公开记录
软件健康报告模式 0.27.0 · 指标 1.13.0 · 2026-07-27 00:30 UTC

rchemist / rcm-listgrid

TypeScriptApache-2.0★ 1 星标⑂ 0 复刻始于 2026年4月在 GitHub 上查看 ↗

rchemist/rcm-listgrid 的健康指数为 100 分中的 55 分,处于「中等」区间。 其得分最高的类别是Engineering Quality(74/100),最低的是Community & Adoption(32/100)。 最近一次更新在 13 天前。 近期的大部分工作由 1 位贡献者完成。

55
总分 / 100
中等

软件健康指数

指标归入加权类别,统一采用 1–100 量表。总体分先取类别加权平均;当公开证据触发高风险司法辖区政策时,评级会按政策调整,并设置 49(有风险)的上限。AI 就绪度不计入总体分。

55
优秀85-100堪称典范;基本满足所有检验标准
良好70-84健康;仅有轻微不足
中等50-69可接受,但存在明显不足;建议进行审查
存在风险30-49存在重大薄弱环节;采用时应保持审慎
危急1-29问题严重(项目被弃置、仅有单一维护者、缺乏基本工程规范)
活力社区与采用可持续性与治理工程质量安全AI 就绪度

评分画像

每条轴代表一个类别。形状比平均值更重要——健康的对象会填满整个图形,而“一峰一谷”式画像意味着某一维度的优势正掩盖另一维度的风险。

所有权

Rchemist组织
1 关注者13 个公开仓库始于 2019年7月

该仓库由组织支持——共同承担、可问责的托管责任,可延续于任何单一维护者之后。

软件包生态系统

注册表软件包版本月下载量版本数最近发布标签
npm@rchemist/listgrid0.3.262,0504815 天前reactlistgridcrudentityformtabledesign-systemcss-primitivesdata-attrframework-free

按类别列示的指标

活力

项目是否仍有生命——是否仍在编写代码,是否仍在发布版本?

67中等 · 占总体的 22%
评分方式
28.8/36推送新近度 — 最近一次推送于 13 天前
6.2/36提交节奏 — 52 周中有 9 周有提交
17.3/18提交量 — 最近一年 83 次提交
10/10OpenSSF Scorecard:Maintained — 30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10
所用输入
commits_last_year83
human_commit_share1
days_since_last_push13
active_weeks_last_year9

发布纪律

74良好
评分方式
27/27有发布版本 — 已发布 1 个发布版本
27/36发布时效 — 最近一次发布版本于 96 天前
12.6/27发布节奏 — 节奏未知(仅一次发布)
0/10OpenSSF Scorecard:Signed-Releases — 无数据
所用输入
releases_count1
latest_release_tagv0.2.6
releases_from_tags
days_since_latest_release96
mean_days_between_releases
已排除计分(无数据或不适用):OpenSSF Scorecard:Signed-Releases。 其余权重已重新归一化。

社区与采用

项目是否拥有用户、下载量与关注度,并具备欢迎贡献者参与的配置?

32存在风险 · 占总体的 18%
评分方式
0/60星标 — 1 个星标
0/25复刻 — 0 个复刻
0/15关注者 — 0 位关注者
所用输入
forks0
stars1
watchers0
growth_stateunverified
growth_factor_pct100
growth_unverified_reasonno_history

社区健康

50中等
评分方式
22.5/22.5README
22.5/22.5许可证 — 可识别的许可证(Apache-2.0)
0/18CONTRIBUTING 指南
0/13.5行为准则
0/7.2议题模板
0/6.3PR 模板
所用输入
has_readme
has_license
has_contributing
has_issue_template
has_code_of_conduct
has_pull_request_template
评分方式
44.2/80月度下载量 — npm 合计每月 2,050 次下载
0/20注册表被依赖数 — 该生态系统不报告此项
所用输入
packages@rchemist/listgrid
dependents
ecosystemsnpm
total_downloads
monthly_downloads2,050
已排除计分(无数据或不适用):注册表被依赖数。 其余权重已重新归一化。

可持续性与治理

项目能否在其成员之外延续——巴士系数、响应能力、由谁支持,以及软件包的维护状况?

55中等 · 占总体的 24%
评分方式
9/54巴士系数 — 1 位贡献者贡献了半数提交
0/22.5提交分布 — 头号贡献者编写了 100% 的提交
1.4/13.5贡献者广度 — 1 位贡献者
0/10OpenSSF Scorecard:Contributors — project has 0 contributing companies or organizations -- score normalized to 0
所用输入
bus_factor1
contributors_sampled1
top_contributor_share1
评分方式
46.8/46.8议题解决 — 100% 的议题已关闭
0/38.3PR 接受 — 没有已裁定的拉取请求或无数据
0/15OpenSSF Scorecard:Code-Review — Found 0/30 approved changesets -- score normalized to 0
所用输入
merged_prs0
open_issues0
closed_issues10
issue_closed_ratio1
closed_unmerged_prs0
已排除计分(无数据或不适用):PR 接受。 其余权重已重新归一化。
评分方式
30/30所有权背书 — 组织持有
0/20已验证域名
2.2/25所有者影响力 — rchemist 有 1 位关注者
20.3/25既往记录 — 13 个公开仓库,账户约 7 年
所用输入
followers1
owner_typeOrganization
is_verified
owner_loginrchemist
public_repos13
account_age_days2,568
评分方式
25/25已发布且可解析 — npm 上有 1 个软件包
35/35发布时效 — 最近一次发布于 15 天前
20/20版本历史 — 48 个已发布版本
20/20未被弃用 — 活跃,未被弃用或撤回
所用输入
packages@rchemist/listgrid
ecosystemsnpm
any_deprecated
min_days_since_publish15

工程质量

基础的工程与文档实践是否到位?

74良好 · 占总体的 20%

工程实践

80良好
评分方式
24/24CI 工作流 — 2 个工作流
24/24存在测试
16/16Linter 配置 — eslint.config.mjs
0/9.6Pre-commit 钩子
0/6.4.editorconfig
0/20OpenSSF Scorecard:CI-Tests — 无数据
所用输入
has_ci
has_tests
has_editorconfig
has_linter_config
has_precommit_config
已排除计分(无数据或不适用):OpenSSF Scorecard:CI-Tests。 其余权重已重新归一化。

文档

65中等
评分方式
30/30README
25/25文档目录
0/15文档 / 主页站点
0/10仓库描述
0/10主题标签
10/10Wiki
所用输入
topics
has_wiki
homepage
has_readme
has_docs_dir
has_description

安全

可见的安全与供应链实践是否稳固,且不存在未解决的高风险司法辖区暴露?

43存在风险 · 占总体的 16%

安全态势

36存在风险
评分方式
7.5/7.5Binary-Artifacts — no binaries found in the repo
0/7.5Branch-Protection — branch protection not enabled on development/release branches
0/2.5CI-Tests — 无数据
0/2.5CII-Best-Practices — no effort to earn an OpenSSF best practices badge detected
0/7.5Code-Review — Found 0/30 approved changesets -- score normalized to 0
0/2.5Contributors — project has 0 contributing companies or organizations -- score normalized to 0
10/10Dangerous-Workflow — no dangerous workflow patterns detected
0/7.5Dependency-Update-Tool — no update tool detected
0/5Fuzzing — project is not fuzzed
2.5/2.5许可证 — license file detected
7.5/7.5Maintained — 30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10
5/5Packaging — packaging workflow detected
1.5/5Pinned-Dependencies — dependency not pinned by hash detected -- score normalized to 3
0/5SAST — no SAST tool detected
0/5Security-Policy — security policy file not detected
0/7.5Signed-Releases — 无数据
0/7.5Token-Permissions — detected GitHub workflow tokens with excessive permissions
0/7.5Vulnerabilities — 42 existing vulnerabilities detected
所用输入
sourceopenssf_scorecard
checks_evaluated16
scorecard_versionv5.5.0
checks_inconclusive2
scorecard_aggregate3.6
已排除计分(无数据或不适用):ci_tests, signed_releases。 其余权重已重新归一化。
评分方式
14/35直接依赖不含已知公告 — 1 个受影响:uuid 9.0.1 (high 7.5)
25/25间接依赖不含已知公告 — 没有间接依赖携带已知公告
33.7/40没有长期未处理的公告 — 1 个携带公告的软件包超过 90 天未处理;最早一条发布于 95 天前
所用输入
sourceosv
advisories1
affected_packages1
assessed_packages6
unassessed_packages0
affected_by_severityhigh 1
direct_affected_packages1
比对的是 npm:@rchemist/listgrid@0.3.26 的运行时依赖闭包——安装已发布的软件包时真正被拉取进来的内容——共 6 个软件包。 未对可达性进行分析。

AI 就绪度

该仓库在多大程度上具备与 AI 编码代理协同开发与维护的条件?这是一枚独立的实验性徽章——权重为 0.0,因此单独呈现,不影响总体健康评分。

63中等 · 占总体的 0%
评分方式
0/45代理指令 — 没有 CLAUDE.md / AGENTS.md / 编辑器规则
0/15机器可读文档(llms.txt)
40/40可读的提交历史 — 83 次人类提交中有 82 次说明了意图(结构化标题或解释性正文)
所用输入
has_llms_txt
legible_history_share0.988
agent_instruction_files
agent_instruction_max_bytes
评分方式
0/18一条命令的引导启动
22/22自动化测试
11/11Lint / 格式化配置 — eslint.config.mjs
11/11静态类型检查 — tsconfig.json
10/10可复现环境 — lockfile
10/10已体现的代理实践 — 最近 83 次提交中有 48 次由代理编写或署名代理
0/8自动化维护 — 未观察到自动依赖更新
3/10OpenSSF Scorecard:Pinned-Dependencies — dependency not pinned by hash detected -- score normalized to 3
所用输入
has_nix
has_tests
lockfilespackage-lock.json
has_dockerfile
typed_language
bootstrap_files
has_devcontainer
has_linter_config
typecheck_configstsconfig.json
agent_commit_share0.578
toolchain_manifests
dependency_bot_commit_share0
评分方式
45/45可类型检查的代码 — TypeScript(静态类型)
55/55可控的文件大小 — 采样的 365 个源文件中有 0 个超过 60KB
所用输入
primary_languageTypeScript
largest_source_bytes37,743
source_files_sampled365
oversized_source_files0

关键数据

1GitHub 星标
1贡献者
83最近 12 个月提交数
13距最近推送天数
1发布版本数
1巴士系数(bus factor)
0开放议题
npm软件包生态系统数

数据采集警告

  • Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token
  • GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository

更多细节

OpenSSF Scorecard 3.6 / 10
3.6综合

来自开源项目 OpenSSF Scorecard 的独立、工具无关的安全评估。每项检查奖励的是安全实践本身,而非特定供应商的工具。Scorecard 无法判定的检查项标记为 不适用,并从安全评分中剔除(绝不按零分计)。Scorecard v5.5.0 · 2026-07-27 00:29 UTC

10Binary-Artifactsno binaries found in the repo
0Branch-Protectionbranch protection not enabled on development/release branches
不适用CI-Testsno pull request found
0CII-Best-Practicesno effort to earn an OpenSSF best practices badge detected
0Code-ReviewFound 0/30 approved changesets -- score normalized to 0
0Contributorsproject has 0 contributing companies or organizations -- score normalized to 0
10Dangerous-Workflowno dangerous workflow patterns detected
0Dependency-Update-Toolno update tool detected
0Fuzzingproject is not fuzzed
10Licenselicense file detected
10Maintained30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10
10Packagingpackaging workflow detected
3Pinned-Dependenciesdependency not pinned by hash detected -- score normalized to 3
0SASTno SAST tool detected
0Security-Policysecurity policy file not detected
不适用Signed-Releasesno releases found
0Token-Permissionsdetected GitHub workflow tokens with excessive permissions
0Vulnerabilities42 existing vulnerabilities detected
直接依赖 5
注册表软件包版本约束清单文件
npmclsx^2.1.1package.json
npmcrypto-js^4.2.0package.json
npmtailwind-merge^2.5.4package.json
npmuuid^9.0.0package.json
npmzustand^4.4.0package.json
全部依赖 未采集

