软件健康报告模式 0.27.0 · 指标 1.13.0 · 2026-07-23 12:26 UTC

roblarsen / html5-boilerplate

starting html/css template. so much goodness baked in by default (previously named frontend pro template)

JavaScript · HTMLMIT★ 11 星标⑂ 2 复刻始于 2010年8月复刻在 GitHub 上查看 ↗

roblarsen/html5-boilerplate 的健康指数为 100 分中的 52 分，处于「中等」区间。其得分最高的类别是Engineering Quality（69/100），最低的是Community & Adoption（20/100）。最近一次更新在 20 天前。近期的大部分工作由 3 位贡献者完成。

总分 / 100

中等

软件健康指数

指标归入加权类别，统一采用 1–100 量表。总体分先取类别加权平均；当公开证据触发高风险司法辖区政策时，评级会按政策调整，并设置 49（有风险）的上限。AI 就绪度不计入总体分。

优秀85-100堪称典范；基本满足所有检验标准

良好70-84健康；仅有轻微不足

中等50-69可接受，但存在明显不足；建议进行审查

存在风险30-49存在重大薄弱环节；采用时应保持审慎

危急1-29问题严重（项目被弃置、仅有单一维护者、缺乏基本工程规范）

评分画像

每条轴代表一个类别。形状比平均值更重要——健康的对象会填满整个图形，而“一峰一谷”式画像意味着某一维度的优势正掩盖另一维度的风险。

所有权

Rob Larsen个人账户

548 关注者74 个公开仓库始于 2010年8月Palatino Consulting, LLC

该仓库由个人账户拥有。相较于组织支持的项目，单一所有者项目的延续性风险更高。

软件包生态系统

注册表	软件包	版本	月下载量	版本数	最近发布	标签
npm	html5-boilerplate指向其他仓库——不计分	9.0.1	3,682	15	827 天前	h5bp template front-end

按类别列示的指标

活力

项目是否仍有生命——是否仍在编写代码，是否仍在发布版本？

55中等 · 占总体的 22%

开发活跃度

62中等

评分方式

28.8/36	推送新近度 — 最近一次推送于 20 天前
7.6/36	提交节奏 — 52 周中有 11 周有提交
15.6/18	提交量 — 最近一年 53 次提交
10/10	OpenSSF Scorecard：Maintained — 22 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10

所用输入

commits_last_year	53
human_commit_share	0.26
days_since_last_push	20
active_weeks_last_year	11

发布纪律

44存在风险

评分方式

27/27	有发布版本 — 已发布 1 个发布版本
0/36	发布时效 — 最近一次发布版本于 2,451 天前
12.6/27	发布节奏 — 节奏未知（仅一次发布）
0/10	OpenSSF Scorecard：Signed-Releases — 无数据

所用输入

releases_count	1
latest_release_tag	v0.0.1
releases_from_tags	否
days_since_latest_release	2,451
mean_days_between_releases	—

已排除计分（无数据或不适用）：OpenSSF Scorecard：Signed-Releases。其余权重已重新归一化。

社区与采用

项目是否拥有用户、下载量与关注度，并具备欢迎贡献者参与的配置？

20危急 · 占总体的 18%

流行度与采用

16危急

评分方式

16.2/60	星标 — 11 个星标
0/25	复刻 — 2 个复刻
0/15	关注者 — 1 位关注者

所用输入

forks	2
stars	11
watchers	1
growth_state	unverified
growth_factor_pct	100
growth_unverified_reason	no_history

社区健康

25危急

评分方式

0/22.5	README
22.5/22.5	许可证 — 可识别的许可证（MIT）
0/18	CONTRIBUTING 指南
0/13.5	行为准则
0/7.2	议题模板
0/6.3	PR 模板

所用输入

has_readme	否
has_license	否
has_contributing	否
has_issue_template	否
has_code_of_conduct	否
has_pull_request_template	否

工程质量

基础的工程与文档实践是否到位？

69中等 · 占总体的 20%

工程实践

88优秀

评分方式

24/24	CI 工作流 — 8 个工作流
24/24	存在测试
16/16	Linter 配置 — eslint.config.mjs
0/9.6	Pre-commit 钩子
6.4/6.4	.editorconfig
0/20	OpenSSF Scorecard：CI-Tests — 无数据

