公开记录存在风险
软件健康报告模式 0.27.0 · 指标 2.1.0 · 2026-07-25 18:05 UTC
isr4el-silv4 / pi-web-ui
Chrome side-panel UI and local bridge extension for Pi Coding Agent
isr4el-silv4/pi-web-ui 的健康指数为 100 分中的 33 分，处于「存在风险」区间。 其得分最高的类别是Sustainability & Governance（46/100），最低的是Engineering Quality（30/100）。 最近一次更新在 5 天前。 近期的大部分工作由 1 位贡献者完成。
33
总分 / 100软件健康指数
指标归入加权类别，统一采用 1–100 量表。总体分先取类别加权平均，再依据公开记录的分布进行校准，使各等级具有百分位含义；当公开证据触发高风险司法辖区政策时，评级会按政策调整，并设置 34（存在风险）的上限。
33
卓越93-100公开记录中的最高层级（约前 5%）；基本满足所有检验标准
优秀80-92各方面均表现强劲；仅有少量不足
良好65-79健康；不足之处有限且可控
中等50-64可接受，但存在明显不足；建议进行审查
薄弱35-49多个领域存在实质性薄弱环节
存在风险20-34存在重大薄弱环节；采用时应保持审慎
危急1-19问题严重（项目被弃置、仅有单一维护者、缺乏基本工程规范）
评分画像
每条轴代表一个类别。形状比平均值更重要——健康的对象会填满整个图形，而“一峰一谷”式画像意味着某一维度的优势正掩盖另一维度的风险。
加权总体分 38 经校准后在公布的指数量表上为 33（记录校准 2026-08-02）。
所有权
软件包生态系统
| 注册表 | 软件包 | 版本 | 月下载量 | 版本数 | 最近发布 | 标签 |
|---|---|---|---|---|---|---|
| npm | @isr4el-silv4/pi-web-ui | 1.0.15 | 2,574 | 16 | 5 天前 | pi-packagepi-extensionpipi-coding-agentchromevivaldiedgebravebrowserchromiumaiharnessbrowser-tools |
按类别列示的指标
活力
项目是否仍有生命——是否仍在编写代码，是否仍在发布版本？
36
开发活跃度
59中等
评分方式
| 36/36 | 推送新近度 — 最近一次推送于 5 天前 |
| 4.8/36 | 提交节奏 — 52 周中有 7 周有提交 |
| 18/18 | 提交量 — 最近一年 105 次提交 |
| 0/10 | OpenSSF Scorecard：Maintained — project was created within the last 90 days. Please review its contents carefully |
所用输入
| commits_last_year | 105 |
| human_commit_share | 1 |
| days_since_last_push | 5 |
| active_weeks_last_year | 7 |
发布纪律
1危急
评分方式
| 0/27 | 有发布版本 — 未发布任何发布版本 |
| 0/36 | 发布时效 — 没有发布版本 |
| 0/27 | 发布节奏 — 没有发布版本 |
| 0/10 | OpenSSF Scorecard：Signed-Releases — 无数据 |
所用输入
| releases_count | 0 |
已排除计分（无数据或不适用）：OpenSSF Scorecard：Signed-Releases。 其余权重已重新归一化。
社区与采用
项目是否拥有用户、下载量与关注度，并具备欢迎贡献者参与的配置？
36
流行度与采用
17危急
评分方式
| 16.9/60 | 星标 — 12 个星标 |
| 0/25 | 复刻 — 1 个复刻 |
| 0/15 | 关注者 — 0 位关注者 |
所用输入
| forks | 1 |
| stars | 12 |
| watchers | 0 |
| growth_state | unverified |
| growth_factor_pct | 100 |
| growth_unverified_reason | no_history |
社区健康
44薄弱
评分方式
| 22.5/22.5 | README |
| 16.9/22.5 | 许可证 — 存在许可证文件，但不是可识别的许可证 |
| 0/18 | CONTRIBUTING 指南 |
| 0/13.5 | 行为准则 |
| 0/7.2 | 议题模板 |
| 0/6.3 | PR 模板 |
所用输入
| has_readme | 是 |
| has_license | 是 |
| readme_badges | — |
| has_contributing | 否 |
| has_issue_template | 否 |
| has_code_of_conduct | 否 |
| readme_badge_services | — |
| has_pull_request_template | 否 |
生态采用（下载量）
57中等
评分方式
| 45.5/80 | 月度下载量 — npm 合计每月 2,574 次下载 |
| 0/20 | 注册表被依赖数 — 该生态系统不报告此项 |
所用输入
| packages | @isr4el-silv4/pi-web-ui |
| dependents | — |
| ecosystems | npm |
| total_downloads | — |
| monthly_downloads | 2,574 |
已排除计分（无数据或不适用）：注册表被依赖数。 其余权重已重新归一化。
可持续性与治理
项目能否在其成员之外延续——巴士系数、响应能力、由谁支持，以及软件包的维护状况？
46
维护者韧性（巴士系数）
10危急
评分方式
| 9/54 | 巴士系数 — 1 位贡献者贡献了半数提交 |
| 0/22.5 | 提交分布 — 头号贡献者编写了 100% 的提交 |
| 1.4/13.5 | 贡献者广度 — 1 位贡献者 |
| 0/10 | OpenSSF Scorecard：Contributors — project has 0 contributing companies or organizations -- score normalized to 0 |
所用输入
| bus_factor | 1 |
| contributors_sampled | 1 |
| top_contributor_share | 1 |
议题与 PR 响应能力
51中等
评分方式
| 14/42 | 议题解决 — 33% 的议题已关闭 |
| 30/30 | PR 接受 — 已裁定的 PR 中 1/1 已合并 |
| 0/13 | Newcomer PR acceptance — 30 天内没有首次贡献者的 PR 得到裁决 |
| 0/15 | OpenSSF Scorecard：Code-Review — Found 0/26 approved changesets -- score normalized to 0 |
所用输入
| merged_prs | 1 |
| open_issues | 2 |
| closed_issues | 1 |
| prs_merged_7d | — |
| prs_decided_7d | — |
| prs_merged_30d | — |
| prs_decided_30d | — |
| issue_closed_ratio | 0.333 |
| closed_unmerged_prs | 0 |
| first_time_authors_30d | — |
| first_time_prs_merged_30d | — |
| first_time_prs_decided_30d | — |
已排除计分（无数据或不适用）：newcomer_pr_acceptance。 其余权重已重新归一化。
所有权与托管责任
41薄弱
评分方式
| 10/30 | 所有权背书 — 个人（用户）账户 |
| 0/20 | 已验证域名 — 不适用于个人账户 |
| 4.3/25 | 所有者影响力 — isr4el-silv4 有 3 位关注者 |
| 18.2/25 | 既往记录 — 6 个公开仓库，账户约 7 年 |
所用输入
| followers | 3 |
| owner_type | User |
| is_verified | — |
| owner_login | isr4el-silv4 |
| public_repos | 6 |
| account_age_days | 2,593 |
已排除计分（无数据或不适用）：已验证域名。 其余权重已重新归一化。
软件包维护
100卓越
评分方式
| 25/25 | 已发布且可解析 — npm 上有 1 个软件包 |
| 35/35 | 发布时效 — 最近一次发布于 5 天前 |
| 20/20 | 版本历史 — 16 个已发布版本 |
| 20/20 | 未被弃用 — 活跃，未被弃用或撤回 |
所用输入
| packages | @isr4el-silv4/pi-web-ui |
| ecosystems | npm |
| any_deprecated | 否 |
| min_days_since_publish | 5 |
工程质量
基础的工程与文档实践是否到位？
30
工程实践
24存在风险
评分方式
| 0/24 | CI 工作流 |
| 24/24 | 存在测试 |
| 0/16 | Linter 配置 |
| 0/9.6 | Pre-commit 钩子 |
| 0/6.4 | .editorconfig |
| 0/20 | OpenSSF Scorecard：CI-Tests — 0 out of 1 merged PRs checked by a CI test -- score normalized to 0 |
所用输入
| has_ci | 否 |
| has_tests | 是 |
| has_editorconfig | 否 |
| has_linter_config | 否 |
| has_precommit_config | 否 |
文档
40薄弱
评分方式
| 30/30 | README |
| 0/25 | 文档目录 |
| 0/15 | 文档 / 主页站点 |
| 10/10 | 仓库描述 |
| 0/10 | 主题标签 |
| 0/10 | Wiki |
所用输入
| topics | — |
| has_wiki | 否 |
| homepage | — |
| has_readme | 是 |
| has_docs_dir | 否 |
| has_description | 是 |
安全
可见的安全与供应链实践是否稳固，且不存在未解决的高风险司法辖区暴露？
40
安全态势
25存在风险
评分方式
| 7.5/7.5 | Binary-Artifacts — no binaries found in the repo |
| 0/7.5 | Branch-Protection — branch protection not enabled on development/release branches |
| 0/2.5 | CI-Tests — 0 out of 1 merged PRs checked by a CI test -- score normalized to 0 |
| 0/2.5 | CII-Best-Practices — no effort to earn an OpenSSF best practices badge detected |
| 0/7.5 | Code-Review — Found 0/26 approved changesets -- score normalized to 0 |
| 0/2.5 | Contributors — project has 0 contributing companies or organizations -- score normalized to 0 |
| 0/10 | Dangerous-Workflow — 无数据 |
| 0/7.5 | Dependency-Update-Tool — no update tool detected |
| 0/5 | Fuzzing — project is not fuzzed |
| 2.2/2.5 | 许可证 — license file detected |
| 0/7.5 | Maintained — project was created within the last 90 days. Please review its contents carefully |
| 0/5 | Packaging — 无数据 |
| 0/5 | Pinned-Dependencies — 无数据 |
| 0/5 | SAST — SAST tool is not run on all commits -- score normalized to 0 |
| 0/5 | Security-Policy — security policy file not detected |
| 0/7.5 | Signed-Releases — 无数据 |
| 0/7.5 | Token-Permissions — 无数据 |
| 7.5/7.5 | Vulnerabilities — 0 existing vulnerabilities detected |
所用输入
| source | openssf_scorecard |
| checks_evaluated | 13 |
| scorecard_version | v5.5.0 |
| checks_inconclusive | 5 |
| scorecard_aggregate | 2.5 |
已排除计分（无数据或不适用）：dangerous_workflow, packaging, pinned_dependencies, signed_releases, token_permissions。 其余权重已重新归一化。
依赖安全公告
100卓越
评分方式
| 35/35 | 直接依赖不含已知公告 — 没有直接依赖携带已知公告 |
| 25/25 | 间接依赖不含已知公告 — 没有间接依赖携带已知公告 |
| 0/40 | 没有长期未处理的公告 — 没有公告带有发布日期 |
所用输入
| source | osv |
| advisories | 0 |
| affected_packages | 0 |
| assessed_packages | 2 |
| unassessed_packages | 0 |
| affected_by_severity | none |
| direct_affected_packages | 0 |
已排除计分（无数据或不适用）：没有长期未处理的公告。 其余权重已重新归一化。 比对的是 npm:@isr4el-silv4/pi-web-ui@1.0.15 的运行时依赖闭包——安装已发布的软件包时真正被拉取进来的内容——共 2 个软件包。 未对可达性进行分析。
AI 就绪度
该仓库在多大程度上具备与 AI 编码代理协同开发与维护的条件？权重刻意设小（4%）：代理工具链是一项真实的维护信号，但完全不具备的仓库仍可达到 100/100。
46
AI 代理上下文与指引
32存在风险
评分方式
| 0/45 | 代理指令 — 没有 CLAUDE.md / AGENTS.md / 编辑器规则 |
| 0/15 | 机器可读文档（llms.txt） |
| 32/40 | 可读的提交历史 — 100 次人类提交中有 60 次说明了意图（结构化标题或解释性正文） |
所用输入
| has_llms_txt | 否 |
| legible_history_share | 0.6 |
| agent_instruction_files | — |
| agent_instruction_max_bytes | — |
评分方式
| 0/18 | 一条命令的引导启动 |
| 22/22 | 自动化测试 |
| 0/11 | Lint / 格式化配置 |
| 11/11 | 静态类型检查 — tsconfig.json |
| 0/10 | 可复现环境 |
| 0/10 | 已体现的代理实践 — 最近 100 次提交中没有代理编写的提交 |
| 0/8 | 自动化维护 — 未观察到自动依赖更新 |
| 0/10 | OpenSSF Scorecard：Pinned-Dependencies — 无数据 |
所用输入
| has_nix | 否 |
| has_tests | 是 |
| lockfiles | — |
| has_dockerfile | 否 |
| typed_language | 是 |
| bootstrap_files | — |
| has_devcontainer | 否 |
| has_linter_config | 否 |
| typecheck_configs | tsconfig.json |
| agent_commit_share | 0 |
| toolchain_manifests | — |
| dependency_bot_commit_share | 0 |
已排除计分（无数据或不适用）：OpenSSF Scorecard：Pinned-Dependencies。 其余权重已重新归一化。
面向模型的代码可读性
100卓越
评分方式
| 45/45 | 可类型检查的代码 — TypeScript（静态类型） |
| 55/55 | 可控的文件大小 — 采样的 48 个源文件中有 0 个超过 60KB |
所用输入
| primary_language | TypeScript |
| largest_source_bytes | 41,602 |
| source_files_sampled | 48 |
| oversized_source_files | 0 |
关键数据
12GitHub 星标
1贡献者
105最近 12 个月提交数
5距最近推送天数
0发布版本数
1巴士系数（bus factor）
2开放议题
npm软件包生态系统数
数据采集警告
- Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token
- GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository
更多细节
OpenSSF Scorecard 2.5 / 10
2.5综合
来自开源项目 OpenSSF Scorecard 的独立、工具无关的安全评估。每项检查奖励的是安全实践本身，而非特定供应商的工具。Scorecard 无法判定的检查项标记为 不适用，并从安全评分中剔除（绝不按零分计）。
| 10 | Binary-Artifacts | no binaries found in the repo |
| 0 | Branch-Protection | branch protection not enabled on development/release branches |
| 0 | CI-Tests | 0 out of 1 merged PRs checked by a CI test -- score normalized to 0 |
| 0 | CII-Best-Practices | no effort to earn an OpenSSF best practices badge detected |
| 0 | Code-Review | Found 0/26 approved changesets -- score normalized to 0 |
| 0 | Contributors | project has 0 contributing companies or organizations -- score normalized to 0 |
| 不适用 | Dangerous-Workflow | no workflows found |
| 0 | Dependency-Update-Tool | no update tool detected |
| 0 | Fuzzing | project is not fuzzed |
| 9 | License | license file detected |
| 0 | Maintained | project was created within the last 90 days. Please review its contents carefully |
| 不适用 | Packaging | packaging workflow not detected |
| 不适用 | Pinned-Dependencies | no dependencies found |
| 0 | SAST | SAST tool is not run on all commits -- score normalized to 0 |
| 0 | Security-Policy | security policy file not detected |
| 不适用 | Signed-Releases | no releases found |
| 不适用 | Token-Permissions | No tokens found |
| 10 | Vulnerabilities | 0 existing vulnerabilities detected |
直接依赖 2
| 注册表 | 软件包 | 版本约束 | 清单文件 |
|---|---|---|---|
| npm | @sinclair/typebox | ^0.34.49 | package.json |
| npm | ws | ^8.21.0 | package.json |
全部依赖 未采集
本报告未能采集到解析后的依赖集合：GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository
依赖安全公告 0
安装 npm:@isr4el-silv4/pi-web-ui@1.0.15 会引入 2 个包（直接与传递）：其中 0 个存在已知公告，0 个为直接依赖。
没有已知公告影响已评估的依赖。
公告表示依赖图中记录的版本落入某条公告的受影响范围。可达性未经分析，且依赖图包含开发与测试的版本固定——某项发现可能只涉及工具链而非交付的软件。
原始 JSON 报告 机器可读
{
"data": {
"repo": {
"topics": [],
"is_fork": false,
"size_kb": 408,
"has_wiki": false,
"homepage": null,
"languages": {
"JavaScript": 1106,
"TypeScript": 219851
},
"pushed_at": "2026-07-19T19:05:15Z",
"created_at": "2026-06-05T21:12:42Z",
"owner_type": "User",
"updated_at": "2026-07-23T06:59:14Z",
"description": "Chrome side-panel UI and local bridge extension for Pi Coding Agent",
"is_archived": false,
"is_disabled": false,
"license_spdx": null,
"default_branch": "main",
"license_spdx_raw": "NOASSERTION",
"primary_language": "TypeScript",
"significant_languages": [
"TypeScript"
]
},
"owner": {
"blog": null,
"name": "Israel Silva",
"type": "User",
"login": "isr4el-silv4",
"company": null,
"location": null,
"followers": 3,
"avatar_url": "https://avatars.githubusercontent.com/u/51991395?v=4",
"created_at": "2019-06-19T08:50:57Z",
"is_verified": null,
"public_repos": 6,
"account_age_days": 2593
},
"license": {
"state": "custom",
"spdx_id": null,
"raw_spdx": "NOASSERTION",
"file_present": true,
"scorecard_found": true,
"profile_has_license": true
},
"activity": {
"releases": [],
"recent_commits": [
{
"oid": "f460063655e4d860150f7064cd05c60c2c3b57ae",
"body": null,
"is_bot": false,
"headline": "Updated package.json version",
"author_name": "ISR4EL",
"author_login": "isr4el-silv4",
"committed_at": "2026-07-19T19:05:12Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "8324f16dbeccb34e991ae5aa5b62c8823d4f98b7",
"body": "fix(bridge): use host Pi version + version-resilient model API",
"is_bot": false,
"headline": "Merge pull request #3 from isr4el-silv4/bugfix/1-local-models-not-listed",