本报告未能采集到解析后的依赖集合:GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository

依赖安全公告 1

安装 npm:@rchemist/listgrid@0.3.26 会引入 6 个包(直接与传递):其中 1 个存在已知公告,1 个为直接依赖。

软件包版本关系严重程度公告数修复版本
uuid9.0.1直接113.0.1

公告表示依赖图中记录的版本落入某条公告的受影响范围。可达性未经分析,且依赖图包含开发与测试的版本固定——某项发现可能只涉及工具链而非交付的软件。

原始 JSON 报告 机器可读
{
  "data": {
    "repo": {
      "topics": [],
      "is_fork": false,
      "size_kb": 4882,
      "has_wiki": true,
      "homepage": null,
      "languages": {
        "CSS": 167086,
        "JavaScript": 15416,
        "TypeScript": 2022359
      },
      "pushed_at": "2026-07-13T14:12:57Z",
      "created_at": "2026-04-17T11:47:51Z",
      "owner_type": "Organization",
      "updated_at": "2026-07-11T04:40:31Z",
      "description": null,
      "is_archived": false,
      "is_disabled": false,
      "license_spdx": "Apache-2.0",
      "default_branch": "main",
      "license_spdx_raw": "Apache-2.0",
      "primary_language": "TypeScript",
      "significant_languages": [
        "TypeScript"
      ]
    },
    "owner": {
      "blog": "https://rchemist.io",
      "name": "Rchemist",
      "type": "Organization",
      "login": "rchemist",
      "company": null,
      "location": "Korea, South",
      "followers": 1,
      "avatar_url": "https://avatars.githubusercontent.com/u/52901210?v=4",
      "created_at": "2019-07-15T02:43:24Z",
      "is_verified": null,
      "public_repos": 13,
      "account_age_days": 2568
    },
    "license": {
      "state": "standard",
      "spdx_id": "Apache-2.0",
      "raw_spdx": "Apache-2.0",
      "file_present": true,
      "scorecard_found": true,
      "profile_has_license": true
    },
    "activity": {
      "releases": [
        {
          "tag": "v0.2.6",
          "kind": "patch",
          "published_at": "2026-04-21T09:21:55Z"
        }
      ],
      "recent_commits": [
        {
          "oid": "853660ba5bd18b8043ca921f2241f9931228ec61",
          "body": "P0 코드/릴리스준비 완료(962 tests green, 14 commits, p0-hotfixes). P0-10은\npublish/브랜치전환만 사용자 승인 대기. fan-out deviation 5건 §Needs Review 기재.\n0.3->0.4 마이그레이션 how-to를 리빙 문서로 착수(P7 승격) — 사용자 요청 반영.\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "docs(progress): P0-1~P0-9 완료 반영 + Needs Review + 마이그레이션 리빙문서 추적",
          "author_name": "Kunner",
          "author_login": "kunner",
          "committed_at": "2026-07-10T08:21:17Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "898296ad8ba12473b62caba507b85f789c8157f8",
          "body": "Document the 9 silver-bug fixes + 3 security defaults (with Breaking section)\nand bump to 0.3.26. Release-docs gate confirms CHANGELOG top == package.json.\nPublish is intentionally NOT performed here (needs user approval).\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "chore(release): 0.3.26 — CHANGELOG + version bump",
          "author_name": "Kunner",
          "author_login": "kunner",
          "committed_at": "2026-07-10T08:15:28Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "52ff7d2e28147f7dfe8df4733f1562ff80aa30ce",
          "body": "Living migration how-to for existing 0.3 users. Section 1 documents the\nimmediate 0.3.26 hardening breaking changes (cryptKey required, HTML sanitizer\nopt-in, asset-url fallback removed) with actionable code; Section 2 is the\nskeleton for the phased 0.4 re-foundation migration, filled in as P1-P7 land.\nGraduates to docs/MIGRATION.md + codemod at GA (roadmap P7).\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "docs: seed 0.3->0.4 migration guide (living doc)",
          "author_name": "Kunner",
          "author_login": "kunner",
          "committed_at": "2026-07-10T08:15:20Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "5cb4b9bb2185afc07b0fd1d87d6bf3c223568453",
          "body": "…freeze\n\nTurn @typescript-eslint/no-explicit-any from off to error so new/modified\nsource cannot introduce `any`. The 135 files (737 occurrences) that already\nuse `any` are grandfathered via a single override block listing them, so only\nNEW influx is blocked. The v0.4 re-foundation whittles this list down.\n\nChosen over 135 inline eslint-disable comments (same effect, one-file diff,\nexplicit frozen set). Completes PROGRESS P0-8.\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "chore(lint): enforce no-explicit-any (error) with grandfathered file …",
          "author_name": "Kunner",
          "author_login": "kunner",
          "committed_at": "2026-07-10T08:11:58Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "d91c945a52553a8fbe333dd10ca0fc037cfe76d2",
          "body": "Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "style: apply prettier to P0 fix files",
          "author_name": "Kunner",
          "author_login": "kunner",
          "committed_at": "2026-07-10T08:11:58Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "fe585233663270d02faee30234e18e5ff7efe64d",
          "body": "…SearchForm v1\n\n- ASSET_SERVER_URL falls back to '' (not http://127.0.0.1:8320) and warns once\n  when unconfigured, so a missing NEXT_PUBLIC_ASSET_SERVER surfaces instead of\n  silently pointing at localhost.\n- AdvancedSearchForm (v1, 0 internal usages) marked @deprecated in favor of\n  AdvancedSearchFormV2.\n\nPROGRESS P0-9.\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "chore(misc): drop 127.0.0.1 asset-server fallback; deprecate Advanced…",
          "author_name": "Kunner",
          "author_login": "kunner",
          "committed_at": "2026-07-10T08:08:37Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "ab823158d0f957825a74344230481a06062e3577",
          "body": "…dRenderer\n\nhandleFieldChange and the default viewParams.onChange were verbatim-duplicated\nasync IIFEs with no .catch — when validate() or getManyToOneLink() threw, the\nrejection went unhandled and the field silently lost its value and error.\nExtract the shared logic into applyFieldChange() and wrap both call sites in\ntry/catch that surfaces the failure via setErrors().\n\nPROGRESS P0-3.\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix(form): surface onChange errors instead of swallowing them in Fiel…",
          "author_name": "Kunner",
          "author_login": "kunner",
          "committed_at": "2026-07-10T08:08:37Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "04d120b148daac3f4374d5448f3a70f77131a95a",
          "body": "…pt key\n\nADR-0006 P0 hardening:\n- configureHtmlSanitizer((html)=>string): the 3 raw-HTML sinks (HtmlField,\n  ShowNotifications, ViewHelpIcon) render escaped TEXT + warn once until a host\n  configures a sanitizer, instead of injecting raw HTML.\n- MenuPermissionChecker: warn once when unregistered (st\n[…]\nshared fallback key — encrypt/decrypt now THROW when\n  cryptKey is unset (BREAKING for hosts that never set one; see CHANGELOG).\n\nPROGRESS P0-7.\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat(security): secure-by-default HTML sanitizer, menu-perm warn, cry…",
          "author_name": "Kunner",
          "author_login": "kunner",
          "committed_at": "2026-07-10T08:04:02Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "848ed1d5dbcbdba842c78edd1d1c43b29c8e5791",
          "body": "EntityForm.clone() copied manageEntityForm by reference, so mutating the clone\n(or original) leaked across both. Shallow-copy it: { ...this.manageEntityForm }.\n\nPROGRESS P0-6.\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix(config): clone EntityForm.manageEntityForm by value to stop aliasing",
          "author_name": "Kunner",
          "author_login": "kunner",
          "committed_at": "2026-07-10T08:04:02Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "d6cdbfaf0168ca345ae6b293b851ca18608aa3e4",
          "body": "useLoadingStore was a plain function returning a mutable object, so state\nchanges never triggered re-renders. Back it with a zustand store (already a\ndependency); configureLoading now sets the store's state, preserving the\nhost-swap contract. All callers use it as a hook inside components.\n\nPROGRESS P0-5.\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix(loading): make useLoadingStore reactive via a zustand store",
          "author_name": "Kunner",
          "author_login": "kunner",
          "committed_at": "2026-07-10T08:04:01Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "6d2320cd64d49618d5009b882de59cfc8ae853ec",
          "body": "…ed value\n\nuseQuickSearchBar overwrote a list's configured defaultPageSize with the\nglobal localStorage page size at mount. Thread options.defaultPageSize through\nViewListGrid -> QuickSearchBar -> the hook and prefer it: explicit\ndefaultPageSize > global stored > library default.\n\nPROGRESS P0-4.\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix(list): respect explicit per-list defaultPageSize over global stor…",
          "author_name": "Kunner",
          "author_login": "kunner",
          "committed_at": "2026-07-10T08:04:01Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "80329dd757e850a7c92d1a20356105e091f9bb6a",
          "body": "…eeps time\n\nDatetimeField registered its field type as 'date', so Excel export/import fed\n'date' into transfer/Type.ts and dropped the time component (the datetime\nbranch was dead code). Register as 'datetime'; filter sizing already handles\nboth types (verified, no regression).\n\nPROGRESS P0-2.\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix(fields): register DatetimeField as 'datetime' so Excel transfer k…",
          "author_name": "Kunner",
          "author_login": "kunner",
          "committed_at": "2026-07-10T08:04:01Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "0f01861861931da0d16002fee6a1bf0e704a3d6c",
          "body": "…tion\n\ngetValueAsNumber/getValueAsBoolean evaluated the value as\n`(value?.current ?? getRenderType()==='update') ? fetched : default` — the\n=== bound before ?? so 'current' was never used directly and falsy current\n(0, false) was silently replaced by fetched/default, defeating MinMaxNumber\nvalidatio\n[…]\nhesize the ternary to mirror the correct getValueAsString:\n`value?.current ?? (getRenderType()==='update' ? fetched : default)`.\n\nPROGRESS P0-1.\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix(validation): correct operator precedence disabling min/max valida…",
          "author_name": "Kunner",
          "author_login": "kunner",
          "committed_at": "2026-07-10T08:04:01Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "a786ff356d93019e17263b93552b1cb419c669b7",
          "body": "…, add release-docs gate\n\n- package.json: engines.node >=20\n- .nvmrc: 22 (LTS)\n- ci.yml: matrix Node 20/22, trigger on main + v0.4\n- publish.yml: run scripts/check-release-docs.mjs before publish\n- scripts/check-release-docs.mjs: assert CHANGELOG top version == package.json version\n\nPart of PROGRESS P0-8 (env fixation + release gate). eslint no-explicit-any\nfreeze follows in a separate commit after the P0 code fixes land.\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "chore(release): pin Node engines, add CI 20/22 matrix + v0.4 triggers…",
          "author_name": "Kunner",
          "author_login": "kunner",
          "committed_at": "2026-07-10T07:55:11Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "214c85d5784579f5592f56a014ece7e6421134c2",
          "body": "Node 20+ exposes an experimental global localStorage/sessionStorage that is\ninert without --localstorage-file (Node 26 warns and the global shadows\njsdom's implementation), causing 27 Web Storage tests to fail with\n\"Cannot read properties of undefined (reading 'clear')\". Install a\ndeterministic in-m\n[…]\nobalThis and window in the test setup\nso storage behaves consistently across Node/jsdom versions.\n\nRefs: PROGRESS P0-8 (jsdom localStorage 27건).\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "test: polyfill Web Storage to fix inert localStorage global on Node 20+",
          "author_name": "Kunner",
          "author_login": "kunner",
          "committed_at": "2026-07-10T07:45:32Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "62d51632d3e706bd38eca0608a1066f1c028c21f",
          "body": "…실행 가능 수준)\n\n- documents/PROGRESS.md: /progress로 재개 가능한 활성 슬롯 — P0 핫픽스 10태스크(파일:라인\n  좌표·수정 방향·회귀 테스트·수용 기준 내장), P1 워크스페이스/alpha 파이프, P2 특성화\n  오라클(신구 공용 하네스), P3 계약 골격+감사표+파일럿 이식, P4~P7 개요+자기 전개 규칙.\n  모델 배분([O]/[S]/[H]) 태스크별 명시, fable 불필요 — 판단 막히면 Open Questions 에스컬레이션\n- prd/sample-site-spec.md: 내장 샘플\n[…]\ns/프리미티브 교체/커스텀 필드/자체 wrapper/어댑터 교체) = GA 게이트\n- 헌장 C7에 4단 확장 계층(토큰→슬롯→프리미티브→wrapper) 명문화, ADR-0008 워크스페이스에\n  apps/sample 추가, 로드맵 P1/P5 및 PRD 정합화\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "docs(progress): 0.4 재기초 실행 PROGRESS 설계 + apps/sample 명세 (opus/sonnet …",
          "author_name": "Kunner",
          "author_login": "kunner",
          "committed_at": "2026-07-10T07:38:02Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "85f1518038be04e99c2012be5e7ec3c6b8290d3c",
          "body": "사용자 결정(2026-07-10) 반영:\n- ADR-0008: 제자리 순차 재설계 대신 재기초(re-foundation)+장기 이식 — v0.4 브랜치\n  워크스페이스에 4계층 골격 신축, 필드/검증/CSS 로직은 특성화 테스트 오라클 아래 이식.\n  2차 시스템 효과 방지 장치 6개(헌장 울타리·이식 우선·오라클·동시처리 고정목록·\n  alpha 상시배포·abort 기준) 명문화\n- 버전·브랜치: main=0.3.x 유지보수, v0.4=재기초 라인(0.4.0-alpha.N dist-tag next),\n  GA 시 main→rele\n[…]\n증·연쇄, 주입식 통합, 어댑터,\n  리스트 표준 세트. 0.4.0 GA 게이트의 대조표\n- 로드맵 P1~P7 재편(스캐폴드→오라클→계약 골격→코어 이식→렌더러 이식→어댑터→GA),\n  PRD §3·§4 정합화, documents/README 권위 목록 갱신\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "docs(design): ADR-0008 재기초 전략 확정 + 개념 헌장 + 로드맵 전면 개정",
          "author_name": "Kunner",
          "author_login": "kunner",
          "committed_at": "2026-07-10T07:00:29Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "60cdb0c4c08bd6e3721d9fcf858e7ac48f0ecddd",
          "body": "사용자 논의(2026-07-10) 반영: '범용 대항마 기각'은 장기 목표의 축소가 아니라\n진입 수순의 교체다. 니치 3개 = beachhead, 범용 확장 트리거 3종(비RCM 채택 2건 /\nquick-start 30분 실측 / 커뮤니티 기여 1건) 충족 시 포지셔닝 확대 재논의를 명문화.\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "docs(prd): 피벗의 의미 명확화 — 목표 하향이 아닌 교두보 전략 + 범용 확장 트리거",
          "author_name": "Kunner",
          "author_login": "kunner",
          "committed_at": "2026-07-10T06:42:39Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "1aed2115fa59609a252f2d45c72b5e9fffd329ad",
          "body": "- documents/README.md: 문서 체계 인덱스·권위 순서·AI 세션 규칙(stale 재발 방지)\n- PRD: 포지셔닝 피벗, v1 스코프(C1~C4), 릴리스 전략(0.4=breaking 창구), 성공 지표\n- ADR-0001 패키징(tsup dual+로드 스모크) / 0002 폼 상태 인스턴스 store / 0003 schema-render 분리(순환 213 해소) / 0004 API 표면 재단(580→~200) / 0005 백엔드 어댑터 계약 / 0006 보안 기준선(XSS·fail-open) / 0007 품질 게이트(특성화 테스트·래칫)\n- 로드맵: P0~P7 실행 순서·수용 기준·모델 배분 힌트 — 하위 티어 세션이 ADR만 읽고 착수 가능하도록 작성\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "docs(design): v1 제품화 설계 문서 — PRD + ADR-0001~0007 + 로드맵 (3/3)",
          "author_name": "Kunner",
          "author_login": "kunner",
          "committed_at": "2026-07-10T06:18:12Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "16a3083e896522f5289e342180b66761a694af56",
          "body": "- 종합 보고서: 판정 PIVOT(조건부 GO) — 범용 어드민 정면승부 기각, RCM 수직통합+한국형+딥서브컬렉션 니치 재정의. 선결 조건 C1~C4\n- 42-에이전트 워크플로우 산출물(맵10·비평6·문서감사·시장조사) 원문 보존 — 각 파일에 원자료 경고 배너\n- 검증 로그: high/critical 18건 반증 시도 결과와 심각도 정정(예: clone aliasing critical→low) — 원자료 인용 시 우선 적용\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "docs(analysis): 제로베이스 분석 보고서 + 원자료 18건 + 적대적 검증 로그 (2/3)",
          "author_name": "Kunner",
          "author_login": "kunner",
          "committed_at": "2026-07-10T06:18:12Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "62801caf5e7ec7de5e00fbb4eecd869e3817f43d",
          "body": "- archive: 완료된 PROGRESS(2026-05-29)·REFACTOR_HOST_COUPLING(실행 완료)·docs/ROADMAP(v0.2.0 시점 정지) → documents/archive/\n- docs/api(596파일·5.1MB, v0.2.0 이후 stale) git 추적 제거 + .gitignore — npm run docs 로컬 생성 정책으로 전환\n- README: v0.2.0 표기→v0.3.x 현행, 884+→930 테스트, 깨진 링크 정리\n- CHANGELOG: 누락된 0.3.23~0.3.25 소급 작성\n- \n[…]\n\n- MIGRATION: v0.2.x→v0.3.x 섹션 신설(0.3.1 백엔드 정합/0.3.21 peer·서브패스/0.3.22 envelope)\n- issues/7·8·9 fix-plan Status 헤더 OPEN→CLOSED 정정 (실제 이슈 상태와 일치)\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "docs: stale 문서 아카이브 + 전면 현행화 (제로베이스 분석 후속 1/3)",
