decentralized-identity / kya-os-mcp

每颗 star 和每个 fork 的添加时间，来自 GitHub 并按天汇总。累计增长位于其构成来源——每日新增——的正上方，二者可相互对照：稳定的自然增长与短暂的突增形态截然不同。当这一差别可被衡量时，它会作为增长真实性予以报告。

来自 GitHub 依赖图的完整解析依赖集合：11 个直接依赖与 632 个间接（传递）软件包。仓库提交锁文件时，传递闭包才是完整的。

安装 npm:@kya-os/mcp@1.11.0 会引入 3 个包（直接与传递）：其中 0 个存在已知公告，0 个为直接依赖。

没有已知公告影响已评估的依赖。

公告表示依赖图中记录的版本落入某条公告的受影响范围。可达性未经分析，且依赖图包含开发与测试的版本固定——某项发现可能只涉及工具链而非交付的软件。

{
  "data": {
    "repo": {
      "topics": [
        "wg-ag"
      ],
      "is_fork": false,
      "size_kb": 1943,
      "has_wiki": true,
      "homepage": null,
      "languages": {
        "HTML": 54919,
        "Shell": 7966,
        "Python": 15719,
        "JavaScript": 37461,
        "TypeScript": 2220598
      },
      "pushed_at": "2026-07-31T07:11:50Z",
      "created_at": "2026-03-10T19:06:33Z",
      "owner_type": "Organization",
      "updated_at": "2026-07-30T11:38:07Z",
      "description": "KYA-OS MCP protocol reference implementation — delegation, proof generation, session lifecycle, and cryptographic identity for the Model Context Protocol",
      "is_archived": false,
      "is_disabled": false,
      "license_spdx": "MIT",
      "default_branch": "main",
      "license_spdx_raw": "MIT",
      "primary_language": "TypeScript",
      "significant_languages": [
        "TypeScript"
      ]
    },
    "owner": {
      "blog": "https://identity.foundation",
      "name": "Decentralized Identity Foundation",
      "type": "Organization",
      "login": "decentralized-identity",
      "company": null,
      "location": null,
      "followers": 973,
      "avatar_url": "https://avatars.githubusercontent.com/u/23265915?v=4",
      "created_at": "2016-11-04T17:58:26Z",
      "is_verified": null,
      "public_repos": 265,
      "account_age_days": 3555
    },
    "license": {
      "state": "standard",
      "spdx_id": "MIT",
      "raw_spdx": "MIT",
      "file_present": true,
      "scorecard_found": true,
      "profile_has_license": true
    },
    "activity": {
      "releases": [
        {
          "tag": "v1.10.1",
          "kind": "patch",
          "published_at": "2026-07-08T14:47:45Z"
        },
        {
          "tag": "v1.10.0",
          "kind": "minor",
          "published_at": "2026-07-08T04:20:17Z"
        },
        {
          "tag": "v1.9.0",
          "kind": "minor",
          "published_at": "2026-07-07T06:13:08Z"
        }
      ],
      "recent_commits": [
        {
          "oid": "19807f78e5496feb1a5cb337ebc3838896039f30",
          "body": "…f-naming\n\nfix!: terminal proof naming - role-named keys, version only in the profile",
          "is_bot": false,
          "headline": "Merge pull request #148 from decentralized-identity/fix/terminal-proo…",
          "author_name": "Dylan Hobbs",
          "author_login": "H0BB5",
          "committed_at": "2026-07-29T19:10:31Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "43bfbcfb0532d5094108c037a6e7191680cd24a1",
          "body": "…rofile\n\nThe last naming change of the 1.x line, closing the convention at its\nsimplest possible shape: keys name the envelope slot by role, and the\nversion lives inside the envelope.\n\nThe request-proof carrier moves from org.kya-os/proof.v1 to\norg.kya-os/request-proof, completing the role-named pai\n[…]\ned to the binding\ndocument and mirrored in the submission package, matching the single-\ndiagram convention the venue's stable EMA extension established.\n\nSigned-off-by: h0bb5 <dylanjhobbs+2@gmail.com>",
          "is_bot": false,
          "headline": "fix(proof)!: terminal naming - role-named keys, version only in the p…",
          "author_name": "h0bb5",
          "author_login": "H0BB5",
          "committed_at": "2026-07-29T18:00:17Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "85755066b52b656f310b884c6ac6e7ac2a6b8577",
          "body": "…ta-key-grammar\n\nfix!: grammar-legal and role-named proof carrier keys",
          "is_bot": false,
          "headline": "Merge pull request #146 from decentralized-identity/fix/card-proof-me…",
          "author_name": "Dylan Hobbs",
          "author_login": "H0BB5",
          "committed_at": "2026-07-29T03:10:19Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "9f6974b99a81cbd6061023aa00cf6f5c10ab09b4",
          "body": "…fier-notes\n\nspec: close the identifier editorial notes",
          "is_bot": false,
          "headline": "Merge pull request #147 from decentralized-identity/spec/close-identi…",
          "author_name": "Dylan Hobbs",
          "author_login": "H0BB5",
          "committed_at": "2026-07-29T01:06:40Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "c434c16104c12debe29789f4f15b26c1b43a4ee4",
          "body": "The identifiers the notes held open are settled: the DIF TAAWG session\nof 2026-07-28 landed the extension id org.kya-os/decentralized-authority,\nand the carrier keys (org.kya-os/proof.v1 for the request proof,\norg.kya-os/response-proof for the response proof) were fixed in the\nsame series. This chan\n[…]\nnd the extension id stay configurable constants,\nso an eventual io.modelcontextprotocol re-pointing remains a\nconfiguration change, not a wire redesign.\n\nSigned-off-by: h0bb5 <dylanjhobbs+2@gmail.com>",
          "is_bot": false,
          "headline": "spec: close the identifier editorial notes",
          "author_name": "h0bb5",
          "author_login": "H0BB5",
          "committed_at": "2026-07-29T01:05:45Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "b7c4902aa8b0e2520bcab0d1619956a65ba96381",
          "body": "Two carrier-key corrections that ride together, both pure carriage\n(neither key ever enters signed material), both dual-read for one\nmajor version, and both landing in the pre-adoption window where a\nwire rename is a constant change.\n\nThe request proof moves from _meta[org.kya-os/proof@1] to\n_meta[o\n[…]\ns, negotiation example, and\nplacement rule. New compat suites pin the grammar legality of both\ncanonical keys, every fallback, and the precedence order.\n\nSigned-off-by: h0bb5 <dylanjhobbs+2@gmail.com>",
          "is_bot": false,
          "headline": "fix!: grammar-legal and role-named proof carrier keys",
          "author_name": "h0bb5",
          "author_login": "H0BB5",
          "committed_at": "2026-07-29T01:05:44Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "ae2abc2da88ccd44b84ed910980817b678df115a",
          "body": "…bilities-on-32021\n\nfix(extension): carry the core requiredCapabilities member on -32021",
          "is_bot": false,
          "headline": "Merge pull request #144 from decentralized-identity/fix/required-capa…",
          "author_name": "Dylan Hobbs",
          "author_login": "H0BB5",
          "committed_at": "2026-07-28T21:33:20Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "a7cd9f54a50843219a59716a931bf71f9800a3c3",
          "body": "…in code off the legacy range\n\nTwo alignments with the final 2026-07-28 core text. Required mode no\nlonger gates server/discover (default exemption, with ping kept for\npeers on earlier revisions): the pre-flight discovery the binding\npromises has to stay reachable by non-declaring clients, or a clie\n[…]\noutside the JSON-RPC reserved range entirely. The\nconstant was unreleased, so no published behavior changes. Section 5's\npolicy text and example follow.\n\nSigned-off-by: h0bb5 <dylanjhobbs+2@gmail.com>",
          "is_bot": false,
          "headline": "fix(extension): exempt discovery from required mode and move the doma…",
          "author_name": "h0bb5",
          "author_login": "H0BB5",
          "committed_at": "2026-07-28T21:29:23Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "88ad955cb79870a12c96aabf98a4cd3562261003",
          "body": "The core schema defines MissingRequiredClientCapabilityError's data as\n{ requiredCapabilities: ClientCapabilities }, and the gate emitted only\nthis extension's reason code, so the one core error the extension uses\nwas malformed against core. The rejection now carries both: the\nrequiredCapabilities m\n[…]\nies.extensions is the fallback discriminant. An\nupstream one-liner preserving extra data members would remove the\ntrade-off; nothing here depends on it.\n\nSigned-off-by: h0bb5 <dylanjhobbs+2@gmail.com>",
          "is_bot": false,
          "headline": "fix(extension): carry the core requiredCapabilities member on -32021",
          "author_name": "h0bb5",
          "author_login": "H0BB5",
          "committed_at": "2026-07-28T20:29:09Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "465d624380e07325eeea06e1f94a31c07595226a",
          "body": "…gotiation\n\nfeat(extension): negotiate org.kya-os/decentralized-authority per SPEC-MCP-EXTENSION",
          "is_bot": false,
          "headline": "Merge pull request #142 from decentralized-identity/feat/extension-ne…",
          "author_name": "Dylan Hobbs",
          "author_login": "H0BB5",
          "committed_at": "2026-07-28T18:23:35Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "251d924c04427754c93091335d74bc6b13228e07",
          "body": "TAAWG landed on the name in today's session (Alan Karp's suggestion):\ndelegation undersold the identity, proof, and audit surface, and\ndecentralized authority names both what the extension conveys and the\nproperty that distinguishes it from centralized agent-auth rails, i.e.\nauthority that verifies \n[…]\ngs\nschema, the extension module, and the negotiation vectors move\ntogether. The editorial notes keep their proposed framing pending\nformal ratification.\n\nSigned-off-by: h0bb5 <dylanjhobbs+2@gmail.com>",
          "is_bot": false,
          "headline": "spec,feat: adopt org.kya-os/decentralized-authority as the extension id",
          "author_name": "h0bb5",
          "author_login": "H0BB5",
          "committed_at": "2026-07-28T16:23:11Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "247d4defca06a8b0d06b8ae4b027c4de2887a265",
          "body": "Five spec-anchored admission cases plus two hardening ones: declared or\nabsent against an optional server, absent against a required server\n(-32021), malformed declarations treated as absent on both server\nmodes, the initialize-era carriage, and the SEP-2133 empty-object\ndeclaration. The runner, loader, adapter contract, and the\nrequired-categories test learn the new category; the reference adapter\ndrives the vectors through requireExtension.\n\nSigned-off-by: h0bb5 <dylanjhobbs+2@gmail.com>",
          "is_bot": false,
          "headline": "test(conformance): add the negotiation vector category",
          "author_name": "h0bb5",
          "author_login": "H0BB5",
          "committed_at": "2026-07-28T07:54:06Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "2e6e743984202037642030bf89a2e0b2e0b3dd80",
          "body": "The MCP binding surface as an opt-in module: the extension id and the\nsettings object (a zod mirror of schemas/mcp-extension-settings.json,\nwith {} meaning supported-with-defaults per SEP-2133), a declaration\nreader normalizing the per-request clientCapabilities _meta carriage\nand the initialize-era\n[…]\nion-defined,\nand the MCP-reserved range (-32099..-32020) is refused outright.\nNothing on the default path changes for hosts that never install the\ngate.\n\nSigned-off-by: h0bb5 <dylanjhobbs+2@gmail.com>",
          "is_bot": false,
          "headline": "feat(extension): negotiate org.kya-os/delegation per SPEC-MCP-EXTENSION",
          "author_name": "h0bb5",
          "author_login": "H0BB5",
          "committed_at": "2026-07-28T07:54:06Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "afede081416abb1878458c03f08fd50c64dabe9a",
          "body": "…n-binding\n\nspec: add MCP extension binding (org.kya-os/delegation, SEP-2133)",
          "is_bot": false,
          "headline": "Merge pull request #141 from decentralized-identity/spec/mcp-extensio…",
          "author_name": "Dylan Hobbs",
          "author_login": "H0BB5",
          "committed_at": "2026-07-28T07:42:47Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "a63dc860a71c6e55a6a892903c68c27ca9e9dd7c",
          "body": "Review findings on the binding document, all accepted:\n\n- responseHash covers the response body only (SPEC.md 7.3; the reference\n  implementation hashes response.data, built from result.content). The\n  claim that resultType was proof-covered was wrong and now states the\n  opposite explicitly, includ\n[…]\ngistry amendment noted as pending.\n- Normative MCP references cite the draft revision with a verified-at\n  date until the 2026-07-28 revision publishes.\n\nSigned-off-by: h0bb5 <dylanjhobbs+2@gmail.com>",
          "is_bot": false,
          "headline": "spec: correct response-hash coverage and tighten the extension binding",
          "author_name": "h0bb5",
          "author_login": "H0BB5",
          "committed_at": "2026-07-28T06:54:12Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "fbd040a8dbd068358fe54c87927416a0185a0fa3",
          "body": "A thin, normative binding of KYA-OS to the MCP 2026-07-28 Extensions\nframework: extension identity and versioning, the negotiation settings\nobject (schemas/mcp-extension-settings.json) carried in per-request\nclientCapabilities _meta and in server/discover, graceful degradation\nvs required mode (core\n[…]\nand no\nsessions; the 1.x session profile stays outside it. Also includes the\nOAuth-rails comparison, MRTR relationship note, and privacy\nconsiderations.\n\nSigned-off-by: h0bb5 <dylanjhobbs+2@gmail.com>",
          "is_bot": false,
          "headline": "spec: add MCP extension binding (org.kya-os/delegation, SEP-2133)",
          "author_name": "h0bb5",
          "author_login": "H0BB5",
          "committed_at": "2026-07-28T06:03:52Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "bc2b8488260c14c89fd944a1b3d3dc23a472d7f1",
          "body": "…n-id-and-taawg-name\n\ndocs(spec): fix MCP extension id format and TAAWG name",
          "is_bot": false,
          "headline": "Merge pull request #140 from decentralized-identity/docs/mcp-extensio…",
          "author_name": "Dylan Hobbs",
          "author_login": "H0BB5",
          "committed_at": "2026-07-28T05:36:13Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "cfa65847d50ad66a864f0b51b70e4317bf31a63c",
          "body": "The TAAWG acronym was expanded two different ways across the repo, both\nwrong; the working group is the DIF Trusted AI Agents Working Group. The\nold working-groups/agent-and-authorization.html link 404s, so the README\nbadge and footer and the CONTRIBUTING intro now point at the live page,\nworking-groups/trusted-agents.html, which also lists this repository.\n\nSigned-off-by: h0bb5 <dylanjhobbs+2@gmail.com>",
          "is_bot": false,
          "headline": "docs: correct the TAAWG name and fix dead DIF links",
          "author_name": "h0bb5",
          "author_login": "H0BB5",
          "committed_at": "2026-07-28T05:21:13Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "52fef10ee67b1651243af0a55c2ae12c04160731",
          "body": "SEP-2133 requires extension ids of the form {vendor-prefix}/{extension-name},\nso the dot-form org.kya-os.identity was never a valid id. While correcting the\nformat, narrow the name to match what the extension actually ships (delegation\ncredentials and per-request proofs) rather than claiming the whole identity\nspace. Both editorial notes keep their proposed framing; the final id remains\na working-group decision.\n\nSigned-off-by: h0bb5 <dylanjhobbs+2@gmail.com>",
          "is_bot": false,
          "headline": "docs(spec): propose org.kya-os/delegation as the MCP extension id",
          "author_name": "h0bb5",
          "author_login": "H0BB5",
          "committed_at": "2026-07-28T05:20:44Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "fcd38c78502dbfb234b41c3ae8361ddeb3d7f83d",
          "body": "chore(release): 1.11.0",
          "is_bot": false,
          "headline": "Merge pull request #139 from decentralized-identity/chore/release-1.11.0",
          "author_name": "Dylan Hobbs",
          "author_login": "H0BB5",
          "committed_at": "2026-07-22T09:07:02Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "d78c54de10bf06f438fe750897a69d25fee7915e",
          "body": "Minor: the verifiable auditability protocol and @kya-os/mcp/audit (strict\nversioned events, authoritative recorder with signed receipts and atomic\ncompare-and-append, logical-ledger idempotency across epoch transitions,\nRFC 9162 Merkle checkpoints with inclusion/consistency proofs, independent\nobser\n[…]\nge. Backward-compatible; the previously\ninteger-only canonicalization surface now accepts the full admitted JCS\nvalue space and rejects lone surrogates.\n\nSigned-off-by: h0bb5 <dylanjhobbs+2@gmail.com>",
          "is_bot": false,
          "headline": "chore(release): 1.11.0",
          "author_name": "h0bb5",
          "author_login": "H0BB5",
          "committed_at": "2026-07-22T09:04:35Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "b03d45c759269da04d22e70a674a6463685d5e3b",
          "body": "…_actions/actions/setup-node-7\n\nbuild(deps): bump actions/setup-node from 6 to 7",
          "is_bot": false,
          "headline": "Merge pull request #133 from decentralized-identity/dependabot/github…",
          "author_name": "Dylan Hobbs",
          "author_login": "H0BB5",
          "committed_at": "2026-07-22T09:01:19Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "1ce02ea6094d1056a86794f3e0fb3ec5d5cdd2f4",
          "body": "…d_yarn/minor-and-patch-1180fb273d\n\nbuild(deps): bump the minor-and-patch group across 1 directory with 5 updates",
          "is_bot": false,
          "headline": "Merge pull request #136 from decentralized-identity/dependabot/npm_an…",
          "author_name": "Dylan Hobbs",
          "author_login": "H0BB5",
          "committed_at": "2026-07-22T09:01:10Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "85ff9cd874b4674f0fe9c0989828a98d87fd926b",
          "body": "…chet\n\ntest: ratchet coverage thresholds against the vitest 4 baseline",
          "is_bot": false,
          "headline": "Merge pull request #138 from decentralized-identity/test/coverage-rat…",
          "author_name": "Dylan Hobbs",
          "author_login": "H0BB5",
          "committed_at": "2026-07-22T08:54:31Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "05a0b70034dfff5905e946677c60d45dbf2fd477",
          "body": "The vitest 4 remapping produced an honest baseline well above the old\n80/75/80/80 gate, so the thresholds move to 91/85/93/92, close enough to\nthe measured 93.7/87.6/95.9/94.4 that a real regression fails the gate.\n\nTwo things make the new baseline meaningful. Coverage is scoped back to\nthe library:\n[…]\nadata builders; and the\nbase64 runtime fallbacks including the fail-closed no-codec paths. Six of\nthe targeted files now sit at full statement coverage.\n\nSigned-off-by: h0bb5 <dylanjhobbs+2@gmail.com>",
          "is_bot": false,
          "headline": "test: ratchet coverage thresholds against the vitest 4 baseline",
          "author_name": "h0bb5",
          "author_login": "H0BB5",
          "committed_at": "2026-07-22T08:27:28Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "37ab7fe5d9f7c6c6831cd571578d2442f946754e",
          "body": "… updates\n\nBumps the minor-and-patch group with 5 updates in the / directory:\n\n| Package | From | To |\n| --- | --- | --- |\n| [jose](https://github.com/panva/jose) | `6.2.3` | `6.2.4` |\n| [@kya-os/consent](https://github.com/modelcontextprotocol-identity/xmcp-i/tree/HEAD/packages/consent) | `0.1.42` \n[…]\ndependency-version: 8.65.0\n  dependency-type: direct:development\n  update-type: version-update:semver-minor\n  dependency-group: minor-and-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
          "is_bot": true,
          "headline": "build(deps): bump the minor-and-patch group across 1 directory with 5…",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-07-22T08:23:03Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "c776afd7c9756948f6ee60959f8f1d9d1a60f82e",
          "body": "…wups\n\ntest(conformance): full JCS value-space parity; chore(deps): vitest 4",
          "is_bot": false,
          "headline": "Merge pull request #137 from decentralized-identity/chore/audit-follo…",
          "author_name": "Dylan Hobbs",
          "author_login": "H0BB5",
          "committed_at": "2026-07-22T08:19:30Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "61a85e356d483007e031c6f9f02e57504a77acea",
          "body": "Resolves the Dependabot advisories against the vitest 2 toolchain by\nmoving every manifest (root plus the four example packages) to\nvitest@^4.1.10, which drags the bundled vite well past the patched 6.4.3\nfloor (both lockfiles and the consent-full example now resolve vite\n8.1.5).\n\nTwo resolution sid\n[…]\nseline), coverage thresholds pass under the v4 provider,\nand the consent-basic (36) and consent-full (43) example suites pass\nstandalone under vitest 4.\n\nSigned-off-by: h0bb5 <dylanjhobbs+2@gmail.com>",
          "is_bot": false,
          "headline": "chore(deps): bump vitest to v4 across the repo and examples",
          "author_name": "h0bb5",
          "author_login": "H0BB5",
          "committed_at": "2026-07-22T07:50:32Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "1f4c2f2393a315f7da50340ed2cb9ab0313262d4",
          "body": "…ted value space\n\nThe Python cross-language verifier previously implemented JCS as plain\njson.dumps, exact only for string/integer structures. Now that the\ncanonicalizer admits fractional values and non-BMP object keys, verify.py\ngains an exact RFC 8785 serializer: ECMAScript number formatting (repr\n[…]\nas: fixtures for\nanchor receipts and both Merkle proof documents, and the verifier's own\nreport output is validated against the published report schema.\n\nSigned-off-by: h0bb5 <dylanjhobbs+2@gmail.com>",
          "is_bot": false,
          "headline": "test(conformance): prove cross-language JCS parity for the full admit…",
          "author_name": "h0bb5",
          "author_login": "H0BB5",
          "committed_at": "2026-07-22T07:43:08Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "c0970e92efcb651cc2ccef9631ec976a20f0b82a",
          "body": "feat(audit): add verifiable auditability protocol",
          "is_bot": false,
          "headline": "Merge pull request #135 from decentralized-identity/feat/audit-adapter",
          "author_name": "Dylan Hobbs",
          "author_login": "H0BB5",
          "committed_at": "2026-07-22T07:35:12Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "f89a1d48aefaaaaf292c634934a0ab8962d2998c",
          "body": "…hardening\n\nObservers no longer require direct checkpoint-chain linkage: a gapped\nextension is accepted whenever tree consistency with the last observation\nverifies, so one missed publication cannot wedge an observer forever. The\nconsistency proof, not the chain link, is the split-view guarantee, an\n[…]\nuniqueness was\nJSON-only and key-validity interval ordering was zod-only (the published\npolicy schema gains the kyaOrderedNumberRange semantic keyword).\n\nSigned-off-by: h0bb5 <dylanjhobbs+2@gmail.com>",
          "is_bot": false,
          "headline": "fix(audit): observer catch-up, recorder lifecycle gaps, and verifier …",
          "author_name": "h0bb5",
          "author_login": "H0BB5",
          "committed_at": "2026-07-22T07:23:14Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "184c642583ffe824caab7349cee80ec87ec62697",
          "body": "…eping\n\nThe recorder now resolves logical-ledger idempotency before enforcing the\nepoch envelope, so a redelivered submission pinned to a retained earlier\nepoch returns its original entry instead of wedging on EPOCH_MISMATCH, and\nbuffered outbox submissions are no longer epoch-pinned at all, since a\n[…]\no durable adapters cannot\npass while violating either. Direct-mode retry semantics (pin occurredAt\ntogether with the eventId) are documented and tested.\n\nSigned-off-by: h0bb5 <dylanjhobbs+2@gmail.com>",
          "is_bot": false,
          "headline": "fix(audit): deliver retained-epoch retries and harden producer bookke…",
          "author_name": "h0bb5",
          "author_login": "H0BB5",
          "committed_at": "2026-07-22T07:00:02Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "89840c2c0f4bde580a4af7c9b54b409cd50af6d6",
          "body": "Signed-off-by: h0bb5 <dylanjhobbs+2@gmail.com>",
          "is_bot": false,
          "headline": "fix(audit): accept RFC 8785 fractional values",
          "author_name": "h0bb5",
          "author_login": "H0BB5",
          "committed_at": "2026-07-22T06:27:49Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "ee79bdee28b015bd865962dce20e70e4cdaff067",
          "body": "Signed-off-by: H0bb5 <dylanjhobbs+2@gmail.com>",
          "is_bot": false,
          "headline": "fix(audit): harden validation bounds and fail closed on audit delivery",
          "author_name": "H0bb5",
          "author_login": "H0BB5",
          "committed_at": "2026-07-22T05:57:21Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "590a25529d58981a29ddce5d619846140135ecdd",
          "body": "Signed-off-by: H0bb5 <dylanjhobbs+2@gmail.com>",
          "is_bot": false,
          "headline": "test(audit): eliminate coverage regression",
          "author_name": "H0bb5",
          "author_login": "H0BB5",
          "committed_at": "2026-07-21T23:38:56Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "e37bde99799669cbd6e13ff3f3bdf8a0f40ac474",
          "body": "Signed-off-by: H0bb5 <dylanjhobbs+2@gmail.com>",
          "is_bot": false,
          "headline": "test(audit): restore path coverage",
          "author_name": "H0bb5",
          "author_login": "H0BB5",
          "committed_at": "2026-07-21T23:04:56Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "b29ffc9080145e81680248c5f33d620c51ff638c",
          "body": "Signed-off-by: H0bb5 <dylanjhobbs+2@gmail.com>",
          "is_bot": false,
          "headline": "feat(audit): add verifiable auditability protocol",
          "author_name": "H0bb5",
          "author_login": "H0BB5",
          "committed_at": "2026-07-21T22:36:17Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "ae8c62e38cc50be04ae614202c9972fa5cc36eb3",
          "body": "Bumps [actions/setup-node](https://github.com/actions/setup-node) from 6 to 7.\n- [Release notes](https://github.com/actions/setup-node/releases)\n- [Commits](https://github.com/actions/setup-node/compare/v6...v7)\n\n---\nupdated-dependencies:\n- dependency-name: actions/setup-node\n  dependency-version: '7'\n  dependency-type: direct:production\n  update-type: version-update:semver-major\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
          "is_bot": true,
          "headline": "build(deps): bump actions/setup-node from 6 to 7",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-07-21T20:34:33Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "608675ecc7e52e41d6246b5569bae8362b5ecce1",
          "body": "…_actions/actions/setup-node-7\n\nbuild(deps): bump actions/setup-node from 6 to 7",