"author_name": "Israel Silva",
"author_login": "isr4el-silv4",
"committed_at": "2026-07-19T18:55:51Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2d5185069f796bfc18fce65e7912e60639d17e31",
"body": "…(#1)\n\nRoot cause: the bridge is a separate spawned process that resolved its OWN\nbundled @earendil-works/pi-coding-agent (0.78.x), which lagged the host\n CLI. Two concrete consequences:\n 1. glm-5.2 was missing — 0.78.x's static model catalog predates it.\n 2. Even when pointed at 0.80.x, the bridge \n[…]\nts: normalizeModelRegistry across both shapes, loadPiSdk honoring\nPI_HOST_PI (+cache), and bridge-process passing/omitting PI_HOST_PI.\n6 pre-existing version-drift failures unchanged; no new failures.",
"is_bot": false,
"headline": ":bug: fix(bridge): use host Pi version + version-resilient model API …",
"author_name": "ISR4EL",
"author_login": "isr4el-silv4",
"committed_at": "2026-07-19T18:38:00Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "ba9ef783529f4e04a97586568d6aa802421fdb13",
"body": "Reverts the bump to ^0.80.10. While 0.80.x ships glm-5.2, it introduced\nan auth-detection regression: modelRegistry.getAvailable() returned only\nthe active model (openrouter/zai catalogs dropped), so the extension\nshowed only one model. Confirmed live: 0.78.1 returns 266+ models, while\n0.80.10 retur\n[…]\n's models.json (built-in provider 'zai' inherits api/baseUrl,\nauth from auth.json), verified to appear alongside all other models.\n\nThe earlier mergeCurrentModel + slash-safe selection commits remain.",
"is_bot": false,
"headline": ":revert: revert(deps): pi-coding-agent back to ^0.78.1 (#1)",
"author_name": "ISR4EL",
"author_login": "isr4el-silv4",
"committed_at": "2026-07-19T17:03:29Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "ed2f231386e87dfd8106b495d4fb60bfa008596c",
"body": "…istered (#1)\n\nThe user's default model zai/glm-5.2 was invisible in the extension\nbecause @earendil-works/pi-ai 0.78.1 does not yet ship glm-5.2 (only\nglm-5 / glm-5.1). With glm-5.2 unregistered, modelRegistry.find() could\nnot resolve the configured default, so findInitialModel silently dropped\nit \n[…]\ned). After the bump glm-5.2 is registered, resolves as the\ndefault, and appears in the model_list broadcast (verified live).\n\nVerified live: currentModel becomes zai/glm-5.2 and RESULT_HAS_GLM52=true.",
"is_bot": false,
"headline": ":arrow_up: fix(deps): bump pi-coding-agent ^0.80.10 so glm-5.2 is reg…",
"author_name": "ISR4EL",
"author_login": "isr4el-silv4",
"committed_at": "2026-07-19T16:37:18Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "93a6beae49576be06f24547db25b6c8f11b8f6eb",
"body": "The bridge's broadcastModelList built the model picker list solely from\nmodelRegistry.getAvailable(), which excludes the session's active model\nwhen it is a synthesized fallback. This happens whenever a default model\nid does not exactly match a registered built-in — e.g. the user's\ndefault `zai/glm-\n[…]\n early return when the\n available list is empty but an active model exists\n- Add unit tests for the helper and end-to-end tests asserting the\n model_list broadcast contains the fallback active model",
"is_bot": false,
"headline": "bug fix(bridge): include active model in extension model list (#1)",
"author_name": "ISR4EL",
"author_login": "isr4el-silv4",
"committed_at": "2026-07-19T16:14:25Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "02100f0696191fc4765448096545094fe384b72f",
"body": null,
"is_bot": false,
"headline": "Updated package version and updated ignore files",
"author_name": "ISR4EL",
"author_login": "isr4el-silv4",
"committed_at": "2026-07-11T12:46:45Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "332d59da3d42936e003b9e048d008fa51a7bc203",
"body": null,
"is_bot": false,
"headline": "Updated package.json version",
"author_name": "ISR4EL",
"author_login": "isr4el-silv4",
"committed_at": "2026-07-11T12:39:03Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "3c8931763e54de115ea2799df6f28f7af51dded8",
"body": null,
"is_bot": false,
"headline": "Updated .gitignore",
"author_name": "ISR4EL",
"author_login": "isr4el-silv4",
"committed_at": "2026-07-11T12:36:53Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "61ff5d22e817c9b2a2f87c54c107e240ac283328",
"body": "- Changed /pi-web-ui start to open the extension's Chrome Web Store\n page instead of http://localhost:<port>/open\n- Updated tests to use the new STORE_URL constant",
"is_bot": false,
"headline": "🔗 open Chrome Web Store page instead of localhost on start",
"author_name": "ISR4EL",
"author_login": "isr4el-silv4",
"committed_at": "2026-07-11T11:41:56Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "46b11ac1251dd1cb52362f2cd0a3f5e7b29b6a24",
"body": null,
"is_bot": false,
"headline": "Added .github/ to .npmignore",
"author_name": "ISR4EL",
"author_login": "isr4el-silv4",
"committed_at": "2026-07-02T18:32:47Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "432a00640de0c9cfaaeb768cfd6b5cffa263c38c",
"body": null,
"is_bot": false,
"headline": "Updated package.json",
"author_name": "ISR4EL",
"author_login": "isr4el-silv4",
"committed_at": "2026-07-02T18:31:32Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1a07d48c25ae7130c69947b98613c644b7cb1f03",
"body": null,
"is_bot": false,
"headline": "Updated README",
"author_name": "ISR4EL",
"author_login": "isr4el-silv4",
"committed_at": "2026-07-02T18:30:15Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "7d4557e378bcd3b6ad8dda3bbf21693b150f1ff4",
"body": null,
"is_bot": false,
"headline": "Create FUNDING.yml",
"author_name": "Israel Silva",
"author_login": "isr4el-silv4",
"committed_at": "2026-07-02T15:16:57Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b896a82c0fb5256fb2a185326915eb23f1f46b22",
"body": null,
"is_bot": false,
"headline": "Updated package.json",
"author_name": "ISR4EL",
"author_login": "isr4el-silv4",
"committed_at": "2026-07-02T13:52:33Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "7e90728dbdfa0d4169e5714d8021684142484174",
"body": "Model selection is now handled exclusively through the <select> element\nin the chrome extension. The set_model command path and broadcastModelList\non session creation remain intact, so model selection functionality is\nunchanged.",
"is_bot": false,
"headline": "refactor: remove /model slash command from bridge",
"author_name": "ISR4EL",
"author_login": "isr4el-silv4",
"committed_at": "2026-07-02T12:21:56Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "8a8942c183928510ddf97b8bad1be73eb24f511d",
"body": null,
"is_bot": false,
"headline": "Allow model selection",
"author_name": "ISR4EL",
"author_login": "isr4el-silv4",
"committed_at": "2026-07-01T22:04:13Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b5f1c7567f869cbceb96114c9fd8e5b34daf0f4c",
"body": null,
"is_bot": false,
"headline": "Updated version",
"author_name": "ISR4EL",
"author_login": "isr4el-silv4",
"committed_at": "2026-06-28T19:32:34Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0bd41958a284bc474aca2e10b7aefc7c0c5d97c8",
"body": "- Call resourceLoader.reload() after construction (SDK skips reload\n when a resourceLoader is provided, so extensions/skills/templates\n were never discovered from disk)\n- Access _extensionRunner private field (was extensionRunner without\n underscore, which was always undefined)\n- Add theme.fg/bg/bold/italic/underline/inverse/strikethrough/reset\n methods to WebUiContext (extensions call these during init; missing\n methods caused 'theme.fg is not a function' errors)",
"is_bot": false,
"headline": "fix: discover extension commands, skills, and templates",
"author_name": "ISR4EL",
"author_login": "isr4el-silv4",
"committed_at": "2026-06-28T13:56:19Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "fdef6b46b391c8d716cb6277ae5f675ad50d8da4",
"body": null,
"is_bot": false,
"headline": "Added handling for bridge-process.ts",
"author_name": "ISR4EL",
"author_login": "isr4el-silv4",
"committed_at": "2026-06-28T13:05:43Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c82e071b2d065a00c149a52f693312b740302810",
"body": null,
"is_bot": false,
"headline": "changed bin in package.json",
"author_name": "ISR4EL",
"author_login": "isr4el-silv4",
"committed_at": "2026-06-28T11:37:13Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4e0edfeec47f7a26f2eebbacee1037a1cf914d50",
"body": null,
"is_bot": false,
"headline": "Updated README and added logs",
"author_name": "ISR4EL",
"author_login": "isr4el-silv4",
"committed_at": "2026-06-28T11:21:35Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "82d94d4becbbc9e85120bfa55b326913072d5142",
"body": null,
"is_bot": false,
"headline": "Changed bridge IP",
"author_name": "AI Coding Agent",
"author_login": null,
"committed_at": "2026-06-25T21:48:57Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "59f9399335acbad6c88525fc9fd364a80b2e24d5",
"body": null,
"is_bot": false,
"headline": "Updated package version",
"author_name": "AI Coding Agent",
"author_login": null,
"committed_at": "2026-06-25T21:41:46Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b95a2a14c19471618aeb5a8baaae3aba296ce208",
"body": null,
"is_bot": false,
"headline": "Updated .gitignore",
"author_name": "AI Coding Agent",
"author_login": null,
"committed_at": "2026-06-25T20:53:33Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "24abc5b356a5f80a535fcc900b32fbc5959e608f",
"body": "Not needed for a published library — consumers resolve their own\ndependency tree. Added to .gitignore to prevent future commits.",
"is_bot": false,
"headline": "chore: remove package-lock.json from tracking",
"author_name": "ISR4EL",
"author_login": "isr4el-silv4",
"committed_at": "2026-06-25T20:50:14Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f00c465a84bc83a03de2dc9ca0c7ff21fe482eb7",
"body": null,
"is_bot": false,
"headline": "chore: bump version to 1.0.3",
"author_name": "ISR4EL",
"author_login": "isr4el-silv4",
"committed_at": "2026-06-25T20:49:26Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "6a827821be6de15b406bc95f1d882f42a2b44b46",
"body": "The bridge was failing to start when no Chrome/Chromium browser was found,\nbecause chrome.open() threw an error after the bridge was already running.\n\nNow chrome.open() is wrapped in try-catch so the bridge starts regardless.\nUsers can open any browser (Firefox, etc.) manually on the bridge port.\n\nAlso adds tests for the new behavior.",
"is_bot": false,
"headline": "fix: make Chrome open best-effort so bridge starts even without Chrome",
"author_name": "ISR4EL",
"author_login": "isr4el-silv4",
"committed_at": "2026-06-25T20:43:14Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "cbb6c134d06c5d7717f1429c737e4f3c42aedc37",
"body": "…very, completions\n\nBridge-side implementation for Pi extension commands on Chrome:\n\n- WebUiContext: full ExtensionUIContext implementation via WebSocket\n - confirm/select/input with 30s timeout and default responses\n - notify as fire-and-forget broadcast\n - All TUI-only methods as no-ops\n - cle\n[…]\n command_completions event with items\n- Protocol types: list_resources, get_completions, resources_list,\n command_completions, extension_command_error\n- 131 tests passing, TypeScript compiles cleanly",
"is_bot": false,
"headline": "feat: bridge-side extension commands — bindExtensions, resource disco…",
"author_name": "ISR4EL",
"author_login": "isr4el-silv4",
"committed_at": "2026-06-23T21:26:59Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "cbb44258e973d6802b2cae24d5094802d8a90fa8",
