forgesworn / bray

来自 GitHub 依赖图的完整解析依赖集合：17 个直接依赖与 203 个间接（传递）软件包。仓库提交锁文件时，传递闭包才是完整的。

该仓库未发布可被索引解析的包，因此评估的是其自身的依赖图——共 220 个包，其中也包含从不交付的开发与测试版本固定：2 个存在已知公告，0 个为直接依赖。

公告表示依赖图中记录的版本落入某条公告的受影响范围。可达性未经分析，且依赖图包含开发与测试的版本固定——某项发现可能只涉及工具链而非交付的软件。

{
  "data": {
    "repo": {
      "topics": [
        "ai-agent",
        "identity",
        "lightning",
        "mcp",
        "mcp-server",
        "model-context-protocol",
        "nostr",
        "nostr-wallet-connect",
        "nwc",
        "ring-signature",
        "shamir",
        "typescript",
        "attestations",
        "bunker",
        "dominion",
        "nip-46",
        "signet",
        "trust",
        "web-of-trust"
      ],
      "is_fork": false,
      "size_kb": 48825,
      "has_wiki": false,
      "homepage": "https://github.com/forgesworn/bray#readme",
      "languages": {
        "CSS": 8408,
        "HTML": 236307,
        "Shell": 36386,
        "JavaScript": 97203,
        "TypeScript": 2008445
      },
      "pushed_at": "2026-07-22T14:02:37Z",
      "created_at": "2026-03-24T19:45:08Z",
      "owner_type": "Organization",
      "updated_at": "2026-07-22T14:07:29Z",
      "description": "Trust-aware Nostr MCP server for AI agents and humans. Verification, proximity, and access woven into every interaction.",
      "is_archived": false,
      "is_disabled": false,
      "license_spdx": "MIT",
      "default_branch": "main",
      "license_spdx_raw": "MIT",
      "primary_language": "TypeScript",
      "significant_languages": [
        "TypeScript"
      ]
    },
    "owner": {
      "blog": "https://github.com/forgesworn",
      "name": null,
      "type": "Organization",
      "login": "forgesworn",
      "company": null,
      "location": null,
      "followers": 8,
      "avatar_url": "https://avatars.githubusercontent.com/u/269157051?v=4",
      "created_at": "2026-03-18T09:46:34Z",
      "is_verified": null,
      "public_repos": 56,
      "account_age_days": 127
    },
    "license": {
      "state": "standard",
      "spdx_id": "MIT",
      "raw_spdx": "MIT",
      "file_present": true,
      "scorecard_found": true,
      "profile_has_license": true
    },
    "activity": {
      "releases": [
        {
          "tag": "v1.41.0",
          "kind": "minor",
          "published_at": "2026-07-18T09:06:33Z"
        },
        {
          "tag": "v1.40.1",
          "kind": "patch",
          "published_at": "2026-07-18T09:04:07Z"
        },
        {
          "tag": "v1.40.0",
          "kind": "minor",
          "published_at": "2026-07-18T08:30:10Z"
        },
        {
          "tag": "v1.39.1",
          "kind": "patch",
          "published_at": "2026-07-18T06:53:49Z"
        },
        {
          "tag": "v1.39.0",
          "kind": "minor",
          "published_at": "2026-07-18T06:39:39Z"
        },
        {
          "tag": "v1.38.0",
          "kind": "minor",
          "published_at": "2026-07-18T06:11:03Z"
        },
        {
          "tag": "v1.37.0",
          "kind": "minor",
          "published_at": "2026-07-18T06:03:36Z"
        },
        {
          "tag": "v1.36.0",
          "kind": "minor",
          "published_at": "2026-07-17T21:13:40Z"
        },
        {
          "tag": "v1.35.0",
          "kind": "minor",
          "published_at": "2026-07-17T19:54:53Z"
        },
        {
          "tag": "v1.34.0",
          "kind": "minor",
          "published_at": "2026-07-12T09:27:24Z"
        },
        {
          "tag": "v1.33.0",
          "kind": "minor",
          "published_at": "2026-07-04T18:31:00Z"
        },
        {
          "tag": "v1.31.0",
          "kind": "minor",
          "published_at": "2026-04-11T08:47:42Z"
        },
        {
          "tag": "v1.30.0",
          "kind": "minor",
          "published_at": "2026-04-08T23:46:38Z"
        },
        {
          "tag": "v1.29.4",
          "kind": "patch",
          "published_at": "2026-04-08T23:44:39Z"
        },
        {
          "tag": "v1.29.3",
          "kind": "patch",
          "published_at": "2026-04-08T23:43:30Z"
        },
        {
          "tag": "v1.29.2",
          "kind": "patch",
          "published_at": "2026-04-08T23:36:59Z"
        },
        {
          "tag": "v1.29.1",
          "kind": "patch",
          "published_at": "2026-04-08T23:30:21Z"
        },
        {
          "tag": "v1.29.0",
          "kind": "minor",
          "published_at": "2026-04-08T23:28:21Z"
        },
        {
          "tag": "v1.28.1",
          "kind": "patch",
          "published_at": "2026-04-08T00:59:18Z"
        },
        {
          "tag": "v1.28.0",
          "kind": "minor",
          "published_at": "2026-04-08T00:50:26Z"
        },
        {
          "tag": "v1.27.8",
          "kind": "patch",
          "published_at": "2026-04-08T00:42:35Z"
        },
        {
          "tag": "v1.27.7",
          "kind": "patch",
          "published_at": "2026-04-07T21:39:40Z"
        },
        {
          "tag": "v1.27.6",
          "kind": "patch",
          "published_at": "2026-04-07T21:20:58Z"
        },
        {
          "tag": "v1.27.5",
          "kind": "patch",
          "published_at": "2026-04-07T17:28:04Z"
        },
        {
          "tag": "v1.27.4",
          "kind": "patch",
          "published_at": "2026-04-05T11:39:26Z"
        },
        {
          "tag": "v1.27.3",
          "kind": "patch",
          "published_at": "2026-04-05T11:29:44Z"
        },
        {
          "tag": "v1.27.2",
          "kind": "patch",
          "published_at": "2026-04-05T11:13:44Z"
        },
        {
          "tag": "v1.27.1",
          "kind": "patch",
          "published_at": "2026-04-05T10:48:35Z"
        },
        {
          "tag": "v1.27.0",
          "kind": "minor",
          "published_at": "2026-04-03T15:30:52Z"
        },
        {
          "tag": "v1.26.1",
          "kind": "patch",
          "published_at": "2026-04-03T14:02:56Z"
        },
        {
          "tag": "v1.26.0",
          "kind": "minor",
          "published_at": "2026-04-02T21:39:18Z"
        },
        {
          "tag": "v1.25.1",
          "kind": "patch",
          "published_at": "2026-04-02T15:39:25Z"
        },
        {
          "tag": "v1.25.0",
          "kind": "minor",
          "published_at": "2026-04-02T14:30:47Z"
        },
        {
          "tag": "v1.24.0",
          "kind": "minor",
          "published_at": "2026-03-31T22:03:21Z"
        },
        {
          "tag": "v1.23.1",
          "kind": "patch",
          "published_at": "2026-03-31T14:03:29Z"
        },
        {
          "tag": "v1.23.0",
          "kind": "minor",
          "published_at": "2026-03-31T13:51:21Z"
        },
        {
          "tag": "v1.22.0",
          "kind": "minor",
          "published_at": "2026-03-26T09:03:05Z"
        },
        {
          "tag": "v1.21.0",
          "kind": "minor",
          "published_at": "2026-03-25T12:51:21Z"
        },
        {
          "tag": "v1.20.0",
          "kind": "minor",
          "published_at": "2026-03-25T11:01:07Z"
        },
        {
          "tag": "v1.19.0",
          "kind": "minor",
          "published_at": "2026-03-25T10:33:33Z"
        },
        {
          "tag": "v1.18.2",
          "kind": "patch",
          "published_at": "2026-03-25T10:20:05Z"
        },
        {
          "tag": "v1.18.1",
          "kind": "patch",
          "published_at": "2026-03-25T10:09:40Z"
        },
        {
          "tag": "v1.18.0",
          "kind": "minor",
          "published_at": "2026-03-25T10:03:42Z"
        },
        {
          "tag": "v1.17.0",
          "kind": "minor",
          "published_at": "2026-03-25T09:58:23Z"
        },
        {
          "tag": "v1.16.2",
          "kind": "patch",
          "published_at": "2026-03-25T08:56:41Z"
        },
        {
          "tag": "v1.16.1",
          "kind": "patch",
          "published_at": "2026-03-25T08:52:46Z"
        },
        {
          "tag": "v1.16.0",
          "kind": "minor",
          "published_at": "2026-03-25T08:43:32Z"
        },
        {
          "tag": "v1.15.0",
          "kind": "minor",
          "published_at": "2026-03-25T08:34:32Z"
        },
        {
          "tag": "v1.14.0",
          "kind": "minor",
          "published_at": "2026-03-25T08:19:52Z"
        },
        {
          "tag": "v1.13.0",
          "kind": "minor",
          "published_at": "2026-03-25T08:00:31Z"
        },
        {
          "tag": "v1.12.0",
          "kind": "minor",
          "published_at": "2026-03-25T07:28:16Z"
        },
        {
          "tag": "v1.11.0",
          "kind": "minor",
          "published_at": "2026-03-25T07:18:21Z"
        },
        {
          "tag": "v1.10.0",
          "kind": "minor",
          "published_at": "2026-03-25T00:44:00Z"
        },
        {
          "tag": "v1.9.2",
          "kind": "patch",
          "published_at": "2026-03-25T00:33:03Z"
        },
        {
          "tag": "v1.9.1",
          "kind": "patch",
          "published_at": "2026-03-25T00:21:44Z"
        },
        {
          "tag": "v1.9.0",
          "kind": "minor",
          "published_at": "2026-03-25T00:17:13Z"
        },
        {
          "tag": "v1.8.0",
          "kind": "minor",
          "published_at": "2026-03-25T00:12:30Z"
        },
        {
          "tag": "v1.7.2",
          "kind": "patch",
          "published_at": "2026-03-25T00:06:25Z"
        },
        {
          "tag": "v1.7.1",
          "kind": "patch",
          "published_at": "2026-03-24T23:47:38Z"
        },
        {
          "tag": "v1.7.0",
          "kind": "minor",
          "published_at": "2026-03-24T23:31:15Z"
        },
        {
          "tag": "v1.6.0",
          "kind": "minor",
          "published_at": "2026-03-24T23:21:28Z"
        },
        {
          "tag": "v1.5.0",
          "kind": "minor",
          "published_at": "2026-03-24T23:12:35Z"
        },
        {
          "tag": "v1.4.0",
          "kind": "minor",
          "published_at": "2026-03-24T23:06:19Z"
        },
        {
          "tag": "v1.3.0",
          "kind": "minor",
          "published_at": "2026-03-24T22:57:10Z"
        },
        {
          "tag": "v1.2.0",
          "kind": "minor",
          "published_at": "2026-03-24T22:53:20Z"
        },
        {
          "tag": "v1.1.0",
          "kind": "minor",
          "published_at": "2026-03-24T22:47:11Z"
        },
        {
          "tag": "v1.0.0",
          "kind": "major",
          "published_at": "2026-03-24T22:26:59Z"
        }
      ],
      "recent_commits": [
        {
          "oid": "ed89ff5682b48836a44e3aa47f1e789acd7e43fc",
          "body": "…d manifest",
          "is_bot": false,
          "headline": "docs: correct tool count on the site (253 -> 251) to match the shippe…",
          "author_name": "TheCryptoDonkey",
          "author_login": "TheCryptoDonkey",
          "committed_at": "2026-07-22T14:02:35Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "d6ca870d5a4f38fbbd4750075ac128e3a1ac00a4",
          "body": "Bumps [fast-uri](https://github.com/fastify/fast-uri) from 3.1.2 to 3.1.4.\n- [Release notes](https://github.com/fastify/fast-uri/releases)\n- [Commits](https://github.com/fastify/fast-uri/compare/v3.1.2...v3.1.4)\n\n---\nupdated-dependencies:\n- dependency-name: fast-uri\n  dependency-version: 3.1.4\n  dependency-type: indirect\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore(deps): bump fast-uri from 3.1.2 to 3.1.4 (#60)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-07-22T03:11:30Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "431a2a75404ba553b9da5cab25881dd13264a977",
          "body": "Bumps [body-parser](https://github.com/expressjs/body-parser) from 2.2.2 to 2.3.0.\n- [Release notes](https://github.com/expressjs/body-parser/releases)\n- [Changelog](https://github.com/expressjs/body-parser/blob/master/HISTORY.md)\n- [Commits](https://github.com/expressjs/body-parser/compare/v2.2.2..\n[…]\nser\n  dependency-version: 2.3.0\n  dependency-type: indirect\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore(deps): bump body-parser from 2.2.2 to 2.3.0 (#59)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-07-22T03:10:27Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "79c26bf442f3237e1eba459023ceb95a22846d40",
          "body": "Bumps the production-minor group with 4 updates: [@forgesworn/ring-sig](https://github.com/forgesworn/ring-sig), [nostr-tools](https://github.com/nbd-wtf/nostr-tools), [signet-protocol](https://github.com/forgesworn/signet) and [ws](https://github.com/websockets/ws).\n\n\nUpdates `@forgesworn/ring-sig`\n[…]\non-update:semver-patch\n  dependency-group: production-minor\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore(deps): bump the production-minor group with 4 updates (#57)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-07-20T17:55:48Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "c8cdd857c0f3c8d047202c2417970c7c42b78131",
          "body": null,
          "is_bot": true,
          "headline": "chore(release): 1.41.0",
          "author_name": "github-actions[bot]",
          "author_login": "github-actions[bot]",
          "committed_at": "2026-07-18T09:04:12Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "efdc7aa4081c82f918bcbf8c85b61e160c03fa23",
          "body": null,
          "is_bot": false,
          "headline": "Merge branch 'feat/site-newbie-guides' into HEAD",
          "author_name": "TheCryptoDonkey",
          "author_login": "TheCryptoDonkey",
          "committed_at": "2026-07-18T09:03:49Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "c4731e830ef54709143ece8d4ea9040138962250",
          "body": null,
          "is_bot": false,
          "headline": "feat: end-holds scale to how much the last screen says",
          "author_name": "TheCryptoDonkey",
          "author_login": "TheCryptoDonkey",
          "committed_at": "2026-07-18T09:03:34Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "2ccd64310f7526448d65e9db32137a1e449e6ef1",
          "body": null,
          "is_bot": true,
          "headline": "chore(release): 1.40.1",
          "author_name": "github-actions[bot]",
          "author_login": "github-actions[bot]",
          "committed_at": "2026-07-18T09:01:50Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "6b75af5fc3f9994e2dff8194b2df10f487c7db9f",
          "body": "fix: prefer explicit local keys over saved bunker",
          "is_bot": false,
          "headline": "Merge pull request #56 from forgesworn/fix/saved-bunker-key-precedence",
          "author_name": "The Crypto Donkey",
          "author_login": "TheCryptoDonkey",
          "committed_at": "2026-07-18T09:01:27Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "8fc078eb3cf24dba4c0913d0c9ca85d6d3932ca7",
          "body": null,
          "is_bot": false,
          "headline": "fix: prefer explicit local keys over saved bunker",
          "author_name": "TheCryptoDonkey",
          "author_login": "TheCryptoDonkey",
          "committed_at": "2026-07-18T08:59:39Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "4b5137e77ead20758c2ddbf8497062858087ecf9",
          "body": null,
          "is_bot": true,
          "headline": "chore(release): 1.40.0",
          "author_name": "github-actions[bot]",
          "author_login": "github-actions[bot]",
          "committed_at": "2026-07-18T08:28:01Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "43a251a14e2a8bcce5deba80035d1f27df134189",
          "body": "feat: add protocol validation, sync, and group foundations",
          "is_bot": false,
          "headline": "Merge pull request #55 from forgesworn/feat/event-validation",
          "author_name": "The Crypto Donkey",
          "author_login": "TheCryptoDonkey",
          "committed_at": "2026-07-18T08:27:42Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "4d3ea322aeb370362db9daf778b34f5ff6eea0cb",
          "body": null,
          "is_bot": false,
          "headline": "feat: add protocol validation, sync, and group foundations",
          "author_name": "TheCryptoDonkey",
          "author_login": "TheCryptoDonkey",
          "committed_at": "2026-07-18T08:24:03Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "078c83033c047412940e723668baf7abb050e56c",
          "body": null,
          "is_bot": true,
          "headline": "chore(release): 1.39.1",
          "author_name": "github-actions[bot]",
          "author_login": "github-actions[bot]",
          "committed_at": "2026-07-18T06:51:36Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "cea37764b30232950300445fe18a52720880f289",
          "body": null,
          "is_bot": false,
          "headline": "Merge branch 'main' of github.com:forgesworn/bray",
          "author_name": "TheCryptoDonkey",
          "author_login": "TheCryptoDonkey",
          "committed_at": "2026-07-18T06:51:13Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "4ce121f88cfa5833a601e5fc54976e6732d91740",
          "body": null,
          "is_bot": false,
          "headline": "Merge branch 'feat/site-newbie-guides'",
          "author_name": "TheCryptoDonkey",
          "author_login": "TheCryptoDonkey",
          "committed_at": "2026-07-18T06:51:03Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "9b3b3b4e0c9d0e8bc5e36e129d105f7a69fd9b21",
          "body": null,
          "is_bot": false,
          "headline": "fix: help brought in step with the real CLI",
          "author_name": "TheCryptoDonkey",
          "author_login": "TheCryptoDonkey",
          "committed_at": "2026-07-18T06:51:00Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "8cf6c9c914099a94dcd08e0e6abf2f9c86586b7d",
          "body": null,
          "is_bot": true,
          "headline": "chore(release): 1.39.0",
          "author_name": "github-actions[bot]",
          "author_login": "github-actions[bot]",
          "committed_at": "2026-07-18T06:37:35Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "2df5e18f3d059cc23f18ce3c27f4282e55a40b56",
          "body": null,
          "is_bot": false,
          "headline": "Merge branch 'feat/site-newbie-guides'",
          "author_name": "TheCryptoDonkey",
          "author_login": "TheCryptoDonkey",
          "committed_at": "2026-07-18T06:37:11Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "e5e3a258362557e44941b79aee3ff13e8ebdcee9",
          "body": null,
          "is_bot": false,
          "headline": "feat: command atlas pairs every CLI command with its ask",
          "author_name": "TheCryptoDonkey",
          "author_login": "TheCryptoDonkey",
          "committed_at": "2026-07-18T06:36:58Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "0034fc8005f3f97f325a2444bfd90766074b4e0c",
          "body": null,
          "is_bot": false,
          "headline": "fix: shamir copy says the assistant never sees the shares",
          "author_name": "TheCryptoDonkey",