          "is_bot": false,
          "headline": "Merge pull request #127 from decentralized-identity/dependabot/github…",
          "author_name": "Dylan Hobbs",
          "author_login": "H0BB5",
          "committed_at": "2026-07-21T15:09:32Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "1c1a145aac029ec58cacaf0f9ed30a2cb302825b",
          "body": "…d_yarn/minor-and-patch-5ff5869f0c\n\nbuild(deps-dev): bump the minor-and-patch group with 7 updates",
          "is_bot": false,
          "headline": "Merge pull request #128 from decentralized-identity/dependabot/npm_an…",
          "author_name": "Dylan Hobbs",
          "author_login": "H0BB5",
          "committed_at": "2026-07-21T15:09:21Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "782ffe7674424aaa4b03f2a7904a6379bfc86873",
          "body": "…inks\n\ndocs: point site links at kya-os.org",
          "is_bot": false,
          "headline": "Merge pull request #132 from decentralized-identity/docs/kya-os-org-l…",
          "author_name": "Dylan Hobbs",
          "author_login": "H0BB5",
          "committed_at": "2026-07-21T14:59:24Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "0533411d90149d2e1319ac3f9c0723445e810c12",
          "body": "The project site moved to the kya-os.org domain (matching the DIF-registered\nschema host), so the README logo and spec-badge links, the outbound-delegation\nexample's reference link, and two source-comment pointers now use it. The live\nreference deployment hosts (demo-mcp.kya-os.ai, poc.kya-os.ai) are real\ninfrastructure whose did:web identity is the domain itself, so those are\ndeliberately unchanged, as are historical changelog entries.\n\nSigned-off-by: h0bb5 <dylanjhobbs+2@gmail.com>",
          "is_bot": false,
          "headline": "docs: point site links at kya-os.org",
          "author_name": "h0bb5",
          "author_login": "H0BB5",
          "committed_at": "2026-07-21T14:56:37Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "eb2d0a5f62aae80081765f30aa5b057890325cbb",
          "body": "…ce-deployment\n\nci: probe the live reference deployment daily and link it from the README",
          "is_bot": false,
          "headline": "Merge pull request #129 from decentralized-identity/docs/live-referen…",
          "author_name": "Dylan Hobbs",
          "author_login": "H0BB5",
          "committed_at": "2026-07-21T14:54:09Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "74292b6490f0855cbcde68b29cbda1128fc0be5f",
          "body": "…card-delegation\n\ndocs(spec): fold the card delegation profile into the core delegation chapter",
          "is_bot": false,
          "headline": "Merge pull request #131 from decentralized-identity/docs/slim-entity-…",
          "author_name": "Dylan Hobbs",
          "author_login": "H0BB5",
          "committed_at": "2026-07-21T14:53:18Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "f5b9977b5940a945fb8db4389de946fda12effa4",
          "body": "… chapter\n\nReview made the point that an extended description of delegation is a\ndistraction in the card specification: the card carries locators, so the\ndocument should point at the delegation profile, not contain it. Section 10\nof the card spec now holds only what card verification consumes (the\nr\n[…]\ns and schemas untouched; all\ncross-references updated. A card field naming supported access-control\nmechanisms is recorded as an open coordination item.\n\nSigned-off-by: h0bb5 <dylanjhobbs+2@gmail.com>",
          "is_bot": false,
          "headline": "docs(spec): fold the card delegation profile into the core delegation…",
          "author_name": "h0bb5",
          "author_login": "H0BB5",
          "committed_at": "2026-07-21T14:47:16Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "1b7e87c6c7a8bdddc0639d0a558b38a87ab11f23",
          "body": "…pec-corrections\n\nfix(spec): entity card review findings on proof keys, request hashing, and statelessness",
          "is_bot": false,
          "headline": "Merge pull request #130 from decentralized-identity/fix/entity-card-s…",
          "author_name": "Dylan Hobbs",
          "author_login": "H0BB5",
          "committed_at": "2026-07-21T13:36:11Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "396c0687715b9745b21e8170b9ca401cc20c3b93",
          "body": "…ring binding\n\nSigned-off-by: h0bb5 <dylanjhobbs+2@gmail.com>",
          "is_bot": false,
          "headline": "fix(lint): build the stripped params copy without an unused destructu…",
          "author_name": "h0bb5",
          "author_login": "H0BB5",
          "committed_at": "2026-07-21T13:10:45Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "ab7ec88469e448f2dbc0a1c3c5b2c6209a7c87d0",
          "body": "…uest hashing, and statelessness\n\nThe status section contradicted section 8.1 on how the two proof profiles\nare carried; they ride separate _meta keys and the text now says so.\nSection 8.3 gains the exact pre-signing transformation (strip params._meta\nbefore JCS) that keeps requestHash non-circular \n[…]\nly; replay\nprevention is stateful and fails closed without a nonce seam. Editorial\npass over the framing sections and plain-dash punctuation throughout.\n\nSigned-off-by: h0bb5 <dylanjhobbs+2@gmail.com>",
          "is_bot": false,
          "headline": "fix(spec): resolve the entity-card review findings on proof keys, req…",
          "author_name": "h0bb5",
          "author_login": "H0BB5",
          "committed_at": "2026-07-21T10:10:02Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "584a7e0964cf70027dbf707f3310a1eda303bff3",
          "body": "…ADME\n\nSigned-off-by: h0bb5 <dylanjhobbs+2@gmail.com>",
          "is_bot": false,
          "headline": "ci: probe the live reference deployment daily and link it from the RE…",
          "author_name": "h0bb5",
          "author_login": "H0BB5",
          "committed_at": "2026-07-20T21:02:14Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "4e298189c8591e8d9b78187712b4a5192a437ee3",
          "body": "Bumps the minor-and-patch group with 7 updates:\n\n| Package | From | To |\n| --- | --- | --- |\n| [@kya-os/consent](https://github.com/modelcontextprotocol-identity/xmcp-i/tree/HEAD/packages/consent) | `0.1.41` | `0.1.42` |\n| [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/ty\n[…]\ndependency-version: 8.64.0\n  dependency-type: direct:development\n  update-type: version-update:semver-minor\n  dependency-group: minor-and-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
          "is_bot": true,
          "headline": "build(deps-dev): bump the minor-and-patch group with 7 updates",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-07-14T20:36:15Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "51c7cefd034f71df6ccedc8b207d54fbb7d291bd",
          "body": "Bumps [actions/setup-node](https://github.com/actions/setup-node) from 6 to 7.\n- [Release notes](https://github.com/actions/setup-node/releases)\n- [Commits](https://github.com/actions/setup-node/compare/v6...v7)\n\n---\nupdated-dependencies:\n- dependency-name: actions/setup-node\n  dependency-version: '7'\n  dependency-type: direct:production\n  update-type: version-update:semver-major\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
          "is_bot": true,
          "headline": "build(deps): bump actions/setup-node from 6 to 7",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-07-14T20:34:00Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "30d5f1c9adce1b5376a27cd3fad7cdeaa9430875",
          "body": "chore(release): 1.10.1",
          "is_bot": false,
          "headline": "Merge pull request #126 from decentralized-identity/chore/release-1.10.1",
          "author_name": "Dylan Hobbs",
          "author_login": "H0BB5",
          "committed_at": "2026-07-08T14:46:42Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "6d880bb24c534dae44bc7793c52d71cc9d63f08a",
          "body": "Patch: safe-fetch lazy-loads node:dns/node:https so @kya-os/mcp bundles cleanly\nfor Cloudflare Workers / workerd (the Entity Card / VC-JWT verification path no\nlonger requires node built-ins at bundle time). Backward-compatible; SSRF policy\nunchanged.\n\nSigned-off-by: h0bb5 <dylanjhobbs+2@gmail.com>",
          "is_bot": false,
          "headline": "chore(release): 1.10.1",
          "author_name": "h0bb5",
          "author_login": "H0BB5",
          "committed_at": "2026-07-08T14:46:23Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "7bb33d04b06b88852ebaf0b7932bd530a453d756",
          "body": "…rkerd-lazy-node-imports\n\nfix(safe-fetch): lazy-load node:dns/node:https for workerd bundle compatibility",
          "is_bot": false,
          "headline": "Merge pull request #124 from decentralized-identity/fix/safe-fetch-wo…",
          "author_name": "Dylan Hobbs",
          "author_login": "H0BB5",
          "committed_at": "2026-07-08T11:15:27Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "6ca72361d9a0ee2a87911894cce63283d95ba9fe",
          "body": "safe-fetch-transports statically imported node:dns/promises and node:https at\nthe module top level, so anything that builds a SafeFetch — including the\nEntity Card / VC-JWT verification path (card resolution + status-list\nrevocation) — required those node built-ins at bundle time and broke Cloudflar\n[…]\n> 65.2%\nstmts (the node:https socket wiring stays integration-only, matching the\nexisting suite's no-TLS-in-unit-tests choice). Full suite green (1640).\n\nSigned-off-by: h0bb5 <dylanjhobbs+2@gmail.com>",
          "is_bot": false,
          "headline": "fix(safe-fetch): lazy-load node:dns/node:https for workerd bundle compat",
          "author_name": "h0bb5",
          "author_login": "H0BB5",
          "committed_at": "2026-07-08T11:10:09Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "9b5ee918059637fc36c7244a831b8cda314cd7c8",
          "body": "…d_yarn/minor-and-patch-06ddaeaf1c\n\nbuild(deps-dev): bump the minor-and-patch group across 1 directory with 5 updates",
          "is_bot": false,
          "headline": "Merge pull request #120 from decentralized-identity/dependabot/npm_an…",
          "author_name": "Dylan Hobbs",
          "author_login": "H0BB5",
          "committed_at": "2026-07-08T04:40:17Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "1e502db8f2fb0af00c6ae26286da26a2ad38e51d",
          "body": "…_actions/actions/upload-artifact-7\n\nbuild(deps): bump actions/upload-artifact from 4 to 7",
          "is_bot": false,
          "headline": "Merge pull request #119 from decentralized-identity/dependabot/github…",
          "author_name": "Dylan Hobbs",
          "author_login": "H0BB5",
          "committed_at": "2026-07-08T04:40:06Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "2202875ed99017e6e465da47b9acc5cc4e68f750",
          "body": "…_actions/actions/download-artifact-8\n\nbuild(deps): bump actions/download-artifact from 4 to 8",
          "is_bot": false,
          "headline": "Merge pull request #118 from decentralized-identity/dependabot/github…",
          "author_name": "Dylan Hobbs",
          "author_login": "H0BB5",
          "committed_at": "2026-07-08T04:39:58Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "379288b755d330975d1871862d32bd613f8da882",
          "body": "…th 5 updates\n\nBumps the minor-and-patch group with 5 updates in the / directory:\n\n| Package | From | To |\n| --- | --- | --- |\n| [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) | `26.0.1` | `26.1.0` |\n| [@typescript-eslint/eslint-plugin](https://github.com/type\n[…]\ndependency-version: 8.63.0\n  dependency-type: direct:development\n  update-type: version-update:semver-minor\n  dependency-group: minor-and-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
          "is_bot": true,
          "headline": "build(deps-dev): bump the minor-and-patch group across 1 directory wi…",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-07-08T04:22:30Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "66eec23fb1cb3e3c25c071f91c1555a09db54d07",
          "body": "chore(release): 1.10.0",
          "is_bot": false,
          "headline": "Merge pull request #123 from decentralized-identity/chore/release-1.10.0",
          "author_name": "Dylan Hobbs",
          "author_login": "H0BB5",
          "committed_at": "2026-07-08T04:18:44Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "b409b3592523e0516e626699d464a576f200db93",
          "body": "Signer-hook support — ProofGenerator and withKyaOs accept a non-extractable\nCryptoKey as the signing key (passkey-PRF / HSM / KMS), so per-request proofs\ncan be produced without materializing the secret (SPEC 4.5). Additive and\nbackward-compatible; the base64 string path is unchanged.\n\nSigned-off-by: h0bb5 <dylanjhobbs+2@gmail.com>",
          "is_bot": false,
          "headline": "chore(release): 1.10.0",
          "author_name": "h0bb5",
          "author_login": "H0BB5",
          "committed_at": "2026-07-08T04:18:02Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "741770c28b4c17b79df9b456b2f2841533ef07c7",
          "body": "…-non-extractable-key\n\nfeat(proof): accept a non-extractable CryptoKey as the signing key",
          "is_bot": false,
          "headline": "Merge pull request #122 from decentralized-identity/feat/proof-signer…",
          "author_name": "Dylan Hobbs",
          "author_login": "H0BB5",
          "committed_at": "2026-07-08T04:09:39Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "35609168033557b990905553cf6aef5973880a3f",
          "body": "ProofAgentIdentity.privateKey and KyaOsIdentityConfig.privateKey now accept a\nCryptoKey handle in addition to a base64 private-key string, so the capability\nis reachable end-to-end through withKyaOs. generateJWS resolves the key via a\nnew resolveSigningKey(): a string is imported with importPKCS8 (t\n[…]\nrchangeable; and a CryptoKey that doesn't match the declared kid yields\na proof the verifier rejects (fail-closed, binding preserved). Full suite green.\n\nSigned-off-by: h0bb5 <dylanjhobbs+2@gmail.com>",
          "is_bot": false,
          "headline": "feat(proof): accept a non-extractable CryptoKey as the signing key",
          "author_name": "h0bb5",
          "author_login": "H0BB5",
          "committed_at": "2026-07-08T04:03:53Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "b183ca64849f77cc9c951b3034729e629e9344b5",
          "body": "Bumps [actions/upload-artifact](https://github.com/actions/upload-artifact) from 4 to 7.\n- [Release notes](https://github.com/actions/upload-artifact/releases)\n- [Commits](https://github.com/actions/upload-artifact/compare/v4...v7)\n\n---\nupdated-dependencies:\n- dependency-name: actions/upload-artifact\n  dependency-version: '7'\n  dependency-type: direct:production\n  update-type: version-update:semver-major\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
          "is_bot": true,
          "headline": "build(deps): bump actions/upload-artifact from 4 to 7",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-07-07T20:34:17Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "10f64600f5d33d8be0da843dfb8233ca92f5f295",
          "body": "Bumps [actions/download-artifact](https://github.com/actions/download-artifact) from 4 to 8.\n- [Release notes](https://github.com/actions/download-artifact/releases)\n- [Commits](https://github.com/actions/download-artifact/compare/v4...v8)\n\n---\nupdated-dependencies:\n- dependency-name: actions/download-artifact\n  dependency-version: '8'\n  dependency-type: direct:production\n  update-type: version-update:semver-major\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
          "is_bot": true,
          "headline": "build(deps): bump actions/download-artifact from 4 to 8",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-07-07T20:34:14Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "37f1bb5763b295f2c2a9f81b7bece5cd362754d5",
          "body": "…y-card-cimd\n\ndocs(readme): expand the Entity Card row with the CIMD on-ramp and discovery rails",
          "is_bot": false,
          "headline": "Merge pull request #117 from decentralized-identity/docs/readme-entit…",
          "author_name": "Dylan Hobbs",
          "author_login": "H0BB5",
          "committed_at": "2026-07-07T18:49:44Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "1c7fa0952032d9a6bfe1b709faf7773681029b49",
          "body": "…scovery rails\n\nSigned-off-by: h0bb5 <dylanjhobbs+2@gmail.com>",
          "is_bot": false,
          "headline": "docs(readme): expand the Entity Card row with the CIMD on-ramp and di…",
          "author_name": "h0bb5",
          "author_login": "H0BB5",
          "committed_at": "2026-07-07T16:59:52Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "caf0b724bd07fda31371b75fd88d18dfe6aef20d",
          "body": "chore(release): 1.9.0",
          "is_bot": false,
          "headline": "Merge pull request #116 from decentralized-identity/chore/release-1.9.0",
          "author_name": "Dylan Hobbs",
          "author_login": "H0BB5",
          "committed_at": "2026-07-07T06:08:49Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "62ac0e10a40bbcd69c8dd83fdcbd97bc6b9e4949",
          "body": "First npm release since 1.7.0 — the prepared 1.8.0 was bumped in-repo but\nnever published, so this ships the Entity Card (./card) plus the two\nadditive delegation/did-web features on top of it.\n\nAdditions: verifyDelegationJwt (VC-JWT verification) and multi-key\nbuildDidWebDocument. Also carries the BREAKING status-list bit-order\ncorrection (MSB-first) already documented under [Unreleased] — persisted\n1.x status lists MUST be regenerated on upgrade.\n\nSigned-off-by: h0bb5 <dylanjhobbs+2@gmail.com>",
          "is_bot": false,
          "headline": "chore(release): 1.9.0",
          "author_name": "h0bb5",
          "author_login": "H0BB5",
          "committed_at": "2026-07-07T06:05:22Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "46ad7801f751ec6bd8a443bf4115c4399863c02b",
          "body": "…c-jwt-verify\n\nfeat(delegation): verify VC-JWT (compact JWS) delegation credentials",
          "is_bot": false,
          "headline": "Merge pull request #115 from decentralized-identity/feat/delegation-v…",
          "author_name": "Dylan Hobbs",
          "author_login": "H0BB5",
          "committed_at": "2026-07-07T05:52:07Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "1001b361c30ac6a7ad6b6bf1e226a1f532ef427e",
          "body": "DelegationCredentialVerifier only verified Data Integrity VCs (embedded\n`proof`), so it rejected the JWT serialization (W3C VC Data Model 1.1\n§6.3.1) that browser wallets mint — where the JWS envelope signature over\n`header.payload` IS the proof and there is no embedded proof block. A\nperfectly vali\n[…]\nfailures, and the cache / skip-flag / credential-status / no-id\npaths — so verifyDelegationJwt keeps vc-verifier.ts at full statement and\nline coverage.\n\nSigned-off-by: h0bb5 <dylanjhobbs+2@gmail.com>",
          "is_bot": false,
          "headline": "feat(delegation): verify VC-JWT (compact JWS) delegation credentials",
          "author_name": "h0bb5",
          "author_login": "H0BB5",
          "committed_at": "2026-07-07T05:21:28Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "281b0daacf8e3fa5636891d726088785c5aad0ca",
          "body": "…i-key\n\nfeat(did-web): support multiple keys in one DID document",
          "is_bot": false,
          "headline": "Merge pull request #114 from decentralized-identity/feat/did-web-mult…",
          "author_name": "Dylan Hobbs",
          "author_login": "H0BB5",
          "committed_at": "2026-07-07T05:15:49Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "38c043982a7797787a4847e02f537a752494bfd8",
          "body": "…design-refinements\n\nfeat: entity-card design refinements — unfused-cnf diagnostic + DPoP relationship",
          "is_bot": false,
          "headline": "Merge pull request #113 from decentralized-identity/feat/entity-card-…",
          "author_name": "Dylan Hobbs",
          "author_login": "H0BB5",
          "committed_at": "2026-07-07T05:15:41Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "ce96283cc5a3259bcd0d3e7e1ecd726fffcd2a3a",
          "body": "buildDidWebDocument emitted exactly one verification method, so a did:web\nsubject could publish only a single key. That makes multi-device impossible:\neach device holds its own non-extractable key, but the document can advertise\njust one, so the last device to publish silently breaks every other dev\n[…]\nalidates the set: non-empty, one shared did:web DID, each kid a fragment of\nthat DID, and no duplicate kids (which would produce an ambiguous document).\n\nSigned-off-by: h0bb5 <dylanjhobbs+2@gmail.com>",
          "is_bot": false,
          "headline": "feat(did-web): support multiple keys in one DID document",
          "author_name": "h0bb5",
          "author_login": "H0BB5",
          "committed_at": "2026-07-07T04:22:10Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "b33c9da756433942a2f83c3fa1415c7a75642239",
          "body": "…ionship (§8.8)\n\n§8.6 notes the non-fatal cnf_present_but_token_unfused warning that accompanies the L3->L3-minus degradation. §8.8 (new) records the relationship to RFC 9449 (DPoP): it acknowledges the deliberate overlap, explains the transport- and identity-model reasons the request/carrier/key-an\n[…]\n profile composes with DPoP (fusing the token cnf.jkt to reach L3) rather than replacing it. Addresses the design-audit DPoP-positioning recommendation.\n\nSigned-off-by: h0bb5 <dylanjhobbs+2@gmail.com>",
          "is_bot": false,
          "headline": "docs(spec): document the unfused-cnf diagnostic (§8.6) and DPoP relat…",
          "author_name": "h0bb5",
          "author_login": "H0BB5",
          "committed_at": "2026-07-06T17:36:47Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "b53292252b0e3683f1a464e12368a7e4002c2a44",
          "body": "… unfused\n\nverifyCardProof previously returned L3-minus silently when a proof carried a cnf sender-constraint but the verifier was given no token cnf.jkt to fuse it against — a valid but easily-misconfigured downgrade (the integrator simply forgot to wire tokenCnfJkt). Add a warnings channel to Proo\n[…]\nce it through the requireProof guard. Makes the L3->L3-minus downgrade observable to an integrator who intended L3. Addresses design-audit finding TM-1.\n\nSigned-off-by: h0bb5 <dylanjhobbs+2@gmail.com>",
          "is_bot": false,
          "headline": "feat(proof): surface a non-fatal warning when a presented cnf is left…",
          "author_name": "h0bb5",
          "author_login": "H0BB5",
          "committed_at": "2026-07-06T17:36:47Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "0fd5c01d6572cd7abe2ede2180244e4119608bb7",
          "body": "…usedLocals\n\nchore(tsconfig): enable noUnusedLocals + noUnusedParameters",
          "is_bot": false,
          "headline": "Merge pull request #112 from decentralized-identity/chore/enable-noUn…",
          "author_name": "Dylan Hobbs",
          "author_login": "H0BB5",
          "committed_at": "2026-07-06T05:11:15Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "7861e2a6f072b5b62556f75aebbac70db17707a2",
          "body": "Turn on both flags so dead code fails the fast typecheck loop, not only the CI eslint step. This also catches a class eslint cannot: unused private class members / parameter properties (TS6138), which @typescript-eslint/no-unused-vars does not flag.\n\nSole fallout: BitstringManager stored a construct\n[…]\n. Drop the field while keeping the constructor arity — the class is root-exported, so the public signature is preserved (non-breaking, no version bump).\n\nSigned-off-by: h0bb5 <dylanjhobbs+2@gmail.com>",
          "is_bot": false,
          "headline": "chore(tsconfig): enable noUnusedLocals + noUnusedParameters",
          "author_name": "h0bb5",
          "author_login": "H0BB5",
          "committed_at": "2026-07-06T04:35:28Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "49438c577ae9ce93729ab0212c9ede4b81007241",
          "body": "…d-files\n\nrefactor: split with-kya-os and vc-verifier under the file-size guardrail",
          "is_bot": false,
          "headline": "Merge pull request #111 from decentralized-identity/refactor/split-go…",
          "author_name": "Dylan Hobbs",
          "author_login": "H0BB5",
          "committed_at": "2026-07-06T04:31:18Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "54b96f0add479001394aaed3f841bf4c242598b0",
          "body": "Remove the leftover cryptoProvider destructure (delegation-gate — the challenge builder that used it moved to delegation-verify), the unused logger import (policy-gate), and the unused GrantStore type import (orchestrator). Caught by the CI lint step (@typescript-eslint/no-unused-vars); tsc --noEmit did not flag them (noUnusedLocals is off in the base tsconfig).\n\nSigned-off-by: h0bb5 <dylanjhobbs+2@gmail.com>",
          "is_bot": false,
          "headline": "refactor(middleware): drop three unused symbols flagged by eslint",
          "author_name": "h0bb5",
          "author_login": "H0BB5",
          "committed_at": "2026-07-06T00:12:09Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "44d2a5b3d9ebaa7b55cd19308d92770373f20d6b",
          "body": "… + class\n\nExtract the result/resolver types into vc-verifier.types.ts (re-exported) and the basic/signature/status checks into vc-verification-checks.ts as pure functions; DelegationCredentialVerifier now holds only orchestration + its result cache. Class name/public API unchanged. 517 -> 226/245/100, all <300; 1607 tests green.\n\nSigned-off-by: h0bb5 <dylanjhobbs+2@gmail.com>",
          "is_bot": false,
          "headline": "refactor(delegation): split vc-verifier into types + stateless checks…",
          "author_name": "h0bb5",
          "author_login": "H0BB5",
          "committed_at": "2026-07-05T23:58:43Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "d810a65e9f11b88facb3122a329be2c89defdfe0",
          "body": "…ypes\n\nMove KyaOsConfig/KyaOsDelegationConfig/KyaOsIdentityConfig/KYA_OS_ACTIONS into with-kya-os.config-types.ts, re-exported from with-kya-os.types.ts so importers are unchanged. Both files now <300. Completes the with-kya-os.ts split: 1649 -> 182 across focused modules, all <300; 1607 tests green. Phase 2e.\n\nSigned-off-by: h0bb5 <dylanjhobbs+2@gmail.com>",
          "is_bot": false,
          "headline": "refactor(middleware): split config-input types from the API-surface t…",
          "author_name": "h0bb5",
          "author_login": "H0BB5",
          "committed_at": "2026-07-05T23:55:38Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "a2ed4edaad05266176a09e32caab62f2ef559fff",
          "body": "…tories\n\nMove handshake establishment, ensureSession, wrapWithProof and attachOutcomeProof (the activeSessionId owner) into with-kya-os.session.ts, and the _kyaos action router + identity responder + tool definitions into with-kya-os.protocol.ts. The orchestrator (createKyaOsMiddleware) is now a ~180-line composition root that constructs deps and wires the sub-factories. No behaviour change; 1607 tests green. Phase 2d.\n\nSigned-off-by: h0bb5 <dylanjhobbs+2@gmail.com>",
