rarebit-one / standard_id

来自 GitHub 依赖图的完整解析依赖集合：8 个直接依赖与 109 个间接（传递）软件包。仓库提交锁文件时，传递闭包才是完整的。

该仓库未发布可被索引解析的包，因此评估的是其自身的依赖图——共 111 个包，其中也包含从不交付的开发与测试版本固定：0 个存在已知公告，0 个为直接依赖。 有 6 个无法评估——没有已解析的版本、生态系统不受支持，或不在所列包清单之内。

没有已知公告影响已评估的依赖。

公告表示依赖图中记录的版本落入某条公告的受影响范围。可达性未经分析，且依赖图包含开发与测试的版本固定——某项发现可能只涉及工具链而非交付的软件。

{
  "data": {
    "repo": {
      "topics": [],
      "is_fork": false,
      "size_kb": 1384,
      "has_wiki": false,
      "homepage": null,
      "languages": {
        "CSS": 2004,
        "HTML": 184779,
        "Ruby": 1559503,
        "Shell": 19807,
        "Dockerfile": 454,
        "JavaScript": 876
      },
      "pushed_at": "2026-07-26T06:07:42Z",
      "created_at": "2025-08-30T14:42:49Z",
      "owner_type": "Organization",
      "updated_at": "2026-07-26T06:07:54Z",
      "description": "A comprehensive authentication engine for Rails applications",
      "is_archived": false,
      "is_disabled": false,
      "license_spdx": "MIT",
      "default_branch": "main",
      "license_spdx_raw": "MIT",
      "primary_language": "Ruby",
      "significant_languages": [
        "Ruby",
        "HTML"
      ]
    },
    "owner": {
      "blog": "https://rarebit.one",
      "name": "Rarebit One",
      "type": "Organization",
      "login": "rarebit-one",
      "company": null,
      "location": "Singapore",
      "followers": 0,
      "avatar_url": "https://avatars.githubusercontent.com/u/209064189?v=4",
      "created_at": "2025-04-25T04:33:12Z",
      "is_verified": null,
      "public_repos": 15,
      "account_age_days": 457
    },
    "license": {
      "state": "standard",
      "spdx_id": "MIT",
      "raw_spdx": "MIT",
      "file_present": true,
      "scorecard_found": true,
      "profile_has_license": true
    },
    "activity": {
      "releases": [
        {
          "tag": "v0.30.0",
          "kind": "minor",
          "published_at": "2026-07-26T06:07:52Z"
        },
        {
          "tag": "v0.29.1",
          "kind": "patch",
          "published_at": "2026-07-15T17:31:44Z"
        },
        {
          "tag": "v0.29.0",
          "kind": "minor",
          "published_at": "2026-07-14T18:30:03Z"
        },
        {
          "tag": "v0.28.0",
          "kind": "minor",
          "published_at": "2026-07-12T13:01:12Z"
        },
        {
          "tag": "v0.27.0",
          "kind": "minor",
          "published_at": "2026-07-03T03:20:22Z"
        },
        {
          "tag": "v0.26.4",
          "kind": "patch",
          "published_at": "2026-06-22T06:48:06Z"
        },
        {
          "tag": "v0.26.3",
          "kind": "patch",
          "published_at": "2026-06-15T05:41:38Z"
        },
        {
          "tag": "v0.26.2",
          "kind": "patch",
          "published_at": "2026-06-15T04:24:05Z"
        },
        {
          "tag": "v0.26.1",
          "kind": "patch",
          "published_at": "2026-06-15T02:00:24Z"
        },
        {
          "tag": "v0.26.0",
          "kind": "minor",
          "published_at": "2026-06-14T16:58:40Z"
        },
        {
          "tag": "v0.25.0",
          "kind": "minor",
          "published_at": "2026-06-13T05:47:52Z"
        },
        {
          "tag": "v0.24.0",
          "kind": "minor",
          "published_at": "2026-06-13T04:06:12Z"
        },
        {
          "tag": "v0.23.0",
          "kind": "minor",
          "published_at": "2026-06-11T16:22:54Z"
        },
        {
          "tag": "v0.22.0",
          "kind": "minor",
          "published_at": "2026-06-11T07:13:32Z"
        },
        {
          "tag": "v0.21.1",
          "kind": "patch",
          "published_at": "2026-06-11T06:08:39Z"
        },
        {
          "tag": "v0.21.0",
          "kind": "minor",
          "published_at": "2026-06-11T04:54:54Z"
        },
        {
          "tag": "v0.20.1",
          "kind": "patch",
          "published_at": "2026-05-27T05:37:41Z"
        },
        {
          "tag": "v0.20.0",
          "kind": "minor",
          "published_at": "2026-05-21T06:25:42Z"
        },
        {
          "tag": "v0.19.0",
          "kind": "minor",
          "published_at": "2026-05-20T06:26:12Z"
        },
        {
          "tag": "v0.18.0",
          "kind": "minor",
          "published_at": "2026-05-19T10:07:49Z"
        },
        {
          "tag": "v0.17.1",
          "kind": "patch",
          "published_at": "2026-05-07T09:09:37Z"
        },
        {
          "tag": "v0.17.0",
          "kind": "minor",
          "published_at": "2026-04-28T17:59:52Z"
        },
        {
          "tag": "v0.16.1",
          "kind": "patch",
          "published_at": "2026-04-19T13:32:13Z"
        },
        {
          "tag": "v0.16.0",
          "kind": "minor",
          "published_at": "2026-04-19T09:04:06Z"
        },
        {
          "tag": "v0.15.0",
          "kind": "minor",
          "published_at": "2026-04-18T09:49:58Z"
        },
        {
          "tag": "v0.14.4",
          "kind": "patch",
          "published_at": "2026-04-14T16:45:03Z"
        },
        {
          "tag": "v0.14.3",
          "kind": "patch",
          "published_at": "2026-04-02T13:13:33Z"
        },
        {
          "tag": "v0.14.2",
          "kind": "patch",
          "published_at": "2026-04-02T08:05:01Z"
        },
        {
          "tag": "v0.14.1",
          "kind": "patch",
          "published_at": "2026-03-28T15:10:12Z"
        },
        {
          "tag": "v0.14.0",
          "kind": "minor",
          "published_at": "2026-03-26T09:53:16Z"
        },
        {
          "tag": "v0.13.0",
          "kind": "minor",
          "published_at": "2026-03-26T03:41:08Z"
        },
        {
          "tag": "v0.12.0",
          "kind": "minor",
          "published_at": "2026-03-25T04:30:42Z"
        },
        {
          "tag": "v0.10.0",
          "kind": "minor",
          "published_at": "2026-03-24T15:34:37Z"
        },
        {
          "tag": "v0.9.0",
          "kind": "minor",
          "published_at": "2026-03-24T08:17:03Z"
        },
        {
          "tag": "v0.8.0",
          "kind": "minor",
          "published_at": "2026-03-23T00:51:10Z"
        },
        {
          "tag": "v0.7.1",
          "kind": "patch",
          "published_at": "2026-03-20T02:02:41Z"
        },
        {
          "tag": "v0.7.0",
          "kind": "minor",
          "published_at": "2026-03-19T16:07:17Z"
        },
        {
          "tag": "v0.6.0",
          "kind": "minor",
          "published_at": "2026-03-19T15:43:24Z"
        },
        {
          "tag": "v0.4.0",
          "kind": "minor",
          "published_at": "2026-03-12T06:49:46Z"
        },
        {
          "tag": "v0.3.2",
          "kind": "patch",
          "published_at": "2026-03-11T06:43:26Z"
        },
        {
          "tag": "v0.3.1",
          "kind": "patch",
          "published_at": "2026-03-10T16:24:17Z"
        },
        {
          "tag": "v0.3.0",
          "kind": "minor",
          "published_at": "2026-03-10T06:47:24Z"
        }
      ],
      "recent_commits": [
        {
          "oid": "e5b4ca396854caaf58037031510cfe69b1e33665",
          "body": null,
          "is_bot": false,
          "headline": "chore: Release v0.30.0 (#281)",
          "author_name": "Jaryl Sim",
          "author_login": "jaryl",
          "committed_at": "2026-07-26T06:07:21Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "80f1f24347c05bbdced65589fcb85a54f3d0fc38",
          "body": "…g (#280)\n\n`config.order = :random` was commented out, so CI ran in defined order and\nstayed green while asserting less than it appeared to. Under a random order,\nmain produced 8 failures from two process-global leaks:\n\n1. `clear_event_subscribers!` swapped the global\n   ActiveSupport::Notifications\n[…]\nutes.clear_all.\n\nTest-side only — no lib/ or app/ changes.\n\n\nClaude-Session: https://claude.ai/code/session_01Xz6LMYS8ummKG8JmzxfSBR\n\nCo-authored-by: Claude Opus 5 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "test: make the spec suite order-independent and enable random orderin…",
          "author_name": "Jaryl Sim",
          "author_login": "jaryl",
          "committed_at": "2026-07-26T03:59:46Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "ccbb5f29dbee22e1fc01482799dfff31f687feef",
          "body": "…sion.authenticate_by_token (#279)\n\nThree RFC-conformance gaps surfaced by the jump-CLI coverage audit. Both\nbehavioural ones are config-gated and default to the historical behaviour, so\nupgrading changes nothing until a deployment opts in.\n\n1. Token-endpoint redirect_uri leniency (RFC 6749 §4.1.3).\n[…]\n + CHANGELOG document both flags and the migration path.\n\n\nClaude-Session: https://claude.ai/code/session_01JiF1sPGAAKpy97mTevGQkw\n\nCo-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat(oauth): strict redirect_uri option, grant-scoped revocation, Ses…",
          "author_name": "Jaryl Sim",
          "author_login": "jaryl",
          "committed_at": "2026-07-22T10:11:06Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "e550600f61e78acb864362d0c7f50792b48044fc",
          "body": "`spec/lib/standard_id_spec.rb` set `config.use_inertia = true` on the\nprocess-global config and never reset it. It leaked harmlessly only because\n`::InertiaRails` is undefined in this suite, which is exactly what makes the\ngem impossible to test against the real inertia_rails: the moment the gem is\n\n[…]\na\n  blocker\n\nNo library code changes; test-harness only.\n\n\nClaude-Session: https://claude.ai/code/session_01JiF1sPGAAKpy97mTevGQkw\n\nCo-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "test: isolate the global StandardId config per example (#278)",
          "author_name": "Jaryl Sim",
          "author_login": "jaryl",
          "committed_at": "2026-07-22T10:10:31Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "39e536f292e4d3df1abd5d0700d6b886afdd941a",
          "body": "The file glob omitted CHANGELOG.md, so every standard_id release to date has\nshipped without one despite the file always existing in the repo — the only\ngem in the standard_* family missing it, and the flagship at that. The\ngemspec already advertises `changelog_uri`, so the metadata pointed at a\ndoc\n[…]\node change: lib/, app/, config/, and db/ are unaffected.\n\n\nClaude-Session: https://claude.ai/code/session_01TTsD6iFmmRADxk8jnwnUsB\n\nCo-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix(gemspec): ship CHANGELOG.md in the published gem (#277)",
          "author_name": "Jaryl Sim",
          "author_login": "jaryl",
          "committed_at": "2026-07-22T09:15:36Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "a6ed7bb6a4ef2e8aa75aaf69c21faf2efd4cf709",
          "body": "* chore(deps): bump the actions group with 3 updates\n\nBumps the actions group with 3 updates: [ruby/setup-ruby](https://github.com/ruby/setup-ruby), [github/codeql-action/init](https://github.com/github/codeql-action) and [github/codeql-action/analyze](https://github.com/github/codeql-action).\n\n\nUpd\n[…]\ncom>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>\nCo-authored-by: Jaryl Sim <code@jaryl.dev>\nCo-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": true,
          "headline": "chore(deps): bump the actions group with 3 updates (#276)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-07-20T07:52:48Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "d01b188e5ea6e269a3921f40e501a1340455fff3",
          "body": "Ships the post-authentication Inertia redirect fix (#274): signing in during\nan OAuth flow returned a 500 when config.use_inertia is on, because the three\npost-auth redirects handed an Inertia XHR a plain redirect_to into a\nnon-Inertia controller.\n\nCo-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "chore: Release v0.29.1 (#275)",
          "author_name": "Jaryl Sim",
          "author_login": "jaryl",
          "committed_at": "2026-07-15T17:30:11Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "846bf227c1dabc21654d90421dd524d5b481fd78",
          "body": "… (#274)\n\nAn Inertia XHR that follows a post-auth redirect keeps its X-Inertia\nheader. When the destination is not an Inertia controller, inertia_rails'\nmiddleware calls #inertia_configuration on it and raises NoMethodError —\na 500. Confirmed in production on jumpdrive-web's MCP OAuth sign-in:\n\n  No\n[…]\nunfixed code (303/302 instead of 409, plus\nUnsafeRedirectError on the deep-link paths).\n\n1915 examples, 0 failures. RuboCop clean.\n\nCo-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix(web): use redirect_with_inertia for post-authentication redirects…",
          "author_name": "Jaryl Sim",
          "author_login": "jaryl",
          "committed_at": "2026-07-15T17:20:18Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "b8037fa30d1890237edb7dbd23319a30fb8d3a7a",
          "body": "Date the changelog section for v0.29.0. version.rb (0.29.0) and Gemfile.lock\nwere already bumped in #272; this readies the changelog so release.yml can\nextract the release notes when the tag is pushed.\n\nCo-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "chore: Release v0.29.0 (#273)",
          "author_name": "Jaryl Sim",
          "author_login": "jaryl",
          "committed_at": "2026-07-14T18:29:23Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "52110e45626650876e42335488ca1ab74e430b74",
          "body": "…ts + login alias (#272)\n\nRelease v0.29.0. Four additive/bug-fix changes to the rate-limit layer; no\nhost-app config that works today breaks.\n\n1. GET redirect loop (live bug): the shared handler bounced every tripped\n   action to `request.path`. v0.28.0 shipped the first rate-limited GETs\n   (email/\n[…]\nw alias\n   and falls back to the old one. Mirrors max_attempts_per_challenge. Also\n   corrected the wrong \"API equivalents\" schema comment.\n\nFull suite green (1905 examples), rubocop + brakeman clean.",
          "is_bot": false,
          "headline": "fix(rate-limit): harden GET handling, Retry-After window, blank bucke…",
          "author_name": "Jaryl Sim",
          "author_login": "jaryl",
          "committed_at": "2026-07-14T18:16:51Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "b57defff3b9d5f04aeba42ccee420521e390e7c5",
          "body": "…#271)\n\nClient-side UX for the gem's native (ERB) passwordless login views,\nbenefiting the apps still on gem-rendered auth (nutripod-web,\nfundbright-web, luminality-web). Complements the server-side resend\ncooldown (passwordless.retry_delay) shipped in 0.28 — this is the\nprogressive-enhancement clie\n[…]\nthe guard markup and the countdown data-attribute\nwiring across configured retry_delay values.\n\nRefs rarebit-one/jumpdrive-web#322\n\nCo-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat(web): native login-form double-submit guard + resend countdown (…",
          "author_name": "Jaryl Sim",
          "author_login": "jaryl",
          "committed_at": "2026-07-14T06:07:12Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "5a930d06528ef0b66396f2bebe85c37b1964fcc9",
          "body": "Bumps the actions group with 2 updates: [github/codeql-action/init](https://github.com/github/codeql-action) and [github/codeql-action/analyze](https://github.com/github/codeql-action).\n\n\nUpdates `github/codeql-action/init` from 4.36.3 to 4.37.0\n- [Release notes](https://github.com/github/codeql-act\n[…]\npe: version-update:semver-minor\n  dependency-group: actions\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore(deps): bump the actions group with 2 updates (#270)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-07-13T04:32:16Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "989f97842be24b4d16ef7e0305923159e5af87bd",
          "body": "Co-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "chore: Release v0.28.0 (#269)",
          "author_name": "Jaryl Sim",
          "author_login": "jaryl",
          "committed_at": "2026-07-12T13:00:58Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "6b8fa9318970571387e0fed3ce188cae44d29972",
          "body": "…ldown (#268)\n\nCloses the last unthrottled auth endpoints so the whole surface is bounded:\n\n- reset_password/start: per-IP (10/hr) + per-target (3/15min) — email-flooding\n  and account-enumeration guard.\n- signup: per-IP (10/hr) — account-creation spam guard.\n- verify_email/confirm + verify_phone/co\n[…]\nword_reset_start_per_ip/_per_target, signup_per_ip.\nAll reuse the existing RateLimitStore + centralized 429 handler. 12 new specs.\n\nCo-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "Add rate limiting to remaining auth surfaces + enforce OTP-resend coo…",
          "author_name": "Jaryl Sim",
          "author_login": "jaryl",
          "committed_at": "2026-07-12T12:24:35Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "7eb7c245fd8a43a06e42d63a211b8351479cc2be",
          "body": "Add timeout-minutes to jobs that inherited GitHub's default 360-min (6h)\ncap, so a hung job can't silently burn up to 6h of billed runner minutes.\nCeilings are generous (well above observed runtimes, far below 360).\nConfig-only.\n\nCo-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "ci: cap runaway-hang timeouts on uncapped workflow jobs (#267)",
          "author_name": "Jaryl Sim",
          "author_login": "jaryl",
          "committed_at": "2026-07-09T09:40:59Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "b51e93c628ac7b95b178b0780db7af8a2ff6f93b",
          "body": "The /worktree skill was duplicated (and cosmetically drifted) across the\nstandard_* gems and web apps. It's generic — the full worktree procedure\nis already inlined in CLAUDE.md — so it's now a single workspace-level\nskill at the rarebit-one root, consumed the same way /publish-gem and\n/rollout-gem are. CLAUDE.md's /worktree reference now resolves to it.\n\nTooling only — no library code.\n\nCo-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "Remove local worktree skill; use workspace-level copy (#266)",
          "author_name": "Jaryl Sim",
          "author_login": "jaryl",