          "author_login": "TheCryptoDonkey",
          "committed_at": "2026-07-18T06:36:58Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "7cc4a7b05b2925e2f47c185353e950f2629d6383",
          "body": null,
          "is_bot": false,
          "headline": "feat: story recordings compressed to a watchable pace",
          "author_name": "TheCryptoDonkey",
          "author_login": "TheCryptoDonkey",
          "committed_at": "2026-07-18T06:36:58Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "bb6cca5948ff3c12a1613e4da147bbab4f1a5c0a",
          "body": null,
          "is_bot": true,
          "headline": "chore(release): 1.38.0",
          "author_name": "github-actions[bot]",
          "author_login": "github-actions[bot]",
          "committed_at": "2026-07-18T06:08:53Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "07dfabd2c3282d21573f5d4112ba5d2f34d16f0b",
          "body": null,
          "is_bot": false,
          "headline": "Merge branch 'feat/site-newbie-guides'",
          "author_name": "TheCryptoDonkey",
          "author_login": "TheCryptoDonkey",
          "committed_at": "2026-07-18T06:08:32Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "fec310cde4bf91ae7a0b50fe4177f65f01f28a6b",
          "body": "Every tool the CLI covers now shows its npx nostr-bray one-liner\nbeside the assistant prompt, click to copy, grounded in the CLI help\nand smoke-tested (the spoken-challenge secret is hex, not prose).\nMCP-only tools show the prompt alone, which is itself honest: the MCP\nsurface is wider than the CLI.",
          "is_bot": false,
          "headline": "feat: terminal one-liners join the tool panels",
          "author_name": "TheCryptoDonkey",
          "author_login": "TheCryptoDonkey",
          "committed_at": "2026-07-18T06:08:22Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "0ca02e51d389a77eeedcfc9947af3ea34011d1df",
          "body": null,
          "is_bot": true,
          "headline": "chore(release): 1.37.0",
          "author_name": "github-actions[bot]",
          "author_login": "github-actions[bot]",
          "committed_at": "2026-07-18T06:01:14Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "eb05f878219117db842f35e9f5e75ace7afc9b34",
          "body": null,
          "is_bot": false,
          "headline": "Merge branch 'feat/site-newbie-guides'",
          "author_name": "TheCryptoDonkey",
          "author_login": "TheCryptoDonkey",
          "committed_at": "2026-07-18T06:00:49Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "713a7adf742065e5478ce529cd81417c67794c7d",
          "body": "Clicking a tool tag now opens a panel built from data the site already\ncarries: the tool's description from tools-manifest.json and the exact\nplain-English prompt to run it in any MCP client, click to copy, with\nthe real recorded story session beneath where one covers the tool. A\ncopyable prompt bea\n[…]\nthe old leaked-prompt recordings with them). generate-tapes.sh\nkeeps every solo definition as the single source for prompts.json and\nonly emits tapes for the 26 stories; record.sh loses its solo mode.",
          "is_bot": false,
          "headline": "feat: try-it-yourself panels replace the solo demo GIFs",
          "author_name": "TheCryptoDonkey",
          "author_login": "TheCryptoDonkey",
          "committed_at": "2026-07-18T06:00:39Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "6edba33c5aa55ea4f56a5c71d2bfe31c7d5332f4",
          "body": null,
          "is_bot": true,
          "headline": "chore(release): 1.36.0",
          "author_name": "github-actions[bot]",
          "author_login": "github-actions[bot]",
          "committed_at": "2026-07-17T21:11:32Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "a14dced28924b14d08963a8bb513993e43dafd23",
          "body": null,
          "is_bot": false,
          "headline": "Merge branch 'feat/site-newbie-guides'",
          "author_name": "TheCryptoDonkey",
          "author_login": "TheCryptoDonkey",
          "committed_at": "2026-07-17T21:11:12Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "f9a5e4df2dd77788c1925a6d703cd0aaf3cd2a06",
          "body": "All 26 story GIFs re-recorded through the isolated demo rig: clean\nfixed prompt, demo identity only, and a response-aware Wait (420s) so\nevery recording shows the full tool exchange instead of cutting off\nmid-typing. The identity story now derives a persona from the master\nrather than tripping the b\n[…]\ne zap story records the honest wallet-less first run and the\nguide copy now frames it as the security model working.\n\nStory GIFs optimised with gifsicle (-O3, lossy 80): 5.7MB to 4.3MB\nacross the set.",
          "is_bot": false,
          "headline": "feat: sanitised story recordings for every demo on the site",
          "author_name": "TheCryptoDonkey",
          "author_login": "TheCryptoDonkey",
          "committed_at": "2026-07-17T21:11:01Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "4c5fb621d99193fde11b37702d92743eb57dc58c",
          "body": "vault-encrypt and vault-read called their async handlers without\nawait, so both tools returned a serialised pending promise instead of\nthe result. Surfaced when the vault demo recording hit the broken\ntools; vault-read-shared already awaited correctly.",
          "is_bot": false,
          "headline": "fix: await async vault handlers in MCP tool wrappers",
          "author_name": "TheCryptoDonkey",
          "author_login": "TheCryptoDonkey",
          "committed_at": "2026-07-17T21:04:19Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "024ae8e3c61bd9a3e2d6a7586cad00c328a11630",
          "body": null,
          "is_bot": false,
          "headline": "Merge branch 'feat/site-newbie-guides'",
          "author_name": "TheCryptoDonkey",
          "author_login": "TheCryptoDonkey",
          "committed_at": "2026-07-17T20:10:25Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "f96cc419f8a4547cdd182ebac79fa100e004951a",
          "body": "The keyless-create fix moved bare 'create' to a labelled human format;\nthe older CLI suite still parsed it as JSON. Assert the JSON shape via\n--json where it now lives, and the npub/mnemonic labels in human mode.",
          "is_bot": false,
          "headline": "test: cover create's json flag and labelled human output",
          "author_name": "TheCryptoDonkey",
          "author_login": "TheCryptoDonkey",
          "committed_at": "2026-07-17T20:10:03Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "684e64fa44f3eebdcbde326c33d882c02bab5976",
          "body": null,
          "is_bot": true,
          "headline": "chore(release): 1.35.1",
          "author_name": "github-actions[bot]",
          "author_login": "github-actions[bot]",
          "committed_at": "2026-07-17T20:04:35Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "442d41c491acfd1a32e1c3571997858f0b84f8b4",
          "body": "nostr-bray create sat behind the config gate, so the one command a\nbrand-new user runs first demanded a key that did not exist yet. It now\nruns before loadConfig: pure keygen, npub plus 24-word mnemonic, with\nplain guidance on stderr and the same JSON shape under --json. Covered\nby a cold-start smok\n[…]\ne 60-second boast, and no bunker step that\nsummons a key from nowhere), the guide's key section leads with create,\nand README and docs/guide.md replace the nostr-tools one-liner with the\nsame command.",
          "is_bot": false,
          "headline": "fix: mint keys before any configuration exists",
          "author_name": "TheCryptoDonkey",
          "author_login": "TheCryptoDonkey",
          "committed_at": "2026-07-17T20:04:05Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "2ff261a22591e0db335d1a8806ad7aea9e447f1e",
          "body": null,
          "is_bot": true,
          "headline": "chore(release): 1.35.0",
          "author_name": "github-actions[bot]",
          "author_login": "github-actions[bot]",
          "committed_at": "2026-07-17T19:53:00Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "50f6bb9f25de81000ef2a6a08a6883d29ff0dc36",
          "body": null,
          "is_bot": false,
          "headline": "Merge branch 'feat/site-newbie-guides'",
          "author_name": "TheCryptoDonkey",
          "author_login": "TheCryptoDonkey",
          "committed_at": "2026-07-17T19:52:39Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "2a7e9b74efd5402de2eb06654fc5d3bf1211eba1",
          "body": "Two walkthrough pages under /guide/: getting started (connect an MCP\nclient, first key, personas, Shamir backup, profile, feed, posting, DMs,\nzaps) and the trust guide (badges, vouching, policy, ring signatures,\nspoken checks, privacy proofs, vaults, duress), both in the front page's\ndesign language\n[…]\nal demo key. Tapes wait for the\nresponse to finish instead of sleeping a fixed time, so recordings show\nreal tool output end to end. Stories 01-11 re-recorded; the remainder\nfollow in the next commit.",
          "is_bot": false,
          "headline": "feat: guides with real recordings and a humanised front page",
          "author_name": "TheCryptoDonkey",
          "author_login": "TheCryptoDonkey",
          "committed_at": "2026-07-17T19:52:18Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "bebb2fb5bc95770d43262119b727870ab124c1da",
          "body": null,
          "is_bot": false,
          "headline": "chore: drop retired Strike donation link",
          "author_name": "TheCryptoDonkey",
          "author_login": "TheCryptoDonkey",
          "committed_at": "2026-07-14T09:32:46Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "371f9e8434d075e7e698b57c27991e8db9caaa5b",
          "body": "---\nupdated-dependencies:\n- dependency-name: \"@types/node\"\n  dependency-version: 25.9.5\n  dependency-type: direct:development\n  update-type: version-update:semver-patch\n  dependency-group: dev-minor\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore(deps-dev): bump @types/node in the dev-minor group (#54)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-07-13T17:55:38Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "96128f3a789ec0a79faec4f7154d55d7f1e3261e",
          "body": "Bumps the production-minor group with 3 updates: [canary-kit](https://github.com/forgesworn/canary-kit), [nostr-tools](https://github.com/nbd-wtf/nostr-tools) and [spoken-token](https://github.com/forgesworn/spoken-token).\n\n\nUpdates `canary-kit` from 2.10.0 to 2.11.0\n- [Release notes](https://github\n[…]\non-update:semver-minor\n  dependency-group: production-minor\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore(deps): bump the production-minor group with 3 updates (#53)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-07-13T17:55:21Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "631058a457ddf0e3ee5c0473059b07a6068b8bd7",
          "body": "This reverts commit ca88f26bc1a6e207bb079151a9b925bad9738461.",
          "is_bot": false,
          "headline": "Revert \"fix: vault config reads follow dominion-protocol kinds (30481)\"",
          "author_name": "TheCryptoDonkey",
          "author_login": "TheCryptoDonkey",
          "committed_at": "2026-07-12T09:31:05Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "8e8f6c3c2a4379effb73f19f68d39b2d51f7159f",
          "body": null,
          "is_bot": true,
          "headline": "chore(release): 1.34.1",
          "author_name": "github-actions[bot]",
          "author_login": "github-actions[bot]",
          "committed_at": "2026-07-12T09:28:56Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "ca88f26bc1a6e207bb079151a9b925bad9738461",
          "body": "fetchVaultConfig and VaultResolver queried kind 30078 with d-tag\n'dominion:vault-config' while buildVaultConfigEvent publishes kind 30481\nwith d-tag 'vault-config' — reads could never find configs created by the\ncurrent create path. All vault-config queries now use dominion's own\nbuildVaultConfigFil\n[…]\n-scoped keys).\n\nStale tests updated to match: vault kind/d-tag expectations, tier-agnostic\ndecryption semantics, and the attestation filter '#type' tag\n(nostr-attestations >=2.2 renamed it from '#l').",
          "is_bot": false,
          "headline": "fix: vault config reads follow dominion-protocol kinds (30481)",
          "author_name": "TheCryptoDonkey",
          "author_login": "TheCryptoDonkey",
          "committed_at": "2026-07-12T09:27:32Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "ee1057fd122b45442e8931c450dff71114a8dc06",
          "body": null,
          "is_bot": true,
          "headline": "chore(release): 1.34.0",
          "author_name": "github-actions[bot]",
          "author_login": "github-actions[bot]",
          "committed_at": "2026-07-12T09:25:16Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "3f82b53f9f50be325ee8477ac90fa63644a1dd24",
          "body": "Co-authored-by: TheCryptoDonkey <TheCryptoDonkey@users.noreply.github.com>",
          "is_bot": false,
          "headline": "feat: send client name metadata on bunker connect (#52)",
          "author_name": "The Crypto Donkey",
          "author_login": "TheCryptoDonkey",
          "committed_at": "2026-07-12T09:24:55Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "9b04614af9048a2c07ee12eac9fb3f6cc490e319",
          "body": "Bumps the dev-minor group with 2 updates: [@vitest/coverage-v8](https://github.com/vitest-dev/vitest/tree/HEAD/packages/coverage-v8) and [vitest](https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest).\n\n\nUpdates `@vitest/coverage-v8` from 4.1.9 to 4.1.10\n- [Release notes](https://github.com\n[…]\n: version-update:semver-patch\n  dependency-group: dev-minor\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore(deps-dev): bump the dev-minor group with 2 updates (#50)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-07-06T17:55:25Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "de4a1eb83a6e761f36a18a2182fb4206e2545005",
          "body": "Bumps the production-minor group with 2 updates: [@forgesworn/range-proof](https://github.com/forgesworn/range-proof) and [nostr-tools](https://github.com/nbd-wtf/nostr-tools).\n\n\nUpdates `@forgesworn/range-proof` from 2.0.1 to 2.0.3\n- [Release notes](https://github.com/forgesworn/range-proof/release\n[…]\non-update:semver-patch\n  dependency-group: production-minor\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore(deps): bump the production-minor group with 2 updates (#49)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-07-06T17:55:07Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "5eaa811df2e88b262960a419fffef80b0a2e35ef",
          "body": null,
          "is_bot": true,
          "headline": "chore(release): 1.33.0",
          "author_name": "github-actions[bot]",
          "author_login": "github-actions[bot]",
          "committed_at": "2026-07-04T18:28:51Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "a8d8e5226660d4115f47649fd664eb3c3b062283",
          "body": "…oshi.com",
          "is_bot": false,
          "headline": "chore: update Lightning donation address to profusemeat89@walletofsat…",
          "author_name": "TheCryptoDonkey",
          "author_login": "TheCryptoDonkey",
          "committed_at": "2026-07-04T18:28:28Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "d29ed642a23a87f99de06b17b5986bf800a234f0",
          "body": "Bumps the production-minor group with 3 updates: [nostr-tools](https://github.com/nbd-wtf/nostr-tools), [nostr-veil](https://github.com/forgesworn/nostr-veil) and [signet-protocol](https://github.com/forgesworn/signet).\n\n\nUpdates `nostr-tools` from 2.23.7 to 2.23.8\n- [Release notes](https://github.c\n[…]\non-update:semver-minor\n  dependency-group: production-minor\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore(deps): bump the production-minor group with 3 updates (#47)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-06-29T17:55:12Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "a8aa798e602396204a86653c3929acef8e790b1b",
          "body": "…sted publishing",
          "is_bot": false,
          "headline": "chore: enable npm provenance (publishConfig.provenance) for anvil tru…",
          "author_name": "TheCryptoDonkey",
          "author_login": "TheCryptoDonkey",
          "committed_at": "2026-06-22T18:13:36Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "2a8910fa7b57de4914965ddc7c5dec22a4867148",
          "body": "Bumps the dev-minor group with 1 update in the / directory: [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node).\n\n\nUpdates `@types/node` from 25.9.3 to 25.9.4\n- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)\n- [Commits](https://github.\n[…]\n: version-update:semver-patch\n  dependency-group: dev-minor\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore(deps-dev): bump @types/node (#46)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-06-22T18:06:53Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "edb5e6a5a8e35eb57e44baf96151aa2c8e324667",
          "body": "… patch undici to 7.28.0\n\nanvil restarted versioning at 0.x after the semantic-release -> anvil migration, regressing below the published 1.31.0. This sets the line back to 1.x (1.32.0 = next after npm's current latest) so the bunker --persona/--profile features can publish as @latest. Also bumps undici 7.25.0 -> 7.28.0 to clear the high-severity advisories that were failing the release audit gate.",
          "is_bot": false,
          "headline": "chore(release): realign to 1.32.0 (resume the published 1.x line) and…",
          "author_name": "TheCryptoDonkey",
          "author_login": "TheCryptoDonkey",
          "committed_at": "2026-06-22T18:04:17Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "6a39a5d7f75fedc352ba746b4679586fe3e21c12",
          "body": "Bumps the production-minor group with 2 updates: [canary-kit](https://github.com/forgesworn/canary-kit) and [nostr-tools](https://github.com/nbd-wtf/nostr-tools).\n\n\nUpdates `canary-kit` from 2.7.2 to 2.10.0\n- [Release notes](https://github.com/forgesworn/canary-kit/releases)\n- [Changelog](https://gi\n[…]\non-update:semver-patch\n  dependency-group: production-minor\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore(deps): bump the production-minor group with 2 updates (#45)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-06-22T17:55:18Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "2b6f7bfb381ef0d9700afe0ac7ddd0b111e09259",
          "body": null,
          "is_bot": true,
          "headline": "chore(release): 0.6.0",
          "author_name": "github-actions[bot]",
          "author_login": "github-actions[bot]",
          "committed_at": "2026-06-22T17:41:48Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "fad68cf313d62aaa4b72d723302dcdf3b945e196",
          "body": "…nd nostr-attestations API changes\"\n\nThis reverts commit 9ea870f6f09c931bc46243f277d9f520221be19f.",