          "is_bot": false,
          "headline": "refactor(middleware): extract session/proof + _kyaos protocol sub-fac…",
          "author_name": "h0bb5",
          "author_login": "H0BB5",
          "committed_at": "2026-07-05T23:53:22Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "d20bb523d3fca4214496e3eddc394354dbe98d3d",
          "body": "…bing\n\nMove wrapWithDelegation into with-kya-os.delegation-gate.ts (the request flow) and the DID resolver / embedded-proof signature verifier / chain-validation adapter / needs_authorization challenge builder into with-kya-os.delegation-verify.ts, wired via createDelegationGate(deps, { attachOutcom\n[…]\nsolveExistingGrant, bindGrantOnSuccess }). Prune the now-dead delegation imports from the orchestrator. No behaviour change; 1607 tests green. Phase 2c.\n\nSigned-off-by: h0bb5 <dylanjhobbs+2@gmail.com>",
          "is_bot": false,
          "headline": "refactor(middleware): extract the delegation gate + verification plum…",
          "author_name": "h0bb5",
          "author_login": "H0BB5",
          "committed_at": "2026-07-05T23:47:38Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "1e8b01e6a7371fddc4f3e3fd7132cef6f4169fdf",
          "body": "Move withPolicyGate into with-kya-os.policy-gate.ts behind createPolicyGate(deps, { attachOutcomeProof }); add the shared AttachOutcomeProof contract type to with-kya-os.deps.ts and prune the now-dead policy imports from the orchestrator. No behaviour change; 1607 tests green. Phase 2b.\n\nSigned-off-by: h0bb5 <dylanjhobbs+2@gmail.com>",
          "is_bot": false,
          "headline": "refactor(middleware): extract the policy/step-up gate to a sub-factory",
          "author_name": "h0bb5",
          "author_login": "H0BB5",
          "committed_at": "2026-07-05T23:38:44Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "dc578e7e37a96c6d5bf35b0f27e9b30c838e3ef4",
          "body": "Move grantId/delegationExpiryMs/resolveAgentGrant/resolveExistingGrant/bindGrantOnSuccess into with-kya-os.grants.ts behind createGrantResolution(deps), and introduce the shared MiddlewareDeps bag (with-kya-os.deps.ts). No behaviour change; 1607 tests green. Phase 2a of the >300 split.\n\nSigned-off-by: h0bb5 <dylanjhobbs+2@gmail.com>",
          "is_bot": false,
          "headline": "refactor(middleware): extract durable-grant resolution to a sub-factory",
          "author_name": "h0bb5",
          "author_login": "H0BB5",
          "committed_at": "2026-07-05T23:35:27Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "ca456fe2863638dac7c8b996bc2b0438931e26d7",
          "body": "Move the ~300-line public type surface (config/tool/role interfaces) to with-kya-os.types.ts and the two referentially-transparent helpers (sanitizeForMessage, extractPolicyPrincipal) to with-kya-os.helpers.ts, re-exported verbatim so every existing import resolves unchanged. Factory module 1649->1284 lines. Phase 1 of the >300-line guardrail split; no behaviour change (1607 tests green).\n\nSigned-off-by: h0bb5 <dylanjhobbs+2@gmail.com>",
          "is_bot": false,
          "headline": "refactor(middleware): extract with-kya-os type surface + pure helpers",
          "author_name": "h0bb5",
          "author_login": "H0BB5",
          "committed_at": "2026-07-05T23:21:48Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "13721df67262722cd800230c944d53f27a78a543",
          "body": "feat(card): Entity Card v1.1 — typed, DID-anchored, per-request holder-of-key identity",
          "is_bot": false,
          "headline": "Merge pull request #110 from decentralized-identity/feat/entity-card",
          "author_name": "Dylan Hobbs",
          "author_login": "H0BB5",
          "committed_at": "2026-07-05T21:48:30Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "8bb9d3e18131a0654d6b2dd8f146de0931138977",
          "body": "… release\n\nTop-level barrel exports for the card surface, package.json subpath exports + version, CHANGELOG/CONFORMANCE/CONTRIBUTING/README, CI, and the demo launcher.\n\nSigned-off-by: h0bb5 <dylanjhobbs+2@gmail.com>",
          "is_bot": false,
          "headline": "chore: exports, packaging, CI, and top-level docs for the entity-card…",
          "author_name": "h0bb5",
          "author_login": "H0BB5",
          "committed_at": "2026-07-05T21:36:39Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "94c9f4f17c04842f1443db0ca9a42473495ffe57",
          "body": "…server demos\n\nNarrated walkthroughs that show what the holder-of-key proof signs; inspector-friendly demos; consent-persistence scenario scripts (cross-instance + restart) with a scenario-only note where the flow is holder-of-key.\n\nSigned-off-by: h0bb5 <dylanjhobbs+2@gmail.com>",
          "is_bot": false,
          "headline": "docs(examples): runnable entity-card, embedded-agent, consent & node-…",
          "author_name": "h0bb5",
          "author_login": "H0BB5",
          "committed_at": "2026-07-05T21:36:39Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "5d4115ea92cc13b44124816fa8d3ea1a6515ee13",
          "body": "…uage verifier\n\nReal-path regression tests for every fail-closed seam (no mocking around the security boundary), the shared conformance vectors, and a stdlib-only Python cross-language verifier proving JCS + Ed25519 parity.\n\nSigned-off-by: h0bb5 <dylanjhobbs+2@gmail.com>",
          "is_bot": false,
          "headline": "test: card/proof/delegation suites + conformance harness & cross-lang…",
          "author_name": "h0bb5",
          "author_login": "H0BB5",
          "committed_at": "2026-07-05T21:36:39Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "b8cd5492bb48544ae99c0d61e967792ec1775c01",
          "body": "The Entity Card profile (additive to SPEC.md): proof _meta carrier key, {EdDSA,ES256} allow-list, did_membership_unverifiable, bare-did:web well-known path, statusPurpose semantics, error-code table — reconciled to the implementation. Card + delegation JSON Schemas.\n\nSigned-off-by: h0bb5 <dylanjhobbs+2@gmail.com>",
          "is_bot": false,
          "headline": "feat(spec): normative SPEC-ENTITY-CARD.md profile + JSON schemas",
          "author_name": "h0bb5",
          "author_login": "H0BB5",
          "committed_at": "2026-07-05T21:36:39Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "257c8a1d82ab8792e4e2ae52410553f012fbce20",
          "body": "…rfaces\n\nThe 10-minute DevX path (mount discovery artifacts + a per-request holder-of-key guard), with KyaOsMiddleware composed from focused ISP role interfaces.\n\nSigned-off-by: h0bb5 <dylanjhobbs+2@gmail.com>",
          "is_bot": false,
          "headline": "feat(middleware): withKyaOs + requireProof, decomposed into role inte…",
          "author_name": "h0bb5",
          "author_login": "H0BB5",
          "committed_at": "2026-07-05T21:36:39Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "5e05e524d4d9707f8b34fb24f7c9becabb151b06",
          "body": "https-only, DNS-rebinding pin, public-unicast-only address policy, a serverless fetch transport, and a first-party escape hatch — split into focused modules.\n\nSigned-off-by: h0bb5 <dylanjhobbs+2@gmail.com>",
          "is_bot": false,
          "headline": "feat: SSRF-hardened safe-fetch (policy / transports / ip-classifier)",
          "author_name": "h0bb5",
          "author_login": "H0BB5",
          "committed_at": "2026-07-05T21:36:39Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "e2c1a1c9e0968b755a1f2fdf7e3dda6556f0582f",
          "body": "… revocation\n\nCRISP monotone attenuation (incl. MaxAmount currency), invoker->issuer continuity, MSB bit order, edge-safe injectable decompression with a bomb cap, and one shared fail-closed statusPurpose check (closes the delegation-path fail-open bypass).\n\nSigned-off-by: h0bb5 <dylanjhobbs+2@gmail.com>",
          "is_bot": false,
          "headline": "feat(card): VC 2.0 + ZCAP-LD delegation and W3C Bitstring Status List…",
          "author_name": "h0bb5",
          "author_login": "H0BB5",
          "committed_at": "2026-07-05T21:36:39Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "6c35408b2ccb26a868ae7802db8c3422238f11ee",
          "body": "…of@1)\n\nDetached JWS over the RFC 8785 (JCS) canonical request; EdDSA + ES256 allow-list with alg<->key binding; RFC 9421 sibling; RFC 9449 cnf.jkt fusion; RFC 7638 thumbprint membership; kid<->did binding; atomic nonce replay defense — fail-closed throughout.\n\nSigned-off-by: h0bb5 <dylanjhobbs+2@gmail.com>",
          "is_bot": false,
          "headline": "feat(card): stateless per-request holder-of-key proof (org.kya-os/pro…",
          "author_name": "h0bb5",
          "author_login": "H0BB5",
          "committed_at": "2026-07-05T21:36:39Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "8e12dbebf8b5cb38ef2e0a2a75e76adc4283bab2",
          "body": "Schema + build/builder/emit/resolve/verify/cimd: a typed (mcp|agent|client|verifier|human), did:web/did:key-anchored card, projected onto every discovery rail and verified by RECOMPUTING the conformance level (never trusting the self-claim). resolveCard binds a fetched card to the DID it was resolved from.\n\nSigned-off-by: h0bb5 <dylanjhobbs+2@gmail.com>",
          "is_bot": false,
          "headline": "feat(card): typed, DID-anchored Entity Card v1.1",
          "author_name": "h0bb5",
          "author_login": "H0BB5",
          "committed_at": "2026-07-05T21:36:39Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "1198679dc321be0c3eb4422a13f951fa7d9c1fc5",
          "body": "…d_yarn/jose-6.2.3\n\nbuild(deps): bump jose from 5.10.0 to 6.2.3",
          "is_bot": false,
          "headline": "Merge pull request #108 from decentralized-identity/dependabot/npm_an…",
          "author_name": "Dylan Hobbs",
          "author_login": "H0BB5",
          "committed_at": "2026-07-01T05:46:55Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "220fc4add286fb0ab5e0154270733890d6dccab0",
          "body": "…d_yarn/types/node-26.0.1\n\nbuild(deps-dev): bump @types/node from 20.19.37 to 26.0.1",
          "is_bot": false,
          "headline": "Merge pull request #107 from decentralized-identity/dependabot/npm_an…",
          "author_name": "Dylan Hobbs",
          "author_login": "H0BB5",
          "committed_at": "2026-07-01T05:46:45Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "320f575b9579662257ee3602777f93fb304a2298",
          "body": "…d_yarn/commander-15.0.0\n\nbuild(deps-dev): bump commander from 14.0.3 to 15.0.0",
          "is_bot": false,
          "headline": "Merge pull request #106 from decentralized-identity/dependabot/npm_an…",
          "author_name": "Dylan Hobbs",
          "author_login": "H0BB5",
          "committed_at": "2026-07-01T05:42:56Z",
          "body_truncated": false,
          "is_coding_agent": false
        }
      ],
      "releases_count": 3,
      "commits_last_year": 322,
      "latest_release_at": "2026-07-08T14:47:45Z",
      "latest_release_tag": "v1.10.1",
      "releases_from_tags": false,
      "days_since_last_push": 0,
      "active_weeks_last_year": 16,
      "days_since_latest_release": 22,
      "mean_days_between_releases": 0.7
    },
    "community": {
      "has_readme": true,
      "has_license": true,
      "has_description": true,
      "has_contributing": true,
      "health_percentage": 87,
      "has_issue_template": false,
      "has_code_of_conduct": false,
      "has_pull_request_template": true
    },
    "ecosystem": {
      "packages": [
        {
          "name": "@kya-os/mcp",
          "exists": true,
          "license": "MIT",
          "keywords": [
            "kya-os",
            "mcp",
            "delegation",
            "verifiable-credentials",
            "did",
            "protocol",
            "identity",
            "audit",
            "transparency-log",
            "dif"
          ],
          "ecosystem": "npm",
          "matches_repo": true,
          "registry_url": "https://www.npmjs.com/package/@kya-os/mcp",
          "is_deprecated": false,
          "latest_version": "1.11.0",
          "repository_url": "https://github.com/decentralized-identity/kya-os-mcp",
          "versions_count": 13,
          "total_downloads": null,
          "dependents_count": null,
          "deprecation_note": null,
          "maintainers_count": 2,
          "monthly_downloads": 6980,
          "first_published_at": "2026-05-14T14:02:46.436000Z",
          "latest_published_at": "2026-07-22T09:08:18.429000Z",
          "latest_version_yanked": null,
          "days_since_latest_publish": 9
        }
      ]
    },
    "popularity": {
      "forks": 10,
      "stars": 20,
      "watchers": 3,
      "fork_history": {
        "days": [
          {
            "date": "2026-03-20",
            "count": 1
          },
          {
            "date": "2026-03-29",
            "count": 1
          },
          {
            "date": "2026-04-07",
            "count": 1
          },
          {
            "date": "2026-04-16",
            "count": 1
          },
          {
            "date": "2026-05-15",
            "count": 1
          },
          {
            "date": "2026-05-19",
            "count": 1
          },
          {
            "date": "2026-05-20",
            "count": 1
          },
          {
            "date": "2026-06-01",
            "count": 2
          },
          {
            "date": "2026-06-02",
            "count": 1
          }
        ],
        "complete": true,
        "collected": 10,
        "total_forks": 10
      },
      "star_history": null,
      "open_issues_and_prs": 6
    },
    "ai_readiness": {
      "has_nix": false,
      "example_dirs": [
        "examples"
      ],
      "has_llms_txt": false,
      "has_dockerfile": true,
      "has_mcp_signal": false,
      "bootstrap_files": [],
      "api_schema_files": [],
      "has_devcontainer": false,
      "typecheck_configs": [
        "conformance/tsconfig.json",
        "examples/authz-inspector/tsconfig.json",
        "examples/brave-search-mcp-server/tsconfig.json",
        "examples/consent-basic/tsconfig.json",
        "examples/consent-full/tsconfig.json",
        "examples/consent-persistence/tsconfig.json",
        "examples/context7-with-kya-os/tsconfig.json",
        "examples/node-server/tsconfig.json",
        "examples/verify-proof/tsconfig.json",
        "tsconfig.json"
      ],
      "toolchain_manifests": [],
      "largest_source_bytes": 53782,
      "source_files_sampled": 386,
      "oversized_source_files": 0,
      "agent_instruction_files": [],
      "agent_instruction_max_bytes": null
    },
    "dependencies": {
      "manifests": [
        "package.json"
      ],
      "advisories": {
        "error": null,
        "scope": "published_package",
        "source": "osv",
        "findings": [],
        "collected": true,
        "malicious": [],
        "truncated": false,
        "by_severity": {},
        "advisory_count": 0,
        "affected_count": 0,
        "assessed_count": 3,
        "malicious_count": 0,
        "assessed_package": "npm:@kya-os/mcp@1.11.0",
        "unassessed_count": 0,
        "direct_affected_count": 0
      },
      "ecosystems": [
        "npm"
      ],
      "dependencies": [
        {
          "name": "jose",
          "manifest": "package.json",
          "ecosystem": "npm",
          "version_constraint": "^6.2.4"
        },
        {
          "name": "json-canonicalize",
          "manifest": "package.json",
          "ecosystem": "npm",
          "version_constraint": "^2.0.0"
        },
        {
          "name": "zod",
          "manifest": "package.json",
          "ecosystem": "npm",
          "version_constraint": "^4.3.6"
        }
      ],
      "all_dependencies": {
        "error": null,
        "source": "github-sbom",
        "packages": [
          {
            "name": "jose",
            "direct": true,
            "version": "6.1.3",
            "ecosystem": "npm"
          },
          {
            "name": "jose",
            "direct": true,
            "version": "6.2.1",
            "ecosystem": "npm"
          },
          {
            "name": "jose",
            "direct": true,
            "version": "6.2.3",
            "ecosystem": "npm"
          },
          {
            "name": "jose",
            "direct": true,
            "version": "6.2.4",
            "ecosystem": "npm"
          },
          {
            "name": "jose",
            "direct": true,
            "version": "^6.1.3",
            "ecosystem": "npm"
          },
          {
            "name": "json-canonicalize",
            "direct": true,
            "version": "2.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "json-canonicalize",
            "direct": true,
            "version": "^2.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "zod",
            "direct": true,
            "version": "3.25.76",
            "ecosystem": "npm"
          },
          {
            "name": "zod",
            "direct": true,
            "version": "4.3.6",
            "ecosystem": "npm"
          },
          {
            "name": "zod",
            "direct": true,
            "version": "4.4.3",
            "ecosystem": "npm"
          },
          {
            "name": "zod",
            "direct": true,
            "version": "^3.23.0",
            "ecosystem": "npm"
          },
          {
            "name": "@anthropic-ai/mcpb",
            "direct": false,
            "version": "1.1.1",
            "ecosystem": "npm"
          },
          {
            "name": "@babel/helper-string-parser",
            "direct": false,
            "version": "7.29.7",
            "ecosystem": "npm"
          },
          {
            "name": "@babel/helper-validator-identifier",
            "direct": false,
            "version": "7.29.7",
            "ecosystem": "npm"
          },
          {
            "name": "@babel/parser",
            "direct": false,
            "version": "7.29.7",
            "ecosystem": "npm"
          },
          {
            "name": "@babel/types",
            "direct": false,
            "version": "7.29.7",
            "ecosystem": "npm"
          },
          {
            "name": "@bcoe/v8-coverage",
            "direct": false,
            "version": "1.0.2",
            "ecosystem": "npm"
          },
          {
            "name": "@emnapi/core",
            "direct": false,
            "version": "1.11.1",
            "ecosystem": "npm"
          },
          {
            "name": "@emnapi/runtime",
            "direct": false,
            "version": "1.11.1",
            "ecosystem": "npm"
          },
          {
            "name": "@emnapi/wasi-threads",
            "direct": false,
            "version": "1.2.2",
            "ecosystem": "npm"
          },
          {
            "name": "@esbuild/aix-ppc64",
            "direct": false,
            "version": "0.25.10",
            "ecosystem": "npm"
          },
          {
            "name": "@esbuild/aix-ppc64",
            "direct": false,
            "version": "0.27.2",
            "ecosystem": "npm"
          },
          {
            "name": "@esbuild/aix-ppc64",
            "direct": false,
            "version": "0.28.1",
            "ecosystem": "npm"
          },
          {
            "name": "@esbuild/android-arm",
            "direct": false,
            "version": "0.25.10",
            "ecosystem": "npm"
          },
          {
            "name": "@esbuild/android-arm",
            "direct": false,
            "version": "0.27.2",
            "ecosystem": "npm"
          },
          {
            "name": "@esbuild/android-arm",
            "direct": false,
            "version": "0.28.1",
            "ecosystem": "npm"
          },
          {
            "name": "@esbuild/android-arm64",
            "direct": false,
            "version": "0.25.10",
            "ecosystem": "npm"
          },
          {
            "name": "@esbuild/android-arm64",
            "direct": false,
            "version": "0.27.2",
            "ecosystem": "npm"
          },
          {
            "name": "@esbuild/android-arm64",
            "direct": false,
            "version": "0.28.1",
            "ecosystem": "npm"
          },
          {
            "name": "@esbuild/android-x64",
            "direct": false,
            "version": "0.25.10",
            "ecosystem": "npm"
          },
          {
            "name": "@esbuild/android-x64",
            "direct": false,
            "version": "0.27.2",
            "ecosystem": "npm"
          },
          {
            "name": "@esbuild/android-x64",
            "direct": false,
            "version": "0.28.1",
            "ecosystem": "npm"
          },
          {
            "name": "@esbuild/darwin-arm64",
            "direct": false,
            "version": "0.25.10",
            "ecosystem": "npm"
          },
          {
            "name": "@esbuild/darwin-arm64",
            "direct": false,
            "version": "0.27.2",
            "ecosystem": "npm"
          },
          {
            "name": "@esbuild/darwin-arm64",
            "direct": false,
            "version": "0.28.1",
            "ecosystem": "npm"
          },
          {
            "name": "@esbuild/darwin-x64",
            "direct": false,
            "version": "0.25.10",
            "ecosystem": "npm"
          },
          {
            "name": "@esbuild/darwin-x64",
            "direct": false,
            "version": "0.27.2",
            "ecosystem": "npm"
          },
          {
            "name": "@esbuild/darwin-x64",
            "direct": false,
            "version": "0.28.1",
            "ecosystem": "npm"
          },
          {
            "name": "@esbuild/freebsd-arm64",
            "direct": false,
            "version": "0.25.10",
            "ecosystem": "npm"
          },
          {
            "name": "@esbuild/freebsd-arm64",
            "direct": false,
            "version": "0.27.2",
            "ecosystem": "npm"
          },
          {
            "name": "@esbuild/freebsd-arm64",
            "direct": false,
            "version": "0.28.1",
            "ecosystem": "npm"
          },
          {
            "name": "@esbuild/freebsd-x64",
            "direct": false,
            "version": "0.25.10",
            "ecosystem": "npm"
          },
          {
            "name": "@esbuild/freebsd-x64",
            "direct": false,
            "version": "0.27.2",
            "ecosystem": "npm"
          },
          {
            "name": "@esbuild/freebsd-x64",
            "direct": false,
            "version": "0.28.1",
            "ecosystem": "npm"
          },
          {
            "name": "@esbuild/linux-arm",
            "direct": false,
            "version": "0.25.10",
            "ecosystem": "npm"
          },
          {
            "name": "@esbuild/linux-arm",
            "direct": false,
            "version": "0.27.2",
            "ecosystem": "npm"
          },
          {
            "name": "@esbuild/linux-arm",
            "direct": false,
            "version": "0.28.1",
            "ecosystem": "npm"
          },
          {
            "name": "@esbuild/linux-arm64",
            "direct": false,
            "version": "0.25.10",
            "ecosystem": "npm"
          },
          {
            "name": "@esbuild/linux-arm64",
            "direct": false,
            "version": "0.27.2",
            "ecosystem": "npm"
          },
          {
            "name": "@esbuild/linux-arm64",
            "direct": false,
            "version": "0.28.1",
            "ecosystem": "npm"
          },
          {
            "name": "@esbuild/linux-ia32",
            "direct": false,
            "version": "0.25.10",
            "ecosystem": "npm"
          },
          {
            "name": "@esbuild/linux-ia32",
            "direct": false,
            "version": "0.27.2",
            "ecosystem": "npm"
          },
          {
            "name": "@esbuild/linux-ia32",
            "direct": false,
            "version": "0.28.1",
            "ecosystem": "npm"
          },
          {
            "name": "@esbuild/linux-loong64",
            "direct": false,
            "version": "0.25.10",
            "ecosystem": "npm"
          },
          {
            "name": "@esbuild/linux-loong64",
            "direct": false,
            "version": "0.27.2",
            "ecosystem": "npm"
          },
          {
            "name": "@esbuild/linux-loong64",
            "direct": false,
            "version": "0.28.1",
            "ecosystem": "npm"
          },
          {
            "name": "@esbuild/linux-mips64el",
            "direct": false,
            "version": "0.25.10",
            "ecosystem": "npm"
          },
          {
            "name": "@esbuild/linux-mips64el",
            "direct": false,
            "version": "0.27.2",
            "ecosystem": "npm"
          },
          {
            "name": "@esbuild/linux-mips64el",
            "direct": false,
            "version": "0.28.1",
            "ecosystem": "npm"
          },
          {
            "name": "@esbuild/linux-ppc64",
            "direct": false,
            "version": "0.25.10",
            "ecosystem": "npm"
          },
          {
            "name": "@esbuild/linux-ppc64",
            "direct": false,
            "version": "0.27.2",
            "ecosystem": "npm"
          },
          {
            "name": "@esbuild/linux-ppc64",
            "direct": false,
            "version": "0.28.1",
            "ecosystem": "npm"
          },
          {
            "name": "@esbuild/linux-riscv64",
            "direct": false,
            "version": "0.25.10",
            "ecosystem": "npm"
          },
          {
            "name": "@esbuild/linux-riscv64",
            "direct": false,
            "version": "0.27.2",
            "ecosystem": "npm"
          },
          {
            "name": "@esbuild/linux-riscv64",
            "direct": false,
            "version": "0.28.1",
            "ecosystem": "npm"
          },
          {
            "name": "@esbuild/linux-s390x",
            "direct": false,
            "version": "0.25.10",
            "ecosystem": "npm"
          },
          {
            "name": "@esbuild/linux-s390x",
            "direct": false,
            "version": "0.27.2",
            "ecosystem": "npm"
          },
          {
            "name": "@esbuild/linux-s390x",
            "direct": false,
            "version": "0.28.1",
            "ecosystem": "npm"
          },
          {
            "name": "@esbuild/linux-x64",
            "direct": false,
            "version": "0.25.10",
            "ecosystem": "npm"
          },
          {
            "name": "@esbuild/linux-x64",
            "direct": false,
            "version": "0.27.2",
