Hand a live Claude Code, Codex, or opencode session to anyone with three spoken words - encrypted, no account. Or carry your whole Claude Code history to a new laptop, every path rewritten.
{
"data": {
"repo": {
"topics": [
"ai-coding",
"anthropic",
"backup",
"claude",
"claude-code",
"cli",
"cross-platform",
"developer-tools",
"devtools",
"golang",
"migration",
"codex",
"openai",
"openai-codex",
"opencode",
"collaboration",
"end-to-end-encryption",
"pair-programming",
"session-sharing",
"tui"
],
"is_fork": false,
"size_kb": 8288,
"has_wiki": true,
"homepage": "https://gowthamsai.in/entangle",
"languages": {
"Go": 415508,
"HTML": 24433,
"Shell": 3663,
"JavaScript": 4635,
"PowerShell": 2402,
"TypeScript": 17949
},
"pushed_at": "2026-07-31T13:01:24Z",
"created_at": "2026-06-28T12:15:28Z",
"owner_type": "User",
"updated_at": "2026-08-02T11:10:34Z",
"description": "Hand a live Claude Code, Codex, or opencode session to anyone with three spoken words - encrypted, no account. Or carry your whole Claude Code history to a new laptop, every path rewritten.",
"is_archived": false,
"is_disabled": false,
"license_spdx": "MIT",
"default_branch": "main",
"license_spdx_raw": "MIT",
"primary_language": "Go",
"significant_languages": [
"Go"
]
},
"owner": {
"blog": "https://gowthamsai.in/",
"name": "Gowtham Sai G",
"type": "User",
"login": "gowtham-sai-yadav",
"company": "BITS Pilani",
"location": "Bengaluru",
"followers": 3,
"avatar_url": "https://avatars.githubusercontent.com/u/144474031?v=4",
"created_at": "2023-09-08T16:13:09Z",
"is_verified": null,
"public_repos": 33,
"account_age_days": 1058
},
"license": {
"state": "standard",
"spdx_id": "MIT",
"raw_spdx": "MIT",
"file_present": true,
"scorecard_found": true,
"profile_has_license": true
},
"activity": {
"releases": [
{
"tag": "v0.7.1",
"kind": "patch",
"published_at": "2026-07-30T17:24:32Z"
},
{
"tag": "v0.7.0",
"kind": "minor",
"published_at": "2026-07-29T15:27:12Z"
},
{
"tag": "v0.6.1",
"kind": "patch",
"published_at": "2026-07-29T12:56:56Z"
},
{
"tag": "v0.6.0",
"kind": "minor",
"published_at": "2026-07-28T21:44:32Z"
},
{
"tag": "v0.5.5",
"kind": "patch",
"published_at": "2026-07-27T20:06:23Z"
},
{
"tag": "v0.5.4",
"kind": "patch",
"published_at": "2026-07-27T15:46:39Z"
},
{
"tag": "v0.5.3",
"kind": "patch",
"published_at": "2026-07-27T14:33:13Z"
},
{
"tag": "v0.5.2",
"kind": "patch",
"published_at": "2026-07-27T13:27:05Z"
},
{
"tag": "v0.5.1",
"kind": "patch",
"published_at": "2026-07-27T10:57:07Z"
},
{
"tag": "v0.5.0",
"kind": "minor",
"published_at": "2026-07-24T14:11:19Z"
},
{
"tag": "v0.4.1",
"kind": "patch",
"published_at": "2026-07-21T22:23:01Z"
},
{
"tag": "v0.4.0",
"kind": "minor",
"published_at": "2026-07-21T22:06:20Z"
},
{
"tag": "v0.3.1",
"kind": "patch",
"published_at": "2026-07-21T20:06:43Z"
},
{
"tag": "v0.3.0",
"kind": "minor",
"published_at": "2026-07-21T13:53:12Z"
},
{
"tag": "v0.2.1",
"kind": "patch",
"published_at": "2026-07-08T12:57:27Z"
},
{
"tag": "v0.2.0",
"kind": "minor",
"published_at": "2026-07-08T12:03:45Z"
},
{
"tag": "v0.1.1",
"kind": "patch",
"published_at": "2026-07-01T00:31:54Z"
}
],
"recent_commits": [
{
"oid": "15febe60fc74cc3dc9eb235ae9198795ccc6dadd",
"body": "Re-record README stills and hero GIF for v0.7.1",
"is_bot": false,
"headline": "Merge pull request #46 from gowtham-sai-yadav/fix/refresh-stills",
"author_name": "Gowtham Sai G",
"author_login": "gowtham-sai-yadav",
"committed_at": "2026-07-31T13:01:24Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "9cc8f0238ea167962e2cc4ef8837ca6f3dc981a4",
"body": "Two kinds of staleness, one cause.\n\ndocs/tui-help.png is in the README and still showed the help card with em-dash\nrows, which stopped matching the shipped binary the moment #45 landed. Anyone\ncomparing the screenshot to their own terminal would have found the difference.\n\nBoth tapes also hardcoded \n[…]\n-ldflags=-X=path.version=$(...) with no quoting at all rather than the usual\nquoted form.\n\ntui-send.png came out byte-identical and is untouched: it shows neither the help\ncard nor the version banner.",
"is_bot": false,
"headline": "Re-record README stills and hero GIF for v0.7.1",
"author_name": "gowtham-sai-yadav",
"author_login": "gowtham-sai-yadav",
"committed_at": "2026-07-31T11:29:43Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "66ab51521a411b7fa20a23299767203f4509b429",
"body": "Fix help exit codes, drop em-dashes, add SECURITY.md",
"is_bot": false,
"headline": "Merge pull request #45 from gowtham-sai-yadav/fix/prelaunch-polish",
"author_name": "Gowtham Sai G",
"author_login": "gowtham-sai-yadav",
"committed_at": "2026-07-30T17:15:23Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "fcfcf4402bf0bd6a0053f10bce32417248083258",
"body": "Three pre-launch cleanups.\n\n`entangle send -h` printed its usage and then exited non-zero, because the\nflag package hands back flag.ErrHelp and that reached main as a failure. It\nalso printed \"error: flag: help requested\" under the usage, which reads like\nthe help itself broke. Run now treats ErrHel\n[…]\necond guess rather than because the number is large. It also names the\nthird-party relays entangle falls back to, and says plainly that secret\nmasking matches known shapes and will miss anything else.",
"is_bot": false,
"headline": "Fix help exit codes, drop em-dashes, add SECURITY.md",
"author_name": "gowtham-sai-yadav",
"author_login": "gowtham-sai-yadav",
"committed_at": "2026-07-30T17:08:26Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "b10a0ead6e6b7ba7d85c621865f62cc5bdfa5d14",
"body": "design: make the mark two woven strands",
"is_bot": false,
"headline": "Merge pull request #44 from gowtham-sai-yadav/design/knot-mark",
"author_name": "Gowtham Sai G",
"author_login": "gowtham-sai-yadav",
"committed_at": "2026-07-30T15:45:57Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "367dc98e3de83e83d8aa6ca665f06e33bb16ab0c",
"body": "fix(sessions): say what was searched when the list is empty",
"is_bot": false,
"headline": "Merge pull request #43 from gowtham-sai-yadav/fix/empty-session-list",
"author_name": "Gowtham Sai G",
"author_login": "gowtham-sai-yadav",
"committed_at": "2026-07-30T15:45:43Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d103b12e2411b683d134e233828cf54974221fec",
"body": "Closes the mark question in #39.\n\nThe portal-and-session drawing had a problem the comment in logo.svg was\nhonest about: it is a ring with a shape beside it, and at small sizes the\ntrail dropped out and left a ring, which is not a distinctive thing to own.\nThe knot is: two strands, over on the left \n[…]\nthing a 16px render loses. The extension icon is redrawn in a 24\nbox rather than scaled, so its strokes do not land on half pixels. The\nweb UI inlines the mark and had its own copy, so that moved too.",
"is_bot": false,
"headline": "design: make the mark two woven strands",
"author_name": "gowtham-sai-yadav",
"author_login": "gowtham-sai-yadav",
"committed_at": "2026-07-30T15:36:01Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "721e24066eb3a57b80bfa81ae36ce841374d17e8",
"body": "The \"In your editor\" section ended with \"so the extension is all you\nneed\", which reads as a shipped product someone can install today. It is\nnot on the marketplace (#41), so a reader who follows that sentence ends\nup looking for a listing that does not exist and concludes the docs are\nstale.\n\nSays where it actually stands and how to run it from source, and points\nback at the CLI as the supported path. Same \"say what you left out\" rule\nthe sessions command now follows.",
"is_bot": false,
"headline": "docs: stop implying the VS Code extension is installable",
"author_name": "gowtham-sai-yadav",
"author_login": "gowtham-sai-yadav",
"committed_at": "2026-07-30T14:05:24Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "83956a586ff157ec186f21f078d96d1f271cdab3",
"body": "\"No sessions found.\" cannot be told apart from three situations: no\ncoding tool is set up here, one is set up somewhere entangle did not\nlook, or the tools really are empty. A new user hits the first two far\nmore often, and four words send them away believing it is broken.\n\nThe empty list now names \n[…]\nt were not found. Same promise export already keeps when it prints\nthe tools it skipped.\n\n--json is untouched: it returns before this point and a test now pins\nthat the human text cannot leak into it.",
"is_bot": false,
"headline": "fix(sessions): say what was searched when the list is empty",
"author_name": "gowtham-sai-yadav",
"author_login": "gowtham-sai-yadav",
"committed_at": "2026-07-30T13:39:31Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "82e63fdf7913d65a41eff97866e35cd0660a22d1",
"body": "docs: drop em-dashes from all prose",
"is_bot": false,
"headline": "Merge pull request #42 from gowtham-sai-yadav/docs/no-em-dashes",
"author_name": "Gowtham Sai G",
"author_login": "gowtham-sai-yadav",
"committed_at": "2026-07-30T13:27:46Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4e0762540a783ae08066a47555d76f98fd518f46",
"body": "Rewrites each sentence rather than swapping the dash for a hyphen: two\nsentences, a colon, or a comma depending on what the sentence wanted.\nAlso removes the one ellipsis character in CONTRIBUTING.md.\n\nThe feature_request.yml description is now quoted because the rewritten\nvalue contains a colon and space, which YAML would otherwise read as a\nmapping.",
"is_bot": false,
"headline": "docs: drop em-dashes from all prose",
"author_name": "gowtham-sai-yadav",
"author_login": "gowtham-sai-yadav",
"committed_at": "2026-07-30T13:10:18Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "3d707fdb9537ba6fd0a4a7ed6bc7b529eb095285",
"body": "docs: add a contributing guide and issue templates",
"is_bot": false,
"headline": "Merge pull request #35 from gowtham-sai-yadav/docs/contributing",
"author_name": "Gowtham Sai G",
"author_login": "gowtham-sai-yadav",
"committed_at": "2026-07-30T12:52:51Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f9787496d3a2403363088b5ac9acee40b4a10fd1",
"body": "GitHub's community profile reported contributing, issue_template,\npull_request_template and code_of_conduct all missing. The README's\n\"To develop\" block was the only guidance, and it said nothing about what\na contributor may take, what CI actually runs, or which behaviours are\npromises rather than i\n[…]\nress and should not be built by someone else.\n\nThe README's Contributing section now points there instead of carrying a\nsecond copy of the commands, and links the two labels people actually\nbrowse by.",
"is_bot": false,
"headline": "docs: add a contributing guide and issue templates",
"author_name": "gowtham-sai-yadav",
"author_login": "gowtham-sai-yadav",
"committed_at": "2026-07-30T12:33:38Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "e1c4a042c96f0976339d4bab5c77bc920c8aee96",
"body": "docs: open the README on the problem, not the physics",
"is_bot": false,
"headline": "Merge pull request #34 from gowtham-sai-yadav/docs/readme-header",
"author_name": "Gowtham Sai G",
"author_login": "gowtham-sai-yadav",
"committed_at": "2026-07-30T11:59:36Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "df0881088de36bcea03b38cdbee3c4929b5c75e7",
"body": "The epigraph claimed entangle was \"the same trick\" as quantum\nteleportation. It is not, and the mismatch points the wrong way: in real\nteleportation the state never crosses the gap - only two classical bits\ndo - and the original is destroyed. entangle copies the session and sends\nthe whole thing ove\n[…]\nsistent. The FAQ\n keeps the full name where it links to the repo\n- move the name story to a \"Why entangle?\" note near the foot of the\n file, scoped to the part that is true: two things useless apart",
"is_bot": false,
"headline": "docs: open the README on the problem, not the physics",
"author_name": "gowtham-sai-yadav",
"author_login": "gowtham-sai-yadav",
"committed_at": "2026-07-30T11:56:43Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "79dcda710f479f4086c0d255c93cc44bf64d7d1e",
"body": "docs: fix what the project says about itself",
"is_bot": false,
"headline": "Merge pull request #33 from gowtham-sai-yadav/docs/fix-self-description",