          "is_bot": false,
          "headline": "Revert \"fix: update vault + attestation for dominion-protocol 0.1.0 a…",
          "author_name": "TheCryptoDonkey",
          "author_login": "TheCryptoDonkey",
          "committed_at": "2026-06-22T17:41:04Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "3ea46de8411eb83b71458dee71f0ab4144528142",
          "body": null,
          "is_bot": true,
          "headline": "chore(release): 0.5.0",
          "author_name": "github-actions[bot]",
          "author_login": "github-actions[bot]",
          "committed_at": "2026-06-22T17:31:59Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "5147a2521c2d7f4f34d7017eb76fdb63a1dc04e0",
          "body": "…fallback\n\n--profile <name> loads the master from an nsec-tree-cli profile (~/.nsec-tree/profiles/<name>.json) so the operator never handles the 12 words. The bunker connection key is now persisted per identity, so the bunker:// stays stable across restarts without --bunker-key-file. Relays default \n[…]\nnfigured. applyBunkerPersona returns the persona name to key the stable key. TDD: 8 new tests; smoke-tested --profile + --persona end to end (stable URI, signs as the matching nsec-tree-cli identity).",
          "is_bot": false,
          "headline": "feat: bunker --profile <name>, auto-stable connection key, and relay …",
          "author_name": "TheCryptoDonkey",
          "author_login": "TheCryptoDonkey",
          "committed_at": "2026-06-22T17:31:36Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "a560294c0abd510cfac78ebb314b7b9bb360d088",
          "body": null,
          "is_bot": true,
          "headline": "chore(release): 0.4.0",
          "author_name": "github-actions[bot]",
          "author_login": "github-actions[bot]",
          "committed_at": "2026-06-22T17:18:08Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "c2465870a824f7225218767e32e9e67dc7f7ef89",
          "body": "…tity\n\nbunker --persona <name> derives <name> from the configured master and signs as it - the same key nsec-tree-cli 'export nsec <name>' yields, so an identity means one key across the ecosystem. Adds IdentityContext.use(purpose, index). TDD: 6 new tests.",
          "is_bot": false,
          "headline": "feat: add bunker --persona <name> to sign as a derived nsec-tree iden…",
          "author_name": "TheCryptoDonkey",
          "author_login": "TheCryptoDonkey",
          "committed_at": "2026-06-22T17:17:28Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "9ea870f6f09c931bc46243f277d9f520221be19f",
          "body": "…-attestations API changes\n\ndominion-protocol 0.1.0: deriveContentKey is now 2-arg (tier dropped); the vault config event is kind 30481 with d-tag 'vault-config' (was 30078 / 'dominion:vault-config') so fetchVaultConfig and the resolver filters never matched a real config; the content key no longer scopes by tier. nostr-attestations: the type filter tag is now '#type' (was '#l'). Fixes the call sites, fetch filters, and affected tests. Build passes; full suite green.",
          "is_bot": false,
          "headline": "fix: update vault + attestation for dominion-protocol 0.1.0 and nostr…",
          "author_name": "TheCryptoDonkey",
          "author_login": "TheCryptoDonkey",
          "committed_at": "2026-06-22T17:17:28Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "a8044aff5008310b1b31815858c61ff2d0597b6e",
          "body": "Bumps [hono](https://github.com/honojs/hono) from 4.12.23 to 4.12.26.\n- [Release notes](https://github.com/honojs/hono/releases)\n- [Commits](https://github.com/honojs/hono/compare/v4.12.23...v4.12.26)\n\n---\nupdated-dependencies:\n- dependency-name: hono\n  dependency-version: 4.12.26\n  dependency-type: indirect\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore(deps): bump hono from 4.12.23 to 4.12.26 (#44)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-06-20T04:59:05Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "1c8c09a8a258c555b8b3c3ec632894ff3da2ec1c",
          "body": "…pdates (#43)\n\nBumps the dev-minor group with 2 updates in the / directory: [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) and [@vitest/coverage-v8](https://github.com/vitest-dev/vitest/tree/HEAD/packages/coverage-v8).\n\n\nUpdates `@types/node` from 25.9.1 to 25\n[…]\n: version-update:semver-patch\n  dependency-group: dev-minor\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore(deps-dev): bump the dev-minor group across 1 directory with 3 u…",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-06-15T18:00:20Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "33eb25ecf273b9dcaba2b19fb0af2df51f377a36",
          "body": "Bumps the production-minor group with 2 updates: [@modelcontextprotocol/ext-apps](https://github.com/modelcontextprotocol/ext-apps) and [socks-proxy-agent](https://github.com/TooTallNate/proxy-agents/tree/HEAD/packages/socks-proxy-agent).\n\n\nUpdates `@modelcontextprotocol/ext-apps` from 1.7.3 to 1.7.\n[…]\non-update:semver-minor\n  dependency-group: production-minor\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore(deps): bump the production-minor group with 2 updates (#39)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-06-08T17:55:16Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "54862ffd29042fd4050639dcbdb3e04ba9a3ae02",
          "body": "Bumps [hono](https://github.com/honojs/hono) from 4.12.18 to 4.12.23.\n- [Release notes](https://github.com/honojs/hono/releases)\n- [Commits](https://github.com/honojs/hono/compare/v4.12.18...v4.12.23)\n\n---\nupdated-dependencies:\n- dependency-name: hono\n  dependency-version: 4.12.23\n  dependency-type: indirect\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore(deps): bump hono from 4.12.18 to 4.12.23 (#38)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-06-04T21:12:04Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "dde929e50184c35d7aa58ac66e7f4aab7a760433",
          "body": "…pdates (#35)\n\nBumps the dev-minor group with 2 updates in the / directory: [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) and [@vitest/coverage-v8](https://github.com/vitest-dev/vitest/tree/HEAD/packages/coverage-v8).\n\n\nUpdates `@types/node` from 25.7.0 to 25\n[…]\n: version-update:semver-patch\n  dependency-group: dev-minor\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore(deps-dev): bump the dev-minor group across 1 directory with 3 u…",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-06-03T02:26:06Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "8dd7cbdb19d5bae4177e372782aca62258bc5650",
          "body": "Bumps the production-minor group with 1 update: [@modelcontextprotocol/ext-apps](https://github.com/modelcontextprotocol/ext-apps).\n\n\nUpdates `@modelcontextprotocol/ext-apps` from 1.7.2 to 1.7.3\n- [Release notes](https://github.com/modelcontextprotocol/ext-apps/releases)\n- [Changelog](https://github\n[…]\non-update:semver-patch\n  dependency-group: production-minor\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore(deps): bump @modelcontextprotocol/ext-apps (#37)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-06-03T02:25:45Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "ff95f83815d75036e134ce85709a4ba33d762a0e",
          "body": "Bumps the actions-minor group with 1 update: [actions/checkout](https://github.com/actions/checkout).\n\n\nUpdates `actions/checkout` from 6.0.2 to 6.0.3\n- [Release notes](https://github.com/actions/checkout/releases)\n- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)\n- [Commits]\n[…]\nrsion-update:semver-patch\n  dependency-group: actions-minor\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore(deps): bump actions/checkout in the actions-minor group (#36)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-06-03T02:25:32Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "e3b8e0e2745aff20a2e0e0ca4ecc4be3eff3ace1",
          "body": "Bumps the production-minor group with 2 updates: [nostr-veil](https://github.com/forgesworn/nostr-veil) and [ws](https://github.com/websockets/ws).\n\n\nUpdates `nostr-veil` from 0.28.1 to 0.29.0\n- [Release notes](https://github.com/forgesworn/nostr-veil/releases)\n- [Changelog](https://github.com/forge\n[…]\non-update:semver-minor\n  dependency-group: production-minor\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore(deps): bump the production-minor group with 2 updates (#34)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-05-25T23:46:57Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "c50b26436fefa5213d7f163f0945d2f26fbde5e6",
          "body": "Bumps [qs](https://github.com/ljharb/qs) from 6.15.0 to 6.15.2.\n- [Changelog](https://github.com/ljharb/qs/blob/main/CHANGELOG.md)\n- [Commits](https://github.com/ljharb/qs/compare/v6.15.0...v6.15.2)\n\n---\nupdated-dependencies:\n- dependency-name: qs\n  dependency-version: 6.15.2\n  dependency-type: indirect\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore(deps): bump qs from 6.15.0 to 6.15.2 (#33)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-05-23T14:14:21Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "17841c3d8a48228e656a6005249ed064f41c2ab9",
          "body": "Bumps the production-minor group with 4 updates: [@modelcontextprotocol/ext-apps](https://github.com/modelcontextprotocol/ext-apps), [nostr-tools](https://github.com/nbd-wtf/nostr-tools), [nostr-veil](https://github.com/forgesworn/nostr-veil) and [ws](https://github.com/websockets/ws).\n\n\nUpdates `@m\n[…]\non-update:semver-patch\n  dependency-group: production-minor\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore(deps): bump the production-minor group with 4 updates (#30)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-05-19T03:24:45Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "65def517ef42dd40771ace31680f6d57c650a9f5",
          "body": "Bumps the dev-minor group with 3 updates: [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node), [@vitest/coverage-v8](https://github.com/vitest-dev/vitest/tree/HEAD/packages/coverage-v8) and [vitest](https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest).\n\n\n[…]\n: version-update:semver-patch\n  dependency-group: dev-minor\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore(deps-dev): bump the dev-minor group with 3 updates (#29)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-05-12T01:07:14Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "abc17001d2549575c3976f896910de54823583d7",
          "body": "Bumps the production-minor group with 1 update: [signet-protocol](https://github.com/forgesworn/signet).\n\n\nUpdates `signet-protocol` from 1.6.0 to 1.8.1\n- [Release notes](https://github.com/forgesworn/signet/releases)\n- [Changelog](https://github.com/forgesworn/signet/blob/main/CHANGELOG.md)\n- [Comm\n[…]\non-update:semver-minor\n  dependency-group: production-minor\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore(deps): bump signet-protocol in the production-minor group (#28)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-05-12T01:06:50Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "d7ab207e455cce1683f27dbbdc1485d4c186d97c",
          "body": "Bumps [fast-uri](https://github.com/fastify/fast-uri) from 3.1.0 to 3.1.2.\n- [Release notes](https://github.com/fastify/fast-uri/releases)\n- [Commits](https://github.com/fastify/fast-uri/compare/v3.1.0...v3.1.2)\n\n---\nupdated-dependencies:\n- dependency-name: fast-uri\n  dependency-version: 3.1.2\n  dependency-type: indirect\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore(deps): bump fast-uri from 3.1.0 to 3.1.2 (#27)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-05-09T05:11:48Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "d0bc6cd84e145816e489f832b308faf079c9b1ee",
          "body": "Bumps [hono](https://github.com/honojs/hono) from 4.12.14 to 4.12.18.\n- [Release notes](https://github.com/honojs/hono/releases)\n- [Commits](https://github.com/honojs/hono/compare/v4.12.14...v4.12.18)\n\n---\nupdated-dependencies:\n- dependency-name: hono\n  dependency-version: 4.12.18\n  dependency-type: indirect\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore(deps): bump hono from 4.12.14 to 4.12.18 (#26)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-05-07T03:52:20Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "1910732302ec9d6cd00041ff21997e222c0c36db",
          "body": "Bumps [ip-address](https://github.com/beaugunderson/ip-address) and [express-rate-limit](https://github.com/express-rate-limit/express-rate-limit). These dependencies needed to be updated together.\n\nUpdates `ip-address` from 10.1.0 to 10.2.0\n- [Commits](https://github.com/beaugunderson/ip-address/co\n[…]\nmit\n  dependency-version: 8.5.1\n  dependency-type: indirect\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore(deps): bump ip-address and express-rate-limit (#25)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-05-07T03:50:50Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "81d6e45b17c32937416ebee8a38221a97e0600fd",
          "body": "…up (#23)\n\nBumps the production-minor group with 1 update: [zod](https://github.com/colinhacks/zod).\n\n\nUpdates `zod` from 4.3.6 to 4.4.3\n- [Release notes](https://github.com/colinhacks/zod/releases)\n- [Commits](https://github.com/colinhacks/zod/compare/v4.3.6...v4.4.3)\n\n---\nupdated-dependencies:\n- d\n[…]\non-update:semver-minor\n  dependency-group: production-minor\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore(deps): bump zod from 4.3.6 to 4.4.3 in the production-minor gro…",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-05-04T22:30:27Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "216f5cea7107ccfb8ca63633c2a885307616bf83",
          "body": "Bumps the actions-minor group with 2 updates: [actions/setup-node](https://github.com/actions/setup-node) and [dependabot/fetch-metadata](https://github.com/dependabot/fetch-metadata).\n\n\nUpdates `actions/setup-node` from 6.3.0 to 6.4.0\n- [Release notes](https://github.com/actions/setup-node/releases\n[…]\nrsion-update:semver-minor\n  dependency-group: actions-minor\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore(deps): bump the actions-minor group with 2 updates (#22)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-05-01T21:29:45Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "11bb1b5ac1220f4e25a6b924c3788b0b8aee9813",
          "body": "Bumps the dev-minor group with 2 updates: [@vitest/coverage-v8](https://github.com/vitest-dev/vitest/tree/HEAD/packages/coverage-v8) and [vitest](https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest).\n\n\nUpdates `@vitest/coverage-v8` from 4.1.4 to 4.1.5\n- [Release notes](https://github.com/\n[…]\n: version-update:semver-patch\n  dependency-group: dev-minor\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore(deps-dev): bump the dev-minor group with 2 updates (#21)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-04-27T21:55:18Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "fecefc84098baacf28b4c28c0bdb63141bc2606d",
          "body": "Bumps the production-minor group with 1 update: [@modelcontextprotocol/ext-apps](https://github.com/modelcontextprotocol/ext-apps).\n\n\nUpdates `@modelcontextprotocol/ext-apps` from 1.6.0 to 1.7.1\n- [Release notes](https://github.com/modelcontextprotocol/ext-apps/releases)\n- [Changelog](https://github\n[…]\non-update:semver-minor\n  dependency-group: production-minor\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore(deps): bump @modelcontextprotocol/ext-apps (#20)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-04-27T21:54:59Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "4a4af02df936c403a1fc96d6bc3bc3f268dc126e",
          "body": "Bumps the dev-minor group with 1 update: [typescript](https://github.com/microsoft/TypeScript).\n\n\nUpdates `typescript` from 6.0.2 to 6.0.3\n- [Release notes](https://github.com/microsoft/TypeScript/releases)\n- [Commits](https://github.com/microsoft/TypeScript/compare/v6.0.2...v6.0.3)\n\n---\nupdated-dep\n[…]\n: version-update:semver-patch\n  dependency-group: dev-minor\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore(deps-dev): bump typescript in the dev-minor group (#18)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-04-20T20:20:32Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "4d3516b933b5abeb6693db9cf1ea402ef243ef16",
          "body": "Bumps the production-minor group with 2 updates: [@modelcontextprotocol/ext-apps](https://github.com/modelcontextprotocol/ext-apps) and [signet-protocol](https://github.com/forgesworn/signet).\n\n\nUpdates `@modelcontextprotocol/ext-apps` from 1.5.0 to 1.6.0\n- [Release notes](https://github.com/modelco\n[…]\non-update:semver-minor\n  dependency-group: production-minor\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore(deps): bump the production-minor group with 2 updates (#17)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-04-20T20:20:20Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "076dbbc75169f7f830dcab55234af72b33353877",
          "body": null,
          "is_bot": true,
          "headline": "chore(release): 0.3.0",
          "author_name": "github-actions[bot]",
          "author_login": "github-actions[bot]",
          "committed_at": "2026-04-17T09:24:15Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "ea4a5d627cdd6e228f600167090001a8cf113e06",
          "body": "Close all deferred HIGH and MEDIUM items from the April 14 audit,\nplus three LOW items. Details in docs/security-audit-2026-04-14.md.",
          "is_bot": false,
          "headline": "merge: security-followup-2026-04-17",
          "author_name": "The Crypto Donkey",
          "author_login": "TheCryptoDonkey",
          "committed_at": "2026-04-17T09:23:48Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "e84a6341251539324d852101c609b7621c972dcf",
          "body": "Closes all deferred HIGH and MEDIUM items from\ndocs/security-audit-2026-04-14.md. Details in the audit doc; summary:\n\n- HIGH: MuSig2 (H1-H3) already addressed in 0.2.0; audit doc updated\n  with file:line evidence.\n- MEDIUM: ws:// clearnet block, NIP-11 content-type check, NIP-65\n  fail-open warn, at\n[…]\nrnings, HeartwoodContext probe\n  shape validation.\n- L2 closed as won't-fix: 0o600 + atomic write matches SSH/GPG\n  convention for at-rest credentials.\n\nTests: 1440 -> 1474 (+34 new). Typecheck clean.",
          "is_bot": false,
          "headline": "fix: close security audit deferrals (Batches A, B, C)",
          "author_name": "The Crypto Donkey",
          "author_login": "TheCryptoDonkey",
          "committed_at": "2026-04-17T09:23:36Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "32d4a33a94ff13e5a4f4fcb14208b38592f2c4c2",