          "author_name": "Kunner",
          "author_login": "kunner",
          "committed_at": "2026-07-10T06:17:53Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "48ab8636eb3f86aba4f9c032b270865746a7a7b1",
          "body": "0.3.24 의 filtersKey 재적용은 필터/정렬/페이지만 리셋하고 checkedItems(행 선택)는\n남겨, 새 결과셋에 잔존 선택행이 있으면 체크박스는 켜졌는데 host 선택상태는 빈 desync\n가 났다. remount 였다면 선택도 초기화됐을 것 → setCheckedItems([]) 추가로 동형 보장.\n\nvitest 929 passed · type-check ✅ · lint(신규 0).\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix(list): #10 — filtersKey 재적용 시 행 선택도 해제 (remount 동형 완성) — 0.3.25",
          "author_name": "kunner",
          "author_login": "kunner",
          "committed_at": "2026-06-20T05:00:48Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "f83babeecae5fa0565045f577cafeca410f37756",
          "body": "…용 — 0.3.24\n\nhost 가 자체 FilterBar/URL 로 필터 상태를 소유하고 `options.filters` 로 주입할 때,\n지금까지는 변경 반영을 위해 `<ViewListGridWrapper key={…}>` 로 컴포넌트를 remount\n해야 했다(상태 teardown + cold re-init + react-query 캐시구독 브리지 유발).\n\nopt-in `options.filtersKey` 추가: host 가 필터 상태 파생값(JSON/hash)을 넘기면, 값이\n바뀔 때 엔진이 기존 필터/정렬을 비우고(clea\n[…]\n추가.\n\ntype-check ✅ · lint ✅(신규 0) · vitest 929 passed(회귀 0).\nfirst consumer = project-manager 이슈 페이지(list/board 단일 config 수렴, #36).\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat(list): #10 — options.filtersKey 로 host-owned 필터 상태 remount 없이 재적…",
          "author_name": "kunner",
          "author_login": "kunner",
          "committed_at": "2026-06-20T04:44:04Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "83aa57b912704b868dc6850d16dbf9a169fc3ef2",
          "body": "onDrag(idList) reorders rows inside one list via up/down handles; it is NOT a\nmulti-column kanban DnD (moving a card between status columns to transition it).\nA consumer (project-manager #36) assumed onDrag could absorb a kanban board —\nit can't. Document that kanban boards stay host-owned (dnd-kit/HTML5) and only\nshare listgrid data via the headless useListGridLogic.\n\n- JSDoc on ViewListGridOptionProps.onDrag\n- EXTENSIONS.md TL;DR catalog row + 'When not to extend' bullet",
          "is_bot": false,
          "headline": "docs: clarify onDrag is within-list reorder, not kanban cross-column DnD",
          "author_name": "kunner",
          "author_login": "kunner",
          "committed_at": "2026-06-20T03:25:10Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "a43104e55581b4066225ab12c4768765ac424978",
          "body": "…— 0.3.23\n\n`.rcm-textarea[readonly]` 가 `--rcm-color-text-disabled`(gray-400)을 disabled\n배경 위에 써 2.3:1 대비로 WCAG 2 AA(4.5:1) 실패. `.rcm-input[readonly]` 가 이미\n적용한 동일 원칙(본문 색 유지 + disabled 배경)으로 readonly 를 disabled 와 분리.\nreadonly 값은 사용자가 읽는 데이터이므로 가독성 필수.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix(a11y): readonly textarea uses body text color (WCAG AA contrast) …",
          "author_name": "kunner",
          "author_login": "kunner",
          "committed_at": "2026-06-19T08:52:58Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "943f771227f4384cb1106c8348d0cb2dff35e03a",
          "body": "… — 0.3.22\n\n- #8 formatPrice nullish 가드 + renderListItemInstance `!= null` 정정 (0 보존)\n- #9 initialize 단건 fetch 1-depth 통일(response.data) + setFetchedValues nullish 방어선\n- CHANGELOG 0.3.22 + 컨슈머 우회 제거 안내, fix-plan 구현 결과 주입\n\nRelated to #8, #9\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix(render,form): nullable NumberField 셀 + EntityForm 단건 fetch 크래시 수정…",
          "author_name": "kunner",
          "author_login": "kunner",
          "committed_at": "2026-06-17T10:48:44Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "6d453454848d67a221e624201c2812799aee0a78",
          "body": "버전을 0.4.0 → 0.3.21로 정정. 프로젝트 컨벤션상 0.3.x 라인을 유지한다.\nCHANGELOG/문서의 버전 표기도 0.3.21로 일괄 정정(변경 내용 동일).\n\n이슈 #7.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "chore(release): 0.3.21로 정정 (0.3.x 라인 유지)",
          "author_name": "kunner",
          "author_login": "kunner",
          "committed_at": "2026-06-16T08:57:59Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "140bb26103af8dfcc4c9156f97f3bc7b1bf0ab52",
          "body": "전체 품질 게이트(type-check/lint/format/test:coverage 923 passed/build) green,\nbarrel module-graph 게이트(263 모듈, optional/heavy peer 도달 0) 확인.\nPROGRESS 종결(completed) + fix-plan ## 구현 결과 섹션 추가.\n\n이슈 #7 Phase 4 (#4.3) — 구현 완료.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "docs(issue): #7 최종 acceptance 통과 + fix-plan 구현 결과 주입",
          "author_name": "kunner",
          "author_login": "kunner",
          "committed_at": "2026-06-16T08:51:41Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "c6ec8eb700360794e3c2bf193181414b47c0f22f",
          "body": "package.json 0.3.20→0.4.0. CHANGELOG [0.4.0]에 BREAKING(peer 필수화,\nleaf/전송 subpath 이전, qrcode v3 고정) + import 매핑표 + Migration 가이드.\nREADME peer 섹션을 '필수 vs opt-in subpath' 표 + 전송 등록 예시로 갱신.\n\n이슈 #7 Phase 4 (#4.1, #4.2).\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "docs(release): 0.4.0 — peer 재분류/subpath/전송주입 문서화 + 버전 bump",
          "author_name": "kunner",
          "author_login": "kunner",
          "committed_at": "2026-06-16T08:47:57Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "e2d72d8e5b46b2d151a22d7b2faf3c6c9fadafcb",
          "body": "…ransfer\n\nxlsx/file-saver 기반 export/import 표면(DataExporter/DataImporter/Processor/\nSample/DynamicDataImporter/ExcelProvider)을 /excel subpath로 묶고,\nhost가 1줄(registerExcelDataTransfer())로 전송 기능을 코어 리스트에 주입하도록 함.\nDataTransferModal prettier 포맷 정리 포함.\n\n이슈 #7 Phase 3 (#3.3) — Phase 3 완료.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat(excel): @rchemist/listgrid/excel opt-in 엔트리 + registerExcelDataT…",
          "author_name": "kunner",
          "author_login": "kunner",
          "committed_at": "2026-06-16T08:45:59Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "025c423499c3190700e892169f73e77aaf9760af",
          "body": "리스트 헤더 내장 전송 모달이 DataExporter/DataImporter를 static import하던 것을\ngetDataTransfer() 주입 조회로 변경(미등록 시 graceful no-render).\nmain barrel에서 xlsx/file-saver를 끌어오는 carrier export 제거\n(DataExporter/DataImporter/DataExportProcessor/DataImportSample/DynamicDataImporter/\nProvider/ExcelProvider) 후 configureDataTran\n[…]\neld, Type)는 barrel 유지로 breaking 최소화.\n\ngate: barrel 그래프(263 모듈, 동적 import 포함)에서 모든 optional/heavy peer 도달 0.\n\n이슈 #7 Phase 3 (#3.2).\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "refactor(transfer): DataTransferModal을 주입 레지스트리로 전환 + barrel carrier 제거",
          "author_name": "kunner",
          "author_login": "kunner",
          "committed_at": "2026-06-16T08:41:42Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "a6239bc77419e38c5f52754f28a7622d8ff0c471",
          "body": "configureDataTransfer/getDataTransfer 주입 seam 신설(기존 configureApiClient/\nUIProvider DI 패턴). 코어 리스트가 host 주입 전송 컴포넌트를 렌더하도록 하여\nxlsx/file-saver를 barrel 그래프에서 분리하기 위한 토대.\n\n이슈 #7 Phase 3 (#3.1).\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat(transfer): 데이터 전송 주입 레지스트리 추가",
          "author_name": "kunner",
          "author_login": "kunner",
          "committed_at": "2026-06-16T08:35:25Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "325876072ae061d1f1b24cb6621a6667afa8d8d3",
          "body": "QR / 주소(kakao·daum) / API-spec(sweetalert2) / xref-price(sweetalert2)를\nmain barrel에서 제거하고 @rchemist/listgrid/{qr,address,api-spec,xref-price}\nsubpath로 격리. ApplyFullAddressFields도 AddressMapField를 정적 인스턴스화하므로\n/address로 이동(barrel 유일 참조처). barrel 그래프에서 qrcode.react/\nreact-kakao-maps-sdk/react-daum-postcode/sweetalert2 도달 0건 확인(.gate-trace.cjs).\n\n이슈 #7 Phase 2.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "refactor(exports): leaf optional 컴포넌트를 subpath opt-in으로 분리",
          "author_name": "kunner",
          "author_login": "kunner",
          "committed_at": "2026-06-16T08:31:54Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "d36ce34d535bd6548c6f272fec13a65c8aac6fc0",
          "body": "코어 도달 peer(@iconify/react·react-select·react-sortablejs)를 optional:false로,\nreact-sortablejs의 peer인 sortablejs(^1.15.0)를 필수 peer로 추가.\nqrcode.react는 default export 호환 v3로 range 축소(^3.0.0).\nsideEffects 명시로 tree-shaking 방어선 추가.\n\n이슈 #7 Phase 1.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "chore(deps): optional peer 3분류 재선언 — 코어 peer 필수화 + qrcode v3 고정",
          "author_name": "kunner",
          "author_login": "kunner",
          "committed_at": "2026-06-16T08:25:07Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "68fb1cf594095cd5a9f7ba99ca7ba8684aca0a05",
          "body": "barrel이 optional peer를 static import해 consumer 빌드 강제 실패하는 문제의\n하이브리드 수정 계획(peer 3분류 + subpath + 전송 주입) 및 진행 추적 문서.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "docs(issue): #7 분석 fix-plan 및 PROGRESS 작성",
          "author_name": "kunner",
          "author_login": "kunner",
          "committed_at": "2026-06-16T08:23:40Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "8a8295723541d7e641810a5f4a6683595f8ab3eb",
          "body": "…태 h1 타이틀 수정 — 0.3.20\n\nDataExporter가 DataExportProcessor에 maxCount/countPerPage를 전달하지 않아\n항상 기본값(100×100=10000)이 limit UI에 표시되던 문제 수정.\n!exportable 상태에서 h1이 \"파일 생성 완료\"를 표시하던 문제도 수정.",
          "is_bot": false,
          "headline": "feat(export): ExportTransferConfig에 maxCount/countPerPage 추가, limit 상…",
          "author_name": "kunner",
          "author_login": "kunner",
          "committed_at": "2026-06-04T06:55:07Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "685b074383f2014922a8b2b535de6515243acbb3",
          "body": "validate() passed `this.getCurrentValue()` (async) without awaiting, so the\nvalue reached validateWithLimit as a Promise. `Array.isArray(value)` was always\nfalse → any field with `limit.min` defined (TagField defaults to {min:0}) always\nreturned a \"최소 N개\" failure regardless of the real value. Entity\n[…]\ncted — the bug stayed latent until TagField detail save.\n\nNow the resolved array is used for the limit check. +3 regression tests.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix(form): await getCurrentValue in OptionalField.validate — 0.3.19",
          "author_name": "kunner",
          "author_login": "kunner",
          "committed_at": "2026-06-02T20:22:53Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "8a28a288b2cdb005241341862a7eb3d3628bdc15",
          "body": null,
          "is_bot": false,
          "headline": "style: Prettier format DataExportService.ts — CI fix",
          "author_name": "kunner",
          "author_login": "kunner",
          "committed_at": "2026-06-02T06:25:44Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "8e56ee7728918a8bb431826a4964bc50822fd996",
          "body": "createFieldMap이 name+label 두 키를 등록하여 DataExportService가 모든 키를\n순회할 때 컬럼이 2배 생성되는 문제(#1532) 수정.\nDataImporter의 createFieldMap(lookup용)은 영향 없음.\n\n— 0.3.18",
          "is_bot": false,
          "headline": "fix(export): DataExportService fieldMap을 name-only Map으로 교체 — 중복 컬럼 수정",
          "author_name": "kunner",
          "author_login": "kunner",
          "committed_at": "2026-06-02T06:23:32Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "7e444a10ff5ec9baea79adb55ba4f37e8cc8deeb",
          "body": "Adds a \"조건\" label before the operator SelectBox in NumberFilter\nso users can understand the dropdown purpose at a glance.\nAlso adjusts layout to align vertically with value inputs.",
          "is_bot": false,
          "headline": "fix(filter): add condition label to NumberFilter select box — 0.3.17",
          "author_name": "kunner",
          "author_login": "kunner",
          "committed_at": "2026-06-01T04:33:34Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "e2c824a0d5bc72d7a17aa8c82f76eb74005e5f1e",
          "body": "CI format:check has been failing on main since 2026-05-30.\n\nCo-Authored-By: Claude Sonnet 4.6 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "style: fix Prettier formatting in DataImporter and headless",
          "author_name": "kunner",
          "author_login": "kunner",
          "committed_at": "2026-05-31T16:08:37Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "f7d5daa66803e1818ddcf7ce7d6ee7cd4322b357",
          "body": "Two serious WCAG 2 AA violations surfaced by project-manager Sprint 31f W.3\nissue detail page (first Wave 6 form-view consumer):\n\n1. `.rcm-input[readonly]` used disabled text color (#9ca3af) on disabled\n   background (#f3f4f6) — 2.3:1 contrast vs required 4.5:1. Readonly inputs\n   convey *informatio\n[…]\n.2.x backport candidates: fix #1 (CSS only,\nadditive) — backport OK; fix #2 (state/event flow change) — 0.3.x only per\nLTS policy.\n\nCo-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix(a11y): readonly input contrast + tab nested-interactive — 0.3.16",
          "author_name": "kunner",
          "author_login": "kunner",
          "committed_at": "2026-05-31T15:16:52Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "05e208ded5ba40666b0b9d651cce4989808b8313",
          "body": "… studies\n\nWhen listgrid 's defaults don't fit a host requirement, the right move is to\nuse the extension catalog (FormField subclass / saveValue / displayFunc /\nisDirty / withClientPreUpdate / withClientPostUpdate / EntityFormButton /\nautosave key scoping), not to fork the page or build a sibling c\n[…]\nbefore sidelining a listgrid feature\n\nREADME.md gets a §\"Extending listgrid for host requirements\" section\nlinking to the new doc.\n\nCo-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "docs: add EXTENSIONS.md — host integration extension catalog + 2 case…",
          "author_name": "kunner",
          "author_login": "kunner",
          "committed_at": "2026-05-31T14:13:37Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "ba4771083988b4a3c1d3165364c612c4bfe10f68",
          "body": "project-manager 가 dist patch (patches/@rchemist__listgrid@0.3.13.patch) 로\n유지하던 a11y 보강 5종을 upstream 으로 흡수. consumer 가 patchedDependencies\nentry 를 삭제하고 깨끗하게 ^0.3.15 bump 가능.\n\n추가 (모두 additive — 기존 동작 무변경):\n- QuickSearchInput: 검색 + 검색어 지우기 button 에 type=\"button\" + aria-label\n- SortField: type=\"button\" \n[…]\nstream_before_downstream]] 정합).\n- 모두 visual-zero / behavioral-zero — 0.2.x backport candidate\n  ([[feedback_listgrid_02_stability]] additive a11y 정합).\n\nTest: 47 files / 920 tests / 1 todo PASS (회규 0).",
          "is_bot": false,
          "headline": "fix(a11y): upstream project-manager local patch a11y additions (0.3.15)",
          "author_name": "kunner",
          "author_login": "kunner",
          "committed_at": "2026-05-30T19:32:41Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "5278a475b120a95126231a4e3035f6e0d44b04fd",
          "body": "EntireChecker.checkAllItems 가 setCheckedItems(...) 직후 onSelectionChange 에\n*이전* checkedItems 를 전달 → React state queue 만 됐고 closure 변수는 still\nold. host 가 빈 배열 받음 → master checkbox + selectionOptions.onSelectionChange\nhost-side gate 패턴 silent break.\n\n비교 ViewRows.tsx:344-348 (single-row click) 는 newChec\n[…]\noral (onSelectionChange callback 의 args) 이지만 *정합 회복*\n  방향 — 기존 host 코드가 빈 배열을 받아 silent break 였던 게 옳은 동작이\n  됨. 단 다른 0.2.x consumer 가 우연히 빈 배열을 가정으로 동작 중이면 break.\n- 0.3.x 만 우선 publish, 0.2.x 는 별도 검토 후.",
          "is_bot": false,
          "headline": "fix(list): EntireChecker onSelectionChange stale closure (0.3.14)",
          "author_name": "kunner",
          "author_login": "kunner",
          "committed_at": "2026-05-30T18:33:31Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "d2f666ec86421a48ef0a5cd0acadab7d80ba0e7d",
