公开记录
软件健康报告模式 0.26.0 · 指标 1.13.0 · 2026-07-22 07:24 UTC

open-cli-collective / cpm

Claude plugin manager that helps you view & install Claude plugins on a per-project basis, with a better UX than Claude Code.

GoMIT★ 2 星标⑂ 0 复刻始于 2026年1月在 GitHub 上查看 ↗

open-cli-collective/cpm 的健康指数为 100 分中的 58 分,处于「中等」区间。 其得分最高的类别是AI Readiness(86/100),最低的是Community & Adoption(33/100)。 最近一次更新在 4 天前。 近期的大部分工作由 1 位贡献者完成。

58
总分 / 100
中等

软件健康指数

指标归入加权类别,统一采用 1–100 量表。总体分先取类别加权平均;当公开证据触发高风险司法辖区政策时,评级会按政策调整,并设置 49(有风险)的上限。AI 就绪度不计入总体分。

58
优秀85-100堪称典范;基本满足所有检验标准
良好70-84健康;仅有轻微不足
中等50-69可接受,但存在明显不足;建议进行审查
存在风险30-49存在重大薄弱环节;采用时应保持审慎
危急1-29问题严重(项目被弃置、仅有单一维护者、缺乏基本工程规范)
活力社区与采用可持续性与治理工程质量安全AI 就绪度

评分画像

每条轴代表一个类别。形状比平均值更重要——健康的对象会填满整个图形,而“一峰一谷”式画像意味着某一维度的优势正掩盖另一维度的风险。

所有权

15 关注者22 个公开仓库始于 2026年1月

该仓库由组织支持——共同承担、可问责的托管责任,可延续于任何单一维护者之后。

软件包生态系统

注册表软件包版本月下载量版本数最近发布
Gogithub.com/open-cli-collective/cpmv0.3.3-174 天前

按类别列示的指标

活力

项目是否仍有生命——是否仍在编写代码,是否仍在发布版本?

72良好 · 占总体的 22%
评分方式
36/36推送新近度 — 最近一次推送于 4 天前
5.5/36提交节奏 — 52 周中有 8 周有提交
17.7/18提交量 — 最近一年 92 次提交
1/10OpenSSF Scorecard:Maintained — 2 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 1
所用输入
commits_last_year92
human_commit_share1
days_since_last_push4
active_weeks_last_year8

发布纪律

90优秀
评分方式
27/27有发布版本 — 已发布 16 个发布版本
36/36发布时效 — 最近一次发布版本于 4 天前
27/27发布节奏 — 约每 17.6 天发布一次
0/10OpenSSF Scorecard:Signed-Releases — Project has not signed or included provenance with any releases.
所用输入
releases_count16
latest_release_tagv0.3.3
releases_from_tags
days_since_latest_release4
mean_days_between_releases17.6

社区与采用

项目是否拥有用户、下载量与关注度,并具备欢迎贡献者参与的配置?

33存在风险 · 占总体的 18%
评分方式
0/60星标 — 2 个星标
0/25复刻 — 0 个复刻
0/15关注者 — 0 位关注者
所用输入
forks0
stars2
watchers0
growth_stateunverified
growth_factor_pct100
growth_unverified_reasonbelow_threshold

社区健康

70良好
评分方式
22.5/22.5README
22.5/22.5许可证 — 可识别的许可证(MIT)
18/18CONTRIBUTING 指南
0/13.5行为准则
0/7.2议题模板
0/6.3PR 模板
所用输入
has_readme
has_license
has_contributing
has_issue_template
has_code_of_conduct
has_pull_request_template

可持续性与治理

项目能否在其成员之外延续——巴士系数、响应能力、由谁支持,以及软件包的维护状况?

61中等 · 占总体的 24%
评分方式
9/54巴士系数 — 1 位贡献者贡献了半数提交
2.9/22.5提交分布 — 头号贡献者编写了 87% 的提交
2.7/13.5贡献者广度 — 2 位贡献者
6/10OpenSSF Scorecard:Contributors — project has 2 contributing companies or organizations -- score normalized to 6
所用输入
bus_factor1
contributors_sampled2
top_contributor_share0.87
评分方式
46.8/46.8议题解决 — 100% 的议题已关闭
35.3/38.3PR 接受 — 已裁定的 PR 中 24/26 已合并
4.5/15OpenSSF Scorecard:Code-Review — Found 11/30 approved changesets -- score normalized to 3
所用输入
merged_prs24
open_issues0
closed_issues15
issue_closed_ratio1
closed_unmerged_prs2
评分方式
30/30所有权背书 — 组织持有
0/20已验证域名
8.7/25所有者影响力 — open-cli-collective 有 15 位关注者
10.9/25既往记录 — 22 个公开仓库,账户约 0 年
所用输入
followers15
owner_typeOrganization
is_verified
owner_loginopen-cli-collective
public_repos22
account_age_days186
评分方式
25/25已发布且可解析 — go 上有 1 个软件包
35/35发布时效 — 最近一次发布于 4 天前
20/20版本历史 — 17 个已发布版本
20/20未被弃用 — 活跃,未被弃用或撤回
所用输入
packagesgithub.com/open-cli-collective/cpm
ecosystemsgo
any_deprecated
min_days_since_publish4

工程质量

基础的工程与文档实践是否到位?

76良好 · 占总体的 20%

工程实践

84良好
评分方式
24/24CI 工作流 — 4 个工作流
24/24存在测试
16/16Linter 配置 — .golangci.yml
0/9.6Pre-commit 钩子
0/6.4.editorconfig
20/20OpenSSF Scorecard:CI-Tests — 24 out of 24 merged PRs checked by a CI test -- score normalized to 10
所用输入
has_ci
has_tests
has_editorconfig
has_linter_config
has_precommit_config

文档

65中等
评分方式
30/30README
25/25文档目录
0/15文档 / 主页站点
10/10仓库描述
0/10主题标签
0/10Wiki
所用输入
topics
has_wiki
homepage
has_readme
has_docs_dir
has_description

安全

可见的安全与供应链实践是否稳固,且不存在未解决的高风险司法辖区暴露?

41存在风险 · 占总体的 16%

安全态势

41存在风险
评分方式
7.5/7.5Binary-Artifacts — no binaries found in the repo
0/7.5Branch-Protection — 无数据
2.5/2.5CI-Tests — 24 out of 24 merged PRs checked by a CI test -- score normalized to 10
0/2.5CII-Best-Practices — no effort to earn an OpenSSF best practices badge detected
2.2/7.5Code-Review — Found 11/30 approved changesets -- score normalized to 3
1.5/2.5Contributors — project has 2 contributing companies or organizations -- score normalized to 6
10/10Dangerous-Workflow — no dangerous workflow patterns detected
7.5/7.5Dependency-Update-Tool — update tool detected
0/5Fuzzing — project is not fuzzed
2.5/2.5许可证 — license file detected
0.8/7.5Maintained — 2 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 1
5/5Packaging — packaging workflow detected
0/5Pinned-Dependencies — dependency not pinned by hash detected -- score normalized to 0
0/5SAST — SAST tool is not run on all commits -- score normalized to 0
0/5Security-Policy — security policy file not detected
0/7.5Signed-Releases — Project has not signed or included provenance with any releases.
0/7.5Token-Permissions — detected GitHub workflow tokens with excessive permissions
0/7.5Vulnerabilities — 15 existing vulnerabilities detected
所用输入
sourceopenssf_scorecard
checks_evaluated17
scorecard_versionv5.5.0
checks_inconclusive1
scorecard_aggregate4.1
已排除计分(无数据或不适用):branch_protection。 其余权重已重新归一化。

AI 就绪度

该仓库在多大程度上具备与 AI 编码代理协同开发与维护的条件?这是一枚独立的实验性徽章——权重为 0.0,因此单独呈现,不影响总体健康评分。

86优秀 · 占总体的 0%
评分方式
45/45代理指令 — CLAUDE.md, internal/claude/CLAUDE.md, internal/tui/CLAUDE.md
0/15机器可读文档(llms.txt)
40/40可读的提交历史 — 92 次人类提交中有 92 次说明了意图(结构化标题或解释性正文)
所用输入
has_llms_txt
legible_history_share1
agent_instruction_filesCLAUDE.md, internal/claude/CLAUDE.md, internal/tui/CLAUDE.md
agent_instruction_max_bytes4,040
评分方式
18/18一条命令的引导启动 — Makefile, mise.toml
22/22自动化测试
11/11Lint / 格式化配置 — .golangci.yml
11/11静态类型检查 — Go(静态类型)
10/10可复现环境 — lockfile
10/10已体现的代理实践 — 最近 92 次提交中有 46 次由代理编写或署名代理
0/8自动化维护 — 未观察到自动依赖更新
0/10OpenSSF Scorecard:Pinned-Dependencies — dependency not pinned by hash detected -- score normalized to 0
所用输入
has_nix
has_tests
lockfilesgo.sum
has_dockerfile
typed_language
bootstrap_filesMakefile, mise.toml
has_devcontainer
has_linter_config
typecheck_configs
agent_commit_share0.5
toolchain_manifestsgo.mod
dependency_bot_commit_share0
评分方式
45/45可类型检查的代码 — Go(静态类型)
51.8/55可控的文件大小 — 采样的 17 个源文件中有 1 个超过 60KB
所用输入
primary_languageGo
largest_source_bytes98,178
source_files_sampled17
oversized_source_files1

关键数据

2GitHub 星标
2贡献者
92最近 12 个月提交数
4距最近推送天数
16发布版本数
1巴士系数(bus factor)
0开放议题
Go软件包生态系统数

数据采集警告

  • GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository

更多细节

Star 与 Fork 历史 2 ★ / 0 ⇿
2Star
14发布

每颗 star 和每个 fork 的添加时间,来自 GitHub 并按天汇总。累计增长位于其构成来源——每日新增——的正上方,二者可相互对照:稳定的自然增长与短暂的突增形态截然不同。当这一差别可被衡量时,它会作为增长真实性予以报告。

111222212026-012026-022026-03
主版本 0次版本 1修订 13
OpenSSF Scorecard 4.1 / 10
4.1综合

来自开源项目 OpenSSF Scorecard 的独立、工具无关的安全评估。每项检查奖励的是安全实践本身,而非特定供应商的工具。Scorecard 无法判定的检查项标记为 不适用,并从安全评分中剔除(绝不按零分计)。Scorecard v5.5.0 · 2026-07-22 07:23 UTC

10Binary-Artifactsno binaries found in the repo
不适用Branch-Protectioninternal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md
10CI-Tests24 out of 24 merged PRs checked by a CI test -- score normalized to 10
0CII-Best-Practicesno effort to earn an OpenSSF best practices badge detected
3Code-ReviewFound 11/30 approved changesets -- score normalized to 3
6Contributorsproject has 2 contributing companies or organizations -- score normalized to 6
10Dangerous-Workflowno dangerous workflow patterns detected
10Dependency-Update-Toolupdate tool detected
0Fuzzingproject is not fuzzed
10Licenselicense file detected
1Maintained2 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 1
10Packagingpackaging workflow detected
0Pinned-Dependenciesdependency not pinned by hash detected -- score normalized to 0
0SASTSAST tool is not run on all commits -- score normalized to 0
0Security-Policysecurity policy file not detected
0Signed-ReleasesProject has not signed or included provenance with any releases.
0Token-Permissionsdetected GitHub workflow tokens with excessive permissions
0Vulnerabilities15 existing vulnerabilities detected
直接依赖 4
注册表软件包版本约束清单文件
Gogithub.com/charmbracelet/bubbleteav1.3.10go.mod
Gogithub.com/charmbracelet/glamourv0.10.0go.mod
Gogithub.com/charmbracelet/lipglossv1.1.1-0.20250404203927-76690c660834go.mod
Gogithub.com/sahilm/fuzzyv0.1.1go.mod
全部依赖 未采集