"author_name": "Gowtham Sai G",
"author_login": "gowtham-sai-yadav",
"committed_at": "2026-07-30T11:45:22Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "dfb09efb254144196f674f24c435bdaabdd68416",
"body": "The VS Code extension undersold and mislinked itself. Its manifest said\n\"Hand a Claude Code session\" while extension.ts:254 already lists every\ntool with --tool all and :271 passes --tool <provider> through; its\nhomepage and install link pointed at gowthamsai.in/teleport/, which\nserves a live 200 on\n[…]\nnd status bar label\n- rename media/teleport.svg to media/entangle.svg (media/ is not in\n .vscodeignore, so the icon still ships)\n- scope README's \"What moves\" to Claude Code and name the escape hatch",
"is_bot": false,
"headline": "docs: fix what the project says about itself",
"author_name": "gowtham-sai-yadav",
"author_login": "gowtham-sai-yadav",
"committed_at": "2026-07-30T11:33:37Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "dfa2de768c7294f8fea1e90bacf06dc0847ffbf2",
"body": "docs: scope the multi-tool claim, and document the GUI as an import path",
"is_bot": false,
"headline": "Merge pull request #32 from gowtham-sai-yadav/docs/gui-and-tool-scope",
"author_name": "Gowtham Sai G",
"author_login": "gowtham-sai-yadav",
"committed_at": "2026-07-29T15:23:14Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2eab23074de3cb05827a6298e89c79dc73d7b067",
"body": "…e GUI\n\nTwo claims in the README were wider than the code.\n\nThe intro said entangle works across Claude Code, Codex and opencode, and\nseparately that it packs your whole history for a new machine. Both are true;\nread together they promise something that is not. Sharing one session covers\nall three t\n[…]\ny thing on that page you can act on: the session list there is read-only and\nthe browser cannot send or receive. Documenting it as a general browser UI would\npromise a send button that does not exist.",
"is_bot": false,
"headline": "docs: say which tools whole-machine migration covers, and document th…",
"author_name": "gowtham-sai-yadav",
"author_login": "gowtham-sai-yadav",
"committed_at": "2026-07-29T15:16:30Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "c70cfacc1ae91f30d7da29e5cb4726bcaf5dfbac",
"body": "Restart after in-TUI update, and rebuild the browser GUI",
"is_bot": false,
"headline": "Merge pull request #31 from gowtham-sai-yadav/feat/gui-restart-logo",
"author_name": "Gowtham Sai G",
"author_login": "gowtham-sai-yadav",
"committed_at": "2026-07-29T15:03:52Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "351776fce995e27f2feec36d940f13362cc57a25",
"body": "The list was on top because it is the interesting thing to look at. But it\nis read-only - you cannot send, resume or delete a session from a browser -\nso leading with it made the page look like a dashboard it is not, and pushed\nthe one action it actually offers below the fold.\n\nWizard first, list underneath as reference: confirmation an import landed,\nand somewhere to find a short id to type at a terminal. The tagline says\nthe same thing now.",
"is_bot": false,
"headline": "gui: lead with the import wizard, not the session list",
"author_name": "gowtham-sai-yadav",
"author_login": "gowtham-sai-yadav",
"committed_at": "2026-07-29T13:34:22Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "31a2f7b176e7ba3783553566773c03898f0194d1",
"body": "`entangle gui` was a Claude-Code-only import wizard wearing a blue theme and the\nold project name in its masthead. It predated multi-tool support and it predated\nsharing being the point, so it had drifted into describing a product that no\nlonger exists.\n\nIt now opens on the same list the cockpit sho\n[…]\nto innerHTML unescaped, and those strings come out of a bundle\nsomeone else built - so a crafted project path could run script in the wizard of\nwhoever imported it. Every interpolation is escaped now.",
"is_bot": false,
"headline": "feat(gui): rebuild the browser UI as a current view of the product",
"author_name": "gowtham-sai-yadav",
"author_login": "gowtham-sai-yadav",
"committed_at": "2026-07-29T13:23:11Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "c8af75aa5bbb9b299ea00afee6f1d0cb34f01540",
"body": "Installing an update from the cockpit left you looking at the old version with\n\"Restart to use the new version\" underneath it. The new build was already on\ndisk; the only way to reach it was to quit and come back, which is easy to\nsimply not do - so people stayed on the build they had just replaced.\n[…]\nw process draws into an alt screen it never opened.\n\nDeclining clears the path rather than just skipping the exec, so a later\nordinary quit does not relaunch the tool for somebody who already said no.",
"is_bot": false,
"headline": "feat: hand the terminal to the new binary after an in-TUI update",
"author_name": "gowtham-sai-yadav",
"author_login": "gowtham-sai-yadav",
"committed_at": "2026-07-29T13:08:58Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "acc0e4d224fd31f14e03b1a2a47cc07bc8e6e881",
"body": "Make every share carry its own install instructions",
"is_bot": false,
"headline": "Merge pull request #30 from gowtham-sai-yadav/feat/paste-ready-invite",
"author_name": "Gowtham Sai G",
"author_login": "gowtham-sai-yadav",
"committed_at": "2026-07-29T12:54:11Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2100d4d6674b0b3a3d7b699e39b695f18867ec5c",
"body": "Sending is the one moment this tool gets put in front of someone who has\nnever heard of it, and they arrive already motivated - a teammate is trying\nto hand them something. Printing only `entangle receive <code>` throws that\naway: they paste it, the shell says command not found, and the sender ends\n\n[…]\nnow reads `codex`, not `OpenAI Codex CLI`. The rows\nunderneath it already say `codex`, and that is also what --tool takes, so the\nid is the name worth learning. Display names stay on the detail cards.",
"is_bot": false,
"headline": "feat: make every share carry its own install instructions",
"author_name": "gowtham-sai-yadav",
"author_login": "gowtham-sai-yadav",
"committed_at": "2026-07-29T12:48:59Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "d8813c010136bfbacb6c10db849e6cafda2e8820",
"body": "Tell users when a newer entangle exists, and re-record the hero as the cockpit",
"is_bot": false,
"headline": "Merge pull request #29 from gowtham-sai-yadav/feat/update-notice",
"author_name": "Gowtham Sai G",
"author_login": "gowtham-sai-yadav",
"committed_at": "2026-07-29T12:34:07Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f303bbf89153a3761ce3e6104833107e1c901e8b",
"body": "The old hero typed `entangle sessions --tool all` and `entangle send <id>\n--tool codex`. Almost nobody does that - they type `entangle` and land in the\ncockpit - so the first thing a visitor saw was not the thing they would use.\n\nThe GIF now shows the screen they actually get: seven sessions from Cl\n[…]\no 850 rows, since the cockpit needs the height for the\nfull banner, and sets ENTANGLE_NO_UPDATE_CHECK so the header does not bake in\nwhatever release happened to be out on the day and date the images.",
"is_bot": false,
"headline": "docs: record the hero GIF as the cockpit, and make it reproducible",
"author_name": "gowtham-sai-yadav",
"author_login": "gowtham-sai-yadav",
"committed_at": "2026-07-29T11:56:15Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "b3560d372e241b58ca1341421fa3bb1662d0af49",
"body": "A user on 0.5.5 has no way to find out that anything shipped since. They\nkeep using a stale build, conclude a fixed bug is still broken, and never\nsee the tools support they already paid for by installing.\n\nThe check is deliberately passive, and each rule is there because the\nobvious version is wors\n[…]\n\nDocumented in the README rather than left to be discovered: this is the\nonly thing entangle asks the network about on its own, and a project that\nclaims no server in the middle has to say so plainly.",
"is_bot": false,
"headline": "Tell users when a newer entangle exists",
"author_name": "gowtham-sai-yadav",
"author_login": "gowtham-sai-yadav",
"committed_at": "2026-07-29T11:34:18Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "abadf221386c4f65490c90138b448d04b50afebb",
"body": "feat: cover every coding agent by default",
"is_bot": false,
"headline": "Merge pull request #28 from gowtham-sai-yadav/feat/all-tools-by-default",
"author_name": "Gowtham Sai G",
"author_login": "gowtham-sai-yadav",
"committed_at": "2026-07-29T09:53:49Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "fb664664a34014dae4b86e1ceec41786929bbf93",
"body": "Listing and sharing defaulted to Claude Code, so a Codex or opencode user\nran `entangle sessions`, saw an empty table, and had no reason to think the\ntool supported them. --tool now defaults to all, and share/send work out\nwhich agent owns an id rather than making the user name it.\n\n--config-dir has\n[…]\ntead of ignoring it and reporting\nhealthy numbers about the local install, which read as the bundle passing.\nThe editor extension badges every row of a mixed list rather than only the\nnon-Claude ones.",
"is_bot": false,
"headline": "feat: cover every coding agent by default",
"author_name": "gowtham-sai-yadav",
"author_login": "gowtham-sai-yadav",
"committed_at": "2026-07-29T09:39:16Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "4a03b713539c1dad26beb26e1c3432becff22f53",
"body": "fix(release): tell the Homebrew formula which archive to install",
"is_bot": false,
"headline": "Merge pull request #27 from gowtham-sai-yadav/fix/release-brew-ids",
"author_name": "Gowtham Sai G",
"author_login": "gowtham-sai-yadav",
"committed_at": "2026-07-28T21:41:19Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "aada82e8bad3290e2af3e40a194d8312db40fba9",
"body": "v0.6.0 failed at the last step with \"one tap can handle only one archive\nof an OS/Arch combination\".\n\nThe rename added a second archive publishing the same binaries under the\npre-rename filename, so that copies installed as claude-teleport can still\nself-update. That left two candidates per OS/arch,\n[…]\nhashes, which is what the old binaries'\nupdate path verifies against.\n\nVerified with a full local dry run: the formula now references only\nentangle-* URLs, and both names remain in the checksums file.",
"is_bot": false,
"headline": "fix(release): tell the Homebrew formula which archive to install",
"author_name": "gowtham-sai-yadav",
"author_login": "gowtham-sai-yadav",
"committed_at": "2026-07-28T21:20:34Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "e2800ca29cb15e6bb504121887318b5aaeb1d5ec",
"body": "docs: re-record the hero demo under the new name",
"is_bot": false,
"headline": "Merge pull request #26 from gowtham-sai-yadav/docs/entangle-hero",
"author_name": "Gowtham Sai G",
"author_login": "gowtham-sai-yadav",
"committed_at": "2026-07-28T20:59:36Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5e9f5f23edb6cff13c2e73a9f3f1e6a43c067f89",
"body": "docs/demo.gif still showed claude-teleport and the old migration-only story, so the\nfirst thing anyone saw on the README contradicted the project. It now shows what the\ntool actually is: one list covering Claude Code, Codex and opencode, then handing a\nCodex session to a teammate and reading out the\n[…]\nell back\nto the real store: the frame held 171 genuine sessions with their project paths and\nprompt text. That is noted in the tape so the next person recording it does not\nrediscover it the same way.",
"is_bot": false,
"headline": "docs: re-record the hero demo under the new name",
"author_name": "gowtham-sai-yadav",
"author_login": "gowtham-sai-yadav",
"committed_at": "2026-07-28T00:39:20Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "bd3ea012622c12ee4cf09addff91990b6162df12",
"body": "Rename the project to entangle",
"is_bot": false,
"headline": "Merge pull request #25 from gowtham-sai-yadav/rename/entangle",
"author_name": "Gowtham Sai G",
"author_login": "gowtham-sai-yadav",
"committed_at": "2026-07-28T00:27:31Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "8af2b656b9aaffef75b9ed4d9e5101829faa9cbd",