            "ecosystem": "npm"
          },
          {
            "name": "@esbuild/linux-x64",
            "direct": false,
            "version": "0.28.1",
            "ecosystem": "npm"
          },
          {
            "name": "@esbuild/netbsd-arm64",
            "direct": false,
            "version": "0.25.10",
            "ecosystem": "npm"
          },
          {
            "name": "@esbuild/netbsd-arm64",
            "direct": false,
            "version": "0.27.2",
            "ecosystem": "npm"
          },
          {
            "name": "@esbuild/netbsd-arm64",
            "direct": false,
            "version": "0.28.1",
            "ecosystem": "npm"
          },
          {
            "name": "@esbuild/netbsd-x64",
            "direct": false,
            "version": "0.25.10",
            "ecosystem": "npm"
          },
          {
            "name": "@esbuild/netbsd-x64",
            "direct": false,
            "version": "0.27.2",
            "ecosystem": "npm"
          },
          {
            "name": "@esbuild/netbsd-x64",
            "direct": false,
            "version": "0.28.1",
            "ecosystem": "npm"
          },
          {
            "name": "@esbuild/openbsd-arm64",
            "direct": false,
            "version": "0.25.10",
            "ecosystem": "npm"
          },
          {
            "name": "@esbuild/openbsd-arm64",
            "direct": false,
            "version": "0.27.2",
            "ecosystem": "npm"
          },
          {
            "name": "@esbuild/openbsd-arm64",
            "direct": false,
            "version": "0.28.1",
            "ecosystem": "npm"
          },
          {
            "name": "@esbuild/openbsd-x64",
            "direct": false,
            "version": "0.25.10",
            "ecosystem": "npm"
          },
          {
            "name": "@esbuild/openbsd-x64",
            "direct": false,
            "version": "0.27.2",
            "ecosystem": "npm"
          },
          {
            "name": "@esbuild/openbsd-x64",
            "direct": false,
            "version": "0.28.1",
            "ecosystem": "npm"
          },
          {
            "name": "@esbuild/openharmony-arm64",
            "direct": false,
            "version": "0.25.10",
            "ecosystem": "npm"
          },
          {
            "name": "@esbuild/openharmony-arm64",
            "direct": false,
            "version": "0.27.2",
            "ecosystem": "npm"
          },
          {
            "name": "@esbuild/openharmony-arm64",
            "direct": false,
            "version": "0.28.1",
            "ecosystem": "npm"
          },
          {
            "name": "@esbuild/sunos-x64",
            "direct": false,
            "version": "0.25.10",
            "ecosystem": "npm"
          },
          {
            "name": "@esbuild/sunos-x64",
            "direct": false,
            "version": "0.27.2",
            "ecosystem": "npm"
          },
          {
            "name": "@esbuild/sunos-x64",
            "direct": false,
            "version": "0.28.1",
            "ecosystem": "npm"
          },
          {
            "name": "@esbuild/win32-arm64",
            "direct": false,
            "version": "0.25.10",
            "ecosystem": "npm"
          },
          {
            "name": "@esbuild/win32-arm64",
            "direct": false,
            "version": "0.27.2",
            "ecosystem": "npm"
          },
          {
            "name": "@esbuild/win32-arm64",
            "direct": false,
            "version": "0.28.1",
            "ecosystem": "npm"
          },
          {
            "name": "@esbuild/win32-ia32",
            "direct": false,
            "version": "0.25.10",
            "ecosystem": "npm"
          },
          {
            "name": "@esbuild/win32-ia32",
            "direct": false,
            "version": "0.27.2",
            "ecosystem": "npm"
          },
          {
            "name": "@esbuild/win32-ia32",
            "direct": false,
            "version": "0.28.1",
            "ecosystem": "npm"
          },
          {
            "name": "@esbuild/win32-x64",
            "direct": false,
            "version": "0.25.10",
            "ecosystem": "npm"
          },
          {
            "name": "@esbuild/win32-x64",
            "direct": false,
            "version": "0.27.2",
            "ecosystem": "npm"
          },
          {
            "name": "@esbuild/win32-x64",
            "direct": false,
            "version": "0.28.1",
            "ecosystem": "npm"
          },
          {
            "name": "@eslint-community/eslint-utils",
            "direct": false,
            "version": "4.9.1",
            "ecosystem": "npm"
          },
          {
            "name": "@eslint-community/regexpp",
            "direct": false,
            "version": "4.12.2",
            "ecosystem": "npm"
          },
          {
            "name": "@eslint/config-array",
            "direct": false,
            "version": "0.23.5",
            "ecosystem": "npm"
          },
          {
            "name": "@eslint/config-helpers",
            "direct": false,
            "version": "0.6.0",
            "ecosystem": "npm"
          },
          {
            "name": "@eslint/core",
            "direct": false,
            "version": "1.2.1",
            "ecosystem": "npm"
          },
          {
            "name": "@eslint/js",
            "direct": false,
            "version": "10.0.1",
            "ecosystem": "npm"
          },
          {
            "name": "@eslint/object-schema",
            "direct": false,
            "version": "3.0.5",
            "ecosystem": "npm"
          },
          {
            "name": "@eslint/plugin-kit",
            "direct": false,
            "version": "0.7.2",
            "ecosystem": "npm"
          },
          {
            "name": "@hono/node-server",
            "direct": false,
            "version": "1.19.10",
            "ecosystem": "npm"
          },
          {
            "name": "@hono/node-server",
            "direct": false,
            "version": "1.19.11",
            "ecosystem": "npm"
          },
          {
            "name": "@hono/node-server",
            "direct": false,
            "version": "1.19.14",
            "ecosystem": "npm"
          },
          {
            "name": "@humanfs/core",
            "direct": false,
            "version": "0.19.1",
            "ecosystem": "npm"
          },
          {
            "name": "@humanfs/core",
            "direct": false,
            "version": "0.19.2",
            "ecosystem": "npm"
          },
          {
            "name": "@humanfs/node",
            "direct": false,
            "version": "0.16.7",
            "ecosystem": "npm"
          },
          {
            "name": "@humanfs/node",
            "direct": false,
            "version": "0.16.8",
            "ecosystem": "npm"
          },
          {
            "name": "@humanfs/types",
            "direct": false,
            "version": "0.15.0",
            "ecosystem": "npm"
          },
          {
            "name": "@humanwhocodes/module-importer",
            "direct": false,
            "version": "1.0.1",
            "ecosystem": "npm"
          },
          {
            "name": "@humanwhocodes/retry",
            "direct": false,
            "version": "0.4.3",
            "ecosystem": "npm"
          },
          {
            "name": "@inquirer/checkbox",
            "direct": false,
            "version": "3.0.1",
            "ecosystem": "npm"
          },
          {
            "name": "@inquirer/confirm",
            "direct": false,
            "version": "4.0.1",
            "ecosystem": "npm"
          },
          {
            "name": "@inquirer/core",
            "direct": false,
            "version": "9.2.1",
            "ecosystem": "npm"
          },
          {
            "name": "@inquirer/editor",
            "direct": false,
            "version": "3.0.1",
            "ecosystem": "npm"
          },
          {
            "name": "@inquirer/expand",
            "direct": false,
            "version": "3.0.1",
            "ecosystem": "npm"
          },
          {
            "name": "@inquirer/external-editor",
            "direct": false,
            "version": "1.0.2",
            "ecosystem": "npm"
          },
          {
            "name": "@inquirer/figures",
            "direct": false,
            "version": "1.0.14",
            "ecosystem": "npm"
          },
          {
            "name": "@inquirer/input",
            "direct": false,
            "version": "3.0.1",
            "ecosystem": "npm"
          },
          {
            "name": "@inquirer/number",
            "direct": false,
            "version": "2.0.1",
            "ecosystem": "npm"
          },
          {
            "name": "@inquirer/password",
            "direct": false,
            "version": "3.0.1",
            "ecosystem": "npm"
          },
          {
            "name": "@inquirer/prompts",
            "direct": false,
            "version": "6.0.1",
            "ecosystem": "npm"
          },
          {
            "name": "@inquirer/rawlist",
            "direct": false,
            "version": "3.0.1",
            "ecosystem": "npm"
          },
          {
            "name": "@inquirer/search",
            "direct": false,
            "version": "2.0.1",
            "ecosystem": "npm"
          },
          {
            "name": "@inquirer/select",
            "direct": false,
            "version": "3.0.1",
            "ecosystem": "npm"
          },
          {
            "name": "@inquirer/type",
            "direct": false,
            "version": "2.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "@jridgewell/resolve-uri",
            "direct": false,
            "version": "3.1.2",
            "ecosystem": "npm"
          },
          {
            "name": "@jridgewell/sourcemap-codec",
            "direct": false,
            "version": "1.5.5",
            "ecosystem": "npm"
          },
          {
            "name": "@jridgewell/trace-mapping",
            "direct": false,
            "version": "0.3.31",
            "ecosystem": "npm"
          },
          {
            "name": "@kya-os/consent",
            "direct": false,
            "version": "0.1.37",
            "ecosystem": "npm"
          },
          {
            "name": "@kya-os/consent",
            "direct": false,
            "version": "0.1.43",
            "ecosystem": "npm"
          },
          {
            "name": "@kya-os/consent",
            "direct": false,
            "version": "^0.1.37",
            "ecosystem": "npm"
          },
          {
            "name": "@lit-labs/ssr-dom-shim",
            "direct": false,
            "version": "1.5.1",
            "ecosystem": "npm"
          },
          {
            "name": "@lit-labs/ssr-dom-shim",
            "direct": false,
            "version": "1.6.0",
            "ecosystem": "npm"
          },
          {
            "name": "@lit/react",
            "direct": false,
            "version": "1.0.8",
            "ecosystem": "npm"
          },
          {
            "name": "@lit/reactive-element",
            "direct": false,
            "version": "2.1.2",
            "ecosystem": "npm"
          },
          {
            "name": "@modelcontextprotocol/sdk",
            "direct": false,
            "version": "1.27.1",
            "ecosystem": "npm"
          },
          {
            "name": "@modelcontextprotocol/sdk",
            "direct": false,
            "version": "1.29.0",
            "ecosystem": "npm"
          },
          {
            "name": "@modelcontextprotocol/sdk",
            "direct": false,
            "version": "^1.12.0",
            "ecosystem": "npm"
          },
          {
            "name": "@modelcontextprotocol/sdk",
            "direct": false,
            "version": "^1.27.1",
            "ecosystem": "npm"
          },
          {
            "name": "@napi-rs/wasm-runtime",
            "direct": false,
            "version": "1.1.6",
            "ecosystem": "npm"
          },
          {
            "name": "@ngrok/ngrok",
            "direct": false,
            "version": "1.5.2",
            "ecosystem": "npm"
          },
          {
            "name": "@ngrok/ngrok-android-arm64",
            "direct": false,
            "version": "1.5.2",
            "ecosystem": "npm"
          },
          {
            "name": "@ngrok/ngrok-darwin-arm64",
            "direct": false,
            "version": "1.5.2",
            "ecosystem": "npm"
          },
          {
            "name": "@ngrok/ngrok-darwin-universal",
            "direct": false,
            "version": "1.5.2",
            "ecosystem": "npm"
          },
          {
            "name": "@ngrok/ngrok-darwin-x64",
            "direct": false,
            "version": "1.5.2",
            "ecosystem": "npm"
          },
          {
            "name": "@ngrok/ngrok-freebsd-x64",
            "direct": false,
            "version": "1.5.2",
            "ecosystem": "npm"
          },
          {
            "name": "@ngrok/ngrok-linux-arm-gnueabihf",
            "direct": false,
            "version": "1.5.2",
            "ecosystem": "npm"
          },
          {
            "name": "@ngrok/ngrok-linux-arm64-gnu",
            "direct": false,
            "version": "1.5.2",
            "ecosystem": "npm"
          },
          {
            "name": "@ngrok/ngrok-linux-arm64-musl",
            "direct": false,
            "version": "1.5.2",
            "ecosystem": "npm"
          },
          {
            "name": "@ngrok/ngrok-linux-x64-gnu",
            "direct": false,
            "version": "1.5.2",
            "ecosystem": "npm"
          },
          {
            "name": "@ngrok/ngrok-linux-x64-musl",
            "direct": false,
            "version": "1.5.2",
            "ecosystem": "npm"
          },
          {
            "name": "@ngrok/ngrok-win32-arm64-msvc",
            "direct": false,
            "version": "1.5.2",
            "ecosystem": "npm"
          },
          {
            "name": "@ngrok/ngrok-win32-ia32-msvc",
            "direct": false,
            "version": "1.5.2",
            "ecosystem": "npm"
          },
          {
            "name": "@ngrok/ngrok-win32-x64-msvc",
            "direct": false,
            "version": "1.5.2",
            "ecosystem": "npm"
          },
          {
            "name": "@nodelib/fs.scandir",
            "direct": false,
            "version": "2.1.5",
            "ecosystem": "npm"
          },
          {
            "name": "@nodelib/fs.stat",
            "direct": false,
            "version": "2.0.5",
            "ecosystem": "npm"
          },
          {
            "name": "@nodelib/fs.walk",
            "direct": false,
            "version": "1.2.8",
            "ecosystem": "npm"
          },
          {
            "name": "@oxc-project/types",
            "direct": false,
            "version": "0.139.0",
            "ecosystem": "npm"
          },
          {
            "name": "@rolldown/binding-android-arm64",
            "direct": false,
            "version": "1.1.5",
            "ecosystem": "npm"
          },
          {
            "name": "@rolldown/binding-darwin-arm64",
            "direct": false,
            "version": "1.1.5",
            "ecosystem": "npm"
          },
          {
            "name": "@rolldown/binding-darwin-x64",
            "direct": false,
            "version": "1.1.5",
            "ecosystem": "npm"
          },
          {
            "name": "@rolldown/binding-freebsd-x64",
            "direct": false,
            "version": "1.1.5",
            "ecosystem": "npm"
          },
          {
            "name": "@rolldown/binding-linux-arm-gnueabihf",
            "direct": false,
            "version": "1.1.5",
            "ecosystem": "npm"
          },
          {
            "name": "@rolldown/binding-linux-arm64-gnu",
            "direct": false,
            "version": "1.1.5",
            "ecosystem": "npm"
          },
          {
            "name": "@rolldown/binding-linux-arm64-musl",
            "direct": false,
            "version": "1.1.5",
            "ecosystem": "npm"
          },
          {
            "name": "@rolldown/binding-linux-ppc64-gnu",
            "direct": false,
            "version": "1.1.5",
            "ecosystem": "npm"
          },
          {
            "name": "@rolldown/binding-linux-s390x-gnu",
            "direct": false,
            "version": "1.1.5",
            "ecosystem": "npm"
          },
          {
            "name": "@rolldown/binding-linux-x64-gnu",
            "direct": false,
            "version": "1.1.5",
            "ecosystem": "npm"
          },
          {
            "name": "@rolldown/binding-linux-x64-musl",
            "direct": false,
            "version": "1.1.5",
            "ecosystem": "npm"
          },
          {
            "name": "@rolldown/binding-openharmony-arm64",
            "direct": false,
            "version": "1.1.5",
            "ecosystem": "npm"
          },
          {
            "name": "@rolldown/binding-wasm32-wasi",
            "direct": false,
            "version": "1.1.5",
            "ecosystem": "npm"
          },
          {
            "name": "@rolldown/binding-win32-arm64-msvc",
            "direct": false,
            "version": "1.1.5",
            "ecosystem": "npm"
          },
          {
            "name": "@rolldown/binding-win32-x64-msvc",
            "direct": false,
            "version": "1.1.5",
            "ecosystem": "npm"
          },
          {
            "name": "@rolldown/pluginutils",
            "direct": false,
            "version": "1.0.1",
            "ecosystem": "npm"
          },
          {
            "name": "@smithery/cli",
            "direct": false,
            "version": "2.2.1",
            "ecosystem": "npm"
          },
          {
            "name": "@smithery/registry",
            "direct": false,
            "version": "0.4.3",
            "ecosystem": "npm"
          },
          {
            "name": "@standard-schema/spec",
            "direct": false,
            "version": "1.1.0",
            "ecosystem": "npm"
          },
          {
            "name": "@tybys/wasm-util",
            "direct": false,
            "version": "0.10.3",
            "ecosystem": "npm"
          },
          {
            "name": "@types/body-parser",
            "direct": false,
            "version": "1.19.6",
            "ecosystem": "npm"
          },
          {
            "name": "@types/chai",
            "direct": false,
            "version": "5.2.3",
            "ecosystem": "npm"
          },
          {
            "name": "@types/connect",
            "direct": false,
            "version": "3.4.38",
            "ecosystem": "npm"
          },
          {
            "name": "@types/deep-eql",
            "direct": false,
            "version": "4.0.2",
            "ecosystem": "npm"
          },
          {
            "name": "@types/esrecurse",
            "direct": false,
            "version": "4.3.1",
            "ecosystem": "npm"
          },
          {
            "name": "@types/estree",
            "direct": false,
            "version": "1.0.8",
            "ecosystem": "npm"
          },
          {
            "name": "@types/estree",
            "direct": false,
            "version": "1.0.9",
            "ecosystem": "npm"
          },
          {
            "name": "@types/express",
            "direct": false,
            "version": "5.0.6",
            "ecosystem": "npm"
          },
          {
            "name": "@types/express",
            "direct": false,
            "version": "^5.0.4",
            "ecosystem": "npm"
          },
          {
            "name": "@types/express-serve-static-core",
            "direct": false,
            "version": "5.0.6",
            "ecosystem": "npm"
          },
          {
            "name": "@types/express-serve-static-core",
            "direct": false,
            "version": "5.1.1",
            "ecosystem": "npm"
          },
          {
            "name": "@types/express-serve-static-core",
            "direct": false,
            "version": "5.1.2",
            "ecosystem": "npm"
          },
          {
            "name": "@types/http-errors",
            "direct": false,
            "version": "2.0.5",
            "ecosystem": "npm"
          },
          {
            "name": "@types/json-schema",
            "direct": false,
            "version": "7.0.15",
            "ecosystem": "npm"
          },
          {
            "name": "@types/mime",
            "direct": false,
            "version": "1.3.5",
            "ecosystem": "npm"
          },
          {
            "name": "@types/mute-stream",
            "direct": false,
            "version": "0.0.4",
            "ecosystem": "npm"
          },
          {
            "name": "@types/node",
            "direct": false,
            "version": "20.19.37",
            "ecosystem": "npm"
          },
          {
            "name": "@types/node",
            "direct": false,
            "version": "22.18.12",
            "ecosystem": "npm"
          },
          {
            "name": "@types/node",
            "direct": false,
            "version": "24.10.13",
            "ecosystem": "npm"
          },
          {
            "name": "@types/node",
            "direct": false,
            "version": "26.1.1",
            "ecosystem": "npm"
          },
          {
            "name": "@types/node",
            "direct": false,
            "version": "^20.14.0",
            "ecosystem": "npm"
          },
          {
            "name": "@types/node",
            "direct": false,
            "version": "^20.14.9",
            "ecosystem": "npm"
          },
          {
            "name": "@types/qs",
            "direct": false,
            "version": "6.14.0",
            "ecosystem": "npm"
          },
          {
            "name": "@types/qs",
            "direct": false,
            "version": "6.15.0",
            "ecosystem": "npm"
          },
          {
            "name": "@types/qs",
            "direct": false,
            "version": "6.15.1",
            "ecosystem": "npm"
          },
          {
            "name": "@types/range-parser",
            "direct": false,
            "version": "1.2.7",
            "ecosystem": "npm"
          },
          {
            "name": "@types/react",
            "direct": false,
            "version": "19.2.14",
            "ecosystem": "npm"
          },
          {
            "name": "@types/react",
            "direct": false,
            "version": "19.2.17",
            "ecosystem": "npm"
          },
          {
            "name": "@types/send",
            "direct": false,
            "version": "0.17.5",
            "ecosystem": "npm"
          },
          {
            "name": "@types/send",
            "direct": false,
            "version": "1.2.1",
            "ecosystem": "npm"
          },
          {
            "name": "@types/serve-static",
            "direct": false,
            "version": "2.2.0",
            "ecosystem": "npm"
          },
          {
            "name": "@types/trusted-types",
            "direct": false,
            "version": "2.0.7",
            "ecosystem": "npm"
          },
          {
            "name": "@types/wrap-ansi",
            "direct": false,
            "version": "3.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "@typescript-eslint/eslint-plugin",
            "direct": false,
            "version": "8.65.0",
            "ecosystem": "npm"
          },
          {
            "name": "@typescript-eslint/parser",
            "direct": false,
            "version": "8.65.0",
            "ecosystem": "npm"
          },
          {
            "name": "@typescript-eslint/project-service",
            "direct": false,
            "version": "8.65.0",
            "ecosystem": "npm"
          },
          {
            "name": "@typescript-eslint/scope-manager",
            "direct": false,
            "version": "8.65.0",
            "ecosystem": "npm"
          },
          {
            "name": "@typescript-eslint/tsconfig-utils",
            "direct": false,
            "version": "8.65.0",
            "ecosystem": "npm"
          },
          {
            "name": "@typescript-eslint/type-utils",
            "direct": false,
            "version": "8.65.0",
            "ecosystem": "npm"
          },
          {
            "name": "@typescript-eslint/types",
            "direct": false,
            "version": "8.65.0",
            "ecosystem": "npm"
          },
          {
            "name": "@typescript-eslint/typescript-estree",
            "direct": false,
            "version": "8.65.0",
            "ecosystem": "npm"
          },
          {
            "name": "@typescript-eslint/utils",
            "direct": false,
            "version": "8.65.0",
            "ecosystem": "npm"
          },
          {
            "name": "@typescript-eslint/visitor-keys",
            "direct": false,
            "version": "8.65.0",
            "ecosystem": "npm"
          },
          {
            "name": "@vitest/coverage-v8",
            "direct": false,
            "version": "4.1.10",
            "ecosystem": "npm"
          },
          {
            "name": "@vitest/expect",
            "direct": false,
            "version": "4.1.10",
            "ecosystem": "npm"
          },
          {
            "name": "@vitest/mocker",
            "direct": false,
            "version": "4.1.10",
            "ecosystem": "npm"
          },
          {
            "name": "@vitest/pretty-format",
            "direct": false,
            "version": "4.1.10",
            "ecosystem": "npm"
          },
          {
            "name": "@vitest/runner",
            "direct": false,
            "version": "4.1.10",
            "ecosystem": "npm"
          },
          {
            "name": "@vitest/snapshot",
            "direct": false,
            "version": "4.1.10",
            "ecosystem": "npm"
          },
          {
            "name": "@vitest/spy",
            "direct": false,
            "version": "4.1.10",
            "ecosystem": "npm"
          },
          {
            "name": "@vitest/utils",
            "direct": false,
            "version": "4.1.10",
            "ecosystem": "npm"
          },
          {
            "name": "accepts",
            "direct": false,
            "version": "2.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "acorn",
            "direct": false,
            "version": "8.16.0",
            "ecosystem": "npm"
          },
          {
            "name": "acorn",
            "direct": false,
            "version": "8.17.0",