本报告未能采集到解析后的依赖集合:GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository

原始 JSON 报告 机器可读
{
  "data": {
    "repo": {
      "topics": [],
      "is_fork": false,
      "size_kb": 250,
      "has_wiki": false,
      "homepage": null,
      "languages": {
        "Go": 259955,
        "Makefile": 213,
        "PowerShell": 701
      },
      "pushed_at": "2026-07-17T13:26:28Z",
      "created_at": "2026-01-23T01:40:28Z",
      "owner_type": "Organization",
      "updated_at": "2026-07-17T13:27:18Z",
      "description": "Claude plugin manager that helps you view & install Claude plugins on a per-project basis, with a better UX than Claude Code.",
      "is_archived": false,
      "is_disabled": false,
      "license_spdx": "MIT",
      "default_branch": "main",
      "license_spdx_raw": "MIT",
      "primary_language": "Go",
      "significant_languages": [
        "Go"
      ]
    },
    "owner": {
      "blog": null,
      "name": null,
      "type": "Organization",
      "login": "open-cli-collective",
      "company": null,
      "location": null,
      "followers": 15,
      "avatar_url": "https://avatars.githubusercontent.com/u/255329478?v=4",
      "created_at": "2026-01-16T10:39:27Z",
      "is_verified": null,
      "public_repos": 22,
      "account_age_days": 186
    },
    "license": {
      "state": "standard",
      "spdx_id": "MIT",
      "raw_spdx": "MIT",
      "file_present": true,
      "scorecard_found": true,
      "profile_has_license": true
    },
    "activity": {
      "releases": [
        {
          "tag": "v0.3.3",
          "kind": "patch",
          "published_at": "2026-07-17T13:28:07Z"
        },
        {
          "tag": "v0.3.2",
          "kind": "patch",
          "published_at": "2026-03-17T02:10:13Z"
        },
        {
          "tag": "v0.3.0",
          "kind": "minor",
          "published_at": "2026-03-07T14:01:06Z"
        },
        {
          "tag": "v0.2.19",
          "kind": "patch",
          "published_at": "2026-02-27T18:54:23Z"
        },
        {
          "tag": "v0.2.15",
          "kind": "patch",
          "published_at": "2026-02-15T01:34:26Z"
        },
        {
          "tag": "v0.2.14",
          "kind": "patch",
          "published_at": "2026-02-09T13:27:42Z"
        },
        {
          "tag": "v0.2.13",
          "kind": "patch",
          "published_at": "2026-02-09T04:08:49Z"
        },
        {
          "tag": "v0.2.12",
          "kind": "patch",
          "published_at": "2026-02-09T04:03:46Z"
        },
        {
          "tag": "v0.2.11",
          "kind": "patch",
          "published_at": "2026-02-09T03:57:26Z"
        },
        {
          "tag": "v0.2.10",
          "kind": "patch",
          "published_at": "2026-02-09T02:31:01Z"
        },
        {
          "tag": "v0.2.9",
          "kind": "patch",
          "published_at": "2026-02-09T02:30:34Z"
        },
        {
          "tag": "v0.2.8",
          "kind": "patch",
          "published_at": "2026-02-09T02:10:48Z"
        },
        {
          "tag": "v0.2.7",
          "kind": "patch",
          "published_at": "2026-02-09T02:04:17Z"
        },
        {
          "tag": "v0.2.5",
          "kind": "patch",
          "published_at": "2026-02-08T18:37:03Z"
        },
        {
          "tag": "v0.2.4",
          "kind": "patch",
          "published_at": "2026-01-29T21:12:07Z"
        },
        {
          "tag": "v0.2.1",
          "kind": "patch",
          "published_at": "2026-01-24T17:11:31Z"
        }
      ],
      "recent_commits": [
        {
          "oid": "d8703505f23ab81bb3d17f5bb4ee2adb87395415",
          "body": "## What\n\nAdds the canonical `.codereview/agents/` baseline (the same 8-agent set\ncarried by the rest of the CLI family — `automation, documentation, go,\nmacos, policies, rust, structure, tauri`), copied from `cli-common`.\n\n## Why\n\n`cr` sources trusted review guidance from `.codereview/agents/` on th\n[…]\nwould fail\nclosed the same way. It therefore needs a bootstrap merge (owner/admin)\n— after it lands, every subsequent `cpm` PR gets a real review. Reviewer\nintentionally not requested for that reason.",
          "is_bot": false,
          "headline": "chore(codereview): add repo review guidance baseline (#41)",
          "author_name": "piekstra",
          "author_login": "piekstra",
          "committed_at": "2026-07-17T13:26:22Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "ffb0f55821effd564469e03c86362c72204e8ef2",
          "body": "Closes #39\n\n## Summary\n\n**Root cause:** The \"select scope\" dialog (Shift-S) only acted on the\nfocused/cursor plugin, ignoring the rest of a multi-selection.\n`openScopeDialogForSelected` called `getSelectedPlugin()` (singular),\nand `scopeDialogState` carried a single `pluginID`. When the dialog was\nc\n[…]\nso the\ndocumented `mise run ...` tasks were executed via their underlying\ncommands (`go test -race`, `golangci-lint run`, `gofumpt` via `go run`,\n`go build`), which is exactly what those tasks invoke.",
          "is_bot": false,
          "headline": "fix(tui): apply scope dialog to all selected plugins (#40)",
          "author_name": "piekstra",
          "author_login": "piekstra",
          "committed_at": "2026-07-17T13:26:17Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "1247d45b2843616c58c8bff78e6dd46d602e0d84",
          "body": "…ion (#38)\n\n## Summary\n- The claude CLI (Node.js) truncates stdout at 64KB when writing to an\nOS pipe\n- With enough installed plugins, `claude plugin list --json --available`\nexceeds this limit, causing `unexpected end of JSON input` on startup\n- Fix: write CLI stdout to a temp file instead of a pipe buffer, which\nhas no size limit\n\n🤖 Generated with [Claude Code](https://claude.com/claude-code)\n\nCo-authored-by: Claude Opus 4.6 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix(claude): use temp file for plugin list to avoid 64KB pipe truncat…",
          "author_name": "Bojan Rajkovic",
          "author_login": "bojanrajkovic",
          "committed_at": "2026-03-17T02:08:37Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "4f6e464e0c45fc8f4e8db07c52736fa3d1bb1f67",
          "body": "## Summary\n\n- Replace `sort.Slice`/`sort.Strings` with\n`slices.SortFunc`/`slices.Sort` (type-safe generics)\n- Replace hand-rolled `copyMap` helper with `maps.Clone`\n- Use `slices.Sorted(maps.Keys(...))` for key collection instead of\nmanual loops\n- Use `min`/`max` builtins instead of manual if-clampi\n[…]\n `HasSuffix` + `TrimSuffix` pair\n\nNet result: -41 lines, no behavioral changes.\n\n🤖 Generated with [Claude Code](https://claude.com/claude-code)\n\nCo-authored-by: Claude Opus 4.6 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "chore: modernize Go code with stdlib improvements (#37)",
          "author_name": "Bojan Rajkovic",
          "author_login": "bojanrajkovic",
          "committed_at": "2026-03-07T14:30:20Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "35c38e2a2edd46a96398e4ac6016e8096aded575",
          "body": "…stall (#36)\n\n## Summary\n\n- Automatically reconcile `extraKnownMarketplaces` in project/local\nsettings files after plugin install/uninstall operations, so team\nmembers who clone the repo get prompted to install missing marketplaces\n- Add polymorphic `MarketplaceSource` types (7 concrete source types\n[…]\netplace source data from\n`~/.claude/plugins/known_marketplaces.json`\n\n🤖 Generated with [Claude Code](https://claude.com/claude-code)\n\n---------\n\nCo-authored-by: Claude Opus 4.6 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat(claude): auto-sync extraKnownMarketplaces on plugin install/unin…",
          "author_name": "Bojan Rajkovic",
          "author_login": "bojanrajkovic",
          "committed_at": "2026-03-07T13:59:31Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "950a6c186b52e1e40711255e0d8d772e437989fd",
          "body": "## Summary\n\n- Add GoReleaser snapshot `version_template` for PR builds (produces\nversions like `0.2.5-pr.42+abc1234`)\n- Rewrite `pr-artifacts.yml` with consolidated lint → test → GoReleaser\nsnapshot pipeline, per-platform artifact uploads (linux/amd64,\nlinux/arm64, macOS universal, windows/amd64, ch\n[…]\ni.yml` to push-only since PR CI is now handled by\n`pr-artifacts.yml`\n\n🤖 Generated with [Claude Code](https://claude.com/claude-code)\n\n---------\n\nCo-authored-by: Claude Opus 4.6 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "ci: replace PR artifacts with GoReleaser snapshot builds (#35)",
          "author_name": "Bojan Rajkovic",
          "author_login": "bojanrajkovic",
          "committed_at": "2026-02-27T21:15:05Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "6adc813d312eadef2e3fa8ecedf21e3efb8a6297",
          "body": "## Summary\n\n- The CLI returns all installed plugins globally but hides them from the\n`available` array if they're installed anywhere — so plugins installed\nin other projects became invisible\n- `processAvailablePlugin` unconditionally merged installed data from\nall projects, making available plugins \n[…]\n or only available** → shown without install\nstate (available for installation)\n\n🤖 Generated with [Claude Code](https://claude.com/claude-code)\n\nCo-authored-by: Claude Opus 4.6 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix(tui): show all plugins with correct per-project install state (#34)",
          "author_name": "Bojan Rajkovic",
          "author_login": "bojanrajkovic",
          "committed_at": "2026-02-27T18:52:50Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "5587597cf956d3e4ae5460c2c3752b5316cf91ac",
          "body": "… (#33)\n\n## Summary\n\n- Add GoReleaser `universal_binaries` section with `replace: true` to\ncombine darwin/amd64 and darwin/arm64 into a single Mach-O universal\nbinary\n- One macOS download works on both Intel and Apple Silicon\n- Archive named `cpm_<version>_darwin_universal.tar.gz` instead of\nseparat\n[…]\nk auto-generates a single `on_macos` block instead of\nsplit `on_intel`/`on_arm`\n\n🤖 Generated with [Claude Code](https://claude.com/claude-code)\n\nCo-authored-by: Claude Opus 4.6 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "build: produce universal macOS binary instead of separate arch builds…",
          "author_name": "Bojan Rajkovic",
          "author_login": "bojanrajkovic",
          "committed_at": "2026-02-15T14:08:16Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "ae0cd1fcf33b6755795a9ab60c24391394c8bd8f",
          "body": "## Summary\n\n- Upgrade golangci-lint from 1.64.5 to 2.9.0 and gofumpt from 0.7.0 to\n0.9.2\n- Migrate `.golangci.yml` to v2 config format (formatters section,\n`linters.exclusions.rules`, `gosimple` merged into `staticcheck`)\n- Replace all `os.ReadFile` calls with `os.OpenRoot` + `fs.FS` to\neliminate go\n[…]\n usage\n- Add 14 new tests using `fstest.MapFS` for in-memory filesystem testing\n\n🤖 Generated with [Claude Code](https://claude.com/claude-code)\n\nCo-authored-by: Claude Opus 4.6 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "chore: upgrade linters to v2, use os.OpenRoot for safe file access (#32)",
          "author_name": "Bojan Rajkovic",
          "author_login": "bojanrajkovic",
          "committed_at": "2026-02-15T13:45:46Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "8b7de19a6df860553f020ea26e62027dafa6f757",
          "body": null,
          "is_bot": false,
          "headline": "chore: bump claude code to 2.1.42",
          "author_name": "Bojan Rajkovic",
          "author_login": "bojanrajkovic",
          "committed_at": "2026-02-15T13:18:35Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "5ed219dd966c8f4d07d1c99554a07d7dd8ec8b01",
          "body": "## Summary\n\n- Fix `InstallPlugin`/`UninstallPlugin` to use correct CLI commands\n(`install`/`uninstall` instead of `enable`/`disable`)\n- Add `GetAllEnabledPlugins()` to read all three settings files (user,\nproject, local) for authoritative multi-scope detection\n- Migrate `PluginState` and `Operation`\n[…]\ns `enable` and `uninstall` vs\n`disable` based on settings file state\n\n🤖 Generated with [Claude Code](https://claude.com/claude-code)\n\n---------\n\nCo-authored-by: Claude Opus 4.6 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat: plugin scope management with multi-scope support (#31)",
          "author_name": "Bojan Rajkovic",
          "author_login": "bojanrajkovic",
          "committed_at": "2026-02-15T01:32:51Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "f66fd024440ba5f7124eb4fddf875d8ca2cd38cc",
          "body": "## [#2]\n\nAdd the ability to see and apply plugin updates from the TUI.\n\n### Changes\n\n- **Track update availability**: Added `AvailableVersion` and\n`HasUpdate` fields to `PluginState` to detect when newer versions are\navailable\n- **'U' key binding**: Press `U` (shift+u) to mark an installed plugin\nwi\n[…]\nstage the update\n4. Press Enter to apply, or Esc to cancel\n\nCloses #2\n\n---------\n\nCo-authored-by: Bojan Rajkovic <brajkovic@coderinserepeat.com>\nCo-authored-by: Claude Opus 4.6 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat(tui): show and apply plugin updates with U key (#27)",
          "author_name": "piekstra",
          "author_login": "piekstra",
          "committed_at": "2026-02-09T13:26:01Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "aceef60ee1a13e8a79ccb30629c7f516fad792c8",
          "body": "## Summary\n- Add bulk selection mode for batch install/uninstall operations\n- Space toggles selection on current plugin\n- `a` selects all plugins, `A` (shift+a) deselects all\n- Selection shown with `[x]`/`[ ]` checkbox beside each plugin\n- Help bar shows count when plugins are selected\n- `l`/`p`/`u` operations apply to all selected plugins\n\nCloses #3",
          "is_bot": false,
          "headline": "feat(tui): add bulk selection for batch operations (#24)",
          "author_name": "piekstra",
          "author_login": "piekstra",
          "committed_at": "2026-02-09T04:07:14Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "454082b49e4d213d327b0150337ab552caa16744",
          "body": "## Summary\n- Add config viewer mode to inspect plugin configuration files\n- Press `c` to open viewer for selected plugin\n- Displays plugin.json manifest, hooks.json, .mcp.json, and MCP server\nconfigs\n- Scrollable view with keyboard (↑↓/PgUp/PgDn) and mouse wheel support\n- Press `c` or Esc to close viewer and return to main view\n\nCloses #8",
          "is_bot": false,
          "headline": "feat(tui): add plugin config viewer (#25)",
          "author_name": "piekstra",
          "author_login": "piekstra",
          "committed_at": "2026-02-09T04:02:10Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "00ab04decaa833f6eb3bfcaf11667ff08cefb52a",
          "body": "## [12]\n\nAdd document viewer mode for viewing README.md and CHANGELOG.md files\nfrom installed plugins.\n\nAlso resolves #5 (README viewer) since both features share the same\nimplementation.\n\n## Summary\n\n- Add `?` key binding to view plugin README\n- Add `C` key binding to view plugin CHANGELOG\n- Scroll\n[…]\nEADME\n- [ ] Verify README renders with markdown formatting\n- [ ] Press `C` to view CHANGELOG (if plugin has one)\n- [ ] Test scrolling with various key bindings\n- [ ] Press `Esc` or `q` to close viewer",