"body": "claude-teleport supported Codex and opencode as of the last release, which made\nits own name misleading: it told a Codex user the tool was not for them. The name\nalso matched the one pattern Anthropic has actually enforced on - a Claude-branded\nname serving competing providers - so it was worth chan\n[…]\nreenshots are rebuilt around the new name, and the demo seed now covers\nCodex and opencode as well, so committed images show three tools with entirely\nsynthetic sessions instead of anyone's real work.",
"is_bot": false,
"headline": "Rename the project to entangle",
"author_name": "gowtham-sai-yadav",
"author_login": "gowtham-sai-yadav",
"committed_at": "2026-07-27T21:53:35Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "aafcac1b5ca204e40afff5a894a0097aa17133f4",
"body": "…copy-code\n\nRace both transfer servers, drop the fallback warning, copy the code with c",
"is_bot": false,
"headline": "Merge pull request #24 from gowtham-sai-yadav/fix/quiet-fallback-and-…",
"author_name": "Gowtham Sai G",
"author_login": "gowtham-sai-yadav",
"committed_at": "2026-07-27T20:01:16Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "58a8b27722309cea262153734645707fdea76a36",
"body": "…with c\n\nThree changes to the one screen a user actually watches.\n\nThe amber \"the usual transfer server was not responding, so I switched to a\nbackup\" banner is gone from both the cockpit and the CLI. It needed nothing from\nanyone - receiving already tries both mailboxes and meets the sender on whic\n[…]\nade the thing it was meant to help worse.\n\nThe stall test's assertion is inverted to match: it used to require waiting out the\nwindow, and now requires not waiting, which is the property that changed.",
"is_bot": false,
"headline": "Race both transfer servers, drop the fallback warning, copy the code …",
"author_name": "gowtham-sai-yadav",
"author_login": "gowtham-sai-yadav",
"committed_at": "2026-07-27T18:07:23Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "c80347e9956bdee49ca5eb2d15ef946be289f0fc",
"body": "…le-tests\n\ntest: stop the wormhole integration tests hanging, and say when they skip",
"is_bot": false,
"headline": "Merge pull request #23 from gowtham-sai-yadav/test/bound-local-wormho…",
"author_name": "Gowtham Sai G",
"author_login": "gowtham-sai-yadav",
"committed_at": "2026-07-27T15:43:56Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e0c424fe0feb4cb197f3f81b61b62aa99e270e54",
"body": "…skip\n\nRunning `go test -tags integration ./internal/transfer/` hung until the timeout\nkilled the binary, taking every later test with it and reporting nothing useful.\nThe pre-existing round-trip test did the same, and had presumably been doing so for\na while: CI does not run integration tests, so n\n[…]\napplied to the pre-existing test too, since it has the same limitation.\n\nNone of this changes the fix in the previous commit, which was verified over the\nreal internet rather than through these tests.",
"is_bot": false,
"headline": "test: stop the wormhole integration tests hanging, and say when they …",
"author_name": "gowtham-sai-yadav",
"author_login": "gowtham-sai-yadav",
"committed_at": "2026-07-27T15:35:42Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "b9716dff542015a4015e5b8b9e22a7f668920156",
"body": "…back\n\ntransfer: fall back when the server stalls, and race both on receive",
"is_bot": false,
"headline": "Merge pull request #22 from gowtham-sai-yadav/fix/transfer-stall-fall…",
"author_name": "Gowtham Sai G",
"author_login": "gowtham-sai-yadav",
"committed_at": "2026-07-27T15:18:51Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5924153dafa89af2e461526202f281459d3707c2",
"body": "`send` hung forever on \"Opening a secure channel…\" and never showed a code.\n\nThe cause is a failure a connection error cannot express. The public default\nmailbox accepts the TCP connection, answers an ordinary HTTP request with 200, and\nthen never completes the wormhole handshake. Nothing errors, so\n[…]\nses here; the two\nthat need a completed loopback peer-to-peer transfer hang in this sandbox, exactly\nas the pre-existing round-trip test does, and need `go test -tags integration`\non a normal machine.",
"is_bot": false,
"headline": "transfer: fall back when the server stalls, and race both on receive",
"author_name": "gowtham-sai-yadav",
"author_login": "gowtham-sai-yadav",
"committed_at": "2026-07-27T14:57:07Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "d3380d93116595f481a4f2fccb143b9cb0aafd29",
"body": "Share and receive sessions for every supported tool",
"is_bot": false,
"headline": "Merge pull request #21 from gowtham-sai-yadav/feat/multitool-sharing",
"author_name": "Gowtham Sai G",
"author_login": "gowtham-sai-yadav",
"committed_at": "2026-07-27T14:23:55Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "7d62a49b3f8ede4725058e06c3952b01f5ae873c",
"body": "Listing other tools was foundation, not a feature: seeing a Codex session you\ncannot do anything with is worth little. This makes send, share, receive, import,\nthe cockpit and the editor extension work for Codex and opencode the same way they\nalready do for Claude Code. Cross-tool conversion (a Clau\n[…]\nte on the manifest, so the receiving side never passes a\nflag.\n\nThe extension lists every tool and passes --tool when sending a non-Claude\nsession, omitting it otherwise so an older CLI keeps working.",
"is_bot": false,
"headline": "Share and receive sessions for every supported tool",
"author_name": "gowtham-sai-yadav",
"author_login": "gowtham-sai-yadav",
"committed_at": "2026-07-27T14:18:40Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "39ca89708a9da8a59e4611f4d1e49ded9e8d99f2",
"body": "…ovider\n\nPhase 3: list opencode sessions",
"is_bot": false,
"headline": "Merge pull request #20 from gowtham-sai-yadav/feat/phase3-opencode-pr…",
"author_name": "Gowtham Sai G",
"author_login": "gowtham-sai-yadav",
"committed_at": "2026-07-27T13:19:47Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "9fb9447112bb2676a9b6515de836a4ac3c7dc8d6",
"body": "Adds internal/agent/opencode and --tool opencode. Verified against a live\nopencode 1.18.5 install: 13 real sessions listed with correct project paths,\ntimes and message counts, alongside 167 Claude Code and 12 Codex.\n\nopencode keeps sessions in SQLite, not per-session files, so there is nothing to\nr\n[…]\nThe subprocess is injectable behind two package vars so tests need no executable\non PATH. A stub script would not run on Windows, which is exactly the platform\nthat caught the last round of test bugs.",
"is_bot": false,
"headline": "Phase 3: list opencode sessions",
"author_name": "gowtham-sai-yadav",
"author_login": "gowtham-sai-yadav",
"committed_at": "2026-07-27T12:33:54Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "78ac57f14f18cc60ce0659074b04d44a6d0b6536",
"body": "…straction\n\nLand Phases 1 and 2 on main (provider seam + Codex listing)",
"is_bot": false,
"headline": "Merge pull request #19 from gowtham-sai-yadav/feat/phase1-provider-ab…",
"author_name": "Gowtham Sai G",
"author_login": "gowtham-sai-yadav",
"committed_at": "2026-07-27T12:26:50Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "629cae356f56c676da90f1da1ba3ff4ac9c063ab",
"body": "Phase 2: list OpenAI Codex CLI sessions",
"is_bot": false,
"headline": "Merge pull request #18 from gowtham-sai-yadav/feat/phase2-codex-provider",
"author_name": "Gowtham Sai G",
"author_login": "gowtham-sai-yadav",
"committed_at": "2026-07-27T12:22:20Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "cb85b4e50a7c33880a6341cee8c6f7720f969f2f",
"body": "Phase 0: pin the bundle contract before multi-tool work",
"is_bot": false,
"headline": "Merge pull request #16 from gowtham-sai-yadav/feat/phase0-safety-net",
"author_name": "Gowtham Sai G",
"author_login": "gowtham-sai-yadav",
"committed_at": "2026-07-27T12:21:12Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "412c54f188303c0e1deb78441e5c6a10b2d88232",
"body": "filepath.Join(root, \"sessions\", \"2026/07/01\") mixes separators on Windows.\nIt happens to work there, since Windows accepts forward slashes, but it is not\nwhat Codex writes and it made the GroupKey assertion depend on how filepath.Dir\nhandles a mixed path. Split the date into real elements instead.",
"is_bot": false,
"headline": "Phase 2: build the test's date bucket with native separators",
"author_name": "gowtham-sai-yadav",
"author_login": "gowtham-sai-yadav",
"committed_at": "2026-07-27T12:20:36Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0c461f515d2a09e8dc056569c83fc2f1ee7c17bd",
"body": "Adds internal/agent/codex, and a --tool flag on `sessions`. Default is unchanged:\n`sessions` with no flag produces byte-identical output to before, verified by\ndiffing builds. Codex is opt-in via --tool codex, and --tool all lists every tool\nfound on the machine.\n\nCodex records each conversation as \n[…]\nare untouched.\n\nThe listing states plainly that non-Claude sessions cannot be shared or moved yet,\nrather than letting someone discover it when share fails on a session this command\njust offered them.",
"is_bot": false,
"headline": "Phase 2: list OpenAI Codex CLI sessions",
"author_name": "gowtham-sai-yadav",
"author_login": "gowtham-sai-yadav",
"committed_at": "2026-07-27T12:20:33Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "8c9b3168233d890b21b24128d237e8323a4d810f",
"body": "Adds internal/agent: a Provider contract, a registry, and one shared vocabulary\n(Roots, Session) for describing where a coding tool keeps its sessions and what\nis there. Pure refactor - `sessions` and `sessions --json` produce byte-identical\noutput before and after, verified by diffing two builds.\n\n\n[…]\nojects directory, since `claude --version`\nalone creates an empty ~/.claude.\n\nRegistration happens in the provider's own init, so importing a provider is what\nenables it and no central list can drift.",
"is_bot": false,
"headline": "Phase 1: introduce the provider seam, Claude Code only",
"author_name": "gowtham-sai-yadav",
"author_login": "gowtham-sai-yadav",
"committed_at": "2026-07-27T12:20:13Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "5cc23172fc69ec1c9f09e40e5e3049e2c3021271",
"body": "The two new round-trip tests failed on Windows while the product was correct.\nA transcript is JSON, so a Windows path is stored with escaped separators\n(\"C:\\\\Users\\\\bob\") - which is exactly what newPathRewriter writes, via\njson.Marshal. The assertions concatenated the raw path instead, so they looked\nfor single backslashes and missed.\n\nAssertions now build the needle with json.Marshal too, which fixes Windows and\nadditionally covers the escaping itself rather than assuming it.",
"is_bot": false,
"headline": "Phase 0: compare transcript paths in their JSON-escaped form",
"author_name": "gowtham-sai-yadav",
"author_login": "gowtham-sai-yadav",
"committed_at": "2026-07-27T12:19:56Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "9a75f94b63f825fbf6f92f3b11d9522d29ffcd60",
"body": "Groundwork for supporting more than one coding agent. No behaviour changes for\nexisting users; this exists so the next phases cannot quietly break them.\n\nBundle layout is a compatibility surface: every released binary decides where to\nwrite a bundle's contents by matching its path prefixes, and noth\n[…]\nntial in the source config never travels, that\nre-import does not clobber local work, and that legacy manifests keep their\ndefaults.\n\nAdds an unofficial/not-affiliated notice for Anthropic trademarks.",
"is_bot": false,
"headline": "Phase 0: pin the bundle contract before multi-tool work",
"author_name": "gowtham-sai-yadav",
"author_login": "gowtham-sai-yadav",
"committed_at": "2026-07-27T11:05:07Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "64d206e08090cbe0cfb409ab06ef4cbf157dc27c",
"body": "transfer: fall back to TLS/443 when the default server is blocked",
"is_bot": false,
"headline": "Merge pull request #15 from gowtham-sai-yadav/fix/transfer-fallback",
"author_name": "Gowtham Sai G",
"author_login": "gowtham-sai-yadav",
"committed_at": "2026-07-27T10:54:30Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "857dda3fc2aff7e933fde5c76e72864ee0f612d0",