            "ecosystem": "npm"
          },
          {
            "name": "acorn-jsx",
            "direct": false,
            "version": "5.3.2",
            "ecosystem": "npm"
          },
          {
            "name": "ajv",
            "direct": false,
            "version": "6.14.0",
            "ecosystem": "npm"
          },
          {
            "name": "ajv",
            "direct": false,
            "version": "6.15.0",
            "ecosystem": "npm"
          },
          {
            "name": "ajv",
            "direct": false,
            "version": "8.18.0",
            "ecosystem": "npm"
          },
          {
            "name": "ajv",
            "direct": false,
            "version": "8.20.0",
            "ecosystem": "npm"
          },
          {
            "name": "ajv-formats",
            "direct": false,
            "version": "3.0.1",
            "ecosystem": "npm"
          },
          {
            "name": "ansi-align",
            "direct": false,
            "version": "3.0.1",
            "ecosystem": "npm"
          },
          {
            "name": "ansi-escapes",
            "direct": false,
            "version": "4.3.2",
            "ecosystem": "npm"
          },
          {
            "name": "ansi-regex",
            "direct": false,
            "version": "5.0.1",
            "ecosystem": "npm"
          },
          {
            "name": "ansi-regex",
            "direct": false,
            "version": "6.2.2",
            "ecosystem": "npm"
          },
          {
            "name": "ansi-styles",
            "direct": false,
            "version": "4.3.0",
            "ecosystem": "npm"
          },
          {
            "name": "ansi-styles",
            "direct": false,
            "version": "6.2.3",
            "ecosystem": "npm"
          },
          {
            "name": "assertion-error",
            "direct": false,
            "version": "2.0.1",
            "ecosystem": "npm"
          },
          {
            "name": "ast-v8-to-istanbul",
            "direct": false,
            "version": "1.0.5",
            "ecosystem": "npm"
          },
          {
            "name": "balanced-match",
            "direct": false,
            "version": "4.0.4",
            "ecosystem": "npm"
          },
          {
            "name": "base64-js",
            "direct": false,
            "version": "1.5.1",
            "ecosystem": "npm"
          },
          {
            "name": "bl",
            "direct": false,
            "version": "4.1.0",
            "ecosystem": "npm"
          },
          {
            "name": "body-parser",
            "direct": false,
            "version": "2.2.1",
            "ecosystem": "npm"
          },
          {
            "name": "body-parser",
            "direct": false,
            "version": "2.2.2",
            "ecosystem": "npm"
          },
          {
            "name": "body-parser",
            "direct": false,
            "version": "2.3.0",
            "ecosystem": "npm"
          },
          {
            "name": "boxen",
            "direct": false,
            "version": "8.0.1",
            "ecosystem": "npm"
          },
          {
            "name": "brace-expansion",
            "direct": false,
            "version": "5.0.4",
            "ecosystem": "npm"
          },
          {
            "name": "brace-expansion",
            "direct": false,
            "version": "5.0.7",
            "ecosystem": "npm"
          },
          {
            "name": "braces",
            "direct": false,
            "version": "3.0.3",
            "ecosystem": "npm"
          },
          {
            "name": "buffer",
            "direct": false,
            "version": "5.7.1",
            "ecosystem": "npm"
          },
          {
            "name": "bytes",
            "direct": false,
            "version": "3.1.2",
            "ecosystem": "npm"
          },
          {
            "name": "call-bind-apply-helpers",
            "direct": false,
            "version": "1.0.2",
            "ecosystem": "npm"
          },
          {
            "name": "call-bound",
            "direct": false,
            "version": "1.0.4",
            "ecosystem": "npm"
          },
          {
            "name": "camelcase",
            "direct": false,
            "version": "8.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "chai",
            "direct": false,
            "version": "6.2.2",
            "ecosystem": "npm"
          },
          {
            "name": "chalk",
            "direct": false,
            "version": "4.1.2",
            "ecosystem": "npm"
          },
          {
            "name": "chalk",
            "direct": false,
            "version": "5.6.2",
            "ecosystem": "npm"
          },
          {
            "name": "chardet",
            "direct": false,
            "version": "0.7.0",
            "ecosystem": "npm"
          },
          {
            "name": "chardet",
            "direct": false,
            "version": "2.1.0",
            "ecosystem": "npm"
          },
          {
            "name": "chownr",
            "direct": false,
            "version": "1.1.4",
            "ecosystem": "npm"
          },
          {
            "name": "cli-boxes",
            "direct": false,
            "version": "3.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "cli-cursor",
            "direct": false,
            "version": "3.1.0",
            "ecosystem": "npm"
          },
          {
            "name": "cli-cursor",
            "direct": false,
            "version": "5.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "cli-spinners",
            "direct": false,
            "version": "2.9.2",
            "ecosystem": "npm"
          },
          {
            "name": "cli-width",
            "direct": false,
            "version": "3.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "cli-width",
            "direct": false,
            "version": "4.1.0",
            "ecosystem": "npm"
          },
          {
            "name": "clone",
            "direct": false,
            "version": "1.0.4",
            "ecosystem": "npm"
          },
          {
            "name": "color-convert",
            "direct": false,
            "version": "2.0.1",
            "ecosystem": "npm"
          },
          {
            "name": "color-name",
            "direct": false,
            "version": "1.1.4",
            "ecosystem": "npm"
          },
          {
            "name": "commander",
            "direct": false,
            "version": "13.1.0",
            "ecosystem": "npm"
          },
          {
            "name": "commander",
            "direct": false,
            "version": "14.0.3",
            "ecosystem": "npm"
          },
          {
            "name": "commander",
            "direct": false,
            "version": "15.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "commander",
            "direct": false,
            "version": "^14.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "content-disposition",
            "direct": false,
            "version": "1.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "content-disposition",
            "direct": false,
            "version": "1.0.1",
            "ecosystem": "npm"
          },
          {
            "name": "content-disposition",
            "direct": false,
            "version": "1.1.0",
            "ecosystem": "npm"
          },
          {
            "name": "content-type",
            "direct": false,
            "version": "1.0.5",
            "ecosystem": "npm"
          },
          {
            "name": "content-type",
            "direct": false,
            "version": "2.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "convert-source-map",
            "direct": false,
            "version": "2.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "cookie",
            "direct": false,
            "version": "0.7.2",
            "ecosystem": "npm"
          },
          {
            "name": "cookie-signature",
            "direct": false,
            "version": "1.2.2",
            "ecosystem": "npm"
          },
          {
            "name": "cors",
            "direct": false,
            "version": "2.8.5",
            "ecosystem": "npm"
          },
          {
            "name": "cors",
            "direct": false,
            "version": "2.8.6",
            "ecosystem": "npm"
          },
          {
            "name": "cross-fetch",
            "direct": false,
            "version": "4.1.0",
            "ecosystem": "npm"
          },
          {
            "name": "cross-spawn",
            "direct": false,
            "version": "6.0.6",
            "ecosystem": "npm"
          },
          {
            "name": "cross-spawn",
            "direct": false,
            "version": "7.0.6",
            "ecosystem": "npm"
          },
          {
            "name": "csstype",
            "direct": false,
            "version": "3.2.3",
            "ecosystem": "npm"
          },
          {
            "name": "debug",
            "direct": false,
            "version": "4.4.3",
            "ecosystem": "npm"
          },
          {
            "name": "decompress-response",
            "direct": false,
            "version": "6.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "deep-extend",
            "direct": false,
            "version": "0.6.0",
            "ecosystem": "npm"
          },
          {
            "name": "deep-is",
            "direct": false,
            "version": "0.1.4",
            "ecosystem": "npm"
          },
          {
            "name": "defaults",
            "direct": false,
            "version": "1.0.4",
            "ecosystem": "npm"
          },
          {
            "name": "depd",
            "direct": false,
            "version": "2.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "detect-libc",
            "direct": false,
            "version": "2.1.2",
            "ecosystem": "npm"
          },
          {
            "name": "dotenv",
            "direct": false,
            "version": "17.3.1",
            "ecosystem": "npm"
          },
          {
            "name": "dunder-proto",
            "direct": false,
            "version": "1.0.1",
            "ecosystem": "npm"
          },
          {
            "name": "ee-first",
            "direct": false,
            "version": "1.1.1",
            "ecosystem": "npm"
          },
          {
            "name": "emoji-regex",
            "direct": false,
            "version": "10.5.0",
            "ecosystem": "npm"
          },
          {
            "name": "emoji-regex",
            "direct": false,
            "version": "8.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "encodeurl",
            "direct": false,
            "version": "2.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "end-of-stream",
            "direct": false,
            "version": "1.4.5",
            "ecosystem": "npm"
          },
          {
            "name": "es-define-property",
            "direct": false,
            "version": "1.0.1",
            "ecosystem": "npm"
          },
          {
            "name": "es-errors",
            "direct": false,
            "version": "1.3.0",
            "ecosystem": "npm"
          },
          {
            "name": "es-module-lexer",
            "direct": false,
            "version": "2.3.1",
            "ecosystem": "npm"
          },
          {
            "name": "es-object-atoms",
            "direct": false,
            "version": "1.1.1",
            "ecosystem": "npm"
          },
          {
            "name": "es-object-atoms",
            "direct": false,
            "version": "1.1.2",
            "ecosystem": "npm"
          },
          {
            "name": "esbuild",
            "direct": false,
            "version": "0.25.10",
            "ecosystem": "npm"
          },
          {
            "name": "esbuild",
            "direct": false,
            "version": "0.27.2",
            "ecosystem": "npm"
          },
          {
            "name": "esbuild",
            "direct": false,
            "version": "0.28.1",
            "ecosystem": "npm"
          },
          {
            "name": "escape-html",
            "direct": false,
            "version": "1.0.3",
            "ecosystem": "npm"
          },
          {
            "name": "escape-string-regexp",
            "direct": false,
            "version": "1.0.5",
            "ecosystem": "npm"
          },
          {
            "name": "escape-string-regexp",
            "direct": false,
            "version": "4.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "eslint",
            "direct": false,
            "version": "10.7.0",
            "ecosystem": "npm"
          },
          {
            "name": "eslint-scope",
            "direct": false,
            "version": "9.1.2",
            "ecosystem": "npm"
          },
          {
            "name": "eslint-visitor-keys",
            "direct": false,
            "version": "3.4.3",
            "ecosystem": "npm"
          },
          {
            "name": "eslint-visitor-keys",
            "direct": false,
            "version": "5.0.1",
            "ecosystem": "npm"
          },
          {
            "name": "espree",
            "direct": false,
            "version": "11.2.0",
            "ecosystem": "npm"
          },
          {
            "name": "esquery",
            "direct": false,
            "version": "1.7.0",
            "ecosystem": "npm"
          },
          {
            "name": "esrecurse",
            "direct": false,
            "version": "4.3.0",
            "ecosystem": "npm"
          },
          {
            "name": "estraverse",
            "direct": false,
            "version": "5.3.0",
            "ecosystem": "npm"
          },
          {
            "name": "estree-walker",
            "direct": false,
            "version": "3.0.3",
            "ecosystem": "npm"
          },
          {
            "name": "esutils",
            "direct": false,
            "version": "2.0.3",
            "ecosystem": "npm"
          },
          {
            "name": "etag",
            "direct": false,
            "version": "1.8.1",
            "ecosystem": "npm"
          },
          {
            "name": "eventsource",
            "direct": false,
            "version": "3.0.7",
            "ecosystem": "npm"
          },
          {
            "name": "eventsource-parser",
            "direct": false,
            "version": "3.0.2",
            "ecosystem": "npm"
          },
          {
            "name": "eventsource-parser",
            "direct": false,
            "version": "3.0.6",
            "ecosystem": "npm"
          },
          {
            "name": "eventsource-parser",
            "direct": false,
            "version": "3.1.0",
            "ecosystem": "npm"
          },
          {
            "name": "execa",
            "direct": false,
            "version": "1.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "expand-template",
            "direct": false,
            "version": "2.0.3",
            "ecosystem": "npm"
          },
          {
            "name": "expect-type",
            "direct": false,
            "version": "1.3.0",
            "ecosystem": "npm"
          },
          {
            "name": "expect-type",
            "direct": false,
            "version": "1.4.0",
            "ecosystem": "npm"
          },
          {
            "name": "express",
            "direct": false,
            "version": "5.2.1",
            "ecosystem": "npm"
          },
          {
            "name": "express",
            "direct": false,
            "version": "^5.1.0",
            "ecosystem": "npm"
          },
          {
            "name": "express-rate-limit",
            "direct": false,
            "version": "8.3.0",
            "ecosystem": "npm"
          },
          {
            "name": "express-rate-limit",
            "direct": false,
            "version": "8.3.1",
            "ecosystem": "npm"
          },
          {
            "name": "express-rate-limit",
            "direct": false,
            "version": "8.6.0",
            "ecosystem": "npm"
          },
          {
            "name": "external-editor",
            "direct": false,
            "version": "3.1.0",
            "ecosystem": "npm"
          },
          {
            "name": "fast-deep-equal",
            "direct": false,
            "version": "3.1.3",
            "ecosystem": "npm"
          },
          {
            "name": "fast-glob",
            "direct": false,
            "version": "3.3.3",
            "ecosystem": "npm"
          },
          {
            "name": "fast-json-stable-stringify",
            "direct": false,
            "version": "2.1.0",
            "ecosystem": "npm"
          },
          {
            "name": "fast-levenshtein",
            "direct": false,
            "version": "2.0.6",
            "ecosystem": "npm"
          },
          {
            "name": "fast-uri",
            "direct": false,
            "version": "3.1.0",
            "ecosystem": "npm"
          },
          {
            "name": "fast-uri",
            "direct": false,
            "version": "3.1.4",
            "ecosystem": "npm"
          },
          {
            "name": "fastq",
            "direct": false,
            "version": "1.19.1",
            "ecosystem": "npm"
          },
          {
            "name": "fdir",
            "direct": false,
            "version": "6.5.0",
            "ecosystem": "npm"
          },
          {
            "name": "fflate",
            "direct": false,
            "version": "0.8.2",
            "ecosystem": "npm"
          },
          {
            "name": "figures",
            "direct": false,
            "version": "3.2.0",
            "ecosystem": "npm"
          },
          {
            "name": "file-entry-cache",
            "direct": false,
            "version": "8.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "fill-range",
            "direct": false,
            "version": "7.1.1",
            "ecosystem": "npm"
          },
          {
            "name": "finalhandler",
            "direct": false,
            "version": "2.1.0",
            "ecosystem": "npm"
          },
          {
            "name": "finalhandler",
            "direct": false,
            "version": "2.1.1",
            "ecosystem": "npm"
          },
          {
            "name": "find-up",
            "direct": false,
            "version": "5.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "flat-cache",
            "direct": false,
            "version": "4.0.1",
            "ecosystem": "npm"
          },
          {
            "name": "flatted",
            "direct": false,
            "version": "3.4.1",
            "ecosystem": "npm"
          },
          {
            "name": "flatted",
            "direct": false,
            "version": "3.4.2",
            "ecosystem": "npm"
          },
          {
            "name": "flora-colossus",
            "direct": false,
            "version": "2.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "forwarded",
            "direct": false,
            "version": "0.2.0",
            "ecosystem": "npm"
          },
          {
            "name": "fresh",
            "direct": false,
            "version": "2.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "fs-constants",
            "direct": false,
            "version": "1.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "fs-extra",
            "direct": false,
            "version": "10.1.0",
            "ecosystem": "npm"
          },
          {
            "name": "fsevents",
            "direct": false,
            "version": "2.3.3",
            "ecosystem": "npm"
          },
          {
            "name": "function-bind",
            "direct": false,
            "version": "1.1.2",
            "ecosystem": "npm"
          },
          {
            "name": "galactus",
            "direct": false,
            "version": "1.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "get-east-asian-width",
            "direct": false,
            "version": "1.4.0",
            "ecosystem": "npm"
          },
          {
            "name": "get-intrinsic",
            "direct": false,
            "version": "1.3.0",
            "ecosystem": "npm"
          },
          {
            "name": "get-proto",
            "direct": false,
            "version": "1.0.1",
            "ecosystem": "npm"
          },
          {
            "name": "get-stream",
            "direct": false,
            "version": "4.1.0",
            "ecosystem": "npm"
          },
          {
            "name": "get-tsconfig",
            "direct": false,
            "version": "4.10.1",
            "ecosystem": "npm"
          },
          {
            "name": "github-from-package",
            "direct": false,
            "version": "0.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "glob-parent",
            "direct": false,
            "version": "5.1.2",
            "ecosystem": "npm"
          },
          {
            "name": "glob-parent",
            "direct": false,
            "version": "6.0.2",
            "ecosystem": "npm"
          },
          {
            "name": "gopd",
            "direct": false,
            "version": "1.2.0",
            "ecosystem": "npm"
          },
          {
            "name": "graceful-fs",
            "direct": false,
            "version": "4.2.11",
            "ecosystem": "npm"
          },
          {
            "name": "has-flag",
            "direct": false,
            "version": "4.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "has-symbols",
            "direct": false,
            "version": "1.1.0",
            "ecosystem": "npm"
          },
          {
            "name": "hasown",
            "direct": false,
            "version": "2.0.2",
            "ecosystem": "npm"
          },
          {
            "name": "hasown",
            "direct": false,
            "version": "2.0.4",
            "ecosystem": "npm"
          },
          {
            "name": "hono",
            "direct": false,
            "version": "4.12.31",
            "ecosystem": "npm"
          },
          {
            "name": "hono",
            "direct": false,
            "version": "4.12.7",
            "ecosystem": "npm"
          },
          {
            "name": "hono",
            "direct": false,
            "version": "4.12.8",
            "ecosystem": "npm"
          },
          {
            "name": "html-escaper",
            "direct": false,
            "version": "2.0.2",
            "ecosystem": "npm"
          },
          {
            "name": "http-errors",
            "direct": false,
            "version": "2.0.1",
            "ecosystem": "npm"
          },
          {
            "name": "iconv-lite",
            "direct": false,
            "version": "0.4.24",
            "ecosystem": "npm"
          },
          {
            "name": "iconv-lite",
            "direct": false,
            "version": "0.7.0",
            "ecosystem": "npm"
          },
          {
            "name": "iconv-lite",
            "direct": false,
            "version": "0.7.2",
            "ecosystem": "npm"
          },
          {
            "name": "iconv-lite",
            "direct": false,
            "version": "0.7.3",
            "ecosystem": "npm"
          },
          {
            "name": "ieee754",
            "direct": false,
            "version": "1.2.1",
            "ecosystem": "npm"
          },
          {
            "name": "ignore",
            "direct": false,
            "version": "5.3.2",
            "ecosystem": "npm"
          },
          {
            "name": "ignore",
            "direct": false,
            "version": "7.0.5",
            "ecosystem": "npm"
          },
          {
            "name": "ignore",
            "direct": false,
            "version": "7.0.6",
            "ecosystem": "npm"
          },
          {
            "name": "imurmurhash",
            "direct": false,
            "version": "0.1.4",
            "ecosystem": "npm"
          },
          {
            "name": "inherits",
            "direct": false,
            "version": "2.0.4",
            "ecosystem": "npm"
          },
          {
            "name": "ini",
            "direct": false,
            "version": "1.3.8",
            "ecosystem": "npm"
          },
          {
            "name": "inquirer",
            "direct": false,
            "version": "8.2.7",
            "ecosystem": "npm"
          },
          {
            "name": "inquirer-autocomplete-prompt",
            "direct": false,
            "version": "2.0.1",
            "ecosystem": "npm"
          },
          {
            "name": "interpret",
            "direct": false,
            "version": "1.4.0",
            "ecosystem": "npm"
          },
          {
            "name": "ip-address",
            "direct": false,
            "version": "10.1.0",
            "ecosystem": "npm"
          },
          {
            "name": "ip-address",
            "direct": false,
            "version": "10.2.0",
            "ecosystem": "npm"
          },
          {
            "name": "ipaddr.js",
            "direct": false,
            "version": "1.9.1",
            "ecosystem": "npm"
          },
          {
            "name": "is-core-module",
            "direct": false,
            "version": "2.16.1",
            "ecosystem": "npm"
          },
          {
            "name": "is-extglob",
            "direct": false,
            "version": "2.1.1",
            "ecosystem": "npm"
          },
          {
            "name": "is-fullwidth-code-point",
            "direct": false,
            "version": "3.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "is-glob",
            "direct": false,
            "version": "4.0.3",
            "ecosystem": "npm"
          },
          {
            "name": "is-interactive",
            "direct": false,
            "version": "1.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "is-interactive",
            "direct": false,
            "version": "2.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "is-number",
            "direct": false,
            "version": "7.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "is-promise",
            "direct": false,
            "version": "4.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "is-stream",
            "direct": false,
            "version": "1.1.0",
            "ecosystem": "npm"
          },
          {
            "name": "is-unicode-supported",
            "direct": false,
            "version": "0.1.0",
            "ecosystem": "npm"
