code": "license_spdx",
"params": {
"spdx": "Apache-2.0"
}
}
],
"max_points": 22.5
},
{
"key": "contributing_guide",
"name": "CONTRIBUTING guide",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 18
},
{
"key": "code_of_conduct",
"name": "Code of conduct",
"detail": null,
"points": 13.5,
"status": "met",
"details": [],
"max_points": 13.5
},
{
"key": "issue_template",
"name": "Issue template",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.2
},
{
"key": "pr_template",
"name": "PR template",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 6.3
}
]
}
],
"description": "Does the project have users, downloads, attention, and a welcoming setup for contributors?"
},
{
"key": "governance",
"band": "good",
"name": "Sustainability & Governance",
"value": 75,
"weight": 0.24,
"metrics": [
{
"key": "maintainer_resilience",
"band": "good",
"name": "Maintainer resilience (bus factor)",
"note": null,
"notes": [],
"value": 76,
"inputs": {
"bus_factor": 3,
"contributors_sampled": 33,
"top_contributor_share": 0.251
},
"components": [
{
"key": "bus_factor",
"name": "Bus factor",
"detail": "3 contributor(s) cover half of all commits",
"points": 36,
"status": "partial",
"details": [
{
"code": "bus_factor",
"params": {
"count": 3
}
}
],
"max_points": 54
},
{
"key": "commit_distribution",
"name": "Commit distribution",
"detail": "top contributor authored 25% of commits",
"points": 16.9,
"status": "partial",
"details": [
{
"code": "top_contributor_share",
"params": {
"share": 25
}
}
],
"max_points": 22.5
},
{
"key": "contributor_breadth",
"name": "Contributor breadth",
"detail": "33 contributors",
"points": 13.5,
"status": "met",
"details": [
{
"code": "contributors_sampled",
"params": {
"count": 33
}
}
],
"max_points": 13.5
},
{
"key": "openssf_scorecard_contributors",
"name": "OpenSSF Scorecard: Contributors",
"detail": "project has 63 contributing companies or organizations",
"points": 10,
"status": "met",
"details": [],
"max_points": 10
}
]
},
{
"key": "responsiveness",
"band": "good",
"name": "Issue & PR responsiveness",
"note": null,
"notes": [],
"value": 80,
"inputs": {
"merged_prs": 1384,
"open_issues": 398,
"closed_issues": 835,
"issue_closed_ratio": 0.677,
"closed_unmerged_prs": 156
},
"components": [
{
"key": "issue_resolution",
"name": "Issue resolution",
"detail": "68% of issues closed",
"points": 31.6,
"status": "partial",
"details": [
{
"code": "issues_closed_share",
"params": {
"share": 68
}
}
],
"max_points": 46.75
},
{
"key": "pr_acceptance",
"name": "PR acceptance",
"detail": "1384/1540 decided PRs merged",
"points": 34.4,
"status": "partial",
"details": [
{
"code": "decided_prs_merged",
"params": {
"merged": 1384,
"decided": 1540
}
}
],
"max_points": 38.25
},
{
"key": "openssf_scorecard_code_review",
"name": "OpenSSF Scorecard: Code-Review",
"detail": "Found 10/11 approved changesets -- score normalized to 9",
"points": 13.5,
"status": "partial",
"details": [],
"max_points": 15
}
]
},
{
"key": "stewardship",
"band": "moderate",
"name": "Ownership & stewardship",
"note": null,
"notes": [],
"value": 68,
"inputs": {
"followers": 72,
"owner_type": "Organization",
"is_verified": null,
"owner_login": "dandi",
"public_repos": 74,
"account_age_days": 2561
},
"components": [
{
"key": "ownership_backing",
"name": "Ownership backing",
"detail": "organization-owned",
"points": 30,
"status": "met",
"details": [
{
"code": "owner_organization",
"params": {}
}
],
"max_points": 30
},
{
"key": "verified_domain",
"name": "Verified domain",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 20
},
{
"key": "owner_reach",
"name": "Owner reach",
"detail": "72 followers of dandi",
"points": 13.4,
"status": "partial",
"details": [
{
"code": "owner_followers",
"params": {
"count": 72,
"login": "dandi"
}
}
],
"max_points": 25
},
{
"key": "track_record",
"name": "Track record",
"detail": "74 public repos, account ~7 yr old",
"points": 25,
"status": "met",
"details": [
{
"code": "public_repos",
"params": {
"count": 74
}
},
{
"code": "account_age_years",
"params": {
"years": 7
}
}
],
"max_points": 25
}
]
}
],
"description": "Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?"