"body": "The library default mailbox speaks plain HTTP on port 4000 and its transit relay\nuses 4001. Conference, campus, and office networks routinely permit only 80 and\n443, so `send` died with a raw dial error at a hackathon venue - on the exact\nfeature the project leads with.\n\nSend and Receive now retry o\n[…]\nnotice.\n\nAlso pins the wormhole AppID to its literal value. It is wire compatibility with\nevery installed copy, and the existing test compared the constant to itself, so\nit could never catch a change.",
"is_bot": false,
"headline": "transfer: fall back to TLS/443 when the default server is blocked",
"author_name": "gowtham-sai-yadav",
"author_login": "gowtham-sai-yadav",
"committed_at": "2026-07-27T10:38:58Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "caf1f96dfb1cdb9e52e6a0ed889d373767e1d046",
"body": "vscode: auto-install the CLI on first use (checksum-verified)",
"is_bot": false,
"headline": "Merge pull request #14 from gowtham-sai-yadav/feat/vscode-auto-install",
"author_name": "Gowtham Sai G",
"author_login": "gowtham-sai-yadav",
"committed_at": "2026-07-24T22:42:47Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "9293067ee7e84ac55d8930321a6acfb90f45c4bb",
"body": "The extension now provisions the claude-teleport binary itself, so installing\nthe extension is all a user does. getBin() prefers a binary already on PATH;\notherwise it downloads the right release asset for the OS/arch, follows GitHub's\nredirects, verifies the SHA-256 against SHA256SUMS.txt (mirrorin\n[…]\n now say the extension\ninstalls the CLI for you (and the pointer mentions the sidebar). The npm-test\nstub covers the progress API; the download+verify path was checked against the\nlive GitHub release.",
"is_bot": false,
"headline": "vscode: auto-install the CLI on first use (checksum-verified)",
"author_name": "gowtham-sai-yadav",
"author_login": "gowtham-sai-yadav",
"committed_at": "2026-07-24T16:12:37Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "cce8e5bbf568c791b12acbdaf75b74d758820d44",
"body": "Add VS Code extension (thin CLI wrapper) + sessions --json",
"is_bot": false,
"headline": "Merge pull request #13 from gowtham-sai-yadav/feat/vscode-extension",
"author_name": "Gowtham Sai G",
"author_login": "gowtham-sai-yadav",
"committed_at": "2026-07-24T15:47:08Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e39524bb0b78ee8c1f6c0520d1718ad0981f775b",
"body": "A logic-free VS Code extension in vscode/ that drives the claude-teleport\nbinary. It adds a Teleport sidebar (Activity Bar) listing your sessions with\nclick/hover actions (send, share, copy id), a status-bar button, and Command\nPalette commands: send a session by code, receive one, share to a file, \n[…]\n(fields, empty -> [], project\nfilter, temp-dir exclusion); vscode `npm test` stubs the VS Code API, runs\nactivate(), and asserts every declared command has a handler and every menu\nreference resolves.",
"is_bot": false,
"headline": "Add VS Code extension (thin CLI wrapper) + sessions --json",
"author_name": "gowtham-sai-yadav",
"author_login": "gowtham-sai-yadav",
"committed_at": "2026-07-24T15:45:08Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "a221e0136c9095954096bcd9ac74e5e7f34554b2",
"body": "docs: show the interactive cockpit in the README",
"is_bot": false,
"headline": "Merge pull request #12 from gowtham-sai-yadav/docs/tui-readme",
"author_name": "Gowtham Sai G",
"author_login": "gowtham-sai-yadav",
"committed_at": "2026-07-24T14:38:59Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "3d90a45ff0ada04367a754750d72f7f9227f584c",
"body": "- new \"Start here: the interactive cockpit\" section with the home and\n help screenshots, and the hand-off preview in the sharing section\n- add `tui` to the command list; FAQ note on the temp-dir filter\n- docs/tui.tape + docs/demo-seed.sh reproduce the stills against a\n seeded demo history (no real sessions), rendered with VHS",
"is_bot": false,
"headline": "docs: show the interactive cockpit in the README (v0.5.0)",
"author_name": "gowtham-sai-yadav",
"author_login": "gowtham-sai-yadav",
"committed_at": "2026-07-24T14:33:55Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "10682a1b8b2a911e4396c82122d486181866d70a",
"body": "Interactive TUI cockpit + hide temp-dir sessions",
"is_bot": false,
"headline": "Merge pull request #11 from gowtham-sai-yadav/feat/tui",
"author_name": "Gowtham Sai G",
"author_login": "gowtham-sai-yadav",
"committed_at": "2026-07-24T14:06:52Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "63dcc76e5864b0108ce0949d15fc2049263cecd2",
"body": "internal/tui: a full-screen Bubble Tea cockpit, launched with\n`claude-teleport tui` (and the default when a terminal is attached;\npiped/redirected still prints help). One screen reaches every feature,\nreusing the existing exporter/transfer/importer/updater building blocks\nand never printing to stdou\n[…]\nhen it shells out to `claude` from a scratch dir (a log\nanalyzer created 270+ in one run). Override with CLAUDE_TELEPORT_INCLUDE_TEMP=1.\n\ncli: `tui`/`ui` command, TTY-aware default, updated help text.",
"is_bot": false,
"headline": "Add interactive TUI cockpit; hide temp-dir sessions",
"author_name": "gowtham-sai-yadav",
"author_login": "gowtham-sai-yadav",
"committed_at": "2026-07-24T14:02:35Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "4616f2a448d0eb5d58890cd35319ab12530cec14",
"body": "docs: reposition README around sharing",
"is_bot": false,
"headline": "Merge pull request #10 from gowtham-sai-yadav/docs/reposition-sharing",
"author_name": "Gowtham Sai G",
"author_login": "gowtham-sai-yadav",
"committed_at": "2026-07-22T11:32:07Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "6457eaf1a14aa2500356e4940eacf17c548753a9",
"body": "…ation)\n\nSharing a session with a teammate is the headline now; migration is a feature.\nNew tagline and intro emphasize the collaborative use case and the private,\nno-account, end-to-end-encrypted angle. Reordered the body so 'Share a session'\ncomes before 'Move to a new machine'.",
"is_bot": false,
"headline": "docs: reposition around sharing (lead with session handoff, then migr…",
"author_name": "gowtham-sai-yadav",
"author_login": "gowtham-sai-yadav",
"committed_at": "2026-07-22T11:30:54Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2cb239a97707f4ac4ecea05181edd0952f3edbad",
"body": "docs: rewrite README (shorter, clearer, less clutter)",
"is_bot": false,
"headline": "Merge pull request #9 from gowtham-sai-yadav/docs/readme-rewrite",
"author_name": "Gowtham Sai G",
"author_login": "gowtham-sai-yadav",
"committed_at": "2026-07-22T00:25:26Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "063296f4cadacb611ac3dc9de91b1124d23bb322",
"body": "Cut from 451 to ~230 lines. Lead with the happy path in plain language\n(install, move to a new machine, share), and fold reference, safety/how-it-works,\nand FAQ into collapsible sections so the page is scannable without losing detail.\nDrop the manual table of contents (GitHub's outline covers it) and the\nnear-empty star-history chart. Trim badges. No behavior or command changes.",
"is_bot": false,
"headline": "docs: rewrite README, shorter and easier to follow",
"author_name": "gowtham-sai-yadav",
"author_login": "gowtham-sai-yadav",
"committed_at": "2026-07-21T22:58:16Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "512309671d0aa252d5bbfd145a427698c8d2c244",
"body": "fix(release): Homebrew formula instead of cask (fixes Gatekeeper block)",
"is_bot": false,
"headline": "Merge pull request #8 from gowtham-sai-yadav/fix/homebrew-formula",
"author_name": "Gowtham Sai G",
"author_login": "gowtham-sai-yadav",
"committed_at": "2026-07-21T22:21:18Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c29971b39cd185f6287bc4a1c84615618fe5ac87",
"body": "Casks quarantine their download, so macOS Gatekeeper blocks our unsigned binary\n(it offers to move it to the Bin), and a cask cannot stage a bare binary anyway,\nleaving a dangling symlink. A formula installs the CLI binary with no quarantine\nand stages it correctly. Install becomes 'brew install <tap>/claude-teleport'\n(no --cask). README documents Homebrew. (brews is deprecated in goreleaser but\nworks; the non-deprecated path is a signed cask, which needs an Apple dev cert.)",
"is_bot": false,
"headline": "fix(release): ship a Homebrew formula, not a cask",
"author_name": "gowtham-sai-yadav",
"author_login": "gowtham-sai-yadav",
"committed_at": "2026-07-21T22:19:22Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f012a49db5dcaba3bbdcedb8b161889ee23d58ae",
"body": "feat: self-update command + tag-driven versioning",
"is_bot": false,
"headline": "Merge pull request #7 from gowtham-sai-yadav/feat/update-command",
"author_name": "Gowtham Sai G",
"author_login": "gowtham-sai-yadav",
"committed_at": "2026-07-21T22:02:36Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f1e549bab4b4b061ef165c6b7b38fd46bea6b4e8",
"body": null,
"is_bot": false,
"headline": "docs: document 'claude-teleport update' and refresh the Updating section",
"author_name": "gowtham-sai-yadav",
"author_login": "gowtham-sai-yadav",
"committed_at": "2026-07-21T20:17:17Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "dc82c15ea743f1520131945c2b09a26df649ca1e",
"body": "Add 'claude-teleport update [--check] [--yes]' over the updater package. Stop\nhard-coding the version: the linker stamps it from the tag at release time\n(goreleaser -X ...cli.version), and go install builds read it from the module\nbuild info. This fixes tags and reported version drifting apart (v0.3.1 shipped\nreporting 0.3.0 because the const was never bumped).",
"is_bot": false,
"headline": "feat(cli): add 'update' command; derive version from the git tag",
"author_name": "gowtham-sai-yadav",
"author_login": "gowtham-sai-yadav",
"committed_at": "2026-07-21T20:17:17Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f12cc0b942c6a6d65a25d50546f55ee43539464b",
"body": "…ap binary)\n\nAdd internal/updater: queries the GitHub releases API for the latest tag,\ncompares it numerically to the running version, and on request downloads the\nbuild for this machine, verifies its SHA-256 against SHA256SUMS.txt, and\natomically replaces the running executable (with the Windows move-aside dance).\nStdlib only. Unit tests cover version comparison and asset naming.",
"is_bot": false,
"headline": "feat(updater): self-update package (check latest, verify checksum, sw…",
"author_name": "gowtham-sai-yadav",
"author_login": "gowtham-sai-yadav",
"committed_at": "2026-07-21T20:17:17Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c2ce0b91250279057a6feac1ad501374e5490cb0",
"body": "build: release via GoReleaser (Homebrew + deb/rpm)",
"is_bot": false,
"headline": "Merge pull request #6 from gowtham-sai-yadav/feat/goreleaser",
"author_name": "Gowtham Sai G",
"author_login": "gowtham-sai-yadav",
"committed_at": "2026-07-21T20:00:03Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "39378de4ae6e975732d88376c99574ce294e1d92",
"body": "feat: one-line install (curl | sh and irm | iex)",
"is_bot": false,
"headline": "Merge pull request #5 from gowtham-sai-yadav/feat/one-line-install",
"author_name": "Gowtham Sai G",
"author_login": "gowtham-sai-yadav",
"committed_at": "2026-07-21T19:53:16Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "9842aac676d4972c7cd964b131ba7ed59ed2968c",
"body": null,
"is_bot": false,
"headline": "docs: use branded gowthamsai.in URL for the one-line install",
"author_name": "gowtham-sai-yadav",
"author_login": "gowtham-sai-yadav",
"committed_at": "2026-07-21T19:50:49Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ee8a2fbabb982a620730c8f1698cfdd781beec8a",
"body": "Replace the hand-rolled cross-compile workflow with GoReleaser. On a tag it\nbuilds all targets, publishes the GitHub release with checksums, updates a\nHomebrew tap, and produces .deb/.rpm packages. Release asset names and\nSHA256SUMS.txt are unchanged, so install.sh and the download table keep workin\n[…]\nlidated locally with 'goreleaser check' and a --snapshot build.\n\nRequires a one-time setup before the next tag: create the homebrew-tap repo and\nadd a TAP_GITHUB_TOKEN secret (see the PR description).",
"is_bot": false,
"headline": "build: release via GoReleaser (Homebrew tap + deb/rpm from one tag)",
"author_name": "gowtham-sai-yadav",