          },
          {
            "name": "is-unicode-supported",
            "direct": false,
            "version": "1.3.0",
            "ecosystem": "npm"
          },
          {
            "name": "is-unicode-supported",
            "direct": false,
            "version": "2.1.0",
            "ecosystem": "npm"
          },
          {
            "name": "isexe",
            "direct": false,
            "version": "2.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "istanbul-lib-coverage",
            "direct": false,
            "version": "3.2.2",
            "ecosystem": "npm"
          },
          {
            "name": "istanbul-lib-report",
            "direct": false,
            "version": "3.0.1",
            "ecosystem": "npm"
          },
          {
            "name": "istanbul-reports",
            "direct": false,
            "version": "3.2.0",
            "ecosystem": "npm"
          },
          {
            "name": "js-tokens",
            "direct": false,
            "version": "10.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "json-buffer",
            "direct": false,
            "version": "3.0.1",
            "ecosystem": "npm"
          },
          {
            "name": "json-schema-traverse",
            "direct": false,
            "version": "0.4.1",
            "ecosystem": "npm"
          },
          {
            "name": "json-schema-traverse",
            "direct": false,
            "version": "1.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "json-schema-typed",
            "direct": false,
            "version": "8.0.2",
            "ecosystem": "npm"
          },
          {
            "name": "json-stable-stringify-without-jsonify",
            "direct": false,
            "version": "1.0.1",
            "ecosystem": "npm"
          },
          {
            "name": "jsonfile",
            "direct": false,
            "version": "6.2.0",
            "ecosystem": "npm"
          },
          {
            "name": "keytar",
            "direct": false,
            "version": "7.9.0",
            "ecosystem": "npm"
          },
          {
            "name": "keyv",
            "direct": false,
            "version": "4.5.4",
            "ecosystem": "npm"
          },
          {
            "name": "levn",
            "direct": false,
            "version": "0.4.1",
            "ecosystem": "npm"
          },
          {
            "name": "lightningcss",
            "direct": false,
            "version": "1.33.0",
            "ecosystem": "npm"
          },
          {
            "name": "lightningcss-android-arm64",
            "direct": false,
            "version": "1.33.0",
            "ecosystem": "npm"
          },
          {
            "name": "lightningcss-darwin-arm64",
            "direct": false,
            "version": "1.33.0",
            "ecosystem": "npm"
          },
          {
            "name": "lightningcss-darwin-x64",
            "direct": false,
            "version": "1.33.0",
            "ecosystem": "npm"
          },
          {
            "name": "lightningcss-freebsd-x64",
            "direct": false,
            "version": "1.33.0",
            "ecosystem": "npm"
          },
          {
            "name": "lightningcss-linux-arm-gnueabihf",
            "direct": false,
            "version": "1.33.0",
            "ecosystem": "npm"
          },
          {
            "name": "lightningcss-linux-arm64-gnu",
            "direct": false,
            "version": "1.33.0",
            "ecosystem": "npm"
          },
          {
            "name": "lightningcss-linux-arm64-musl",
            "direct": false,
            "version": "1.33.0",
            "ecosystem": "npm"
          },
          {
            "name": "lightningcss-linux-x64-gnu",
            "direct": false,
            "version": "1.33.0",
            "ecosystem": "npm"
          },
          {
            "name": "lightningcss-linux-x64-musl",
            "direct": false,
            "version": "1.33.0",
            "ecosystem": "npm"
          },
          {
            "name": "lightningcss-win32-arm64-msvc",
            "direct": false,
            "version": "1.33.0",
            "ecosystem": "npm"
          },
          {
            "name": "lightningcss-win32-x64-msvc",
            "direct": false,
            "version": "1.33.0",
            "ecosystem": "npm"
          },
          {
            "name": "lit",
            "direct": false,
            "version": "3.3.2",
            "ecosystem": "npm"
          },
          {
            "name": "lit",
            "direct": false,
            "version": "3.3.3",
            "ecosystem": "npm"
          },
          {
            "name": "lit-element",
            "direct": false,
            "version": "4.2.2",
            "ecosystem": "npm"
          },
          {
            "name": "lit-html",
            "direct": false,
            "version": "3.3.2",
            "ecosystem": "npm"
          },
          {
            "name": "lit-html",
            "direct": false,
            "version": "3.3.3",
            "ecosystem": "npm"
          },
          {
            "name": "locate-path",
            "direct": false,
            "version": "6.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "lodash",
            "direct": false,
            "version": "4.17.23",
            "ecosystem": "npm"
          },
          {
            "name": "log-symbols",
            "direct": false,
            "version": "4.1.0",
            "ecosystem": "npm"
          },
          {
            "name": "log-symbols",
            "direct": false,
            "version": "6.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "magic-string",
            "direct": false,
            "version": "0.30.21",
            "ecosystem": "npm"
          },
          {
            "name": "magicast",
            "direct": false,
            "version": "0.5.3",
            "ecosystem": "npm"
          },
          {
            "name": "make-dir",
            "direct": false,
            "version": "4.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "math-intrinsics",
            "direct": false,
            "version": "1.1.0",
            "ecosystem": "npm"
          },
          {
            "name": "media-typer",
            "direct": false,
            "version": "1.1.0",
            "ecosystem": "npm"
          },
          {
            "name": "merge-descriptors",
            "direct": false,
            "version": "2.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "merge2",
            "direct": false,
            "version": "1.4.1",
            "ecosystem": "npm"
          },
          {
            "name": "micromatch",
            "direct": false,
            "version": "4.0.8",
            "ecosystem": "npm"
          },
          {
            "name": "mime-db",
            "direct": false,
            "version": "1.54.0",
            "ecosystem": "npm"
          },
          {
            "name": "mime-types",
            "direct": false,
            "version": "3.0.1",
            "ecosystem": "npm"
          },
          {
            "name": "mime-types",
            "direct": false,
            "version": "3.0.2",
            "ecosystem": "npm"
          },
          {
            "name": "mimic-fn",
            "direct": false,
            "version": "2.1.0",
            "ecosystem": "npm"
          },
          {
            "name": "mimic-function",
            "direct": false,
            "version": "5.0.1",
            "ecosystem": "npm"
          },
          {
            "name": "mimic-response",
            "direct": false,
            "version": "3.1.0",
            "ecosystem": "npm"
          },
          {
            "name": "minimatch",
            "direct": false,
            "version": "10.2.4",
            "ecosystem": "npm"
          },
          {
            "name": "minimatch",
            "direct": false,
            "version": "10.2.5",
            "ecosystem": "npm"
          },
          {
            "name": "minimist",
            "direct": false,
            "version": "1.2.8",
            "ecosystem": "npm"
          },
          {
            "name": "mkdirp-classic",
            "direct": false,
            "version": "0.5.3",
            "ecosystem": "npm"
          },
          {
            "name": "ms",
            "direct": false,
            "version": "2.1.3",
            "ecosystem": "npm"
          },
          {
            "name": "mute-stream",
            "direct": false,
            "version": "0.0.8",
            "ecosystem": "npm"
          },
          {
            "name": "mute-stream",
            "direct": false,
            "version": "1.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "nanoid",
            "direct": false,
            "version": "3.3.16",
            "ecosystem": "npm"
          },
          {
            "name": "napi-build-utils",
            "direct": false,
            "version": "2.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "natural-compare",
            "direct": false,
            "version": "1.4.0",
            "ecosystem": "npm"
          },
          {
            "name": "negotiator",
            "direct": false,
            "version": "1.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "nice-try",
            "direct": false,
            "version": "1.0.5",
            "ecosystem": "npm"
          },
          {
            "name": "node-abi",
            "direct": false,
            "version": "3.85.0",
            "ecosystem": "npm"
          },
          {
            "name": "node-addon-api",
            "direct": false,
            "version": "4.3.0",
            "ecosystem": "npm"
          },
          {
            "name": "node-fetch",
            "direct": false,
            "version": "2.7.0",
            "ecosystem": "npm"
          },
          {
            "name": "node-forge",
            "direct": false,
            "version": "1.3.2",
            "ecosystem": "npm"
          },
          {
            "name": "npm-run-path",
            "direct": false,
            "version": "2.0.2",
            "ecosystem": "npm"
          },
          {
            "name": "object-assign",
            "direct": false,
            "version": "4.1.1",
            "ecosystem": "npm"
          },
          {
            "name": "object-inspect",
            "direct": false,
            "version": "1.13.4",
            "ecosystem": "npm"
          },
          {
            "name": "obug",
            "direct": false,
            "version": "2.1.4",
            "ecosystem": "npm"
          },
          {
            "name": "on-finished",
            "direct": false,
            "version": "2.4.1",
            "ecosystem": "npm"
          },
          {
            "name": "once",
            "direct": false,
            "version": "1.4.0",
            "ecosystem": "npm"
          },
          {
            "name": "onetime",
            "direct": false,
            "version": "5.1.2",
            "ecosystem": "npm"
          },
          {
            "name": "onetime",
            "direct": false,
            "version": "7.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "optionator",
            "direct": false,
            "version": "0.9.4",
            "ecosystem": "npm"
          },
          {
            "name": "ora",
            "direct": false,
            "version": "5.4.1",
            "ecosystem": "npm"
          },
          {
            "name": "ora",
            "direct": false,
            "version": "8.2.0",
            "ecosystem": "npm"
          },
          {
            "name": "p-finally",
            "direct": false,
            "version": "1.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "p-limit",
            "direct": false,
            "version": "3.1.0",
            "ecosystem": "npm"
          },
          {
            "name": "p-locate",
            "direct": false,
            "version": "5.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "parseurl",
            "direct": false,
            "version": "1.3.3",
            "ecosystem": "npm"
          },
          {
            "name": "path-exists",
            "direct": false,
            "version": "4.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "path-key",
            "direct": false,
            "version": "2.0.1",
            "ecosystem": "npm"
          },
          {
            "name": "path-key",
            "direct": false,
            "version": "3.1.1",
            "ecosystem": "npm"
          },
          {
            "name": "path-parse",
            "direct": false,
            "version": "1.0.7",
            "ecosystem": "npm"
          },
          {
            "name": "path-to-regexp",
            "direct": false,
            "version": "8.2.0",
            "ecosystem": "npm"
          },
          {
            "name": "path-to-regexp",
            "direct": false,
            "version": "8.3.0",
            "ecosystem": "npm"
          },
          {
            "name": "path-to-regexp",
            "direct": false,
            "version": "8.4.2",
            "ecosystem": "npm"
          },
          {
            "name": "pathe",
            "direct": false,
            "version": "2.0.3",
            "ecosystem": "npm"
          },
          {
            "name": "picocolors",
            "direct": false,
            "version": "1.1.1",
            "ecosystem": "npm"
          },
          {
            "name": "picomatch",
            "direct": false,
            "version": "2.3.1",
            "ecosystem": "npm"
          },
          {
            "name": "picomatch",
            "direct": false,
            "version": "4.0.5",
            "ecosystem": "npm"
          },
          {
            "name": "pkce-challenge",
            "direct": false,
            "version": "5.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "pkce-challenge",
            "direct": false,
            "version": "5.0.1",
            "ecosystem": "npm"
          },
          {
            "name": "postcss",
            "direct": false,
            "version": "8.5.21",
            "ecosystem": "npm"
          },
          {
            "name": "prebuild-install",
            "direct": false,
            "version": "7.1.3",
            "ecosystem": "npm"
          },
          {
            "name": "prelude-ls",
            "direct": false,
            "version": "1.2.1",
            "ecosystem": "npm"
          },
          {
            "name": "prettier",
            "direct": false,
            "version": "3.8.1",
            "ecosystem": "npm"
          },
          {
            "name": "pretty-bytes",
            "direct": false,
            "version": "5.6.0",
            "ecosystem": "npm"
          },
          {
            "name": "proxy-addr",
            "direct": false,
            "version": "2.0.7",
            "ecosystem": "npm"
          },
          {
            "name": "pump",
            "direct": false,
            "version": "3.0.3",
            "ecosystem": "npm"
          },
          {
            "name": "punycode",
            "direct": false,
            "version": "2.3.1",
            "ecosystem": "npm"
          },
          {
            "name": "qs",
            "direct": false,
            "version": "6.14.2",
            "ecosystem": "npm"
          },
          {
            "name": "qs",
            "direct": false,
            "version": "6.15.0",
            "ecosystem": "npm"
          },
          {
            "name": "qs",
            "direct": false,
            "version": "6.15.3",
            "ecosystem": "npm"
          },
          {
            "name": "queue-microtask",
            "direct": false,
            "version": "1.2.3",
            "ecosystem": "npm"
          },
          {
            "name": "range-parser",
            "direct": false,
            "version": "1.2.1",
            "ecosystem": "npm"
          },
          {
            "name": "range-parser",
            "direct": false,
            "version": "1.3.0",
            "ecosystem": "npm"
          },
          {
            "name": "raw-body",
            "direct": false,
            "version": "3.0.2",
            "ecosystem": "npm"
          },
          {
            "name": "rc",
            "direct": false,
            "version": "1.2.8",
            "ecosystem": "npm"
          },
          {
            "name": "readable-stream",
            "direct": false,
            "version": "3.6.2",
            "ecosystem": "npm"
          },
          {
            "name": "rechoir",
            "direct": false,
            "version": "0.6.2",
            "ecosystem": "npm"
          },
          {
            "name": "require-from-string",
            "direct": false,
            "version": "2.0.2",
            "ecosystem": "npm"
          },
          {
            "name": "resolve",
            "direct": false,
            "version": "1.22.10",
            "ecosystem": "npm"
          },
          {
            "name": "resolve-pkg-maps",
            "direct": false,
            "version": "1.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "restore-cursor",
            "direct": false,
            "version": "3.1.0",
            "ecosystem": "npm"
          },
          {
            "name": "restore-cursor",
            "direct": false,
            "version": "5.1.0",
            "ecosystem": "npm"
          },
          {
            "name": "reusify",
            "direct": false,
            "version": "1.1.0",
            "ecosystem": "npm"
          },
          {
            "name": "rolldown",
            "direct": false,
            "version": "1.1.5",
            "ecosystem": "npm"
          },
          {
            "name": "router",
            "direct": false,
            "version": "2.2.0",
            "ecosystem": "npm"
          },
          {
            "name": "run-async",
            "direct": false,
            "version": "2.4.1",
            "ecosystem": "npm"
          },
          {
            "name": "run-parallel",
            "direct": false,
            "version": "1.2.0",
            "ecosystem": "npm"
          },
          {
            "name": "rxjs",
            "direct": false,
            "version": "7.8.2",
            "ecosystem": "npm"
          },
          {
            "name": "safe-buffer",
            "direct": false,
            "version": "5.2.1",
            "ecosystem": "npm"
          },
          {
            "name": "safer-buffer",
            "direct": false,
            "version": "2.1.2",
            "ecosystem": "npm"
          },
          {
            "name": "semver",
            "direct": false,
            "version": "5.7.2",
            "ecosystem": "npm"
          },
          {
            "name": "semver",
            "direct": false,
            "version": "7.7.3",
            "ecosystem": "npm"
          },
          {
            "name": "semver",
            "direct": false,
            "version": "7.7.4",
            "ecosystem": "npm"
          },
          {
            "name": "semver",
            "direct": false,
            "version": "7.8.5",
            "ecosystem": "npm"
          },
          {
            "name": "send",
            "direct": false,
            "version": "1.2.0",
            "ecosystem": "npm"
          },
          {
            "name": "send",
            "direct": false,
            "version": "1.2.1",
            "ecosystem": "npm"
          },
          {
            "name": "serve-static",
            "direct": false,
            "version": "2.2.0",
            "ecosystem": "npm"
          },
          {
            "name": "serve-static",
            "direct": false,
            "version": "2.2.1",
            "ecosystem": "npm"
          },
          {
            "name": "setprototypeof",
            "direct": false,
            "version": "1.2.0",
            "ecosystem": "npm"
          },
          {
            "name": "shebang-command",
            "direct": false,
            "version": "1.2.0",
            "ecosystem": "npm"
          },
          {
            "name": "shebang-command",
            "direct": false,
            "version": "2.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "shebang-regex",
            "direct": false,
            "version": "1.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "shebang-regex",
            "direct": false,
            "version": "3.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "shelljs",
            "direct": false,
            "version": "0.9.2",
            "ecosystem": "npm"
          },
          {
            "name": "shx",
            "direct": false,
            "version": "0.4.0",
            "ecosystem": "npm"
          },
          {
            "name": "side-channel",
            "direct": false,
            "version": "1.1.0",
            "ecosystem": "npm"
          },
          {
            "name": "side-channel",
            "direct": false,
            "version": "1.1.1",
            "ecosystem": "npm"
          },
          {
            "name": "side-channel-list",
            "direct": false,
            "version": "1.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "side-channel-list",
            "direct": false,
            "version": "1.0.1",
            "ecosystem": "npm"
          },
          {
            "name": "side-channel-map",
            "direct": false,
            "version": "1.0.1",
            "ecosystem": "npm"
          },
          {
            "name": "side-channel-weakmap",
            "direct": false,
            "version": "1.0.2",
            "ecosystem": "npm"
          },
          {
            "name": "siginfo",
            "direct": false,
            "version": "2.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "signal-exit",
            "direct": false,
            "version": "3.0.7",
            "ecosystem": "npm"
          },
          {
            "name": "signal-exit",
            "direct": false,
            "version": "4.1.0",
            "ecosystem": "npm"
          },
          {
            "name": "simple-concat",
            "direct": false,
            "version": "1.0.1",
            "ecosystem": "npm"
          },
          {
            "name": "simple-get",
            "direct": false,
            "version": "4.0.1",
            "ecosystem": "npm"
          },
          {
            "name": "source-map-js",
            "direct": false,
            "version": "1.2.1",
            "ecosystem": "npm"
          },
          {
            "name": "stackback",
            "direct": false,
            "version": "0.0.2",
            "ecosystem": "npm"
          },
          {
            "name": "statuses",
            "direct": false,
            "version": "2.0.2",
            "ecosystem": "npm"
          },
          {
            "name": "std-env",
            "direct": false,
            "version": "4.2.0",
            "ecosystem": "npm"
          },
          {
            "name": "stdin-discarder",
            "direct": false,
            "version": "0.2.2",
            "ecosystem": "npm"
          },
          {
            "name": "string-width",
            "direct": false,
            "version": "4.2.3",
            "ecosystem": "npm"
          },
          {
            "name": "string-width",
            "direct": false,
            "version": "7.2.0",
            "ecosystem": "npm"
          },
          {
            "name": "string_decoder",
            "direct": false,
            "version": "1.3.0",
            "ecosystem": "npm"
          },
          {
            "name": "strip-ansi",
            "direct": false,
            "version": "6.0.1",
            "ecosystem": "npm"
          },
          {
            "name": "strip-ansi",
            "direct": false,
            "version": "7.1.2",
            "ecosystem": "npm"
          },
          {
            "name": "strip-eof",
            "direct": false,
            "version": "1.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "strip-json-comments",
            "direct": false,
            "version": "2.0.1",
            "ecosystem": "npm"
          },
          {
            "name": "supports-color",
            "direct": false,
            "version": "7.2.0",
            "ecosystem": "npm"
          },
          {
            "name": "supports-preserve-symlinks-flag",
            "direct": false,
            "version": "1.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "tar-fs",
            "direct": false,
            "version": "2.1.4",
            "ecosystem": "npm"
          },
          {
            "name": "tar-stream",
            "direct": false,
            "version": "2.2.0",
            "ecosystem": "npm"
          },
          {
            "name": "through",
            "direct": false,
            "version": "2.3.8",
            "ecosystem": "npm"
          },
          {
            "name": "tinybench",
            "direct": false,
            "version": "2.9.0",
            "ecosystem": "npm"
          },
          {
            "name": "tinyexec",
            "direct": false,
            "version": "1.2.4",
            "ecosystem": "npm"
          },
          {
            "name": "tinyglobby",
            "direct": false,
            "version": "0.2.17",
            "ecosystem": "npm"
          },
          {
            "name": "tinyrainbow",
            "direct": false,
            "version": "3.1.0",
            "ecosystem": "npm"
          },
          {
            "name": "tmp",
            "direct": false,
            "version": "0.2.5",
            "ecosystem": "npm"
          },
          {
            "name": "to-regex-range",
            "direct": false,
            "version": "5.0.1",
            "ecosystem": "npm"
          },
          {
            "name": "toidentifier",
            "direct": false,
            "version": "1.0.1",
            "ecosystem": "npm"
          },
          {
            "name": "tr46",
            "direct": false,
            "version": "0.0.3",
            "ecosystem": "npm"
          },
          {
            "name": "ts-api-utils",
            "direct": false,
            "version": "2.5.0",
            "ecosystem": "npm"
          },
          {
            "name": "tslib",
            "direct": false,
            "version": "2.8.1",
            "ecosystem": "npm"
          },
          {
            "name": "tsx",
            "direct": false,
            "version": "4.21.0",
            "ecosystem": "npm"
          },
          {
            "name": "tsx",
            "direct": false,
            "version": "4.23.1",
            "ecosystem": "npm"
          },
          {
            "name": "tsx",
            "direct": false,
            "version": "^4.22.4",
            "ecosystem": "npm"