"body": null,
"is_bot": false,
"headline": "1.0.2",
"author_name": "ISR4EL",
"author_login": "isr4el-silv4",
"committed_at": "2026-06-17T21:54:21Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2f68b7e220643c7b89262cad24ff4fc5c1cebc85",
"body": null,
"is_bot": false,
"headline": "updated image in package.json",
"author_name": "ISR4EL",
"author_login": "isr4el-silv4",
"committed_at": "2026-06-17T21:53:53Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4df2d3f368d40982cb7d0f883a8e94e291eaaf21",
"body": null,
"is_bot": false,
"headline": "1.0.1",
"author_name": "ISR4EL",
"author_login": "isr4el-silv4",
"committed_at": "2026-06-17T21:44:42Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "31e4f6e606a29069fa7fab76581e93129b3ce363",
"body": null,
"is_bot": false,
"headline": "Add license field to package.json",
"author_name": "ISR4EL",
"author_login": "isr4el-silv4",
"committed_at": "2026-06-17T21:44:42Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "fa4644b02061fc5d9fd7bd179ba02003996ca19d",
"body": null,
"is_bot": false,
"headline": "Fix npm badge URL and add repository field",
"author_name": "ISR4EL",
"author_login": "isr4el-silv4",
"committed_at": "2026-06-17T21:44:17Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "3b42b2f8267bd8c4e2da15cda6f33d012f8d1ec3",
"body": null,
"is_bot": false,
"headline": "updated package name",
"author_name": "ISR4EL",
"author_login": "isr4el-silv4",
"committed_at": "2026-06-17T21:29:26Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "09a33ca42f04ea495df2b33785386234e8fa269c",
"body": null,
"is_bot": false,
"headline": "Added Pi tag to package.json",
"author_name": "ISR4EL",
"author_login": "isr4el-silv4",
"committed_at": "2026-06-17T21:25:32Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d974bd61cd8be5e5f2ccc5bb0159c208426bba93",
"body": null,
"is_bot": false,
"headline": "Replace header logos with pi-web-ui screenshot",
"author_name": "ISR4EL",
"author_login": "isr4el-silv4",
"committed_at": "2026-06-17T21:18:06Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "7863b32f00c5d6bb7069e3cd7ab2f091aabe9685",
"body": null,
"is_bot": false,
"headline": "added keywords",
"author_name": "ISR4EL",
"author_login": "isr4el-silv4",
"committed_at": "2026-06-17T20:57:44Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "8929cee54481ae9d97a2f90b58da3dddd2834538",
"body": null,
"is_bot": false,
"headline": "set version to 1.0.0",
"author_name": "ISR4EL",
"author_login": "isr4el-silv4",
"committed_at": "2026-06-17T20:55:23Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "3e0b53cc0b16ba865365866dd09b785f9e087172",
"body": null,
"is_bot": false,
"headline": "Removed divider from README",
"author_name": "ISR4EL",
"author_login": "isr4el-silv4",
"committed_at": "2026-06-17T20:53:15Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c2a9258d4214a563025a46d4fd701c11d015d667",
"body": null,
"is_bot": false,
"headline": "docs: center logos",
"author_name": "ISR4EL",
"author_login": "isr4el-silv4",
"committed_at": "2026-06-17T20:51:27Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "13afc2eabd85513eb11ac67d4ccd04b6fe9e3eae",
"body": null,
"is_bot": false,
"headline": "docs: move logos to top and equalize sizes at 64px",
"author_name": "ISR4EL",
"author_login": "isr4el-silv4",
"committed_at": "2026-06-17T20:50:50Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2d1cc18b777fed0c032dbfdaec76d4bae7dee71e",
"body": null,
"is_bot": false,
"headline": "docs: constrain logo sizes in README",
"author_name": "ISR4EL",
"author_login": "isr4el-silv4",
"committed_at": "2026-06-17T20:47:58Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2ab6dacbbfd9fba92d01b54a87c7fa07f101d88b",
"body": null,
"is_bot": false,
"headline": "docs: add Pi and Chrome logo assets",
"author_name": "ISR4EL",
"author_login": "isr4el-silv4",
"committed_at": "2026-06-17T20:47:24Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2b6c46fc8d6923e5bdf378fb399e314ad83c7bbb",
"body": null,
"is_bot": false,
"headline": "docs: add Pi and Chrome logos to README header",
"author_name": "ISR4EL",
"author_login": "isr4el-silv4",
"committed_at": "2026-06-17T20:46:42Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "917f8636c187c2c34fc1c2b4eda77cf914b68d34",
"body": "- Rewrite README with philosophy, architecture, setup, usage examples,\n browser tools, frontend workflows, session management, and permissions\n- Add emojis to section titles for readability\n- Create LICENSE file (Apache 2.0)\n- Set package.json private to false for npm publishing",
"is_bot": false,
"headline": "docs: comprehensive README, Apache 2.0 license, set package public",
"author_name": "ISR4EL",
"author_login": "isr4el-silv4",
"committed_at": "2026-06-17T20:41:18Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b0bf508281e2565a566f19250de21a4d8ff106a2",
"body": null,
"is_bot": false,
"headline": "moved chrome-extension to specific repo",
"author_name": "ISR4EL",
"author_login": "isr4el-silv4",
"committed_at": "2026-06-17T20:12:39Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "8c0cd537bbcbad5bc9139addc74230fd55cfb539",
"body": "- Scroll target now points to main (the actual scrollable container)\n instead of #messages (a no-op since main has overflow-y: auto)\n- Added bottom padding to main and margin-bottom to last message\n for breathing room between conversation and textarea",
"is_bot": false,
"headline": "Fix spacing between last message and prompt input",
"author_name": "ISR4EL",
"author_login": "isr4el-silv4",
"committed_at": "2026-06-14T13:48:54Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5ac40464fa853b8bf049e9805676d0d33aa6fa6a",
"body": "…ing old one\n\nOn WebSocket connect, send new_session with cwd from /status instead of\ndispatching session_state which restored the previous session. This ensures\na fresh session starts immediately when the extension is refreshed.",
"is_bot": false,
"headline": "fix(chrome-extension): start new session on refresh instead of restor…",
"author_name": "ISR4EL",
"author_login": "isr4el-silv4",
"committed_at": "2026-06-14T13:31:30Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "aea229d9acf89a0f2b6c3d4306e2cb98e92c3d47",
"body": "Relocate UI request dialogs from main content area into the header,\npositioned between the attached tabs list and the CWD/resume row.\nRestyled with yellow warning colors for clear action-required visibility.",
"is_bot": false,
"headline": "Move confirmation banners to header above CWD row",
"author_name": "ISR4EL",
"author_login": "isr4el-silv4",
"committed_at": "2026-06-14T13:14:50Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "cd75629e4262d4bc94047db07d98f90ec085cac4",
"body": null,
"is_bot": false,
"headline": "clean up: remove stray IDE/plan files from tracking, update gitignore",
"author_name": "ISR4EL",
"author_login": "isr4el-silv4",
"committed_at": "2026-06-14T12:19:16Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "9fd04ecd84b6ef07254bc4a3f61339a7ffc9b6a6",
"body": "- Switch form to column layout so send/abort button stays visible\n- Enable overflow-y: auto on textarea so long text is scrollable\n- Add thin custom scrollbar for the textarea",
"is_bot": false,
"headline": "fix prompt form layout and textarea scrolling",
"author_name": "ISR4EL",
"author_login": "isr4el-silv4",
"committed_at": "2026-06-14T12:17:44Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "6946e9d9f270cca030a195499ea6b85f41b07730",
"body": null,
"is_bot": false,
"headline": "restore original .gitignore",
"author_name": "ISR4EL",
"author_login": "isr4el-silv4",
"committed_at": "2026-06-14T12:14:32Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "323a922a4cc7a41f0dc9b4662c66581389640dae",
"body": null,
"is_bot": false,
"headline": "preserve README.md in gitignore",
"author_name": "ISR4EL",
"author_login": "isr4el-silv4",
"committed_at": "2026-06-14T12:13:32Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "9084ff404d93ca445d8df1296dc5390333fc584d",
"body": null,
"is_bot": false,
"headline": "unstage IDE and plan files, add to gitignore",
"author_name": "ISR4EL",
"author_login": "isr4el-silv4",
"committed_at": "2026-06-14T12:12:49Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e93b1b00ad22f3ef2e456efa8d4370931ff7810f",
"body": "- Changed <input> to <textarea> for multi-line support\n- Auto-resizes vertically (max 180px) as user types\n- Enter sends message, Shift+Enter adds newline\n- Resets height after sending",
"is_bot": false,
"headline": "replace prompt input with auto-growing textarea",
"author_name": "ISR4EL",
"author_login": "isr4el-silv4",
"committed_at": "2026-06-14T12:12:33Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1b30a64ef34deaa29bf188551ff5756f2a655fcf",
"body": null,
"is_bot": false,
"headline": "add Pi badge as extension icons (16, 32, 48, 128px)",
"author_name": "ISR4EL",
"author_login": "isr4el-silv4",
"committed_at": "2026-06-14T12:04:30Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "6137512382973f573cb5a875baaec1ee4836bca5",
"body": "- Complete CSS rewrite with CSS custom properties for theming\n- Light mode: warm stone palette, blue accent\n- Dark mode: deep zinc palette, blue accent\n- User messages as blue bubbles flush-right\n- Assistant messages as bordered cards with rich markdown\n- Catppuccin Mocha code blocks for developer-n\n[…]\n) in header\n- Persists preference to localStorage\n- Respects OS prefers-color-scheme as default\n- Green dot status indicator for bridge online/offline\n- Custom thin scrollbar, smooth theme transitions",
"is_bot": false,
"headline": "redesign sidepanel with light/dark mode",
"author_name": "ISR4EL",
"author_login": "isr4el-silv4",
"committed_at": "2026-06-14T12:00:53Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "dc8d0455fede9c44a243d010ba6a383f891fd075",
"body": "- Move pi-badge.svg into chrome-extension/ directory\n- Display 20px badge next to \"Pi Web UI\" title in header\n- Style with rounded corners and proper alignment",
"is_bot": false,
"headline": "Add Pi badge logo to chrome-extension header",
"author_name": "ISR4EL",
"author_login": "isr4el-silv4",
"committed_at": "2026-06-14T11:43:47Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "869f8a6ea1a7474b1fb9865f1674af85d3b32b61",
"body": "Switch from hidden attribute to CSS class-based visibility:\n- .error-pill defaults to display: none\n- Only shows when .visible class is present (set only with real error text)\n- Clear textContent on hide to prevent stale content",
"is_bot": false,
"headline": "Fix empty error pill always visible",
"author_name": "ISR4EL",
"author_login": "isr4el-silv4",
"committed_at": "2026-06-14T11:34:32Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "353413ed13ff7a92121a306c0102bb61f8c8b5f1",
"body": "- Clear sessionError on sessions_list and session_history events so\n the error pill hides when sessions load successfully after an error\n- Add defensive trim() check in renderErrorPill to guard against\n empty/whitespace-only error strings\n- Add tests for error pill clear-on-success scenarios",
"is_bot": false,
"headline": "Fix empty error pill showing when no error exists",
"author_name": "ISR4EL",
"author_login": "isr4el-silv4",
"committed_at": "2026-06-14T11:29:20Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "480f8c692c2991007b321e165b31b504ef148011",