},
{
"key": "engineering",
"band": "excellent",
"name": "Engineering Quality",
"value": 96,
"weight": 0.2,
"metrics": [
{
"key": "engineering_practices",
"band": "excellent",
"name": "Engineering practices",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"has_ci": true,
"has_tests": true,
"has_editorconfig": true,
"has_linter_config": true,
"has_precommit_config": true
},
"components": [
{
"key": "ci_workflows",
"name": "CI workflows",
"detail": "7 workflow(s)",
"points": 24,
"status": "met",
"details": [
{
"code": "ci_workflows",
"params": {
"count": 7
}
}
],
"max_points": 24
},
{
"key": "tests_present",
"name": "Tests present",
"detail": null,
"points": 24,
"status": "met",
"details": [],
"max_points": 24
},
{
"key": "linter_config",
"name": "Linter config",
"detail": "eslint.config.js, tox.ini",
"points": 16,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "eslint.config.js, tox.ini"
}
}
],
"max_points": 16
},
{
"key": "pre_commit_hooks",
"name": "Pre-commit hooks",
"detail": null,
"points": 9.6,
"status": "met",
"details": [],
"max_points": 9.6
},
{
"key": "editorconfig",
"name": ".editorconfig",
"detail": null,
"points": 6.4,
"status": "met",
"details": [],
"max_points": 6.4
},
{
"key": "openssf_scorecard_ci_tests",
"name": "OpenSSF Scorecard: CI-Tests",
"detail": "11 out of 11 merged PRs checked by a CI test -- score normalized to 10",
"points": 20,
"status": "met",
"details": [],
"max_points": 20
}
]
},
{
"key": "documentation",
"band": "excellent",
"name": "Documentation",
"note": null,
"notes": [],
"value": 90,
"inputs": {
"topics": [
"python",
"django-rest-framework",
"hacktoberfest"
],
"has_wiki": false,
"homepage": "https://dandiarchive.org",
"has_readme": true,
"has_docs_dir": true,
"has_description": true
},
"components": [
{
"key": "readme",
"name": "README",
"detail": null,
"points": 30,
"status": "met",
"details": [],
"max_points": 30
},
{
"key": "documentation_directory",
"name": "Documentation directory",
"detail": null,
"points": 25,
"status": "met",
"details": [],
"max_points": 25
},
{
"key": "documentation_homepage_site",
"name": "Documentation / homepage site",
"detail": "https://dandiarchive.org",
"points": 15,
"status": "met",
"details": [],
"max_points": 15
},
{
"key": "repository_description",
"name": "Repository description",
"detail": null,
"points": 10,
"status": "met",
"details": [],
"max_points": 10
},
{
"key": "topics",
"name": "Topics",
"detail": "3 topics",
"points": 10,
"status": "met",
"details": [
{
"code": "topics_count",
"params": {
"count": 3
}
}
],
"max_points": 10
},
{
"key": "wiki",
"name": "Wiki",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
}
]
}
],
"description": "Are baseline engineering and documentation practices in place?"