          "body": "Bumps [hono](https://github.com/honojs/hono) from 4.12.12 to 4.12.14.\n- [Release notes](https://github.com/honojs/hono/releases)\n- [Commits](https://github.com/honojs/hono/compare/v4.12.12...v4.12.14)\n\n---\nupdated-dependencies:\n- dependency-name: hono\n  dependency-version: 4.12.14\n  dependency-type: indirect\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore(deps): bump hono from 4.12.12 to 4.12.14 (#16)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-04-16T11:37:50Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "dfa88a9880ce75fa0096fa156619e69d4aebf6b1",
          "body": null,
          "is_bot": true,
          "headline": "chore(release): 0.2.0",
          "author_name": "github-actions[bot]",
          "author_login": "github-actions[bot]",
          "committed_at": "2026-04-16T11:37:05Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "1173b47eadcdd42b6f6a3238e31bfb907d0bbfdf",
          "body": null,
          "is_bot": false,
          "headline": "ci: add anvil release workflows",
          "author_name": "The Crypto Donkey",
          "author_login": "TheCryptoDonkey",
          "committed_at": "2026-04-16T11:35:40Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "3bad983dfd087f3341e2996504a83a1c1ac7cbf9",
          "body": null,
          "is_bot": false,
          "headline": "docs: update release reference from semantic-release to anvil",
          "author_name": "The Crypto Donkey",
          "author_login": "TheCryptoDonkey",
          "committed_at": "2026-04-16T11:34:14Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "6c2b2d8c09df522101ed728586af801e6d36f9e9",
          "body": "semantic-release was removed from package.json in 1374b29 but the\nworkflow job was left invoking npx semantic-release, failing every\npush to main with EINVALIDNPMTOKEN. CI is now test-only; publishing\nis handled separately when needed.",
          "is_bot": false,
          "headline": "ci: drop dead semantic-release job",
          "author_name": "The Crypto Donkey",
          "author_login": "TheCryptoDonkey",
          "committed_at": "2026-04-15T08:59:35Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "4bc96c34d459c5b467855da20be01f57553f74db",
          "body": "Hero paragraph still said \"234 tools\" after the 238/27 sync pass. Bringing it in line with the rest of the page.",
          "is_bot": false,
          "headline": "site: fix stray 234 tool count in hero subtext",
          "author_name": "The Crypto Donkey",
          "author_login": "TheCryptoDonkey",
          "committed_at": "2026-04-15T08:45:52Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "5b3a922e0c82f3afbc50ca7d2101f5cd84ecca62",
          "body": "The handleMusig2Nonce API now returns { nonceId, pubNonce } instead of\n{ secNonce, pubNonce }. Test was still reading .secNonce and passing it\nto partialSign, which fails on CI after a clean build.",
          "is_bot": false,
          "headline": "fix: update musig2 2-of-2 flow test for server-held nonce custody",
          "author_name": "The Crypto Donkey",
          "author_login": "TheCryptoDonkey",
          "committed_at": "2026-04-15T08:45:47Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "53f3e6e6afb4b4ba65f00c9ad28d217a217a5e13",
          "body": null,
          "is_bot": false,
          "headline": "site: sync tool counts to 238/27 across meta, hero, and prose",
          "author_name": "The Crypto Donkey",
          "author_login": "TheCryptoDonkey",
          "committed_at": "2026-04-15T07:42:52Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "88518598a788147e48e2cd5bc34eed22fc81eb98",
          "body": null,
          "is_bot": false,
          "headline": "chore: add context7.json to claim Context7 library listing",
          "author_name": "The Crypto Donkey",
          "author_login": "TheCryptoDonkey",
          "committed_at": "2026-04-15T07:40:37Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "b068df41d0f0e69ce253ddde3fe3b0531a3f4b17",
          "body": "Context7 crawled llms.txt on submission and flagged two accuracy\nbugs in its evaluation pass:\n\n1. dm-send parameter mismatch. The MCP tool schema accepts `to`\n   (name, NIP-05, npub, nprofile, or hex) and resolves internally to\n   `recipientPubkeyHex`. docs/guide.md, examples/mcp-workflow.md,\n   and\n[…]\ne sentence on when to use which.\n\ntrust-request and nip44-encrypt really do use `recipientPubkeyHex`\nat the tool boundary (checked src/trust/tools.ts and src/util/tools.ts),\nso those remain unchanged.",
          "is_bot": false,
          "headline": "docs: fix dm-send and trust-attest parameter docs",
          "author_name": "The Crypto Donkey",
          "author_login": "TheCryptoDonkey",
          "committed_at": "2026-04-15T07:40:07Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "e26e16f386bd1311f6592dfb108bd98255bd7b88",
          "body": "Pre-Context7 cleanup. The export-tool-schemas.mjs harvest produces 238\ntools (relay-intelligence-tools registers extras beyond the 27-group\nnarrative count). All public surfaces previously said '235 tools':\nREADME, llms.txt, llms-full.txt, .cursorrules, CLAUDE.md, AGENTS.md,\nserver.json, site/mcp.json, and three docs/ submission drafts.\n\nGroup count stays at 27 — the discrepancy was always between\ngroup-level grouping and the actual registered tool count, not a\ngroup reclassification.",
          "is_bot": false,
          "headline": "docs: align headline tool count to 238 (manifest source of truth)",
          "author_name": "The Crypto Donkey",
          "author_login": "TheCryptoDonkey",
          "committed_at": "2026-04-14T20:23:36Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "4bdfb39dbd21b25e93daee9e5425088cc070e8de",
          "body": "GitHub repo metadata closed in one batch:\n- description rewritten (no em dash, trust-aware positioning)\n- 7 new topics (trust, web-of-trust, signet, dominion, nip-46,\n  attestations, bunker); 19 total\n- wiki disabled\n- secret scanning + push protection enabled\n- Dependabot alerts + auto fixes enabled\n\nTrust/GitHub-presence score 3.5 → 7. Overall 7.8 → 8.2.\n\nTier 4b (third-party distribution) still open: MCP registry,\nawesome-mcp-servers, awesome-nostr, Context7, launch post.",
          "is_bot": false,
          "headline": "docs: refresh discoverability audit after Tier 4a wins",
          "author_name": "The Crypto Donkey",
          "author_login": "TheCryptoDonkey",
          "committed_at": "2026-04-14T12:55:25Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "700deff3ac3a484ae07a93713371764e4b62fcbf",
          "body": "Closes the deferred HIGH from the 2026-04-14 security audit: 25 fetch()\ncallsites across NIP-05, Blossom, marketplace, relay-curl, relay-info,\nand workflow handlers were bypassing the SOCKS proxy. Only WebSocket\nconnections to relays went through Tor; every HTTP request leaked\nclearnet DNS and IP on\n[…]\n when no proxy configured, swapped\nwhen configured, socks5h:// scheme normalised, fetch routes through the\nconfigured port (connection refused proves the swap), reset restores\nthe original dispatcher.",
          "is_bot": false,
          "headline": "feat: route all HTTP fetches through Tor SOCKS proxy when configured",
          "author_name": "The Crypto Donkey",
          "author_login": "TheCryptoDonkey",
          "committed_at": "2026-04-14T11:57:50Z",
          "body_truncated": true,
          "is_coding_agent": false
        }
      ],
      "releases_count": 67,
      "commits_last_year": 425,
      "latest_release_at": "2026-07-18T09:06:33Z",
      "latest_release_tag": "v1.41.0",
      "releases_from_tags": false,
      "days_since_last_push": 1,
      "active_weeks_last_year": 18,
      "days_since_latest_release": 5,
      "mean_days_between_releases": 0.7
    },
    "community": {
      "has_readme": true,
      "has_license": true,
      "has_description": true,
      "has_contributing": true,
      "health_percentage": 75,
      "has_issue_template": false,
      "has_code_of_conduct": false,
      "has_pull_request_template": false
    },
    "ecosystem": {
      "packages": [
        {
          "name": "nostr-bray",
          "exists": true,
          "license": "MIT",
          "keywords": [
            "nostr",
            "mcp",
            "trust",
            "web-of-trust",
            "identity",
            "verification",
            "signet",
            "dominion",
            "encrypted",
            "access-control",
            "privacy",
            "lightning",
            "nip-46",
            "nip-17",
            "nip-44",
            "nsec-tree",
            "ring-signatures",
            "attestations",
            "ai-agents",
            "dispatch"
          ],
          "ecosystem": "npm",
          "matches_repo": true,
          "registry_url": "https://www.npmjs.com/package/nostr-bray",
          "is_deprecated": false,
          "latest_version": "1.41.0",
          "repository_url": "https://github.com/forgesworn/bray",
          "versions_count": 69,
          "total_downloads": null,
          "dependents_count": null,
          "deprecation_note": null,
          "maintainers_count": 1,
          "monthly_downloads": 3108,
          "first_published_at": "2026-03-24T22:12:18.913000Z",
          "latest_published_at": "2026-07-18T09:06:31.313000Z",
          "latest_version_yanked": null,
          "days_since_latest_publish": 5
        }
      ]
    },
    "popularity": {
      "forks": 0,
      "stars": 0,
      "watchers": 0,
      "fork_history": {
        "days": [],
        "complete": true,
        "collected": 0,
        "total_forks": 0
      },
      "star_history": {
        "days": [],
        "complete": true,
        "collected": 0,
        "total_stars": 0,
        "collected_at": null
      },
      "open_issues_and_prs": 3
    },
    "ai_readiness": {
      "has_nix": false,
      "example_dirs": [
        "demos",
        "examples"
      ],
      "has_llms_txt": true,
      "has_dockerfile": true,
      "has_mcp_signal": true,
      "bootstrap_files": [],
      "api_schema_files": [],
      "has_devcontainer": false,
      "typecheck_configs": [
        "tsconfig.json"
      ],
      "toolchain_manifests": [],
      "largest_source_bytes": 178629,
      "source_files_sampled": 249,
      "oversized_source_files": 2,
      "agent_instruction_files": [
        ".cursorrules",
        "AGENTS.md",
        "CLAUDE.md"
      ],
      "agent_instruction_max_bytes": 7816
    },
    "dependencies": {
      "manifests": [
        "package.json"
      ],
      "advisories": {
        "error": null,
        "scope": "repository_graph",
        "source": "osv",
        "findings": [
          {
            "name": "@hono/node-server",
            "direct": false,
            "version": "1.19.14",
            "severity": "moderate",
            "ecosystem": "npm",
            "cvss_score": 5.9,
            "advisory_ids": [
              "GHSA-frvp-7c67-39w9"
            ],
            "fixed_version": "2.0.5",
            "advisory_count": 1,
            "oldest_advisory_days": 1
          },
          {
            "name": "hono",
            "direct": false,
            "version": "4.12.26",
            "severity": "moderate",
            "ecosystem": "npm",
            "cvss_score": 6.5,
            "advisory_ids": [
              "GHSA-hvrm-45r6-mjfj",
              "GHSA-w62v-xxxg-mg59",
              "GHSA-xgm2-5f3f-mvvc"
            ],
            "fixed_version": "4.12.27",
            "advisory_count": 3,
            "oldest_advisory_days": 1
          }
        ],
        "collected": true,
        "malicious": [],
        "truncated": false,
        "by_severity": {
          "moderate": 2
        },
        "advisory_count": 4,
        "affected_count": 2,
        "assessed_count": 220,
        "malicious_count": 0,
        "assessed_package": null,
        "unassessed_count": 0,
        "direct_affected_count": 0
      },
      "ecosystems": [
        "npm"
      ],
      "dependencies": [
        {
          "name": "@forgesworn/range-proof",
          "manifest": "package.json",
          "ecosystem": "npm",
          "version_constraint": "^2.0.1"
        },
        {
          "name": "@forgesworn/ring-sig",
          "manifest": "package.json",
          "ecosystem": "npm",
          "version_constraint": "^3.0.0"
        },
        {
          "name": "@forgesworn/shamir-words",
          "manifest": "package.json",
          "ecosystem": "npm",
          "version_constraint": "^1.0.4"
        },
        {
          "name": "@modelcontextprotocol/ext-apps",
          "manifest": "package.json",
          "ecosystem": "npm",
          "version_constraint": "^1.3.1"
        },
        {
          "name": "@modelcontextprotocol/sdk",
          "manifest": "package.json",
          "ecosystem": "npm",
          "version_constraint": "^1.27.1"
        },
        {
          "name": "canary-kit",
          "manifest": "package.json",
          "ecosystem": "npm",
          "version_constraint": "^2.6.2"
        },
        {
          "name": "dominion-protocol",
          "manifest": "package.json",
          "ecosystem": "npm",
          "version_constraint": "^1.0.0"
        },
        {
          "name": "nostr-attestations",
          "manifest": "package.json",
          "ecosystem": "npm",
          "version_constraint": "^2.5.4"
        },
        {
          "name": "nostr-tools",
          "manifest": "package.json",
          "ecosystem": "npm",
          "version_constraint": "^2.23.3"
        },
        {
          "name": "nostr-veil",
          "manifest": "package.json",
          "ecosystem": "npm",
          "version_constraint": "^0.30.0"
        },
        {
          "name": "nsec-tree",
          "manifest": "package.json",
          "ecosystem": "npm",
          "version_constraint": "^1.4.2"
        },
        {
          "name": "signet-protocol",
          "manifest": "package.json",
          "ecosystem": "npm",
          "version_constraint": "^1.1.0"
        },
        {
          "name": "socks-proxy-agent",
          "manifest": "package.json",
          "ecosystem": "npm",
          "version_constraint": "^10.0.0"
        },
        {
          "name": "spoken-token",
          "manifest": "package.json",
          "ecosystem": "npm",
          "version_constraint": "^2.0.3"
        },
        {
          "name": "undici",
          "manifest": "package.json",
          "ecosystem": "npm",
          "version_constraint": "^7.25.0"
        },
        {
          "name": "ws",
          "manifest": "package.json",
          "ecosystem": "npm",
          "version_constraint": "^8.20.0"
        },
        {
          "name": "zod",
          "manifest": "package.json",
          "ecosystem": "npm",
          "version_constraint": "^4.3.6"
        }
      ],
      "all_dependencies": {
        "error": null,
        "source": "github-sbom",
        "packages": [
          {
            "name": "@forgesworn/range-proof",
            "direct": true,
            "version": "2.0.3",
            "ecosystem": "npm"
          },
          {
            "name": "@forgesworn/ring-sig",
            "direct": true,
            "version": "3.0.3",
            "ecosystem": "npm"
          },
          {
            "name": "@forgesworn/shamir-words",
            "direct": true,
            "version": "1.1.0",
            "ecosystem": "npm"
          },
          {
            "name": "@modelcontextprotocol/ext-apps",
            "direct": true,
            "version": "1.7.4",
            "ecosystem": "npm"
          },
          {
            "name": "@modelcontextprotocol/sdk",
            "direct": true,
            "version": "1.29.0",
            "ecosystem": "npm"
          },
          {
            "name": "canary-kit",
            "direct": true,
            "version": "2.11.0",
            "ecosystem": "npm"
          },
          {
            "name": "dominion-protocol",
            "direct": true,
            "version": "1.1.1",
            "ecosystem": "npm"
          },
          {
            "name": "nostr-attestations",
            "direct": true,
            "version": "2.5.5",
            "ecosystem": "npm"
          },
          {
            "name": "nostr-tools",
            "direct": true,
            "version": "2.24.0",
            "ecosystem": "npm"
          },
          {
            "name": "nostr-veil",
            "direct": true,
            "version": "0.30.0",
            "ecosystem": "npm"
          },
          {
            "name": "nsec-tree",
            "direct": true,
            "version": "1.5.1",
            "ecosystem": "npm"
          },
          {
            "name": "signet-protocol",
            "direct": true,
            "version": "1.10.0",
            "ecosystem": "npm"
          },
          {
            "name": "socks-proxy-agent",
            "direct": true,
            "version": "10.1.0",
            "ecosystem": "npm"
          },
          {
            "name": "spoken-token",
            "direct": true,
            "version": "2.1.0",
            "ecosystem": "npm"
          },
          {
            "name": "undici",
            "direct": true,
            "version": "7.28.0",
            "ecosystem": "npm"
          },
          {
            "name": "ws",
            "direct": true,
            "version": "8.21.1",
            "ecosystem": "npm"
          },
          {
            "name": "zod",
            "direct": true,
            "version": "4.4.3",
            "ecosystem": "npm"
          },
          {
            "name": "@babel/helper-string-parser",
            "direct": false,
            "version": "7.27.1",
            "ecosystem": "npm"
          },
          {
            "name": "@babel/helper-validator-identifier",
            "direct": false,
            "version": "7.28.5",
            "ecosystem": "npm"
          },
          {
            "name": "@babel/parser",
            "direct": false,
            "version": "7.29.2",
            "ecosystem": "npm"
          },
          {
            "name": "@babel/types",
            "direct": false,
            "version": "7.29.0",
            "ecosystem": "npm"
          },
          {
            "name": "@bcoe/v8-coverage",
            "direct": false,
            "version": "1.0.2",
            "ecosystem": "npm"
          },
          {
            "name": "@emnapi/core",
            "direct": false,
            "version": "1.11.1",
            "ecosystem": "npm"
          },
          {
            "name": "@emnapi/runtime",
            "direct": false,
            "version": "1.11.1",
            "ecosystem": "npm"
          },
          {
            "name": "@emnapi/wasi-threads",
            "direct": false,
            "version": "1.2.2",
            "ecosystem": "npm"
          },
          {
            "name": "@forgesworn/shamir-core",
            "direct": false,
            "version": "1.0.1",