          "committed_at": "2026-07-08T05:14:54Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "44fdd708ea04bc4bd25d22bd669716203b82aa26",
          "body": "The publish-gem skill was duplicated (and drifted) across the standard_*\ngems. It's now a single workspace-level skill at the rarebit-one root,\nconsumed by all gems the same way /rollout-gem already is. This repo's\ncopy was the canonical (hardened) version that seeded the workspace one,\nso removing it here loses nothing — CLAUDE.md's /publish-gem reference\nnow resolves to the shared skill.\n\nTooling only — no library code.\n\nCo-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "Remove local publish-gem skill; use workspace-level copy (#265)",
          "author_name": "Jaryl Sim",
          "author_login": "jaryl",
          "committed_at": "2026-07-08T04:44:20Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "19491ead8c99be7e97bacd1d7d3b267fdd9ebf80",
          "body": "Bumps the actions group with 3 updates: [ruby/setup-ruby](https://github.com/ruby/setup-ruby), [github/codeql-action/init](https://github.com/github/codeql-action) and [github/codeql-action/analyze](https://github.com/github/codeql-action).\n\n\nUpdates `ruby/setup-ruby` from 1.315.0 to 1.316.0\n- [Rele\n[…]\npe: version-update:semver-patch\n  dependency-group: actions\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore(deps): bump the actions group with 3 updates (#264)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-07-06T04:28:06Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "8244c65ec3735172a68b7b5f87fd7fa3b67d5792",
          "body": "Co-authored-by: claude[bot] <209825114+claude[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore: weekly dependency maintenance (#263)",
          "author_name": "claude[bot]",
          "author_login": "claude[bot]",
          "committed_at": "2026-07-05T18:00:41Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "15797a866fbaa6a6f19d5301f80e0606344577c6",
          "body": "… + refresh rotation (#262)\n\nTests only — no behavior changes. Pins the seams left open by the 0.27.0\nRFC 8252 §7.3 loopback relaxation and the refresh-token rotation paths:\n\n- Loopback redirect_uri consistency at token time: authorize-time any-port\n  relaxation meets the strict string compare in Au\n[…]\nt (port ignored both directions), empty-path and\n  trailing-slash mismatches, and mixed loopback/non-loopback registrations\n  never cross-match.\n\nCo-authored-by: Claude Fable 5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "test(oauth): close token-flow coverage gaps around loopback redirects…",
          "author_name": "Jaryl Sim",
          "author_login": "jaryl",
          "committed_at": "2026-07-03T04:31:30Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "9fd80c10a548dacf5462b87f003f8f0df25466c6",
          "body": "… clients (#261)\n\nLoopback redirect URIs (http + 127.0.0.1/::1/localhost) now match on any\nport for public clients with require_pkce, since native apps bind an\nephemeral local port at authorization time. Host + path equality is still\nrequired (no 127.0.0.1 <-> localhost cross-match, per §8.3), schem\n[…]\n+host+port+path matching. Registration-time validation and the token\nendpoint's byte-for-byte redirect_uri check are unchanged.\n\nBump to 0.27.0.\n\nCo-authored-by: Claude Fable 5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat(oauth): RFC 8252 §7.3 loopback redirect matching for public PKCE…",
          "author_name": "Jaryl Sim",
          "author_login": "jaryl",
          "committed_at": "2026-07-03T03:18:12Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "cbf9f861dbb33750105795a34fa97a5824c80933",
          "body": "Supply-chain hardening: pin every third-party GitHub Action to a full\ncommit SHA (tags are mutable and can be repointed at malicious code).\nA .pinact.yaml keeps first-party (rarebit-one/*) and local (./) refs on\n@main/@vN so our own reusable workflows and composite actions still track\ntheir moving tags.\n\nCo-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "ci: SHA-pin third-party actions (pinact) + .pinact.yaml (#260)",
          "author_name": "Jaryl Sim",
          "author_login": "jaryl",
          "committed_at": "2026-07-01T03:30:20Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "67bbf9cc14095a94031dceb669af4e6390e013cf",
          "body": "Co-authored-by: claude[bot] <209825114+claude[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore: weekly dependency maintenance (#259)",
          "author_name": "claude[bot]",
          "author_login": "claude[bot]",
          "committed_at": "2026-06-29T17:21:43Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "498124777e9ad7e112745bc408e6516f756194cd",
          "body": "Adds an actions-language CodeQL analysis alongside the existing\nsource-code scan, harmonizing workflow-security coverage across the\nstandard_* gem family. Public repo, so CodeQL remains free.\n\nCo-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "ci: add CodeQL Actions-workflow scan (#258)",
          "author_name": "Jaryl Sim",
          "author_login": "jaryl",
          "committed_at": "2026-06-24T03:47:35Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "d6949de4e88b449f37b647e7ba4ac15843cddda2",
          "body": "jumpdrive-web (the renamed workspace-os control-plane app, GitHub repo\nrarebit-one/jumpdrive-web) consumes standard_id (~> 0.26.3) via its\ncontrol-plane/Gemfile. Add it to the Consumers list so it stays in sync\nwith the /rollout-gem consumer matrix.\n\nCo-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "docs: add jumpdrive-web to standard_id consumers (#257)",
          "author_name": "Jaryl Sim",
          "author_login": "jaryl",
          "committed_at": "2026-06-23T01:51:44Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "765178e7bb642601639d2bc5f8721ac7452c917a",
          "body": "Fixes WebEngine controller redirects dropping the mount script_name on\nnon-root mounts (#255).\n\nCo-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "chore: Release v0.26.4 (#256)",
          "author_name": "Jaryl Sim",
          "author_login": "jaryl",
          "committed_at": "2026-06-22T06:47:30Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "37a9693375f63a579ab8136b20861e3e059ebeeb",
          "body": "…#254)\n\nBumps the actions group with 1 update: [actions/checkout](https://github.com/actions/checkout).\n\n\nUpdates `actions/checkout` from 6 to 7\n- [Release notes](https://github.com/actions/checkout/releases)\n- [Commits](https://github.com/actions/checkout/compare/v6...v7)\n\n---\nupdated-dependencies:\n[…]\npe: version-update:semver-major\n  dependency-group: actions\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore(deps): bump actions/checkout from 6 to 7 in the actions group (…",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-06-22T06:43:41Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "0c03afa3a32ed9b3ff67396c6e876836f1f8858b",
          "body": "…e (#255)\n\n* fix(web): prefix WebEngine controller redirects with mount script_name\n\nIsolated-engine `_path` helpers are mount-relative, and `redirect_to` /\n`redirect_with_inertia` (unlike form_with/url_for view URL generation) don't\nprepend the mount's SCRIPT_NAME. On a non-root mount (e.g. WebEngi\n[…]\nbehaviour. Full suite: 1857 examples, 0 failures.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>\n\n---------\n\nCo-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix(web): prefix WebEngine controller redirects with mount script_nam…",
          "author_name": "Jaryl Sim",
          "author_login": "jaryl",
          "committed_at": "2026-06-22T06:28:45Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "3615f42c715edc22c64542040454619807afbc48",
          "body": "Co-authored-by: claude[bot] <209825114+claude[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore: weekly dependency maintenance (#253)",
          "author_name": "claude[bot]",
          "author_login": "claude[bot]",
          "committed_at": "2026-06-21T17:42:17Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "405dcbb815af0eaa2cd7f2ed40f895bdd63f1f88",
          "body": "Co-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "chore: drop Linear from worktree-skill naming guidance (#252)",
          "author_name": "Jaryl Sim",
          "author_login": "jaryl",
          "committed_at": "2026-06-18T13:12:57Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "af793c5bc9a38abae30544a8f50290f14590d733",
          "body": "Linear is being retired. Repoint the /start skill to source issues from\nthis gem's own GitHub Issues (rarebit-one/standard_id) via gh, replacing\nthe Linear MCP integration. Since code and issues share a repo, PRs can\nCloses #N to auto-close. Also drop the Linear-identifier worktree-naming\nhint in CLAUDE.md in favor of a task slug or date.\n\nCo-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "chore: repoint /start off Linear onto GitHub Issues (#251)",
          "author_name": "Jaryl Sim",
          "author_login": "jaryl",
          "committed_at": "2026-06-18T12:58:27Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "1234881fdf356d8cf06622de9ed01dfe62c7d88e",
          "body": "…(#250)",
          "is_bot": false,
          "headline": "ci: pass Slack token to gem-release reusable for #releases narration …",
          "author_name": "Jaryl Sim",
          "author_login": "jaryl",
          "committed_at": "2026-06-18T12:33:45Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "a86989d180d883c1597541310b53f779c1321236",
          "body": "* ci: add dependabot auto-lander caller\n\n* ci: fix auto-lander caller to reference rarebit-one/.github reusable",
          "is_bot": false,
          "headline": "ci: add dependabot auto-lander caller (#249)",
          "author_name": "Jaryl Sim",
          "author_login": "jaryl",
          "committed_at": "2026-06-18T08:44:49Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "697d8f2d6eaf62affeb7f5def56ffef332474351",
          "body": "Co-authored-by: claude[bot] <209825114+claude[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore: weekly dependency maintenance (#243)",
          "author_name": "claude[bot]",
          "author_login": "claude[bot]",
          "committed_at": "2026-06-15T12:44:03Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "097252b93e79440f9996aa03db93e966098c9df3",
          "body": "The web authentication guard (require_browser_session!) raises\nNotAuthenticatedError / InvalidSessionError (missing / expired / revoked\nsession) instead of redirecting. The API base controller rescued these;\nthe web base controller did not — so an unauthenticated request to a\nprotected web page (e.g\n[…]\n bouncing\nto login. The web base controller now rescues both and redirects to the\nlogin page, preserving the original destination.\n\nCo-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix(web): rescue auth errors so protected pages redirect, not 500 (#248)",
          "author_name": "Jaryl Sim",
          "author_login": "jaryl",
          "committed_at": "2026-06-15T05:31:37Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "e8b14204cc9c4e8d2dbffc0d5dced7db82d8f55c",
          "body": "The built-in mailers pass the OTP code (PasswordlessMailer) and reset URL\n(PasswordResetMailer) as mailer params. deliver_later serializes those as\nthe delivery job's arguments, and ActiveJob's log subscriber prints job\narguments in plaintext on enqueue/perform — leaking live OTP codes into\nthe appl\n[…]\nMailer::MailDeliveryJob with log_arguments = false), so the\narguments stay out of the log stream. Delivery behaviour is unchanged.\n\nCo-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix(mailers): keep OTP codes / reset tokens out of the logs (#247)",
          "author_name": "Jaryl Sim",
          "author_login": "jaryl",
          "committed_at": "2026-06-15T02:55:06Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "d237b56366321c68fcbe14ef7353ad301f9af85e",
          "body": "…#246)\n\nTwo hardening fixes for the (unreleased) 0.26.1, surfaced by a blackbox\ntest of an HS256 deploy:\n\n- OAuth/OIDC metadata advertised jwks_uri unconditionally, but with\n  symmetric (HS*) signing there are no public keys and the JWKS endpoint\n  returns 404 — a dead URL. Advertise jwks_uri only w\n[…]\nokies.delete(:session_token)` instead. The token-bearing sign-in write\n  was already httponly: true, so this is a consistency fix.\n\nCo-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix(oauth,web): conditional jwks_uri + clean session_token deletion (…",
          "author_name": "Jaryl Sim",
          "author_login": "jaryl",
          "committed_at": "2026-06-15T01:49:26Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "1bbf2e029c09c2d2da934471db048626a5b254b8",
          "body": "Two passwordless WebEngine fixes for 0.26.1:\n\n- login_verify OTP input now derives maxlength from config.passwordless.code_length (was hardcoded 6, truncating 8-digit codes).\n- Rate-limit handler no longer 500s on hosts without a root route (or with a cross-origin Referer); it redirects to the form's own path instead of request.referer || main_app.root_path.",
          "is_bot": false,
          "headline": "fix(passwordless): OTP input maxlength + WebEngine rate-limit 500 (#245)",
          "author_name": "Jaryl Sim",
          "author_login": "jaryl",
          "committed_at": "2026-06-14T18:30:39Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "54944a3614b7002669c51804894ae0ee705b4369",
          "body": "* feat(passwordless): make bypass-code production guard pluggable\n\nThe bypass-code guard hard-checked Rails.env.production?, so apps that\ndistinguish a physical deploy environment from RAILS_ENV (a staging box\nstill running RAILS_ENV=production) had no way to enable a bypass code on\nstaging without \n[…]\nSame patch the other\nworkspace apps already took.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>\n\n---------\n\nCo-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat(passwordless): make bypass-code production guard pluggable (#244)",
          "author_name": "Jaryl Sim",
          "author_login": "jaryl",
          "committed_at": "2026-06-14T16:47:59Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "15f78bd7aeed75609ef521cf56e428de258c068a",
          "body": "The encrypted session_token cookie was written as a bare session cookie\n(no expires/Max-Age), so it was cleared on full browser close — logging\nusers out well before their BrowserSession#expires_at. Write it with an\nexplicit expires tied to the session's expires_at, plus httponly, secure\n(following \n[…]\nrowser.\nhttponly does not affect Action Cable, which reads the cookie server-side\n(cable auth spec still green).\n\nBumps to 0.24.0.\n\nCo-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat: Persist browser session cookie across browser restarts (#242)",
          "author_name": "Jaryl Sim",
          "author_login": "jaryl",
          "committed_at": "2026-06-13T05:47:18Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "da532864492dabf359a198ea2531b2e0969b951d",
          "body": "* feat(oauth): public-client (PKCE) authorization_code token exchange\n\nPublic clients (native/SPA/MCP per RFC 8252 / OAuth 2.1) can now exchange an\nauthorization code for tokens using PKCE alone, with no client_secret. The\nauthorization_code flow previously demanded a client_secret unconditionally,\n\n[…]\nhe accumulated [Unreleased]\nentries under 0.24.0.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>\n\n---------\n\nCo-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "Release v0.24.0: public-client OAuth + consent Inertia redirect (#241)",
          "author_name": "Jaryl Sim",
          "author_login": "jaryl",
          "committed_at": "2026-06-13T04:05:32Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "07c2eb5a8a5005f1369cfaf694b1c757c8fe1fbc",
          "body": "Co-authored-by: Claude Fable 5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "chore: Release v0.23.0 (#240)",
          "author_name": "Jaryl Sim",
          "author_login": "jaryl",
          "committed_at": "2026-06-11T16:19:34Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "d6814550459230cd14948b901787d33eee7ff86e",
          "body": "Since 0.16.0 the event fired only from the web callback; on\nPOST /api/oauth/callback/:provider an infrastructure-level provider\nfailure (OAuthError from the provider call) fell through to the\nstandard handle_oauth_error JSON response without emitting, so host\napps observing provider outages via the \n[…]\ner in the flow (SocialLinkError, InvalidRequestError, ...)\nare policy/client errors and still do not emit. The JSON error\nresponse is unchanged.\n\nCo-authored-by: Claude Fable 5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix(social): emit SOCIAL_AUTH_FAILED on the API callback path too (#239)",
          "author_name": "Jaryl Sim",
          "author_login": "jaryl",
          "committed_at": "2026-06-11T16:14:31Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "ff746b8b4ed20a32ddb37ba2a990ca89621a0721",
          "body": "New rate_limits.api_token_per_audience_per_ip config (Hash of\naudience => max requests per IP per 15 minutes, default {}) so hosts\ncan tighten the cap for higher-risk audiences while internal/partner\naudiences keep the global api_token_per_ip ceiling.\n\nImplemented as an explicit before_action counte\n[…]\ngured audience increment that audience's\nper-IP counter; exceeding the cap renders the standard\nrate_limit_exceeded JSON error with Retry-After.\n\nCo-authored-by: Claude Fable 5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat(rate-limits): per-audience token rate limits at /oauth/token (#238)",
          "author_name": "Jaryl Sim",
          "author_login": "jaryl",
          "committed_at": "2026-06-11T15:48:01Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "a390391741a1a9f077d0358894d2ef48ec7aeb4b",