},
{
"key": "security",
"band": "moderate",
"name": "Security",
"value": 56,
"weight": 0.16,
"metrics": [
{
"key": "security_posture",
"band": "moderate",
"name": "Security posture",
"note": "Excluded from scoring (no data or not applicable): Branch-Protection, Packaging, Signed-Releases. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"branch_protection",
"packaging",
"signed_releases"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 56,
"inputs": {
"source": "openssf_scorecard",
"checks_evaluated": 15,
"scorecard_version": "v5.5.0",
"checks_inconclusive": 3,
"scorecard_aggregate": 5.6
},
"components": [
{
"key": "binary_artifacts",
"name": "Binary-Artifacts",
"detail": "no binaries found in the repo",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "branch_protection",
"name": "Branch-Protection",
"detail": "internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 7.5
},
{
"key": "ci_tests",
"name": "CI-Tests",
"detail": "11 out of 11 merged PRs checked by a CI test -- score normalized to 10",
"points": 2.5,
"status": "met",
"details": [],
"max_points": 2.5
},
{
"key": "cii_best_practices",
"name": "CII-Best-Practices",
"detail": "no effort to earn an OpenSSF best practices badge detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 2.5
},
{
"key": "code_review",
"name": "Code-Review",
"detail": "Found 10/11 approved changesets -- score normalized to 9",
"points": 6.8,
"status": "partial",
"details": [],
"max_points": 7.5
},
{
"key": "contributors",
"name": "Contributors",
"detail": "project has 63 contributing companies or organizations",
"points": 2.5,
"status": "met",
"details": [],
"max_points": 2.5
},
{
"key": "dangerous_workflow",
"name": "Dangerous-Workflow",
"detail": "no dangerous workflow patterns detected",
"points": 10,
"status": "met",
"details": [],
"max_points": 10
},
{
"key": "dependency_update_tool",
"name": "Dependency-Update-Tool",
"detail": "update tool detected",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "fuzzing",
"name": "Fuzzing",
"detail": "project is not fuzzed",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "license",
"name": "License",
"detail": "license file detected",
"points": 2.5,
"status": "met",
"details": [],
"max_points": 2.5
},
{
"key": "maintained",
"name": "Maintained",
"detail": "30 commit(s) and 20 issue activity found in the last 90 days -- score normalized to 10",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "packaging",
"name": "Packaging",
"detail": "packaging workflow not detected",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 5
},
{
"key": "pinned_dependencies",
"name": "Pinned-Dependencies",
"detail": "dependency not pinned by hash detected -- score normalized to 2",
"points": 1,
"status": "partial",
"details": [],
"max_points": 5
},
{
"key": "sast",
"name": "SAST",
"detail": "SAST tool is not run on all commits -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "security_policy",
"name": "Security-Policy",
"detail": "security policy file not detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "signed_releases",
"name": "Signed-Releases",
"detail": "no releases found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 7.5
},
{
"key": "token_permissions",
"name": "Token-Permissions",
"detail": "detected GitHub workflow tokens with excessive permissions",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "vulnerabilities",
"name": "Vulnerabilities",
"detail": "158 existing vulnerabilities detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
}
]
},
{
"key": "high_risk_jurisdiction_exposure",
"band": "excellent",
"name": "High-Risk Jurisdiction Exposure",
"note": "Only high-confidence self-published location evidence affects this multiplier. Ambiguous matches are review-only; country evidence is not proof of nationality, citizenship, legal registration, malicious intent, or sanctions status.",
"notes": [
{
"code": "jurisdiction_evidence_limits",
"params": {}
}
],
"value": 100,
"inputs": {
"meaning": "self-published location evidence; not nationality or citizenship",
"red_flag": false,
"exposures": [],
"policy_countries": [
"Russia",
"Iran",
"North Korea"
],
"review_only_matches": 0,
"assessed_self_published_locations": 22
},
"components": [
{
"key": "policy_exposure_multiplier",
"name": "Policy exposure multiplier",
"detail": "no confirmed policy-scope location match",
"points": 100,
"status": "met",
"details": [
{
"code": "jurisdiction_no_match",
"params": {}
}
],
"max_points": 100
}
]
}
],
"description": "Are visible security and supply-chain practices strong, with no malicious dependency and no unresolved high-risk jurisdiction exposure?"