"author_login": "gowtham-sai-yadav",
"committed_at": "2026-07-21T14:11:45Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "fcbccb0e0f46fa2453a044eef81a4c07c9306747",
"body": "Add install.sh (curl | sh) and install.ps1 (irm | iex) that download the right\nprebuilt binary from the latest release, verify its SHA-256 checksum, and put it\non PATH. README now leads with the one-liner so a new user needs a single\ncommand instead of go install plus manual PATH setup.",
"is_bot": false,
"headline": "feat: one-line install script for macOS, Linux, and Windows",
"author_name": "gowtham-sai-yadav",
"author_login": "gowtham-sai-yadav",
"committed_at": "2026-07-21T14:03:15Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "fb7d735d4c5ef139e1eb373bdb8b46d68f207087",
"body": "feat: send a session by code over an encrypted wormhole (v0.3.0)",
"is_bot": false,
"headline": "Merge pull request #4 from gowtham-sai-yadav/feat/wormhole-transfer",
"author_name": "Gowtham Sai G",
"author_login": "gowtham-sai-yadav",
"committed_at": "2026-07-20T21:31:45Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "6066ab95f2a00e3ab0f6a5a16ed30df4c1a97dfc",
"body": "README gains a code-transfer section and command reference. DESIGN.md records\nthe architecture and the reasoning: path recovery, cross-OS rewriting, the\nsecurity model, and why the transfer is built on PAKE via wormhole-william.",
"is_bot": false,
"headline": "docs: document send/receive and add DESIGN.md",
"author_name": "gowtham-sai-yadav",
"author_login": "gowtham-sai-yadav",
"committed_at": "2026-07-20T21:16:59Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "dfd2ea582357055a768ebb3a6b2ee2b3ebb8656c",
"body": "send builds and scrubs a session, streams it over a wormhole, and prints a code;\nreceive pulls it in and hands it to the importer (attach-to-cwd, verify).\nTimeouts, Ctrl-C cancellation, a received-size cap, and --rendezvous/--relay\n(plus CLAUDE_TELEPORT_* env) for self-hosting.",
"is_bot": false,
"headline": "feat(cli): add send and receive commands; bump to 0.3.0",
"author_name": "gowtham-sai-yadav",
"author_login": "gowtham-sai-yadav",
"committed_at": "2026-07-20T21:16:59Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "04c64c169737f41d52e8295e618017b91703dc21",
"body": "Split bundle building (PrepareShare) from writing (WriteBundle), so share writes\na file and send streams the same bytes over a wormhole. Keeps the redaction and\nthe 'what leaves your machine' preview in one place. Adds build-path tests.",
"is_bot": false,
"headline": "refactor(exporter): build a session bundle in memory, then choose a sink",
"author_name": "gowtham-sai-yadav",
"author_login": "gowtham-sai-yadav",
"committed_at": "2026-07-20T21:16:59Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e27f284701a295cbb3cb75c3316ea39a35bb07c6",
"body": "Wrap wormhole-william behind a small Send/Receive API. A short code becomes a\nstrong key via PAKE so the rendezvous server never learns it; bulk data goes\ndirect or via a relay that only sees ciphertext. Uses a claude-teleport AppID so\ncodes only pair our clients, and allows self-hosted servers. Includes a gated\nintegration test (real round trip over an in-process server) and unit tests.",
"is_bot": false,
"headline": "feat(transfer): end-to-end-encrypted session transfer over a wormhole",
"author_name": "gowtham-sai-yadav",
"author_login": "gowtham-sai-yadav",
"committed_at": "2026-07-20T21:16:59Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "9a16c21d1993c5e3b09cc034036f399f745280f6",
"body": "Add bundle.NewWriter(io.Writer) so a bundle can be written to a file, an\nin-memory buffer, or a network stream (Create still owns closing the file it\nopens). Add the wormhole-william dependency that the transfer feature builds on.",
"is_bot": false,
"headline": "feat(bundle): stream bundles to any writer; add wormhole-william dep",
"author_name": "gowtham-sai-yadav",
"author_login": "gowtham-sai-yadav",
"committed_at": "2026-07-20T21:16:59Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "13bd962ca585aca3cb756cb3217c079183f554f3",
"body": "fix(share): human-readable sizes + project disambiguation (v0.2.1)",
"is_bot": false,
"headline": "Merge pull request #3 from gowtham-sai-yadav/fix/share-output-v0.2.1",
"author_name": "Gowtham Sai G",
"author_login": "gowtham-sai-yadav",
"committed_at": "2026-07-08T12:54:50Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4dccc9c77be55698a07d4290bd01ea84d3ef3b17",
"body": "…ambiguation\n\n- format byte sizes as B/KB/MB/GB so small shares no longer read as 0.0 MB\n- preview size now totals transcript + sidecar + included memory (everything\n that actually leaves the machine), not just the transcript\n- truncate session titles by rune so multibyte characters are not cut in half\n- add --project to share and list each match's project in the ambiguous-id\n error, since the same session id can exist under multiple projects\n- bump version to 0.2.1",
"is_bot": false,
"headline": "fix(share): human-readable sizes, accurate content total, project dis…",
"author_name": "gowtham-sai-yadav",
"author_login": "gowtham-sai-yadav",
"committed_at": "2026-07-08T12:24:15Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "75b4da6fcc683e4b8ed8a8fef9489f13d8cd4e27",
"body": null,
"is_bot": false,
"headline": "docs: add Updating section explaining how to upgrade",
"author_name": "gowtham-sai-yadav",
"author_login": "gowtham-sai-yadav",
"committed_at": "2026-07-08T12:07:08Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "9d7fcd91f2ce3324e5de9afe00d2f5111e000253",
"body": null,
"is_bot": false,
"headline": "chore: bump version to 0.2.0 for session-sharing release (#2)",
"author_name": "Gowtham Sai G",
"author_login": "gowtham-sai-yadav",
"committed_at": "2026-07-08T12:00:29Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "685a88656ec03229966050db25cd4768d6ab64d3",
"body": "Feature/session sharing",
"is_bot": false,
"headline": "Merge pull request #1 from gowtham-sai-yadav/feature/session-sharing",
"author_name": "Gowtham Sai G",
"author_login": "gowtham-sai-yadav",
"committed_at": "2026-07-08T11:23:59Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ba8e14584dacdea308b8480b8becec70890a3cf2",
"body": "Wire up 'claude-teleport sessions' (list) and 'claude-teleport share'\n(pack one session, with confirmation summary and secret masking). Show\nbundle kind in inspect. Add a README section and help text for handing a\nsingle session to a teammate.",
"is_bot": false,
"headline": "feat(cli): add sessions and share commands, document session handoff",
"author_name": "gowtham-sai-yadav",
"author_login": "gowtham-sai-yadav",
"committed_at": "2026-07-02T13:12:08Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a40a7617b5bf9f2f40d7fda7bfb0b398ac4728c9",
"body": "Add exporter.RunShare: builds a single-session bundle (transcript plus\nits subagent sidecar), scrubbing secrets and previewing what leaves the\nmachine before writing. On import, a session bundle is auto-detected and\nmapped onto the current directory so a teammate resumes it in their own\ncopy of the project.",
"is_bot": false,
"headline": "feat(share): pack one session, attach it to the target dir on import",
"author_name": "gowtham-sai-yadav",
"author_login": "gowtham-sai-yadav",
"committed_at": "2026-07-02T13:12:08Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "9b5e611b83f9768196229e1f9f89d54738bf0816",
"body": "Add claudedir.ListSessions/FindSession/LastSession to locate a single\nconversation across projects (with message count and a title from the\nfirst prompt). Add manifest Kind/SessionID/Redacted so a bundle can\ndeclare it carries one shared session rather than a full backup.",
"is_bot": false,
"headline": "feat(sessions): discover sessions and add session-bundle manifest fields",
"author_name": "gowtham-sai-yadav",
"author_login": "gowtham-sai-yadav",
"committed_at": "2026-07-02T13:12:08Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b876b5ec3159fda76db693bf1b70b66f68055c26",
"body": "Add internal/redact: masks likely secrets (API keys, tokens, JWTs,\nprivate-key blocks, keyed password/secret assignments) before a\ntranscript can leave the machine. Handles JSON-escaped quotes so\nsecrets pasted into chat are caught. Documented as best-effort, with\nunit tests covering each rule and JSON validity of scrubbed output.",
"is_bot": false,
"headline": "feat(redact): best-effort secret scrubber for shared sessions",
"author_name": "gowtham-sai-yadav",
"author_login": "gowtham-sai-yadav",
"committed_at": "2026-07-02T13:12:08Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "14fbb2069fb126cd8461c856cb0d80e93b408905",
"body": "Lead with the origin story (switching Linux to Mac, no clean way to move Claude Code) so the README voice matches the video and reads human.",
"is_bot": false,
"headline": "docs: rewrite intro in a personal voice matching the demo video",
"author_name": "gowtham-sai-yadav",
"author_login": "gowtham-sai-yadav",
"committed_at": "2026-07-01T00:29:10Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "6a198670cbe8670837a897de303fcb23ad306200",
"body": "Release including the import path-traversal guard and export secret allowlist.",
"is_bot": false,
"headline": "chore: bump version to 0.1.1",
"author_name": "gowtham-sai-yadav",
"author_login": "gowtham-sai-yadav",
"committed_at": "2026-07-01T00:20:03Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "82d9fec5beba00336ab7c9fc5b8ef50cc461c5ed",
"body": "Ignore the claude-teleport binary and claude-teleport-backup-* bundles (were still named claude-port after the rename).",
"is_bot": false,
"headline": "chore: fix stale binary and bundle names in .gitignore",
"author_name": "gowtham-sai-yadav",
"author_login": "gowtham-sai-yadav",
"committed_at": "2026-07-01T00:19:27Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ca7ab43f57867474aa3d0163d600327743b212e5",
"body": "Optimized 800x450 demo GIF (4.3MB) at the top of the README, a Go Report Card badge, and a live star-history chart before the license.",
"is_bot": false,
"headline": "docs: add demo GIF hero, Go Report Card badge, and star-history chart",
"author_name": "gowtham-sai-yadav",
"author_login": "gowtham-sai-yadav",
"committed_at": "2026-07-01T00:19:27Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1d74e0fb0b15e90e27ff0e00a8f4c5d908a7970e",
"body": "Export used a denylist, so any secret field not enumerated (e.g. primaryApiKey) shipped inside the bundle. Switch to an allowlist that keeps only 'projects' (the only field import uses), dropping device identity, tokens, and API keys by default. Adds a secret-leak regression test.",
"is_bot": false,
"headline": "fix(export): allowlist .claude.json fields so secrets never ship",
"author_name": "gowtham-sai-yadav",
"author_login": "gowtham-sai-yadav",
"committed_at": "2026-07-01T00:02:23Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "61e8701c61700e5c3b9b922eebdbc3c82c03577d",
"body": "A crafted bundle could use ../ in entry names to write files outside the Claude config dir (path traversal / zip-slip), an arbitrary-file-write risk when importing a bundle authored by someone else. safeJoin now refuses any entry whose destination would escape the target; refused entries are counted and a warning is printed. Legitimate bundles never contain '..'. Adds a containment regression test.",
"is_bot": false,
"headline": "fix(import): reject bundle entries that escape the target directory",
"author_name": "gowtham-sai-yadav",
"author_login": "gowtham-sai-yadav",
"committed_at": "2026-07-01T00:02:23Z",
"body_truncated": false,
"is_coding_agent": false
}
],
"releases_count": 17,
"commits_last_year": 120,
"latest_release_at": "2026-07-30T17:24:32Z",
"latest_release_tag": "v0.7.1",
"releases_from_tags": false,
"days_since_last_push": 2,
"active_weeks_last_year": 4,
"days_since_latest_release": 2,
"mean_days_between_releases": 0.7
},
"community": {
"has_readme": true,
"has_license": true,
"has_description": true,
"has_contributing": true,
"health_percentage": 71,
"has_issue_template": false,
"has_code_of_conduct": false,
"has_pull_request_template": false
},
"ecosystem": {
"packages": [
{
"name": "github.com/gowtham-sai-yadav/entangle",
"exists": true,