          "body": "…f toggle (0.22.0) (#237)\n\n* feat(oauth): RFC 7591 dynamic client registration behind a default-off toggle (0.22.0)\n\nAdd a Dynamic Client Registration endpoint (POST /oauth/register) gated on a\nnew, default-off config toggle. An open, unauthenticated registration endpoint\nis state-mutating attack su\n[…]\nods are accepted and work at the token endpoint).\nSpec asserts the echo-back.\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>\n\n---------\n\nCo-authored-by: Claude Fable 5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat(oauth): RFC 7591 dynamic client registration behind a default-of…",
          "author_name": "Jaryl Sim",
          "author_login": "jaryl",
          "committed_at": "2026-06-11T07:13:04Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "86c179b2bb90ba49d90e8e55f18b9c2878fb543f",
          "body": "…es (0.21.1) (#236)\n\nThe packaged ERB login view rendered an unconditional \"Sign up\" link (both the\npasswordless and password branches) and a \"Forgot password?\" link (password\nbranch). An app that disables those features (web.signup = false /\nweb.password_reset = false) thus showed links to routes t\n[…]\n\nSpecs assert the signup link is hidden when signup is off and shown when on,\nand the forgot-password link is hidden when password_reset is off.\n\nCo-authored-by: Claude Fable 5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix(web): gate login-view signup + forgot-password links on web toggl…",
          "author_name": "Jaryl Sim",
          "author_login": "jaryl",
          "committed_at": "2026-06-11T06:07:47Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "b4d7d3d0753a1fdaaa2c4a15dc0e9b53140079fc",
          "body": "…s ERB view + consent view (0.21.0) (#235)\n\n* feat(oauth): RFC 8414 + PKCE advert + optional audience + passwordless ERB view + consent view (0.21.0)\n\nPhase 1 of the upstream OAuth/OIDC + MCP-compatibility work:\n\n- A: audience is now OPTIONAL at the authorization-code /authorize (moved\n  :audience e\n[…]\nscope_list call in\nConsentController#show (consent_props now reuses @scopes).\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>\n\n---------\n\nCo-authored-by: Claude Fable 5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat(oauth): RFC 8414 + PKCE advert + optional audience + passwordles…",
          "author_name": "Jaryl Sim",
          "author_login": "jaryl",
          "committed_at": "2026-06-11T04:53:52Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "1af60f7ba2733bb0d367021f5a1c99f0ec917228",
          "body": "Co-authored-by: claude[bot] <209825114+claude[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore: weekly dependency maintenance (#233)",
          "author_name": "claude[bot]",
          "author_login": "claude[bot]",
          "committed_at": "2026-06-08T13:36:52Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "4446b0dd552874cbb51adaf6f5d00b4bf2451e3f",
          "body": "Bumps the actions group with 1 update: [github/codeql-action](https://github.com/github/codeql-action).\n\n\nUpdates `github/codeql-action` from 4.36.0 to 4.36.2\n- [Release notes](https://github.com/github/codeql-action/releases)\n- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG\n[…]\npe: version-update:semver-patch\n  dependency-group: actions\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore(deps): bump github/codeql-action in the actions group (#234)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-06-08T13:35:32Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "a84354005728101c3d35f6c9296b40f670a68507",
          "body": "Rename the license file to the canonical `LICENSE` filename with the\ntitled MIT text so GitHub detects and displays the license, and update\nthe gemspec files glob to match. The gem already declared MIT in its\ngemspec; this aligns the repo metadata with that intent.\n\nCo-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "chore: normalize license file to LICENSE (MIT) (#232)",
          "author_name": "Jaryl Sim",
          "author_login": "jaryl",
          "committed_at": "2026-06-04T05:14:09Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "50a18b7d3d9061ae4413d130c386b99824a13eab",
          "body": "Co-authored-by: claude[bot] <209825114+claude[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore: weekly dependency maintenance (#229)",
          "author_name": "claude[bot]",
          "author_login": "claude[bot]",
          "committed_at": "2026-06-01T17:36:52Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "4217d317c84a897574f8052ef2eef033d146df24",
          "body": "Bumps the actions group with 2 updates: [github/codeql-action](https://github.com/github/codeql-action) and [rarebit-one/.github/.github/workflows/reusable-gem-release.yml](https://github.com/rarebit-one/.github).\n\n\nUpdates `github/codeql-action` from 4.35.5 to 4.36.0\n- [Release notes](https://githu\n[…]\npe: version-update:semver-major\n  dependency-group: actions\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore(deps): bump the actions group with 2 updates (#230)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-06-01T17:36:32Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "7b6d91f79151d2c98f23a85cd1819eca36920a4a",
          "body": "Rails edge refactored ActionCable::Connection::Base to accept a socket\nobject (responding to #logger, #request, #env) as its second constructor\nargument instead of the raw Rack env Hash. The cable_authentication spec\npassed `env` directly, so the rails-edge canary failed with\n`undefined method 'logg\n[…]\n that constant is\navailable (edge), falling back to the env Hash on released Rails. Behavior\non stable Rails (8.1.3) is unchanged.\n\nCo-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "test(cable): support edge ActionCable socket constructor (#231)",
          "author_name": "Jaryl Sim",
          "author_login": "jaryl",
          "committed_at": "2026-06-01T17:31:02Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "d56db753af9a4a84ca1dfd2a73deffffcdcb2ec8",
          "body": "Adds ready_for_review to the Claude-review trigger so a PR opened as a\ndraft and later marked ready gets reviewed. Draft skipping itself is\nhandled centrally in the org reusable claude-code-review.yml.",
          "is_bot": false,
          "headline": "ci: review PRs when marked ready (ready_for_review trigger) (#228)",
          "author_name": "Jaryl Sim",
          "author_login": "jaryl",
          "committed_at": "2026-05-27T16:10:45Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "147ad273d32691eb38010bdbc242822eeebd10c0",
          "body": "standard_id's test bundle pinned standard_id-apple/-google ~> 0.2.0,\nwhose published 0.2.0 capped jwt at ~> 2.7 (the vulnerable 2.10.3). Bump\nthe test deps to apple ~> 0.4.0 / google ~> 0.3.0 (both allow jwt < 4) so\njwt resolves to 3.2.0. gemspec already allows jwt >= 2.7, < 4 so this is\na lockfile/dev-dep change; bundler-audit clean. Clears the repo's open jwt\nDependabot alert.\n\nCo-authored-by: Claude Opus 4.7 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix(deps): bump jwt 2.10.3->3.2.0 in dev bundle (CVE-2026-45363) (#227)",
          "author_name": "Jaryl Sim",
          "author_login": "jaryl",
          "committed_at": "2026-05-27T06:08:52Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "f7caf2cb4de5a3181268d143f7fdc50c410210a0",
          "body": "* chore(ci): bump weekly-maintenance reusable workflow to @v2\n\nCo-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>\n\n* fix(ci): grant security-events: read to weekly-maintenance caller\n\nThe caller's permissions cap the reusable workflow's token; without\nsecurity-events: read the @v2 \n[…]\nrt zero alerts. Addresses Claude review feedback.\n\nCo-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>\n\n---------\n\nCo-authored-by: Claude Opus 4.7 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "chore(ci): bump weekly-maintenance reusable workflow to @v2 (#226)",
          "author_name": "Jaryl Sim",
          "author_login": "jaryl",
          "committed_at": "2026-05-27T05:00:48Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "b746d03d33836af71b2c505509088cca21669133",
          "body": "Enables CodeQL static analysis for Ruby on push/PR to main plus a\nweekly schedule, matching the workflow already used in standard_circuit.\n\nCo-authored-by: Claude Opus 4.7 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "chore(ci): add CodeQL code scanning workflow (#225)",
          "author_name": "Jaryl Sim",
          "author_login": "jaryl",
          "committed_at": "2026-05-26T16:28:53Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "2b9dd26f360bc8c2cc95260a7de25ad9f7466706",
          "body": "Co-authored-by: claude[bot] <209825114+claude[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore: weekly dependency maintenance (#223)",
          "author_name": "claude[bot]",
          "author_login": "claude[bot]",
          "committed_at": "2026-05-24T09:36:32Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "0bcbb1ca3d09aba1536c5828cf318dc9422cecc3",
          "body": "…in safety fixes (0.20.1) (#224)\n\n* fix: forward redirect_uri into after_sign_in context; harden redirect chain\n\nExpose :redirect_uri in the after_sign_in context for all four sign-in\nflows (password, signup, social callback, passwordless OTP verify).\nHost hooks can now return nil when context[:redi\n[…]\nhare the same session source.\n\n- Cosmetic: remove double blank line in providers_controller.rb introduced\n  by the previous sweep.\n\nCo-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix: forward redirect_uri into after_sign_in context + 6 redirect-cha…",
          "author_name": "nhatle305",
          "author_login": "nhatle305",
          "committed_at": "2026-05-24T06:56:08Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "ee8f98017fe9bf08f9a456ee9dc481e1a4955400",
          "body": "Dependabot's Ruby tool support caps at 3.4.8, so the bundler ecosystem\nhas failed weekly since the Ruby 4.x migration (#195). Weekly Maintenance\n(#199) already covers bundler updates, so this entry is redundant noise.\n\nCo-authored-by: Claude Opus 4.7 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "ci: drop dependabot bundler ecosystem (unsupported on Ruby 4.x) (#211)",
          "author_name": "Jaryl Sim",
          "author_login": "jaryl",
          "committed_at": "2026-05-21T07:23:22Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "5326d7feaeabc0782f2978498267a5a8146a0926",
          "body": "…ISSUED (#222)\n\n* feat(oauth)!: fail closed on audience-profile binding at mint + enrich OAUTH_TOKEN_ISSUED\n\nToken mint previously only validated `aud ∈ allowed_audiences`; it did not\nverify the account held a profile of the type bound to that audience via\n`c.oauth.audience_profile_types`. When no m\n[…]\ng!,\n  emit_token_issuing, claim_resolvers_context, emit_token_issued).\n  Uses `defined?` so a nil result is cached too.\n\n---------\n\nCo-authored-by: Claude Opus 4.7 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "Fail closed on audience-profile binding at mint + enrich OAUTH_TOKEN_…",
          "author_name": "Jaryl Sim",
          "author_login": "jaryl",
          "committed_at": "2026-05-21T06:09:07Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "04e0034382a069a53bd567180f5f8ca9b9006e2f",
          "body": "Tracks the Ruby 4.0.4 app-side bump now landing across the\nconsuming Rails apps.",
          "is_bot": false,
          "headline": "chore(ci): add Ruby 4.0.4 to test matrix (#221)",
          "author_name": "Jaryl Sim",
          "author_login": "jaryl",
          "committed_at": "2026-05-21T03:23:05Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "fd418eed1a6c3c49e9bf2eed8db1f873b94a0d36",
          "body": "The Linear-fallback feature opens issues for risky/judgment-call findings\nduring the weekly maintenance run. In practice it hasn't been a useful\nsignal, so dropping the opt-in across all apps and gems and removing the\nnow-unused LINEAR_API_KEY pass-through.\n\nReusable workflow defaults linear-fallback to false; with it disabled the\nLinear MCP server isn't configured and findings are reported only in the\nrun output.",
          "is_bot": false,
          "headline": "chore(ci): remove linear-fallback opt-in from weekly maintenance (#220)",
          "author_name": "Jaryl Sim",
          "author_login": "jaryl",
          "committed_at": "2026-05-20T02:04:15Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "8c9120d8f6ee77ee99e68ab1b616c496661003fb",
          "body": "…subscribers (#218)\n\nThe API OAuth callback controller (used by mobile/native clients via\nPOST /v1/oauth/callback/:provider) previously called run_social_callback\nwithout original_request_params, so host-app subscribers always received\nan empty hash.\n\nAdd forwarded_request_params: strip the 13 reser\n[…]\npps can\nnow include UTM params, experience slugs, or deep-link metadata in the\nPOST body and consume them in SOCIAL_AUTH_COMPLETED subscribers.\n\nCo-authored-by: Claude Opus 4.7 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat(api): forward non-OAuth request params to SOCIAL_AUTH_COMPLETED …",
          "author_name": "nhatle305",
          "author_login": "nhatle305",
          "committed_at": "2026-05-20T00:54:54Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "9e493057427a474ee2e2fc15ce16f259f4893953",
          "body": "* chore(deps): allow jwt 3.x (relax `~> 2.7` to `>= 2.7, < 4`)\n\nThe `jwt` 2.x branch has a GHSA security advisory; the lowest\nnon-vulnerable version is 3.2.0. The previous `~> 2.7` pin blocks\nconsumers (e.g. sidekick-web) from completing dependabot's security\nupdate — `security_update_not_possible` \n[…]\nlgorithm).map(&:to_s)`) before handing it to JWT.\n\nCo-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>\n\n---------\n\nCo-authored-by: Claude Opus 4.7 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "chore(deps): allow jwt 3.x (relax `~> 2.7` to `>= 2.7, < 4`) (#219)",
          "author_name": "Jaryl Sim",
          "author_login": "jaryl",
          "committed_at": "2026-05-19T09:50:48Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "113962bc2c25335ace12cf5c36ff61ddc82c498a",
          "body": "Co-authored-by: claude[bot] <209825114+claude[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore: weekly dependency maintenance (#217)",
          "author_name": "claude[bot]",
          "author_login": "claude[bot]",
          "committed_at": "2026-05-18T06:02:42Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "303e0672c726c696557add7dc1bcc88d9db30aed",
          "body": "…commit (#216)\n\nThe release PR for v0.17.0 needed a follow-up `chore: sync Gemfile.lock`\ncommit because `bundle install` after the version bump didn't actually\nrewrite the lockfile (no other resolution changes + possibly local\n`bundle config set frozen true`). CI then failed the next release\n(v0.17.\n[…]\nn, fall back to `BUNDLE_FROZEN=false bundle lock` if\nabsent, and abort the publish if the lockfile still doesn't reflect the\nbump.\n\nCo-authored-by: Claude Opus 4.7 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "chore(publish-gem): verify Gemfile.lock picked up new version before …",
          "author_name": "Jaryl Sim",
          "author_login": "jaryl",
          "committed_at": "2026-05-16T07:02:43Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "efab7df75e3ea921805e6b3493915df62624d89e",
          "body": "Follows up the workspace-wide hook harmonization that landed across\nrarebit-one with three Tier 2 polish items flagged consistently by the\nClaude Code Review bot during the harmonization PR series:\n\n1. enforce-signed-commits.sh — also detect SKIP_SIGNED_COMMITS_HOOK=1\n   as an inline command prefix,\n[…]\nED_COMMITS_HOOK=1 git commit:*) to\n   the allow list so the new inline-prefix escape hatch doesn't trigger a\n   permission prompt.\n\nCo-authored-by: Claude Opus 4.7 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "chore: harden Claude Code hook scripts (Tier 2) (#215)",
          "author_name": "Jaryl Sim",
          "author_login": "jaryl",
          "committed_at": "2026-05-13T06:06:15Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "11befc1f4208e3213c428b1735a95bda09f2efa4",
          "body": "Adds enforce-signed-commits.sh and pre-push-prepare.sh to standard_id's\nper-project hook set, bringing it to parity with sidekick-labs projects\nand luminality-web.\n\n- enforce-signed-commits.sh: auto-injects -S into `git commit` so commits\n  always land signed (with explicit env/flag opt-outs for eme\n[…]\nces that the new hook's escape hatches expect.\n\nPart of a workspace-wide harmonization pass between rarebit-one and\nsidekick-labs.\n\nCo-authored-by: Claude Opus 4.7 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "chore: harmonize Claude Code hooks with sidekick-labs (#214)",
          "author_name": "Jaryl Sim",
          "author_login": "jaryl",
          "committed_at": "2026-05-13T05:07:15Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "7a3b40b9caf99fcc756949087958e1e439218bec",
          "body": "Lead with the gem name in backticks (consistent with other producers\nin the workspace) and qualify \"workspace\" with \"rarebit-one\" for\nclarity. No content changes.\n\nCo-authored-by: Claude Opus 4.7 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "docs: harmonize Consumers intro wording (#213)",
          "author_name": "Jaryl Sim",
          "author_login": "jaryl",
          "committed_at": "2026-05-12T17:24:43Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "e1b37782a3c6c1f9da5cd96269ca0b49ef59bd93",
          "body": "* docs: add Consumers section to CLAUDE.md\n\nDocuments which workspace apps consume this gem. The canonical\nconsumer matrix lives in the workspace-level /rollout-gem skill.\n\nCo-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>\n\n* review: simplify Consumers section per bot feedback\n\n- \n[…]\n-gem skill's SKILL.md; this section is a summary.\n\nCo-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>\n\n---------\n\nCo-authored-by: Claude Opus 4.7 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "docs: add Consumers section to CLAUDE.md (#212)",