所用输入

has_ci	是
has_tests	是
has_editorconfig	是
has_linter_config	是
has_precommit_config	否

已排除计分（无数据或不适用）：OpenSSF Scorecard：CI-Tests。其余权重已重新归一化。

文档

40存在风险

评分方式

0/30	README
25/25	文档目录
15/15	文档 / 主页站点 — http://html5boilerplate.com
0/10	仓库描述
0/10	主题标签
0/10	Wiki

所用输入

topics	—
has_wiki	否
homepage	http://html5boilerplate.com
has_readme	否
has_docs_dir	是
has_description	否

安全

可见的安全与供应链实践是否稳固，且不存在未解决的高风险司法辖区暴露？

66中等 · 占总体的 16%

安全态势

58中等

评分方式

7.5/7.5	Binary-Artifacts — no binaries found in the repo
0/7.5	Branch-Protection — branch protection not enabled on development/release branches
0/2.5	CI-Tests — 无数据
0/2.5	CII-Best-Practices — no effort to earn an OpenSSF best practices badge detected
0/7.5	Code-Review — Found 0/30 approved changesets -- score normalized to 0
2.5/2.5	Contributors — project has 82 contributing companies or organizations
10/10	Dangerous-Workflow — no dangerous workflow patterns detected
7.5/7.5	Dependency-Update-Tool — update tool detected
0/5	Fuzzing — project is not fuzzed
2.5/2.5	许可证 — license file detected
7.5/7.5	Maintained — 22 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10
0/5	Packaging — 无数据
4/5	Pinned-Dependencies — dependency not pinned by hash detected -- score normalized to 8
5/5	SAST — SAST tool detected: CodeQL
0/5	Security-Policy — security policy file not detected
0/7.5	Signed-Releases — 无数据
0/7.5	Token-Permissions — detected GitHub workflow tokens with excessive permissions
6/7.5	Vulnerabilities — 2 existing vulnerabilities detected

所用输入

source	openssf_scorecard
checks_evaluated	15
scorecard_version	v5.5.0
checks_inconclusive	3
scorecard_aggregate	5.8

已排除计分（无数据或不适用）：ci_tests, packaging, signed_releases。其余权重已重新归一化。

依赖安全公告

100优秀

评分方式

35/35	直接依赖不含已知公告 — 没有直接依赖携带已知公告
0/25	间接依赖不含已知公告 — 在此范围内，传递依赖集合无法与开发和测试依赖区分
0/40	没有长期未处理的公告 — 没有公告带有发布日期

所用输入

source	osv
advisories	3
affected_packages	3
assessed_packages	343
unassessed_packages	6
affected_by_severity	high 3
direct_affected_packages	0

已排除计分（无数据或不适用）：间接依赖不含已知公告, 没有长期未处理的公告。其余权重已重新归一化。已将 343 个已解析依赖与 OSV 比对。有 6 项无法评估——没有已解析的版本、生态系统不受支持，或超出所报告的软件包清单。该仓库未发布任何索引可解析的软件包，因此改为评估仓库依赖图。该图将开发与测试版本固定同交付的依赖混在一起，因此仅对声明的运行时依赖计分；传递性发现仅作为背景信息列出，不计入评分。未对可达性进行分析。

AI 就绪度

该仓库在多大程度上具备与 AI 编码代理协同开发与维护的条件？这是一枚独立的实验性徽章——权重为 0.0，因此单独呈现，不影响总体健康评分。

56中等 · 占总体的 0%

AI 代理上下文与指引

40存在风险

评分方式

0/45	代理指令 — 没有 CLAUDE.md / AGENTS.md / 编辑器规则
0/15	机器可读文档（llms.txt）
40/40	可读的提交历史 — 26 次人类提交中有 25 次说明了意图（结构化标题或解释性正文）

所用输入

has_llms_txt	否
legible_history_share	0.962
agent_instruction_files	—
agent_instruction_max_bytes	—

验证循环（构建 / 测试 / 类型检查）

69中等

评分方式

0/18	一条命令的引导启动
22/22	自动化测试
11/11	Lint / 格式化配置 — eslint.config.mjs
0/11	静态类型检查
10/10	可复现环境 — lockfile
10/10	已体现的代理实践 — 最近 100 次提交中有 5 次由代理编写或署名代理
8/8	自动化维护 — 最近 100 次提交中有 73 次为自动依赖更新
8/10	OpenSSF Scorecard：Pinned-Dependencies — dependency not pinned by hash detected -- score normalized to 8