"body": "Relocate the cwd path/Browse button and Resume/session dropdown from\nthe session section into the header for a cleaner layout matching\nthe design mockup.\n\n- Restructured header HTML with semantic elements\n- Added pill-shaped session select with custom chevron\n- Styled cwd path with monospace font and ellipsis truncation\n- No functional changes — purely aesthetic",
"is_bot": false,
"headline": "Move cwd and session select into header bar",
"author_name": "ISR4EL",
"author_login": "isr4el-silv4",
"committed_at": "2026-06-14T11:24:32Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4c55a6ae9ddbd03d6f7eec4849880f46ac2c0597",
"body": "The thinking toggle button and block were appended to the DOM via\nappendChild, but then immediately destroyed by 'innerHTML +=' which\nreplaces all children. Replaced with insertAdjacentHTML('beforeend')\nto preserve the thinking elements.\n\nAlso updated the assistant_message ServerEvent type to include the\noptional thinking field that was already being sent at runtime.",
"is_bot": false,
"headline": "fix: thinking emoji not rendered in live chat assistant messages",
"author_name": "ISR4EL",
"author_login": "isr4el-silv4",
"committed_at": "2026-06-14T11:09:03Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5dbc4582212ae7aeba96bcb3646fd6dcfa1c3d28",
"body": null,
"is_bot": false,
"headline": "Added missing files",
"author_name": "ISR4EL",
"author_login": "isr4el-silv4",
"committed_at": "2026-06-14T10:52:25Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d7db9adbcfa86e31c95f4a845c894b25323b6567",
"body": "…nts in live chat\n\nThe bridge server broadcasts tool_call/tool_result events during live chat\nbut the client reducer ignored them, so only the final assistant_message\nwas rendered. Now the reducer handles all intermediate events to match\nthe session_history display.\n\nAlso includes thinking block extraction in assistant_message broadcast.",
"is_bot": false,
"headline": "fix(chrome-extension): render tool_call, tool_result and thinking eve…",
"author_name": "ISR4EL",
"author_login": "isr4el-silv4",
"committed_at": "2026-06-14T10:47:07Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f0b0f97c860fb47c1a85176d5c796c904365fb70",
"body": "The model can finish generating before the abort signal reaches the\nprovider, resulting in a normal message_end (stopReason: end_turn)\nthat was incorrectly broadcast to the UI after 'Aborted' appeared.\n\nTrack an 'aborted' flag on the bridge: set on abort command, reset on\nnew prompt/new session. Any message_end arriving while the flag is set\nis suppressed, regardless of stopReason.",
"is_bot": false,
"headline": "fix(abort): suppress all assistant messages after user clicks abort",
"author_name": "ISR4EL",
"author_login": "isr4el-silv4",
"committed_at": "2026-06-14T10:14:48Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "8b010aae3969eb9a4df247a3a074ef60db53fecf",
"body": "…elay\n\n- Add reconnection logic to bridge-client.js (7 attempts, 2s between each)\n- Emit bridge_reconnect_exhausted event after all retries fail\n- Show reload banner in sidepanel when reconnection is exhausted\n- Suppress duplicate bridge_error notifications during reconnection\n- Clear notifications on successful reconnection\n- Add tests for reconnection, exhaustion, counter reset, and disconnect cleanup",
"is_bot": false,
"headline": "feat(chrome-extension): auto-reconnect bridge up to 7 times with 2s d…",
"author_name": "ISR4EL",
"author_login": "isr4el-silv4",
"committed_at": "2026-06-13T16:11:17Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "7aa3811b6958e36af6bedf6a73ffd30df8dce54c",
"body": "- Delete src/protocol/permissions.ts (PermissionMode type, isPermissionMode)\n- Remove observe/debug/control mode selector from Chrome extension UI\n- Remove set_permission_mode command from protocol\n- Simplify permission enforcement: all tools allowed by default\n- Cookie/storage toggles and confirmation prompts retained\n- Remove permissionMode from session state, bridge context, and all fixtures\n- Update 16 test files to remove permissionMode references",
"is_bot": false,
"headline": "Remove permission mode selector from UI and simplify bridge permissions",
"author_name": "ISR4EL",
"author_login": "isr4el-silv4",
"committed_at": "2026-06-13T15:46:12Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "6f1fa8848023a5d768021cbebdf0cd0cd864eb8e",
"body": "… chat on new session\n\n- Extract cwd from session file header on resume instead of using bridge context cwd\n- Fix list_sessions returning partial session that overwrote sessionPath in UI state\n- Highlight the currently active session in the dropdown selector\n- Clear chat history when creating a new session via the dropdown\n- Add session_history event with empty messages for new_session\n- Add 4 tests for resume_session cwd behavior",
"is_bot": false,
"headline": "fix: resume_session uses session cwd, highlight active session, clear…",
"author_name": "ISR4EL",
"author_login": "isr4el-silv4",
"committed_at": "2026-06-13T13:28:54Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "cbee86ef2704fb5558f2c3eb396b38a79fb3501e",
"body": "The Pi SDK's createAgentSession ignores the sessionPath option — it only\naccepts a pre-built sessionManager. When resuming, create a\nSessionManager.open(sessionPath) and pass it so the model loads the full\nconversation history.\n\nAlso removed the async IIFE in resume_session that broadcast a second\nsession_state after the WebSocket already sent one, causing an infinite\nfetchSessionsForCwd → list_sessions → session_state loop.",
"is_bot": false,
"headline": "fix: resume_session loads conversation history into SDK context",
"author_name": "ISR4EL",
"author_login": "isr4el-silv4",
"committed_at": "2026-06-13T12:40:22Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c7d844b16ea325b49b17b11871050db0efa9b6d8",
"body": "- Add list_sessions command to protocol with SessionHistoryMessage type\n- Implement bridge handlers for list_sessions and enhanced resume_session\n- Add session dropdown UI next to cwd label with auto-fetch on cwd change\n- Support rich message rendering: tool calls, bash output, compaction, thinking \n[…]\ngistry\n- Extract cwd from session file when resuming for correct directory context\n- Add error pill display for session loading errors\n- Add comprehensive tests for protocol, bridge, client, and state",
"is_bot": false,
"headline": "feat: add session resume with rich conversation history",
"author_name": "ISR4EL",
"author_login": "isr4el-silv4",
"committed_at": "2026-06-13T11:42:38Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "ac8504fbeb0b1f84af5e19d4be94472b6df28417",
"body": null,
"is_bot": false,
"headline": "docs: save auto-start-session plan to plans/ dir",
"author_name": "ISR4EL",
"author_login": "isr4el-silv4",
"committed_at": "2026-06-12T22:55:43Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5ac568b2a5c4f004dd3a3f578341c33279749adb",
"body": "The Browse button now immediately sends new_session to the bridge\nafter the user picks a directory, removing the extra \"New session\"\nclick. Shows an error notification if the bridge is offline.\n\n- sidepanel.js: auto-send new_session after directory picker resolves\n- sidepanel.html: remove the \"New session\" button\n- tests: add coverage for new_session command and cwd in session_state",
"is_bot": false,
"headline": "feat: auto-start new session when browsing a directory",
"author_name": "ISR4EL",
"author_login": "isr4el-silv4",
"committed_at": "2026-06-12T22:51:22Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2d4534d4587720a267d5f64f5bbda11897bba616",
"body": "The extension showed 'not set' for cwd even when the bridge was running\nwith a valid working directory. Three fixes:\n\n1. Server: send session_state to new WebSocket clients on connect\n2. Client: fetch session state from HTTP /status endpoint on connect\n3. UI: render() now reads state.session.cwd and updates the display",
"is_bot": false,
"headline": "fix: populate cwd in Chrome extension from bridge session state",
"author_name": "ISR4EL",
"author_login": "isr4el-silv4",
"committed_at": "2026-06-12T22:33:12Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2001c1c69455a5aeda5b94d5ff7223babd83efe1",
"body": "- Integrated attached tabs bar into the main header\n- Header now shows title, bridge status, and debugger tabs together\n- Removed fixed positioning, tabs flow naturally in header\n- Cleaned up duplicate CSS rules",
"is_bot": false,
"headline": "refactor: move debugger tabs into header bar",
"author_name": "ISR4EL",
"author_login": "isr4el-silv4",
"committed_at": "2026-06-12T21:51:11Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e4aed7f71c9b6f3ec5122d795ee0f0c7ef235c31",
"body": "- network.startCapture now sends Network.enable to all attached tabs\n- network.stopCapture now sends Network.disable to all attached tabs\n- console.getLogs now sends Runtime.enable to target tab\n- tabs.getCurrent returns debuggerAttached boolean flag\n- Tool descriptions updated to clarify capture is auto-enabled on attach\n- Agent no longer needs to call startCapture before getNetworkRequests\n- Added 8 new tests for CDP command dispatch and debuggerAttached flag",
"is_bot": false,
"headline": "fix: network/console capture starts immediately on debugger attach",
"author_name": "ISR4EL",
"author_login": "isr4el-silv4",
"committed_at": "2026-06-12T21:41:48Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a757eaa2e22a894fb8b90bd158377e753fd7fc07",
"body": "…ls_conflict events\n\nThe sidepanel had its own chrome.tabs.onActivated listener that fired\nbefore the tool executor's auto-attach could complete, causing false\ndevtools_conflict events on every tab switch.\n\nRemoved the sidepanel's onActivated listener and added onAttachFailed\ncallback to the tool executor so the sidepanel only shows the DevTools\nwarning when auto-attach actually fails on a newly activated tab.",
"is_bot": false,
"headline": "fix: remove duplicate tab activation listener causing spurious devtoo…",
"author_name": "ISR4EL",
"author_login": "isr4el-silv4",
"committed_at": "2026-06-10T21:53:27Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2b71d1bfeb5efb2cb65d4eafc13835ae082fb2d3",
"body": "debugger.sendCdpCommand, debugger.evaluateScript, and\nnetwork.getResponseBody now auto-attach to the target tab if the\ndebugger is not already attached. Previously, sending a CDP command\nto an unattached tab would cause the chrome.debugger.sendCommand call\nto fail in an unhandled way, leaving the bridge promise hanging\nindefinitely and blocking the Pi agent conversation.\n\nAlso removes duplicate network.getResponseBody case.",
"is_bot": false,
"headline": "fix: auto-attach debugger before CDP commands to prevent hangs",
"author_name": "ISR4EL",
"author_login": "isr4el-silv4",
"committed_at": "2026-06-10T21:37:04Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4a5d0feae32db8f6beeea3041b78e6ae3fcc151c",
"body": "…lict UI\n\n- Auto-start network capture on tool executor creation\n- Auto-attach debugger to active tab on startup\n- Auto-reattach debugger when DevTools closes (1s retry interval)\n- Auto-attach on tab activation\n- Fixed header bar showing all tabs with active debuggers (with X to detach)\n- DevTools c\n[…]\nxpose isAttached(), attachedTabIds, networkCapture, detachTab() on executor\n- Add devtoolsConflict and attachedTabs to sidepanel state\n- Update tests for new auto-attach, reattach, and detach behavior",
"is_bot": false,
"headline": "feat: auto-attach debugger, auto-start network capture, DevTools conf…",
"author_name": "ISR4EL",