          "author_name": "Jaryl Sim",
          "author_login": "jaryl",
          "committed_at": "2026-05-12T16:53:32Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "ce1cef80b0c77ee4deade70f9412c355e9fe944e",
          "body": "Rebased after #209 merged. Remaining updates:\n\n- action_text-trix 2.1.18 → 2.1.19\n- rubocop-rails 2.34.3 → 2.35.0\n\nCo-authored-by: Jaryl Sim <code@jaryl.dev>\nCo-authored-by: Claude Opus 4.7 (1M context) <noreply@anthropic.com>",
          "is_bot": true,
          "headline": "chore: weekly dependency maintenance (#210)",
          "author_name": "claude[bot]",
          "author_login": "claude[bot]",
          "committed_at": "2026-05-11T04:44:32Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "adcb56379eb05a8e30fdea075d059ac430d5ce84",
          "body": "Co-authored-by: claude[bot] <209825114+claude[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore: weekly dependency maintenance (#209)",
          "author_name": "claude[bot]",
          "author_login": "claude[bot]",
          "committed_at": "2026-05-11T04:33:54Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "bef843cbea84f853a9ab353e6ebfe19060fd334a",
          "body": "The reusable workflow at rarebit-one/.github declares id-token: write\nplus contents/pull-requests writes at the job level, but a caller's\nworkflow-level permissions block is the upper bound. With permissions: {}\non the caller, those requests get capped to zero — historically a\nruntime OIDC failure, more recently a startup_failure\n(\"workflow file issue\") that prevents the workflow from dispatching.\n\nMirrors rarebit-one/fundbright-web#537.",
          "is_bot": false,
          "headline": "ci: grant weekly-maintenance the permissions the reusable needs (#208)",
          "author_name": "Jaryl Sim",
          "author_login": "jaryl",
          "committed_at": "2026-05-08T09:08:15Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "88c9de6a68cc296b266f978a91f58126bc3ef1ae",
          "body": "Bumps VERSION to 0.17.1 and stamps CHANGELOG with the unreleased entry\nunder [0.17.1] - 2026-05-07.\n\nPatch release: single bug fix (#206) — Otp.issue(delivery: :manual)\nno longer double-delivers when c.passwordless.delivery == :built_in.\n\nCo-authored-by: Claude Opus 4.7 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "chore: release v0.17.1 (#207)",
          "author_name": "Jaryl Sim",
          "author_login": "jaryl",
          "committed_at": "2026-05-07T09:08:46Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "11ebfa6f9dfa97b71c31f30f997fab38551827d1",
          "body": "…ilt_in (#206)\n\n`StandardId::Otp.issue(delivery: :manual)` is documented as \"skip\ndelivery entirely; the raw code is returned on the result so the caller\ncan deliver it however they like.\" `BaseStrategy#start!` honored this\nfor the legacy `sender_callback` path (`unless skip_sender`), but it\nemitted\n[…]\n The new `Otp` context resets the fanout via\n`clear_event_subscribers!` to keep enqueue counts deterministic across\ntest ordering.\n\nCo-authored-by: Claude Opus 4.7 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix(otp): honor delivery: :manual when c.passwordless.delivery is :bu…",
          "author_name": "Jaryl Sim",
          "author_login": "jaryl",
          "committed_at": "2026-05-07T08:54:08Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "ca733703d1cca82dcabfc8ac15bd84d22e3cb28e",
          "body": "* chore: release v0.17.0\n\nBump VERSION to 0.17.0 and stamp CHANGELOG with the unreleased entries\nunder [0.17.0] - 2026-04-29.\n\nHeadline: BREAKING — drops Ruby < 4.0; widens Rails to >= 8.0;\nStandardConfig replaced with ActiveSupport::OrderedOptions backend;\nrelease workflow migrated to rarebit-one/.\n[…]\n.\n\nCo-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>\n\n* chore: sync Gemfile.lock with version 0.17.0\n\n---------\n\nCo-authored-by: Claude Opus 4.7 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "Release 0.17.0 (#205)",
          "author_name": "Jaryl Sim",
          "author_login": "jaryl",
          "committed_at": "2026-04-28T17:14:09Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "9b6292cf3b7ac47a9a35cb62730ec650ea537d46",
          "body": "The inline `test` aggregator added in #195 had a footgun the Claude review\non rarebit-one/.github#6 caught later: when any `test-matrix` leg fails,\nthe aggregator gets *skipped* (because `needs:` defaults to \"run only on\nsuccess\"), and GitHub branch protection's behaviour on skipped checks is\nambigu\n[…]\nls → test-matrix=failure → aggregator FAILS, blocks PR ✅\n- Matrix is skipped (lint-only mode, not used here) → aggregator passes ✅\n\nCo-authored-by: Claude Opus 4.7 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix(ci): fail (don't skip) test aggregator when matrix legs fail (#204)",
          "author_name": "Jaryl Sim",
          "author_login": "jaryl",
          "committed_at": "2026-04-28T06:18:20Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "40b1b687ddff8caff746006054a1be3cac57f4fb",
          "body": "* ci: expand Ruby matrix to all 4.x versions\n\nAdd a Ruby version matrix to the test job covering all four published\n4.x patch versions (4.0.0, 4.0.1, 4.0.2, 4.0.3). Pin lint job to 4.0.3.\n\nCo-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>\n\n* build: require Ruby >= 4.0 in gemspec\n\n\n[…]\nser` bump) so the lint job can run on Ruby 4.0.3.\n\nCo-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>\n\n---------\n\nCo-authored-by: Claude Opus 4.7 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "build: target Ruby 4.x (BREAKING: drop < 4.0) (#195)",
          "author_name": "Jaryl Sim",
          "author_login": "jaryl",
          "committed_at": "2026-04-28T01:12:42Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "afe40bf0582ab57bd9b3a0c3cae1f97c18eb90e7",
          "body": "Without a `concurrency:` block, a manual `workflow_dispatch` while a\nscheduled cron run is in-flight would spawn a second parallel job,\npotentially racing on the maintenance branch and leaving a half-open PR.\n\nAdds `concurrency.group: weekly-maintenance-${{ github.repository }}`\nwith `cancel-in-progress: false` so the in-flight run completes rather\nthan getting cancelled mid-PR. Follow-up to #199.\n\nCo-authored-by: Claude Opus 4.7 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "ci: add concurrency guard to weekly-maintenance (#202)",
          "author_name": "Jaryl Sim",
          "author_login": "jaryl",
          "committed_at": "2026-04-27T17:24:53Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "241890808adff00ec7c54bce0fb68595cd60098a",
          "body": "Replaces the per-gem release.yml with a thin shim that calls into\nrarebit-one/.github's reusable-gem-release.yml (pinned at @v1).\nRelease Ruby remains 4.0.1.\n\nci.yml is intentionally NOT migrated in this PR. Open PRs #195\n(Ruby 4.x bump) and #200 (Rails edge canary) both modify ci.yml,\nand migrating now would conflict with them. CI migration will be\na follow-up once those land.\n\nCo-authored-by: Claude Opus 4.7 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "chore(ci): migrate release.yml to reusable-gem-release@v1 (#201)",
          "author_name": "Jaryl Sim",
          "author_login": "jaryl",
          "committed_at": "2026-04-27T17:24:49Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "9f5f29330e8bd9c7d42be83a8921e1e82f1cdfe5",
          "body": "* ci: add non-blocking Rails edge canary job\n\nFollow-up to #197 (`>= 8.0` Rails constraint). Adds a `test (rails-edge)`\njob that runs the spec suite against `rails/rails@main` on every PR so\nupstream breakage surfaces during development rather than at a host app's\n`bundle update` after a Rails 9 rel\n[…]\n}` artifacts when both jobs fail on the\nsame run.\n\nCo-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>\n\n---------\n\nCo-authored-by: Claude Opus 4.7 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "ci: add non-blocking Rails edge canary job (follow-up to #197) (#200)",
          "author_name": "Jaryl Sim",
          "author_login": "jaryl",
          "committed_at": "2026-04-27T16:38:40Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "6f54851f0e57f7bcec3add857d9504959d353ee7",
          "body": "Replaces the per-repo cron + prompt with a thin caller of\n<org>/.github reusable-weekly-maintenance.yml@v1. The reusable\nbakes in SHA-pinned actions, secrets-via-env validation,\nconcurrency guard, full-suite lint and test verification, a\nTODO/FIXME census artifact with week-over-week delta, and (whe\n[…]\n, and Linear-fallback for\nrisky/judgment-call findings.\n\nSee <org>/.github docs/reusable-workflows.md for the full input\ncontract.\n\nCo-authored-by: Claude Opus 4.7 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "chore: migrate weekly-maintenance to reusable workflow (#199)",
          "author_name": "Jaryl Sim",
          "author_login": "jaryl",
          "committed_at": "2026-04-27T16:15:15Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "3b6ce9f53f420fe8a1cc9c39358ec781d19428e7",
          "body": "…chema (#198)\n\n* refactor: replace vendored StandardConfig with ActiveSupport-backed schema\n\nThe `lib/standard_config/` directory shipped with standard_id was ~430\nLOC of schema DSL + method_missing manager + per-scope config provider.\nIt worked but it was internal-only code masquerading as a separa\n[…]\nThe :symbol type cast coerces strings to symbols.\n\nCo-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>\n\n---------\n\nCo-authored-by: Claude Opus 4.7 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "refactor: replace vendored StandardConfig with ActiveSupport-backed s…",
          "author_name": "Jaryl Sim",
          "author_login": "jaryl",
          "committed_at": "2026-04-27T16:06:33Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "4e3cc264eff8f12928c1bca4b1c03d8b71021abe",
          "body": "Org policy: support Rails 8 and up with no upper bound. Previous `~> 8.0`\nlocked out Rails 9.x once it ships; widening to `>= 8.0` keeps the floor\nidentical (still Rails 8) while leaving the top open. Non-breaking — any\nhost that bundles cleanly today will continue to bundle cleanly.\n\nCo-authored-by: Claude Opus 4.7 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "build: widen Rails constraint to >= 8.0 (#197)",
          "author_name": "Jaryl Sim",
          "author_login": "jaryl",
          "committed_at": "2026-04-27T15:53:44Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "c614552806c5f0c7cac5c1aa1fb077256c1b1d9c",
          "body": "Brings consistent indentation, line endings, and trailing-whitespace\nhandling across editors that don't read .rubocop.yml. Matches the\nconvention being added to sibling gems standard_circuit and\nstandard_audit.\n\nCo-authored-by: Claude Opus 4.7 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "chore: add .editorconfig for IDE-agnostic formatting (#196)",
          "author_name": "Jaryl Sim",
          "author_login": "jaryl",
          "committed_at": "2026-04-27T15:14:17Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "69dc88ccd31e7de27b473fb57296e585e381fad7",
          "body": "…194)\n\nBumps the production-dependencies group with 3 updates: [puma](https://github.com/puma/puma), [standard_id-apple](https://github.com/rarebit-one/standard_id_apple) and [standard_id-google](https://github.com/rarebit-one/standard_id_google).\n\n\nUpdates `puma` from 8.0.0 to 8.0.1\n- [Release note\n[…]\nte:semver-minor\n  dependency-group: production-dependencies\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore(deps): bump the production-dependencies group with 3 updates (#…",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-04-27T05:16:54Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "e5d86faedc6682f8d0f263338975b9ed5d352dd6",
          "body": "…#193)\n\nStep 6 of the signed-commit prompt referenced `$DEFAULT_BRANCH` as a\nshell variable, but it was only declared as plain text inside the prompt\nheader — it was never exported to the bash environment. When Claude\nexecutes `gh pr create --base $DEFAULT_BRANCH ...`, the shell expands\nthe variable\n[…]\ne so the bash command receives the literal\nbranch name (e.g. `--base main`).\n\nSurfaced in PR review on the original migration; applies to every\nweekly-maintenance.yml that uses the signed-commit flow.",
          "is_bot": false,
          "headline": "ci: pass default branch via workflow expression in PR creation step (…",
          "author_name": "Jaryl Sim",
          "author_login": "jaryl",
          "committed_at": "2026-04-26T16:14:29Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "45f39e26459a3479e089bca5e7db54cd3683aa53",
          "body": "- Switch claude-code-action from anthropic_api_key to claude_code_oauth_token\n  (the org-level secret CLAUDE_CODE_OAUTH_TOKEN is what the modern workflows\n  in this org rely on; the legacy ANTHROPIC_API_KEY repo secret is unset,\n  so every recent run failed at the validate-secrets step).\n- Add id-to\n[…]\ner pushing the commit,\n  recreate it via the GitHub API and force-update the branch ref so the\n  PR's commit is signed by GitHub's web flow.\n- Update allowed-tools to include git rev-parse and gh api.",
          "is_bot": false,
          "headline": "ci: migrate weekly maintenance to OAuth + signed commits (#192)",
          "author_name": "Jaryl Sim",
          "author_login": "jaryl",
          "committed_at": "2026-04-26T14:33:29Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "665129030da5d574f9c316e44ace982b90e9e5a0",
          "body": "…191)\n\nBumps the production-dependencies group with 2 updates: [sqlite3](https://github.com/sparklemotion/sqlite3-ruby) and [propshaft](https://github.com/rails/propshaft).\n\n\nUpdates `sqlite3` from 2.9.2 to 2.9.3\n- [Release notes](https://github.com/sparklemotion/sqlite3-ruby/releases)\n- [Changelog]\n[…]\nte:semver-patch\n  dependency-group: production-dependencies\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore(deps): bump the production-dependencies group with 2 updates (#…",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-04-20T05:15:25Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "2eca0e3bcfa8eeb7867424ecdc5339b31ade6d8a",
          "body": "…generate setter (#190)\n\n`verify_host_cookie_encryption!` previously called `app.secret_key_base`\ndirectly. In Rails 8.1 that getter runs a generate+persist path on first\nread (ENV → credentials → auto-generate) and invokes the setter with the\nresolved value. The setter raises when the resolved valu\n[…]\n the engine calls it, the double raises an\nunexpected-message error and the spec fails.\n\n1702 examples, 0 failures. Rubocop clean.\n\nCo-authored-by: Claude Opus 4.7 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix(engine): probe secret_key_base without triggering Rails 8.1 auto-…",
          "author_name": "Jaryl Sim",
          "author_login": "jaryl",
          "committed_at": "2026-04-20T05:09:42Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "29ded4fbb0318363647cada74be66461ef2393bf",
          "body": "Co-authored-by: Claude Opus 4.7 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "chore: Release v0.16.1 (#189)",
          "author_name": "Jaryl Sim",
          "author_login": "jaryl",
          "committed_at": "2026-04-19T13:31:48Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "90d8a95f0938f3fdadad4726782b1cb7a2f84564",
          "body": "…ion + BCrypt cost knob (#188)\n\nFour perf + defensive follow-ups from the Q2 audit that didn't make 0.16.0.\n\n1. API authentication guard delegates account resolution to session_manager\n   (Api::AuthenticationGuard)\n   - emit_session_validated / emit_session_expired previously did their own\n     Stan\n[…]\n / clamped cost\n- existing refresh_token and sessions request specs cover the other two\n\n1689 examples, 0 failures. Rubocop clean.\n\nCo-authored-by: Claude Opus 4.7 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "perf: API account reuse, refresh-token family CTE, session serializat…",
          "author_name": "Jaryl Sim",
          "author_login": "jaryl",
          "committed_at": "2026-04-19T12:58:53Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "8acc59f06ccf39ca92a096a0bfe88e4b095578d9",
          "body": "* feat: mirror Current request details into Rails.event context\n\nRails 8.1 added `Rails.event`, a structured event reporter where\nconsumers get request_id / ip_address / user_agent on every event\nautomatically via `Rails.event.set_context`. This wires\n`SetCurrentRequestDetails` to populate that cont\n[…]\naction`\n  / `after_action` callback registration.\n\nCo-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>\n\n---------\n\nCo-authored-by: Claude Opus 4.7 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat: mirror Current request details into Rails.event context (#187)",
          "author_name": "Jaryl Sim",
          "author_login": "jaryl",
          "committed_at": "2026-04-19T12:48:36Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "2f148b12f200f0f6a7764cc43454e3c06e224369",
          "body": "Co-authored-by: Claude Opus 4.7 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "chore: Release v0.16.0 (#186)",
          "author_name": "Jaryl Sim",
          "author_login": "jaryl",
          "committed_at": "2026-04-19T09:02:57Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "9a8368e5bd96e4385c90bce17966f2ed92581620",
          "body": "…led event, idempotent subscriptions, errors eager-load (#180)\n\n* test: cover session revocation in handle_authentication_denied\n\nThe AuthenticationDenied concern already revokes the current session\nbefore redirecting (lifecycle_hooks.rb:175), but nothing covered this\ncontract in specs. Add tests so\n[…]\ne signals.\n\nAddresses review feedback on PR #180.\n\nCo-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>\n\n---------\n\nCo-authored-by: Claude Opus 4.7 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "chore(dx): auth-denied revoke, typed identifier accessors, social-fai…",