},
{
"key": "ai_readiness",
"band": "moderate",
"name": "AI Readiness",
"value": 63,
"weight": 0,
"metrics": [
{
"key": "ai_agent_context",
"band": "at_risk",
"name": "Agent context & guidance",
"note": null,
"notes": [],
"value": 40,
"inputs": {
"has_llms_txt": false,
"legible_history_share": 0.826,
"agent_instruction_files": [],
"agent_instruction_max_bytes": null
},
"components": [
{
"key": "agent_instructions",
"name": "Agent instructions",
"detail": "no CLAUDE.md / AGENTS.md / editor rules",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_agent_instructions",
"params": {}
}
],
"max_points": 45
},
{
"key": "machine_readable_docs_llms_txt",
"name": "Machine-readable docs (llms.txt)",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
},
{
"key": "legible_commit_history",
"name": "Legible commit history",
"detail": "71 of 86 human commits state their intent (structured subject or explanatory body)",
"points": 40,
"status": "met",
"details": [
{
"code": "legible_history",
"params": {
"legible": 71,
"sampled": 86
}
}
],
"max_points": 40
}
]
},
{
"key": "ai_verify_loop",
"band": "good",
"name": "Verify loop (build / test / typecheck)",
"note": null,
"notes": [],
"value": 74,
"inputs": {
"has_nix": true,
"has_tests": true,
"lockfiles": [
"package-lock.json",
"uv.lock"
],
"has_dockerfile": true,
"typed_language": false,
"bootstrap_files": [],
"has_devcontainer": true,
"has_linter_config": true,
"typecheck_configs": [
"web/tsconfig.json"
],
"agent_commit_share": 0.18,
"toolchain_manifests": [],
"dependency_bot_commit_share": 0.14
},
"components": [
{
"key": "one_command_bootstrap",
"name": "One-command bootstrap",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 18
},
{
"key": "automated_tests",
"name": "Automated tests",
"detail": null,
"points": 22,
"status": "met",
"details": [],
"max_points": 22
},
{
"key": "lint_format_config",
"name": "Lint / format config",
"detail": "eslint.config.js, tox.ini",
"points": 11,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "eslint.config.js, tox.ini"
}
}
],
"max_points": 11
},
{
"key": "static_type_checking",
"name": "Static type checking",
"detail": "web/tsconfig.json",
"points": 11,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "web/tsconfig.json"
}
}
],
"max_points": 11
},
{
"key": "reproducible_environment",
"name": "Reproducible environment",
"detail": "devcontainer, Dockerfile, Nix, lockfile",
"points": 10,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "devcontainer, Dockerfile, Nix, lockfile"
}
}
],
"max_points": 10
},
{
"key": "demonstrated_agent_practice",
"name": "Demonstrated agent practice",
"detail": "18 of the last 100 commits agent-authored or agent-credited",
"points": 10,
"status": "met",
"details": [
{
"code": "agent_authored_commits",
"params": {
"count": 18,
"sampled": 100
}
}
],
"max_points": 10
},
{
"key": "automated_maintenance",
"name": "Automated maintenance",
"detail": "14 of the last 100 commits are automated dependency updates",
"points": 8,
"status": "met",
"details": [
{
"code": "dependency_bot_commits",
"params": {
"count": 14,
"sampled": 100
}
}
],
"max_points": 8
},
{
"key": "openssf_scorecard_pinned_dependencies",
"name": "OpenSSF Scorecard: Pinned-Dependencies",
"detail": "dependency not pinned by hash detected -- score normalized to 2",
"points": 2,
"status": "partial",
"details": [],
"max_points": 10
}
]
},
{
"key": "ai_code_legibility",
"band": "good",
"name": "Code legibility for models",
"note": null,
"notes": [],
"value": 82,
"inputs": {
"primary_language": "Python",
"largest_source_bytes": 74743,
"source_files_sampled": 239,
"oversized_source_files": 2
},
"components": [
{
"key": "type_checkable_code",
"name": "Type-checkable code",
"detail": "Python with type-check config (web/tsconfig.json)",
"points": 27,
"status": "partial",
"details": [
{
"code": "typecheck_config_language",
"params": {
"files": "web/tsconfig.json",
"language": "Python"
}
}
],
"max_points": 45
},
{
"key": "manageable_file_sizes",
"name": "Manageable file sizes",
"detail": "2/239 source files over 60KB",
"points": 54.5,
"status": "partial",
"details": [
{
"code": "oversized_source_files",
"params": {
"kb": 60,
"sampled": 239,
"oversized": 2
}
}
],
"max_points": 55
}
]
}
],
"description": "How well is the repo equipped to be developed and maintained with AI coding agents? An independent, experimental badge — weight 0.0, so it is surfaced on its own and does not affect the overall health score."
}
],
"metrics_version": "1.13.0"
},
"warnings": [
"Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token",
"Could not fetch pypi package 'dandiapi' from its registry",
"Could not fetch npm package 'dandi-playwright-test' from its registry",
"GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository"
],
"report_type": "repository",
"generated_at": "2026-07-28T21:02:17.352954Z",
"schema_version": "0.27.0",
"badge_url": "https://raw.githubusercontent.com/inspect-software/badges/main/v1/d/dandi/dandi-archive.svg",
"full_name": "dandi/dandi-archive",
"license_state": "standard",
"license_spdx": "Apache-2.0"
}