          "is_bot": false,
          "headline": "feat(tui): add README and CHANGELOG viewers (#23)",
          "author_name": "piekstra",
          "author_login": "piekstra",
          "committed_at": "2026-02-09T03:55:51Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "09083d97769b158bcb4d102632e2a2082c708a2d",
          "body": "## Summary\n\n- Replace substring matching with fuzzy matching using `sahilm/fuzzy`\nlibrary\n- Results sorted by match score (best matches first)\n- Matches against plugin name, description, and ID combined\n\n## Changes\n\n**update.go**:\n- Add `pluginSearchData` type implementing `fuzzy.Source` interface\n-\n[…]\n1.1` dependency\n\n## Example\n\nQuery: `clpm`  \nMatches: `claude-plugin-manager` (high score due to matching c-l-p-m\npattern)\n\nQuery: `cfg`  \nMatches plugins with \"config\" in name/description\n\nCloses #10",
          "is_bot": false,
          "headline": "feat(tui): add fuzzy search for plugin filter (#19)",
          "author_name": "piekstra",
          "author_login": "piekstra",
          "committed_at": "2026-02-09T02:29:50Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "2ace8f731e73e69a80d257882d9503d4b3ca3da7",
          "body": "## [11]\n\nDisplay plugin statistics from the marketplace in the details pane.\n\n## Summary\n\n- Show install count in details pane (formatted with K/M suffixes for\nlarge numbers)\n- Show last updated date for installed plugins (formatted as\nhuman-readable dates)\n- Data comes from existing CLI output\n\n## \n[…]\nwith install count data\n- [ ] Verify install count displays correctly\n- [ ] Select an installed plugin and verify last updated date shows\n- [ ] Verify formatting looks correct for various count values",
          "is_bot": false,
          "headline": "feat(tui): show plugin stats in details pane (#22)",
          "author_name": "piekstra",
          "author_login": "piekstra",
          "committed_at": "2026-02-09T02:29:27Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "053f7cb3f7420224217025031b0e7ed58ffd6e7d",
          "body": "## Summary\n- Add sorting options accessible via `s` key\n- Four sort modes: Name A-Z, Name Z-A, Scope, Marketplace\n- Help bar shows current sort mode\n- Selection preserved when changing sort modes\n- Plugins grouped appropriately for each sort mode\n\nCloses #4",
          "is_bot": false,
          "headline": "feat(tui): add sorting options for plugin list (#26)",
          "author_name": "piekstra",
          "author_login": "piekstra",
          "committed_at": "2026-02-09T02:09:41Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "13b01dd119a10d93ff0d061ae18ebc4f804520e6",
          "body": "## [#6]\n\nAdds ability to move installed plugins between scopes (user, project,\nlocal) without manual uninstall/reinstall.\n\n### Changes\n\n- **New operation type**: Added `OpMigrate` to represent moving a plugin\nfrom one scope to another\n- **Automatic migration detection**: When pressing `l` or `p` on \n[…]\n scope like `[USER]`)\n2. Press `l` to move to local scope or `p` to move to project scope\n3. Plugin now shows transition indicator `[USER → LOCAL]`\n4. Press Enter to apply, or Esc to cancel\n\nCloses #6",
          "is_bot": false,
          "headline": "feat(tui): add scope migration for installed plugins (#28)",
          "author_name": "piekstra",
          "author_login": "piekstra",
          "committed_at": "2026-02-09T02:03:03Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "94be243409e0bdfe48ec3beb7b69b15b5f1d081b",
          "body": "## [#14]\n\nExtract mode-specific state from the flat `Model` struct into dedicated\nsub-types for better organization and clarity.\n\n### Changes\n\n**New sub-model types:**\n- `MainState`: Holds state for the main two-pane view (pendingOps,\nshowConfirm, showQuitConfirm, mouseEnabled)\n- `FilterState`: Hold\n[…]\ns` → `m.main.pendingOps`\n- `m.filterActive` → `m.filter.active`\n- `m.operations` → `m.progress.operations`\n- etc.\n\nCloses #14\n\n---------\n\nCo-authored-by: Bojan Rajkovic <brajkovic@coderinserepeat.com>",
          "is_bot": false,
          "headline": "refactor(tui): extract mode-specific state into sub-models (#29)",
          "author_name": "piekstra",
          "author_login": "piekstra",
          "committed_at": "2026-02-08T18:53:07Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "33ba2a9f0a91d9b4f0a4562f46c0dd4bc5482f74",
          "body": "…(#30)\n\n## Summary\n- Fixes a panic (`index out of range [0] with length 0`) when executing\nplugin operations (e.g., installing to project scope)\n- `operationErrors` was set to `nil` in `startExecution()` instead of\nbeing allocated, so recording an error result crashed\n- Changed to `make([]string, len(m.operations))` to properly size the\nslice\n\n🤖 Generated with [Claude Code](https://claude.com/claude-code)\n\nCo-authored-by: Claude Opus 4.6 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix(tui): allocate operationErrors slice before executing operations …",
          "author_name": "Bojan Rajkovic",
          "author_login": "bojanrajkovic",
          "committed_at": "2026-02-08T18:35:55Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "18cbecf24be7f1445469d49ad74465f44198dc5c",
          "body": "## Summary\n\n- Add `Theme` type with auto-detection using\n`lipgloss.HasDarkBackground()`\n- Add `--theme` / `-t` flag for manual override (`auto`, `light`,\n`dark`)\n- Create light theme color palette optimized for light terminal\nbackgrounds\n\n## Changes\n\n**styles.go**:\n- Add `Theme` enum: `ThemeAuto`, `\n[…]\n488 |\n| User scope | #E71D36 | #BE123C |\n\n## Testing\n\n```bash\ncpm --theme light   # Force light theme\ncpm --theme dark    # Force dark theme\ncpm                 # Auto-detect (default)\n```\n\nCloses #17",
          "is_bot": false,
          "headline": "feat(tui): add light theme support (#18)",
          "author_name": "piekstra",
          "author_login": "piekstra",
          "committed_at": "2026-01-29T21:10:55Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "5d3e1813c1e4cd8ef60ac76491b894ccdf972c53",
          "body": "## Summary\n\n- Update `homepage` URL from `claude-plugin-manager` to `cpm`\n- Update `release.github.name` from `claude-plugin-manager` to `cpm`\n\n🤖 Generated with [Claude Code](https://claude.com/claude-code)\n\nCo-authored-by: Claude Opus 4.5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix: update goreleaser config for renamed repository (#16)",
          "author_name": "Bojan Rajkovic",
          "author_login": "bojanrajkovic",
          "committed_at": "2026-01-27T03:16:12Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "79fa1f329bd9f5ec1937fa6a3cd566eec83eea7f",
          "body": "…h (#15)\n\n## Summary\n\n- Fix plugin detection to use project settings files\n(`.claude/settings.json`, `.claude/settings.local.json`) as the source\nof truth for which plugins are enabled\n- The CLI's `projectPath` field was unreliable - it shows where a plugin\nwas originally installed, not where it's c\n[…]\nenable`/`disable`\ncommands (semantically correct for project-scoped operations)\n\n🤖 Generated with [Claude Code](https://claude.com/claude-code)\n\nCo-authored-by: Claude Opus 4.5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix: detect project plugins from settings files instead of projectPat…",
          "author_name": "Bojan Rajkovic",
          "author_login": "bojanrajkovic",
          "committed_at": "2026-01-27T03:11:20Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "b12c994ba7b5b98042ae0861d815d653291ad80d",
          "body": "Replace GITHUB_RUN_NUMBER with a count of commits since version.txt was\nlast modified. This makes version numbers more meaningful and predictable:\n- v0.2.0 immediately after bumping version.txt to 0.2\n- v0.2.3 after 3 commits since the version bump\n- Versions are deterministic and don't depend on CI run history\n\nThe patch number now directly reflects how many changes have been made\nsince the last minor/major version bump.",
          "is_bot": false,
          "headline": "ci: use commit count since version.txt change instead of run number",
          "author_name": "Bojan Rajkovic",
          "author_login": "bojanrajkovic",
          "committed_at": "2026-01-24T17:20:04Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "67d686ffca596b3a6c41c5bc8e57a6cbb633cc23",
          "body": "## Summary\n\nAdds ability to toggle plugins between enabled and disabled states using\nthe 'e' key, completing the full plugin lifecycle management in the TUI.\n\n- Press 'e' on an installed plugin to queue enable/disable operation\n- Visual indicators show pending enable/disable state\n- Operations execu\n[…]\n/tui/CLAUDE.md` with Operation types, guarantees, and\ngotchas\n- Architecture diagrams reflect new types and relationships\n\nCloses #1\n\n---------\n\nCo-authored-by: Claude Opus 4.5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat: add plugin enable/disable toggle with 'e' key (#13)",
          "author_name": "Bojan Rajkovic",
          "author_login": "bojanrajkovic",
          "committed_at": "2026-01-24T17:10:22Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "f9d5ddde589bc9a28c28f92049a2d12b2706d0f9",
          "body": null,
          "is_bot": false,
          "headline": "build(deps): install claude code through mise too",
          "author_name": "Bojan Rajkovic",
          "author_login": "bojanrajkovic",
          "committed_at": "2026-01-24T15:17:02Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "915296a82b99aaac7ce6f9b10501408f6a722982",
          "body": "Remove implementation plan files from tracking and add\ndocs/implementation-plans/ to .gitignore to prevent future tracking.\n\nCo-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "chore: remove implementation plans and ignore them",
          "author_name": "Bojan Rajkovic",
          "author_login": "bojanrajkovic",
          "committed_at": "2026-01-24T15:16:50Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "c08fb5b1b93b8d8352d39f198baed09697da6068",
          "body": "Replace release-please with simpler auto-release pattern:\n- Add version.txt for base version (0.1)\n- Add auto-release.yml: triggers on feat/fix commits to main\n- Add release.yml: runs GoReleaser on tag push\n- Update .goreleaser.yml: add homebrew_casks, Branch ldflags\n- Update pr-artifacts.yml: add B\n[…]\nfix commit to main.\nVersion format: v{base}.{run_number} (e.g., v0.1.42)\n\nRequires TAP_GITHUB_TOKEN secret for tag pushes to trigger workflows.\n\nCo-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "ci: switch to auto-release workflow pattern",
          "author_name": "Bojan Rajkovic",
          "author_login": "bojanrajkovic",
          "committed_at": "2026-01-23T02:32:57Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "d33c20e5d6fc708a0c972af0b348048d4ae42367",
          "body": "Simplify matchesKey function by using slices.Contains instead of\nmanual loop iteration.\n\nCo-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "refactor(tui): use slices.Contains for key matching",
          "author_name": "Bojan Rajkovic",
          "author_login": "bojanrajkovic",
          "committed_at": "2026-01-23T02:16:42Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "2495dc702af32550ffe60d5805af5bcb09f97086",
          "body": "- Create docs/architecture.md with package overview, type definitions,\n  data flow, and UI state diagrams using Mermaid\n- Update CLAUDE.md with link to architecture doc and maintenance instructions\n\nCo-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "docs: add architecture documentation with Mermaid diagrams",
          "author_name": "Bojan Rajkovic",
          "author_login": "bojanrajkovic",
          "committed_at": "2026-01-23T02:16:12Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "b17ca9698364e1eed24206cea636ff80608e89ec",
          "body": null,
          "is_bot": false,
          "headline": "chore(claude): add gopls lsp for claude to use",
          "author_name": "Bojan Rajkovic",
          "author_login": "bojanrajkovic",
          "committed_at": "2026-01-23T02:10:31Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "5b6bff79fc808ca8fb286492d717c4cec7661d81",
          "body": "Cache ~/go/pkg/mod and ~/.cache/go-build to speed up\nsubsequent CI runs. Cache key is based on go.sum hash.\n\nCo-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "ci: add Go module caching",
          "author_name": "Bojan Rajkovic",
          "author_login": "bojanrajkovic",
          "committed_at": "2026-01-23T02:00:33Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "e1b76a5159ab2be7b9f13ff0659d662fedd6ff87",
          "body": "- Update CI workflow to use mise-action for consistent tooling\n- Add Branch field to version package for build metadata\n- Include branch in ldflags during build\n- Update tests to verify branch is included in version string\n\nThe \"verify binary\" step now shows meaningful version info:\ncpm dev (branch: main, commit: abc1234, built: 2026-01-23T01:58:01Z)\n\nCo-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat: use mise for CI and add branch to version info",
          "author_name": "Bojan Rajkovic",
          "author_login": "bojanrajkovic",
          "committed_at": "2026-01-23T01:58:20Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "ed143ed9cfe0cffceb62c157e9fcb8e01a935ed1",
          "body": "- Reorder struct fields for optimal memory alignment (fieldalignment)\n- Refactor renderDetails into smaller helper functions (gocyclo)\n\nCo-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix: resolve golangci-lint issues",
          "author_name": "Bojan Rajkovic",
          "author_login": "bojanrajkovic",
          "committed_at": "2026-01-23T01:54:26Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "abe1e9e69bce270871aef2c3103d9c6c70429a07",
          "body": "golangci-lint v1.64.5 does not support the `version` property.\nThis was causing CI failures.\n\nCo-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix: remove invalid version field from golangci-lint config",
          "author_name": "Bojan Rajkovic",
          "author_login": "bojanrajkovic",
          "committed_at": "2026-01-23T01:49:50Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "e4e91ef2b0619f903d64805d6d07455dd6453872",
          "body": "Update CLAUDE.md files to document contracts that were implemented during\nthe feature branch but not yet reflected in documentation:\n\n- internal/claude/CLAUDE.md: Add manifest reading and component scanning\n  exports (ReadPluginManifest, ScanPluginComponents, ResolveMarketplaceSourcePath,\n  PluginMa\n[…]\nnComponents)\n- internal/tui/CLAUDE.md: Update NewModel signature to include workingDir\n  parameter and document project-scoped plugin filtering\n\nCo-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "docs: update project context for brajkovic/cpm-plugin-manager",
          "author_name": "Bojan Rajkovic",
          "author_login": "bojanrajkovic",
          "committed_at": "2026-01-23T01:43:17Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "d75a7accd0029f9840e98976fd276e45e2834750",