            "ecosystem": "npm"
          },
          {
            "name": "@hono/node-server",
            "direct": false,
            "version": "1.19.14",
            "ecosystem": "npm"
          },
          {
            "name": "@jridgewell/resolve-uri",
            "direct": false,
            "version": "3.1.2",
            "ecosystem": "npm"
          },
          {
            "name": "@jridgewell/sourcemap-codec",
            "direct": false,
            "version": "1.5.5",
            "ecosystem": "npm"
          },
          {
            "name": "@jridgewell/trace-mapping",
            "direct": false,
            "version": "0.3.31",
            "ecosystem": "npm"
          },
          {
            "name": "@napi-rs/wasm-runtime",
            "direct": false,
            "version": "1.1.6",
            "ecosystem": "npm"
          },
          {
            "name": "@noble/ciphers",
            "direct": false,
            "version": "2.1.1",
            "ecosystem": "npm"
          },
          {
            "name": "@noble/curves",
            "direct": false,
            "version": "2.0.1",
            "ecosystem": "npm"
          },
          {
            "name": "@noble/curves",
            "direct": false,
            "version": "2.2.0",
            "ecosystem": "npm"
          },
          {
            "name": "@noble/hashes",
            "direct": false,
            "version": "2.0.1",
            "ecosystem": "npm"
          },
          {
            "name": "@noble/hashes",
            "direct": false,
            "version": "2.2.0",
            "ecosystem": "npm"
          },
          {
            "name": "@oxc-project/types",
            "direct": false,
            "version": "0.138.0",
            "ecosystem": "npm"
          },
          {
            "name": "@rolldown/binding-android-arm64",
            "direct": false,
            "version": "1.1.4",
            "ecosystem": "npm"
          },
          {
            "name": "@rolldown/binding-darwin-arm64",
            "direct": false,
            "version": "1.1.4",
            "ecosystem": "npm"
          },
          {
            "name": "@rolldown/binding-darwin-x64",
            "direct": false,
            "version": "1.1.4",
            "ecosystem": "npm"
          },
          {
            "name": "@rolldown/binding-freebsd-x64",
            "direct": false,
            "version": "1.1.4",
            "ecosystem": "npm"
          },
          {
            "name": "@rolldown/binding-linux-arm-gnueabihf",
            "direct": false,
            "version": "1.1.4",
            "ecosystem": "npm"
          },
          {
            "name": "@rolldown/binding-linux-arm64-gnu",
            "direct": false,
            "version": "1.1.4",
            "ecosystem": "npm"
          },
          {
            "name": "@rolldown/binding-linux-arm64-musl",
            "direct": false,
            "version": "1.1.4",
            "ecosystem": "npm"
          },
          {
            "name": "@rolldown/binding-linux-ppc64-gnu",
            "direct": false,
            "version": "1.1.4",
            "ecosystem": "npm"
          },
          {
            "name": "@rolldown/binding-linux-s390x-gnu",
            "direct": false,
            "version": "1.1.4",
            "ecosystem": "npm"
          },
          {
            "name": "@rolldown/binding-linux-x64-gnu",
            "direct": false,
            "version": "1.1.4",
            "ecosystem": "npm"
          },
          {
            "name": "@rolldown/binding-linux-x64-musl",
            "direct": false,
            "version": "1.1.4",
            "ecosystem": "npm"
          },
          {
            "name": "@rolldown/binding-openharmony-arm64",
            "direct": false,
            "version": "1.1.4",
            "ecosystem": "npm"
          },
          {
            "name": "@rolldown/binding-wasm32-wasi",
            "direct": false,
            "version": "1.1.4",
            "ecosystem": "npm"
          },
          {
            "name": "@rolldown/binding-win32-arm64-msvc",
            "direct": false,
            "version": "1.1.4",
            "ecosystem": "npm"
          },
          {
            "name": "@rolldown/binding-win32-x64-msvc",
            "direct": false,
            "version": "1.1.4",
            "ecosystem": "npm"
          },
          {
            "name": "@rolldown/pluginutils",
            "direct": false,
            "version": "1.0.1",
            "ecosystem": "npm"
          },
          {
            "name": "@scure/base",
            "direct": false,
            "version": "2.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "@scure/bip32",
            "direct": false,
            "version": "2.0.1",
            "ecosystem": "npm"
          },
          {
            "name": "@scure/bip39",
            "direct": false,
            "version": "2.0.1",
            "ecosystem": "npm"
          },
          {
            "name": "@standard-schema/spec",
            "direct": false,
            "version": "1.1.0",
            "ecosystem": "npm"
          },
          {
            "name": "@tybys/wasm-util",
            "direct": false,
            "version": "0.10.3",
            "ecosystem": "npm"
          },
          {
            "name": "@types/chai",
            "direct": false,
            "version": "5.2.3",
            "ecosystem": "npm"
          },
          {
            "name": "@types/deep-eql",
            "direct": false,
            "version": "4.0.2",
            "ecosystem": "npm"
          },
          {
            "name": "@types/estree",
            "direct": false,
            "version": "1.0.8",
            "ecosystem": "npm"
          },
          {
            "name": "@types/node",
            "direct": false,
            "version": "25.9.5",
            "ecosystem": "npm"
          },
          {
            "name": "@types/ws",
            "direct": false,
            "version": "8.18.1",
            "ecosystem": "npm"
          },
          {
            "name": "@vitest/coverage-v8",
            "direct": false,
            "version": "4.1.10",
            "ecosystem": "npm"
          },
          {
            "name": "@vitest/expect",
            "direct": false,
            "version": "4.1.10",
            "ecosystem": "npm"
          },
          {
            "name": "@vitest/mocker",
            "direct": false,
            "version": "4.1.10",
            "ecosystem": "npm"
          },
          {
            "name": "@vitest/pretty-format",
            "direct": false,
            "version": "4.1.10",
            "ecosystem": "npm"
          },
          {
            "name": "@vitest/runner",
            "direct": false,
            "version": "4.1.10",
            "ecosystem": "npm"
          },
          {
            "name": "@vitest/snapshot",
            "direct": false,
            "version": "4.1.10",
            "ecosystem": "npm"
          },
          {
            "name": "@vitest/spy",
            "direct": false,
            "version": "4.1.10",
            "ecosystem": "npm"
          },
          {
            "name": "@vitest/utils",
            "direct": false,
            "version": "4.1.10",
            "ecosystem": "npm"
          },
          {
            "name": "accepts",
            "direct": false,
            "version": "2.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "agent-base",
            "direct": false,
            "version": "9.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "ajv",
            "direct": false,
            "version": "8.18.0",
            "ecosystem": "npm"
          },
          {
            "name": "ajv-formats",
            "direct": false,
            "version": "3.0.1",
            "ecosystem": "npm"
          },
          {
            "name": "assertion-error",
            "direct": false,
            "version": "2.0.1",
            "ecosystem": "npm"
          },
          {
            "name": "ast-v8-to-istanbul",
            "direct": false,
            "version": "1.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "body-parser",
            "direct": false,
            "version": "2.3.0",
            "ecosystem": "npm"
          },
          {
            "name": "bytes",
            "direct": false,
            "version": "3.1.2",
            "ecosystem": "npm"
          },
          {
            "name": "call-bind-apply-helpers",
            "direct": false,
            "version": "1.0.2",
            "ecosystem": "npm"
          },
          {
            "name": "call-bound",
            "direct": false,
            "version": "1.0.4",
            "ecosystem": "npm"
          },
          {
            "name": "chai",
            "direct": false,
            "version": "6.2.2",
            "ecosystem": "npm"
          },
          {
            "name": "content-disposition",
            "direct": false,
            "version": "1.0.1",
            "ecosystem": "npm"
          },
          {
            "name": "content-type",
            "direct": false,
            "version": "1.0.5",
            "ecosystem": "npm"
          },
          {
            "name": "content-type",
            "direct": false,
            "version": "2.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "convert-source-map",
            "direct": false,
            "version": "2.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "cookie",
            "direct": false,
            "version": "0.7.2",
            "ecosystem": "npm"
          },
          {
            "name": "cookie-signature",
            "direct": false,
            "version": "1.2.2",
            "ecosystem": "npm"
          },
          {
            "name": "cors",
            "direct": false,
            "version": "2.8.6",
            "ecosystem": "npm"
          },
          {
            "name": "cross-spawn",
            "direct": false,
            "version": "7.0.6",
            "ecosystem": "npm"
          },
          {
            "name": "debug",
            "direct": false,
            "version": "4.4.3",
            "ecosystem": "npm"
          },
          {
            "name": "depd",
            "direct": false,
            "version": "2.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "detect-libc",
            "direct": false,
            "version": "2.1.2",
            "ecosystem": "npm"
          },
          {
            "name": "dunder-proto",
            "direct": false,
            "version": "1.0.1",
            "ecosystem": "npm"
          },
          {
            "name": "ee-first",
            "direct": false,
            "version": "1.1.1",
            "ecosystem": "npm"
          },
          {
            "name": "encodeurl",
            "direct": false,
            "version": "2.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "es-define-property",
            "direct": false,
            "version": "1.0.1",
            "ecosystem": "npm"
          },
          {
            "name": "es-errors",
            "direct": false,
            "version": "1.3.0",
            "ecosystem": "npm"
          },
          {
            "name": "es-module-lexer",
            "direct": false,
            "version": "2.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "es-object-atoms",
            "direct": false,
            "version": "1.1.1",
            "ecosystem": "npm"
          },
          {
            "name": "escape-html",
            "direct": false,
            "version": "1.0.3",
            "ecosystem": "npm"
          },
          {
            "name": "estree-walker",
            "direct": false,
            "version": "3.0.3",
            "ecosystem": "npm"
          },
          {
            "name": "etag",
            "direct": false,
            "version": "1.8.1",
            "ecosystem": "npm"
          },
          {
            "name": "eventsource",
            "direct": false,
            "version": "3.0.7",
            "ecosystem": "npm"
          },
          {
            "name": "eventsource-parser",
            "direct": false,
            "version": "3.0.6",
            "ecosystem": "npm"
          },
          {
            "name": "expect-type",
            "direct": false,
            "version": "1.3.0",
            "ecosystem": "npm"
          },
          {
            "name": "express",
            "direct": false,
            "version": "5.2.1",
            "ecosystem": "npm"
          },
          {
            "name": "express-rate-limit",
            "direct": false,
            "version": "8.5.1",
            "ecosystem": "npm"
          },
          {
            "name": "fast-deep-equal",
            "direct": false,
            "version": "3.1.3",
            "ecosystem": "npm"
          },
          {
            "name": "fast-uri",
            "direct": false,
            "version": "3.1.4",
            "ecosystem": "npm"
          },
          {
            "name": "fdir",
            "direct": false,
            "version": "6.5.0",
            "ecosystem": "npm"
          },
          {
            "name": "finalhandler",
            "direct": false,
            "version": "2.1.1",
            "ecosystem": "npm"
          },
          {
            "name": "forwarded",
            "direct": false,
            "version": "0.2.0",
            "ecosystem": "npm"
          },
          {
            "name": "fresh",
            "direct": false,
            "version": "2.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "fsevents",
            "direct": false,
            "version": "2.3.3",
            "ecosystem": "npm"
          },
          {
            "name": "function-bind",
            "direct": false,
            "version": "1.1.2",
            "ecosystem": "npm"
          },
          {
            "name": "get-intrinsic",
            "direct": false,
            "version": "1.3.0",
            "ecosystem": "npm"
          },
          {
            "name": "get-proto",
            "direct": false,
            "version": "1.0.1",
            "ecosystem": "npm"
          },
          {
            "name": "gopd",
            "direct": false,
            "version": "1.2.0",
            "ecosystem": "npm"
          },
          {
            "name": "has-flag",
            "direct": false,
            "version": "4.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "has-symbols",
            "direct": false,
            "version": "1.1.0",
            "ecosystem": "npm"
          },
          {
            "name": "hasown",
            "direct": false,
            "version": "2.0.2",
            "ecosystem": "npm"
          },
          {
            "name": "hono",
            "direct": false,
            "version": "4.12.26",
            "ecosystem": "npm"
          },
          {
            "name": "html-escaper",
            "direct": false,
            "version": "2.0.2",
            "ecosystem": "npm"
          },
          {
            "name": "http-errors",
            "direct": false,
            "version": "2.0.1",
            "ecosystem": "npm"
          },
          {
            "name": "iconv-lite",
            "direct": false,
            "version": "0.7.2",
            "ecosystem": "npm"
          },
          {
            "name": "inherits",
            "direct": false,
            "version": "2.0.4",
            "ecosystem": "npm"
          },
          {
            "name": "ip-address",
            "direct": false,
            "version": "10.2.0",
            "ecosystem": "npm"
          },
          {
            "name": "ipaddr.js",
            "direct": false,
            "version": "1.9.1",
            "ecosystem": "npm"
          },
          {
            "name": "is-promise",
            "direct": false,
            "version": "4.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "isexe",
            "direct": false,
            "version": "2.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "istanbul-lib-coverage",
            "direct": false,
            "version": "3.2.2",
            "ecosystem": "npm"
          },
          {
            "name": "istanbul-lib-report",
            "direct": false,
            "version": "3.0.1",
            "ecosystem": "npm"
          },
          {
            "name": "istanbul-reports",
            "direct": false,
            "version": "3.2.0",
            "ecosystem": "npm"
          },
          {
            "name": "jose",
            "direct": false,
            "version": "6.2.2",
            "ecosystem": "npm"
          },
          {
            "name": "js-tokens",
            "direct": false,
            "version": "10.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "json-schema-traverse",
            "direct": false,
            "version": "1.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "json-schema-typed",
            "direct": false,
            "version": "8.0.2",
            "ecosystem": "npm"
          },
          {
            "name": "jurisdiction-kit",
            "direct": false,
            "version": "1.0.1",
            "ecosystem": "npm"
          },
          {
            "name": "lightningcss",
            "direct": false,
            "version": "1.32.0",
            "ecosystem": "npm"
          },
          {
            "name": "lightningcss-android-arm64",
            "direct": false,
            "version": "1.32.0",
            "ecosystem": "npm"
          },
          {
            "name": "lightningcss-darwin-arm64",
            "direct": false,
            "version": "1.32.0",
            "ecosystem": "npm"
          },
          {
            "name": "lightningcss-darwin-x64",
            "direct": false,
            "version": "1.32.0",
            "ecosystem": "npm"
          },
          {
            "name": "lightningcss-freebsd-x64",
            "direct": false,
            "version": "1.32.0",
            "ecosystem": "npm"
          },
          {
            "name": "lightningcss-linux-arm-gnueabihf",
            "direct": false,
            "version": "1.32.0",
            "ecosystem": "npm"
          },
          {
            "name": "lightningcss-linux-arm64-gnu",
            "direct": false,
            "version": "1.32.0",
            "ecosystem": "npm"
          },
          {
            "name": "lightningcss-linux-arm64-musl",
            "direct": false,
            "version": "1.32.0",
            "ecosystem": "npm"
          },
          {
            "name": "lightningcss-linux-x64-gnu",
            "direct": false,
            "version": "1.32.0",
            "ecosystem": "npm"
          },
          {
            "name": "lightningcss-linux-x64-musl",
            "direct": false,
            "version": "1.32.0",
            "ecosystem": "npm"
          },
          {