          "body": "…econciliation)\n\n- handleFieldChange 의 `entityForm.merge(cloned); setEntityForm(entityForm)`\n  → `setEntityForm(cloned)` 로 단순화. 기존 패턴은 같은 reference 를\n  setState 로 보내 React 19 (+ React 18) 가 reconciliation 스킵 →\n  controlled input 의 value 가 EntityForm 갱신 후에도 update 안 되어\n  사용자 타이핑 / Playwright fill 등이 \n[…]\nantics) 이라 0.2.x 는 의도적 backport 제외 — 0.2.x = LTS 다수 production\n사이트 의존 (https://github.com/rchemist/rcm-listgrid 의 release/0.2 정책).\n\nCo-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix(form): EntityForm change → setEntityForm with new ref (React 19 r…",
          "author_name": "kunner",
          "author_login": "kunner",
          "committed_at": "2026-05-30T14:08:39Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "917634f7aed24a13483554d31bf9e6ff1cf27bc8",
          "body": "- HeaderTitle: <div> 에 role=\"heading\" aria-level={1} 추가 (semantic\n  heading 부여). 시각/스타일/DOM 구조 100% 동일, Playwright getByRole\n  ('heading') + screen reader 호환.\n- FieldRenderer: input view 에 aria-label={label} 을 React.cloneElement\n  로 주입 (label 이 string 이고 !hideLabel + valid element 일 때만).\n  시각 변경 0, \n[…]\nn reader 호환. view.props\n  의 기존 aria-label 우선 (consumer override 보존).\n\nBump to 0.3.12. consumer 측 동선/시각 영향 없음 — additive ARIA only.\n\nCo-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix(a11y): heading role + form input aria-label — zero visual impact",
          "author_name": "kunner",
          "author_login": "kunner",
          "committed_at": "2026-05-30T07:53:03Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "3d5930f7c97f71243ce5a37364f2011b5b25c403",
          "body": "…진행률 노드 렌더 지원",
          "is_bot": false,
          "headline": "feat(import): DataImporter renderAsyncResult seam — 비동기 processId 응답 …",
          "author_name": "kunner",
          "author_login": "kunner",
          "committed_at": "2026-05-29T08:47:04Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "66a8d4c1dbc9efb5963830d49e1bc91402caa946",
          "body": "- onFileUpload 의 행 파싱을 buildSheetData 헬퍼로 통합, 매핑 셀이 모두 blank 인 행 제외 (#1478)\n- 기존 cells.forEach(async) 의 값 resolve 전 push 어긋남도 await Promise.all 로 정상화\n- submitting 상태 추가: 업로드/취소 버튼 disable + 스피너 + 진행 중 모달 닫기 가드 (#1479)",
          "is_bot": false,
          "headline": "fix(import): DataImporter 빈 행 미리보기 제외 + 업로드 진행 상태 표시 — gjcu #1478/#1479",
          "author_name": "kunner",
          "author_login": "kunner",
          "committed_at": "2026-05-29T08:35:42Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "a780d029424761215061086337507689c617b126",
          "body": "#1 SearchForm wire serialization, #6 ApiClient envelope, #5 prerender\nSuspense, #2 headlessUIComponents (/headless subpath).\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "chore: release v0.3.9",
          "author_name": "kunner",
          "author_login": "kunner",
          "committed_at": "2026-05-29T06:14:47Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "2af25705092bb6e8c6716174917e8bf7a3ba8b7b",
          "body": "Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "docs(progress): complete — 4 fixes landed on both v0.3.x and v0.2.x",
          "author_name": "kunner",
          "author_login": "kunner",
          "committed_at": "2026-05-29T06:12:29Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "ebf1e9423b8dbe64a1433e9733cf3618dc36d75e",
          "body": "…(#2)\n\nUIProvider requires the full 49-primitive surface, so every consumer hand-wrote\n~47 stubs per app. Ship a proven zero-styling baseline (adapted from the\nsample MinimalUIProvider) so a working grid/form is one line away:\n\n  import { headlessUIComponents } from '@rchemist/listgrid/headless';\n  \n[…]\ngn system. Explicit-over-implicit, mirroring the headless-UI ecosystem.\n\n+5 tests; full suite 919 green; type-check + build clean.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat(ui): export headlessUIComponents baseline via /headless subpath …",
          "author_name": "kunner",
          "author_login": "kunner",
          "committed_at": "2026-05-29T06:08:26Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "4f936dd3727c746d31e627dddcc9730f93937463",
          "body": "…render (#5)\n\nnuqs `useQueryStates` calls React `useSearchParams`, which forces a Suspense\nboundary during Next.js 15 static prerender (`next build`). Consumers who\nimported `<ViewListGrid>` directly had to wrap every page in their own\n`<Suspense>` or the build failed.\n\nSplit into inner/outer: the e\n[…]\n\nno Suspense boilerplate. ViewListGridWrapper's existing Suspense still nests\nharmlessly.\n\nFull suite 914 green; type-check clean.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix(ViewListGrid): wrap in internal Suspense boundary for Next.js pre…",
          "author_name": "kunner",
          "author_login": "kunner",
          "committed_at": "2026-05-29T06:00:19Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "b60fe73376ba23e5c9821c2656e59d82e0978a1a",
          "body": "…ayload fallback (#6)\n\nHost adapters must return a ResponseData whose `.data` holds the backend\npayload, but this was only implied — and the README quick-start showed the\nbroken `fetch().then(r => r.json())` raw-return pattern, which makes\n`response.data` absent and the grid silently render \"데이터가 없습\n[…]\nad of under .data) still\n  renders. Zero behavior change when correctly wrapped.\n\n+1 test; full suite 914 green; type-check clean.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix(ApiClient): document ResponseData envelope contract + defensive p…",
          "author_name": "kunner",
          "author_login": "kunner",
          "committed_at": "2026-05-29T05:57:33Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "72dc631d320063decd534ab2c5fc7c55974cda8c",
          "body": "…(#1)\n\nSearchForm held `sorts`/`filters` as Maps with no toJSON, so host\n`JSON.stringify(searchForm)` produced `{}` → backend rejected with\n\"Cannot deserialize ArrayList from Object\" (400).\n\nMirror the rcm-backend-framework SearchRequest contract:\n- add toJSON(): sorts Map → [{field, direction}] (So\n[…]\n so multi-sort\n  order (first = primary) survives withSort's prepend semantics.\n\n+7 tests; full suite 912 green; type-check clean.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix(SearchForm): serialize sorts/filters Maps to backend wire format …",
          "author_name": "kunner",
          "author_login": "kunner",
          "committed_at": "2026-05-29T05:16:03Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "691b8c5a94e5d2463445a5dac51d2ea07a4ee1eb",
          "body": "…der Excel\n\n- createFieldMap: add label as secondary key (name remains primary)\n- DataImporter: use matchedFields[] instead of fields[arrayIndex] to fix\n  column order mismatch when Excel columns differ from field definition order\n- DataImporter: header key always uses field.getName() so DataImportP\n[…]\nge\n\nEnables uploading raw Korean-header Excel files (e.g. 학번/구분/접수일)\nwithout requiring bracket format ([fieldName]). Backward compatible —\nexisting bracket-format and name-matching behavior unchanged.",
          "is_bot": false,
          "headline": "fix(DataImporter): support label-based column matching for Korean hea…",
          "author_name": "kunner",
          "author_login": "kunner",
          "committed_at": "2026-05-27T08:33:56Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "d4ad18b6aca4cf029752592cd74852182be73950",
          "body": "…m modal\n\n- 외부 절대 URL 분기에서 사용하던 `.rcm-image-field-external-img` 가 CSS 룰 없이\n  자연 크기로 풀리던 회귀를 차단. 학생/사용자 프로필 등 asset 서버가 절대 URL 을\n  반환하는 환경에서 폼 화면이 거대한 이미지에 덮이는 문제 해결.\n- 폼 뷰에 항상 통일된 썸네일을 노출하는 `ImageFieldFormPreview` 추가. 기본 8rem\n  정사각형, 클릭 시 `.rcm-image-field-zoom-*` 인앱 모달로 90vw/90vh contain\n  확대 — 배경 클릭 / ESC 로 닫힘.\n- `ImageField#withPreviewSize(size)` 빌더 추가 (number=px, string=CSS 길이값).\n  도메인별 더 작은 / 큰 미리보기를 선언부에서 직접 제어 가능.\n- 리스트 셀 (`renderListItemInstance`) 의 외부 URL 분기는 기존 동작 유지.\n\nv0.3.7",
          "is_bot": false,
          "headline": "feat(image-field): add form preview thumbnail + withPreviewSize + zoo…",
          "author_name": "kunner",
          "author_login": "kunner",
          "committed_at": "2026-05-20T09:41:39Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "49f780d0f10e134a869822ae56eff8e64c351c02",
          "body": "v0.2.19 introduced trim+lowercase normalization. The backend\nOptionService.normalizeAlias has since been re-aligned with the\nproject convention (EnumType / option value keys are all uppercase)\nin gjcu-academic-backend #1416, so the frontend cache key is\nflipped to trim+uppercase to stay in lockstep.\n[…]\na findByAliasIgnoreCase, so this is a cache-key\nconsistency change only.\n\nRelease v0.2.20 (legacy-0.2). v0.3.6 backport to follow.\n\n(cherry picked from commit 3f2305928fcd9a9cd0d5296d098c1bda2df1659b)",
          "is_bot": false,
          "headline": "fix(custom-option): normalize alias cache key to uppercase (#1416)",
          "author_name": "kunner",
          "author_login": "kunner",
          "committed_at": "2026-05-19T06:53:43Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "11dbe25f6b390c985ffc2a1466a6397e31bf08e7",
          "body": "CustomOptionField alias 캐시 키 정규화 (trim + lowercase) — 백엔드\nOptionService.normalizeAlias 와 동일 규칙.\n\nCo-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "chore: release v0.3.5",
          "author_name": "kunner",
          "author_login": "kunner",
          "committed_at": "2026-05-16T22:53:52Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "16bab86d1f4b03f7817d32a62b63ec3d2c5c2895",
          "body": "Match the backend OptionService.normalizeAlias behavior so any\ncase/whitespace variant of an alias hits the same cache slot and the\nsame backend entity. URL still carries the trimmed, case-preserved\nalias.\n\nCo-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix(custom-option): normalize alias cache key (trim + lowercase)",
          "author_name": "kunner",
          "author_login": "kunner",
          "committed_at": "2026-05-16T22:53:35Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "4bb6c859545361ef42b4d3645656e06254de7490",
          "body": "… win\n\nThe base reset rule `.rcm-table th, .rcm-table td { text-align: left }` is\nspecificity (0,1,1) and overrides `.text-center` / `.text-right` utility\n(0,1,0) emitted by ViewColumn / HeaderField. Result: getListFieldAlignType()\nreturns 'center' for select / boolean / date / number / etc. and Vie\n[…]\nemoving the default `text-align: left` lets the utility win. Browsers\nalready left-align th/td by default, so cells without an explicit alignment\nclass are unchanged.\n\nRefs: gjcu-academic-backend#1324",
          "is_bot": false,
          "headline": "fix(list): drop .rcm-table cell default text-align so utility classes…",
          "author_name": "kunner",
          "author_login": "kunner",
          "committed_at": "2026-05-15T02:18:21Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "473c94dcff3c235a076b8eb5233690801f6a9a2c",
          "body": "값이 외부 절대 URL(`http(s)://`) 인 경우 `ImageField` / `FileField` 가 host\n`FileUploadInput` 을 거치지 않고 곧바로 `<img>` 또는 다운로드 링크로 표시하도록\n변경. 폼 입력 모드와 리스트 셀 양쪽 모두 적용.\n\n기존에는 `getAccessableAssetUrl` 이 입력을 `removeAssetServerPrefix` 에 먼저\n태우면서 스킴 콜론을 URL-encode 해버려 `https://api.example/static-resource/\nhttps%3A//cdn.ex\n[…]\n 들어와도 외부 URL 을 추출, 분기 처리.\n- `isExternalUrl(url)` 헬퍼 신규 공개 (`misc` → barrel 재노출).\n- misc 테스트: 외부 URL passthrough · 동적 엔드포인트(no extension, query) ·\n  자체 asset 서버 매칭 · `isExternalUrl` 단위 케이스를 추가.\n\nv0.3.3",
          "is_bot": false,
          "headline": "fix(image/file-field): pass external http(s) URLs through untouched",
          "author_name": "kunner",
          "author_login": "kunner",
          "committed_at": "2026-05-14T12:03:05Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "232e76266d553d45391c2180b7a11aaec984a041",
          "body": null,
          "is_bot": false,
          "headline": "0.3.2",
          "author_name": "kunner",
          "author_login": "kunner",
          "committed_at": "2026-05-08T19:34:36Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "375e9e1d1081b41b80434d99f01edfa1cfa1d812",
          "body": "Wide-screen ListGrid columns stretch to full width, leaving short\ncontent (codes, numbers, badges, dates) lonely on the cell's left\nedge with excessive trailing whitespace. Inverting the default\nalignment so only 'text' type stays left and everything else\ncenters fixes the row-level eye-tracking iss\n[…]\nil/\n  phone/password/textarea/html/markdown/tag/custom/checkbox/hidden)\n- Explicit withListConfig({ align }) still wins\n- ViewColumn / HeaderField rendering unchanged\n\nRefs: gjcu-academic-backend#1324",
          "is_bot": false,
          "headline": "fix(list): center-align non-text cells by default",
          "author_name": "kunner",
          "author_login": "kunner",
          "committed_at": "2026-05-08T19:34:32Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "e246c4583a1b98718b70e4fd8673f09ac576524f",
          "body": "main is now 0.3.x; without this the next v0.2.16 tag would overwrite\nthe latest dist-tag and downgrade users on `npm i @rchemist/listgrid`.\nv0.2.* tags publish under legacy-0.2; everything else stays on latest.",
          "is_bot": false,
          "headline": "ci(publish): route v0.2.x tags to npm dist-tag legacy-0.2",
          "author_name": "kunner",
          "author_login": "kunner",
          "committed_at": "2026-05-07T09:30:32Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "0cabf74e4b12ebcee15d2bcaec73de3400535ac9",
          "body": "BREAKING — endpoint 매트릭스 변경:\n- 검색 / 목록  : POST {url}              → POST {url}/search\n- Create       : POST {url}/add          → POST {url}\n- Bulk delete  : POST {url}/delete       → DELETE {url} + body BulkDeleteRequest\n\n응답 wire format 호환 흡수 (한 라이브러리 코드로 dual):\n- 결과 list    : data.list      || data\n[…]\normat:check : PASS\n- npm run test:coverage : statements 17.23 / branches 15.05 / functions 17.93 /\n                          lines 17.02 (threshold 16/14/17/16 모두 통과)\n- npm run build      : dist 생성 OK",
          "is_bot": false,
          "headline": "feat!: rcm-framework 0.1.0 endpoint 정합 — v0.3.1 (Decision #31)",
          "author_name": "kunner",
          "author_login": "kunner",
          "committed_at": "2026-05-05T05:16:25Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "72d8ce3a1caf2e8defe64df203cb3debe579afd5",
          "body": "Move field-based cell formatting (cell.t/cell.z) to after the\nsheet_to_json -> aoa_to_sheet round-trip so '@' (text) numFmt is not\nwiped from the final worksheet. Fixes lectureCode-style codes losing\ntheir leading zeros when users paste into the downloaded sample.",
          "is_bot": false,
          "headline": "fix: preserve cell text format on Excel sample download",
          "author_name": "kunner",
          "author_login": "kunner",
          "committed_at": "2026-05-01T02:23:04Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "e865b70530991516216852ce17d8b85b0814557b",
          "body": "…t is not blocked\n\nInlineMap UI accumulates user input in pendingRef.current.value and only flips\nthis.value.current at getSaveValue time. FormField.isBlank, however, only looks\nat this.value.current. As a result, a required InlineMapField with user-entered\nkeys was rejected at validation with \"필수 값\n[…]\niness; otherwise fall back to FormField.isBlank.\n\nTests: src/listgrid/components/fields/__tests__/InlineMapField.test.ts\nReported in gjcu-academic-backend issue #1289 (PreInquiryType.attributes save).",
          "is_bot": false,
          "headline": "fix: InlineMapField required-validation reads pendingRef so user inpu…",
          "author_name": "kunner",
          "author_login": "kunner",
          "committed_at": "2026-04-29T17:57:40Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "f8bf579814d8937102a50cd1fd4c6647fc0bd5ee",