"author_login": "isr4el-silv4",
"committed_at": "2026-06-10T19:21:00Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "3747d6b37a77ffbf46587075fefe385698090cd3",
"body": "- Add global box-sizing: border-box so padding never expands elements\n- Add max-width: 100% to .message and .message.assistant pre\n- Code blocks now scroll internally without pushing the panel wider\n- Text after code blocks wraps correctly at any panel width",
"is_bot": false,
"headline": "fix: constrain code blocks and messages to panel width",
"author_name": "ISR4EL",
"author_login": "isr4el-silv4",
"committed_at": "2026-06-10T18:01:28Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f0ce855b05d6cd2490aa9f4f1af3724387411b46",
"body": "Add overflow-wrap and word-break rules across all message elements,\nheaders, code, tables, links, and notifications so text wraps properly\nin narrow panels instead of overflowing horizontally.",
"is_bot": false,
"headline": "fix: prevent text cutoff when side panel is narrowed",
"author_name": "ISR4EL",
"author_login": "isr4el-silv4",
"committed_at": "2026-06-10T16:51:54Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5a09705984b0826c3ea133ddd68defac4538b133",
"body": "…ering\n\n- Fix 'content is not iterable' error: browser tool execute functions now\n return { content: [{ type: 'text', text: ... }], details: {...} } as\n required by the Pi SDK agent runtime, instead of raw executor results\n- Fix execute parameter signature: now accepts (_toolCallId, params) instea\n[…]\nssages using marked + DOMPurify\n- Style code blocks, tables, lists, headings, links, and blockquotes in CSS\n- Sanitize all rendered HTML to prevent XSS\n- Add tests for both fixes and markdown renderer",
"is_bot": false,
"headline": "fix: wrap browser tool results in Pi SDK format and add markdown rend…",
"author_name": "ISR4EL",
"author_login": "isr4el-silv4",
"committed_at": "2026-06-10T16:46:30Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "7dee9626730a86aa4897b1846a16ec2966381668",
"body": "- Fix async getAsEntry() handling in cwd-picker.js (newer Chrome returns Promise)\n- Add server-side CWD fallback: search home dir subdirs and parent of process.cwd()\n- Show warning + editable input in UI when only directory name is available\n- Add tests for async getAsEntry and expanded CWD search",
"is_bot": false,
"headline": "fix: resolve CWD when chrome.fileSystem.getDisplayPath fails",
"author_name": "ISR4EL",
"author_login": "isr4el-silv4",
"committed_at": "2026-06-07T15:38:08Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "79fe9b27396b00e68f03dc8bca932d393deed5a9",
"body": "Root cause: createAgentSession returns { session: { ... } } but the bridge\nwas using the wrapper directly, so sdkSession.prompt was undefined.\n\nChanges:\n- Extract inner session from { session } wrapper in sdk-session.ts\n- Add input validation for non-object messages in bridge-client.js\n- Add try-cat\n[…]\nocket-server.ts\n- Handle 'error' events in sidepanel-state.js reducer\n- Add comprehensive logging throughout the message flow\n- Add tests for session extraction, error handling, and round-trip prompts",
"is_bot": false,
"headline": "fix: extract session from Pi SDK wrapper and add robust error handling",
"author_name": "ISR4EL",
"author_login": "isr4el-silv4",
"committed_at": "2026-06-07T14:59:12Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "3d0c43171389101bad2155bfe3816511db1a3c33",
"body": "The bridge was not creating an SDK session when started via createHttpServer,\nso prompts from the extension had nowhere to go.\n\nChanges:\n- createBridgeApp now creates SDK session automatically when no sdkHost is\n provided, using createDefaultPiSdkAdapter\n- SDK session events (assistant_message, tool_call, tool_result) are\n subscribed to and relayed to connected WebSocket clients\n- Add 4 integration tests for SDK session creation and prompt relay",
"is_bot": false,
"headline": "fix(bridge): create SDK session automatically for prompt forwarding",
"author_name": "ISR4EL",
"author_login": "isr4el-silv4",
"committed_at": "2026-06-07T12:03:20Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "3076b5b8fda65210712b6815f5d669da95629baf",
"body": "The bridge was not actually processing prompts from the extension — it only\nbroadcasted a prompt_received acknowledgement but never forwarded the message\nto Pi's SDK session.\n\nChanges:\n- Bridge now forwards prompt commands to sdkSession.prompt()\n- WebSocket connections are registered in browser clie\n[…]\nribed to and relayed back to connected clients\n- Extension ignores prompt_received echo to avoid duplicating user messages\n- Add 3 integration tests for prompt relay and 2 unit tests for state reducer",
"is_bot": false,
"headline": "fix(bridge): forward prompts to Pi and relay assistant messages",
"author_name": "ISR4EL",
"author_login": "isr4el-silv4",
"committed_at": "2026-06-07T11:52:01Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "f059eccfb2436cefe4ef43e79b40516eae0e628b",
"body": "The CWD picker was silently failing and always showing 'not set' because\ngetAsEntry() and chrome.fileSystem.getDisplayPath() are deprecated/unreliable.\n\n- Extract path resolution into cwd-picker.js with proper error handling\n- Support both callback-style and promise-style getDisplayPath APIs\n- Fall back to directory name when APIs are unavailable\n- Add 7 unit tests covering all edge cases",
"is_bot": false,
"headline": "fix(chrome-extension): show selected directory path in CWD picker",
"author_name": "ISR4EL",
"author_login": "isr4el-silv4",
"committed_at": "2026-06-07T11:39:52Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "30800d12fde85b40dd447e65d94b18921a1f733d",
"body": "- Unref stderr stream after bridge is ready so it doesn't keep\n the event loop alive\n- Chrome opener uses setImmediate instead of waiting for exit\n event (xdg-open may not emit exit reliably)",
"is_bot": false,
"headline": "fix: prevent CLI from hanging after bridge start",
"author_name": "ISR4EL",
"author_login": "isr4el-silv4",
"committed_at": "2026-06-06T18:43:49Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2665448f6ca238e2404216df8149c87eb541973d",
"body": "When Pi loads the extension from src/, import.meta.url resolves to\nsrc/bridge-process.js, making the relative path point to\nsrc/bridge/server.js which doesn't exist. Now checks both dist and\nsrc paths, always returning the compiled dist/bridge/server.js.",
"is_bot": false,
"headline": "fix: resolve bridge entry path for both src and dist contexts",
"author_name": "ISR4EL",
"author_login": "isr4el-silv4",
"committed_at": "2026-06-06T18:26:07Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f2e5379b3c24aca3e208e9dc421f47f8e0e8bcc1",
"body": "- Bridge now responds to POST /stop by closing server and exiting\n- bridge-process stop() checks if running before calling stopFn\n- No-op if bridge is already stopped\n- Added tests for stop behavior",
"is_bot": false,
"headline": "feat: implement bridge stop via POST /stop endpoint",
"author_name": "ISR4EL",
"author_login": "isr4el-silv4",
"committed_at": "2026-06-06T18:12:56Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "858287b5d6bab69d6a8484762ee23fde8e3ad9d1",
"body": "- Pipe bridge stderr instead of ignoring it\n- Include stderr output in timeout error message\n- Helps diagnose why bridge fails to start",
"is_bot": false,
"headline": "fix: capture bridge stderr for better error diagnostics",
"author_name": "ISR4EL",
"author_login": "isr4el-silv4",
"committed_at": "2026-06-06T17:49:29Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "964a4f33e16f8d98e209a09b9391416f7f9a0384",
"body": "After spawning the bridge process, poll /status until it responds\nbefore returning from start(). This prevents the browser from\nopening a 'site cannot be reached' page due to the bridge not\nyet listening.\n\n- Added waitForBridgeReady() with configurable timeout/poll interval\n- Defaults: 10s timeout, 200ms poll interval\n- Throws if bridge never becomes ready within timeout\n- Added tests for polling and timeout behavior",
"is_bot": false,
"headline": "fix: wait for bridge to be ready before opening browser",
"author_name": "ISR4EL",
"author_login": "isr4el-silv4",
"committed_at": "2026-06-06T17:34:27Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1ed1aa5152f451fbfb289ca047cba348ef7abb0e",
"body": "- Wrap child_process.spawn in a Promise to catch async ENOENT errors\n instead of crashing with uncaught exception\n- Try all candidates in order before giving up:\n google-chrome, google-chrome-stable, chromium, chromium-browser,\n vivaldi-stable, vivaldi, xdg-open\n- xdg-open fallback opens the system default browser (e.g. Vivaldi)\n- Clear error message when no browser is found\n- Add 5 new tests for fallback, ENOENT handling, and platform coverage",
"is_bot": false,
"headline": "fix: handle missing Chrome and support more browsers",
"author_name": "ISR4EL",
"author_login": "isr4el-silv4",
"committed_at": "2026-06-06T17:23:31Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c4cd16a8f58b54139912beae850eeef7119f932c",
"body": null,
"is_bot": false,
"headline": "Remove pi.extensions from package.json (not needed for auto-discovery)",
"author_name": "ISR4EL",
"author_login": "isr4el-silv4",
"committed_at": "2026-06-05T22:29:14Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "3fb166e6404939a2cffefbc110f84b35e1d3a5d3",
"body": "Pi discovers extensions from ~/.pi/agent/extensions/*/index.ts (jiti loads\nTypeScript directly). The entry point was at src/index.ts but Pi expects\nindex.ts at the root of the extension directory.\n\nAlso remove pi.extensions from package.json — that field is for 'pi install'\npackages, not for auto-discovered extensions in the extensions directory.",
"is_bot": false,
"headline": "Add root index.ts for Pi auto-discovery",
"author_name": "ISR4EL",
"author_login": "isr4el-silv4",
"committed_at": "2026-06-05T22:29:06Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a56b3344a3f6e911383ea66b9ec8e592a36876c4",
"body": "…nd browser tools\n\n- Add src/index.ts as the main extension entry point\n- Register /pi-web-ui command with start/stop/status/open subcommands\n- Register 20 browser tools (tabs, HTML, console, network, debugger, cookies/storage)\n- Add session_start/session_shutdown lifecycle hooks\n- Add /browser-tool\n[…]\nUiController\n- Update package.json with pi.extensions field for auto-discovery\n- Add @sinclair/typebox dependency for parameter schemas\n- Add tests for extension command handlers and tool registration",
"is_bot": false,
"headline": "Add Pi auto-discovery extension entry point with /pi-web-ui command a…",
"author_name": "ISR4EL",
"author_login": "isr4el-silv4",
"committed_at": "2026-06-05T22:14:14Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "965275928b28c9d74c2980099b27550d7dbd9058",
"body": null,
"is_bot": false,
"headline": "Complete side panel UI requests and live browser tooling",
"author_name": "ISR4EL",
"author_login": "isr4el-silv4",
"committed_at": "2026-06-05T21:47:04Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5edc69d01c89dc4a961e0e3082b807a2d8b2c758",
"body": null,
"is_bot": false,
"headline": "Wire SDK session lifecycle and confirmation policy",
"author_name": "ISR4EL",
"author_login": "isr4el-silv4",
"committed_at": "2026-06-05T21:42:27Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a709cff444a8f5328fef630ac972e39f24079e68",
"body": null,
"is_bot": false,
"headline": "Move tests into submodule test directories",