          },
          {
            "name": "tunnel-agent",
            "direct": false,
            "version": "0.6.0",
            "ecosystem": "npm"
          },
          {
            "name": "type-check",
            "direct": false,
            "version": "0.4.0",
            "ecosystem": "npm"
          },
          {
            "name": "type-fest",
            "direct": false,
            "version": "0.21.3",
            "ecosystem": "npm"
          },
          {
            "name": "type-fest",
            "direct": false,
            "version": "4.41.0",
            "ecosystem": "npm"
          },
          {
            "name": "type-is",
            "direct": false,
            "version": "2.0.1",
            "ecosystem": "npm"
          },
          {
            "name": "type-is",
            "direct": false,
            "version": "2.1.0",
            "ecosystem": "npm"
          },
          {
            "name": "typescript",
            "direct": false,
            "version": "5.9.3",
            "ecosystem": "npm"
          },
          {
            "name": "typescript",
            "direct": false,
            "version": "^5.5.0",
            "ecosystem": "npm"
          },
          {
            "name": "typescript",
            "direct": false,
            "version": "^5.5.3",
            "ecosystem": "npm"
          },
          {
            "name": "typescript-eslint",
            "direct": false,
            "version": "8.65.0",
            "ecosystem": "npm"
          },
          {
            "name": "undici-types",
            "direct": false,
            "version": "6.21.0",
            "ecosystem": "npm"
          },
          {
            "name": "undici-types",
            "direct": false,
            "version": "7.16.0",
            "ecosystem": "npm"
          },
          {
            "name": "undici-types",
            "direct": false,
            "version": "8.3.0",
            "ecosystem": "npm"
          },
          {
            "name": "universalify",
            "direct": false,
            "version": "2.0.1",
            "ecosystem": "npm"
          },
          {
            "name": "unpipe",
            "direct": false,
            "version": "1.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "uri-js",
            "direct": false,
            "version": "4.4.1",
            "ecosystem": "npm"
          },
          {
            "name": "util-deprecate",
            "direct": false,
            "version": "1.0.2",
            "ecosystem": "npm"
          },
          {
            "name": "uuid",
            "direct": false,
            "version": "11.1.0",
            "ecosystem": "npm"
          },
          {
            "name": "uuidv7",
            "direct": false,
            "version": "1.0.2",
            "ecosystem": "npm"
          },
          {
            "name": "vary",
            "direct": false,
            "version": "1.1.2",
            "ecosystem": "npm"
          },
          {
            "name": "vite",
            "direct": false,
            "version": "8.1.5",
            "ecosystem": "npm"
          },
          {
            "name": "vitest",
            "direct": false,
            "version": "4.1.10",
            "ecosystem": "npm"
          },
          {
            "name": "vitest",
            "direct": false,
            "version": "^4.1.10",
            "ecosystem": "npm"
          },
          {
            "name": "wcwidth",
            "direct": false,
            "version": "1.0.1",
            "ecosystem": "npm"
          },
          {
            "name": "webidl-conversions",
            "direct": false,
            "version": "3.0.1",
            "ecosystem": "npm"
          },
          {
            "name": "whatwg-url",
            "direct": false,
            "version": "5.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "which",
            "direct": false,
            "version": "1.3.1",
            "ecosystem": "npm"
          },
          {
            "name": "which",
            "direct": false,
            "version": "2.0.2",
            "ecosystem": "npm"
          },
          {
            "name": "why-is-node-running",
            "direct": false,
            "version": "2.3.0",
            "ecosystem": "npm"
          },
          {
            "name": "widest-line",
            "direct": false,
            "version": "5.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "word-wrap",
            "direct": false,
            "version": "1.2.5",
            "ecosystem": "npm"
          },
          {
            "name": "wrap-ansi",
            "direct": false,
            "version": "6.2.0",
            "ecosystem": "npm"
          },
          {
            "name": "wrap-ansi",
            "direct": false,
            "version": "9.0.2",
            "ecosystem": "npm"
          },
          {
            "name": "wrappy",
            "direct": false,
            "version": "1.0.2",
            "ecosystem": "npm"
          },
          {
            "name": "yaml",
            "direct": false,
            "version": "2.8.1",
            "ecosystem": "npm"
          },
          {
            "name": "yocto-queue",
            "direct": false,
            "version": "0.1.0",
            "ecosystem": "npm"
          },
          {
            "name": "yoctocolors-cjs",
            "direct": false,
            "version": "2.1.3",
            "ecosystem": "npm"
          },
          {
            "name": "zod-to-json-schema",
            "direct": false,
            "version": "3.25.1",
            "ecosystem": "npm"
          },
          {
            "name": "zod-to-json-schema",
            "direct": false,
            "version": "3.25.2",
            "ecosystem": "npm"
          }
        ],
        "collected": true,
        "truncated": false,
        "total_count": 643,
        "direct_count": 11,
        "indirect_count": 632
      }
    },
    "maintainership": {
      "issues": {
        "open_prs": 4,
        "merged_prs": 127,
        "open_issues": 2,
        "closed_ratio": 0.714,
        "closed_issues": 5,
        "closed_unmerged_prs": 12
      },
      "bus_factor": 1,
      "bot_contributors": 1,
      "top_contributors": [
        {
          "type": "User",
          "login": "H0BB5",
          "commits": 301,
          "avatar_url": "https://avatars.githubusercontent.com/u/4063865?v=4"
        },
        {
          "type": "User",
          "login": "rose-promesse",
          "commits": 3,
          "avatar_url": "https://avatars.githubusercontent.com/u/262456608?v=4"
        },
        {
          "type": "User",
          "login": "Eengineer1",
          "commits": 3,
          "avatar_url": "https://avatars.githubusercontent.com/u/50984242?v=4"
        },
        {
          "type": "User",
          "login": "bestbrian",
          "commits": 1,
          "avatar_url": "https://avatars.githubusercontent.com/u/9982331?v=4"
        },
        {
          "type": "User",
          "login": "jaxo-greer",
          "commits": 1,
          "avatar_url": "https://avatars.githubusercontent.com/u/261987408?v=4"
        }
      ],
      "contributors_sampled": 5,
      "top_contributor_share": 0.974
    },
    "quality_signals": {
      "has_ci": true,
      "has_tests": true,
      "ci_workflows": [
        "ci.yml",
        "coverage-comment.yml",
        "coverage-report.yml",
        "live-probe.yml"
      ],
      "has_docs_dir": false,
      "linter_configs": [
        "eslint.config.js"
      ],
      "has_editorconfig": false,
      "has_linter_config": true,
      "has_precommit_config": false
    },
    "security_signals": {
      "lockfiles": [
        "package-lock.json",
        "pnpm-lock.yaml"
      ],
      "scorecard": {
        "checks": [
          {
            "name": "Binary-Artifacts",
            "score": 10,
            "reason": "no binaries found in the repo",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#binary-artifacts"
          },
          {
            "name": "Branch-Protection",
            "score": 0,
            "reason": "branch protection not enabled on development/release branches",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#branch-protection"
          },
          {
            "name": "CI-Tests",
            "score": 9,
            "reason": "12 out of 13 merged PRs checked by a CI test -- score normalized to 9",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#ci-tests"
          },
          {
            "name": "CII-Best-Practices",
            "score": 0,
            "reason": "no effort to earn an OpenSSF best practices badge detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#cii-best-practices"
          },
          {
            "name": "Code-Review",
            "score": 0,
            "reason": "Found 0/11 approved changesets -- score normalized to 0",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#code-review"
          },
          {
            "name": "Contributors",
            "score": 3,
            "reason": "project has 1 contributing companies or organizations -- score normalized to 3",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#contributors"
          },
          {
            "name": "Dangerous-Workflow",
            "score": 10,
            "reason": "no dangerous workflow patterns detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dangerous-workflow"
          },
          {
            "name": "Dependency-Update-Tool",
            "score": 10,
            "reason": "update tool detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dependency-update-tool"
          },
          {
            "name": "Fuzzing",
            "score": 0,
            "reason": "project is not fuzzed",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#fuzzing"
          },
          {
            "name": "License",
            "score": 10,
            "reason": "license file detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#license"
          },
          {
            "name": "Maintained",
            "score": 10,
            "reason": "30 commit(s) and 2 issue activity found in the last 90 days -- score normalized to 10",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#maintained"
          },
          {
            "name": "Packaging",
            "score": null,
            "reason": "packaging workflow not detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#packaging"
          },
          {
            "name": "Pinned-Dependencies",
            "score": 3,
            "reason": "dependency not pinned by hash detected -- score normalized to 3",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#pinned-dependencies"
          },
          {
            "name": "SAST",
            "score": 9,
            "reason": "SAST tool detected but not run on all commits",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#sast"
          },
          {
            "name": "Security-Policy",
            "score": 10,
            "reason": "security policy file detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#security-policy"
          },
          {
            "name": "Signed-Releases",
            "score": null,
            "reason": "no releases found",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#signed-releases"
          },
          {
            "name": "Token-Permissions",
            "score": 0,
            "reason": "detected GitHub workflow tokens with excessive permissions",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#token-permissions"
          },
          {
            "name": "Vulnerabilities",
            "score": 0,
            "reason": "39 existing vulnerabilities detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#vulnerabilities"
          }
        ],
        "commit": "19807f78e5496feb1a5cb337ebc3838896039f30",
        "ran_at": "2026-07-31T09:25:05Z",
        "aggregate_score": 5.3,
        "scorecard_version": "v5.5.0"
      },
      "has_codeql_workflow": false,
      "has_security_policy": true,
      "has_dependabot_config": true
    },
    "contribution_flow": {
      "collected": true,
      "ci_last_run_at": "2026-07-31T07:13:18Z",
      "oldest_open_prs": [
        {
          "number": 121,
          "created_at": "2026-07-07T20:36:34Z",
          "last_comment_at": "2026-07-07T20:37:37Z",
          "last_comment_author": "github-actions"
        },
        {
          "number": 143,
          "created_at": "2026-07-28T19:13:32Z",
          "last_comment_at": "2026-07-29T16:40:01Z",
          "last_comment_author": "H0BB5"
        },
        {
          "number": 145,
          "created_at": "2026-07-28T20:35:50Z",
          "last_comment_at": "2026-07-28T20:37:20Z",
          "last_comment_author": "github-actions"
        },
        {
          "number": 150,
          "created_at": "2026-07-31T07:11:52Z",
          "last_comment_at": "2026-07-31T07:13:16Z",
          "last_comment_author": "github-actions"
        }
      ],
      "last_merged_pr_at": "2026-07-29T19:10:31Z",
      "ci_last_conclusion": "SUCCESS",
      "oldest_open_issues": [
        {
          "number": 94,
          "created_at": "2026-06-06T01:43:48Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 149,
          "created_at": "2026-07-30T16:41:02Z",
          "last_comment_at": null,
          "last_comment_author": null
        }
      ]
    }
  },
  "config": {
    "disabled_metrics": [],
    "disabled_categories": [],
    "disabled_components": {}
  },
  "source": {
    "url": "https://github.com/decentralized-identity/kya-os-mcp",
    "host": "github.com",
    "name": "kya-os-mcp",
    "owner": "decentralized-identity"
  },
  "metrics": {
    "overall": {
      "key": "overall",
      "band": "good",
      "name": "Overall health",
      "note": "The weighted overall 67 is calibrated to 78 on the published index scale (record calibration 2026-08-02).",
      "notes": [
        {
          "code": "overall_calibration",
          "params": {
            "raw": 67,
            "calibrated": 78,
            "calibration": "2026-08-02"
          }
        }
      ],
      "value": 78,
      "inputs": {
        "security": 62,
        "vitality": 85,
        "community": 55,
        "governance": 61,
        "calibration": "2026-08-02",
        "engineering": 73,
        "ai_readiness": 59,
        "weighted_overall_raw": 67
      },
      "components": []
    },
    "categories": [
      {
        "key": "vitality",
        "band": "excellent",
        "name": "Vitality",
        "value": 85,
        "weight": 0.21,
        "metrics": [
          {
            "key": "development_activity",
            "band": "good",
            "name": "Development activity",
            "note": null,
            "notes": [],
            "value": 75,
            "inputs": {
              "commits_last_year": 322,
              "human_commit_share": 0.93,
              "days_since_last_push": 0,
              "active_weeks_last_year": 16
            },
            "components": [
              {
                "key": "push_recency",
                "name": "Push recency",
                "detail": "last push 0 days ago",
                "points": 36,
                "status": "met",
                "details": [
                  {
                    "code": "push_recency",
                    "params": {
                      "days": 0
                    }
                  }
                ],
                "max_points": 36
              },
              {
                "key": "commit_cadence",
                "name": "Commit cadence",
                "detail": "16/52 weeks with commits",
                "points": 11.1,
                "status": "partial",
                "details": [
                  {
                    "code": "commit_cadence_weeks",
                    "params": {
                      "weeks": 16
                    }
                  }
                ],
                "max_points": 36
              },
              {
                "key": "commit_volume",
                "name": "Commit volume",
                "detail": "322 commits in the last year",
                "points": 18,
                "status": "met",
                "details": [
                  {
                    "code": "commits_last_year",
                    "params": {
                      "count": 322
                    }
                  }
                ],
                "max_points": 18
              },
              {
                "key": "openssf_scorecard_maintained",
                "name": "OpenSSF Scorecard: Maintained",
                "detail": "30 commit(s) and 2 issue activity found in the last 90 days -- score normalized to 10",
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "release_discipline",
            "band": "exceptional",
            "name": "Release discipline",
            "note": "Excluded from scoring (no data or not applicable): OpenSSF Scorecard: Signed-Releases. Remaining weights renormalized.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "openssf_scorecard_signed_releases"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              }
            ],
            "value": 100,
            "inputs": {
              "releases_count": 3,
              "latest_release_tag": "v1.10.1",
              "releases_from_tags": false,
              "days_since_latest_release": 22,
              "mean_days_between_releases": 0.7
            },
            "components": [
              {
                "key": "ships_releases",
                "name": "Ships releases",
                "detail": "3 releases published",
                "points": 27,
                "status": "met",
                "details": [
                  {
                    "code": "releases_published",
                    "params": {
                      "count": 3
                    }
                  }
                ],
                "max_points": 27
              },
              {
                "key": "release_recency",
                "name": "Release recency",
                "detail": "latest release 22 days ago",
                "points": 36,
                "status": "met",
                "details": [
                  {
                    "code": "release_recency",
                    "params": {
                      "days": 22
                    }
                  }
                ],
                "max_points": 36
              },
              {
                "key": "release_cadence",
                "name": "Release cadence",
                "detail": "a release every ~0.7 days",
                "points": 27,
                "status": "met",
                "details": [
                  {
                    "code": "release_cadence",
                    "params": {
                      "gap": 0.7
                    }
                  }
                ],
                "max_points": 27
              },
              {
                "key": "openssf_scorecard_signed_releases",
                "name": "OpenSSF Scorecard: Signed-Releases",
                "detail": "no releases found",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_data",
                    "params": {}
                  }
                ],
                "max_points": 10
              }
            ]
          },
          {
            "key": "abandonment",
            "band": "exceptional",
            "name": "Abandonment",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "cap": null,
              "state": "unverified",
              "guards": [],
              "signals": [],
              "red_flag": false,
              "multiplier_pct": 100,
              "declared_reason": null,
              "unverified_reason": "repository_too_young",
              "unanswered_open_prs": null,
              "unanswered_open_issues": null,
              "days_since_last_merged_pr": null,
              "days_since_last_human_commit": null,
              "days_since_last_human_commit_is_floor": false
            },
            "components": [
              {
                "key": "project_is_still_maintained",
                "name": "Project is still maintained",
                "detail": "maintenance record not established from the collected data",
                "points": 100,
                "status": "met",
                "details": [
                  {
                    "code": "abandonment_unverified",
                    "params": {}
                  }
                ],
                "max_points": 100
              }
            ]
          }
        ],
        "description": "Is the project alive — is code being written and are releases shipping?"
      },
      {
        "key": "community",
        "band": "moderate",
        "name": "Community & Adoption",
        "value": 55,
        "weight": 0.17,
        "metrics": [
          {
            "key": "popularity",
            "band": "at_risk",
            "name": "Popularity & adoption",
            "note": null,
            "notes": [],
            "value": 30,
            "inputs": {
              "forks": 10,
              "stars": 20,
              "watchers": 3,
              "growth_state": "unverified",
              "growth_factor_pct": 100,
              "growth_unverified_reason": "no_history"
            },
            "components": [
              {
                "key": "stars",
                "name": "Stars",
                "detail": "20 stars",
                "points": 20.7,
                "status": "partial",
                "details": [
                  {
                    "code": "stars",
                    "params": {
                      "count": 20
                    }
                  }
                ],
                "max_points": 60
              },
              {
                "key": "forks",
                "name": "Forks",
                "detail": "10 forks",
                "points": 8,
                "status": "partial",
                "details": [
                  {
                    "code": "forks",
                    "params": {
                      "count": 10
                    }
                  }
                ],
                "max_points": 25
              },
              {
                "key": "watchers",
                "name": "Watchers",
                "detail": "3 watchers",
                "points": 1.7,
                "status": "partial",
                "details": [
                  {
                    "code": "watchers",
                    "params": {
                      "count": 3
                    }
                  }
                ],
                "max_points": 15
              }
            ]
          },
          {
            "key": "community_health",
            "band": "good",
            "name": "Community health",
            "note": null,
            "notes": [],
            "value": 77,
            "inputs": {
              "has_readme": true,
              "has_license": true,
              "readme_badges": null,
              "has_contributing": true,
              "has_issue_template": false,
              "has_code_of_conduct": false,
              "readme_badge_services": [],
              "has_pull_request_template": true
            },
            "components": [
              {
                "key": "readme",
                "name": "README",
                "detail": null,
                "points": 22.5,
                "status": "met",
                "details": [],
                "max_points": 22.5
              },
              {
                "key": "license",
                "name": "License",
                "detail": "recognized license (MIT)",
                "points": 22.5,
                "status": "met",
                "details": [
                  {
                    "code": "license_standard",
                    "params": {}
                  },
                  {
                    "code": "license_spdx",
                    "params": {
                      "spdx": "MIT"
                    }
                  }
                ],
                "max_points": 22.5
              },
              {
                "key": "contributing_guide",
                "name": "CONTRIBUTING guide",
                "detail": null,
                "points": 18,
                "status": "met",
                "details": [],
                "max_points": 18
              },
              {
                "key": "code_of_conduct",
                "name": "Code of conduct",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 13.5
              },
              {
                "key": "issue_template",
                "name": "Issue template",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.2
              },
              {
                "key": "pr_template",
                "name": "PR template",
                "detail": null,
                "points": 6.3,
                "status": "met",
                "details": [],
                "max_points": 6.3
              }
            ]
          },
          {
            "key": "ecosystem_adoption",
            "band": "moderate",
            "name": "Ecosystem adoption (downloads)",
            "note": "Excluded from scoring (no data or not applicable): Registry dependents. Remaining weights renormalized.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "registry_dependents"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              }
            ],
            "value": 64,
            "inputs": {
              "packages": [
                "@kya-os/mcp"
              ],
              "dependents": null,
              "ecosystems": "npm",
              "total_downloads": null,
              "monthly_downloads": 6980
            },
            "components": [
              {
                "key": "monthly_downloads",
                "name": "Monthly downloads",
                "detail": "6,980 downloads/month across npm",
                "points": 51.3,
                "status": "partial",
                "details": [
                  {
                    "code": "downloads_monthly",
                    "params": {
                      "count": 6980,
                      "ecosystems": "npm"
                    }
                  }
                ],
                "max_points": 80
              },
              {
                "key": "registry_dependents",
                "name": "Registry dependents",
                "detail": "not reported by this ecosystem",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "not_reported_by_this_ecosystem",
                    "params": {}
                  }
                ],
                "max_points": 20
              }
            ]
          }
        ],
        "description": "Does the project have users, downloads, attention, and a welcoming setup for contributors?"