          "body": "…rrors\n\nCustom buttons created via EntityFormButton.withOnClick that overwrite the\n'save' action could not surface field-level errors in ViewEntityForm. The\nreturned EntityForm instance held the field errors, but getEntityFormButtons\ndid not pass setEntityForm into the button props, and the framewor\n[…]\nreturns a form with form.errors, call\n  setEntityForm(form) and clear the top string banner when getErrorMap()\n  is non-empty (avoids double-rendering the same message).\n\nchore: bump version to 0.2.13",
          "is_bot": false,
          "headline": "fix: custom save-overwrite button should propagate entityForm field e…",
          "author_name": "kunner",
          "author_login": "kunner",
          "committed_at": "2026-04-27T09:02:05Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "cad02797388aca6c61bd179b9525a89aa3c9181d",
          "body": null,
          "is_bot": false,
          "headline": "fix: smsSenderList 경로에서 /api/v1 제거",
          "author_name": "kunner",
          "author_login": "kunner",
          "committed_at": "2026-04-24T04:59:22Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "16f71618669e6f67237906116f3bdfb8fc03da93",
          "body": null,
          "is_bot": false,
          "headline": "style: prettier fixes (index.ts, PostCodeSelector.tsx, UIProvider.tsx)",
          "author_name": "kunner",
          "author_login": "kunner",
          "committed_at": "2026-04-24T03:03:09Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "fd69255f658e5f89765d75c63192eca7901afdb8",
          "body": "Remove GJCU-specific hardcoding from library runtime code:\n- Role literals (ROLE_SUPER_ADMIN / ROLE_ADMIN / ROLE_STAFF) in 4 sites\n  are replaced with host-injected permission predicates\n  (RuntimeConfig.permissions.canSendSms, canOpenInNewWindow) and\n  per-field overrides (PhoneNumberField.withSmsP\n[…]\nssion predicates\ndefault to () => true; hosts wanting admin-gating must inject predicates\nat bootstrap. See docs/REFACTOR_HOST_COUPLING.md for design rationale.\n\nNo public API removed. 884 tests pass.",
          "is_bot": false,
          "headline": "chore: release v0.2.12 — host coupling detox",
          "author_name": "kunner",
          "author_login": "kunner",
          "committed_at": "2026-04-24T03:01:19Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "6d6290314dadddbb076c7ea16c100ea2eaf05159",
          "body": null,
          "is_bot": false,
          "headline": "chore: release v0.2.11",
          "author_name": "kunner",
          "author_login": "kunner",
          "committed_at": "2026-04-23T05:58:04Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "f794e3c5a5f5fff6e5155d8846297c478f72667e",
          "body": "…록 표시 + 저장 실패\n\n두 뷰의 \"불러오기\" 모달은 내부에 ManyToOneField('mapping', ...) 서브폼을 띄우고\nform.getSubmitFormData() 결과에서 선택한 대상을 꺼내 쓰는 구조인데, EntityForm의\nprocessManyToOneField 헬퍼는 모든 AbstractManyToOneField 값을 `${fieldName}Id` 키로\n저장한다. 따라서 data['mappingId']에 저장되지만 두 뷰는 data['mapping']을 읽어\n항상 undefined를 받고, mappingVal\n[…]\n / XrefPriorityMappingView는 모달에서\nManyToOneField 서브폼이 아니라 ListGrid를 직접 띄우고 onSelect: (item) => onChange(item.id)로\nid를 바로 받는 다른 아키텍처라 영향 없음.\n\n수정: data['mapping'] → data['mappingId'] (2개 파일 각 1줄 + 의도 주석)",
          "is_bot": false,
          "headline": "fix: XrefPreferMappingView / XrefAvailableDateMappingView 불러오기 후 전체 목…",
          "author_name": "kunner",
          "author_login": "kunner",
          "committed_at": "2026-04-23T05:58:00Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "499edbe3862948e902b072ee3ca6a19d89a27f3c",
          "body": null,
          "is_bot": false,
          "headline": "chore: release v0.2.10",
          "author_name": "kunner",
          "author_login": "kunner",
          "committed_at": "2026-04-23T05:03:31Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "8fc4c606451d62d95bbd81493cb9582260b24661",
          "body": "- 모달 본문을 PostCodeSelectorForm 으로 분리 + React.memo(() => true) 로\n  외부 재렌더 격리. address2 로컬 state 가 타이핑마다 유실되던 문제 해결\n- useState lazy initializer 로 initialAddress 를 최초 1회만 복사,\n  이후 prop 변화 무시 (controlled input 고정)\n- open 토글 시 sessionKey 증가로 세션별 신규 Form 인스턴스 보장\n- onSubmit 은 ref 패턴으로 안정화, '주소 입력' 버튼 클릭 시에만 상위 전파\n- const classes = {} 로 인해 적용되지 않던 모달 내부 CSS 복구.\n  rcm-postcode-form/row/input-row/submit-row/error 규칙을 components.css 에 추가\n  → '주소 검색' 버튼 줄바꿈, 행 좌측 치우침, 하단 버튼 좌측 정렬 해소",
          "is_bot": false,
          "headline": "fix: PostCodeSelector 모달 UI 깨짐 + address2 포커스 유실 근본 수정",
          "author_name": "kunner",
          "author_login": "kunner",
          "committed_at": "2026-04-23T05:03:27Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "8bdb9b13e796ee377a6bed92ef523aa9e06a1b63",
          "body": null,
          "is_bot": false,
          "headline": "chore: release v0.2.9",
          "author_name": "kunner",
          "author_login": "kunner",
          "committed_at": "2026-04-22T11:15:09Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "6f42307a8a6cc4d66f6e3761b49a3b59cf777ea7",
          "body": "Node 22 번들 npm 10.x 의 in-place upgrade 는 'promise-retry' 모듈\n링크 깨짐으로 실패한다. Node 24 는 npm 11.x 를 번들로 제공하므로\n별도 upgrade 단계 없이 Trusted Publishing(>=11.5.1) 요구사항을 충족.\n\n0.2.7/0.2.8 은 위 CI 문제로 게시되지 못했고 0.2.9 로 재릴리스.",
          "is_bot": false,
          "headline": "ci: use Node 24 for bundled npm 11.x, release 0.2.9",
          "author_name": "kunner",
          "author_login": "kunner",
          "committed_at": "2026-04-22T11:15:09Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "e63731cdff824119ac276c29f907f835dfa4e593",
          "body": null,
          "is_bot": false,
          "headline": "chore: release v0.2.8",
          "author_name": "kunner",
          "author_login": "kunner",
          "committed_at": "2026-04-22T11:13:51Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "c1add4232a2152dc19f75eaf97fd074a244782f8",
          "body": "- Node 22 번들 npm 10.x 는 OIDC 토큰을 registry 로 전달하지 않아\n  Trusted Publishing 이 동작하지 않음. publish.yml 에 npm@latest\n  글로벌 업그레이드 단계를 추가하여 11.5.1+ 보장\n- CHANGELOG 에 [0.2.8] 섹션 추가 — 0.2.7 은 위 CI 문제로 레지스트리\n  게시 실패, 동일 수정을 포함하여 0.2.8 로 재릴리스",
          "is_bot": false,
          "headline": "ci: upgrade npm for Trusted Publishing, release 0.2.8",
          "author_name": "kunner",
          "author_login": "kunner",
          "committed_at": "2026-04-22T11:13:50Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "6d9cf6161fdb15950a130fcae9d8ccb454b076b7",
          "body": null,
          "is_bot": false,
          "headline": "chore: release v0.2.7",
          "author_name": "kunner",
          "author_login": "kunner",
          "committed_at": "2026-04-22T11:00:48Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "6afa609faacf7b669484dcb5be4e38cb0442ca27",
          "body": "- PostCodeSelector 의 useEffect 의존성을 [props] → [open] 로 변경하여\n  부모 재렌더로 인한 내부 state 재초기화를 방지 (상세주소 입력 유실 해결)\n- .rcm-card-m2o-search-input 셀렉터에 .rcm-input 을 추가하여 특이도를\n  (0,2,0) 으로 맞추고 번들 순서로 .rcm-input[data-size='sm'] 의 padding\n  리셋을 override → 검색 아이콘이 placeholder 를 가리던 문제 해결\n- CHANGELOG 에 [0.2.7] 섹션 추가\n- prepublishOnly 스크립트 포함 (배포 전 clean/type-check/test/build)",
          "is_bot": false,
          "headline": "fix: PostCodeSelector 포커스 유실 및 CardManyToOneView 검색 아이콘 위치 문제",
          "author_name": "kunner",
          "author_login": "kunner",
          "committed_at": "2026-04-22T10:49:22Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "95e7cacd3fddce6be16014d126dab22285b6ff9b",
          "body": "@rchemist/listgrid — Framework-free React CRUD UI engine.\n\nPrimitive-based design system with data-attr theming, and a full\nlist/form renderer for entity-oriented HTTP backends.\n\n- List view: paginated table + search + filters + sort + column picker\n- Form view: field renderer + validation + revision + inline sub-collections\n- Provider contracts decouple routing / URL state / auth / HTTP / UI kit\n- CSS custom-property theming + container-query responsive layouts\n- Apache-2.0 licensed",
          "is_bot": false,
          "headline": "Initial commit",
          "author_name": "kunner",
          "author_login": "kunner",
          "committed_at": "2026-04-21T09:17:20Z",
          "body_truncated": false,
          "is_coding_agent": false
        }
      ],
      "releases_count": 1,
      "commits_last_year": 83,
      "latest_release_at": "2026-04-21T09:21:55Z",
      "latest_release_tag": "v0.2.6",
      "releases_from_tags": false,
      "days_since_last_push": 13,
      "active_weeks_last_year": 9,
      "days_since_latest_release": 96,
      "mean_days_between_releases": null
    },
    "community": {
      "has_readme": true,
      "has_license": true,
      "has_description": false,
      "has_contributing": false,
      "health_percentage": 25,
      "has_issue_template": false,
      "has_code_of_conduct": false,
      "has_pull_request_template": false
    },
    "ecosystem": {
      "packages": [
        {
          "name": "@rchemist/listgrid",
          "exists": true,
          "license": "Apache-2.0",
          "keywords": [
            "react",
            "listgrid",
            "crud",
            "entity",
            "form",
            "table",
            "design-system",
            "css-primitives",
            "data-attr",
            "framework-free"
          ],
          "ecosystem": "npm",
          "matches_repo": true,
          "registry_url": "https://www.npmjs.com/package/@rchemist/listgrid",
          "is_deprecated": false,
          "latest_version": "0.3.26",
          "repository_url": "https://github.com/rchemist/rcm-listgrid",
          "versions_count": 48,
          "total_downloads": null,
          "dependents_count": null,
          "deprecation_note": null,
          "maintainers_count": 1,
          "monthly_downloads": 2050,
          "first_published_at": "2026-04-21T09:19:22.676000Z",
          "latest_published_at": "2026-07-11T04:41:47.496000Z",
          "latest_version_yanked": null,
          "days_since_latest_publish": 15
        }
      ]
    },
    "popularity": {
      "forks": 0,
      "stars": 1,
      "watchers": 0,
      "fork_history": {
        "days": [],
        "complete": true,
        "collected": 0,
        "total_forks": 0
      },
      "star_history": null,
      "open_issues_and_prs": 0
    },
    "ai_readiness": {
      "has_nix": false,
      "example_dirs": [],
      "has_llms_txt": false,
      "has_dockerfile": false,
      "has_mcp_signal": false,
      "bootstrap_files": [],
      "api_schema_files": [],
      "has_devcontainer": false,
      "typecheck_configs": [
        "tsconfig.json"
      ],
      "toolchain_manifests": [],
      "largest_source_bytes": 37743,
      "source_files_sampled": 365,
      "oversized_source_files": 0,
      "agent_instruction_files": [],
      "agent_instruction_max_bytes": null
    },
    "dependencies": {
      "manifests": [
        "package.json"
      ],
      "advisories": {
        "error": null,
        "scope": "published_package",
        "source": "osv",
        "findings": [
          {
            "name": "uuid",
            "direct": true,
            "version": "9.0.1",
            "severity": "high",
            "ecosystem": "npm",
            "cvss_score": 7.5,
            "advisory_ids": [
              "GHSA-w5hq-g745-h8pq"
            ],
            "fixed_version": "13.0.1",
            "advisory_count": 1,
            "oldest_advisory_days": 95
          }
        ],
        "collected": true,
        "malicious": [],
        "truncated": false,
        "by_severity": {
          "high": 1
        },
        "advisory_count": 1,
        "affected_count": 1,
        "assessed_count": 6,
        "malicious_count": 0,
        "assessed_package": "npm:@rchemist/listgrid@0.3.26",
        "unassessed_count": 0,
        "direct_affected_count": 1
      },
      "ecosystems": [
        "npm"
      ],
      "dependencies": [
        {
          "name": "clsx",
          "manifest": "package.json",
          "ecosystem": "npm",
          "version_constraint": "^2.1.1"
        },
        {
          "name": "crypto-js",
          "manifest": "package.json",
          "ecosystem": "npm",
          "version_constraint": "^4.2.0"
        },
        {
          "name": "tailwind-merge",
          "manifest": "package.json",
          "ecosystem": "npm",
          "version_constraint": "^2.5.4"
        },
        {
          "name": "uuid",
          "manifest": "package.json",
          "ecosystem": "npm",
          "version_constraint": "^9.0.0"
        },
        {
          "name": "zustand",
          "manifest": "package.json",
          "ecosystem": "npm",
          "version_constraint": "^4.4.0"
        }
      ],
      "all_dependencies": {
        "error": "GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository",
        "source": null,
        "packages": [],
        "collected": false,
        "truncated": false,
        "total_count": null,
        "direct_count": null,
        "indirect_count": null
      }
    },
    "maintainership": {
      "issues": {
        "open_prs": 0,
        "merged_prs": 0,
        "open_issues": 0,
        "closed_ratio": 1,
        "closed_issues": 10,
        "closed_unmerged_prs": 0
      },
      "bus_factor": 1,
      "bot_contributors": 0,
      "top_contributors": [
        {
          "type": "User",
          "login": "kunner",
          "commits": 83,
          "avatar_url": "https://avatars.githubusercontent.com/u/4423295?v=4"
        }
      ],
      "contributors_sampled": 1,
      "top_contributor_share": 1
    },
    "quality_signals": {
      "has_ci": true,
      "has_tests": true,
      "ci_workflows": [
        "ci.yml",
        "publish.yml"
      ],
      "has_docs_dir": true,
      "linter_configs": [
        "eslint.config.mjs"
      ],
      "has_editorconfig": false,
      "has_linter_config": true,
      "has_precommit_config": false
    },
    "security_signals": {
      "lockfiles": [
        "package-lock.json"
      ],
      "scorecard": {
        "checks": [
          {
            "name": "Binary-Artifacts",
            "score": 10,
            "reason": "no binaries found in the repo",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#binary-artifacts"
          },
          {
            "name": "Branch-Protection",
            "score": 0,
            "reason": "branch protection not enabled on development/release branches",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#branch-protection"
          },
          {
            "name": "CI-Tests",
            "score": null,
            "reason": "no pull request found",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#ci-tests"
          },
          {
            "name": "CII-Best-Practices",
            "score": 0,
            "reason": "no effort to earn an OpenSSF best practices badge detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#cii-best-practices"
          },
          {
            "name": "Code-Review",
            "score": 0,
            "reason": "Found 0/30 approved changesets -- score normalized to 0",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#code-review"
          },
          {
            "name": "Contributors",
            "score": 0,
            "reason": "project has 0 contributing companies or organizations -- score normalized to 0",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#contributors"
          },
          {
            "name": "Dangerous-Workflow",
            "score": 10,
            "reason": "no dangerous workflow patterns detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dangerous-workflow"
          },
          {
            "name": "Dependency-Update-Tool",
            "score": 0,
            "reason": "no update tool detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dependency-update-tool"
          },
          {
            "name": "Fuzzing",
            "score": 0,