"author_name": "ISR4EL",
"author_login": "isr4el-silv4",
"committed_at": "2026-06-05T21:40:40Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "407b89b8bea89298b67dc32568bbb2f1b74f9ec1",
"body": null,
"is_bot": false,
"headline": "Wire SDK adapter and browser tool request path",
"author_name": "ISR4EL",
"author_login": "isr4el-silv4",
"committed_at": "2026-06-05T21:38:01Z",
"body_truncated": false,
"is_coding_agent": false
}
],
"releases_count": 0,
"commits_last_year": 105,
"latest_release_at": null,
"latest_release_tag": null,
"releases_from_tags": false,
"days_since_last_push": 5,
"active_weeks_last_year": 7,
"days_since_latest_release": null,
"mean_days_between_releases": null
},
"community": {
"has_readme": true,
"has_license": true,
"has_description": true,
"has_contributing": false,
"health_percentage": 42,
"has_issue_template": false,
"has_code_of_conduct": false,
"has_pull_request_template": false
},
"ecosystem": {
"packages": [
{
"name": "@isr4el-silv4/pi-web-ui",
"exists": true,
"license": "Apache-2.0",
"keywords": [
"pi-package",
"pi-extension",
"pi",
"pi-coding-agent",
"chrome",
"vivaldi",
"edge",
"brave",
"browser",
"chromium",
"ai",
"harness",
"browser-tools"
],
"ecosystem": "npm",
"matches_repo": true,
"registry_url": "https://www.npmjs.com/package/@isr4el-silv4/pi-web-ui",
"is_deprecated": false,
"latest_version": "1.0.15",
"repository_url": "https://github.com/isr4el-silv4/pi-web-ui",
"versions_count": 16,
"total_downloads": null,
"dependents_count": null,
"deprecation_note": null,
"maintainers_count": 1,
"monthly_downloads": 2574,
"first_published_at": "2026-06-17T21:40:18.963000Z",
"latest_published_at": "2026-07-19T19:05:28.541000Z",
"latest_version_yanked": null,
"days_since_latest_publish": 5
}
]
},
"popularity": {
"forks": 1,
"stars": 12,
"watchers": 0,
"fork_history": {
"days": [
{
"date": "2026-07-16",
"count": 1
}
],
"complete": true,
"collected": 1,
"total_forks": 1
},
"star_history": null,
"open_issues_and_prs": 2
},
"ai_readiness": {
"has_nix": false,
"example_dirs": [],
"has_llms_txt": false,
"has_dockerfile": false,
"has_mcp_signal": false,
"bootstrap_files": [],
"api_schema_files": [],
"has_devcontainer": false,
"typecheck_configs": [
"tsconfig.json"
],
"toolchain_manifests": [],
"largest_source_bytes": 41602,
"source_files_sampled": 48,
"oversized_source_files": 0,
"agent_instruction_files": [],
"agent_instruction_max_bytes": null
},
"dependencies": {
"manifests": [
"package.json"
],
"advisories": {
"error": null,
"scope": "published_package",
"source": "osv",
"findings": [],
"collected": true,
"malicious": [],
"truncated": false,
"by_severity": {},
"advisory_count": 0,
"affected_count": 0,
"assessed_count": 2,
"malicious_count": 0,
"assessed_package": "npm:@isr4el-silv4/pi-web-ui@1.0.15",
"unassessed_count": 0,
"direct_affected_count": 0
},
"ecosystems": [
"npm"
],
"dependencies": [
{
"name": "@sinclair/typebox",
"manifest": "package.json",
"ecosystem": "npm",
"version_constraint": "^0.34.49"
},
{
"name": "ws",
"manifest": "package.json",
"ecosystem": "npm",
"version_constraint": "^8.21.0"
}
],
"all_dependencies": {
"error": "GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository",
"source": null,
"packages": [],
"collected": false,
"truncated": false,
"total_count": null,
"direct_count": null,
"indirect_count": null
}
},
"maintainership": {
"issues": {
"open_prs": 0,
"merged_prs": 1,
"open_issues": 2,
"closed_ratio": 0.333,
"closed_issues": 1,
"closed_unmerged_prs": 0
},
"bus_factor": 1,
"bot_contributors": 0,
"top_contributors": [
{
"type": "User",
"login": "isr4el-silv4",
"commits": 102,
"avatar_url": "https://avatars.githubusercontent.com/u/51991395?v=4"
}
],
"contributors_sampled": 1,
"top_contributor_share": 1
},
"quality_signals": {
"has_ci": false,
"has_tests": true,
"ci_workflows": [],
"has_docs_dir": false,
"linter_configs": [],
"has_editorconfig": false,
"has_linter_config": false,
"has_precommit_config": false
},
"security_signals": {
"lockfiles": [],
"scorecard": {
"checks": [
{
"name": "Binary-Artifacts",
"score": 10,
"reason": "no binaries found in the repo",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#binary-artifacts"
},
{
"name": "Branch-Protection",
"score": 0,
"reason": "branch protection not enabled on development/release branches",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#branch-protection"
},
{
"name": "CI-Tests",
"score": 0,
"reason": "0 out of 1 merged PRs checked by a CI test -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#ci-tests"
},
{
"name": "CII-Best-Practices",
"score": 0,
"reason": "no effort to earn an OpenSSF best practices badge detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#cii-best-practices"
},
{
"name": "Code-Review",
"score": 0,
"reason": "Found 0/26 approved changesets -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#code-review"
},
{
"name": "Contributors",
"score": 0,
"reason": "project has 0 contributing companies or organizations -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#contributors"
},
{
"name": "Dangerous-Workflow",
"score": null,
"reason": "no workflows found",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dangerous-workflow"
},
{
"name": "Dependency-Update-Tool",
"score": 0,
"reason": "no update tool detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dependency-update-tool"
},
{
"name": "Fuzzing",
"score": 0,
"reason": "project is not fuzzed",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#fuzzing"
},
{
"name": "License",
"score": 9,
"reason": "license file detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#license"
},
{
"name": "Maintained",
"score": 0,
"reason": "project was created within the last 90 days. Please review its contents carefully",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#maintained"
},
{
"name": "Packaging",
"score": null,
"reason": "packaging workflow not detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#packaging"
},
{
"name": "Pinned-Dependencies",
"score": null,
"reason": "no dependencies found",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#pinned-dependencies"
},
{
"name": "SAST",
"score": 0,
"reason": "SAST tool is not run on all commits -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#sast"
},
{
"name": "Security-Policy",
"score": 0,
"reason": "security policy file not detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#security-policy"
},
{
"name": "Signed-Releases",
"score": null,
"reason": "no releases found",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#signed-releases"
},
{
"name": "Token-Permissions",
"score": null,
"reason": "No tokens found",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#token-permissions"
},
{
"name": "Vulnerabilities",
"score": 10,
"reason": "0 existing vulnerabilities detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#vulnerabilities"
}
],
"commit": "f460063655e4d860150f7064cd05c60c2c3b57ae",
"ran_at": "2026-07-25T18:05:24Z",
"aggregate_score": 2.5,
"scorecard_version": "v5.5.0"
},
"has_codeql_workflow": false,
"has_security_policy": false,
"has_dependabot_config": false
},
"contribution_flow": {
"collected": true,
"ci_last_run_at": null,
"oldest_open_prs": [],
"last_merged_pr_at": "2026-07-19T18:55:51Z",
"ci_last_conclusion": null,
"oldest_open_issues": [
{
"number": 2,
"created_at": "2026-07-12T22:57:55Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 4,
"created_at": "2026-07-19T20:32:06Z",
"last_comment_at": null,
"last_comment_author": null
}
]
}
},
"config": {
"disabled_metrics": [],
"disabled_categories": [],
"disabled_components": {}
},
"source": {
"url": "https://github.com/isr4el-silv4/pi-web-ui",
"host": "github.com",
"name": "pi-web-ui",
"owner": "isr4el-silv4"
},
"metrics": {
"overall": {
"key": "overall",
"band": "at_risk",
"name": "Overall health",
"note": "The weighted overall 38 is calibrated to 33 on the published index scale (record calibration 2026-08-02).",
"notes": [
{
"code": "overall_calibration",
"params": {
"raw": 38,
"calibrated": 33,
"calibration": "2026-08-02"
}
}
],
"value": 33,
"inputs": {
"security": 40,
"vitality": 36,
"community": 36,
"governance": 46,
"calibration": "2026-08-02",
"engineering": 30,
"ai_readiness": 46,
"weighted_overall_raw": 38
},
"components": []
},
"categories": [
{
"key": "vitality",
"band": "weak",
"name": "Vitality",
"value": 36,
"weight": 0.21,
"metrics": [
{
"key": "development_activity",
"band": "moderate",
"name": "Development activity",
"note": null,
"notes": [],
"value": 59,
"inputs": {
"commits_last_year": 105,
"human_commit_share": 1,
"days_since_last_push": 5,
"active_weeks_last_year": 7
},
"components": [
{
"key": "push_recency",
"name": "Push recency",
"detail": "last push 5 days ago",
"points": 36,
"status": "met",
"details": [
{
"code": "push_recency",
"params": {
"days": 5
}
}
],
"max_points": 36
},
{
"key": "commit_cadence",
"name": "Commit cadence",
"detail": "7/52 weeks with commits",
"points": 4.8,
"status": "partial",
"details": [
{
"code": "commit_cadence_weeks",
"params": {
"weeks": 7
}
}
],
"max_points": 36
},
{
"key": "commit_volume",
"name": "Commit volume",
"detail": "105 commits in the last year",
"points": 18,
"status": "met",
"details": [
{
"code": "commits_last_year",
"params": {
"count": 105
}
}
],
"max_points": 18
},
{
"key": "openssf_scorecard_maintained",
"name": "OpenSSF Scorecard: Maintained",
"detail": "project was created within the last 90 days. Please review its contents carefully",
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
}
]
},
{
"key": "release_discipline",
"band": "critical",
"name": "Release discipline",
"note": "Excluded from scoring (no data or not applicable): OpenSSF Scorecard: Signed-Releases. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"openssf_scorecard_signed_releases"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 1,
"inputs": {
"releases_count": 0
},
"components": [
{
"key": "ships_releases",
"name": "Ships releases",
"detail": "no releases published",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_releases_published",
"params": {}
}
],
"max_points": 27
},
{
"key": "release_recency",
"name": "Release recency",
"detail": "no releases",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_releases",
"params": {}
}
],
"max_points": 36
},
{
"key": "release_cadence",
"name": "Release cadence",
"detail": "no releases",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_releases",
"params": {}
}
],
"max_points": 27
},
{
"key": "openssf_scorecard_signed_releases",
"name": "OpenSSF Scorecard: Signed-Releases",
"detail": "no releases found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 10
}
]
},
{
"key": "abandonment",
"band": "exceptional",
"name": "Abandonment",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"cap": null,
"state": "unverified",
"guards": [],
"signals": [],
"red_flag": false,
"multiplier_pct": 100,
"declared_reason": null,
"unverified_reason": "repository_too_young",
"unanswered_open_prs": null,
"unanswered_open_issues": null,
"days_since_last_merged_pr": null,
"days_since_last_human_commit": null,
"days_since_last_human_commit_is_floor": false
},
"components": [
{
"key": "project_is_still_maintained",
"name": "Project is still maintained",
"detail": "maintenance record not established from the collected data",
"points": 100,
"status": "met",
"details": [
{
"code": "abandonment_unverified",
"params": {}
}
],
"max_points": 100
}
]
}
],
"description": "Is the project alive — is code being written and are releases shipping?"