          "body": "- Add 'm' key binding to toggle mouse capture on/off\n- When mouse is off, terminal text selection works normally for copy/paste\n- Help bar shows current mouse state (on/off)\n- Mouse is enabled by default\n\nCo-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat(tui): add mouse toggle with 'm' key",
          "author_name": "Bojan Rajkovic",
          "author_login": "bojanrajkovic",
          "committed_at": "2026-01-23T01:40:02Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "0b8870b98505de3a8db2a2fca37ece3a284c5ab0",
          "body": "- Detect URL-based plugins that are hosted externally (GitHub, etc.)\n- Add IsExternal and ExternalURL fields to PluginState\n- Show \"External plugin (hosted on GitHub)\" message with URL\n- Explain that component details are available after installation\n\nCo-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat(tui): show external plugin indicator for URL-based plugins",
          "author_name": "Bojan Rajkovic",
          "author_login": "bojanrajkovic",
          "committed_at": "2026-01-23T01:39:53Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "e4fd564c54664892e52a7ee03dc26efbb3d0b3e4",
          "body": "- Add ResolveMarketplaceSourcePath to find plugin source in marketplace cache\n- Scan marketplace plugins for skills, agents, commands, hooks, MCPs\n- Read author info from marketplace plugin manifest\n\nPlugins are available on disk at ~/.claude/plugins/marketplaces/<marketplace>/\neven before installation, so we can scan them for component information.\n\nCo-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat(tui): show components and author for uninstalled plugins",
          "author_name": "Bojan Rajkovic",
          "author_login": "bojanrajkovic",
          "committed_at": "2026-01-23T01:35:19Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "1d19eb259486a04985129b2512b14b90bba600d0",
          "body": "- Add distinct styling for component categories (Skills, Agents, etc.)\n- Render each component item on its own line with bullet points\n- Use indented layout for better readability\n\nCo-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "style(tui): improve component list visual hierarchy",
          "author_name": "Bojan Rajkovic",
          "author_login": "bojanrajkovic",
          "committed_at": "2026-01-23T01:31:10Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "79eba0dd673f26218f95e29dc56bcf707394c277",
          "body": "- Read plugin manifest from .claude-plugin/plugin.json for installed plugins\n- Scan plugin directories for components (skills, agents, commands, hooks, MCPs)\n- Display author name and email (handles both string and object formats)\n- Show \"Includes:\" section listing what each plugin provides\n\nCo-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat(tui): show plugin descriptions, components, and author info",
          "author_name": "Bojan Rajkovic",
          "author_login": "bojanrajkovic",
          "committed_at": "2026-01-23T01:30:07Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "63ac3ceda341c4b4286086632a56310a9d14b683",
          "body": "The renderList loop was double-counting listOffset when checking\nselection. The loop variable i already included listOffset since it\nstarted at m.listOffset, but getActualIndex was adding it again.\n\nSimplified the selection check:\n- Non-filtered mode: directly compare i == m.selectedIdx\n- Filtered mode: use m.filteredIdx[i] to get original index\n\nThis fixes the \"can't select bottom 5 entries\" bug.\n\nCo-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix(tui): fix selection highlighting for bottom items",
          "author_name": "Bojan Rajkovic",
          "author_login": "bojanrajkovic",
          "committed_at": "2026-01-23T01:22:44Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "de57116f41e6d15f9d8497dcf39a33938aa456b8",
          "body": "Two fixes:\n\n1. Use prefix matching for project path (strings.HasPrefix) instead of\n   exact match. This handles git worktrees where the working directory\n   is inside the project path (e.g., .worktrees/feature-branch).\n\n2. Mark plugins as seen after adding them from the installed list to\n   prevent duplicates when the CLI returns the same user-scoped plugin\n   multiple times.\n\nCo-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix(tui): handle worktrees and prevent duplicate plugins",
          "author_name": "Bojan Rajkovic",
          "author_login": "bojanrajkovic",
          "committed_at": "2026-01-23T01:20:50Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "95ea156d912c09bc439e63761afab0fa90b86181",
          "body": "Plugins installed in multiple projects were showing multiple times\nbecause the installed list includes all installs across all projects.\n\nNow filter installed plugins to only show:\n- User-scoped plugins (always visible, apply everywhere)\n- Project/local-scoped plugins that match the current working \n[…]\nirectory\n\nThis also fixes the \"can't select bottom items\" bug which was caused by\nthe list being longer than expected due to duplicate entries.\n\nCo-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix(tui): filter installed plugins by current working directory",
          "author_name": "Bojan Rajkovic",
          "author_login": "bojanrajkovic",
          "committed_at": "2026-01-23T01:18:42Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "4051af3495a9b7f84b0cf3cfde399f5dd6587c05",
          "body": "Root cause: mergePlugins only iterated through list.Available, so\ninstalled plugins that weren't in the --available output from Claude CLI\nwere never shown. Many ed3d-plugins were missing because they were\ninstalled but not in the available list.\n\nTrack which installed plugins were seen via the available list, then add\nany remaining installed plugins separately using PluginStateFromInstalled.\n\nCo-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix(tui): show installed plugins not in available list",
          "author_name": "Bojan Rajkovic",
          "author_login": "bojanrajkovic",
          "committed_at": "2026-01-23T01:15:56Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "239ccf0d3a2b742f52d028de4777132e26c16857",
          "body": "Root cause: GroupHeader style had MarginTop(1) which added extra visual\nlines that threw off the click-to-index mapping. Each group header took\n2 visual lines but the click handler assumed 1 line per item.\n\nRemove MarginTop(1) from GroupHeader style so visual lines match logical\nindices. Group headers remain visually distinct via Bold and color.\n\nCo-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix(tui): fix mouse click off-by-one error",
          "author_name": "Bojan Rajkovic",
          "author_login": "bojanrajkovic",
          "committed_at": "2026-01-23T01:15:47Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "9939fe40edde6ea31d9c11dbb70f807b7a970e3d",
          "body": "1. Fix mouse click off-by-one error - remove duplicate listOffset addition\n2. Fall back to ID (without marketplace) when plugin name is missing\n3. Sort plugins case-insensitively to handle \"Notion\" vs \"notion\"\n\nCo-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix(tui): address bugs from manual testing",
          "author_name": "Bojan Rajkovic",
          "author_login": "bojanrajkovic",
          "committed_at": "2026-01-23T01:01:56Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "8ed7ab3e405341ce35525037b9eced7da95a3ed7",
          "body": "Match go.mod and GitHub Actions workflows.\n\nCo-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "chore: align Go version in mise.toml to 1.24",
          "author_name": "Bojan Rajkovic",
          "author_login": "bojanrajkovic",
          "committed_at": "2026-01-23T00:56:29Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "9fb639005c1b2c2f2a8ff91d2e512b5181c3ded9",
          "body": "Add context documentation for internal/claude and internal/tui domains\ndocumenting contracts, dependencies, invariants, and key decisions.\nUpdate root CLAUDE.md with freshness date and references to domain files.\n\nCo-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "docs: add domain CLAUDE.md files and freshness date",
          "author_name": "Bojan Rajkovic",
          "author_login": "bojanrajkovic",
          "committed_at": "2026-01-23T00:53:01Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "f10bbf92322054b10ec95b6dcf0ea25fe3963db7",
          "body": "- Remove reference to non-existent docs/screenshot.png from README.md (line 8)\n- Create CONTRIBUTING.md file to resolve missing reference in README.md (line 96)\n\nFixes:\n- README.md no longer contains broken image reference\n- CONTRIBUTING.md now exists with contribution guidelines\n\nCo-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix: address code review feedback for Phase 8",
          "author_name": "Bojan Rajkovic",
          "author_login": "bojanrajkovic",
          "committed_at": "2026-01-23T00:49:28Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "caa5cae6acc5b8dd00955877988399177de7f481",
          "body": "README includes:\n- Installation instructions (Homebrew, Chocolatey, WinGet, Go install)\n- Key bindings reference\n- Usage instructions\n- Building from source\n\nLICENSE: MIT License with copyright 2026 open-cli-collective\n\nCo-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "docs: add README and MIT LICENSE",
          "author_name": "Bojan Rajkovic",
          "author_login": "bojanrajkovic",
          "committed_at": "2026-01-23T00:46:17Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "6381d68c78add88c7608fd2154145890022ffd4d",
          "body": "- cpm.nuspec: Chocolatey package manifest with metadata\n- chocolateyinstall.ps1: Downloads and installs Windows binary\n- chocolateyuninstall.ps1: Removes Windows binary on uninstall\n- cpm.yaml: WinGet manifest for Windows package manager\n\nCo-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "ci: add Chocolatey and WinGet package configurations",
          "author_name": "Bojan Rajkovic",
          "author_login": "bojanrajkovic",
          "committed_at": "2026-01-23T00:46:10Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "ca82bd50d703bd36cfbcedb1022ecdb0c94f9f9b",
          "body": "- ci.yml: Lint, test, and build on push/PR to main\n- pr-artifacts.yml: Build multi-platform binaries (linux, darwin, windows) on PR\n- release-please.yml: Automated release PRs and GoReleaser integration\n\nCo-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "ci: add GitHub Actions workflows for CI, PR artifacts, and release",
          "author_name": "Bojan Rajkovic",
          "author_login": "bojanrajkovic",
          "committed_at": "2026-01-23T00:46:04Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "af5b4e3e4919e66c68ea7743cd91e2f71424d872",
          "body": "Add comprehensive test coverage for all Phase 7 features:\n\n## Filter Mode Tests\n- updateFilter: test Esc clears filter, Enter selects first match, backspace removes characters, runes append\n- applyFilter: test case-insensitive matching on name/description/ID, skips group headers\n- getVisiblePlugins:\n[…]\n- 2 instead of width/3)\n- Add Up/Down navigation within filter mode for better UX\n- Update help text to document Esc: clear for pending changes\n\nCo-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "test(tui): add comprehensive tests for Phase 7 features",
          "author_name": "Bojan Rajkovic",
          "author_login": "bojanrajkovic",
          "committed_at": "2026-01-23T00:41:31Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "1ace482bad4bfe1c42aa0caf9cb0d3c92a8817cc",
          "body": null,
          "is_bot": false,
          "headline": "refactor(tui): reduce cyclomatic complexity and improve mouse handler",
          "author_name": "Bojan Rajkovic",
          "author_login": "bojanrajkovic",
          "committed_at": "2026-01-23T00:36:10Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "2ffe050f4f51bb96bdbbb9477901e128d606981a",
          "body": null,
          "is_bot": false,
          "headline": "feat(tui): enable mouse cell motion support",
          "author_name": "Bojan Rajkovic",
          "author_login": "bojanrajkovic",
          "committed_at": "2026-01-23T00:34:38Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "2ce0d916e5d39ffc3109ea345be70c07f96f172a",
          "body": null,
          "is_bot": false,
          "headline": "feat(tui): add filter mode, refresh handler, and mouse support",
          "author_name": "Bojan Rajkovic",
          "author_login": "bojanrajkovic",
          "committed_at": "2026-01-23T00:34:28Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "09eb799186ad7704053e18422f7d7b266cee3391",
          "body": null,
          "is_bot": false,
          "headline": "feat(tui): add filter input view and help text updates",
          "author_name": "Bojan Rajkovic",
          "author_login": "bojanrajkovic",
          "committed_at": "2026-01-23T00:34:00Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "d537c1c631cc26f7f2fe574733585083c5eeccbc",
          "body": null,
          "is_bot": false,
          "headline": "feat(tui): add filter state fields and quit confirmation state",
          "author_name": "Bojan Rajkovic",
          "author_login": "bojanrajkovic",
          "committed_at": "2026-01-23T00:33:30Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "5ea25898381182bc931b7005ca85c522d6f29ab1",
          "body": "Critical: Add comprehensive unit tests for execution flow\n- TestUpdateConfirmationEnterStartsExecution: Verify Enter starts execution\n- TestUpdateConfirmationEscapeCancel: Verify Escape cancels without executing\n- TestStartExecutionBuildsOperations: Verify operations build correctly\n- TestExecuteOpe\n[…]\nccessful and failed operations, not just errors\n- Updated all references in model.go and update.go\n\nAll tests pass, lint clean, no regressions.\n\nCo-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix(tui): address Phase 6 code review feedback",
          "author_name": "Bojan Rajkovic",
          "author_login": "bojanrajkovic",
          "committed_at": "2026-01-23T00:30:36Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "f2863356c57ef153e5604ce0f319ec84e8e4315f",
          "body": "…modals\n\nImplements the complete execution flow for applying pending plugin changes:\n\n- Added Operation struct and operationDoneMsg message type\n- Added execution state fields to Model (operations, currentOpIdx, operationErrors, showConfirm)\n- Added confirmation modal view that lists pending operati\n[…]\nrors are collected and displayed in summary\n- Plugin list refreshes after execution completion\n\nAll tests pass, linting passes, build succeeds.\n\nCo-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat(tui): add execution flow with confirmation, progress, and error …",
          "author_name": "Bojan Rajkovic",
          "author_login": "bojanrajkovic",
          "committed_at": "2026-01-23T00:22:42Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "e1d3045406680ee5263ab6713f8fa9d2b85bab5d",
          "body": null,
          "is_bot": false,
          "headline": "test(tui): add tests for selection behavior",
          "author_name": "Bojan Rajkovic",