          "author_name": "Jaryl Sim",
          "author_login": "jaryl",
          "committed_at": "2026-04-19T08:57:57Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "88227c6c8be2c28b2823cb5c698fb60d33de4512",
          "body": "…s docs) (#173)\n\n* chore: drop stale scaffolding and add bin/dev for dummy app\n\n- Delete test_authorization_flows.rb at the repo root — it was a\n  one-off manual scaffold using OpenStruct fakes and RSpec DSL at\n  top-level, never run by CI and unreferenced.\n- Add bin/dev that provisions spec/dummy's\n[…]\nuby\n  top level and risk collisions across specs.\n\nCo-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>\n\n---------\n\nCo-authored-by: Claude Opus 4.7 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "chore: repo hygiene (dead code, dev ergonomics, config validation, op…",
          "author_name": "Jaryl Sim",
          "author_login": "jaryl",
          "committed_at": "2026-04-19T08:54:01Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "94e554573864a3278bcb4bf5e19fd26ed8107bfc",
          "body": "…#175)\n\n* security: enforce per-client PKCE requirement at authorize endpoint\n\nThe ClientApplication model already carried require_pkce, client_type,\npublic?/confidential? predicates, and a supports_pkce_method? helper, but\nthe authorize endpoint never consulted require_pkce — it accepted requests\nw\n[…]\nequire_pkce? predicate in public_clients_must_require_pkce for\n  consistency with the rest of the class and flow files.\n\n---------\n\nCo-authored-by: Claude Opus 4.7 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "security: enforce per-client PKCE requirement at authorize endpoint (…",
          "author_name": "Jaryl Sim",
          "author_login": "jaryl",
          "committed_at": "2026-04-19T08:47:57Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "9eb59b26e602d36dfc8eaa62f388e39e490ed5d0",
          "body": "…oses cross-audience replay) (#174)\n\n* security: thread allowed_audiences through API token manager\n\nBuilds on JwtService.decode's allowed_audiences: kwarg (PR #170) to\nactually enforce the global audience list everywhere the engine\nvalidates a bearer JWT, closing the cross-audience replay vector\nwi\n[…]\ns\n\nSchema comment overstated current wiring — Web::TokenManager is still a follow-up, so narrow to \"API token manager\".\n\n---------\n\nCo-authored-by: Claude Opus 4.7 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "security: thread allowed_audiences through API/Web token managers (cl…",
          "author_name": "Jaryl Sim",
          "author_login": "jaryl",
          "committed_at": "2026-04-19T08:44:09Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "0f04a3370cb0a808482b5a338338e6977c8b326b",
          "body": "* perf: use exists? instead of count in first_sign_in?\n\nThe lifecycle hook's first_sign_in? check only needs to know whether\nanother active browser session exists, not the exact number. Swap\n`.count` for `.exists?`, which compiles to `SELECT 1 ... LIMIT 1` and\nshort-circuits as soon as any row is fo\n[…]\nad of count, matching first_sign_in?'s new query.\n\nCo-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>\n\n---------\n\nCo-authored-by: Claude Opus 4.7 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "perf: session lookup + bulk revocation + partial indexes (#172)",
          "author_name": "Jaryl Sim",
          "author_login": "jaryl",
          "committed_at": "2026-04-19T08:38:02Z",
          "body_truncated": true,
          "is_coding_agent": true
        }
      ],
      "releases_count": 42,
      "commits_last_year": 313,
      "latest_release_at": "2026-07-26T06:07:52Z",
      "latest_release_tag": "v0.30.0",
      "releases_from_tags": false,
      "days_since_last_push": 0,
      "active_weeks_last_year": 37,
      "days_since_latest_release": 0,
      "mean_days_between_releases": 4.6
    },
    "community": {
      "has_readme": true,
      "has_license": true,
      "has_description": true,
      "has_contributing": true,
      "health_percentage": 75,
      "has_issue_template": false,
      "has_code_of_conduct": false,
      "has_pull_request_template": true
    },
    "ecosystem": {
      "packages": [
        {
          "name": "standard_id",
          "exists": true,
          "license": "MIT",
          "keywords": [],
          "ecosystem": "rubygems",
          "matches_repo": true,
          "registry_url": "https://rubygems.org/gems/standard_id",
          "is_deprecated": false,
          "latest_version": "0.30.0",
          "repository_url": "https://github.com/rarebit-one/standard_id",
          "versions_count": 65,
          "total_downloads": 25865,
          "dependents_count": null,
          "deprecation_note": null,
          "maintainers_count": null,
          "monthly_downloads": null,
          "first_published_at": "2025-09-07T07:40:45.005000Z",
          "latest_published_at": "2026-07-26T06:08:08.300000Z",
          "latest_version_yanked": null,
          "days_since_latest_publish": 0
        }
      ]
    },
    "popularity": {
      "forks": 0,
      "stars": 1,
      "watchers": 0,
      "fork_history": {
        "days": [],
        "complete": true,
        "collected": 0,
        "total_forks": 0
      },
      "star_history": null,
      "open_issues_and_prs": 0
    },
    "ai_readiness": {
      "has_nix": false,
      "example_dirs": [
        "demos"
      ],
      "has_llms_txt": false,
      "has_dockerfile": true,
      "has_mcp_signal": false,
      "bootstrap_files": [],
      "api_schema_files": [],
      "has_devcontainer": true,
      "typecheck_configs": [],
      "toolchain_manifests": [],
      "largest_source_bytes": 38562,
      "source_files_sampled": 379,
      "oversized_source_files": 0,
      "agent_instruction_files": [
        "AGENTS.md",
        "CLAUDE.md"
      ],
      "agent_instruction_max_bytes": 6913
    },
    "dependencies": {
      "manifests": [
        "Gemfile"
      ],
      "advisories": {
        "error": null,
        "scope": "repository_graph",
        "source": "osv",
        "findings": [],
        "collected": true,
        "malicious": [],
        "truncated": false,
        "by_severity": {},
        "advisory_count": 0,
        "affected_count": 0,
        "assessed_count": 111,
        "malicious_count": 0,
        "assessed_package": null,
        "unassessed_count": 6,
        "direct_affected_count": 0
      },
      "ecosystems": [
        "rubygems"
      ],
      "dependencies": [
        {
          "name": "puma",
          "manifest": "Gemfile",
          "ecosystem": "rubygems",
          "version_constraint": null
        },
        {
          "name": "sqlite3",
          "manifest": "Gemfile",
          "ecosystem": "rubygems",
          "version_constraint": null
        },
        {
          "name": "propshaft",
          "manifest": "Gemfile",
          "ecosystem": "rubygems",
          "version_constraint": null
        },
        {
          "name": "rubocop-rails-omakase",
          "manifest": "Gemfile",
          "ecosystem": "rubygems",
          "version_constraint": null
        },
        {
          "name": "tailwindcss-ruby",
          "manifest": "Gemfile",
          "ecosystem": "rubygems",
          "version_constraint": "~> 4.2"
        },
        {
          "name": "tailwindcss-rails",
          "manifest": "Gemfile",
          "ecosystem": "rubygems",
          "version_constraint": "~> 4.4"
        },
        {
          "name": "standard_id-apple",
          "manifest": "Gemfile",
          "ecosystem": "rubygems",
          "version_constraint": "~> 0.4.0"
        },
        {
          "name": "standard_id-google",
          "manifest": "Gemfile",
          "ecosystem": "rubygems",
          "version_constraint": "~> 0.3.0"
        }
      ],
      "all_dependencies": {
        "error": null,
        "source": "github-sbom",
        "packages": [
          {
            "name": "propshaft",
            "direct": true,
            "version": "1.3.2",
            "ecosystem": "rubygems"
          },
          {
            "name": "puma",
            "direct": true,
            "version": "8.0.2",
            "ecosystem": "rubygems"
          },
          {
            "name": "rubocop-rails-omakase",
            "direct": true,
            "version": "1.1.0",
            "ecosystem": "rubygems"
          },
          {
            "name": "sqlite3",
            "direct": true,
            "version": "2.9.5",
            "ecosystem": "rubygems"
          },
          {
            "name": "standard_id-apple",
            "direct": true,
            "version": "0.4.0",
            "ecosystem": "rubygems"
          },
          {
            "name": "standard_id-google",
            "direct": true,
            "version": "0.3.0",
            "ecosystem": "rubygems"
          },
          {
            "name": "tailwindcss-rails",
            "direct": true,
            "version": "4.6.0",
            "ecosystem": "rubygems"
          },
          {
            "name": "tailwindcss-ruby",
            "direct": true,
            "version": "4.3.1",
            "ecosystem": "rubygems"
          },
          {
            "name": "action_text-trix",
            "direct": false,
            "version": "2.1.19",
            "ecosystem": "rubygems"
          },
          {
            "name": "actioncable",
            "direct": false,
            "version": "8.1.3",
            "ecosystem": "rubygems"
          },
          {
            "name": "actionmailbox",
            "direct": false,
            "version": "8.1.3",
            "ecosystem": "rubygems"
          },
          {
            "name": "actionmailer",
            "direct": false,
            "version": "8.1.3",
            "ecosystem": "rubygems"
          },
          {
            "name": "actionpack",
            "direct": false,
            "version": "8.1.3",
            "ecosystem": "rubygems"
          },
          {
            "name": "actiontext",
            "direct": false,
            "version": "8.1.3",
            "ecosystem": "rubygems"
          },
          {
            "name": "actionview",
            "direct": false,
            "version": "8.1.3",
            "ecosystem": "rubygems"
          },
          {
            "name": "activejob",
            "direct": false,
            "version": "8.1.3",
            "ecosystem": "rubygems"
          },
          {
            "name": "activemodel",
            "direct": false,
            "version": "8.1.3",
            "ecosystem": "rubygems"
          },
          {
            "name": "activerecord",
            "direct": false,
            "version": "8.1.3",
            "ecosystem": "rubygems"
          },
          {
            "name": "activestorage",
            "direct": false,
            "version": "8.1.3",
            "ecosystem": "rubygems"
          },
          {
            "name": "activesupport",
            "direct": false,
            "version": "8.1.3",
            "ecosystem": "rubygems"
          },
          {
            "name": "addressable",
            "direct": false,
            "version": "2.9.0",
            "ecosystem": "rubygems"
          },
          {
            "name": "ast",
            "direct": false,
            "version": "2.4.3",
            "ecosystem": "rubygems"
          },
          {
            "name": "base64",
            "direct": false,
            "version": "0.3.0",
            "ecosystem": "rubygems"
          },
          {
            "name": "bcrypt",
            "direct": false,
            "version": null,
            "ecosystem": "rubygems"
          },
          {
            "name": "bcrypt",
            "direct": false,
            "version": "3.1.22",
            "ecosystem": "rubygems"
          },
          {
            "name": "bigdecimal",
            "direct": false,
            "version": "4.1.2",
            "ecosystem": "rubygems"
          },
          {
            "name": "brakeman",
            "direct": false,
            "version": "8.0.5",
            "ecosystem": "rubygems"
          },
          {
            "name": "builder",
            "direct": false,
            "version": "3.3.0",
            "ecosystem": "rubygems"
          },
          {
            "name": "bundler-audit",
            "direct": false,
            "version": "0.9.3",
            "ecosystem": "rubygems"
          },
          {
            "name": "concurrent-ruby",
            "direct": false,
            "version": null,
            "ecosystem": "rubygems"
          },
          {
            "name": "concurrent-ruby",
            "direct": false,
            "version": "1.3.7",
            "ecosystem": "rubygems"
          },
          {
            "name": "connection_pool",
            "direct": false,
            "version": "3.0.2",
            "ecosystem": "rubygems"
          },
          {
            "name": "crack",
            "direct": false,
            "version": "1.0.1",
            "ecosystem": "rubygems"
          },
          {
            "name": "crass",
            "direct": false,
            "version": "1.0.7",
            "ecosystem": "rubygems"
          },
          {
            "name": "date",
            "direct": false,
            "version": "3.5.1",
            "ecosystem": "rubygems"
          },
          {
            "name": "diff-lcs",
            "direct": false,
            "version": "1.6.2",
            "ecosystem": "rubygems"
          },
          {
            "name": "docile",
            "direct": false,
            "version": "1.4.1",
            "ecosystem": "rubygems"
          },
          {
            "name": "drb",
            "direct": false,
            "version": "2.2.3",
            "ecosystem": "rubygems"
          },
          {
            "name": "erb",
            "direct": false,
            "version": "6.0.4",
            "ecosystem": "rubygems"
          },
          {
            "name": "erubi",
            "direct": false,
            "version": "1.13.1",
            "ecosystem": "rubygems"
          },
          {
            "name": "factory_bot",
            "direct": false,
            "version": null,
            "ecosystem": "rubygems"
          },
          {
            "name": "factory_bot",
            "direct": false,
            "version": "6.6.0",
            "ecosystem": "rubygems"
          },
          {
            "name": "foreman",
            "direct": false,
            "version": "0.90.0",
            "ecosystem": "rubygems"
          },
          {
            "name": "globalid",
            "direct": false,
            "version": "1.4.0",
            "ecosystem": "rubygems"
          },
          {
            "name": "hashdiff",
            "direct": false,
            "version": "1.2.1",
            "ecosystem": "rubygems"
          },
          {
            "name": "i18n",
            "direct": false,
            "version": "1.15.2",
            "ecosystem": "rubygems"
          },
          {
            "name": "io-console",
            "direct": false,
            "version": "0.8.2",
            "ecosystem": "rubygems"
          },
          {
            "name": "irb",
            "direct": false,
            "version": "1.18.0",
            "ecosystem": "rubygems"
          },
          {
            "name": "json",
            "direct": false,
            "version": "2.20.0",
            "ecosystem": "rubygems"
          },
          {
            "name": "jwt",
            "direct": false,
            "version": null,
            "ecosystem": "rubygems"
          },
          {
            "name": "jwt",
            "direct": false,
            "version": "3.2.0",
            "ecosystem": "rubygems"
          },
          {
            "name": "language_server-protocol",
            "direct": false,
            "version": "3.17.0.6",
            "ecosystem": "rubygems"
          },
          {
            "name": "lint_roller",
            "direct": false,
            "version": "1.1.0",
            "ecosystem": "rubygems"
          },
          {
            "name": "logger",
            "direct": false,
            "version": "1.7.0",
            "ecosystem": "rubygems"
          },
          {
            "name": "loofah",
            "direct": false,
            "version": "2.25.2",
            "ecosystem": "rubygems"
          },
          {
            "name": "mail",
            "direct": false,
            "version": "2.9.1",
            "ecosystem": "rubygems"
          },
          {
            "name": "marcel",
            "direct": false,
            "version": "1.2.1",
            "ecosystem": "rubygems"
          },
          {
            "name": "mini_mime",
            "direct": false,
            "version": "1.1.5",
            "ecosystem": "rubygems"
          },
          {
            "name": "minitest",
            "direct": false,
            "version": "6.0.6",
            "ecosystem": "rubygems"
          },
          {
            "name": "net-imap",
            "direct": false,
            "version": "0.6.4.1",
            "ecosystem": "rubygems"
          },
          {
            "name": "net-pop",
            "direct": false,
            "version": "0.1.2",
            "ecosystem": "rubygems"
          },
          {
            "name": "net-protocol",
            "direct": false,
            "version": "0.2.2",
            "ecosystem": "rubygems"
          },
          {
            "name": "net-smtp",
            "direct": false,
            "version": "0.5.1",
            "ecosystem": "rubygems"
          },
          {
            "name": "nio4r",
            "direct": false,
            "version": "2.7.5",
            "ecosystem": "rubygems"
          },
          {
            "name": "nokogiri",
            "direct": false,
            "version": "1.19.4",
            "ecosystem": "rubygems"