      },
      {
        "key": "governance",
        "band": "moderate",
        "name": "Sustainability & Governance",
        "value": 61,
        "weight": 0.23,
        "metrics": [
          {
            "key": "maintainer_resilience",
            "band": "critical",
            "name": "Maintainer resilience (bus factor)",
            "note": null,
            "notes": [],
            "value": 19,
            "inputs": {
              "bus_factor": 1,
              "contributors_sampled": 5,
              "top_contributor_share": 0.974
            },
            "components": [
              {
                "key": "bus_factor",
                "name": "Bus factor",
                "detail": "1 contributor(s) cover half of all commits",
                "points": 9,
                "status": "partial",
                "details": [
                  {
                    "code": "bus_factor",
                    "params": {
                      "count": 1
                    }
                  }
                ],
                "max_points": 54
              },
              {
                "key": "commit_distribution",
                "name": "Commit distribution",
                "detail": "top contributor authored 97% of commits",
                "points": 0.6,
                "status": "partial",
                "details": [
                  {
                    "code": "top_contributor_share",
                    "params": {
                      "share": 97
                    }
                  }
                ],
                "max_points": 22.5
              },
              {
                "key": "contributor_breadth",
                "name": "Contributor breadth",
                "detail": "5 contributors",
                "points": 6.8,
                "status": "partial",
                "details": [
                  {
                    "code": "contributors_sampled",
                    "params": {
                      "count": 5
                    }
                  }
                ],
                "max_points": 13.5
              },
              {
                "key": "openssf_scorecard_contributors",
                "name": "OpenSSF Scorecard: Contributors",
                "detail": "project has 1 contributing companies or organizations -- score normalized to 3",
                "points": 3,
                "status": "partial",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "responsiveness",
            "band": "good",
            "name": "Issue & PR responsiveness",
            "note": "Excluded from scoring (no data or not applicable): Newcomer PR acceptance. Remaining weights renormalized.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "newcomer_pr_acceptance"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              }
            ],
            "value": 66,
            "inputs": {
              "merged_prs": 127,
              "open_issues": 2,
              "closed_issues": 5,
              "prs_merged_7d": null,
              "prs_decided_7d": null,
              "prs_merged_30d": null,
              "prs_decided_30d": null,
              "issue_closed_ratio": 0.714,
              "closed_unmerged_prs": 12,
              "first_time_authors_30d": null,
              "first_time_prs_merged_30d": null,
              "first_time_prs_decided_30d": null
            },
            "components": [
              {
                "key": "issue_resolution",
                "name": "Issue resolution",
                "detail": "71% of issues closed",
                "points": 30,
                "status": "partial",
                "details": [
                  {
                    "code": "issues_closed_share",
                    "params": {
                      "share": 71
                    }
                  }
                ],
                "max_points": 42
              },
              {
                "key": "pr_acceptance",
                "name": "PR acceptance",
                "detail": "127/139 decided PRs merged",
                "points": 27.4,
                "status": "partial",
                "details": [
                  {
                    "code": "decided_prs_merged",
                    "params": {
                      "merged": 127,
                      "decided": 139
                    }
                  }
                ],
                "max_points": 30
              },
              {
                "key": "newcomer_pr_acceptance",
                "name": "Newcomer PR acceptance",
                "detail": "no first-time contributor's PR decided in 30d",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_newcomer_prs",
                    "params": {
                      "days": 30
                    }
                  }
                ],
                "max_points": 13
              },
              {
                "key": "openssf_scorecard_code_review",
                "name": "OpenSSF Scorecard: Code-Review",
                "detail": "Found 0/11 approved changesets -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 15
              }
            ]
          },
          {
            "key": "stewardship",
            "band": "good",
            "name": "Ownership & stewardship",
            "note": null,
            "notes": [],
            "value": 76,
            "inputs": {
              "followers": 973,
              "owner_type": "Organization",
              "is_verified": null,
              "owner_login": "decentralized-identity",
              "public_repos": 265,
              "account_age_days": 3555
            },
            "components": [
              {
                "key": "ownership_backing",
                "name": "Ownership backing",
                "detail": "organization-owned",
                "points": 30,
                "status": "met",
                "details": [
                  {
                    "code": "owner_organization",
                    "params": {}
                  }
                ],
                "max_points": 30
              },
              {
                "key": "verified_domain",
                "name": "Verified domain",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 20
              },
              {
                "key": "owner_reach",
                "name": "Owner reach",
                "detail": "973 followers of decentralized-identity",
                "points": 21.5,
                "status": "partial",
                "details": [
                  {
                    "code": "owner_followers",
                    "params": {
                      "count": 973,
                      "login": "decentralized-identity"
                    }
                  }
                ],
                "max_points": 25
              },
              {
                "key": "track_record",
                "name": "Track record",
                "detail": "265 public repos, account ~9 yr old",
                "points": 25,
                "status": "met",
                "details": [
                  {
                    "code": "public_repos",
                    "params": {
                      "count": 265
                    }
                  },
                  {
                    "code": "account_age_years",
                    "params": {
                      "years": 9
                    }
                  }
                ],
                "max_points": 25
              }
            ]
          },
          {
            "key": "package_maintenance",
            "band": "exceptional",
            "name": "Package maintenance",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "packages": [
                "@kya-os/mcp"
              ],
              "ecosystems": "npm",
              "any_deprecated": false,
              "min_days_since_publish": 9
            },
            "components": [
              {
                "key": "published_resolvable",
                "name": "Published & resolvable",
                "detail": "1 package(s) on npm",
                "points": 25,
                "status": "met",
                "details": [
                  {
                    "code": "packages_published",
                    "params": {
                      "count": 1,
                      "ecosystems": "npm"
                    }
                  }
                ],
                "max_points": 25
              },
              {
                "key": "publish_recency",
                "name": "Publish recency",
                "detail": "latest publish 9 days ago",
                "points": 35,
                "status": "met",
                "details": [
                  {
                    "code": "publish_recency",
                    "params": {
                      "days": 9
                    }
                  }
                ],
                "max_points": 35
              },
              {
                "key": "version_history",
                "name": "Version history",
                "detail": "13 published versions",
                "points": 20,
                "status": "met",
                "details": [
                  {
                    "code": "published_versions",
                    "params": {
                      "count": 13
                    }
                  }
                ],
                "max_points": 20
              },
              {
                "key": "not_deprecated",
                "name": "Not deprecated",
                "detail": "active, not deprecated or yanked",
                "points": 20,
                "status": "met",
                "details": [
                  {
                    "code": "package_not_deprecated",
                    "params": {}
                  }
                ],
                "max_points": 20
              }
            ]
          }
        ],
        "description": "Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?"
      },
      {
        "key": "engineering",
        "band": "good",
        "name": "Engineering Quality",
        "value": 73,
        "weight": 0.19,
        "metrics": [
          {
            "key": "engineering_practices",
            "band": "excellent",
            "name": "Engineering practices",
            "note": null,
            "notes": [],
            "value": 82,
            "inputs": {
              "has_ci": true,
              "has_tests": true,
              "has_editorconfig": false,
              "has_linter_config": true,
              "has_precommit_config": false
            },
            "components": [
              {
                "key": "ci_workflows",
                "name": "CI workflows",
                "detail": "4 workflow(s)",
                "points": 24,
                "status": "met",
                "details": [
                  {
                    "code": "ci_workflows",
                    "params": {
                      "count": 4
                    }
                  }
                ],
                "max_points": 24
              },
              {
                "key": "tests_present",
                "name": "Tests present",
                "detail": null,
                "points": 24,
                "status": "met",
                "details": [],
                "max_points": 24
              },
              {
                "key": "linter_config",
                "name": "Linter config",
                "detail": "eslint.config.js",
                "points": 16,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": "eslint.config.js"
                    }
                  }
                ],
                "max_points": 16
              },
              {
                "key": "pre_commit_hooks",
                "name": "Pre-commit hooks",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 9.6
              },
              {
                "key": "editorconfig",
                "name": ".editorconfig",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 6.4
              },
              {
                "key": "openssf_scorecard_ci_tests",
                "name": "OpenSSF Scorecard: CI-Tests",
                "detail": "12 out of 13 merged PRs checked by a CI test -- score normalized to 9",
                "points": 18,
                "status": "partial",
                "details": [],
                "max_points": 20
              }
            ]
          },
          {
            "key": "documentation",
            "band": "moderate",
            "name": "Documentation",
            "note": null,
            "notes": [],
            "value": 60,
            "inputs": {
              "topics": [
                "wg-ag"
              ],
              "has_wiki": true,
              "homepage": null,
              "has_readme": true,
              "has_docs_dir": false,
              "has_description": true
            },
            "components": [
              {
                "key": "readme",
                "name": "README",
                "detail": null,
                "points": 30,
                "status": "met",
                "details": [],
                "max_points": 30
              },
              {
                "key": "documentation_directory",
                "name": "Documentation directory",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 25
              },
              {
                "key": "documentation_homepage_site",
                "name": "Documentation / homepage site",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 15
              },
              {
                "key": "repository_description",
                "name": "Repository description",
                "detail": null,
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              },
              {
                "key": "topics",
                "name": "Topics",
                "detail": "1 topics",
                "points": 10,
                "status": "met",
                "details": [
                  {
                    "code": "topics_count",
                    "params": {
                      "count": 1
                    }
                  }
                ],
                "max_points": 10
              },
              {
                "key": "wiki",
                "name": "Wiki",
                "detail": null,
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              }
            ]
          }
        ],
        "description": "Are baseline engineering and documentation practices in place?"
      },
      {
        "key": "security",
        "band": "moderate",
        "name": "Security",
        "value": 62,
        "weight": 0.16,
        "metrics": [
          {
            "key": "security_posture",
            "band": "moderate",
            "name": "Security posture",
            "note": "Excluded from scoring (no data or not applicable): Packaging, Signed-Releases. Remaining weights renormalized.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "packaging",
                    "signed_releases"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              }
            ],
            "value": 53,
            "inputs": {
              "source": "openssf_scorecard",
              "checks_evaluated": 16,
              "scorecard_version": "v5.5.0",
              "checks_inconclusive": 2,
              "scorecard_aggregate": 5.3
            },
            "components": [
              {
                "key": "binary_artifacts",
                "name": "Binary-Artifacts",
                "detail": "no binaries found in the repo",
                "points": 7.5,
                "status": "met",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "branch_protection",
                "name": "Branch-Protection",
                "detail": "branch protection not enabled on development/release branches",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "ci_tests",
                "name": "CI-Tests",
                "detail": "12 out of 13 merged PRs checked by a CI test -- score normalized to 9",
                "points": 2.2,
                "status": "partial",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "cii_best_practices",
                "name": "CII-Best-Practices",
                "detail": "no effort to earn an OpenSSF best practices badge detected",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "code_review",
                "name": "Code-Review",
                "detail": "Found 0/11 approved changesets -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "contributors",
                "name": "Contributors",
                "detail": "project has 1 contributing companies or organizations -- score normalized to 3",
                "points": 0.8,
                "status": "partial",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "dangerous_workflow",
                "name": "Dangerous-Workflow",
                "detail": "no dangerous workflow patterns detected",
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              },
              {
                "key": "dependency_update_tool",
                "name": "Dependency-Update-Tool",
                "detail": "update tool detected",
                "points": 7.5,
                "status": "met",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "fuzzing",
                "name": "Fuzzing",
                "detail": "project is not fuzzed",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 5
              },
              {
                "key": "license",
                "name": "License",
                "detail": "license file detected",
                "points": 2.5,
                "status": "met",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "maintained",
                "name": "Maintained",
                "detail": "30 commit(s) and 2 issue activity found in the last 90 days -- score normalized to 10",
                "points": 7.5,
                "status": "met",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "packaging",
                "name": "Packaging",
                "detail": "packaging workflow not detected",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_data",
                    "params": {}
                  }
                ],
                "max_points": 5
              },
              {
                "key": "pinned_dependencies",
                "name": "Pinned-Dependencies",
                "detail": "dependency not pinned by hash detected -- score normalized to 3",
                "points": 1.5,
                "status": "partial",
                "details": [],
                "max_points": 5
              },
              {
                "key": "sast",
                "name": "SAST",
                "detail": "SAST tool detected but not run on all commits",
                "points": 4.5,
                "status": "partial",
                "details": [],
                "max_points": 5
              },
              {
                "key": "security_policy",
                "name": "Security-Policy",
                "detail": "security policy file detected",
                "points": 5,
                "status": "met",
                "details": [],
                "max_points": 5
              },
              {
                "key": "signed_releases",
                "name": "Signed-Releases",
                "detail": "no releases found",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_data",
                    "params": {}
                  }
                ],
                "max_points": 7.5
              },
              {
                "key": "token_permissions",
                "name": "Token-Permissions",
                "detail": "detected GitHub workflow tokens with excessive permissions",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "vulnerabilities",
                "name": "Vulnerabilities",
                "detail": "39 existing vulnerabilities detected",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              }
            ]
          },
          {
            "key": "dependency_advisories",
            "band": "exceptional",
            "name": "Dependency advisories",
            "note": "Excluded from scoring (no data or not applicable): No advisories left outstanding. Remaining weights renormalized. Matched the npm:@kya-os/mcp@1.11.0 runtime dependency closure — what installing the published package pulls in — 3 packages. Reachability is not analyzed.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "no_advisories_left_outstanding"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              },
              {
                "code": "advisories_scope_published",
                "params": {
                  "package": "npm:@kya-os/mcp@1.11.0",
                  "assessed": 3
                }
              },
              {
                "code": "advisories_reachability",
                "params": {}
              }
            ],
            "value": 100,
            "inputs": {
              "source": "osv",
              "advisories": 0,
              "affected_packages": 0,
              "assessed_packages": 3,
              "unassessed_packages": 0,
              "affected_by_severity": "none",
              "direct_affected_packages": 0
            },
            "components": [
              {
                "key": "direct_dependencies_free_of_known_advisories",
                "name": "Direct dependencies free of known advisories",
                "detail": "no direct dependency carries a known advisory",
                "points": 35,
                "status": "met",
                "details": [
                  {
                    "code": "no_direct_advisories",
                    "params": {}
                  }
                ],
                "max_points": 35
              },
              {
                "key": "indirect_dependencies_free_of_known_advisories",
                "name": "Indirect dependencies free of known advisories",
                "detail": "no indirect dependency carries a known advisory",
                "points": 25,
                "status": "met",
                "details": [
                  {
                    "code": "no_indirect_advisories",
                    "params": {}
                  }
                ],
                "max_points": 25
              },
              {
                "key": "no_advisories_left_outstanding",
                "name": "No advisories left outstanding",
                "detail": "no advisory carries a publication date",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "advisories_no_publication_date",
                    "params": {}
                  }
                ],
                "max_points": 40
              }
            ]
          },
          {
            "key": "malicious_dependencies",
            "band": "exceptional",
            "name": "Malicious dependencies",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "source": "osv",
              "meaning": "reported as a malicious package by the OpenSSF corpus; the remedy is removal or moving off the compromised name, never an upgrade of the same artifact. Versions the registry has since pulled are listed but not scored",
              "packages": [],
              "red_flag": false,
              "assessed_packages": 3,
              "malicious_packages": 0,
              "direct_malicious_packages": 0,
              "withdrawn_malicious_packages": 0,
              "installable_malicious_packages": 0
            },
            "components": [
              {
                "key": "no_dependency_reported_as_a_malicious_package",
                "name": "No dependency reported as a malicious package",
                "detail": "no dependency is reported as a malicious package",
                "points": 100,
                "status": "met",
                "details": [
                  {
                    "code": "no_malicious_dependencies",
                    "params": {}
                  }
                ],
                "max_points": 100
              }
            ]
          },
          {
            "key": "high_risk_jurisdiction_exposure",
            "band": "exceptional",
            "name": "High-Risk Jurisdiction Exposure",
            "note": "Only high-confidence self-published location evidence affects this multiplier. Ambiguous matches are review-only; country evidence is not proof of nationality, citizenship, legal registration, malicious intent, or sanctions status.",
            "notes": [
              {
                "code": "jurisdiction_evidence_limits",
                "params": {}
              }
            ],
            "value": 100,
            "inputs": {
              "meaning": "self-published location evidence; not nationality or citizenship",
              "red_flag": false,
              "exposures": [],
              "policy_countries": [
                "Russia",
                "Iran",
                "North Korea"
              ],
              "commit_weight_rule": {
                "min_commits": 50,
                "min_commit_share": 0.1
              },
              "review_only_matches": 0,
              "below_threshold_exposures": [],
              "assessed_self_published_locations": 1
            },
            "components": [
              {
                "key": "policy_exposure_multiplier",
                "name": "Policy exposure multiplier",
                "detail": "no confirmed policy-scope location match",
                "points": 100,
                "status": "met",
                "details": [
                  {
                    "code": "jurisdiction_no_match",
                    "params": {}
                  }
                ],
                "max_points": 100
              }
            ]
          }
        ],
        "description": "Are visible security and supply-chain practices strong, with no malicious dependency and no unresolved high-risk jurisdiction exposure?"
      },
      {
        "key": "ai_readiness",
        "band": "moderate",
        "name": "AI Readiness",
        "value": 59,
        "weight": 0.04,
        "metrics": [
          {
            "key": "ai_agent_context",
            "band": "weak",
            "name": "Agent context & guidance",
            "note": null,
            "notes": [],
            "value": 40,
            "inputs": {
              "has_llms_txt": false,
              "legible_history_share": 1,
              "agent_instruction_files": [],
              "agent_instruction_max_bytes": null
            },
            "components": [
              {
                "key": "agent_instructions",
                "name": "Agent instructions",
                "detail": "no CLAUDE.md / AGENTS.md / editor rules",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "no_agent_instructions",
                    "params": {}
                  }
                ],
                "max_points": 45
              },
              {
                "key": "machine_readable_docs_llms_txt",
                "name": "Machine-readable docs (llms.txt)",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 15
              },
              {
                "key": "legible_commit_history",
                "name": "Legible commit history",
                "detail": "93 of 93 human commits state their intent (structured subject or explanatory body)",
                "points": 40,
                "status": "met",
                "details": [
                  {
                    "code": "legible_history",
                    "params": {
                      "legible": 93,
                      "sampled": 93
                    }
                  }
                ],
                "max_points": 40
              }
            ]
          },
          {
            "key": "ai_verify_loop",
            "band": "good",
            "name": "Verify loop (build / test / typecheck)",
            "note": null,
            "notes": [],
            "value": 65,
            "inputs": {
              "has_nix": false,
              "has_tests": true,
              "lockfiles": [
                "package-lock.json",
                "pnpm-lock.yaml"
              ],
              "has_dockerfile": true,
              "typed_language": true,
              "bootstrap_files": [],
              "has_devcontainer": false,
              "has_linter_config": true,
              "typecheck_configs": [
                "conformance/tsconfig.json",
                "examples/authz-inspector/tsconfig.json",
                "examples/brave-search-mcp-server/tsconfig.json",
                "examples/consent-basic/tsconfig.json",
                "examples/consent-full/tsconfig.json",
                "examples/consent-persistence/tsconfig.json",
                "examples/context7-with-kya-os/tsconfig.json",
                "examples/node-server/tsconfig.json",
                "examples/verify-proof/tsconfig.json",
                "tsconfig.json"
              ],
              "agent_commit_share": 0,
              "toolchain_manifests": [],
              "dependency_bot_commit_share": 0.07
            },
            "components": [
              {
                "key": "one_command_bootstrap",
                "name": "One-command bootstrap",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 18
              },
              {
                "key": "automated_tests",
                "name": "Automated tests",
                "detail": null,
                "points": 22,
                "status": "met",
                "details": [],
                "max_points": 22
              },
              {
                "key": "lint_format_config",
                "name": "Lint / format config",
                "detail": "eslint.config.js",
                "points": 11,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": "eslint.config.js"
                    }
                  }
                ],
                "max_points": 11
              },
              {
                "key": "static_type_checking",
                "name": "Static type checking",
                "detail": "conformance/tsconfig.json, examples/authz-inspector/tsconfig.json, examples/brave-search-mcp-server/tsconfig.json, examples/consent-basic/tsconfig.json, examples/consent-full/tsconfig.json, examples/consent-persistence/tsconfig.json, examples/context7-with-kya-os/tsconfig.json, examples/node-server/tsconfig.json, examples/verify-proof/tsconfig.json, tsconfig.json",
                "points": 11,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": "conformance/tsconfig.json, examples/authz-inspector/tsconfig.json, examples/brave-search-mcp-server/tsconfig.json, examples/consent-basic/tsconfig.json, examples/consent-full/tsconfig.json, examples/consent-persistence/tsconfig.json, examples/context7-with-kya-os/tsconfig.json, examples/node-server/tsconfig.json, examples/verify-proof/tsconfig.json, tsconfig.json"
                    }
                  }
                ],
                "max_points": 11
              },
              {
                "key": "reproducible_environment",
                "name": "Reproducible environment",
                "detail": "Dockerfile, lockfile",
                "points": 10,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": "Dockerfile, lockfile"
                    }
                  }
                ],
                "max_points": 10
              },
              {
                "key": "demonstrated_agent_practice",
                "name": "Demonstrated agent practice",
                "detail": "no agent-authored commits among the last 100",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "no_agent_authored_commits",
                    "params": {
                      "sampled": 100
                    }
                  }
                ],
                "max_points": 10
              },
              {
                "key": "automated_maintenance",
                "name": "Automated maintenance",
                "detail": "7 of the last 100 commits are automated dependency updates",
                "points": 8,
                "status": "met",
                "details": [
                  {
                    "code": "dependency_bot_commits",
                    "params": {
                      "count": 7,
                      "sampled": 100
                    }
                  }
                ],
                "max_points": 8
              },
              {
                "key": "openssf_scorecard_pinned_dependencies",
                "name": "OpenSSF Scorecard: Pinned-Dependencies",
                "detail": "dependency not pinned by hash detected -- score normalized to 3",
                "points": 3,
                "status": "partial",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "ai_code_legibility",
            "band": "exceptional",
            "name": "Code legibility for models",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "primary_language": "TypeScript",
              "largest_source_bytes": 53782,
              "source_files_sampled": 386,
              "oversized_source_files": 0
            },
            "components": [
              {
                "key": "type_checkable_code",
                "name": "Type-checkable code",
                "detail": "TypeScript (statically typed)",
                "points": 45,
                "status": "met",
                "details": [
                  {
                    "code": "statically_typed_language",
                    "params": {
                      "language": "TypeScript"
                    }
                  }
                ],
                "max_points": 45
              },
              {
                "key": "manageable_file_sizes",
                "name": "Manageable file sizes",
                "detail": "0/386 source files over 60KB",
                "points": 55,
                "status": "met",
                "details": [
                  {
                    "code": "oversized_source_files",
                    "params": {
                      "kb": 60,
                      "sampled": 386,
                      "oversized": 0
                    }
                  }
                ],
                "max_points": 55
              }
            ]
          },
          {
            "key": "ai_interfaces",
            "band": "weak",
            "name": "Machine-readable interfaces",
            "note": null,
            "notes": [],
            "value": 40,
            "inputs": {
              "example_dirs": [
                "examples"
              ],
              "has_mcp_signal": false,
              "api_schema_files": []
            },
            "components": [
              {
                "key": "api_schema_openapi_graphql_proto",
                "name": "API schema (OpenAPI/GraphQL/proto)",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 40
              },
              {
                "key": "mcp_server",
                "name": "MCP server",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 20
              },
              {
                "key": "runnable_examples",
                "name": "Runnable examples",
                "detail": "examples",
                "points": 40,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": "examples"
                    }
                  }
                ],
                "max_points": 40
              }
            ]
          }
        ],
        "description": "How well is the repo equipped to be developed and maintained with AI coding agents? Carries a deliberately small weight: agent tooling is a real maintenance signal, but its absence must never gate the top of the scale (calibration saturates at raw 91, so 100/100 remains reachable with AI Readiness at zero)."
      }
    ],
    "classification": {
      "labels": [
        "library"
      ],
      "scores": {
        "library": 6
      },
      "primary": "library",
      "evidence": [
        {
          "tier": "distribution",
          "label": "library",
          "source": "registry:npm",
          "weight": 6
        }
      ],
      "artifacts": [],
      "confidence": "medium",
      "host_extension": false,
      "runs_as_process": false,
      "consumed_by_code": true
    },
    "metrics_version": "2.3.1"
  },
  "warnings": [
    "Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token"
  ],
  "report_type": "repository",
  "generated_at": "2026-07-31T09:25:25.305994Z",
  "schema_version": "0.27.0",
  "badge_url": "https://raw.githubusercontent.com/inspect-software/badges/main/v1/d/decentralized-identity/kya-os-mcp.svg",
  "full_name": "decentralized-identity/kya-os-mcp",
  "license_state": "standard",
  "license_spdx": "MIT"
}