          "author_login": "bojanrajkovic",
          "committed_at": "2026-01-23T00:05:44Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "f54f6f93e3a45970377ef716922277ee16825ecd",
          "body": null,
          "is_bot": false,
          "headline": "feat(tui): add selection key handlers for l/p/Tab/u/Esc",
          "author_name": "Bojan Rajkovic",
          "author_login": "bojanrajkovic",
          "committed_at": "2026-01-23T00:05:16Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "5917337a9af6ab00637e369a4524c05333a42d3c",
          "body": null,
          "is_bot": false,
          "headline": "fix: address linting issues",
          "author_name": "Bojan Rajkovic",
          "author_login": "bojanrajkovic",
          "committed_at": "2026-01-23T00:01:13Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "b68510d1fd9b60d354f8e9389c3913625003d7ad",
          "body": null,
          "is_bot": false,
          "headline": "feat(tui): integrate styles, keys, view into model",
          "author_name": "Bojan Rajkovic",
          "author_login": "bojanrajkovic",
          "committed_at": "2026-01-23T00:00:27Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "708167223618618bee496b81c860840e378d31e9",
          "body": null,
          "is_bot": false,
          "headline": "feat(tui): add two-pane view rendering",
          "author_name": "Bojan Rajkovic",
          "author_login": "bojanrajkovic",
          "committed_at": "2026-01-23T00:00:22Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "818e9e2012f0aa1a4e278aa9567b8d070a02e356",
          "body": null,
          "is_bot": false,
          "headline": "feat(tui): add key binding definitions",
          "author_name": "Bojan Rajkovic",
          "author_login": "bojanrajkovic",
          "committed_at": "2026-01-22T23:59:15Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "efe96020841c6291b9b1bf2c8f29875bcbafd8b4",
          "body": null,
          "is_bot": false,
          "headline": "feat(tui): add lip gloss styles for two-pane layout",
          "author_name": "Bojan Rajkovic",
          "author_login": "bojanrajkovic",
          "committed_at": "2026-01-22T23:58:50Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "26279ceaae042be4b81ea8484982952bb6a7415a",
          "body": null,
          "is_bot": false,
          "headline": "fix(tui): resolve lint issues - unused fields and parameters",
          "author_name": "Bojan Rajkovic",
          "author_login": "bojanrajkovic",
          "committed_at": "2026-01-22T23:55:17Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "b6337615dab3d5e94874311d9b8d52a797ae3671",
          "body": null,
          "is_bot": false,
          "headline": "feat(main): add entry point with version/help flags and claude check",
          "author_name": "Bojan Rajkovic",
          "author_login": "bojanrajkovic",
          "committed_at": "2026-01-22T23:53:17Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "6ff9a82c426535dfb52be5e4ea2df2a84c87ba0f",
          "body": null,
          "is_bot": false,
          "headline": "feat(tui): add core model with plugin loading",
          "author_name": "Bojan Rajkovic",
          "author_login": "bojanrajkovic",
          "committed_at": "2026-01-22T23:52:28Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "e817f0393b7fb09a3381049cfe0fc25728bd5a20",
          "body": null,
          "is_bot": false,
          "headline": "chore: add bubble tea dependencies",
          "author_name": "Bojan Rajkovic",
          "author_login": "bojanrajkovic",
          "committed_at": "2026-01-22T23:51:39Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "6b3fd3b393fe313c011b91de7510c4c56017ca23",
          "body": null,
          "is_bot": false,
          "headline": "feat(version): add version package with build-time injection",
          "author_name": "Bojan Rajkovic",
          "author_login": "bojanrajkovic",
          "committed_at": "2026-01-22T23:50:56Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "b967308079d81907c8e2dea28817798465535634",
          "body": "…essions",
          "is_bot": false,
          "headline": "fix(claude): resolve linting issues - field alignment and gosec suppr…",
          "author_name": "Bojan Rajkovic",
          "author_login": "bojanrajkovic",
          "committed_at": "2026-01-22T23:47:53Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "2512c5ebe1ac1a90bf1d92f1ddd9a177c90e9ea5",
          "body": null,
          "is_bot": false,
          "headline": "feat(claude): add client interface and implementation",
          "author_name": "Bojan Rajkovic",
          "author_login": "bojanrajkovic",
          "committed_at": "2026-01-22T23:47:22Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "efcd424c5261c958107ab8e381fb8dedf8bfa4c8",
          "body": null,
          "is_bot": false,
          "headline": "feat(claude): add type definitions for plugin data structures",
          "author_name": "Bojan Rajkovic",
          "author_login": "bojanrajkovic",
          "committed_at": "2026-01-22T23:47:02Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "335bc8665deb4dcbdbb4f9f00883f9510a9efefb",
          "body": "The .golangci.yml file was missing the version declaration specified in the\nimplementation plan. Added version: \"2\" as the first line to match the\nspecification.\n\nCo-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix(config): add version: \\\"2\\\" to golangci.yml",
          "author_name": "Bojan Rajkovic",
          "author_login": "bojanrajkovic",
          "committed_at": "2026-01-22T23:44:44Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "4d86d13ec0e5482527c4bf20f3cdcbe26822da82",
          "body": null,
          "is_bot": false,
          "headline": "docs: add CLAUDE.md project guidance",
          "author_name": "Bojan Rajkovic",
          "author_login": "bojanrajkovic",
          "committed_at": "2026-01-22T23:41:17Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "063f3538f88bec0baa52b7d3bed5d834c68e6448",
          "body": null,
          "is_bot": false,
          "headline": "chore: add placeholder main.go",
          "author_name": "Bojan Rajkovic",
          "author_login": "bojanrajkovic",
          "committed_at": "2026-01-22T23:41:01Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "f2fdca47e4acac3aa26bee6bdb593008c1746928",
          "body": null,
          "is_bot": false,
          "headline": "chore: add Makefile as thin wrapper for mise tasks",
          "author_name": "Bojan Rajkovic",
          "author_login": "bojanrajkovic",
          "committed_at": "2026-01-22T23:40:26Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "54d9f15e65244f5214458793e5ea226307daf39f",
          "body": null,
          "is_bot": false,
          "headline": "chore: add renovate configuration for dependency updates",
          "author_name": "Bojan Rajkovic",
          "author_login": "bojanrajkovic",
          "committed_at": "2026-01-22T23:40:13Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "190e20aa02d32be0dc05011f25f679dc37ade29b",
          "body": null,
          "is_bot": false,
          "headline": "chore: add goreleaser configuration for releases",
          "author_name": "Bojan Rajkovic",
          "author_login": "bojanrajkovic",
          "committed_at": "2026-01-22T23:40:01Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "6e6e9b235d3ffb2f5be02c633cccac4e057e2ef1",
          "body": null,
          "is_bot": false,
          "headline": "chore: add golangci-lint configuration",
          "author_name": "Bojan Rajkovic",
          "author_login": "bojanrajkovic",
          "committed_at": "2026-01-22T23:39:52Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "fbc91ab8a67908421822ec59ed65d1012414fde1",
          "body": null,
          "is_bot": false,
          "headline": "chore: add lefthook configuration for git hooks",
          "author_name": "Bojan Rajkovic",
          "author_login": "bojanrajkovic",
          "committed_at": "2026-01-22T23:39:25Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "8159cba078ec318893a2d1ab450854a67b56b51e",
          "body": null,
          "is_bot": false,
          "headline": "chore: add mise configuration for tool management",
          "author_name": "Bojan Rajkovic",
          "author_login": "bojanrajkovic",
          "committed_at": "2026-01-22T23:39:11Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "117c1ab76d3c902431c6a38375749f625d0c259b",
          "body": null,
          "is_bot": false,
          "headline": "chore: create project directory structure",
          "author_name": "Bojan Rajkovic",
          "author_login": "bojanrajkovic",
          "committed_at": "2026-01-22T23:39:07Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "329073f772e54929ecbba30614762d844eca50fc",
          "body": null,
          "is_bot": false,
          "headline": "chore: initialize go module",
          "author_name": "Bojan Rajkovic",
          "author_login": "bojanrajkovic",
          "committed_at": "2026-01-22T23:38:55Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "a2c11eec5883a55503072025b195d43bf56861b2",
          "body": "Fixes identified during code review validation:\n\nImportant Issues:\n- Phase 2: Add Source field to AvailablePlugin struct (CLI JSON includes it)\n- Phase 6: Clear filter state in updateProgress to prevent stale filter\n\nMinor Issues:\n- Phase 1: Add .gitkeep cleanup verification step\n- Phase 3: Sort mar\n[…]\n()\n- Phase 6/7: Update itoa() calls to strconv.Itoa()\n- Phase 7: Make mouse click offset calculation more robust by accounting\n  for filter bar\n\nCo-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "docs: apply validation fixes to implementation plans",
          "author_name": "Bojan Rajkovic",
          "author_login": "bojanrajkovic",
          "committed_at": "2026-01-22T11:56:01Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "66396d7102893c5ea8bdb470d98e1e69abe01451",
          "body": null,
          "is_bot": false,
          "headline": "chore: add .gitignore with worktree exclusion",
          "author_name": "Bojan Rajkovic",
          "author_login": "bojanrajkovic",
          "committed_at": "2026-01-22T03:33:35Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "ad2834a14e8b0cc208ba9a30b75a76f42e767061",
          "body": "Corrected the scope terminology:\n- user: ~/.claude/settings.json (global)\n- project: .claude/settings.json (shared)\n- local: .claude/settings.local.json (not shared)\n\nCo-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "docs: fix scope definitions in glossary",
          "author_name": "Bojan Rajkovic",
          "author_login": "bojanrajkovic",
          "committed_at": "2026-01-22T03:06:56Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "30564d0c69c1e308313e42e98b33eff560574c77",
          "body": "Completed brainstorming session. Design includes:\n- Flat model TUI architecture with Bubble Tea\n- Two-pane layout (plugin list + details)\n- Shell out to claude CLI for operations\n- Mise-based tooling with lefthook pre-commit hooks\n- release-please + GoReleaser CI/CD pipeline\n- 8 implementation phases\n\nCo-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "docs: add cpm plugin manager design plan",
          "author_name": "Bojan Rajkovic",
          "author_login": "bojanrajkovic",
          "committed_at": "2026-01-22T03:05:01Z",
          "body_truncated": false,
          "is_coding_agent": true
        }
      ],
      "releases_count": 16,
      "commits_last_year": 92,
      "latest_release_at": "2026-07-17T13:28:07Z",
      "latest_release_tag": "v0.3.3",
      "releases_from_tags": false,
      "days_since_last_push": 4,
      "active_weeks_last_year": 8,
      "days_since_latest_release": 4,
      "mean_days_between_releases": 17.6
    },
    "community": {
      "has_readme": true,
      "has_license": true,
      "has_description": true,
      "has_contributing": true,
      "health_percentage": 50,
      "has_issue_template": false,
      "has_code_of_conduct": false,
      "has_pull_request_template": false
    },
    "ecosystem": {
      "packages": [
        {
          "name": "github.com/open-cli-collective/cpm",
          "exists": true,
          "license": null,
          "keywords": [],
          "ecosystem": "go",
          "matches_repo": true,
          "registry_url": "https://pkg.go.dev/github.com/open-cli-collective/cpm",
          "is_deprecated": false,
          "latest_version": "v0.3.3",
          "repository_url": "https://github.com/open-cli-collective/cpm",
          "versions_count": 17,
          "total_downloads": null,
          "dependents_count": null,
          "deprecation_note": null,
          "maintainers_count": null,
          "monthly_downloads": null,
          "first_published_at": null,
          "latest_published_at": "2026-07-17T13:26:17Z",
          "latest_version_yanked": null,
          "days_since_latest_publish": 4
        }
      ]
    },
    "popularity": {
      "forks": 0,
      "stars": 2,
      "watchers": 0,
      "fork_history": {
        "days": [],
        "complete": true,
        "collected": 0,
        "total_forks": 0
      },
      "star_history": {
        "days": [
          {
            "date": "2026-01-24",
            "count": 1
          },
          {
            "date": "2026-03-08",
            "count": 1
          }
        ],
        "complete": true,
        "collected": 2,
        "total_stars": 2
      },
      "open_issues_and_prs": 0
    },
    "ai_readiness": {
      "has_nix": false,
      "example_dirs": [],
      "has_llms_txt": false,
      "has_dockerfile": false,
      "has_mcp_signal": false,
      "bootstrap_files": [
        "Makefile",
        "mise.toml"
      ],
      "api_schema_files": [],
      "has_devcontainer": false,
      "typecheck_configs": [],
      "toolchain_manifests": [
        "go.mod"
      ],
      "largest_source_bytes": 98178,
      "source_files_sampled": 17,
      "oversized_source_files": 1,
      "agent_instruction_files": [
        "CLAUDE.md",
        "internal/claude/CLAUDE.md",
        "internal/tui/CLAUDE.md"
      ],
      "agent_instruction_max_bytes": 4040
    },
    "dependencies": {
      "manifests": [
        "go.mod"
      ],
      "advisories": {
        "error": null,
        "scope": null,
        "source": null,
        "findings": [],
        "collected": false,
        "malicious": [],
        "truncated": false,
        "by_severity": {},
        "advisory_count": 0,
        "affected_count": 0,
        "assessed_count": 0,
        "malicious_count": 0,
        "assessed_package": null,
        "unassessed_count": 0,
        "direct_affected_count": 0
      },
      "ecosystems": [
        "go"
      ],
      "dependencies": [
        {
          "name": "github.com/charmbracelet/bubbletea",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.3.10"
        },
        {
          "name": "github.com/charmbracelet/glamour",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v0.10.0"
        },
        {
          "name": "github.com/charmbracelet/lipgloss",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.1.1-0.20250404203927-76690c660834"
        },
        {