          },
          {
            "name": "ostruct",
            "direct": false,
            "version": null,
            "ecosystem": "rubygems"
          },
          {
            "name": "ostruct",
            "direct": false,
            "version": "0.6.3",
            "ecosystem": "rubygems"
          },
          {
            "name": "parallel",
            "direct": false,
            "version": "2.1.0",
            "ecosystem": "rubygems"
          },
          {
            "name": "parser",
            "direct": false,
            "version": "3.3.11.1",
            "ecosystem": "rubygems"
          },
          {
            "name": "pp",
            "direct": false,
            "version": "0.6.4",
            "ecosystem": "rubygems"
          },
          {
            "name": "prettyprint",
            "direct": false,
            "version": "0.2.0",
            "ecosystem": "rubygems"
          },
          {
            "name": "prism",
            "direct": false,
            "version": "1.9.0",
            "ecosystem": "rubygems"
          },
          {
            "name": "public_suffix",
            "direct": false,
            "version": "7.0.5",
            "ecosystem": "rubygems"
          },
          {
            "name": "racc",
            "direct": false,
            "version": "1.8.1",
            "ecosystem": "rubygems"
          },
          {
            "name": "rack",
            "direct": false,
            "version": "3.2.6",
            "ecosystem": "rubygems"
          },
          {
            "name": "rack-session",
            "direct": false,
            "version": "2.1.2",
            "ecosystem": "rubygems"
          },
          {
            "name": "rack-test",
            "direct": false,
            "version": "2.2.0",
            "ecosystem": "rubygems"
          },
          {
            "name": "rackup",
            "direct": false,
            "version": "2.3.1",
            "ecosystem": "rubygems"
          },
          {
            "name": "rails",
            "direct": false,
            "version": null,
            "ecosystem": "rubygems"
          },
          {
            "name": "rails",
            "direct": false,
            "version": "8.1.3",
            "ecosystem": "rubygems"
          },
          {
            "name": "rails-dom-testing",
            "direct": false,
            "version": "2.3.0",
            "ecosystem": "rubygems"
          },
          {
            "name": "rails-html-sanitizer",
            "direct": false,
            "version": "1.7.1",
            "ecosystem": "rubygems"
          },
          {
            "name": "railties",
            "direct": false,
            "version": "8.1.3",
            "ecosystem": "rubygems"
          },
          {
            "name": "rainbow",
            "direct": false,
            "version": "3.1.1",
            "ecosystem": "rubygems"
          },
          {
            "name": "rake",
            "direct": false,
            "version": "13.4.2",
            "ecosystem": "rubygems"
          },
          {
            "name": "rbs",
            "direct": false,
            "version": "4.0.3",
            "ecosystem": "rubygems"
          },
          {
            "name": "rdoc",
            "direct": false,
            "version": "8.0.0",
            "ecosystem": "rubygems"
          },
          {
            "name": "regexp_parser",
            "direct": false,
            "version": "2.12.0",
            "ecosystem": "rubygems"
          },
          {
            "name": "reline",
            "direct": false,
            "version": "0.6.3",
            "ecosystem": "rubygems"
          },
          {
            "name": "rexml",
            "direct": false,
            "version": "3.4.4",
            "ecosystem": "rubygems"
          },
          {
            "name": "rspec-core",
            "direct": false,
            "version": "3.13.6",
            "ecosystem": "rubygems"
          },
          {
            "name": "rspec-expectations",
            "direct": false,
            "version": "3.13.5",
            "ecosystem": "rubygems"
          },
          {
            "name": "rspec-mocks",
            "direct": false,
            "version": "3.13.8",
            "ecosystem": "rubygems"
          },
          {
            "name": "rspec-rails",
            "direct": false,
            "version": "8.0.4",
            "ecosystem": "rubygems"
          },
          {
            "name": "rspec-support",
            "direct": false,
            "version": "3.13.7",
            "ecosystem": "rubygems"
          },
          {
            "name": "rubocop",
            "direct": false,
            "version": "1.88.1",
            "ecosystem": "rubygems"
          },
          {
            "name": "rubocop-ast",
            "direct": false,
            "version": "1.50.0",
            "ecosystem": "rubygems"
          },
          {
            "name": "rubocop-performance",
            "direct": false,
            "version": "1.26.1",
            "ecosystem": "rubygems"
          },
          {
            "name": "rubocop-rails",
            "direct": false,
            "version": "2.35.5",
            "ecosystem": "rubygems"
          },
          {
            "name": "ruby-progressbar",
            "direct": false,
            "version": "1.13.0",
            "ecosystem": "rubygems"
          },
          {
            "name": "securerandom",
            "direct": false,
            "version": "0.4.1",
            "ecosystem": "rubygems"
          },
          {
            "name": "shoulda-matchers",
            "direct": false,
            "version": "7.0.1",
            "ecosystem": "rubygems"
          },
          {
            "name": "simplecov",
            "direct": false,
            "version": "0.22.0",
            "ecosystem": "rubygems"
          },
          {
            "name": "simplecov-html",
            "direct": false,
            "version": "0.13.2",
            "ecosystem": "rubygems"
          },
          {
            "name": "simplecov_json_formatter",
            "direct": false,
            "version": "0.1.4",
            "ecosystem": "rubygems"
          },
          {
            "name": "thor",
            "direct": false,
            "version": "1.5.0",
            "ecosystem": "rubygems"
          },
          {
            "name": "timeout",
            "direct": false,
            "version": "0.6.1",
            "ecosystem": "rubygems"
          },
          {
            "name": "tsort",
            "direct": false,
            "version": "0.2.0",
            "ecosystem": "rubygems"
          },
          {
            "name": "tzinfo",
            "direct": false,
            "version": "2.0.6",
            "ecosystem": "rubygems"
          },
          {
            "name": "unicode-display_width",
            "direct": false,
            "version": "3.2.0",
            "ecosystem": "rubygems"
          },
          {
            "name": "unicode-emoji",
            "direct": false,
            "version": "4.2.0",
            "ecosystem": "rubygems"
          },
          {
            "name": "uri",
            "direct": false,
            "version": "1.1.1",
            "ecosystem": "rubygems"
          },
          {
            "name": "useragent",
            "direct": false,
            "version": "0.16.11",
            "ecosystem": "rubygems"
          },
          {
            "name": "webmock",
            "direct": false,
            "version": "3.26.2",
            "ecosystem": "rubygems"
          },
          {
            "name": "websocket-driver",
            "direct": false,
            "version": "0.8.2",
            "ecosystem": "rubygems"
          },
          {
            "name": "websocket-extensions",
            "direct": false,
            "version": "0.1.5",
            "ecosystem": "rubygems"
          },
          {
            "name": "zeitwerk",
            "direct": false,
            "version": "2.8.2",
            "ecosystem": "rubygems"
          }
        ],
        "collected": true,
        "truncated": false,
        "total_count": 117,
        "direct_count": 8,
        "indirect_count": 109
      }
    },
    "maintainership": {
      "issues": {
        "open_prs": 0,
        "merged_prs": 256,
        "open_issues": 0,
        "closed_ratio": null,
        "closed_issues": 0,
        "closed_unmerged_prs": 14
      },
      "bus_factor": 1,
      "bot_contributors": 2,
      "top_contributors": [
        {
          "type": "User",
          "login": "jaryl",
          "commits": 249,
          "avatar_url": "https://avatars.githubusercontent.com/u/19878?v=4"
        },
        {
          "type": "User",
          "login": "nhatle305",
          "commits": 33,
          "avatar_url": "https://avatars.githubusercontent.com/u/11457996?v=4"
        },
        {
          "type": "User",
          "login": "nhatle684",
          "commits": 1,
          "avatar_url": "https://avatars.githubusercontent.com/u/52823266?v=4"
        }
      ],
      "contributors_sampled": 3,
      "top_contributor_share": 0.88
    },
    "quality_signals": {
      "has_ci": true,
      "has_tests": true,
      "ci_workflows": [
        "ci.yml",
        "claude-code-review.yml",
        "claude.yml",
        "codeql-actions.yml",
        "codeql.yml",
        "dependabot-auto-merge.yml",
        "release.yml",
        "weekly-maintenance.yml"
      ],
      "has_docs_dir": true,
      "linter_configs": [
        ".rubocop.yml"
      ],
      "has_editorconfig": true,
      "has_linter_config": true,
      "has_precommit_config": false
    },
    "security_signals": {
      "lockfiles": [
        "Gemfile.lock"
      ],
      "scorecard": {
        "checks": [
          {
            "name": "Binary-Artifacts",
            "score": 10,
            "reason": "no binaries found in the repo",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#binary-artifacts"
          },
          {
            "name": "Branch-Protection",
            "score": 3,
            "reason": "branch protection is not maximal on development and all release branches",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#branch-protection"
          },
          {
            "name": "CI-Tests",
            "score": 10,
            "reason": "30 out of 30 merged PRs checked by a CI test -- score normalized to 10",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#ci-tests"
          },
          {
            "name": "CII-Best-Practices",
            "score": 0,
            "reason": "no effort to earn an OpenSSF best practices badge detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#cii-best-practices"
          },
          {
            "name": "Code-Review",
            "score": 0,
            "reason": "Found 0/23 approved changesets -- score normalized to 0",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#code-review"
          },
          {
            "name": "Contributors",
            "score": 6,
            "reason": "project has 2 contributing companies or organizations -- score normalized to 6",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#contributors"
          },
          {
            "name": "Dangerous-Workflow",
            "score": 10,
            "reason": "no dangerous workflow patterns detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dangerous-workflow"
          },
          {
            "name": "Dependency-Update-Tool",
            "score": 10,
            "reason": "update tool detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dependency-update-tool"
          },
          {
            "name": "Fuzzing",
            "score": 0,
            "reason": "project is not fuzzed",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#fuzzing"
          },
          {
            "name": "License",
            "score": 10,
            "reason": "license file detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#license"
          },
          {
            "name": "Maintained",
            "score": 10,
            "reason": "30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#maintained"
          },
          {
            "name": "Packaging",
            "score": null,
            "reason": "packaging workflow not detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#packaging"
          },
          {
            "name": "Pinned-Dependencies",
            "score": 4,
            "reason": "dependency not pinned by hash detected -- score normalized to 4",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#pinned-dependencies"
          },
          {
            "name": "SAST",
            "score": 10,
            "reason": "SAST tool is run on all commits",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#sast"
          },
          {
            "name": "Security-Policy",
            "score": 10,
            "reason": "security policy file detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#security-policy"
          },
          {
            "name": "Signed-Releases",
            "score": null,
            "reason": "no releases found",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#signed-releases"
          },
          {
            "name": "Token-Permissions",
            "score": 0,
            "reason": "detected GitHub workflow tokens with excessive permissions",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#token-permissions"
          },
          {
            "name": "Vulnerabilities",
            "score": 10,
            "reason": "0 existing vulnerabilities detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#vulnerabilities"
          }
        ],
        "commit": "e5b4ca396854caaf58037031510cfe69b1e33665",
        "ran_at": "2026-07-26T06:12:31Z",
        "aggregate_score": 6.6,
        "scorecard_version": "v5.5.0"
      },
      "has_codeql_workflow": true,
      "has_security_policy": false,
      "has_dependabot_config": true
    },
    "contribution_flow": {
      "collected": true,
      "ci_last_run_at": "2026-07-26T06:08:12Z",
      "oldest_open_prs": [],
      "last_merged_pr_at": "2026-07-26T06:07:22Z",
      "ci_last_conclusion": "SUCCESS",
      "oldest_open_issues": []
    }
  },
  "config": {
    "disabled_metrics": [],
    "disabled_categories": [],
    "disabled_components": {}
  },
  "source": {
    "url": "https://github.com/rarebit-one/standard_id",
    "host": "github.com",
    "name": "standard_id",
    "owner": "rarebit-one"
  },
  "metrics": {
    "overall": {
      "key": "overall",
      "band": "moderate",
      "name": "Overall health",
      "note": null,
      "notes": [],
      "value": 69,
      "inputs": {
        "security": 73,
        "vitality": 94,
        "community": 42,
        "governance": 54,
        "engineering": 80
      },
      "components": []
    },
    "categories": [
      {
        "key": "vitality",
        "band": "excellent",
        "name": "Vitality",
        "value": 94,
        "weight": 0.22,
        "metrics": [
          {
            "key": "development_activity",
            "band": "excellent",
            "name": "Development activity",
            "note": null,
            "notes": [],
            "value": 90,
            "inputs": {
              "commits_last_year": 313,
              "human_commit_share": 0.82,
              "days_since_last_push": 0,
              "active_weeks_last_year": 37
            },
            "components": [
              {
                "key": "push_recency",
                "name": "Push recency",
                "detail": "last push 0 days ago",
                "points": 36,
                "status": "met",
                "details": [
                  {
                    "code": "push_recency",
                    "params": {
                      "days": 0
                    }
                  }
                ],
                "max_points": 36
              },
              {
                "key": "commit_cadence",
                "name": "Commit cadence",
                "detail": "37/52 weeks with commits",
                "points": 25.6,
                "status": "partial",
                "details": [
                  {
                    "code": "commit_cadence_weeks",
                    "params": {
                      "weeks": 37
                    }
                  }
                ],
                "max_points": 36
              },
              {
                "key": "commit_volume",
                "name": "Commit volume",
                "detail": "313 commits in the last year",
                "points": 18,
                "status": "met",
                "details": [
                  {
                    "code": "commits_last_year",
                    "params": {
                      "count": 313
                    }
                  }
                ],
                "max_points": 18
              },
              {
                "key": "openssf_scorecard_maintained",
                "name": "OpenSSF Scorecard: Maintained",
                "detail": "30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10",
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "release_discipline",
            "band": "excellent",
            "name": "Release discipline",
            "note": "Excluded from scoring (no data or not applicable): OpenSSF Scorecard: Signed-Releases. Remaining weights renormalized.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "openssf_scorecard_signed_releases"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              }
            ],
            "value": 100,
            "inputs": {
              "releases_count": 42,
              "latest_release_tag": "v0.30.0",
              "releases_from_tags": false,
              "days_since_latest_release": 0,
              "mean_days_between_releases": 4.6
            },
            "components": [
              {
                "key": "ships_releases",