},
{
"key": "community",
"band": "weak",
"name": "Community & Adoption",
"value": 36,
"weight": 0.17,
"metrics": [
{
"key": "popularity",
"band": "critical",
"name": "Popularity & adoption",
"note": null,
"notes": [],
"value": 17,
"inputs": {
"forks": 1,
"stars": 12,
"watchers": 0,
"growth_state": "unverified",
"growth_factor_pct": 100,
"growth_unverified_reason": "no_history"
},
"components": [
{
"key": "stars",
"name": "Stars",
"detail": "12 stars",
"points": 16.9,
"status": "partial",
"details": [
{
"code": "stars",
"params": {
"count": 12
}
}
],
"max_points": 60
},
{
"key": "forks",
"name": "Forks",
"detail": "1 forks",
"points": 0,
"status": "missed",
"details": [
{
"code": "forks",
"params": {
"count": 1
}
}
],
"max_points": 25
},
{
"key": "watchers",
"name": "Watchers",
"detail": "0 watchers",
"points": 0,
"status": "missed",
"details": [
{
"code": "watchers",
"params": {
"count": 0
}
}
],
"max_points": 15
}
]
},
{
"key": "community_health",
"band": "weak",
"name": "Community health",
"note": null,
"notes": [],
"value": 44,
"inputs": {
"has_readme": true,
"has_license": true,
"readme_badges": null,
"has_contributing": false,
"has_issue_template": false,
"has_code_of_conduct": false,
"readme_badge_services": [],
"has_pull_request_template": false
},
"components": [
{
"key": "readme",
"name": "README",
"detail": null,
"points": 22.5,
"status": "met",
"details": [],
"max_points": 22.5
},
{
"key": "license",
"name": "License",
"detail": "license file present, not a recognized license",
"points": 16.9,
"status": "partial",
"details": [
{
"code": "license_custom",
"params": {}
}
],
"max_points": 22.5
},
{
"key": "contributing_guide",
"name": "CONTRIBUTING guide",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 18
},
{
"key": "code_of_conduct",
"name": "Code of conduct",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 13.5
},
{
"key": "issue_template",
"name": "Issue template",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.2
},
{
"key": "pr_template",
"name": "PR template",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 6.3
}
]
},
{
"key": "ecosystem_adoption",
"band": "moderate",
"name": "Ecosystem adoption (downloads)",
"note": "Excluded from scoring (no data or not applicable): Registry dependents. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"registry_dependents"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 57,
"inputs": {
"packages": [
"@isr4el-silv4/pi-web-ui"
],
"dependents": null,
"ecosystems": "npm",
"total_downloads": null,
"monthly_downloads": 2574
},
"components": [
{
"key": "monthly_downloads",
"name": "Monthly downloads",
"detail": "2,574 downloads/month across npm",
"points": 45.5,
"status": "partial",
"details": [
{
"code": "downloads_monthly",
"params": {
"count": 2574,
"ecosystems": "npm"
}
}
],
"max_points": 80
},
{
"key": "registry_dependents",
"name": "Registry dependents",
"detail": "not reported by this ecosystem",
"points": 0,
"status": "excluded",
"details": [
{
"code": "not_reported_by_this_ecosystem",
"params": {}
}
],
"max_points": 20
}
]
}
],
"description": "Does the project have users, downloads, attention, and a welcoming setup for contributors?"
},
{
"key": "governance",
"band": "weak",
"name": "Sustainability & Governance",
"value": 46,
"weight": 0.23,
"metrics": [
{
"key": "maintainer_resilience",
"band": "critical",
"name": "Maintainer resilience (bus factor)",
"note": null,
"notes": [],
"value": 10,
"inputs": {
"bus_factor": 1,
"contributors_sampled": 1,
"top_contributor_share": 1
},
"components": [
{
"key": "bus_factor",
"name": "Bus factor",
"detail": "1 contributor(s) cover half of all commits",
"points": 9,
"status": "partial",
"details": [
{
"code": "bus_factor",
"params": {
"count": 1
}
}
],
"max_points": 54
},
{
"key": "commit_distribution",
"name": "Commit distribution",
"detail": "top contributor authored 100% of commits",
"points": 0,
"status": "missed",
"details": [
{
"code": "top_contributor_share",
"params": {
"share": 100
}
}
],
"max_points": 22.5
},
{
"key": "contributor_breadth",
"name": "Contributor breadth",
"detail": "1 contributors",
"points": 1.4,
"status": "partial",
"details": [
{
"code": "contributors_sampled",
"params": {
"count": 1
}
}
],
"max_points": 13.5
},
{
"key": "openssf_scorecard_contributors",
"name": "OpenSSF Scorecard: Contributors",
"detail": "project has 0 contributing companies or organizations -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
}
]
},
{
"key": "responsiveness",
"band": "moderate",
"name": "Issue & PR responsiveness",
"note": "Excluded from scoring (no data or not applicable): Newcomer PR acceptance. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"newcomer_pr_acceptance"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 51,
"inputs": {
"merged_prs": 1,
"open_issues": 2,
"closed_issues": 1,
"prs_merged_7d": null,
"prs_decided_7d": null,
"prs_merged_30d": null,
"prs_decided_30d": null,
"issue_closed_ratio": 0.333,
"closed_unmerged_prs": 0,
"first_time_authors_30d": null,
"first_time_prs_merged_30d": null,
"first_time_prs_decided_30d": null
},
"components": [
{
"key": "issue_resolution",
"name": "Issue resolution",
"detail": "33% of issues closed",
"points": 14,
"status": "partial",
"details": [
{
"code": "issues_closed_share",
"params": {
"share": 33
}
}
],
"max_points": 42
},
{
"key": "pr_acceptance",
"name": "PR acceptance",
"detail": "1/1 decided PRs merged",
"points": 30,
"status": "met",
"details": [
{
"code": "decided_prs_merged",
"params": {
"merged": 1,
"decided": 1
}
}
],
"max_points": 30
},
{
"key": "newcomer_pr_acceptance",
"name": "Newcomer PR acceptance",
"detail": "no first-time contributor's PR decided in 30d",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_newcomer_prs",
"params": {
"days": 30
}
}
],
"max_points": 13
},
{
"key": "openssf_scorecard_code_review",
"name": "OpenSSF Scorecard: Code-Review",
"detail": "Found 0/26 approved changesets -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
}
]
},
{
"key": "stewardship",
"band": "weak",
"name": "Ownership & stewardship",
"note": "Excluded from scoring (no data or not applicable): Verified domain. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"verified_domain"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 41,
"inputs": {
"followers": 3,
"owner_type": "User",
"is_verified": null,
"owner_login": "isr4el-silv4",
"public_repos": 6,
"account_age_days": 2593
},
"components": [
{
"key": "ownership_backing",
"name": "Ownership backing",
"detail": "personal (user) account",
"points": 10,
"status": "partial",
"details": [
{
"code": "owner_personal",
"params": {}
}
],
"max_points": 30
},
{
"key": "verified_domain",
"name": "Verified domain",
"detail": "not applicable to user accounts",
"points": 0,
"status": "excluded",
"details": [
{
"code": "not_applicable_to_user_accounts",
"params": {}
}
],
"max_points": 20
},
{
"key": "owner_reach",
"name": "Owner reach",
"detail": "3 followers of isr4el-silv4",
"points": 4.3,
"status": "partial",
"details": [
{
"code": "owner_followers",
"params": {
"count": 3,
"login": "isr4el-silv4"
}
}
],
"max_points": 25
},
{
"key": "track_record",
"name": "Track record",
"detail": "6 public repos, account ~7 yr old",
"points": 18.2,
"status": "partial",
"details": [
{
"code": "public_repos",
"params": {
"count": 6
}
},
{
"code": "account_age_years",
"params": {
"years": 7
}
}
],
"max_points": 25
}
]
},
{
"key": "package_maintenance",
"band": "exceptional",
"name": "Package maintenance",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"packages": [
"@isr4el-silv4/pi-web-ui"
],
"ecosystems": "npm",
"any_deprecated": false,
"min_days_since_publish": 5
},
"components": [
{
"key": "published_resolvable",
"name": "Published & resolvable",
"detail": "1 package(s) on npm",
"points": 25,
"status": "met",
"details": [
{
"code": "packages_published",
"params": {
"count": 1,
"ecosystems": "npm"
}
}
],
"max_points": 25
},
{
"key": "publish_recency",
"name": "Publish recency",
"detail": "latest publish 5 days ago",
"points": 35,
"status": "met",
"details": [
{
"code": "publish_recency",
"params": {
"days": 5
}
}
],
"max_points": 35
},
{
"key": "version_history",
"name": "Version history",
"detail": "16 published versions",
"points": 20,
"status": "met",
"details": [
{
"code": "published_versions",
"params": {
"count": 16
}
}
],
"max_points": 20
},
{
"key": "not_deprecated",
"name": "Not deprecated",
"detail": "active, not deprecated or yanked",
"points": 20,
"status": "met",
"details": [
{
"code": "package_not_deprecated",
"params": {}
}
],
"max_points": 20
}
]
}
],
"description": "Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?"