            "reason": "project is not fuzzed",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#fuzzing"
          },
          {
            "name": "License",
            "score": 10,
            "reason": "license file detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#license"
          },
          {
            "name": "Maintained",
            "score": 10,
            "reason": "30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#maintained"
          },
          {
            "name": "Packaging",
            "score": 10,
            "reason": "packaging workflow detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#packaging"
          },
          {
            "name": "Pinned-Dependencies",
            "score": 3,
            "reason": "dependency not pinned by hash detected -- score normalized to 3",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#pinned-dependencies"
          },
          {
            "name": "SAST",
            "score": 0,
            "reason": "no SAST tool detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#sast"
          },
          {
            "name": "Security-Policy",
            "score": 0,
            "reason": "security policy file not detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#security-policy"
          },
          {
            "name": "Signed-Releases",
            "score": null,
            "reason": "no releases found",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#signed-releases"
          },
          {
            "name": "Token-Permissions",
            "score": 0,
            "reason": "detected GitHub workflow tokens with excessive permissions",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#token-permissions"
          },
          {
            "name": "Vulnerabilities",
            "score": 0,
            "reason": "42 existing vulnerabilities detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#vulnerabilities"
          }
        ],
        "commit": "853660ba5bd18b8043ca921f2241f9931228ec61",
        "ran_at": "2026-07-27T00:29:59Z",
        "aggregate_score": 3.6,
        "scorecard_version": "v5.5.0"
      },
      "has_codeql_workflow": false,
      "has_security_policy": false,
      "has_dependabot_config": false
    },
    "contribution_flow": {
      "collected": true,
      "ci_last_run_at": "2026-07-11T04:41:51Z",
      "oldest_open_prs": [],
      "last_merged_pr_at": null,
      "ci_last_conclusion": "SUCCESS",
      "oldest_open_issues": []
    }
  },
  "config": {
    "disabled_metrics": [],
    "disabled_categories": [],
    "disabled_components": {}
  },
  "source": {
    "url": "https://github.com/rchemist/rcm-listgrid",
    "host": "github.com",
    "name": "rcm-listgrid",
    "owner": "rchemist"
  },
  "metrics": {
    "overall": {
      "key": "overall",
      "band": "moderate",
      "name": "Overall health",
      "note": null,
      "notes": [],
      "value": 55,
      "inputs": {
        "security": 43,
        "vitality": 67,
        "community": 32,
        "governance": 55,
        "engineering": 74
      },
      "components": []
    },
    "categories": [
      {
        "key": "vitality",
        "band": "moderate",
        "name": "Vitality",
        "value": 67,
        "weight": 0.22,
        "metrics": [
          {
            "key": "development_activity",
            "band": "moderate",
            "name": "Development activity",
            "note": null,
            "notes": [],
            "value": 62,
            "inputs": {
              "commits_last_year": 83,
              "human_commit_share": 1,
              "days_since_last_push": 13,
              "active_weeks_last_year": 9
            },
            "components": [
              {
                "key": "push_recency",
                "name": "Push recency",
                "detail": "last push 13 days ago",
                "points": 28.8,
                "status": "partial",
                "details": [
                  {
                    "code": "push_recency",
                    "params": {
                      "days": 13
                    }
                  }
                ],
                "max_points": 36
              },
              {
                "key": "commit_cadence",
                "name": "Commit cadence",
                "detail": "9/52 weeks with commits",
                "points": 6.2,
                "status": "partial",
                "details": [
                  {
                    "code": "commit_cadence_weeks",
                    "params": {
                      "weeks": 9
                    }
                  }
                ],
                "max_points": 36
              },
              {
                "key": "commit_volume",
                "name": "Commit volume",
                "detail": "83 commits in the last year",
                "points": 17.3,
                "status": "partial",
                "details": [
                  {
                    "code": "commits_last_year",
                    "params": {
                      "count": 83
                    }
                  }
                ],
                "max_points": 18
              },
              {
                "key": "openssf_scorecard_maintained",
                "name": "OpenSSF Scorecard: Maintained",
                "detail": "30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10",
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "release_discipline",
            "band": "good",
            "name": "Release discipline",
            "note": "Excluded from scoring (no data or not applicable): OpenSSF Scorecard: Signed-Releases. Remaining weights renormalized.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "openssf_scorecard_signed_releases"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              }
            ],
            "value": 74,
            "inputs": {
              "releases_count": 1,
              "latest_release_tag": "v0.2.6",
              "releases_from_tags": false,
              "days_since_latest_release": 96,
              "mean_days_between_releases": null
            },
            "components": [
              {
                "key": "ships_releases",
                "name": "Ships releases",
                "detail": "1 releases published",
                "points": 27,
                "status": "met",
                "details": [
                  {
                    "code": "releases_published",
                    "params": {
                      "count": 1
                    }
                  }
                ],
                "max_points": 27
              },
              {
                "key": "release_recency",
                "name": "Release recency",
                "detail": "latest release 96 days ago",
                "points": 27,
                "status": "partial",
                "details": [
                  {
                    "code": "release_recency",
                    "params": {
                      "days": 96
                    }
                  }
                ],
                "max_points": 36
              },
              {
                "key": "release_cadence",
                "name": "Release cadence",
                "detail": "cadence unknown (single release)",
                "points": 12.6,
                "status": "partial",
                "details": [
                  {
                    "code": "release_cadence_unknown",
                    "params": {}
                  }
                ],
                "max_points": 27
              },
              {
                "key": "openssf_scorecard_signed_releases",
                "name": "OpenSSF Scorecard: Signed-Releases",
                "detail": "no releases found",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_data",
                    "params": {}
                  }
                ],
                "max_points": 10
              }
            ]
          },
          {
            "key": "abandonment",
            "band": "excellent",
            "name": "Abandonment",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "cap": null,
              "state": "unverified",
              "guards": [],
              "signals": [],
              "red_flag": false,
              "multiplier_pct": 100,
              "declared_reason": null,
              "unverified_reason": "repository_too_young",
              "unanswered_open_prs": null,
              "unanswered_open_issues": null,
              "days_since_last_merged_pr": null,
              "days_since_last_human_commit": null,
              "days_since_last_human_commit_is_floor": false
            },
            "components": [
              {
                "key": "project_is_still_maintained",
                "name": "Project is still maintained",
                "detail": "maintenance record not established from the collected data",
                "points": 100,
                "status": "met",
                "details": [
                  {
                    "code": "abandonment_unverified",
                    "params": {}
                  }
                ],
                "max_points": 100
              }
            ]
          }
        ],
        "description": "Is the project alive — is code being written and are releases shipping?"
      },
      {
        "key": "community",
        "band": "at_risk",
        "name": "Community & Adoption",
        "value": 32,
        "weight": 0.18,
        "metrics": [
          {
            "key": "popularity",
            "band": "critical",
            "name": "Popularity & adoption",
            "note": null,
            "notes": [],
            "value": 1,
            "inputs": {
              "forks": 0,
              "stars": 1,
              "watchers": 0,
              "growth_state": "unverified",
              "growth_factor_pct": 100,
              "growth_unverified_reason": "no_history"
            },
            "components": [
              {
                "key": "stars",
                "name": "Stars",
                "detail": "1 stars",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "stars",
                    "params": {
                      "count": 1
                    }
                  }
                ],
                "max_points": 60
              },
              {
                "key": "forks",
                "name": "Forks",
                "detail": "0 forks",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "forks",
                    "params": {
                      "count": 0
                    }
                  }
                ],
                "max_points": 25
              },
              {
                "key": "watchers",
                "name": "Watchers",
                "detail": "0 watchers",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "watchers",
                    "params": {
                      "count": 0
                    }
                  }
                ],
                "max_points": 15
              }
            ]
          },
          {
            "key": "community_health",
            "band": "moderate",
            "name": "Community health",
            "note": null,
            "notes": [],
            "value": 50,
            "inputs": {
              "has_readme": true,
              "has_license": true,
              "has_contributing": false,
              "has_issue_template": false,
              "has_code_of_conduct": false,
              "has_pull_request_template": false
            },
            "components": [
              {
                "key": "readme",
                "name": "README",
                "detail": null,
                "points": 22.5,
                "status": "met",
                "details": [],
                "max_points": 22.5
              },
              {
                "key": "license",
                "name": "License",
                "detail": "recognized license (Apache-2.0)",
                "points": 22.5,
                "status": "met",
                "details": [
                  {
                    "code": "license_standard",
                    "params": {}
                  },
                  {
                    "code": "license_spdx",
                    "params": {
                      "spdx": "Apache-2.0"
                    }
                  }
                ],
                "max_points": 22.5
              },
              {
                "key": "contributing_guide",
                "name": "CONTRIBUTING guide",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 18
              },
              {
                "key": "code_of_conduct",
                "name": "Code of conduct",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 13.5
              },
              {
                "key": "issue_template",
                "name": "Issue template",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.2
              },
              {
                "key": "pr_template",
                "name": "PR template",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 6.3
              }
            ]
          },
          {
            "key": "ecosystem_adoption",
            "band": "moderate",
            "name": "Ecosystem adoption (downloads)",
            "note": "Excluded from scoring (no data or not applicable): Registry dependents. Remaining weights renormalized.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "registry_dependents"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              }
            ],
            "value": 55,
            "inputs": {
              "packages": [
                "@rchemist/listgrid"
              ],
              "dependents": null,
              "ecosystems": "npm",
              "total_downloads": null,
              "monthly_downloads": 2050
            },
            "components": [
              {
                "key": "monthly_downloads",
                "name": "Monthly downloads",
                "detail": "2,050 downloads/month across npm",
                "points": 44.2,
                "status": "partial",
                "details": [
                  {
                    "code": "downloads_monthly",
                    "params": {
                      "count": 2050,
                      "ecosystems": "npm"
                    }
                  }
                ],
                "max_points": 80
              },
              {
                "key": "registry_dependents",
                "name": "Registry dependents",
                "detail": "not reported by this ecosystem",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "not_reported_by_this_ecosystem",
                    "params": {}
                  }
                ],
                "max_points": 20
              }
            ]
          }
        ],
        "description": "Does the project have users, downloads, attention, and a welcoming setup for contributors?"
      },
      {
        "key": "governance",
        "band": "moderate",
        "name": "Sustainability & Governance",
        "value": 55,
        "weight": 0.24,
        "metrics": [
          {
            "key": "maintainer_resilience",
            "band": "critical",
            "name": "Maintainer resilience (bus factor)",
            "note": null,
            "notes": [],
            "value": 10,
            "inputs": {
              "bus_factor": 1,
              "contributors_sampled": 1,
              "top_contributor_share": 1
            },
            "components": [
              {
                "key": "bus_factor",
                "name": "Bus factor",
                "detail": "1 contributor(s) cover half of all commits",
                "points": 9,
                "status": "partial",