                "name": "Ships releases",
                "detail": "42 releases published",
                "points": 27,
                "status": "met",
                "details": [
                  {
                    "code": "releases_published",
                    "params": {
                      "count": 42
                    }
                  }
                ],
                "max_points": 27
              },
              {
                "key": "release_recency",
                "name": "Release recency",
                "detail": "latest release 0 days ago",
                "points": 36,
                "status": "met",
                "details": [
                  {
                    "code": "release_recency",
                    "params": {
                      "days": 0
                    }
                  }
                ],
                "max_points": 36
              },
              {
                "key": "release_cadence",
                "name": "Release cadence",
                "detail": "a release every ~4.6 days",
                "points": 27,
                "status": "met",
                "details": [
                  {
                    "code": "release_cadence",
                    "params": {
                      "gap": 4.6
                    }
                  }
                ],
                "max_points": 27
              },
              {
                "key": "openssf_scorecard_signed_releases",
                "name": "OpenSSF Scorecard: Signed-Releases",
                "detail": "no releases found",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_data",
                    "params": {}
                  }
                ],
                "max_points": 10
              }
            ]
          },
          {
            "key": "abandonment",
            "band": "excellent",
            "name": "Abandonment",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "cap": null,
              "state": "maintained",
              "guards": [],
              "signals": [],
              "red_flag": false,
              "multiplier_pct": 100,
              "declared_reason": null,
              "unverified_reason": null,
              "unanswered_open_prs": null,
              "unanswered_open_issues": null,
              "days_since_last_merged_pr": null,
              "days_since_last_human_commit": 0,
              "days_since_last_human_commit_is_floor": false
            },
            "components": [
              {
                "key": "project_is_still_maintained",
                "name": "Project is still maintained",
                "detail": "last human commit 0 days ago",
                "points": 100,
                "status": "met",
                "details": [
                  {
                    "code": "abandonment_maintained",
                    "params": {
                      "days": 0
                    }
                  }
                ],
                "max_points": 100
              }
            ]
          }
        ],
        "description": "Is the project alive — is code being written and are releases shipping?"
      },
      {
        "key": "community",
        "band": "at_risk",
        "name": "Community & Adoption",
        "value": 42,
        "weight": 0.18,
        "metrics": [
          {
            "key": "popularity",
            "band": "critical",
            "name": "Popularity & adoption",
            "note": null,
            "notes": [],
            "value": 1,
            "inputs": {
              "forks": 0,
              "stars": 1,
              "watchers": 0,
              "growth_state": "unverified",
              "growth_factor_pct": 100,
              "growth_unverified_reason": "no_history"
            },
            "components": [
              {
                "key": "stars",
                "name": "Stars",
                "detail": "1 stars",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "stars",
                    "params": {
                      "count": 1
                    }
                  }
                ],
                "max_points": 60
              },
              {
                "key": "forks",
                "name": "Forks",
                "detail": "0 forks",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "forks",
                    "params": {
                      "count": 0
                    }
                  }
                ],
                "max_points": 25
              },
              {
                "key": "watchers",
                "name": "Watchers",
                "detail": "0 watchers",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "watchers",
                    "params": {
                      "count": 0
                    }
                  }
                ],
                "max_points": 15
              }
            ]
          },
          {
            "key": "community_health",
            "band": "good",
            "name": "Community health",
            "note": null,
            "notes": [],
            "value": 77,
            "inputs": {
              "has_readme": true,
              "has_license": true,
              "has_contributing": true,
              "has_issue_template": false,
              "has_code_of_conduct": false,
              "has_pull_request_template": true
            },
            "components": [
              {
                "key": "readme",
                "name": "README",
                "detail": null,
                "points": 22.5,
                "status": "met",
                "details": [],
                "max_points": 22.5
              },
              {
                "key": "license",
                "name": "License",
                "detail": "recognized license (MIT)",
                "points": 22.5,
                "status": "met",
                "details": [
                  {
                    "code": "license_standard",
                    "params": {}
                  },
                  {
                    "code": "license_spdx",
                    "params": {
                      "spdx": "MIT"
                    }
                  }
                ],
                "max_points": 22.5
              },
              {
                "key": "contributing_guide",
                "name": "CONTRIBUTING guide",
                "detail": null,
                "points": 18,
                "status": "met",
                "details": [],
                "max_points": 18
              },
              {
                "key": "code_of_conduct",
                "name": "Code of conduct",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 13.5
              },
              {
                "key": "issue_template",
                "name": "Issue template",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.2
              },
              {
                "key": "pr_template",
                "name": "PR template",
                "detail": null,
                "points": 6.3,
                "status": "met",
                "details": [],
                "max_points": 6.3
              }
            ]
          },
          {
            "key": "ecosystem_adoption",
            "band": "moderate",
            "name": "Ecosystem adoption (downloads)",
            "note": "Excluded from scoring (no data or not applicable): Registry dependents. Remaining weights renormalized.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "registry_dependents"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              }
            ],
            "value": 57,
            "inputs": {
              "packages": [
                "standard_id"
              ],
              "dependents": null,
              "ecosystems": "rubygems",
              "total_downloads": 25865,
              "monthly_downloads": null
            },
            "components": [
              {
                "key": "total_downloads",
                "name": "Total downloads",
                "detail": "25,865 downloads all-time across rubygems",
                "points": 45.9,
                "status": "partial",
                "details": [
                  {
                    "code": "downloads_total",
                    "params": {
                      "count": 25865,
                      "ecosystems": "rubygems"
                    }
                  }
                ],
                "max_points": 80
              },
              {
                "key": "registry_dependents",
                "name": "Registry dependents",
                "detail": "not reported by this ecosystem",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "not_reported_by_this_ecosystem",
                    "params": {}
                  }
                ],
                "max_points": 20
              }
            ]
          }
        ],
        "description": "Does the project have users, downloads, attention, and a welcoming setup for contributors?"
      },
      {
        "key": "governance",
        "band": "moderate",
        "name": "Sustainability & Governance",
        "value": 54,
        "weight": 0.24,
        "metrics": [
          {
            "key": "maintainer_resilience",
            "band": "critical",
            "name": "Maintainer resilience (bus factor)",
            "note": null,
            "notes": [],
            "value": 22,
            "inputs": {
              "bus_factor": 1,
              "contributors_sampled": 3,
              "top_contributor_share": 0.88
            },
            "components": [
              {
                "key": "bus_factor",
                "name": "Bus factor",
                "detail": "1 contributor(s) cover half of all commits",
                "points": 9,
                "status": "partial",
                "details": [
                  {
                    "code": "bus_factor",
                    "params": {
                      "count": 1
                    }
                  }
                ],
                "max_points": 54
              },
              {
                "key": "commit_distribution",
                "name": "Commit distribution",
                "detail": "top contributor authored 88% of commits",
                "points": 2.7,
                "status": "partial",
                "details": [
                  {
                    "code": "top_contributor_share",
                    "params": {
                      "share": 88
                    }
                  }
                ],
                "max_points": 22.5
              },
              {
                "key": "contributor_breadth",
                "name": "Contributor breadth",
                "detail": "3 contributors",
                "points": 4.1,
                "status": "partial",
                "details": [
                  {
                    "code": "contributors_sampled",
                    "params": {
                      "count": 3
                    }
                  }
                ],
                "max_points": 13.5
              },
              {
                "key": "openssf_scorecard_contributors",
                "name": "OpenSSF Scorecard: Contributors",
                "detail": "project has 2 contributing companies or organizations -- score normalized to 6",
                "points": 6,
                "status": "partial",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "responsiveness",
            "band": "moderate",
            "name": "Issue & PR responsiveness",
            "note": "Excluded from scoring (no data or not applicable): Issue resolution. Remaining weights renormalized.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "issue_resolution"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              }
            ],
            "value": 68,
            "inputs": {
              "merged_prs": 256,
              "open_issues": 0,
              "closed_issues": 0,
              "issue_closed_ratio": null,
              "closed_unmerged_prs": 14
            },
            "components": [
              {
                "key": "issue_resolution",
                "name": "Issue resolution",
                "detail": "no issues or no data",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_issues_or_data",
                    "params": {}
                  }
                ],
                "max_points": 46.75
              },
              {
                "key": "pr_acceptance",
                "name": "PR acceptance",
                "detail": "256/270 decided PRs merged",
                "points": 36.3,
                "status": "partial",
                "details": [
                  {
                    "code": "decided_prs_merged",
                    "params": {
                      "merged": 256,
                      "decided": 270
                    }
                  }
                ],
                "max_points": 38.25
              },
              {
                "key": "openssf_scorecard_code_review",
                "name": "OpenSSF Scorecard: Code-Review",
                "detail": "Found 0/23 approved changesets -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 15
              }
            ]
          },
          {
            "key": "stewardship",
            "band": "at_risk",
            "name": "Ownership & stewardship",
            "note": null,
            "notes": [],
            "value": 41,
            "inputs": {
              "followers": 0,
              "owner_type": "Organization",
              "is_verified": null,
              "owner_login": "rarebit-one",
              "public_repos": 15,
              "account_age_days": 457
            },
            "components": [
              {
                "key": "ownership_backing",
                "name": "Ownership backing",
                "detail": "organization-owned",
                "points": 30,
                "status": "met",
                "details": [
                  {
                    "code": "owner_organization",
                    "params": {}
                  }
                ],
                "max_points": 30
              },
              {
                "key": "verified_domain",
                "name": "Verified domain",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 20
              },
              {
                "key": "owner_reach",
                "name": "Owner reach",
                "detail": "0 followers of rarebit-one",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "owner_followers",
                    "params": {
                      "count": 0,
                      "login": "rarebit-one"
                    }
                  }
                ],
                "max_points": 25
              },
              {
                "key": "track_record",
                "name": "Track record",
                "detail": "15 public repos, account ~1 yr old",
                "points": 11.3,
                "status": "partial",
                "details": [
                  {
                    "code": "public_repos",
                    "params": {
                      "count": 15
                    }
                  },
                  {
                    "code": "account_age_years",
                    "params": {
                      "years": 1
                    }
                  }
                ],
                "max_points": 25
              }
            ]
          },
          {
            "key": "package_maintenance",
            "band": "excellent",
            "name": "Package maintenance",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "packages": [
                "standard_id"
              ],
              "ecosystems": "rubygems",
              "any_deprecated": false,
              "min_days_since_publish": 0
            },
            "components": [
              {
                "key": "published_resolvable",
                "name": "Published & resolvable",
                "detail": "1 package(s) on rubygems",
                "points": 25,
                "status": "met",
                "details": [
                  {
                    "code": "packages_published",
                    "params": {
                      "count": 1,
                      "ecosystems": "rubygems"
                    }
                  }
                ],
                "max_points": 25
              },
              {
                "key": "publish_recency",
                "name": "Publish recency",
                "detail": "latest publish 0 days ago",
                "points": 35,
                "status": "met",
                "details": [
                  {
                    "code": "publish_recency",
                    "params": {
                      "days": 0
                    }
                  }
                ],
                "max_points": 35
              },
              {
                "key": "version_history",
                "name": "Version history",
                "detail": "65 published versions",
                "points": 20,
                "status": "met",
                "details": [
                  {
                    "code": "published_versions",
                    "params": {
                      "count": 65
                    }
                  }
                ],
                "max_points": 20
              },
              {
                "key": "not_deprecated",
                "name": "Not deprecated",
                "detail": "active, not deprecated or yanked",
                "points": 20,
                "status": "met",
                "details": [
                  {
                    "code": "package_not_deprecated",
                    "params": {}
                  }
                ],
                "max_points": 20
              }
            ]
          }
        ],
        "description": "Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?"