"license": null,
"keywords": [],
"ecosystem": "go",
"matches_repo": true,
"registry_url": "https://pkg.go.dev/github.com/gowtham-sai-yadav/entangle",
"is_deprecated": false,
"latest_version": "v0.7.1",
"repository_url": "https://github.com/gowtham-sai-yadav/entangle",
"versions_count": 17,
"total_downloads": null,
"dependents_count": null,
"deprecation_note": null,
"maintainers_count": null,
"monthly_downloads": null,
"first_published_at": null,
"latest_published_at": "2026-07-30T17:15:23Z",
"latest_version_yanked": null,
"days_since_latest_publish": 2
},
{
"name": "entangle",
"exists": true,
"license": "MIT",
"keywords": [
"distributed",
"object",
"database",
"persistence",
"persist",
"entangle",
"entangled",
"rpc"
],
"ecosystem": "npm",
"matches_repo": false,
"registry_url": "https://www.npmjs.com/package/entangle",
"is_deprecated": false,
"latest_version": "0.0.1",
"repository_url": "entanglejs/entangle",
"versions_count": 1,
"total_downloads": null,
"dependents_count": null,
"deprecation_note": null,
"maintainers_count": 2,
"monthly_downloads": 67,
"first_published_at": "2013-10-15T16:56:10.301000Z",
"latest_published_at": "2013-10-15T16:56:11.833000Z",
"latest_version_yanked": null,
"days_since_latest_publish": 4673
}
]
},
"popularity": {
"forks": 2,
"stars": 20,
"watchers": 0,
"fork_history": {
"days": [
{
"date": "2026-07-21",
"count": 1
},
{
"date": "2026-07-30",
"count": 1
}
],
"complete": true,
"collected": 2,
"total_forks": 2
},
"star_history": null,
"open_issues_and_prs": 4
},
"ai_readiness": {
"has_nix": false,
"example_dirs": [],
"has_llms_txt": false,
"has_dockerfile": false,
"has_mcp_signal": false,
"bootstrap_files": [],
"api_schema_files": [],
"has_devcontainer": false,
"typecheck_configs": [
"vscode/tsconfig.json"
],
"toolchain_manifests": [
"go.mod"
],
"largest_source_bytes": 47685,
"source_files_sampled": 62,
"oversized_source_files": 0,
"agent_instruction_files": [],
"agent_instruction_max_bytes": null
},
"dependencies": {
"manifests": [
"go.mod",
"vscode/package.json"
],
"advisories": {
"error": null,
"scope": "published_package",
"source": "osv",
"findings": [],
"collected": true,
"malicious": [],
"truncated": false,
"by_severity": {},
"advisory_count": 0,
"affected_count": 0,
"assessed_count": 3,
"malicious_count": 0,
"assessed_package": "npm:entangle@0.0.1",
"unassessed_count": 0,
"direct_affected_count": 0
},
"ecosystems": [
"go",
"npm"
],
"dependencies": [
{
"name": "github.com/atotto/clipboard",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v0.1.4"
},
{
"name": "github.com/charmbracelet/bubbles",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.0.0"
},
{
"name": "github.com/charmbracelet/bubbletea",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.3.10"
},
{
"name": "github.com/charmbracelet/lipgloss",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.1.0"
},
{
"name": "github.com/common-nighthawk/go-figure",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v0.0.0-20210622060536-734e95fb86be"
},
{
"name": "github.com/klauspost/compress",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.17.11"
},
{
"name": "github.com/psanford/wormhole-william",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.0.8"
},
{
"name": "golang.org/x/term",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v0.27.0"
}
],
"all_dependencies": {
"error": "GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository",
"source": null,
"packages": [],
"collected": false,
"truncated": false,
"total_count": null,
"direct_count": null,
"indirect_count": null
}
},
"maintainership": {
"issues": {
"open_prs": 0,
"merged_prs": 40,
"open_issues": 4,
"closed_ratio": 0.333,
"closed_issues": 2,
"closed_unmerged_prs": 0
},
"bus_factor": 1,
"bot_contributors": 0,
"top_contributors": [
{
"type": "User",
"login": "gowtham-sai-yadav",
"commits": 120,
"avatar_url": "https://avatars.githubusercontent.com/u/144474031?v=4"
}
],
"contributors_sampled": 1,
"top_contributor_share": 1
},
"quality_signals": {
"has_ci": true,
"has_tests": true,
"ci_workflows": [
"ci.yml",
"release.yml"
],
"has_docs_dir": true,
"linter_configs": [],
"has_editorconfig": false,
"has_linter_config": false,
"has_precommit_config": false
},
"security_signals": {
"lockfiles": [
"go.sum",
"package-lock.json"
],
"scorecard": {
"checks": [
{
"name": "Binary-Artifacts",
"score": 10,
"reason": "no binaries found in the repo",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#binary-artifacts"
},
{
"name": "Branch-Protection",
"score": 3,
"reason": "branch protection is not maximal on development and all release branches",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#branch-protection"
},
{
"name": "CI-Tests",
"score": 10,
"reason": "13 out of 13 merged PRs checked by a CI test -- score normalized to 10",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#ci-tests"
},
{
"name": "CII-Best-Practices",
"score": 0,
"reason": "no effort to earn an OpenSSF best practices badge detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#cii-best-practices"
},
{
"name": "Code-Review",
"score": 0,
"reason": "Found 0/13 approved changesets -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#code-review"
},
{
"name": "Contributors",
"score": 3,
"reason": "project has 1 contributing companies or organizations -- score normalized to 3",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#contributors"
},
{
"name": "Dangerous-Workflow",
"score": 10,
"reason": "no dangerous workflow patterns detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dangerous-workflow"
},
{
"name": "Dependency-Update-Tool",
"score": 0,
"reason": "no update tool detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dependency-update-tool"
},
{
"name": "Fuzzing",
"score": 0,
"reason": "project is not fuzzed",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#fuzzing"
},
{
"name": "License",
"score": 10,
"reason": "license file detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#license"
},
{
"name": "Maintained",
"score": 0,
"reason": "project was created within the last 90 days. Please review its contents carefully",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#maintained"
},
{
"name": "Packaging",
"score": 10,
"reason": "packaging workflow detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#packaging"
},
{
"name": "Pinned-Dependencies",
"score": 0,
"reason": "dependency not pinned by hash detected -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#pinned-dependencies"
},
{
"name": "SAST",
"score": 0,
"reason": "SAST tool is not run on all commits -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#sast"
},
{
"name": "Security-Policy",
"score": 10,
"reason": "security policy file detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#security-policy"
},
{
"name": "Signed-Releases",
"score": 0,
"reason": "Project has not signed or included provenance with any releases.",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#signed-releases"
},
{
"name": "Token-Permissions",
"score": 0,
"reason": "detected GitHub workflow tokens with excessive permissions",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#token-permissions"
},
{
"name": "Vulnerabilities",
"score": 0,
"reason": "21 existing vulnerabilities detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#vulnerabilities"
}
],
"commit": "15febe60fc74cc3dc9eb235ae9198795ccc6dadd",
"ran_at": "2026-08-02T15:12:36Z",
"aggregate_score": 3.4,
"scorecard_version": "v5.5.0"
},
"has_codeql_workflow": false,
"has_security_policy": true,
"has_dependabot_config": false
},
"contribution_flow": {
"collected": true,
"ci_last_run_at": "2026-07-31T13:02:24Z",
"oldest_open_prs": [],
"last_merged_pr_at": "2026-07-31T13:01:25Z",
"ci_last_conclusion": "SUCCESS",
"oldest_open_issues": [
{
"number": 36,
"created_at": "2026-07-30T12:34:34Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 37,
"created_at": "2026-07-30T12:34:51Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 38,
"created_at": "2026-07-30T12:35:08Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 41,
"created_at": "2026-07-30T12:40:06Z",
"last_comment_at": null,
"last_comment_author": null
}
]
}
},
"config": {
"disabled_metrics": [],
"disabled_categories": [],
"disabled_components": {}
},
"source": {
"url": "https://github.com/gowtham-sai-yadav/entangle",
"host": "github.com",
"name": "entangle",
"owner": "gowtham-sai-yadav"
},
"metrics": {
"overall": {
"key": "overall",
"band": "moderate",
"name": "Overall health",
"note": "The weighted overall 58 is calibrated to 62 on the published index scale (record calibration 2026-08-02).",
"notes": [
{
"code": "overall_calibration",
"params": {
"raw": 58,
"calibrated": 62,
"calibration": "2026-08-02"
}
}
],
"value": 62,
"inputs": {
"security": 47,
"vitality": 70,
"community": 44,
"governance": 46,
"calibration": "2026-08-02",
"engineering": 81,
"ai_readiness": 58,
"weighted_overall_raw": 58
},
"components": []
},
"categories": [
{
"key": "vitality",
"band": "good",
"name": "Vitality",
"value": 70,
"weight": 0.21,
"metrics": [
{
"key": "development_activity",
"band": "moderate",
"name": "Development activity",
"note": null,
"notes": [],
"value": 57,
"inputs": {
"commits_last_year": 120,
"human_commit_share": 1,
"days_since_last_push": 2,
"active_weeks_last_year": 4
},
"components": [
{
"key": "push_recency",
"name": "Push recency",
"detail": "last push 2 days ago",
"points": 36,
"status": "met",
"details": [
{
"code": "push_recency",
"params": {
"days": 2
}
}
],
"max_points": 36
},
{
"key": "commit_cadence",
"name": "Commit cadence",
"detail": "4/52 weeks with commits",
"points": 2.8,
"status": "partial",
"details": [
{
"code": "commit_cadence_weeks",
"params": {
"weeks": 4
}
}
],
"max_points": 36
},
{
"key": "commit_volume",
"name": "Commit volume",
"detail": "120 commits in the last year",
"points": 18,
"status": "met",
"details": [
{
"code": "commits_last_year",
"params": {
"count": 120
}
}
],
"max_points": 18
},
{
"key": "openssf_scorecard_maintained",
"name": "OpenSSF Scorecard: Maintained",
"detail": "project was created within the last 90 days. Please review its contents carefully",
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
}
]
},
{
"key": "release_discipline",
"band": "excellent",
"name": "Release discipline",
"note": null,
"notes": [],
"value": 90,
"inputs": {
"releases_count": 17,
"latest_release_tag": "v0.7.1",
"releases_from_tags": false,
"days_since_latest_release": 2,
"mean_days_between_releases": 0.7
},
"components": [
{
"key": "ships_releases",
"name": "Ships releases",
"detail": "17 releases published",
"points": 27,
"status": "met",
"details": [
{
"code": "releases_published",
"params": {
"count": 17
}
}
],
"max_points": 27
},
{
"key": "release_recency",
"name": "Release recency",
"detail": "latest release 2 days ago",
"points": 36,
"status": "met",
"details": [
{
"code": "release_recency",
"params": {
"days": 2
}
}
],
"max_points": 36
},
{
"key": "release_cadence",
"name": "Release cadence",
"detail": "a release every ~0.7 days",
"points": 27,
"status": "met",
"details": [
{
"code": "release_cadence",
"params": {
"gap": 0.7
}
}
],
"max_points": 27
},
{
"key": "openssf_scorecard_signed_releases",
"name": "OpenSSF Scorecard: Signed-Releases",
"detail": "Project has not signed or included provenance with any releases.",
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
}
]
},
{
"key": "abandonment",
"band": "exceptional",
"name": "Abandonment",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"cap": null,
"state": "unverified",
"guards": [],
"signals": [],
"red_flag": false,
"multiplier_pct": 100,
"declared_reason": null,
"unverified_reason": "repository_too_young",
"unanswered_open_prs": null,
"unanswered_open_issues": null,
"days_since_last_merged_pr": null,
"days_since_last_human_commit": null,
"days_since_last_human_commit_is_floor": false
},
"components": [
{
"key": "project_is_still_maintained",
"name": "Project is still maintained",
"detail": "maintenance record not established from the collected data",
"points": 100,
"status": "met",
"details": [
{
"code": "abandonment_unverified",
"params": {}
}
],
"max_points": 100
}
]
}
],
"description": "Is the project alive — is code being written and are releases shipping?"