            "name": "lightningcss-win32-arm64-msvc",
            "direct": false,
            "version": "1.32.0",
            "ecosystem": "npm"
          },
          {
            "name": "lightningcss-win32-x64-msvc",
            "direct": false,
            "version": "1.32.0",
            "ecosystem": "npm"
          },
          {
            "name": "magic-string",
            "direct": false,
            "version": "0.30.21",
            "ecosystem": "npm"
          },
          {
            "name": "magicast",
            "direct": false,
            "version": "0.5.2",
            "ecosystem": "npm"
          },
          {
            "name": "make-dir",
            "direct": false,
            "version": "4.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "math-intrinsics",
            "direct": false,
            "version": "1.1.0",
            "ecosystem": "npm"
          },
          {
            "name": "media-typer",
            "direct": false,
            "version": "1.1.0",
            "ecosystem": "npm"
          },
          {
            "name": "merge-descriptors",
            "direct": false,
            "version": "2.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "mime-db",
            "direct": false,
            "version": "1.54.0",
            "ecosystem": "npm"
          },
          {
            "name": "mime-types",
            "direct": false,
            "version": "3.0.2",
            "ecosystem": "npm"
          },
          {
            "name": "ms",
            "direct": false,
            "version": "2.1.3",
            "ecosystem": "npm"
          },
          {
            "name": "nanoid",
            "direct": false,
            "version": "3.3.15",
            "ecosystem": "npm"
          },
          {
            "name": "negotiator",
            "direct": false,
            "version": "1.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "nostr-wasm",
            "direct": false,
            "version": "0.1.0",
            "ecosystem": "npm"
          },
          {
            "name": "object-assign",
            "direct": false,
            "version": "4.1.1",
            "ecosystem": "npm"
          },
          {
            "name": "object-inspect",
            "direct": false,
            "version": "1.13.4",
            "ecosystem": "npm"
          },
          {
            "name": "obug",
            "direct": false,
            "version": "2.1.1",
            "ecosystem": "npm"
          },
          {
            "name": "on-finished",
            "direct": false,
            "version": "2.4.1",
            "ecosystem": "npm"
          },
          {
            "name": "once",
            "direct": false,
            "version": "1.4.0",
            "ecosystem": "npm"
          },
          {
            "name": "parseurl",
            "direct": false,
            "version": "1.3.3",
            "ecosystem": "npm"
          },
          {
            "name": "path-key",
            "direct": false,
            "version": "3.1.1",
            "ecosystem": "npm"
          },
          {
            "name": "path-to-regexp",
            "direct": false,
            "version": "8.4.1",
            "ecosystem": "npm"
          },
          {
            "name": "pathe",
            "direct": false,
            "version": "2.0.3",
            "ecosystem": "npm"
          },
          {
            "name": "picocolors",
            "direct": false,
            "version": "1.1.1",
            "ecosystem": "npm"
          },
          {
            "name": "picomatch",
            "direct": false,
            "version": "4.0.5",
            "ecosystem": "npm"
          },
          {
            "name": "pkce-challenge",
            "direct": false,
            "version": "5.0.1",
            "ecosystem": "npm"
          },
          {
            "name": "postcss",
            "direct": false,
            "version": "8.5.16",
            "ecosystem": "npm"
          },
          {
            "name": "proxy-addr",
            "direct": false,
            "version": "2.0.7",
            "ecosystem": "npm"
          },
          {
            "name": "qs",
            "direct": false,
            "version": "6.15.2",
            "ecosystem": "npm"
          },
          {
            "name": "range-parser",
            "direct": false,
            "version": "1.2.1",
            "ecosystem": "npm"
          },
          {
            "name": "raw-body",
            "direct": false,
            "version": "3.0.2",
            "ecosystem": "npm"
          },
          {
            "name": "require-from-string",
            "direct": false,
            "version": "2.0.2",
            "ecosystem": "npm"
          },
          {
            "name": "rolldown",
            "direct": false,
            "version": "1.1.4",
            "ecosystem": "npm"
          },
          {
            "name": "router",
            "direct": false,
            "version": "2.2.0",
            "ecosystem": "npm"
          },
          {
            "name": "safer-buffer",
            "direct": false,
            "version": "2.1.2",
            "ecosystem": "npm"
          },
          {
            "name": "semver",
            "direct": false,
            "version": "7.7.4",
            "ecosystem": "npm"
          },
          {
            "name": "send",
            "direct": false,
            "version": "1.2.1",
            "ecosystem": "npm"
          },
          {
            "name": "serve-static",
            "direct": false,
            "version": "2.2.1",
            "ecosystem": "npm"
          },
          {
            "name": "setprototypeof",
            "direct": false,
            "version": "1.2.0",
            "ecosystem": "npm"
          },
          {
            "name": "shebang-command",
            "direct": false,
            "version": "2.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "shebang-regex",
            "direct": false,
            "version": "3.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "side-channel",
            "direct": false,
            "version": "1.1.0",
            "ecosystem": "npm"
          },
          {
            "name": "side-channel-list",
            "direct": false,
            "version": "1.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "side-channel-map",
            "direct": false,
            "version": "1.0.1",
            "ecosystem": "npm"
          },
          {
            "name": "side-channel-weakmap",
            "direct": false,
            "version": "1.0.2",
            "ecosystem": "npm"
          },
          {
            "name": "siginfo",
            "direct": false,
            "version": "2.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "smart-buffer",
            "direct": false,
            "version": "4.2.0",
            "ecosystem": "npm"
          },
          {
            "name": "socks",
            "direct": false,
            "version": "2.8.7",
            "ecosystem": "npm"
          },
          {
            "name": "source-map-js",
            "direct": false,
            "version": "1.2.1",
            "ecosystem": "npm"
          },
          {
            "name": "stackback",
            "direct": false,
            "version": "0.0.2",
            "ecosystem": "npm"
          },
          {
            "name": "statuses",
            "direct": false,
            "version": "2.0.2",
            "ecosystem": "npm"
          },
          {
            "name": "std-env",
            "direct": false,
            "version": "4.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "supports-color",
            "direct": false,
            "version": "7.2.0",
            "ecosystem": "npm"
          },
          {
            "name": "tinybench",
            "direct": false,
            "version": "2.9.0",
            "ecosystem": "npm"
          },
          {
            "name": "tinyexec",
            "direct": false,
            "version": "1.0.4",
            "ecosystem": "npm"
          },
          {
            "name": "tinyglobby",
            "direct": false,
            "version": "0.2.17",
            "ecosystem": "npm"
          },
          {
            "name": "tinyrainbow",
            "direct": false,
            "version": "3.1.0",
            "ecosystem": "npm"
          },
          {
            "name": "toidentifier",
            "direct": false,
            "version": "1.0.1",
            "ecosystem": "npm"
          },
          {
            "name": "tslib",
            "direct": false,
            "version": "2.8.1",
            "ecosystem": "npm"
          },
          {
            "name": "type-is",
            "direct": false,
            "version": "2.1.0",
            "ecosystem": "npm"
          },
          {
            "name": "typescript",
            "direct": false,
            "version": "6.0.3",
            "ecosystem": "npm"
          },
          {
            "name": "undici-types",
            "direct": false,
            "version": "7.24.6",
            "ecosystem": "npm"
          },
          {
            "name": "unpipe",
            "direct": false,
            "version": "1.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "vary",
            "direct": false,
            "version": "1.1.2",
            "ecosystem": "npm"
          },
          {
            "name": "vite",
            "direct": false,
            "version": "8.1.3",
            "ecosystem": "npm"
          },
          {
            "name": "vitest",
            "direct": false,
            "version": "4.1.10",
            "ecosystem": "npm"
          },
          {
            "name": "which",
            "direct": false,
            "version": "2.0.2",
            "ecosystem": "npm"
          },
          {
            "name": "why-is-node-running",
            "direct": false,
            "version": "2.3.0",
            "ecosystem": "npm"
          },
          {
            "name": "wrappy",
            "direct": false,
            "version": "1.0.2",
            "ecosystem": "npm"
          },
          {
            "name": "yaml",
            "direct": false,
            "version": "2.9.0",
            "ecosystem": "npm"
          },
          {
            "name": "zod-to-json-schema",
            "direct": false,
            "version": "3.25.2",
            "ecosystem": "npm"
          }
        ],
        "collected": true,
        "truncated": false,
        "total_count": 220,
        "direct_count": 17,
        "indirect_count": 203
      }
    },
    "maintainership": {
      "issues": {
        "open_prs": 3,
        "merged_prs": 46,
        "open_issues": 0,
        "closed_ratio": 1,
        "closed_issues": 2,
        "closed_unmerged_prs": 9
      },
      "bus_factor": 1,
      "bot_contributors": 2,
      "top_contributors": [
        {
          "type": "User",
          "login": "TheCryptoDonkey",
          "commits": 91,
          "avatar_url": "https://avatars.githubusercontent.com/u/147930957?v=4"
        }
      ],
      "contributors_sampled": 1,
      "top_contributor_share": 1
    },
    "quality_signals": {
      "has_ci": true,
      "has_tests": true,
      "ci_workflows": [
        "auto-release.yml",
        "ci.yml",
        "dependabot-auto-merge.yml",
        "pages.yml",
        "release.yml"
      ],
      "has_docs_dir": true,
      "linter_configs": [],
      "has_editorconfig": false,
      "has_linter_config": false,
      "has_precommit_config": false
    },
    "security_signals": {
      "lockfiles": [
        "package-lock.json"
      ],
      "scorecard": {
        "checks": [
          {
            "name": "Binary-Artifacts",
            "score": 10,
            "reason": "no binaries found in the repo",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#binary-artifacts"
          },
          {
            "name": "Branch-Protection",
            "score": 0,
            "reason": "branch protection not enabled on development/release branches",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#branch-protection"
          },
          {
            "name": "CI-Tests",
            "score": 10,
            "reason": "5 out of 5 merged PRs checked by a CI test -- score normalized to 10",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#ci-tests"
          },
          {
            "name": "CII-Best-Practices",
            "score": 0,
            "reason": "no effort to earn an OpenSSF best practices badge detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#cii-best-practices"
          },
          {
            "name": "Code-Review",
            "score": 0,
            "reason": "Found 0/25 approved changesets -- score normalized to 0",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#code-review"
          },
          {
            "name": "Contributors",
            "score": 3,
            "reason": "project has 1 contributing companies or organizations -- score normalized to 3",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#contributors"
          },
          {
            "name": "Dangerous-Workflow",
            "score": 10,
            "reason": "no dangerous workflow patterns detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dangerous-workflow"
          },
          {
            "name": "Dependency-Update-Tool",
            "score": 10,
            "reason": "update tool detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dependency-update-tool"
          },
          {
            "name": "Fuzzing",
            "score": 0,
            "reason": "project is not fuzzed",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#fuzzing"
          },
          {
            "name": "License",
            "score": 10,
            "reason": "license file detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#license"
          },
          {
            "name": "Maintained",
            "score": 10,
            "reason": "30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#maintained"
          },
          {
            "name": "Packaging",
            "score": null,
            "reason": "packaging workflow not detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#packaging"
          },
          {
            "name": "Pinned-Dependencies",
            "score": 4,
            "reason": "dependency not pinned by hash detected -- score normalized to 4",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#pinned-dependencies"
          },
          {
            "name": "SAST",
            "score": 0,
            "reason": "SAST tool is not run on all commits -- score normalized to 0",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#sast"
          },
          {
            "name": "Security-Policy",
            "score": 10,
            "reason": "security policy file detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#security-policy"
          },
          {
            "name": "Signed-Releases",
            "score": 0,
            "reason": "Project has not signed or included provenance with any releases.",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#signed-releases"
          },
          {
            "name": "Token-Permissions",
            "score": 0,
            "reason": "detected GitHub workflow tokens with excessive permissions",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#token-permissions"
          },
          {
            "name": "Vulnerabilities",
            "score": 6,
            "reason": "4 existing vulnerabilities detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#vulnerabilities"
          }
        ],
        "commit": "ed89ff5682b48836a44e3aa47f1e789acd7e43fc",
        "ran_at": "2026-07-23T16:35:36Z",
        "aggregate_score": 5,
        "scorecard_version": "v5.5.0"
      },
      "has_codeql_workflow": false,
      "has_security_policy": true,
      "has_dependabot_config": true
    },
    "contribution_flow": {
      "collected": true,
      "ci_last_run_at": "2026-07-22T14:02:56Z",
      "oldest_open_prs": [
        {
          "number": 48,
          "created_at": "2026-07-01T17:57:52Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 58,
          "created_at": "2026-07-20T17:55:47Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 61,
          "created_at": "2026-07-22T03:11:24Z",
          "last_comment_at": null,
          "last_comment_author": null
        }
      ],
      "last_merged_pr_at": "2026-07-22T03:11:31Z",
      "ci_last_conclusion": "SUCCESS",
      "oldest_open_issues": []
    }
  },
  "config": {
    "disabled_metrics": [],
    "disabled_categories": [],
    "disabled_components": {}
  },
  "source": {
    "url": "https://github.com/forgesworn/bray",
    "host": "github.com",
    "name": "bray",
    "owner": "forgesworn"
  },
  "metrics": {
    "overall": {
      "key": "overall",
      "band": "moderate",
      "name": "Overall health",
      "note": null,
      "notes": [],
      "value": 64,
      "inputs": {
        "security": 60,
        "vitality": 82,
        "community": 39,
        "governance": 56,
        "engineering": 77
      },
      "components": []
    },
    "categories": [
      {
        "key": "vitality",
        "band": "good",
        "name": "Vitality",
        "value": 82,
        "weight": 0.22,
        "metrics": [
          {
            "key": "development_activity",
            "band": "good",
            "name": "Development activity",
            "note": null,
            "notes": [],
            "value": 76,
            "inputs": {
              "commits_last_year": 425,
              "human_commit_share": 0.5,
              "days_since_last_push": 1,
              "active_weeks_last_year": 18
            },
            "components": [
              {
                "key": "push_recency",
                "name": "Push recency",
                "detail": "last push 1 days ago",
                "points": 36,
                "status": "met",
                "details": [
                  {
                    "code": "push_recency",
                    "params": {
                      "days": 1
                    }
                  }
                ],
                "max_points": 36
              },
              {
                "key": "commit_cadence",
                "name": "Commit cadence",
                "detail": "18/52 weeks with commits",
                "points": 12.5,
                "status": "partial",
                "details": [
                  {
                    "code": "commit_cadence_weeks",
                    "params": {
                      "weeks": 18
                    }
                  }
                ],
                "max_points": 36
              },
              {
                "key": "commit_volume",
                "name": "Commit volume",