                "details": [
                  {
                    "code": "bus_factor",
                    "params": {
                      "count": 1
                    }
                  }
                ],
                "max_points": 54
              },
              {
                "key": "commit_distribution",
                "name": "Commit distribution",
                "detail": "top contributor authored 100% of commits",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "top_contributor_share",
                    "params": {
                      "share": 100
                    }
                  }
                ],
                "max_points": 22.5
              },
              {
                "key": "contributor_breadth",
                "name": "Contributor breadth",
                "detail": "1 contributors",
                "points": 1.4,
                "status": "partial",
                "details": [
                  {
                    "code": "contributors_sampled",
                    "params": {
                      "count": 1
                    }
                  }
                ],
                "max_points": 13.5
              },
              {
                "key": "openssf_scorecard_contributors",
                "name": "OpenSSF Scorecard: Contributors",
                "detail": "project has 0 contributing companies or organizations -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "responsiveness",
            "band": "good",
            "name": "Issue & PR responsiveness",
            "note": "Excluded from scoring (no data or not applicable): PR acceptance. Remaining weights renormalized.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "pr_acceptance"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              }
            ],
            "value": 76,
            "inputs": {
              "merged_prs": 0,
              "open_issues": 0,
              "closed_issues": 10,
              "issue_closed_ratio": 1,
              "closed_unmerged_prs": 0
            },
            "components": [
              {
                "key": "issue_resolution",
                "name": "Issue resolution",
                "detail": "100% of issues closed",
                "points": 46.8,
                "status": "met",
                "details": [
                  {
                    "code": "issues_closed_share",
                    "params": {
                      "share": 100
                    }
                  }
                ],
                "max_points": 46.75
              },
              {
                "key": "pr_acceptance",
                "name": "PR acceptance",
                "detail": "no decided pull requests or no data",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_decided_prs_or_data",
                    "params": {}
                  }
                ],
                "max_points": 38.25
              },
              {
                "key": "openssf_scorecard_code_review",
                "name": "OpenSSF Scorecard: Code-Review",
                "detail": "Found 0/30 approved changesets -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 15
              }
            ]
          },
          {
            "key": "stewardship",
            "band": "moderate",
            "name": "Ownership & stewardship",
            "note": null,
            "notes": [],
            "value": 52,
            "inputs": {
              "followers": 1,
              "owner_type": "Organization",
              "is_verified": null,
              "owner_login": "rchemist",
              "public_repos": 13,
              "account_age_days": 2568
            },
            "components": [
              {
                "key": "ownership_backing",
                "name": "Ownership backing",
                "detail": "organization-owned",
                "points": 30,
                "status": "met",
                "details": [
                  {
                    "code": "owner_organization",
                    "params": {}
                  }
                ],
                "max_points": 30
              },
              {
                "key": "verified_domain",
                "name": "Verified domain",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 20
              },
              {
                "key": "owner_reach",
                "name": "Owner reach",
                "detail": "1 followers of rchemist",
                "points": 2.2,
                "status": "partial",
                "details": [
                  {
                    "code": "owner_followers",
                    "params": {
                      "count": 1,
                      "login": "rchemist"
                    }
                  }
                ],
                "max_points": 25
              },
              {
                "key": "track_record",
                "name": "Track record",
                "detail": "13 public repos, account ~7 yr old",
                "points": 20.3,
                "status": "partial",
                "details": [
                  {
                    "code": "public_repos",
                    "params": {
                      "count": 13
                    }
                  },
                  {
                    "code": "account_age_years",
                    "params": {
                      "years": 7
                    }
                  }
                ],
                "max_points": 25
              }
            ]
          },
          {
            "key": "package_maintenance",
            "band": "excellent",
            "name": "Package maintenance",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "packages": [
                "@rchemist/listgrid"
              ],
              "ecosystems": "npm",
              "any_deprecated": false,
              "min_days_since_publish": 15
            },
            "components": [
              {
                "key": "published_resolvable",
                "name": "Published & resolvable",
                "detail": "1 package(s) on npm",
                "points": 25,
                "status": "met",
                "details": [
                  {
                    "code": "packages_published",
                    "params": {
                      "count": 1,
                      "ecosystems": "npm"
                    }
                  }
                ],
                "max_points": 25
              },
              {
                "key": "publish_recency",
                "name": "Publish recency",
                "detail": "latest publish 15 days ago",
                "points": 35,
                "status": "met",
                "details": [
                  {
                    "code": "publish_recency",
                    "params": {
                      "days": 15
                    }
                  }
                ],
                "max_points": 35
              },
              {
                "key": "version_history",
                "name": "Version history",
                "detail": "48 published versions",
                "points": 20,
                "status": "met",
                "details": [
                  {
                    "code": "published_versions",
                    "params": {
                      "count": 48
                    }
                  }
                ],
                "max_points": 20
              },
              {
                "key": "not_deprecated",
                "name": "Not deprecated",
                "detail": "active, not deprecated or yanked",
                "points": 20,
                "status": "met",
                "details": [
                  {
                    "code": "package_not_deprecated",
                    "params": {}
                  }
                ],
                "max_points": 20
              }
            ]
          }
        ],
        "description": "Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?"
      },
      {
        "key": "engineering",
        "band": "good",
        "name": "Engineering Quality",
        "value": 74,
        "weight": 0.2,
        "metrics": [
          {
            "key": "engineering_practices",
            "band": "good",
            "name": "Engineering practices",
            "note": "Excluded from scoring (no data or not applicable): OpenSSF Scorecard: CI-Tests. Remaining weights renormalized.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "openssf_scorecard_ci_tests"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              }
            ],
            "value": 80,
            "inputs": {
              "has_ci": true,
              "has_tests": true,
              "has_editorconfig": false,
              "has_linter_config": true,
              "has_precommit_config": false
            },
            "components": [
              {
                "key": "ci_workflows",
                "name": "CI workflows",
                "detail": "2 workflow(s)",
                "points": 24,
                "status": "met",
                "details": [
                  {
                    "code": "ci_workflows",
                    "params": {
                      "count": 2
                    }
                  }
                ],
                "max_points": 24
              },
              {
                "key": "tests_present",
                "name": "Tests present",
                "detail": null,
                "points": 24,
                "status": "met",
                "details": [],
                "max_points": 24
              },
              {
                "key": "linter_config",
                "name": "Linter config",
                "detail": "eslint.config.mjs",
                "points": 16,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": "eslint.config.mjs"
                    }
                  }
                ],
                "max_points": 16
              },
              {
                "key": "pre_commit_hooks",
                "name": "Pre-commit hooks",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 9.6
              },
              {
                "key": "editorconfig",
                "name": ".editorconfig",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 6.4
              },
              {
                "key": "openssf_scorecard_ci_tests",
                "name": "OpenSSF Scorecard: CI-Tests",
                "detail": "no pull request found",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_data",
                    "params": {}
                  }
                ],
                "max_points": 20
              }
            ]
          },
          {
            "key": "documentation",
            "band": "moderate",
            "name": "Documentation",
            "note": null,
            "notes": [],
            "value": 65,
            "inputs": {
              "topics": [],
              "has_wiki": true,
              "homepage": null,
              "has_readme": true,
              "has_docs_dir": true,
              "has_description": false
            },
            "components": [
              {
                "key": "readme",
                "name": "README",
                "detail": null,
                "points": 30,
                "status": "met",
                "details": [],
                "max_points": 30
              },
              {
                "key": "documentation_directory",
                "name": "Documentation directory",
                "detail": null,
                "points": 25,
                "status": "met",
                "details": [],
                "max_points": 25
              },
              {
                "key": "documentation_homepage_site",
                "name": "Documentation / homepage site",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 15
              },
              {
                "key": "repository_description",
                "name": "Repository description",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 10
              },
              {
                "key": "topics",
                "name": "Topics",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 10
              },
              {
                "key": "wiki",
                "name": "Wiki",
                "detail": null,
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              }
            ]
          }
        ],
        "description": "Are baseline engineering and documentation practices in place?"
      },
      {
        "key": "security",
        "band": "at_risk",
        "name": "Security",
        "value": 43,
        "weight": 0.16,
        "metrics": [
          {
            "key": "security_posture",
            "band": "at_risk",
            "name": "Security posture",
            "note": "Excluded from scoring (no data or not applicable): CI-Tests, Signed-Releases. Remaining weights renormalized.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "ci_tests",
                    "signed_releases"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              }
            ],
            "value": 36,
            "inputs": {
              "source": "openssf_scorecard",
              "checks_evaluated": 16,
              "scorecard_version": "v5.5.0",
              "checks_inconclusive": 2,
              "scorecard_aggregate": 3.6
            },
            "components": [
              {
                "key": "binary_artifacts",
                "name": "Binary-Artifacts",
                "detail": "no binaries found in the repo",
                "points": 7.5,
                "status": "met",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "branch_protection",
                "name": "Branch-Protection",
                "detail": "branch protection not enabled on development/release branches",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "ci_tests",
                "name": "CI-Tests",
                "detail": "no pull request found",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_data",
                    "params": {}
                  }
                ],
                "max_points": 2.5
              },
              {
                "key": "cii_best_practices",
                "name": "CII-Best-Practices",
                "detail": "no effort to earn an OpenSSF best practices badge detected",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "code_review",
                "name": "Code-Review",
                "detail": "Found 0/30 approved changesets -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "contributors",
                "name": "Contributors",
                "detail": "project has 0 contributing companies or organizations -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "dangerous_workflow",
                "name": "Dangerous-Workflow",
                "detail": "no dangerous workflow patterns detected",
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              },
              {
                "key": "dependency_update_tool",
                "name": "Dependency-Update-Tool",
                "detail": "no update tool detected",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "fuzzing",
                "name": "Fuzzing",
                "detail": "project is not fuzzed",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 5
              },
              {
                "key": "license",
                "name": "License",
                "detail": "license file detected",
                "points": 2.5,
                "status": "met",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "maintained",
                "name": "Maintained",
                "detail": "30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10",