},
{
"key": "community",
"band": "weak",
"name": "Community & Adoption",
"value": 44,
"weight": 0.17,
"metrics": [
{
"key": "popularity",
"band": "at_risk",
"name": "Popularity & adoption",
"note": null,
"notes": [],
"value": 21,
"inputs": {
"forks": 2,
"stars": 20,
"watchers": 0,
"growth_state": "unverified",
"growth_factor_pct": 100,
"growth_unverified_reason": "no_history"
},
"components": [
{
"key": "stars",
"name": "Stars",
"detail": "20 stars",
"points": 20.7,
"status": "partial",
"details": [
{
"code": "stars",
"params": {
"count": 20
}
}
],
"max_points": 60
},
{
"key": "forks",
"name": "Forks",
"detail": "2 forks",
"points": 0,
"status": "missed",
"details": [
{
"code": "forks",
"params": {
"count": 2
}
}
],
"max_points": 25
},
{
"key": "watchers",
"name": "Watchers",
"detail": "0 watchers",
"points": 0,
"status": "missed",
"details": [
{
"code": "watchers",
"params": {
"count": 0
}
}
],
"max_points": 15
}
]
},
{
"key": "community_health",
"band": "good",
"name": "Community health",
"note": null,
"notes": [],
"value": 70,
"inputs": {
"has_readme": true,
"has_license": true,
"readme_badges": null,
"has_contributing": true,
"has_issue_template": false,
"has_code_of_conduct": false,
"readme_badge_services": [],
"has_pull_request_template": false
},
"components": [
{
"key": "readme",
"name": "README",
"detail": null,
"points": 22.5,
"status": "met",
"details": [],
"max_points": 22.5
},
{
"key": "license",
"name": "License",
"detail": "recognized license (MIT)",
"points": 22.5,
"status": "met",
"details": [
{
"code": "license_standard",
"params": {}
},
{
"code": "license_spdx",
"params": {
"spdx": "MIT"
}
}
],
"max_points": 22.5
},
{
"key": "contributing_guide",
"name": "CONTRIBUTING guide",
"detail": null,
"points": 18,
"status": "met",
"details": [],
"max_points": 18
},
{
"key": "code_of_conduct",
"name": "Code of conduct",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 13.5
},
{
"key": "issue_template",
"name": "Issue template",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.2
},
{
"key": "pr_template",
"name": "PR template",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 6.3
}
]
}
],
"description": "Does the project have users, downloads, attention, and a welcoming setup for contributors?"
},
{
"key": "governance",
"band": "weak",
"name": "Sustainability & Governance",
"value": 46,
"weight": 0.23,
"metrics": [
{
"key": "maintainer_resilience",
"band": "critical",
"name": "Maintainer resilience (bus factor)",
"note": null,
"notes": [],
"value": 13,
"inputs": {
"bus_factor": 1,
"contributors_sampled": 1,
"top_contributor_share": 1
},
"components": [
{
"key": "bus_factor",
"name": "Bus factor",
"detail": "1 contributor(s) cover half of all commits",
"points": 9,
"status": "partial",
"details": [
{
"code": "bus_factor",
"params": {
"count": 1
}
}
],
"max_points": 54
},
{
"key": "commit_distribution",
"name": "Commit distribution",
"detail": "top contributor authored 100% of commits",
"points": 0,
"status": "missed",
"details": [
{
"code": "top_contributor_share",
"params": {
"share": 100
}
}
],
"max_points": 22.5
},
{
"key": "contributor_breadth",
"name": "Contributor breadth",
"detail": "1 contributors",
"points": 1.4,
"status": "partial",
"details": [
{
"code": "contributors_sampled",
"params": {
"count": 1
}
}
],
"max_points": 13.5
},
{
"key": "openssf_scorecard_contributors",
"name": "OpenSSF Scorecard: Contributors",
"detail": "project has 1 contributing companies or organizations -- score normalized to 3",
"points": 3,
"status": "partial",
"details": [],
"max_points": 10
}
]
},
{
"key": "responsiveness",
"band": "moderate",
"name": "Issue & PR responsiveness",
"note": "Excluded from scoring (no data or not applicable): Newcomer PR acceptance. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"newcomer_pr_acceptance"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 51,
"inputs": {
"merged_prs": 40,
"open_issues": 4,
"closed_issues": 2,
"prs_merged_7d": null,
"prs_decided_7d": null,
"prs_merged_30d": null,
"prs_decided_30d": null,
"issue_closed_ratio": 0.333,
"closed_unmerged_prs": 0,
"first_time_authors_30d": null,
"first_time_prs_merged_30d": null,
"first_time_prs_decided_30d": null
},
"components": [
{
"key": "issue_resolution",
"name": "Issue resolution",
"detail": "33% of issues closed",
"points": 14,
"status": "partial",
"details": [
{
"code": "issues_closed_share",
"params": {
"share": 33
}
}
],
"max_points": 42
},
{
"key": "pr_acceptance",
"name": "PR acceptance",
"detail": "40/40 decided PRs merged",
"points": 30,
"status": "met",
"details": [
{
"code": "decided_prs_merged",
"params": {
"merged": 40,
"decided": 40
}
}
],
"max_points": 30
},
{
"key": "newcomer_pr_acceptance",
"name": "Newcomer PR acceptance",
"detail": "no first-time contributor's PR decided in 30d",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_newcomer_prs",
"params": {
"days": 30
}
}
],
"max_points": 13
},
{
"key": "openssf_scorecard_code_review",
"name": "OpenSSF Scorecard: Code-Review",
"detail": "Found 0/13 approved changesets -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
}
]
},
{
"key": "stewardship",
"band": "weak",
"name": "Ownership & stewardship",
"note": "Excluded from scoring (no data or not applicable): Verified domain. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"verified_domain"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 39,
"inputs": {
"followers": 3,
"owner_type": "User",
"is_verified": null,
"owner_login": "gowtham-sai-yadav",
"public_repos": 33,
"account_age_days": 1058
},
"components": [
{
"key": "ownership_backing",
"name": "Ownership backing",
"detail": "personal (user) account",
"points": 10,
"status": "partial",
"details": [
{
"code": "owner_personal",
"params": {}
}
],
"max_points": 30
},
{
"key": "verified_domain",
"name": "Verified domain",
"detail": "not applicable to user accounts",
"points": 0,
"status": "excluded",
"details": [
{
"code": "not_applicable_to_user_accounts",
"params": {}
}
],
"max_points": 20
},
{
"key": "owner_reach",
"name": "Owner reach",
"detail": "3 followers of gowtham-sai-yadav",
"points": 4.3,
"status": "partial",
"details": [
{
"code": "owner_followers",
"params": {
"count": 3,
"login": "gowtham-sai-yadav"
}
}
],
"max_points": 25
},
{
"key": "track_record",
"name": "Track record",
"detail": "33 public repos, account ~2 yr old",
"points": 16.9,
"status": "partial",
"details": [
{
"code": "public_repos",
"params": {
"count": 33
}
},
{
"code": "account_age_years",
"params": {
"years": 2
}
}
],
"max_points": 25
}
]
},
{
"key": "package_maintenance",
"band": "exceptional",
"name": "Package maintenance",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"packages": [
"github.com/gowtham-sai-yadav/entangle"
],
"ecosystems": "go",
"any_deprecated": false,
"min_days_since_publish": 2
},
"components": [
{
"key": "published_resolvable",
"name": "Published & resolvable",
"detail": "1 package(s) on go",
"points": 25,
"status": "met",
"details": [
{
"code": "packages_published",
"params": {
"count": 1,
"ecosystems": "go"
}
}
],
"max_points": 25
},
{
"key": "publish_recency",
"name": "Publish recency",
"detail": "latest publish 2 days ago",
"points": 35,
"status": "met",
"details": [
{
"code": "publish_recency",
"params": {
"days": 2
}
}
],
"max_points": 35
},
{
"key": "version_history",
"name": "Version history",
"detail": "17 published versions",
"points": 20,
"status": "met",
"details": [
{
"code": "published_versions",
"params": {
"count": 17
}
}
],
"max_points": 20
},
{
"key": "not_deprecated",
"name": "Not deprecated",
"detail": "active, not deprecated or yanked",
"points": 20,
"status": "met",
"details": [
{
"code": "package_not_deprecated",
"params": {}
}
],
"max_points": 20
}
]
}
],
"description": "Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?"
},
{
"key": "engineering",
"band": "excellent",
"name": "Engineering Quality",
"value": 81,
"weight": 0.19,
"metrics": [
{
"key": "engineering_practices",
"band": "good",
"name": "Engineering practices",
"note": null,
"notes": [],
"value": 68,
"inputs": {
"has_ci": true,
"has_tests": true,
"has_editorconfig": false,
"has_linter_config": false,
"has_precommit_config": false
},
"components": [
{
"key": "ci_workflows",
"name": "CI workflows",
"detail": "2 workflow(s)",
"points": 24,
"status": "met",
"details": [
{
"code": "ci_workflows",
"params": {
"count": 2
}
}
],
"max_points": 24
},
{
"key": "tests_present",
"name": "Tests present",
"detail": null,
"points": 24,
"status": "met",
"details": [],
"max_points": 24
},
{
"key": "linter_config",
"name": "Linter config",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 16
},
{
"key": "pre_commit_hooks",
"name": "Pre-commit hooks",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 9.6
},
{
"key": "editorconfig",
"name": ".editorconfig",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 6.4
},
{
"key": "openssf_scorecard_ci_tests",
"name": "OpenSSF Scorecard: CI-Tests",
"detail": "13 out of 13 merged PRs checked by a CI test -- score normalized to 10",
"points": 20,
"status": "met",
"details": [],
"max_points": 20
}
]
},
{
"key": "documentation",
"band": "exceptional",
"name": "Documentation",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"topics": [
"ai-coding",
"anthropic",
"backup",
"claude",
"claude-code",
"cli",
"cross-platform",
"developer-tools",
"devtools",
"golang",
"migration",
"codex",
"openai",
"openai-codex",
"opencode",
"collaboration",
"end-to-end-encryption",
"pair-programming",
"session-sharing",
"tui"
],
"has_wiki": true,
"homepage": "https://gowthamsai.in/entangle",
"has_readme": true,
"has_docs_dir": true,
"has_description": true
},
"components": [
{
"key": "readme",
"name": "README",
"detail": null,
"points": 30,
"status": "met",
"details": [],
"max_points": 30
},
{
"key": "documentation_directory",
"name": "Documentation directory",
"detail": null,
"points": 25,
"status": "met",
"details": [],
"max_points": 25
},
{
"key": "documentation_homepage_site",
"name": "Documentation / homepage site",
"detail": "https://gowthamsai.in/entangle",
"points": 15,
"status": "met",
"details": [],
"max_points": 15
},
{
"key": "repository_description",
"name": "Repository description",
"detail": null,
"points": 10,
"status": "met",
"details": [],
"max_points": 10
},
{
"key": "topics",
"name": "Topics",
"detail": "20 topics",
"points": 10,
"status": "met",
"details": [
{
"code": "topics_count",
"params": {
"count": 20
}
}
],
"max_points": 10
},
{
"key": "wiki",
"name": "Wiki",
"detail": null,
"points": 10,
"status": "met",
"details": [],
"max_points": 10
}
]
}
],
"description": "Are baseline engineering and documentation practices in place?"