                "detail": "425 commits in the last year",
                "points": 18,
                "status": "met",
                "details": [
                  {
                    "code": "commits_last_year",
                    "params": {
                      "count": 425
                    }
                  }
                ],
                "max_points": 18
              },
              {
                "key": "openssf_scorecard_maintained",
                "name": "OpenSSF Scorecard: Maintained",
                "detail": "30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10",
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "release_discipline",
            "band": "excellent",
            "name": "Release discipline",
            "note": null,
            "notes": [],
            "value": 90,
            "inputs": {
              "releases_count": 67,
              "latest_release_tag": "v1.41.0",
              "releases_from_tags": false,
              "days_since_latest_release": 5,
              "mean_days_between_releases": 0.7
            },
            "components": [
              {
                "key": "ships_releases",
                "name": "Ships releases",
                "detail": "67 releases published",
                "points": 27,
                "status": "met",
                "details": [
                  {
                    "code": "releases_published",
                    "params": {
                      "count": 67
                    }
                  }
                ],
                "max_points": 27
              },
              {
                "key": "release_recency",
                "name": "Release recency",
                "detail": "latest release 5 days ago",
                "points": 36,
                "status": "met",
                "details": [
                  {
                    "code": "release_recency",
                    "params": {
                      "days": 5
                    }
                  }
                ],
                "max_points": 36
              },
              {
                "key": "release_cadence",
                "name": "Release cadence",
                "detail": "a release every ~0.7 days",
                "points": 27,
                "status": "met",
                "details": [
                  {
                    "code": "release_cadence",
                    "params": {
                      "gap": 0.7
                    }
                  }
                ],
                "max_points": 27
              },
              {
                "key": "openssf_scorecard_signed_releases",
                "name": "OpenSSF Scorecard: Signed-Releases",
                "detail": "Project has not signed or included provenance with any releases.",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "abandonment",
            "band": "excellent",
            "name": "Abandonment",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "cap": null,
              "state": "unverified",
              "guards": [],
              "signals": [],
              "red_flag": false,
              "multiplier_pct": 100,
              "declared_reason": null,
              "unverified_reason": "repository_too_young",
              "unanswered_open_prs": null,
              "unanswered_open_issues": null,
              "days_since_last_merged_pr": null,
              "days_since_last_human_commit": null,
              "days_since_last_human_commit_is_floor": false
            },
            "components": [
              {
                "key": "project_is_still_maintained",
                "name": "Project is still maintained",
                "detail": "maintenance record not established from the collected data",
                "points": 100,
                "status": "met",
                "details": [
                  {
                    "code": "abandonment_unverified",
                    "params": {}
                  }
                ],
                "max_points": 100
              }
            ]
          }
        ],
        "description": "Is the project alive — is code being written and are releases shipping?"
      },
      {
        "key": "community",
        "band": "at_risk",
        "name": "Community & Adoption",
        "value": 39,
        "weight": 0.18,
        "metrics": [
          {
            "key": "popularity",
            "band": "critical",
            "name": "Popularity & adoption",
            "note": null,
            "notes": [],
            "value": 1,
            "inputs": {
              "forks": 0,
              "stars": 0,
              "watchers": 0,
              "growth_state": "unverified",
              "growth_factor_pct": 100,
              "growth_unverified_reason": "no_history"
            },
            "components": [
              {
                "key": "stars",
                "name": "Stars",
                "detail": "0 stars",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "stars",
                    "params": {
                      "count": 0
                    }
                  }
                ],
                "max_points": 60
              },
              {
                "key": "forks",
                "name": "Forks",
                "detail": "0 forks",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "forks",
                    "params": {
                      "count": 0
                    }
                  }
                ],
                "max_points": 25
              },
              {
                "key": "watchers",
                "name": "Watchers",
                "detail": "0 watchers",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "watchers",
                    "params": {
                      "count": 0
                    }
                  }
                ],
                "max_points": 15
              }
            ]
          },
          {
            "key": "community_health",
            "band": "good",
            "name": "Community health",
            "note": null,
            "notes": [],
            "value": 70,
            "inputs": {
              "has_readme": true,
              "has_license": true,
              "has_contributing": true,
              "has_issue_template": false,
              "has_code_of_conduct": false,
              "has_pull_request_template": false
            },
            "components": [
              {
                "key": "readme",
                "name": "README",
                "detail": null,
                "points": 22.5,
                "status": "met",
                "details": [],
                "max_points": 22.5
              },
              {
                "key": "license",
                "name": "License",
                "detail": "recognized license (MIT)",
                "points": 22.5,
                "status": "met",
                "details": [
                  {
                    "code": "license_standard",
                    "params": {}
                  },
                  {
                    "code": "license_spdx",
                    "params": {
                      "spdx": "MIT"
                    }
                  }
                ],
                "max_points": 22.5
              },
              {
                "key": "contributing_guide",
                "name": "CONTRIBUTING guide",
                "detail": null,
                "points": 18,
                "status": "met",
                "details": [],
                "max_points": 18
              },
              {
                "key": "code_of_conduct",
                "name": "Code of conduct",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 13.5
              },
              {
                "key": "issue_template",
                "name": "Issue template",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.2
              },
              {
                "key": "pr_template",
                "name": "PR template",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 6.3
              }
            ]
          },
          {
            "key": "ecosystem_adoption",
            "band": "moderate",
            "name": "Ecosystem adoption (downloads)",
            "note": "Excluded from scoring (no data or not applicable): Registry dependents. Remaining weights renormalized.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "registry_dependents"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              }
            ],
            "value": 58,
            "inputs": {
              "packages": [
                "nostr-bray"
              ],
              "dependents": null,
              "ecosystems": "npm",
              "total_downloads": null,
              "monthly_downloads": 3108
            },
            "components": [
              {
                "key": "monthly_downloads",
                "name": "Monthly downloads",
                "detail": "3,108 downloads/month across npm",
                "points": 46.6,
                "status": "partial",
                "details": [
                  {
                    "code": "downloads_monthly",
                    "params": {
                      "count": 3108,
                      "ecosystems": "npm"
                    }
                  }
                ],
                "max_points": 80
              },
              {
                "key": "registry_dependents",
                "name": "Registry dependents",
                "detail": "not reported by this ecosystem",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "not_reported_by_this_ecosystem",
                    "params": {}
                  }
                ],
                "max_points": 20
              }
            ]
          }
        ],
        "description": "Does the project have users, downloads, attention, and a welcoming setup for contributors?"
      },
      {
        "key": "governance",
        "band": "moderate",
        "name": "Sustainability & Governance",
        "value": 56,
        "weight": 0.24,
        "metrics": [
          {
            "key": "maintainer_resilience",
            "band": "critical",
            "name": "Maintainer resilience (bus factor)",
            "note": null,
            "notes": [],
            "value": 13,
            "inputs": {
              "bus_factor": 1,
              "contributors_sampled": 1,
              "top_contributor_share": 1
            },
            "components": [
              {
                "key": "bus_factor",
                "name": "Bus factor",
                "detail": "1 contributor(s) cover half of all commits",
                "points": 9,
                "status": "partial",
                "details": [
                  {
                    "code": "bus_factor",
                    "params": {
                      "count": 1
                    }
                  }
                ],
                "max_points": 54
              },
              {
                "key": "commit_distribution",
                "name": "Commit distribution",
                "detail": "top contributor authored 100% of commits",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "top_contributor_share",
                    "params": {
                      "share": 100
                    }
                  }
                ],
                "max_points": 22.5
              },
              {
                "key": "contributor_breadth",
                "name": "Contributor breadth",
                "detail": "1 contributors",
                "points": 1.4,
                "status": "partial",
                "details": [
                  {
                    "code": "contributors_sampled",
                    "params": {
                      "count": 1
                    }
                  }
                ],
                "max_points": 13.5
              },
              {
                "key": "openssf_scorecard_contributors",
                "name": "OpenSSF Scorecard: Contributors",
                "detail": "project has 1 contributing companies or organizations -- score normalized to 3",
                "points": 3,
                "status": "partial",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "responsiveness",
            "band": "good",
            "name": "Issue & PR responsiveness",
            "note": null,
            "notes": [],
            "value": 79,
            "inputs": {
              "merged_prs": 46,
              "open_issues": 0,
              "closed_issues": 2,
              "issue_closed_ratio": 1,
              "closed_unmerged_prs": 9
            },
            "components": [
              {
                "key": "issue_resolution",
                "name": "Issue resolution",
                "detail": "100% of issues closed",
                "points": 46.8,
                "status": "met",
                "details": [
                  {
                    "code": "issues_closed_share",
                    "params": {
                      "share": 100
                    }
                  }
                ],
                "max_points": 46.75
              },
              {
                "key": "pr_acceptance",
                "name": "PR acceptance",
                "detail": "46/55 decided PRs merged",
                "points": 32,
                "status": "partial",
                "details": [
                  {
                    "code": "decided_prs_merged",
                    "params": {
                      "merged": 46,
                      "decided": 55
                    }
                  }
                ],
                "max_points": 38.25
              },
              {
                "key": "openssf_scorecard_code_review",
                "name": "OpenSSF Scorecard: Code-Review",
                "detail": "Found 0/25 approved changesets -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 15
              }
            ]
          },
          {
            "key": "stewardship",
            "band": "moderate",
            "name": "Ownership & stewardship",
            "note": null,
            "notes": [],
            "value": 50,
            "inputs": {
              "followers": 8,
              "owner_type": "Organization",
              "is_verified": null,
              "owner_login": "forgesworn",
              "public_repos": 56,
              "account_age_days": 127
            },
            "components": [
              {
                "key": "ownership_backing",
                "name": "Ownership backing",
                "detail": "organization-owned",
                "points": 30,
                "status": "met",
                "details": [
                  {
                    "code": "owner_organization",
                    "params": {}
                  }
                ],
                "max_points": 30
              },
              {
                "key": "verified_domain",
                "name": "Verified domain",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 20
              },
              {
                "key": "owner_reach",
                "name": "Owner reach",
                "detail": "8 followers of forgesworn",
                "points": 6.9,
                "status": "partial",
                "details": [
                  {
                    "code": "owner_followers",
                    "params": {
                      "count": 8,
                      "login": "forgesworn"
                    }
                  }
                ],
                "max_points": 25
              },
              {
                "key": "track_record",
                "name": "Track record",
                "detail": "56 public repos, account ~0 yr old",
                "points": 13.5,
                "status": "partial",
                "details": [
                  {
                    "code": "public_repos",
                    "params": {
                      "count": 56
                    }
                  },
                  {
                    "code": "account_age_years",
                    "params": {
                      "years": 0
                    }
                  }
                ],
                "max_points": 25
              }
            ]
          },
          {
            "key": "package_maintenance",
            "band": "excellent",
            "name": "Package maintenance",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "packages": [
                "nostr-bray"
              ],
              "ecosystems": "npm",
              "any_deprecated": false,
              "min_days_since_publish": 5
            },
            "components": [
              {
                "key": "published_resolvable",
                "name": "Published & resolvable",
                "detail": "1 package(s) on npm",
                "points": 25,
                "status": "met",
                "details": [
                  {
                    "code": "packages_published",
                    "params": {
                      "count": 1,
                      "ecosystems": "npm"
                    }
                  }
                ],
                "max_points": 25
              },
              {
                "key": "publish_recency",
                "name": "Publish recency",
                "detail": "latest publish 5 days ago",
                "points": 35,
                "status": "met",
                "details": [
                  {
                    "code": "publish_recency",
                    "params": {
                      "days": 5
                    }
                  }
                ],
                "max_points": 35
              },
              {
                "key": "version_history",
                "name": "Version history",
                "detail": "69 published versions",
                "points": 20,
                "status": "met",
                "details": [
                  {
                    "code": "published_versions",
                    "params": {
                      "count": 69
                    }
                  }
                ],
                "max_points": 20
              },
              {
                "key": "not_deprecated",
                "name": "Not deprecated",
                "detail": "active, not deprecated or yanked",
                "points": 20,
                "status": "met",
                "details": [
                  {
                    "code": "package_not_deprecated",
                    "params": {}
                  }
                ],
                "max_points": 20
              }
            ]
          }
        ],
        "description": "Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?"