          "name": "github.com/sahilm/fuzzy",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v0.1.1"
        }
      ],
      "all_dependencies": {
        "error": "GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository",
        "source": null,
        "packages": [],
        "collected": false,
        "truncated": false,
        "total_count": null,
        "direct_count": null,
        "indirect_count": null
      }
    },
    "maintainership": {
      "issues": {
        "open_prs": 0,
        "merged_prs": 24,
        "open_issues": 0,
        "closed_ratio": 1,
        "closed_issues": 15,
        "closed_unmerged_prs": 2
      },
      "bus_factor": 1,
      "bot_contributors": 0,
      "top_contributors": [
        {
          "type": "User",
          "login": "bojanrajkovic",
          "commits": 80,
          "avatar_url": "https://avatars.githubusercontent.com/u/110747?v=4"
        },
        {
          "type": "User",
          "login": "piekstra",
          "commits": 12,
          "avatar_url": "https://avatars.githubusercontent.com/u/10527279?v=4"
        }
      ],
      "contributors_sampled": 2,
      "top_contributor_share": 0.87
    },
    "quality_signals": {
      "has_ci": true,
      "has_tests": true,
      "ci_workflows": [
        "auto-release.yml",
        "ci.yml",
        "pr-artifacts.yml",
        "release.yml"
      ],
      "has_docs_dir": true,
      "linter_configs": [
        ".golangci.yml"
      ],
      "has_editorconfig": false,
      "has_linter_config": true,
      "has_precommit_config": false
    },
    "security_signals": {
      "lockfiles": [
        "go.sum"
      ],
      "scorecard": {
        "checks": [
          {
            "name": "Binary-Artifacts",
            "score": 10,
            "reason": "no binaries found in the repo",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#binary-artifacts"
          },
          {
            "name": "Branch-Protection",
            "score": null,
            "reason": "internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#branch-protection"
          },
          {
            "name": "CI-Tests",
            "score": 10,
            "reason": "24 out of 24 merged PRs checked by a CI test -- score normalized to 10",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#ci-tests"
          },
          {
            "name": "CII-Best-Practices",
            "score": 0,
            "reason": "no effort to earn an OpenSSF best practices badge detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#cii-best-practices"
          },
          {
            "name": "Code-Review",
            "score": 3,
            "reason": "Found 11/30 approved changesets -- score normalized to 3",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#code-review"
          },
          {
            "name": "Contributors",
            "score": 6,
            "reason": "project has 2 contributing companies or organizations -- score normalized to 6",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#contributors"
          },
          {
            "name": "Dangerous-Workflow",
            "score": 10,
            "reason": "no dangerous workflow patterns detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dangerous-workflow"
          },
          {
            "name": "Dependency-Update-Tool",
            "score": 10,
            "reason": "update tool detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dependency-update-tool"
          },
          {
            "name": "Fuzzing",
            "score": 0,
            "reason": "project is not fuzzed",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#fuzzing"
          },
          {
            "name": "License",
            "score": 10,
            "reason": "license file detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#license"
          },
          {
            "name": "Maintained",
            "score": 1,
            "reason": "2 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 1",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#maintained"
          },
          {
            "name": "Packaging",
            "score": 10,
            "reason": "packaging workflow detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#packaging"
          },
          {
            "name": "Pinned-Dependencies",
            "score": 0,
            "reason": "dependency not pinned by hash detected -- score normalized to 0",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#pinned-dependencies"
          },
          {
            "name": "SAST",
            "score": 0,
            "reason": "SAST tool is not run on all commits -- score normalized to 0",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#sast"
          },
          {
            "name": "Security-Policy",
            "score": 0,
            "reason": "security policy file not detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#security-policy"
          },
          {
            "name": "Signed-Releases",
            "score": 0,
            "reason": "Project has not signed or included provenance with any releases.",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#signed-releases"
          },
          {
            "name": "Token-Permissions",
            "score": 0,
            "reason": "detected GitHub workflow tokens with excessive permissions",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#token-permissions"
          },
          {
            "name": "Vulnerabilities",
            "score": 0,
            "reason": "15 existing vulnerabilities detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#vulnerabilities"
          }
        ],
        "commit": "d8703505f23ab81bb3d17f5bb4ee2adb87395415",
        "ran_at": "2026-07-22T07:23:49Z",
        "aggregate_score": 4.1,
        "scorecard_version": "v5.5.0"
      },
      "has_codeql_workflow": false,
      "has_security_policy": false,
      "has_dependabot_config": false
    },
    "contribution_flow": {
      "collected": true,
      "ci_last_run_at": "2026-07-17T13:28:17Z",
      "oldest_open_prs": [],
      "last_merged_pr_at": "2026-07-17T13:26:23Z",
      "ci_last_conclusion": "SUCCESS",
      "oldest_open_issues": []
    }
  },
  "config": {
    "disabled_metrics": [],
    "disabled_categories": [],
    "disabled_components": {}
  },
  "source": {
    "url": "https://github.com/open-cli-collective/cpm",
    "host": "github.com",
    "name": "cpm",
    "owner": "open-cli-collective"
  },
  "metrics": {
    "overall": {
      "key": "overall",
      "band": "moderate",
      "name": "Overall health",
      "note": null,
      "notes": [],
      "value": 58,
      "inputs": {
        "security": 41,
        "vitality": 72,
        "community": 33,
        "governance": 61,
        "engineering": 76
      },
      "components": []
    },
    "categories": [
      {
        "key": "vitality",
        "band": "good",
        "name": "Vitality",
        "value": 72,
        "weight": 0.22,
        "metrics": [
          {
            "key": "development_activity",
            "band": "moderate",
            "name": "Development activity",
            "note": null,
            "notes": [],
            "value": 60,
            "inputs": {
              "commits_last_year": 92,
              "human_commit_share": 1,
              "days_since_last_push": 4,
              "active_weeks_last_year": 8
            },
            "components": [
              {
                "key": "push_recency",
                "name": "Push recency",
                "detail": "last push 4 days ago",
                "points": 36,
                "status": "met",
                "details": [
                  {
                    "code": "push_recency",
                    "params": {
                      "days": 4
                    }
                  }
                ],
                "max_points": 36
              },
              {
                "key": "commit_cadence",
                "name": "Commit cadence",
                "detail": "8/52 weeks with commits",
                "points": 5.5,
                "status": "partial",
                "details": [
                  {
                    "code": "commit_cadence_weeks",
                    "params": {
                      "weeks": 8
                    }
                  }
                ],
                "max_points": 36
              },
              {
                "key": "commit_volume",
                "name": "Commit volume",
                "detail": "92 commits in the last year",
                "points": 17.7,
                "status": "partial",
                "details": [
                  {
                    "code": "commits_last_year",
                    "params": {
                      "count": 92
                    }
                  }
                ],
                "max_points": 18
              },
              {
                "key": "openssf_scorecard_maintained",
                "name": "OpenSSF Scorecard: Maintained",
                "detail": "2 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 1",
                "points": 1,
                "status": "partial",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "release_discipline",
            "band": "excellent",
            "name": "Release discipline",
            "note": null,
            "notes": [],
            "value": 90,
            "inputs": {
              "releases_count": 16,
              "latest_release_tag": "v0.3.3",
              "releases_from_tags": false,
              "days_since_latest_release": 4,
              "mean_days_between_releases": 17.6
            },
            "components": [
              {
                "key": "ships_releases",
                "name": "Ships releases",
                "detail": "16 releases published",
                "points": 27,
                "status": "met",
                "details": [
                  {
                    "code": "releases_published",
                    "params": {
                      "count": 16
                    }
                  }
                ],
                "max_points": 27
              },
              {
                "key": "release_recency",
                "name": "Release recency",
                "detail": "latest release 4 days ago",
                "points": 36,
                "status": "met",
                "details": [
                  {
                    "code": "release_recency",
                    "params": {
                      "days": 4
                    }
                  }
                ],
                "max_points": 36
              },
              {
                "key": "release_cadence",
                "name": "Release cadence",
                "detail": "a release every ~17.6 days",
                "points": 27,
                "status": "met",
                "details": [
                  {
                    "code": "release_cadence",
                    "params": {
                      "gap": 17.6
                    }
                  }
                ],
                "max_points": 27
              },
              {
                "key": "openssf_scorecard_signed_releases",
                "name": "OpenSSF Scorecard: Signed-Releases",
                "detail": "Project has not signed or included provenance with any releases.",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "abandonment",
            "band": "excellent",
            "name": "Abandonment",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "cap": null,
              "state": "maintained",
              "guards": [],
              "signals": [],
              "red_flag": false,
              "multiplier_pct": 100,
              "declared_reason": null,
              "unverified_reason": null,
              "unanswered_open_prs": null,
              "unanswered_open_issues": null,
              "days_since_last_merged_pr": null,
              "days_since_last_human_commit": 4,
              "days_since_last_human_commit_is_floor": false
            },
            "components": [
              {
                "key": "project_is_still_maintained",
                "name": "Project is still maintained",
                "detail": "last human commit 4 days ago",
                "points": 100,
                "status": "met",
                "details": [
                  {
                    "code": "abandonment_maintained",
                    "params": {
                      "days": 4
                    }
                  }
                ],
                "max_points": 100
              }
            ]
          }
        ],
        "description": "Is the project alive — is code being written and are releases shipping?"
      },
      {
        "key": "community",
        "band": "at_risk",
        "name": "Community & Adoption",
        "value": 33,
        "weight": 0.18,
        "metrics": [
          {
            "key": "popularity",
            "band": "critical",
            "name": "Popularity & adoption",
            "note": null,
            "notes": [],
            "value": 1,
            "inputs": {
              "forks": 0,
              "stars": 2,
              "watchers": 0,
              "growth_state": "unverified",
              "growth_factor_pct": 100,
              "growth_unverified_reason": "below_threshold"
            },
            "components": [
              {
                "key": "stars",
                "name": "Stars",
                "detail": "2 stars",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "stars",
                    "params": {
                      "count": 2
                    }
                  }
                ],
                "max_points": 60
              },
              {
                "key": "forks",
                "name": "Forks",
                "detail": "0 forks",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "forks",
                    "params": {
                      "count": 0
                    }
                  }
                ],
                "max_points": 25
              },
              {
                "key": "watchers",
                "name": "Watchers",
                "detail": "0 watchers",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "watchers",
                    "params": {
                      "count": 0
                    }
                  }
                ],
                "max_points": 15
              }
            ]
          },
          {
            "key": "community_health",
            "band": "good",
            "name": "Community health",
            "note": null,
            "notes": [],
            "value": 70,
            "inputs": {
              "has_readme": true,
              "has_license": true,
              "has_contributing": true,
              "has_issue_template": false,
              "has_code_of_conduct": false,
              "has_pull_request_template": false
            },
            "components": [
              {
                "key": "readme",
                "name": "README",
                "detail": null,
                "points": 22.5,
                "status": "met",