},
{
"key": "security",
"band": "weak",
"name": "Security",
"value": 47,
"weight": 0.16,
"metrics": [
{
"key": "security_posture",
"band": "at_risk",
"name": "Security posture",
"note": null,
"notes": [],
"value": 34,
"inputs": {
"source": "openssf_scorecard",
"checks_evaluated": 18,
"scorecard_version": "v5.5.0",
"checks_inconclusive": 0,
"scorecard_aggregate": 3.4
},
"components": [
{
"key": "binary_artifacts",
"name": "Binary-Artifacts",
"detail": "no binaries found in the repo",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "branch_protection",
"name": "Branch-Protection",
"detail": "branch protection is not maximal on development and all release branches",
"points": 2.2,
"status": "partial",
"details": [],
"max_points": 7.5
},
{
"key": "ci_tests",
"name": "CI-Tests",
"detail": "13 out of 13 merged PRs checked by a CI test -- score normalized to 10",
"points": 2.5,
"status": "met",
"details": [],
"max_points": 2.5
},
{
"key": "cii_best_practices",
"name": "CII-Best-Practices",
"detail": "no effort to earn an OpenSSF best practices badge detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 2.5
},
{
"key": "code_review",
"name": "Code-Review",
"detail": "Found 0/13 approved changesets -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "contributors",
"name": "Contributors",
"detail": "project has 1 contributing companies or organizations -- score normalized to 3",
"points": 0.8,
"status": "partial",
"details": [],
"max_points": 2.5
},
{
"key": "dangerous_workflow",
"name": "Dangerous-Workflow",
"detail": "no dangerous workflow patterns detected",
"points": 10,
"status": "met",
"details": [],
"max_points": 10
},
{
"key": "dependency_update_tool",
"name": "Dependency-Update-Tool",
"detail": "no update tool detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "fuzzing",
"name": "Fuzzing",
"detail": "project is not fuzzed",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "license",
"name": "License",
"detail": "license file detected",
"points": 2.5,
"status": "met",
"details": [],
"max_points": 2.5
},
{
"key": "maintained",
"name": "Maintained",
"detail": "project was created within the last 90 days. Please review its contents carefully",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "packaging",
"name": "Packaging",
"detail": "packaging workflow detected",
"points": 5,
"status": "met",
"details": [],
"max_points": 5
},
{
"key": "pinned_dependencies",
"name": "Pinned-Dependencies",
"detail": "dependency not pinned by hash detected -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "sast",
"name": "SAST",
"detail": "SAST tool is not run on all commits -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "security_policy",
"name": "Security-Policy",
"detail": "security policy file detected",
"points": 5,
"status": "met",
"details": [],
"max_points": 5
},
{
"key": "signed_releases",
"name": "Signed-Releases",
"detail": "Project has not signed or included provenance with any releases.",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "token_permissions",
"name": "Token-Permissions",
"detail": "detected GitHub workflow tokens with excessive permissions",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "vulnerabilities",
"name": "Vulnerabilities",
"detail": "21 existing vulnerabilities detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
}
]
},
{
"key": "dependency_advisories",
"band": "exceptional",
"name": "Dependency advisories",
"note": "Excluded from scoring (no data or not applicable): No advisories left outstanding. Remaining weights renormalized. Matched the npm:entangle@0.0.1 runtime dependency closure — what installing the published package pulls in — 3 packages. Reachability is not analyzed.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"no_advisories_left_outstanding"
]
}
},
{
"code": "weights_renormalized",
"params": {}
},
{
"code": "advisories_scope_published",
"params": {
"package": "npm:entangle@0.0.1",
"assessed": 3
}
},
{
"code": "advisories_reachability",
"params": {}
}
],
"value": 100,
"inputs": {
"source": "osv",
"advisories": 0,
"affected_packages": 0,
"assessed_packages": 3,
"unassessed_packages": 0,
"affected_by_severity": "none",
"direct_affected_packages": 0
},
"components": [
{
"key": "direct_dependencies_free_of_known_advisories",
"name": "Direct dependencies free of known advisories",
"detail": "no direct dependency carries a known advisory",
"points": 35,
"status": "met",
"details": [
{
"code": "no_direct_advisories",
"params": {}
}
],
"max_points": 35
},
{
"key": "indirect_dependencies_free_of_known_advisories",
"name": "Indirect dependencies free of known advisories",
"detail": "no indirect dependency carries a known advisory",
"points": 25,
"status": "met",
"details": [
{
"code": "no_indirect_advisories",
"params": {}
}
],
"max_points": 25
},
{
"key": "no_advisories_left_outstanding",
"name": "No advisories left outstanding",
"detail": "no advisory carries a publication date",
"points": 0,
"status": "excluded",
"details": [
{
"code": "advisories_no_publication_date",
"params": {}
}
],
"max_points": 40
}
]
},
{
"key": "malicious_dependencies",
"band": "exceptional",
"name": "Malicious dependencies",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"source": "osv",
"meaning": "reported as a malicious package by the OpenSSF corpus; the remedy is removal or moving off the compromised name, never an upgrade of the same artifact. Versions the registry has since pulled are listed but not scored",
"packages": [],
"red_flag": false,
"assessed_packages": 3,
"malicious_packages": 0,
"direct_malicious_packages": 0,
"withdrawn_malicious_packages": 0,
"installable_malicious_packages": 0
},
"components": [
{
"key": "no_dependency_reported_as_a_malicious_package",
"name": "No dependency reported as a malicious package",
"detail": "no dependency is reported as a malicious package",
"points": 100,
"status": "met",
"details": [
{
"code": "no_malicious_dependencies",
"params": {}
}
],
"max_points": 100
}
]
},
{
"key": "high_risk_jurisdiction_exposure",
"band": "exceptional",
"name": "High-Risk Jurisdiction Exposure",
"note": "Only high-confidence self-published location evidence affects this multiplier. Ambiguous matches are review-only; country evidence is not proof of nationality, citizenship, legal registration, malicious intent, or sanctions status.",
"notes": [
{
"code": "jurisdiction_evidence_limits",
"params": {}
}
],
"value": 100,
"inputs": {
"meaning": "self-published location evidence; not nationality or citizenship",
"red_flag": false,
"exposures": [],
"policy_countries": [
"Russia",
"Iran",
"North Korea"
],
"commit_weight_rule": {
"min_commits": 50,
"min_commit_share": 0.1
},
"review_only_matches": 0,
"below_threshold_exposures": [],
"assessed_self_published_locations": 2
},
"components": [
{
"key": "policy_exposure_multiplier",
"name": "Policy exposure multiplier",
"detail": "no confirmed policy-scope location match",
"points": 100,
"status": "met",
"details": [
{
"code": "jurisdiction_no_match",
"params": {}
}
],
"max_points": 100
}
]
}
],
"description": "Are visible security and supply-chain practices strong, with no malicious dependency and no unresolved high-risk jurisdiction exposure?"
},
{
"key": "ai_readiness",
"band": "moderate",
"name": "AI Readiness",
"value": 58,
"weight": 0.04,
"metrics": [
{
"key": "ai_agent_context",
"band": "weak",
"name": "Agent context & guidance",
"note": null,
"notes": [],
"value": 40,
"inputs": {
"has_llms_txt": false,
"legible_history_share": 1,
"agent_instruction_files": [],
"agent_instruction_max_bytes": null
},
"components": [
{
"key": "agent_instructions",
"name": "Agent instructions",
"detail": "no CLAUDE.md / AGENTS.md / editor rules",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_agent_instructions",
"params": {}
}
],
"max_points": 45
},
{
"key": "machine_readable_docs_llms_txt",
"name": "Machine-readable docs (llms.txt)",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
},
{
"key": "legible_commit_history",
"name": "Legible commit history",
"detail": "100 of 100 human commits state their intent (structured subject or explanatory body)",
"points": 40,
"status": "met",
"details": [
{
"code": "legible_history",
"params": {
"legible": 100,
"sampled": 100
}
}
],
"max_points": 40
}
]
},
{
"key": "ai_verify_loop",
"band": "moderate",
"name": "Verify loop (build / test / typecheck)",
"note": null,
"notes": [],
"value": 56,
"inputs": {
"has_nix": false,
"has_tests": true,
"lockfiles": [
"go.sum",
"package-lock.json"
],
"has_dockerfile": false,
"typed_language": true,
"bootstrap_files": [],
"has_devcontainer": false,
"has_linter_config": false,
"typecheck_configs": [
"vscode/tsconfig.json"
],
"agent_commit_share": 0,
"toolchain_manifests": [
"go.mod"
],
"dependency_bot_commit_share": 0
},
"components": [
{
"key": "one_command_bootstrap",
"name": "One-command bootstrap",
"detail": "go.mod (toolchain convention, no task runner)",
"points": 12.6,
"status": "partial",
"details": [
{
"code": "toolchain_convention",
"params": {
"files": "go.mod"
}
}
],
"max_points": 18
},
{
"key": "automated_tests",
"name": "Automated tests",
"detail": null,
"points": 22,
"status": "met",
"details": [],
"max_points": 22
},
{
"key": "lint_format_config",
"name": "Lint / format config",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 11
},
{
"key": "static_type_checking",
"name": "Static type checking",
"detail": "vscode/tsconfig.json",
"points": 11,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "vscode/tsconfig.json"
}
}
],
"max_points": 11
},
{
"key": "reproducible_environment",
"name": "Reproducible environment",
"detail": "lockfile",
"points": 10,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "lockfile"
}
}
],
"max_points": 10
},
{
"key": "demonstrated_agent_practice",
"name": "Demonstrated agent practice",
"detail": "no agent-authored commits among the last 100",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_agent_authored_commits",
"params": {
"sampled": 100
}
}
],
"max_points": 10
},
{
"key": "automated_maintenance",
"name": "Automated maintenance",
"detail": "no automated dependency updates observed",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_dependency_automation",
"params": {}
}
],
"max_points": 8
},
{
"key": "openssf_scorecard_pinned_dependencies",
"name": "OpenSSF Scorecard: Pinned-Dependencies",
"detail": "dependency not pinned by hash detected -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
}
]
},
{
"key": "ai_code_legibility",
"band": "exceptional",
"name": "Code legibility for models",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"primary_language": "Go",
"largest_source_bytes": 47685,
"source_files_sampled": 62,
"oversized_source_files": 0
},
"components": [
{
"key": "type_checkable_code",
"name": "Type-checkable code",
"detail": "Go (statically typed)",
"points": 45,
"status": "met",
"details": [
{
"code": "statically_typed_language",
"params": {
"language": "Go"
}
}
],
"max_points": 45
},
{
"key": "manageable_file_sizes",
"name": "Manageable file sizes",
"detail": "0/62 source files over 60KB",
"points": 55,
"status": "met",
"details": [
{
"code": "oversized_source_files",
"params": {
"kb": 60,
"sampled": 62,
"oversized": 0
}
}
],
"max_points": 55
}
]
}
],
"description": "How well is the repo equipped to be developed and maintained with AI coding agents? Carries a deliberately small weight: agent tooling is a real maintenance signal, but its absence must never gate the top of the scale (calibration saturates at raw 91, so 100/100 remains reachable with AI Readiness at zero)."
}
],
"classification": {
"labels": [
"tui",
"library"
],
"scores": {
"cli": 2,
"tui": 6,
"library": 6
},
"primary": "tui",
"evidence": [
{
"tier": "distribution",
"label": "library",
"source": "registry:go",
"weight": 6
},
{
"tier": "dependencies",
"label": "tui",
"source": "dep:github.com/charmbracelet/bubbletea",
"weight": 4
},
{
"tier": "tags",
"label": "cli",
"source": "tag:cli",
"weight": 2
},
{
"tier": "tags",
"label": "tui",
"source": "tag:tui",
"weight": 2
}
],
"artifacts": [],
"confidence": "medium",
"host_extension": false,
"runs_as_process": true,
"consumed_by_code": true
},
"metrics_version": "2.3.1"
},
"warnings": [
"Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token",
"npm package 'entangle' points at a different repository (entanglejs/entangle); excluded from ecosystem scoring",
"GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository"
],
"report_type": "repository",
"generated_at": "2026-08-02T15:12:50.556510Z",
"schema_version": "0.27.0",
"badge_url": "https://raw.githubusercontent.com/inspect-software/badges/main/v1/g/gowtham-sai-yadav/entangle.svg",
"full_name": "gowtham-sai-yadav/entangle",
"license_state": "standard",
"license_spdx": "MIT"
}