},
{
"key": "engineering",
"band": "at_risk",
"name": "Engineering Quality",
"value": 30,
"weight": 0.19,
"metrics": [
{
"key": "engineering_practices",
"band": "at_risk",
"name": "Engineering practices",
"note": null,
"notes": [],
"value": 24,
"inputs": {
"has_ci": false,
"has_tests": true,
"has_editorconfig": false,
"has_linter_config": false,
"has_precommit_config": false
},
"components": [
{
"key": "ci_workflows",
"name": "CI workflows",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 24
},
{
"key": "tests_present",
"name": "Tests present",
"detail": null,
"points": 24,
"status": "met",
"details": [],
"max_points": 24
},
{
"key": "linter_config",
"name": "Linter config",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 16
},
{
"key": "pre_commit_hooks",
"name": "Pre-commit hooks",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 9.6
},
{
"key": "editorconfig",
"name": ".editorconfig",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 6.4
},
{
"key": "openssf_scorecard_ci_tests",
"name": "OpenSSF Scorecard: CI-Tests",
"detail": "0 out of 1 merged PRs checked by a CI test -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 20
}
]
},
{
"key": "documentation",
"band": "weak",
"name": "Documentation",
"note": null,
"notes": [],
"value": 40,
"inputs": {
"topics": [],
"has_wiki": false,
"homepage": null,
"has_readme": true,
"has_docs_dir": false,
"has_description": true
},
"components": [
{
"key": "readme",
"name": "README",
"detail": null,
"points": 30,
"status": "met",
"details": [],
"max_points": 30
},
{
"key": "documentation_directory",
"name": "Documentation directory",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 25
},
{
"key": "documentation_homepage_site",
"name": "Documentation / homepage site",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
},
{
"key": "repository_description",
"name": "Repository description",
"detail": null,
"points": 10,
"status": "met",
"details": [],
"max_points": 10
},
{
"key": "topics",
"name": "Topics",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
},
{
"key": "wiki",
"name": "Wiki",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
}
]
}
],
"description": "Are baseline engineering and documentation practices in place?"
},
{
"key": "security",
"band": "weak",
"name": "Security",
"value": 40,
"weight": 0.16,
"metrics": [
{
"key": "security_posture",
"band": "at_risk",
"name": "Security posture",
"note": "Excluded from scoring (no data or not applicable): Dangerous-Workflow, Packaging, Pinned-Dependencies, Signed-Releases, Token-Permissions. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"dangerous_workflow",
"packaging",
"pinned_dependencies",
"signed_releases",
"token_permissions"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 25,
"inputs": {
"source": "openssf_scorecard",
"checks_evaluated": 13,
"scorecard_version": "v5.5.0",
"checks_inconclusive": 5,
"scorecard_aggregate": 2.5
},
"components": [
{
"key": "binary_artifacts",
"name": "Binary-Artifacts",
"detail": "no binaries found in the repo",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "branch_protection",
"name": "Branch-Protection",
"detail": "branch protection not enabled on development/release branches",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "ci_tests",
"name": "CI-Tests",
"detail": "0 out of 1 merged PRs checked by a CI test -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 2.5
},
{
"key": "cii_best_practices",
"name": "CII-Best-Practices",
"detail": "no effort to earn an OpenSSF best practices badge detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 2.5
},
{
"key": "code_review",
"name": "Code-Review",
"detail": "Found 0/26 approved changesets -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "contributors",
"name": "Contributors",
"detail": "project has 0 contributing companies or organizations -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 2.5
},
{
"key": "dangerous_workflow",
"name": "Dangerous-Workflow",
"detail": "no workflows found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 10
},
{
"key": "dependency_update_tool",
"name": "Dependency-Update-Tool",
"detail": "no update tool detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "fuzzing",
"name": "Fuzzing",
"detail": "project is not fuzzed",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "license",
"name": "License",
"detail": "license file detected",
"points": 2.2,
"status": "partial",
"details": [],
"max_points": 2.5
},
{
"key": "maintained",
"name": "Maintained",
"detail": "project was created within the last 90 days. Please review its contents carefully",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "packaging",
"name": "Packaging",
"detail": "packaging workflow not detected",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 5
},
{
"key": "pinned_dependencies",
"name": "Pinned-Dependencies",
"detail": "no dependencies found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 5
},
{
"key": "sast",
"name": "SAST",
"detail": "SAST tool is not run on all commits -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "security_policy",
"name": "Security-Policy",
"detail": "security policy file not detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "signed_releases",
"name": "Signed-Releases",
"detail": "no releases found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 7.5
},
{
"key": "token_permissions",
"name": "Token-Permissions",
"detail": "No tokens found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 7.5
},
{
"key": "vulnerabilities",
"name": "Vulnerabilities",
"detail": "0 existing vulnerabilities detected",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
}
]
},
{
"key": "dependency_advisories",
"band": "exceptional",
"name": "Dependency advisories",
"note": "Excluded from scoring (no data or not applicable): No advisories left outstanding. Remaining weights renormalized. Matched the npm:@isr4el-silv4/pi-web-ui@1.0.15 runtime dependency closure — what installing the published package pulls in — 2 packages. Reachability is not analyzed.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"no_advisories_left_outstanding"
]
}
},
{
"code": "weights_renormalized",
"params": {}
},
{
"code": "advisories_scope_published",
"params": {
"package": "npm:@isr4el-silv4/pi-web-ui@1.0.15",
"assessed": 2
}
},
{
"code": "advisories_reachability",
"params": {}
}
],
"value": 100,
"inputs": {
"source": "osv",
"advisories": 0,
"affected_packages": 0,
"assessed_packages": 2,
"unassessed_packages": 0,
"affected_by_severity": "none",
"direct_affected_packages": 0
},
"components": [
{
"key": "direct_dependencies_free_of_known_advisories",
"name": "Direct dependencies free of known advisories",
"detail": "no direct dependency carries a known advisory",
"points": 35,
"status": "met",
"details": [
{
"code": "no_direct_advisories",
"params": {}
}
],
"max_points": 35
},
{
"key": "indirect_dependencies_free_of_known_advisories",
"name": "Indirect dependencies free of known advisories",
"detail": "no indirect dependency carries a known advisory",
"points": 25,
"status": "met",
"details": [
{
"code": "no_indirect_advisories",
"params": {}
}
],
"max_points": 25
},
{
"key": "no_advisories_left_outstanding",
"name": "No advisories left outstanding",
"detail": "no advisory carries a publication date",
"points": 0,
"status": "excluded",
"details": [
{
"code": "advisories_no_publication_date",
"params": {}
}
],
"max_points": 40
}
]
},
{
"key": "malicious_dependencies",
"band": "exceptional",
"name": "Malicious dependencies",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"source": "osv",
"meaning": "reported as a malicious package by the OpenSSF corpus; the remedy is removal or moving off the compromised name, never an upgrade of the same artifact. Versions the registry has since pulled are listed but not scored",
"packages": [],
"red_flag": false,
"assessed_packages": 2,
"malicious_packages": 0,
"direct_malicious_packages": 0,
"withdrawn_malicious_packages": 0,
"installable_malicious_packages": 0
},
"components": [
{
"key": "no_dependency_reported_as_a_malicious_package",
"name": "No dependency reported as a malicious package",
"detail": "no dependency is reported as a malicious package",
"points": 100,
"status": "met",
"details": [
{
"code": "no_malicious_dependencies",
"params": {}
}
],
"max_points": 100
}
]
}
],
"description": "Are visible security and supply-chain practices strong, with no malicious dependency and no unresolved high-risk jurisdiction exposure?"
},
{
"key": "ai_readiness",
"band": "weak",
"name": "AI Readiness",
"value": 46,
"weight": 0.04,
"metrics": [
{
"key": "ai_agent_context",
"band": "at_risk",
"name": "Agent context & guidance",
"note": null,
"notes": [],
"value": 32,
"inputs": {
"has_llms_txt": false,
"legible_history_share": 0.6,
"agent_instruction_files": [],
"agent_instruction_max_bytes": null
},
"components": [
{
"key": "agent_instructions",
"name": "Agent instructions",
"detail": "no CLAUDE.md / AGENTS.md / editor rules",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_agent_instructions",
"params": {}
}
],
"max_points": 45
},
{
"key": "machine_readable_docs_llms_txt",
"name": "Machine-readable docs (llms.txt)",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
},
{
"key": "legible_commit_history",
"name": "Legible commit history",
"detail": "60 of 100 human commits state their intent (structured subject or explanatory body)",
"points": 32,
"status": "partial",
"details": [
{
"code": "legible_history",
"params": {
"legible": 60,
"sampled": 100
}
}
],
"max_points": 40
}
]
},
{
"key": "ai_verify_loop",
"band": "weak",
"name": "Verify loop (build / test / typecheck)",
"note": "Excluded from scoring (no data or not applicable): OpenSSF Scorecard: Pinned-Dependencies. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"openssf_scorecard_pinned_dependencies"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 37,
"inputs": {
"has_nix": false,
"has_tests": true,
"lockfiles": [],
"has_dockerfile": false,
"typed_language": true,
"bootstrap_files": [],
"has_devcontainer": false,
"has_linter_config": false,
"typecheck_configs": [
"tsconfig.json"
],
"agent_commit_share": 0,
"toolchain_manifests": [],
"dependency_bot_commit_share": 0
},
"components": [
{
"key": "one_command_bootstrap",
"name": "One-command bootstrap",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 18
},
{
"key": "automated_tests",
"name": "Automated tests",
"detail": null,
"points": 22,
"status": "met",
"details": [],
"max_points": 22
},
{
"key": "lint_format_config",
"name": "Lint / format config",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 11
},
{
"key": "static_type_checking",
"name": "Static type checking",
"detail": "tsconfig.json",
"points": 11,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "tsconfig.json"
}
}
],
"max_points": 11
},
{
"key": "reproducible_environment",
"name": "Reproducible environment",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
},
{
"key": "demonstrated_agent_practice",
"name": "Demonstrated agent practice",
"detail": "no agent-authored commits among the last 100",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_agent_authored_commits",
"params": {
"sampled": 100
}
}
],
"max_points": 10
},
{
"key": "automated_maintenance",
"name": "Automated maintenance",
"detail": "no automated dependency updates observed",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_dependency_automation",
"params": {}
}
],
"max_points": 8
},
{
"key": "openssf_scorecard_pinned_dependencies",
"name": "OpenSSF Scorecard: Pinned-Dependencies",
"detail": "no dependencies found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 10
}
]
},
{
"key": "ai_code_legibility",
"band": "exceptional",
"name": "Code legibility for models",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"primary_language": "TypeScript",
"largest_source_bytes": 41602,
"source_files_sampled": 48,
"oversized_source_files": 0
},
"components": [
{
"key": "type_checkable_code",
"name": "Type-checkable code",
"detail": "TypeScript (statically typed)",
"points": 45,
"status": "met",
"details": [
{
"code": "statically_typed_language",
"params": {
"language": "TypeScript"
}
}
],
"max_points": 45
},
{
"key": "manageable_file_sizes",
"name": "Manageable file sizes",
"detail": "0/48 source files over 60KB",
"points": 55,
"status": "met",
"details": [
{
"code": "oversized_source_files",
"params": {
"kb": 60,
"sampled": 48,
"oversized": 0
}
}
],
"max_points": 55
}
]
}
],
"description": "How well is the repo equipped to be developed and maintained with AI coding agents? Carries a deliberately small weight: agent tooling is a real maintenance signal, but its absence must never gate the top of the scale (calibration saturates at raw 91, so 100/100 remains reachable with AI Readiness at zero)."
}
],
"metrics_version": "2.1.0"
},
"warnings": [
"Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token",
"GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository"
],
"report_type": "repository",
"generated_at": "2026-07-25T18:05:30.939469Z",
"schema_version": "0.27.0",
"badge_url": "https://raw.githubusercontent.com/inspect-software/badges/main/v1/i/isr4el-silv4/pi-web-ui.svg",
"full_name": "isr4el-silv4/pi-web-ui",
"license_state": "custom",
"license_spdx": null
}