                "details": [],
                "max_points": 22.5
              },
              {
                "key": "license",
                "name": "License",
                "detail": "recognized license (MIT)",
                "points": 22.5,
                "status": "met",
                "details": [
                  {
                    "code": "license_standard",
                    "params": {}
                  },
                  {
                    "code": "license_spdx",
                    "params": {
                      "spdx": "MIT"
                    }
                  }
                ],
                "max_points": 22.5
              },
              {
                "key": "contributing_guide",
                "name": "CONTRIBUTING guide",
                "detail": null,
                "points": 18,
                "status": "met",
                "details": [],
                "max_points": 18
              },
              {
                "key": "code_of_conduct",
                "name": "Code of conduct",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 13.5
              },
              {
                "key": "issue_template",
                "name": "Issue template",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.2
              },
              {
                "key": "pr_template",
                "name": "PR template",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 6.3
              }
            ]
          }
        ],
        "description": "Does the project have users, downloads, attention, and a welcoming setup for contributors?"
      },
      {
        "key": "governance",
        "band": "moderate",
        "name": "Sustainability & Governance",
        "value": 61,
        "weight": 0.24,
        "metrics": [
          {
            "key": "maintainer_resilience",
            "band": "critical",
            "name": "Maintainer resilience (bus factor)",
            "note": null,
            "notes": [],
            "value": 21,
            "inputs": {
              "bus_factor": 1,
              "contributors_sampled": 2,
              "top_contributor_share": 0.87
            },
            "components": [
              {
                "key": "bus_factor",
                "name": "Bus factor",
                "detail": "1 contributor(s) cover half of all commits",
                "points": 9,
                "status": "partial",
                "details": [
                  {
                    "code": "bus_factor",
                    "params": {
                      "count": 1
                    }
                  }
                ],
                "max_points": 54
              },
              {
                "key": "commit_distribution",
                "name": "Commit distribution",
                "detail": "top contributor authored 87% of commits",
                "points": 2.9,
                "status": "partial",
                "details": [
                  {
                    "code": "top_contributor_share",
                    "params": {
                      "share": 87
                    }
                  }
                ],
                "max_points": 22.5
              },
              {
                "key": "contributor_breadth",
                "name": "Contributor breadth",
                "detail": "2 contributors",
                "points": 2.7,
                "status": "partial",
                "details": [
                  {
                    "code": "contributors_sampled",
                    "params": {
                      "count": 2
                    }
                  }
                ],
                "max_points": 13.5
              },
              {
                "key": "openssf_scorecard_contributors",
                "name": "OpenSSF Scorecard: Contributors",
                "detail": "project has 2 contributing companies or organizations -- score normalized to 6",
                "points": 6,
                "status": "partial",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "responsiveness",
            "band": "excellent",
            "name": "Issue & PR responsiveness",
            "note": null,
            "notes": [],
            "value": 87,
            "inputs": {
              "merged_prs": 24,
              "open_issues": 0,
              "closed_issues": 15,
              "issue_closed_ratio": 1,
              "closed_unmerged_prs": 2
            },
            "components": [
              {
                "key": "issue_resolution",
                "name": "Issue resolution",
                "detail": "100% of issues closed",
                "points": 46.8,
                "status": "met",
                "details": [
                  {
                    "code": "issues_closed_share",
                    "params": {
                      "share": 100
                    }
                  }
                ],
                "max_points": 46.75
              },
              {
                "key": "pr_acceptance",
                "name": "PR acceptance",
                "detail": "24/26 decided PRs merged",
                "points": 35.3,
                "status": "partial",
                "details": [
                  {
                    "code": "decided_prs_merged",
                    "params": {
                      "merged": 24,
                      "decided": 26
                    }
                  }
                ],
                "max_points": 38.25
              },
              {
                "key": "openssf_scorecard_code_review",
                "name": "OpenSSF Scorecard: Code-Review",
                "detail": "Found 11/30 approved changesets -- score normalized to 3",
                "points": 4.5,
                "status": "partial",
                "details": [],
                "max_points": 15
              }
            ]
          },
          {
            "key": "stewardship",
            "band": "moderate",
            "name": "Ownership & stewardship",
            "note": null,
            "notes": [],
            "value": 50,
            "inputs": {
              "followers": 15,
              "owner_type": "Organization",
              "is_verified": null,
              "owner_login": "open-cli-collective",
              "public_repos": 22,
              "account_age_days": 186
            },
            "components": [
              {
                "key": "ownership_backing",
                "name": "Ownership backing",
                "detail": "organization-owned",
                "points": 30,
                "status": "met",
                "details": [
                  {
                    "code": "owner_organization",
                    "params": {}
                  }
                ],
                "max_points": 30
              },
              {
                "key": "verified_domain",
                "name": "Verified domain",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 20
              },
              {
                "key": "owner_reach",
                "name": "Owner reach",
                "detail": "15 followers of open-cli-collective",
                "points": 8.7,
                "status": "partial",
                "details": [
                  {
                    "code": "owner_followers",
                    "params": {
                      "count": 15,
                      "login": "open-cli-collective"
                    }
                  }
                ],
                "max_points": 25
              },
              {
                "key": "track_record",
                "name": "Track record",
                "detail": "22 public repos, account ~0 yr old",
                "points": 10.9,
                "status": "partial",
                "details": [
                  {
                    "code": "public_repos",
                    "params": {
                      "count": 22
                    }
                  },
                  {
                    "code": "account_age_years",
                    "params": {
                      "years": 0
                    }
                  }
                ],
                "max_points": 25
              }
            ]
          },
          {
            "key": "package_maintenance",
            "band": "excellent",
            "name": "Package maintenance",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "packages": [
                "github.com/open-cli-collective/cpm"
              ],
              "ecosystems": "go",
              "any_deprecated": false,
              "min_days_since_publish": 4
            },
            "components": [
              {
                "key": "published_resolvable",
                "name": "Published & resolvable",
                "detail": "1 package(s) on go",
                "points": 25,
                "status": "met",
                "details": [
                  {
                    "code": "packages_published",
                    "params": {
                      "count": 1,
                      "ecosystems": "go"
                    }
                  }
                ],
                "max_points": 25
              },
              {
                "key": "publish_recency",
                "name": "Publish recency",
                "detail": "latest publish 4 days ago",
                "points": 35,
                "status": "met",
                "details": [
                  {
                    "code": "publish_recency",
                    "params": {
                      "days": 4
                    }
                  }
                ],
                "max_points": 35
              },
              {
                "key": "version_history",
                "name": "Version history",
                "detail": "17 published versions",
                "points": 20,
                "status": "met",
                "details": [
                  {
                    "code": "published_versions",
                    "params": {
                      "count": 17
                    }
                  }
                ],
                "max_points": 20
              },
              {
                "key": "not_deprecated",
                "name": "Not deprecated",
                "detail": "active, not deprecated or yanked",
                "points": 20,
                "status": "met",
                "details": [
                  {
                    "code": "package_not_deprecated",
                    "params": {}
                  }
                ],
                "max_points": 20
              }
            ]
          }
        ],
        "description": "Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?"
      },
      {
        "key": "engineering",
        "band": "good",
        "name": "Engineering Quality",
        "value": 76,
        "weight": 0.2,
        "metrics": [
          {
            "key": "engineering_practices",
            "band": "good",
            "name": "Engineering practices",
            "note": null,
            "notes": [],
            "value": 84,
            "inputs": {
              "has_ci": true,
              "has_tests": true,
              "has_editorconfig": false,
              "has_linter_config": true,
              "has_precommit_config": false
            },
            "components": [
              {
                "key": "ci_workflows",
                "name": "CI workflows",
                "detail": "4 workflow(s)",
                "points": 24,
                "status": "met",
                "details": [
                  {
                    "code": "ci_workflows",
                    "params": {
                      "count": 4
                    }
                  }
                ],
                "max_points": 24
              },
              {
                "key": "tests_present",
                "name": "Tests present",
                "detail": null,
                "points": 24,
                "status": "met",
                "details": [],
                "max_points": 24
              },
              {
                "key": "linter_config",
                "name": "Linter config",
                "detail": ".golangci.yml",
                "points": 16,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": ".golangci.yml"
                    }
                  }
                ],
                "max_points": 16
              },
              {
                "key": "pre_commit_hooks",
                "name": "Pre-commit hooks",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 9.6
              },
              {
                "key": "editorconfig",
                "name": ".editorconfig",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 6.4
              },
              {
                "key": "openssf_scorecard_ci_tests",
                "name": "OpenSSF Scorecard: CI-Tests",
                "detail": "24 out of 24 merged PRs checked by a CI test -- score normalized to 10",
                "points": 20,
                "status": "met",
                "details": [],
                "max_points": 20
              }
            ]
          },
          {
            "key": "documentation",
            "band": "moderate",
            "name": "Documentation",
            "note": null,
            "notes": [],
            "value": 65,
            "inputs": {
              "topics": [],
              "has_wiki": false,
              "homepage": null,
              "has_readme": true,
              "has_docs_dir": true,
              "has_description": true
            },
            "components": [
              {
                "key": "readme",
                "name": "README",
                "detail": null,
                "points": 30,
                "status": "met",
                "details": [],
                "max_points": 30
              },
              {
                "key": "documentation_directory",
                "name": "Documentation directory",
                "detail": null,
                "points": 25,
                "status": "met",
                "details": [],
                "max_points": 25
              },
              {
                "key": "documentation_homepage_site",
                "name": "Documentation / homepage site",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 15
              },
              {
                "key": "repository_description",
                "name": "Repository description",
                "detail": null,
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              },
              {
                "key": "topics",
                "name": "Topics",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 10
              },
              {
                "key": "wiki",
                "name": "Wiki",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 10
              }
            ]
          }
        ],
        "description": "Are baseline engineering and documentation practices in place?"
      },
      {
        "key": "security",
        "band": "at_risk",
        "name": "Security",
        "value": 41,
        "weight": 0.16,
        "metrics": [