                "points": 7.5,
                "status": "met",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "packaging",
                "name": "Packaging",
                "detail": "packaging workflow detected",
                "points": 5,
                "status": "met",
                "details": [],
                "max_points": 5
              },
              {
                "key": "pinned_dependencies",
                "name": "Pinned-Dependencies",
                "detail": "dependency not pinned by hash detected -- score normalized to 3",
                "points": 1.5,
                "status": "partial",
                "details": [],
                "max_points": 5
              },
              {
                "key": "sast",
                "name": "SAST",
                "detail": "no SAST tool detected",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 5
              },
              {
                "key": "security_policy",
                "name": "Security-Policy",
                "detail": "security policy file not detected",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 5
              },
              {
                "key": "signed_releases",
                "name": "Signed-Releases",
                "detail": "no releases found",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_data",
                    "params": {}
                  }
                ],
                "max_points": 7.5
              },
              {
                "key": "token_permissions",
                "name": "Token-Permissions",
                "detail": "detected GitHub workflow tokens with excessive permissions",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "vulnerabilities",
                "name": "Vulnerabilities",
                "detail": "42 existing vulnerabilities detected",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              }
            ]
          },
          {
            "key": "dependency_advisories",
            "band": "good",
            "name": "Dependency advisories",
            "note": "Matched the npm:@rchemist/listgrid@0.3.26 runtime dependency closure — what installing the published package pulls in — 6 packages. Reachability is not analyzed.",
            "notes": [
              {
                "code": "advisories_scope_published",
                "params": {
                  "package": "npm:@rchemist/listgrid@0.3.26",
                  "assessed": 6
                }
              },
              {
                "code": "advisories_reachability",
                "params": {}
              }
            ],
            "value": 73,
            "inputs": {
              "source": "osv",
              "advisories": 1,
              "affected_packages": 1,
              "assessed_packages": 6,
              "unassessed_packages": 0,
              "affected_by_severity": "high 1",
              "direct_affected_packages": 1
            },
            "components": [
              {
                "key": "direct_dependencies_free_of_known_advisories",
                "name": "Direct dependencies free of known advisories",
                "detail": "1 affected: uuid 9.0.1 (high 7.5)",
                "points": 14,
                "status": "partial",
                "details": [
                  {
                    "code": "advisories_affected",
                    "params": {
                      "count": 1,
                      "packages": "uuid 9.0.1 (high 7.5)"
                    }
                  }
                ],
                "max_points": 35
              },
              {
                "key": "indirect_dependencies_free_of_known_advisories",
                "name": "Indirect dependencies free of known advisories",
                "detail": "no indirect dependency carries a known advisory",
                "points": 25,
                "status": "met",
                "details": [
                  {
                    "code": "no_indirect_advisories",
                    "params": {}
                  }
                ],
                "max_points": 25
              },
              {
                "key": "no_advisories_left_outstanding",
                "name": "No advisories left outstanding",
                "detail": "1 advisory-carrying package(s) unaddressed past 90 days; oldest published 95 days ago",
                "points": 33.7,
                "status": "partial",
                "details": [
                  {
                    "code": "advisories_stale",
                    "params": {
                      "days": 90,
                      "count": 1,
                      "oldest": 95
                    }
                  }
                ],
                "max_points": 40
              }
            ]
          },
          {
            "key": "malicious_dependencies",
            "band": "excellent",
            "name": "Malicious dependencies",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "source": "osv",
              "meaning": "reported as a malicious package by the OpenSSF corpus; the remedy is removal or moving off the compromised name, never an upgrade of the same artifact. Versions the registry has since pulled are listed but not scored",
              "packages": [],
              "red_flag": false,
              "assessed_packages": 6,
              "malicious_packages": 0,
              "direct_malicious_packages": 0,
              "withdrawn_malicious_packages": 0,
              "installable_malicious_packages": 0
            },
            "components": [
              {
                "key": "no_dependency_reported_as_a_malicious_package",
                "name": "No dependency reported as a malicious package",
                "detail": "no dependency is reported as a malicious package",
                "points": 100,
                "status": "met",
                "details": [
                  {
                    "code": "no_malicious_dependencies",
                    "params": {}
                  }
                ],
                "max_points": 100
              }
            ]
          },
          {
            "key": "high_risk_jurisdiction_exposure",
            "band": "excellent",
            "name": "High-Risk Jurisdiction Exposure",
            "note": "Only high-confidence self-published location evidence affects this multiplier. Ambiguous matches are review-only; country evidence is not proof of nationality, citizenship, legal registration, malicious intent, or sanctions status.",
            "notes": [
              {
                "code": "jurisdiction_evidence_limits",
                "params": {}
              }
            ],
            "value": 100,
            "inputs": {
              "meaning": "self-published location evidence; not nationality or citizenship",
              "red_flag": false,
              "exposures": [],
              "policy_countries": [
                "Russia",
                "Iran",
                "North Korea"
              ],
              "review_only_matches": 0,
              "assessed_self_published_locations": 2
            },
            "components": [
              {
                "key": "policy_exposure_multiplier",
                "name": "Policy exposure multiplier",
                "detail": "no confirmed policy-scope location match",
                "points": 100,
                "status": "met",
                "details": [
                  {
                    "code": "jurisdiction_no_match",
                    "params": {}
                  }
                ],
                "max_points": 100
              }
            ]
          }
        ],
        "description": "Are visible security and supply-chain practices strong, with no malicious dependency and no unresolved high-risk jurisdiction exposure?"
      },
      {
        "key": "ai_readiness",
        "band": "moderate",
        "name": "AI Readiness",
        "value": 63,
        "weight": 0,
        "metrics": [
          {
            "key": "ai_agent_context",
            "band": "at_risk",
            "name": "Agent context & guidance",
            "note": null,
            "notes": [],
            "value": 40,
            "inputs": {
              "has_llms_txt": false,
              "legible_history_share": 0.988,
              "agent_instruction_files": [],
              "agent_instruction_max_bytes": null
            },
            "components": [
              {
                "key": "agent_instructions",
                "name": "Agent instructions",
                "detail": "no CLAUDE.md / AGENTS.md / editor rules",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "no_agent_instructions",
                    "params": {}
                  }
                ],
                "max_points": 45
              },
              {
                "key": "machine_readable_docs_llms_txt",
                "name": "Machine-readable docs (llms.txt)",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 15
              },
              {
                "key": "legible_commit_history",
                "name": "Legible commit history",
                "detail": "82 of 83 human commits state their intent (structured subject or explanatory body)",
                "points": 40,
                "status": "met",
                "details": [
                  {
                    "code": "legible_history",
                    "params": {
                      "legible": 82,
                      "sampled": 83
                    }
                  }
                ],
                "max_points": 40
              }
            ]
          },
          {
            "key": "ai_verify_loop",
            "band": "moderate",
            "name": "Verify loop (build / test / typecheck)",
            "note": null,
            "notes": [],
            "value": 67,
            "inputs": {
              "has_nix": false,
              "has_tests": true,
              "lockfiles": [
                "package-lock.json"
              ],
              "has_dockerfile": false,
              "typed_language": true,
              "bootstrap_files": [],
              "has_devcontainer": false,
              "has_linter_config": true,
              "typecheck_configs": [
                "tsconfig.json"
              ],
              "agent_commit_share": 0.578,
              "toolchain_manifests": [],
              "dependency_bot_commit_share": 0
            },
            "components": [
              {
                "key": "one_command_bootstrap",
                "name": "One-command bootstrap",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 18
              },
              {
                "key": "automated_tests",
                "name": "Automated tests",
                "detail": null,
                "points": 22,
                "status": "met",
                "details": [],
                "max_points": 22
              },
              {
                "key": "lint_format_config",
                "name": "Lint / format config",
                "detail": "eslint.config.mjs",
                "points": 11,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": "eslint.config.mjs"
                    }
                  }
                ],
                "max_points": 11
              },
              {
                "key": "static_type_checking",
                "name": "Static type checking",
                "detail": "tsconfig.json",
                "points": 11,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": "tsconfig.json"
                    }
                  }
                ],
                "max_points": 11
              },
              {
                "key": "reproducible_environment",
                "name": "Reproducible environment",
                "detail": "lockfile",
                "points": 10,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": "lockfile"
                    }
                  }
                ],
                "max_points": 10
              },
              {
                "key": "demonstrated_agent_practice",
                "name": "Demonstrated agent practice",
                "detail": "48 of the last 83 commits agent-authored or agent-credited",
                "points": 10,
                "status": "met",
                "details": [
                  {
                    "code": "agent_authored_commits",
                    "params": {
                      "count": 48,
                      "sampled": 83
                    }
                  }
                ],
                "max_points": 10
              },
              {
                "key": "automated_maintenance",
                "name": "Automated maintenance",
                "detail": "no automated dependency updates observed",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "no_dependency_automation",
                    "params": {}
                  }
                ],
                "max_points": 8
              },
              {
                "key": "openssf_scorecard_pinned_dependencies",
                "name": "OpenSSF Scorecard: Pinned-Dependencies",
                "detail": "dependency not pinned by hash detected -- score normalized to 3",
                "points": 3,
                "status": "partial",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "ai_code_legibility",
            "band": "excellent",
            "name": "Code legibility for models",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "primary_language": "TypeScript",
              "largest_source_bytes": 37743,
              "source_files_sampled": 365,
              "oversized_source_files": 0
            },
            "components": [
              {
                "key": "type_checkable_code",
                "name": "Type-checkable code",
                "detail": "TypeScript (statically typed)",
                "points": 45,
                "status": "met",
                "details": [
                  {
                    "code": "statically_typed_language",
                    "params": {
                      "language": "TypeScript"
                    }
                  }
                ],
                "max_points": 45
              },
              {
                "key": "manageable_file_sizes",
                "name": "Manageable file sizes",
                "detail": "0/365 source files over 60KB",
                "points": 55,
                "status": "met",
                "details": [
                  {
                    "code": "oversized_source_files",
                    "params": {
                      "kb": 60,
                      "sampled": 365,
                      "oversized": 0
                    }
                  }
                ],
                "max_points": 55
              }
            ]
          }
        ],
        "description": "How well is the repo equipped to be developed and maintained with AI coding agents? An independent, experimental badge — weight 0.0, so it is surfaced on its own and does not affect the overall health score."
      }
    ],
    "metrics_version": "1.13.0"
  },
  "warnings": [
    "Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token",
    "GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository"
  ],
  "report_type": "repository",
  "generated_at": "2026-07-27T00:30:05.479725Z",
  "schema_version": "0.27.0",
  "badge_url": "https://raw.githubusercontent.com/inspect-software/badges/main/v1/r/rchemist/rcm-listgrid.svg",
  "full_name": "rchemist/rcm-listgrid",
  "license_state": "standard",
  "license_spdx": "Apache-2.0"
}

评分是信号,而非担保。 评分反映的是 GitHub 上公开可见的实践——不是代码审计,也不是安全保证。

缺失数据将被剔除并重新归一化权重,绝不按零分计。方法论已版本化并公开:指标 v1.13.0、模式 v0.27.0—— 完整方法论 · 指标知识库.

单项结果在整体记录中的位置: 汇总统计npm.