      },
      {
        "key": "engineering",
        "band": "good",
        "name": "Engineering Quality",
        "value": 77,
        "weight": 0.2,
        "metrics": [
          {
            "key": "engineering_practices",
            "band": "moderate",
            "name": "Engineering practices",
            "note": null,
            "notes": [],
            "value": 68,
            "inputs": {
              "has_ci": true,
              "has_tests": true,
              "has_editorconfig": false,
              "has_linter_config": false,
              "has_precommit_config": false
            },
            "components": [
              {
                "key": "ci_workflows",
                "name": "CI workflows",
                "detail": "5 workflow(s)",
                "points": 24,
                "status": "met",
                "details": [
                  {
                    "code": "ci_workflows",
                    "params": {
                      "count": 5
                    }
                  }
                ],
                "max_points": 24
              },
              {
                "key": "tests_present",
                "name": "Tests present",
                "detail": null,
                "points": 24,
                "status": "met",
                "details": [],
                "max_points": 24
              },
              {
                "key": "linter_config",
                "name": "Linter config",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 16
              },
              {
                "key": "pre_commit_hooks",
                "name": "Pre-commit hooks",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 9.6
              },
              {
                "key": "editorconfig",
                "name": ".editorconfig",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 6.4
              },
              {
                "key": "openssf_scorecard_ci_tests",
                "name": "OpenSSF Scorecard: CI-Tests",
                "detail": "5 out of 5 merged PRs checked by a CI test -- score normalized to 10",
                "points": 20,
                "status": "met",
                "details": [],
                "max_points": 20
              }
            ]
          },
          {
            "key": "documentation",
            "band": "excellent",
            "name": "Documentation",
            "note": null,
            "notes": [],
            "value": 90,
            "inputs": {
              "topics": [
                "ai-agent",
                "identity",
                "lightning",
                "mcp",
                "mcp-server",
                "model-context-protocol",
                "nostr",
                "nostr-wallet-connect",
                "nwc",
                "ring-signature",
                "shamir",
                "typescript",
                "attestations",
                "bunker",
                "dominion",
                "nip-46",
                "signet",
                "trust",
                "web-of-trust"
              ],
              "has_wiki": false,
              "homepage": "https://github.com/forgesworn/bray#readme",
              "has_readme": true,
              "has_docs_dir": true,
              "has_description": true
            },
            "components": [
              {
                "key": "readme",
                "name": "README",
                "detail": null,
                "points": 30,
                "status": "met",
                "details": [],
                "max_points": 30
              },
              {
                "key": "documentation_directory",
                "name": "Documentation directory",
                "detail": null,
                "points": 25,
                "status": "met",
                "details": [],
                "max_points": 25
              },
              {
                "key": "documentation_homepage_site",
                "name": "Documentation / homepage site",
                "detail": "https://github.com/forgesworn/bray#readme",
                "points": 15,
                "status": "met",
                "details": [],
                "max_points": 15
              },
              {
                "key": "repository_description",
                "name": "Repository description",
                "detail": null,
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              },
              {
                "key": "topics",
                "name": "Topics",
                "detail": "19 topics",
                "points": 10,
                "status": "met",
                "details": [
                  {
                    "code": "topics_count",
                    "params": {
                      "count": 19
                    }
                  }
                ],
                "max_points": 10
              },
              {
                "key": "wiki",
                "name": "Wiki",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 10
              }
            ]
          }
        ],
        "description": "Are baseline engineering and documentation practices in place?"
      },
      {
        "key": "security",
        "band": "moderate",
        "name": "Security",
        "value": 60,
        "weight": 0.16,
        "metrics": [
          {
            "key": "security_posture",
            "band": "moderate",
            "name": "Security posture",
            "note": "Excluded from scoring (no data or not applicable): Packaging. Remaining weights renormalized.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "packaging"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              }
            ],
            "value": 50,
            "inputs": {
              "source": "openssf_scorecard",
              "checks_evaluated": 17,
              "scorecard_version": "v5.5.0",
              "checks_inconclusive": 1,
              "scorecard_aggregate": 5
            },
            "components": [
              {
                "key": "binary_artifacts",
                "name": "Binary-Artifacts",
                "detail": "no binaries found in the repo",
                "points": 7.5,
                "status": "met",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "branch_protection",
                "name": "Branch-Protection",
                "detail": "branch protection not enabled on development/release branches",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "ci_tests",
                "name": "CI-Tests",
                "detail": "5 out of 5 merged PRs checked by a CI test -- score normalized to 10",
                "points": 2.5,
                "status": "met",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "cii_best_practices",
                "name": "CII-Best-Practices",
                "detail": "no effort to earn an OpenSSF best practices badge detected",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "code_review",
                "name": "Code-Review",
                "detail": "Found 0/25 approved changesets -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "contributors",
                "name": "Contributors",
                "detail": "project has 1 contributing companies or organizations -- score normalized to 3",
                "points": 0.8,
                "status": "partial",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "dangerous_workflow",
                "name": "Dangerous-Workflow",
                "detail": "no dangerous workflow patterns detected",
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              },
              {
                "key": "dependency_update_tool",
                "name": "Dependency-Update-Tool",
                "detail": "update tool detected",
                "points": 7.5,
                "status": "met",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "fuzzing",
                "name": "Fuzzing",
                "detail": "project is not fuzzed",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 5
              },
              {
                "key": "license",
                "name": "License",
                "detail": "license file detected",
                "points": 2.5,
                "status": "met",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "maintained",
                "name": "Maintained",
                "detail": "30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10",
                "points": 7.5,
                "status": "met",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "packaging",
                "name": "Packaging",
                "detail": "packaging workflow not detected",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_data",
                    "params": {}
                  }
                ],
                "max_points": 5
              },
              {
                "key": "pinned_dependencies",
                "name": "Pinned-Dependencies",
                "detail": "dependency not pinned by hash detected -- score normalized to 4",
                "points": 2,
                "status": "partial",
                "details": [],
                "max_points": 5
              },
              {
                "key": "sast",
                "name": "SAST",
                "detail": "SAST tool is not run on all commits -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 5
              },
              {
                "key": "security_policy",
                "name": "Security-Policy",
                "detail": "security policy file detected",
                "points": 5,
                "status": "met",
                "details": [],
                "max_points": 5
              },
              {
                "key": "signed_releases",
                "name": "Signed-Releases",
                "detail": "Project has not signed or included provenance with any releases.",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "token_permissions",
                "name": "Token-Permissions",
                "detail": "detected GitHub workflow tokens with excessive permissions",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "vulnerabilities",
                "name": "Vulnerabilities",
                "detail": "4 existing vulnerabilities detected",
                "points": 4.5,
                "status": "partial",
                "details": [],
                "max_points": 7.5
              }
            ]
          },
          {
            "key": "dependency_advisories",
            "band": "excellent",
            "name": "Dependency advisories",
            "note": "Excluded from scoring (no data or not applicable): Indirect dependencies free of known advisories, No advisories left outstanding. Remaining weights renormalized. Matched 220 resolved dependencies against OSV. This repository publishes no package the index resolves, so the repository dependency graph was assessed instead. That graph mixes development and test pins with shipped dependencies, so only the declared runtime dependencies are scored; transitive findings are reported as context and excluded from the score. Reachability is not analyzed.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "indirect_dependencies_free_of_known_advisories",
                    "no_advisories_left_outstanding"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              },
              {
                "code": "advisories_scope_repository",
                "params": {
                  "assessed": 220
                }
              },
              {
                "code": "advisories_repo_graph_caveat",
                "params": {}
              },
              {
                "code": "advisories_reachability",
                "params": {}
              }
            ],
            "value": 100,
            "inputs": {
              "source": "osv",
              "advisories": 4,
              "affected_packages": 2,
              "assessed_packages": 220,
              "unassessed_packages": 0,
              "affected_by_severity": "moderate 2",
              "direct_affected_packages": 0
            },
            "components": [
              {
                "key": "direct_dependencies_free_of_known_advisories",
                "name": "Direct dependencies free of known advisories",
                "detail": "no direct dependency carries a known advisory",
                "points": 35,
                "status": "met",
                "details": [
                  {
                    "code": "no_direct_advisories",
                    "params": {}
                  }
                ],
                "max_points": 35
              },
              {
                "key": "indirect_dependencies_free_of_known_advisories",
                "name": "Indirect dependencies free of known advisories",
                "detail": "transitive set not separable from development and test dependencies in this scope",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "advisories_scope_not_separable",
                    "params": {}
                  }
                ],
                "max_points": 25
              },
              {
                "key": "no_advisories_left_outstanding",
                "name": "No advisories left outstanding",
                "detail": "no advisory carries a publication date",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "advisories_no_publication_date",
                    "params": {}
                  }
                ],
                "max_points": 40
              }
            ]
          },
          {
            "key": "malicious_dependencies",
            "band": "excellent",
            "name": "Malicious dependencies",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "source": "osv",
              "meaning": "reported as a malicious package by the OpenSSF corpus; the remedy is removal or moving off the compromised name, never an upgrade of the same artifact. Versions the registry has since pulled are listed but not scored",
              "packages": [],
              "red_flag": false,
              "assessed_packages": 220,
              "malicious_packages": 0,
              "direct_malicious_packages": 0,
              "withdrawn_malicious_packages": 0,
              "installable_malicious_packages": 0
            },
            "components": [
              {
                "key": "no_dependency_reported_as_a_malicious_package",
                "name": "No dependency reported as a malicious package",
                "detail": "no dependency is reported as a malicious package",
                "points": 100,
                "status": "met",
                "details": [
                  {
                    "code": "no_malicious_dependencies",
                    "params": {}
                  }
                ],
                "max_points": 100
              }
            ]
          }
        ],
        "description": "Are visible security and supply-chain practices strong, with no malicious dependency and no unresolved high-risk jurisdiction exposure?"
      },
      {
        "key": "ai_readiness",
        "band": "good",
        "name": "AI Readiness",
        "value": 76,
        "weight": 0,
        "metrics": [
          {
            "key": "ai_agent_context",
            "band": "excellent",
            "name": "Agent context & guidance",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "has_llms_txt": true,
              "legible_history_share": 0.8,
              "agent_instruction_files": [
                ".cursorrules",
                "AGENTS.md",
                "CLAUDE.md"
              ],
              "agent_instruction_max_bytes": 7816
            },
            "components": [
              {
                "key": "agent_instructions",
                "name": "Agent instructions",
                "detail": ".cursorrules, AGENTS.md, CLAUDE.md",
                "points": 45,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": ".cursorrules, AGENTS.md, CLAUDE.md"
                    }
                  }
                ],
                "max_points": 45
              },
              {
                "key": "machine_readable_docs_llms_txt",
                "name": "Machine-readable docs (llms.txt)",
                "detail": "llms.txt present",
                "points": 15,
                "status": "met",
                "details": [
                  {
                    "code": "llms_txt_present",
                    "params": {}
                  }
                ],
                "max_points": 15
              },
              {
                "key": "legible_commit_history",
                "name": "Legible commit history",
                "detail": "40 of 50 human commits state their intent (structured subject or explanatory body)",
                "points": 40,
                "status": "met",
                "details": [
                  {
                    "code": "legible_history",
                    "params": {
                      "legible": 40,
                      "sampled": 50
                    }
                  }
                ],
                "max_points": 40
              }
            ]
          },
          {
            "key": "ai_verify_loop",
            "band": "moderate",
            "name": "Verify loop (build / test / typecheck)",
            "note": null,
            "notes": [],
            "value": 55,
            "inputs": {
              "has_nix": false,
              "has_tests": true,
              "lockfiles": [
                "package-lock.json"
              ],
              "has_dockerfile": true,
              "typed_language": true,
              "bootstrap_files": [],
              "has_devcontainer": false,
              "has_linter_config": false,
              "typecheck_configs": [
                "tsconfig.json"
              ],
              "agent_commit_share": 0,
              "toolchain_manifests": [],
              "dependency_bot_commit_share": 0.32
            },
            "components": [
              {
                "key": "one_command_bootstrap",
                "name": "One-command bootstrap",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 18
              },
              {
                "key": "automated_tests",
                "name": "Automated tests",
                "detail": null,
                "points": 22,
                "status": "met",
                "details": [],
                "max_points": 22
              },
              {
                "key": "lint_format_config",
                "name": "Lint / format config",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 11
              },
              {
                "key": "static_type_checking",
                "name": "Static type checking",
                "detail": "tsconfig.json",
                "points": 11,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": "tsconfig.json"
                    }
                  }
                ],
                "max_points": 11
              },
              {
                "key": "reproducible_environment",
                "name": "Reproducible environment",
                "detail": "Dockerfile, lockfile",
                "points": 10,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": "Dockerfile, lockfile"
                    }
                  }
                ],
                "max_points": 10
              },
              {
                "key": "demonstrated_agent_practice",
                "name": "Demonstrated agent practice",
                "detail": "no agent-authored commits among the last 100",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "no_agent_authored_commits",
                    "params": {
                      "sampled": 100
                    }
                  }
                ],
                "max_points": 10
              },
              {
                "key": "automated_maintenance",
                "name": "Automated maintenance",
                "detail": "32 of the last 100 commits are automated dependency updates",
                "points": 8,
                "status": "met",
                "details": [
                  {
                    "code": "dependency_bot_commits",
                    "params": {
                      "count": 32,
                      "sampled": 100
                    }
                  }
                ],
                "max_points": 8
              },
              {
                "key": "openssf_scorecard_pinned_dependencies",
                "name": "OpenSSF Scorecard: Pinned-Dependencies",
                "detail": "dependency not pinned by hash detected -- score normalized to 4",
                "points": 4,
                "status": "partial",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "ai_code_legibility",
            "band": "excellent",
            "name": "Code legibility for models",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "primary_language": "TypeScript",
              "largest_source_bytes": 178629,
              "source_files_sampled": 249,
              "oversized_source_files": 2
            },
            "components": [
              {
                "key": "type_checkable_code",
                "name": "Type-checkable code",
                "detail": "TypeScript (statically typed)",
                "points": 45,
                "status": "met",
                "details": [
                  {
                    "code": "statically_typed_language",
                    "params": {
                      "language": "TypeScript"
                    }
                  }
                ],
                "max_points": 45
              },
              {
                "key": "manageable_file_sizes",
                "name": "Manageable file sizes",
                "detail": "2/249 source files over 60KB",
                "points": 54.6,
                "status": "partial",
                "details": [
                  {
                    "code": "oversized_source_files",
                    "params": {
                      "kb": 60,
                      "sampled": 249,
                      "oversized": 2
                    }
                  }
                ],
                "max_points": 55
              }
            ]
          },
          {
            "key": "ai_interfaces",
            "band": "moderate",
            "name": "Machine-readable interfaces",
            "note": null,
            "notes": [],
            "value": 60,
            "inputs": {
              "example_dirs": [
                "demos",
                "examples"
              ],
              "has_mcp_signal": true,
              "api_schema_files": []
            },
            "components": [
              {
                "key": "api_schema_openapi_graphql_proto",
                "name": "API schema (OpenAPI/GraphQL/proto)",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 40
              },
              {
                "key": "mcp_server",
                "name": "MCP server",
                "detail": null,
                "points": 20,
                "status": "met",
                "details": [],
                "max_points": 20
              },
              {
                "key": "runnable_examples",
                "name": "Runnable examples",
                "detail": "demos, examples",
                "points": 40,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": "demos, examples"
                    }
                  }
                ],
                "max_points": 40
              }
            ]
          }
        ],
        "description": "How well is the repo equipped to be developed and maintained with AI coding agents? An independent, experimental badge — weight 0.0, so it is surfaced on its own and does not affect the overall health score."
      }
    ],
    "metrics_version": "1.13.0"
  },
  "warnings": [
    "deps.dev does not index npm:nostr-bray@1.41.0; advisories assessed against the repository dependency graph instead"
  ],
  "report_type": "repository",
  "generated_at": "2026-07-23T16:35:45.309125Z",
  "schema_version": "0.27.0",
  "badge_url": "https://raw.githubusercontent.com/inspect-software/badges/main/v1/f/forgesworn/bray.svg",
  "full_name": "forgesworn/bray",
  "license_state": "standard",
  "license_spdx": "MIT"
}