所用输入

has_nix	否
has_tests	是
lockfiles	package-lock.json
has_dockerfile	否
typed_language	否
bootstrap_files	—
has_devcontainer	否
has_linter_config	是
typecheck_configs	—
agent_commit_share	0.05
toolchain_manifests	—
dependency_bot_commit_share	0.73

面向模型的代码可读性

55中等

评分方式

0/45	可类型检查的代码 — JavaScript，未配置类型检查
55/55	可控的文件大小 — 采样的 8 个源文件中有 0 个超过 60KB

所用输入

primary_language	JavaScript
largest_source_bytes	3,644
source_files_sampled	8
oversized_source_files	0

关键数据

11GitHub 星标

98贡献者

53最近 12 个月提交数

20距最近推送天数

1发布版本数

3巴士系数（bus factor）

0开放议题

npm软件包生态系统数

数据采集警告

Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token
Community profile unavailable
npm package 'html5-boilerplate' points at a different repository (https://github.com/h5bp/html5-boilerplate); excluded from ecosystem scoring

更多细节

Star 与 Fork 历史 0 ★ / 2 ⇿

0Star

2Fork

每颗 star 和每个 fork 的添加时间，来自 GitHub 并按天汇总。累计增长位于其构成来源——每日新增——的正上方，二者可相互对照：稳定的自然增长与短暂的突增形态截然不同。当这一差别可被衡量时，它会作为增长真实性予以报告。

每个点涵盖 4 天。

OpenSSF Scorecard 5.8 / 10

5.8综合

来自开源项目 OpenSSF Scorecard 的独立、工具无关的安全评估。每项检查奖励的是安全实践本身，而非特定供应商的工具。Scorecard 无法判定的检查项标记为 不适用，并从安全评分中剔除（绝不按零分计）。Scorecard v5.5.0 · 2026-07-23 12:26 UTC

10	Binary-Artifacts	no binaries found in the repo
0	Branch-Protection	branch protection not enabled on development/release branches
不适用	CI-Tests	no pull request found
0	CII-Best-Practices	no effort to earn an OpenSSF best practices badge detected
0	Code-Review	Found 0/30 approved changesets -- score normalized to 0
10	Contributors	project has 82 contributing companies or organizations
10	Dangerous-Workflow	no dangerous workflow patterns detected
10	Dependency-Update-Tool	update tool detected
0	Fuzzing	project is not fuzzed
10	License	license file detected
10	Maintained	22 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10
不适用	Packaging	packaging workflow not detected
8	Pinned-Dependencies	dependency not pinned by hash detected -- score normalized to 8
10	SAST	SAST tool detected: CodeQL
0	Security-Policy	security policy file not detected
不适用	Signed-Releases	no releases found
0	Token-Permissions	detected GitHub workflow tokens with excessive permissions
8	Vulnerabilities	2 existing vulnerabilities detected