          {
            "key": "security_posture",
            "band": "at_risk",
            "name": "Security posture",
            "note": "Excluded from scoring (no data or not applicable): Branch-Protection. Remaining weights renormalized.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "branch_protection"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              }
            ],
            "value": 41,
            "inputs": {
              "source": "openssf_scorecard",
              "checks_evaluated": 17,
              "scorecard_version": "v5.5.0",
              "checks_inconclusive": 1,
              "scorecard_aggregate": 4.1
            },
            "components": [
              {
                "key": "binary_artifacts",
                "name": "Binary-Artifacts",
                "detail": "no binaries found in the repo",
                "points": 7.5,
                "status": "met",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "branch_protection",
                "name": "Branch-Protection",
                "detail": "internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_data",
                    "params": {}
                  }
                ],
                "max_points": 7.5
              },
              {
                "key": "ci_tests",
                "name": "CI-Tests",
                "detail": "24 out of 24 merged PRs checked by a CI test -- score normalized to 10",
                "points": 2.5,
                "status": "met",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "cii_best_practices",
                "name": "CII-Best-Practices",
                "detail": "no effort to earn an OpenSSF best practices badge detected",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "code_review",
                "name": "Code-Review",
                "detail": "Found 11/30 approved changesets -- score normalized to 3",
                "points": 2.2,
                "status": "partial",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "contributors",
                "name": "Contributors",
                "detail": "project has 2 contributing companies or organizations -- score normalized to 6",
                "points": 1.5,
                "status": "partial",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "dangerous_workflow",
                "name": "Dangerous-Workflow",
                "detail": "no dangerous workflow patterns detected",
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              },
              {
                "key": "dependency_update_tool",
                "name": "Dependency-Update-Tool",
                "detail": "update tool detected",
                "points": 7.5,
                "status": "met",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "fuzzing",
                "name": "Fuzzing",
                "detail": "project is not fuzzed",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 5
              },
              {
                "key": "license",
                "name": "License",
                "detail": "license file detected",
                "points": 2.5,
                "status": "met",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "maintained",
                "name": "Maintained",
                "detail": "2 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 1",
                "points": 0.8,
                "status": "partial",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "packaging",
                "name": "Packaging",
                "detail": "packaging workflow detected",
                "points": 5,
                "status": "met",
                "details": [],
                "max_points": 5
              },
              {
                "key": "pinned_dependencies",
                "name": "Pinned-Dependencies",
                "detail": "dependency not pinned by hash detected -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 5
              },
              {
                "key": "sast",
                "name": "SAST",
                "detail": "SAST tool is not run on all commits -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 5
              },
              {
                "key": "security_policy",
                "name": "Security-Policy",
                "detail": "security policy file not detected",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 5
              },
              {
                "key": "signed_releases",
                "name": "Signed-Releases",
                "detail": "Project has not signed or included provenance with any releases.",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "token_permissions",
                "name": "Token-Permissions",
                "detail": "detected GitHub workflow tokens with excessive permissions",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "vulnerabilities",
                "name": "Vulnerabilities",
                "detail": "15 existing vulnerabilities detected",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              }
            ]
          },
          {
            "key": "high_risk_jurisdiction_exposure",
            "band": "excellent",
            "name": "High-Risk Jurisdiction Exposure",
            "note": "Only high-confidence self-published location evidence affects this multiplier. Ambiguous matches are review-only; country evidence is not proof of nationality, citizenship, legal registration, malicious intent, or sanctions status.",
            "notes": [
              {
                "code": "jurisdiction_evidence_limits",
                "params": {}
              }
            ],
            "value": 100,
            "inputs": {
              "meaning": "self-published location evidence; not nationality or citizenship",
              "red_flag": false,
              "exposures": [],
              "policy_countries": [
                "Russia",
                "Iran",
                "North Korea"
              ],
              "review_only_matches": 0,
              "assessed_self_published_locations": 1
            },
            "components": [
              {
                "key": "policy_exposure_multiplier",
                "name": "Policy exposure multiplier",
                "detail": "no confirmed policy-scope location match",
                "points": 100,
                "status": "met",
                "details": [
                  {
                    "code": "jurisdiction_no_match",
                    "params": {}
                  }
                ],
                "max_points": 100
              }
            ]
          }
        ],
        "description": "Are visible security and supply-chain practices strong, with no malicious dependency and no unresolved high-risk jurisdiction exposure?"
      },
      {
        "key": "ai_readiness",
        "band": "excellent",
        "name": "AI Readiness",
        "value": 86,
        "weight": 0,
        "metrics": [
          {
            "key": "ai_agent_context",
            "band": "excellent",
            "name": "Agent context & guidance",
            "note": null,
            "notes": [],
            "value": 85,
            "inputs": {
              "has_llms_txt": false,
              "legible_history_share": 1,
              "agent_instruction_files": [
                "CLAUDE.md",
                "internal/claude/CLAUDE.md",
                "internal/tui/CLAUDE.md"
              ],
              "agent_instruction_max_bytes": 4040
            },
            "components": [
              {
                "key": "agent_instructions",
                "name": "Agent instructions",
                "detail": "CLAUDE.md, internal/claude/CLAUDE.md, internal/tui/CLAUDE.md",
                "points": 45,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": "CLAUDE.md, internal/claude/CLAUDE.md, internal/tui/CLAUDE.md"
                    }
                  }
                ],
                "max_points": 45
              },
              {
                "key": "machine_readable_docs_llms_txt",
                "name": "Machine-readable docs (llms.txt)",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 15
              },
              {
                "key": "legible_commit_history",
                "name": "Legible commit history",
                "detail": "92 of 92 human commits state their intent (structured subject or explanatory body)",
                "points": 40,
                "status": "met",
                "details": [
                  {
                    "code": "legible_history",
                    "params": {
                      "legible": 92,
                      "sampled": 92
                    }
                  }
                ],
                "max_points": 40
              }
            ]
          },
          {
            "key": "ai_verify_loop",
            "band": "good",
            "name": "Verify loop (build / test / typecheck)",
            "note": null,
            "notes": [],
            "value": 82,
            "inputs": {
              "has_nix": false,
              "has_tests": true,
              "lockfiles": [
                "go.sum"
              ],
              "has_dockerfile": false,
              "typed_language": true,
              "bootstrap_files": [
                "Makefile",
                "mise.toml"
              ],
              "has_devcontainer": false,
              "has_linter_config": true,
              "typecheck_configs": [],
              "agent_commit_share": 0.5,
              "toolchain_manifests": [
                "go.mod"
              ],
              "dependency_bot_commit_share": 0
            },
            "components": [
              {
                "key": "one_command_bootstrap",
                "name": "One-command bootstrap",
                "detail": "Makefile, mise.toml",
                "points": 18,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": "Makefile, mise.toml"
                    }
                  }
                ],
                "max_points": 18
              },
              {
                "key": "automated_tests",
                "name": "Automated tests",
                "detail": null,
                "points": 22,
                "status": "met",
                "details": [],
                "max_points": 22
              },
              {
                "key": "lint_format_config",
                "name": "Lint / format config",
                "detail": ".golangci.yml",
                "points": 11,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": ".golangci.yml"
                    }
                  }
                ],
                "max_points": 11
              },
              {
                "key": "static_type_checking",
                "name": "Static type checking",
                "detail": "Go (statically typed)",
                "points": 11,
                "status": "met",
                "details": [
                  {
                    "code": "statically_typed_language",
                    "params": {
                      "language": "Go"
                    }
                  }
                ],
                "max_points": 11
              },
              {
                "key": "reproducible_environment",
                "name": "Reproducible environment",
                "detail": "lockfile",
                "points": 10,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": "lockfile"
                    }
                  }
                ],
                "max_points": 10
              },
              {
                "key": "demonstrated_agent_practice",
                "name": "Demonstrated agent practice",
                "detail": "46 of the last 92 commits agent-authored or agent-credited",
                "points": 10,
                "status": "met",
                "details": [
                  {
                    "code": "agent_authored_commits",
                    "params": {
                      "count": 46,
                      "sampled": 92
                    }
                  }
                ],
                "max_points": 10
              },
              {
                "key": "automated_maintenance",
                "name": "Automated maintenance",
                "detail": "no automated dependency updates observed",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "no_dependency_automation",
                    "params": {}
                  }
                ],
                "max_points": 8
              },
              {
                "key": "openssf_scorecard_pinned_dependencies",
                "name": "OpenSSF Scorecard: Pinned-Dependencies",
                "detail": "dependency not pinned by hash detected -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "ai_code_legibility",
            "band": "excellent",
            "name": "Code legibility for models",
            "note": null,
            "notes": [],
            "value": 97,
            "inputs": {
              "primary_language": "Go",
              "largest_source_bytes": 98178,
              "source_files_sampled": 17,
              "oversized_source_files": 1
            },
            "components": [
              {
                "key": "type_checkable_code",
                "name": "Type-checkable code",
                "detail": "Go (statically typed)",
                "points": 45,
                "status": "met",
                "details": [
                  {
                    "code": "statically_typed_language",
                    "params": {
                      "language": "Go"
                    }
                  }
                ],
                "max_points": 45
              },
              {
                "key": "manageable_file_sizes",
                "name": "Manageable file sizes",
                "detail": "1/17 source files over 60KB",
                "points": 51.8,
                "status": "partial",
                "details": [
                  {
                    "code": "oversized_source_files",
                    "params": {
                      "kb": 60,
                      "sampled": 17,
                      "oversized": 1
                    }
                  }
                ],
                "max_points": 55
              }
            ]
          }
        ],
        "description": "How well is the repo equipped to be developed and maintained with AI coding agents? An independent, experimental badge — weight 0.0, so it is surfaced on its own and does not affect the overall health score."
      }
    ],
    "metrics_version": "1.13.0"
  },
  "warnings": [
    "GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository"
  ],
  "report_type": "repository",
  "generated_at": "2026-07-22T07:24:05.665903Z",
  "schema_version": "0.26.0",
  "badge_url": "https://raw.githubusercontent.com/inspect-software/badges/main/v1/o/open-cli-collective/cpm.svg",
  "full_name": "open-cli-collective/cpm",
  "license_state": "standard",
  "license_spdx": "MIT"
}

评分是信号,而非担保。 评分反映的是 GitHub 上公开可见的实践——不是代码审计,也不是安全保证。

缺失数据将被剔除并重新归一化权重,绝不按零分计。方法论已版本化并公开:指标 v1.13.0、模式 v0.26.0—— 完整方法论 · 指标知识库.

单项结果在整体记录中的位置: 汇总统计Go.