      },
      {
        "key": "engineering",
        "band": "good",
        "name": "Engineering Quality",
        "value": 80,
        "weight": 0.2,
        "metrics": [
          {
            "key": "engineering_practices",
            "band": "excellent",
            "name": "Engineering practices",
            "note": null,
            "notes": [],
            "value": 90,
            "inputs": {
              "has_ci": true,
              "has_tests": true,
              "has_editorconfig": true,
              "has_linter_config": true,
              "has_precommit_config": false
            },
            "components": [
              {
                "key": "ci_workflows",
                "name": "CI workflows",
                "detail": "8 workflow(s)",
                "points": 24,
                "status": "met",
                "details": [
                  {
                    "code": "ci_workflows",
                    "params": {
                      "count": 8
                    }
                  }
                ],
                "max_points": 24
              },
              {
                "key": "tests_present",
                "name": "Tests present",
                "detail": null,
                "points": 24,
                "status": "met",
                "details": [],
                "max_points": 24
              },
              {
                "key": "linter_config",
                "name": "Linter config",
                "detail": ".rubocop.yml",
                "points": 16,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": ".rubocop.yml"
                    }
                  }
                ],
                "max_points": 16
              },
              {
                "key": "pre_commit_hooks",
                "name": "Pre-commit hooks",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 9.6
              },
              {
                "key": "editorconfig",
                "name": ".editorconfig",
                "detail": null,
                "points": 6.4,
                "status": "met",
                "details": [],
                "max_points": 6.4
              },
              {
                "key": "openssf_scorecard_ci_tests",
                "name": "OpenSSF Scorecard: CI-Tests",
                "detail": "30 out of 30 merged PRs checked by a CI test -- score normalized to 10",
                "points": 20,
                "status": "met",
                "details": [],
                "max_points": 20
              }
            ]
          },
          {
            "key": "documentation",
            "band": "moderate",
            "name": "Documentation",
            "note": null,
            "notes": [],
            "value": 65,
            "inputs": {
              "topics": [],
              "has_wiki": false,
              "homepage": null,
              "has_readme": true,
              "has_docs_dir": true,
              "has_description": true
            },
            "components": [
              {
                "key": "readme",
                "name": "README",
                "detail": null,
                "points": 30,
                "status": "met",
                "details": [],
                "max_points": 30
              },
              {
                "key": "documentation_directory",
                "name": "Documentation directory",
                "detail": null,
                "points": 25,
                "status": "met",
                "details": [],
                "max_points": 25
              },
              {
                "key": "documentation_homepage_site",
                "name": "Documentation / homepage site",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 15
              },
              {
                "key": "repository_description",
                "name": "Repository description",
                "detail": null,
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              },
              {
                "key": "topics",
                "name": "Topics",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 10
              },
              {
                "key": "wiki",
                "name": "Wiki",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 10
              }
            ]
          }
        ],
        "description": "Are baseline engineering and documentation practices in place?"
      },
      {
        "key": "security",
        "band": "good",
        "name": "Security",
        "value": 73,
        "weight": 0.16,
        "metrics": [
          {
            "key": "security_posture",
            "band": "moderate",
            "name": "Security posture",
            "note": "Excluded from scoring (no data or not applicable): Packaging, Signed-Releases. Remaining weights renormalized.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "packaging",
                    "signed_releases"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              }
            ],
            "value": 66,
            "inputs": {
              "source": "openssf_scorecard",
              "checks_evaluated": 16,
              "scorecard_version": "v5.5.0",
              "checks_inconclusive": 2,
              "scorecard_aggregate": 6.6
            },
            "components": [
              {
                "key": "binary_artifacts",
                "name": "Binary-Artifacts",
                "detail": "no binaries found in the repo",
                "points": 7.5,
                "status": "met",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "branch_protection",
                "name": "Branch-Protection",
                "detail": "branch protection is not maximal on development and all release branches",
                "points": 2.2,
                "status": "partial",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "ci_tests",
                "name": "CI-Tests",
                "detail": "30 out of 30 merged PRs checked by a CI test -- score normalized to 10",
                "points": 2.5,
                "status": "met",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "cii_best_practices",
                "name": "CII-Best-Practices",
                "detail": "no effort to earn an OpenSSF best practices badge detected",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "code_review",
                "name": "Code-Review",
                "detail": "Found 0/23 approved changesets -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "contributors",
                "name": "Contributors",
                "detail": "project has 2 contributing companies or organizations -- score normalized to 6",
                "points": 1.5,
                "status": "partial",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "dangerous_workflow",
                "name": "Dangerous-Workflow",
                "detail": "no dangerous workflow patterns detected",
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              },
              {
                "key": "dependency_update_tool",
                "name": "Dependency-Update-Tool",
                "detail": "update tool detected",
                "points": 7.5,
                "status": "met",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "fuzzing",
                "name": "Fuzzing",
                "detail": "project is not fuzzed",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 5
              },
              {
                "key": "license",
                "name": "License",
                "detail": "license file detected",
                "points": 2.5,
                "status": "met",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "maintained",
                "name": "Maintained",
                "detail": "30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10",
                "points": 7.5,
                "status": "met",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "packaging",
                "name": "Packaging",
                "detail": "packaging workflow not detected",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_data",
                    "params": {}
                  }
                ],
                "max_points": 5
              },
              {
                "key": "pinned_dependencies",
                "name": "Pinned-Dependencies",
                "detail": "dependency not pinned by hash detected -- score normalized to 4",
                "points": 2,
                "status": "partial",
                "details": [],
                "max_points": 5
              },
              {
                "key": "sast",
                "name": "SAST",
                "detail": "SAST tool is run on all commits",
                "points": 5,
                "status": "met",
                "details": [],
                "max_points": 5
              },
              {
                "key": "security_policy",
                "name": "Security-Policy",
                "detail": "security policy file detected",
                "points": 5,
                "status": "met",
                "details": [],
                "max_points": 5
              },
              {
                "key": "signed_releases",
                "name": "Signed-Releases",
                "detail": "no releases found",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_data",
                    "params": {}
                  }
                ],
                "max_points": 7.5
              },
              {
                "key": "token_permissions",
                "name": "Token-Permissions",
                "detail": "detected GitHub workflow tokens with excessive permissions",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "vulnerabilities",
                "name": "Vulnerabilities",
                "detail": "0 existing vulnerabilities detected",
                "points": 7.5,
                "status": "met",
                "details": [],
                "max_points": 7.5
              }
            ]
          },
          {
            "key": "dependency_advisories",
            "band": "excellent",
            "name": "Dependency advisories",
            "note": "Excluded from scoring (no data or not applicable): Indirect dependencies free of known advisories, No advisories left outstanding. Remaining weights renormalized. Matched 111 resolved dependencies against OSV; 6 could not be assessed (no resolved version, an unsupported ecosystem, or beyond the reported package list). This repository publishes no package the index resolves, so the repository dependency graph was assessed instead. That graph mixes development and test pins with shipped dependencies, so only the declared runtime dependencies are scored; transitive findings are reported as context and excluded from the score. Reachability is not analyzed.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "indirect_dependencies_free_of_known_advisories",
                    "no_advisories_left_outstanding"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              },
              {
                "code": "advisories_scope_repository",
                "params": {
                  "assessed": 111
                }
              },
              {
                "code": "advisories_unassessed",
                "params": {
                  "count": 6
                }
              },
              {
                "code": "advisories_repo_graph_caveat",
                "params": {}
              },
              {
                "code": "advisories_reachability",
                "params": {}
              }
            ],
            "value": 100,
            "inputs": {
              "source": "osv",
              "advisories": 0,
              "affected_packages": 0,
              "assessed_packages": 111,
              "unassessed_packages": 6,
              "affected_by_severity": "none",
              "direct_affected_packages": 0
            },
            "components": [
              {
                "key": "direct_dependencies_free_of_known_advisories",
                "name": "Direct dependencies free of known advisories",
                "detail": "no direct dependency carries a known advisory",
                "points": 35,
                "status": "met",
                "details": [
                  {
                    "code": "no_direct_advisories",
                    "params": {}
                  }
                ],
                "max_points": 35
              },
              {
                "key": "indirect_dependencies_free_of_known_advisories",
                "name": "Indirect dependencies free of known advisories",
                "detail": "transitive set not separable from development and test dependencies in this scope",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "advisories_scope_not_separable",
                    "params": {}
                  }
                ],
                "max_points": 25
              },
              {
                "key": "no_advisories_left_outstanding",
                "name": "No advisories left outstanding",
                "detail": "no advisory carries a publication date",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "advisories_no_publication_date",
                    "params": {}
                  }
                ],
                "max_points": 40
              }
            ]
          },
          {
            "key": "malicious_dependencies",
            "band": "excellent",
            "name": "Malicious dependencies",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "source": "osv",
              "meaning": "reported as a malicious package by the OpenSSF corpus; the remedy is removal or moving off the compromised name, never an upgrade of the same artifact. Versions the registry has since pulled are listed but not scored",
              "packages": [],
              "red_flag": false,
              "assessed_packages": 111,
              "malicious_packages": 0,
              "direct_malicious_packages": 0,
              "withdrawn_malicious_packages": 0,
              "installable_malicious_packages": 0
            },
            "components": [
              {
                "key": "no_dependency_reported_as_a_malicious_package",
                "name": "No dependency reported as a malicious package",
                "detail": "no dependency is reported as a malicious package",
                "points": 100,
                "status": "met",
                "details": [
                  {
                    "code": "no_malicious_dependencies",
                    "params": {}
                  }
                ],
                "max_points": 100
              }
            ]
          },
          {
            "key": "high_risk_jurisdiction_exposure",
            "band": "excellent",
            "name": "High-Risk Jurisdiction Exposure",
            "note": "Only high-confidence self-published location evidence affects this multiplier. Ambiguous matches are review-only; country evidence is not proof of nationality, citizenship, legal registration, malicious intent, or sanctions status.",
            "notes": [
              {
                "code": "jurisdiction_evidence_limits",
                "params": {}
              }
            ],
            "value": 100,
            "inputs": {
              "meaning": "self-published location evidence; not nationality or citizenship",
              "red_flag": false,
              "exposures": [],
              "policy_countries": [
                "Russia",
                "Iran",
                "North Korea"
              ],
              "review_only_matches": 0,
              "assessed_self_published_locations": 3
            },
            "components": [
              {
                "key": "policy_exposure_multiplier",
                "name": "Policy exposure multiplier",
                "detail": "no confirmed policy-scope location match",
                "points": 100,
                "status": "met",
                "details": [
                  {
                    "code": "jurisdiction_no_match",
                    "params": {}
                  }
                ],
                "max_points": 100
              }
            ]
          }
        ],
        "description": "Are visible security and supply-chain practices strong, with no malicious dependency and no unresolved high-risk jurisdiction exposure?"
      },
      {
        "key": "ai_readiness",
        "band": "moderate",
        "name": "AI Readiness",
        "value": 66,
        "weight": 0,
        "metrics": [
          {
            "key": "ai_agent_context",
            "band": "excellent",
            "name": "Agent context & guidance",
            "note": null,
            "notes": [],
            "value": 85,
            "inputs": {
              "has_llms_txt": false,
              "legible_history_share": 1,
              "agent_instruction_files": [
                "AGENTS.md",
                "CLAUDE.md"
              ],
              "agent_instruction_max_bytes": 6913
            },
            "components": [
              {
                "key": "agent_instructions",
                "name": "Agent instructions",
                "detail": "AGENTS.md, CLAUDE.md",
                "points": 45,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": "AGENTS.md, CLAUDE.md"
                    }
                  }
                ],
                "max_points": 45
              },
              {
                "key": "machine_readable_docs_llms_txt",
                "name": "Machine-readable docs (llms.txt)",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 15
              },
              {
                "key": "legible_commit_history",
                "name": "Legible commit history",
                "detail": "82 of 82 human commits state their intent (structured subject or explanatory body)",
                "points": 40,
                "status": "met",
                "details": [
                  {
                    "code": "legible_history",
                    "params": {
                      "legible": 82,
                      "sampled": 82
                    }
                  }
                ],
                "max_points": 40
              }
            ]
          },
          {
            "key": "ai_verify_loop",
            "band": "moderate",
            "name": "Verify loop (build / test / typecheck)",
            "note": null,
            "notes": [],
            "value": 65,
            "inputs": {
              "has_nix": false,
              "has_tests": true,
              "lockfiles": [
                "Gemfile.lock"
              ],
              "has_dockerfile": true,
              "typed_language": false,
              "bootstrap_files": [],
              "has_devcontainer": true,
              "has_linter_config": true,
              "typecheck_configs": [],
              "agent_commit_share": 0.82,
              "toolchain_manifests": [],
              "dependency_bot_commit_share": 0.08
            },
            "components": [
              {
                "key": "one_command_bootstrap",
                "name": "One-command bootstrap",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 18
              },
              {
                "key": "automated_tests",
                "name": "Automated tests",
                "detail": null,
                "points": 22,
                "status": "met",
                "details": [],
                "max_points": 22
              },
              {
                "key": "lint_format_config",
                "name": "Lint / format config",
                "detail": ".rubocop.yml",
                "points": 11,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": ".rubocop.yml"
                    }
                  }
                ],
                "max_points": 11
              },
              {
                "key": "static_type_checking",
                "name": "Static type checking",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 11
              },
              {
                "key": "reproducible_environment",
                "name": "Reproducible environment",
                "detail": "devcontainer, Dockerfile, lockfile",
                "points": 10,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": "devcontainer, Dockerfile, lockfile"
                    }
                  }
                ],
                "max_points": 10
              },
              {
                "key": "demonstrated_agent_practice",
                "name": "Demonstrated agent practice",
                "detail": "82 of the last 100 commits agent-authored or agent-credited",
                "points": 10,
                "status": "met",
                "details": [
                  {
                    "code": "agent_authored_commits",
                    "params": {
                      "count": 82,
                      "sampled": 100
                    }
                  }
                ],
                "max_points": 10
              },
              {
                "key": "automated_maintenance",
                "name": "Automated maintenance",
                "detail": "8 of the last 100 commits are automated dependency updates",
                "points": 8,
                "status": "met",
                "details": [
                  {
                    "code": "dependency_bot_commits",
                    "params": {
                      "count": 8,
                      "sampled": 100
                    }
                  }
                ],
                "max_points": 8
              },
              {
                "key": "openssf_scorecard_pinned_dependencies",
                "name": "OpenSSF Scorecard: Pinned-Dependencies",
                "detail": "dependency not pinned by hash detected -- score normalized to 4",
                "points": 4,
                "status": "partial",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "ai_code_legibility",
            "band": "moderate",
            "name": "Code legibility for models",
            "note": null,
            "notes": [],
            "value": 55,
            "inputs": {
              "primary_language": "Ruby",
              "largest_source_bytes": 38562,
              "source_files_sampled": 379,
              "oversized_source_files": 0
            },
            "components": [
              {
                "key": "type_checkable_code",
                "name": "Type-checkable code",
                "detail": "Ruby without a type-check config",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "no_typecheck_config_language",
                    "params": {
                      "language": "Ruby"
                    }
                  }
                ],
                "max_points": 45
              },
              {
                "key": "manageable_file_sizes",
                "name": "Manageable file sizes",
                "detail": "0/379 source files over 60KB",
                "points": 55,
                "status": "met",
                "details": [
                  {
                    "code": "oversized_source_files",
                    "params": {
                      "kb": 60,
                      "sampled": 379,
                      "oversized": 0
                    }
                  }
                ],
                "max_points": 55
              }
            ]
          },
          {
            "key": "ai_interfaces",
            "band": "at_risk",
            "name": "Machine-readable interfaces",
            "note": null,
            "notes": [],
            "value": 40,
            "inputs": {
              "example_dirs": [
                "demos"
              ],
              "has_mcp_signal": false,
              "api_schema_files": []
            },
            "components": [
              {
                "key": "api_schema_openapi_graphql_proto",
                "name": "API schema (OpenAPI/GraphQL/proto)",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 40
              },
              {
                "key": "mcp_server",
                "name": "MCP server",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 20
              },
              {
                "key": "runnable_examples",
                "name": "Runnable examples",
                "detail": "demos",
                "points": 40,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": "demos"
                    }
                  }
                ],
                "max_points": 40
              }
            ]
          }
        ],
        "description": "How well is the repo equipped to be developed and maintained with AI coding agents? An independent, experimental badge — weight 0.0, so it is surfaced on its own and does not affect the overall health score."
      }
    ],
    "metrics_version": "1.13.0"
  },
  "warnings": [
    "Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token"
  ],
  "report_type": "repository",
  "generated_at": "2026-07-26T06:12:48.007207Z",
  "schema_version": "0.27.0",
  "badge_url": "https://raw.githubusercontent.com/inspect-software/badges/main/v1/r/rarebit-one/standard_id.svg",
  "full_name": "rarebit-one/standard_id",
  "license_state": "standard",
  "license_spdx": "MIT"
}