全部依赖 349

来自 GitHub 依赖图的完整解析依赖集合：0 个直接依赖与 349 个间接（传递）软件包。仓库提交锁文件时，传递闭包才是完整的。

注册表	软件包	版本	关系
npm	@aashutoshrathi/word-wrap	`1.2.6`	间接
npm	@eslint-community/eslint-utils	`4.9.0`	间接
npm	@eslint-community/regexpp	`4.12.2`	间接
npm	@eslint/config-array	`0.23.5`	间接
npm	@eslint/config-helpers	`0.6.0`	间接
npm	@eslint/core	`1.2.1`	间接
npm	@eslint/js	`10.0.1`	间接
npm	@eslint/object-schema	`3.0.5`	间接
npm	@eslint/plugin-kit	`0.7.2`	间接
npm	@gulpjs/messages	`1.1.0`	间接
npm	@gulpjs/to-absolute-glob	`4.0.0`	间接
npm	@humanfs/core	`0.19.1`	间接
npm	@humanfs/node	`0.16.7`	间接
npm	@humanwhocodes/module-importer	`1.0.1`	间接
npm	@humanwhocodes/retry	`0.4.3`	间接
npm	@isaacs/cliui	`8.0.2`	间接
npm	@nodelib/fs.scandir	`2.1.5`	间接
npm	@nodelib/fs.stat	`2.0.5`	间接
npm	@nodelib/fs.walk	`1.2.8`	间接
npm	@pkgjs/parseargs	`0.11.0`	间接
npm	@sindresorhus/merge-streams	`2.3.0`	间接
npm	@types/esrecurse	`4.3.1`	间接
npm	@types/estree	`1.0.8`	间接
npm	@types/expect	`1.20.4`	间接
npm	@types/json-schema	`7.0.15`	间接
npm	@types/node	`20.10.3`	间接
npm	@types/vinyl	`2.0.12`	间接
npm	abort-controller	`3.0.0`	间接
npm	acorn	`8.17.0`	间接
npm	acorn-jsx	`5.3.2`	间接
npm	ajv	`6.15.0`	间接
npm	ansi-colors	`1.1.0`	间接
npm	ansi-regex	`5.0.1`	间接
npm	ansi-regex	`6.0.1`	间接
npm	ansi-styles	`4.3.0`	间接
npm	ansi-styles	`6.2.1`	间接
npm	ansi-wrap	`0.1.0`	间接
npm	anymatch	`3.1.3`	间接
npm	archiver	`7.0.1`	间接
npm	archiver-utils	`5.0.2`	间接
npm	argparse	`2.0.1`	间接
npm	array-each	`1.0.1`	间接
npm	array-slice	`1.1.0`	间接
npm	async	`3.2.4`	间接
npm	async-done	`2.0.0`	间接
npm	async-settle	`2.0.0`	间接
npm	autoprefixer	`10.5.2`	间接
npm	b4a	`1.6.4`	间接
npm	bach	`2.0.1`	间接
npm	balanced-match	`1.0.2`	间接
npm	balanced-match	`4.0.4`	间接
npm	base64-js	`1.5.1`	间接
npm	baseline-browser-mapping	`2.10.38`	间接
npm	binary-extensions	`2.3.0`	间接
npm	bl	`5.1.0`	间接
npm	brace-expansion	`2.1.0`	间接
npm	brace-expansion	`5.0.6`	间接
npm	braces	`3.0.3`	间接
npm	browser-stdout	`1.3.1`	间接
npm	browserslist	`4.28.4`	间接
npm	buffer	`6.0.3`	间接
npm	buffer-crc32	`1.0.0`	间接
npm	camelcase	`6.2.1`	间接
npm	caniuse-lite	`1.0.30001799`	间接
npm	chalk	`4.1.2`	间接
npm	chalk	`5.6.2`	间接
npm	chokidar	`3.6.0`	间接
npm	chokidar	`4.0.3`	间接
npm	cliui	`7.0.4`	间接
npm	cliui	`8.0.1`	间接
npm	clone	`2.1.2`	间接
npm	color-convert	`2.0.1`	间接
npm	color-name	`1.1.4`	间接
npm	color-support	`1.1.3`	间接
npm	compress-commons	`6.0.2`	间接
npm	concat-with-sourcemaps	`1.1.0`	间接
npm	convert-source-map	`2.0.0`	间接
npm	copy-props	`4.0.0`	间接
npm	copy-webpack-plugin	`^14.0.0`	间接
npm	core-util-is	`1.0.3`	间接
npm	crc-32	`1.2.2`	间接
npm	crc32-stream	`6.0.0`	间接
npm	cross-spawn	`7.0.6`	间接
npm	debug	`4.3.6`	间接
npm	decamelize	`4.0.0`	间接
npm	deep-is	`0.1.4`	间接
npm	del	`8.0.1`	间接
npm	detect-file	`1.0.0`	间接
npm	diff	`8.0.4`	间接
npm	duplexify	`4.1.3`	间接
npm	each-props	`3.0.0`	间接
npm	eastasianwidth	`0.2.0`	间接
npm	easy-transform-stream	`1.0.1`	间接
npm	electron-to-chromium	`1.5.378`	间接
npm	emoji-regex	`8.0.0`	间接
npm	emoji-regex	`9.2.2`	间接
npm	end-of-stream	`1.4.4`	间接
npm	escalade	`3.2.0`	间接
npm	escape-string-regexp	`4.0.0`	间接
npm	eslint	`10.6.0`	间接
npm	eslint-plugin-mocha	`11.3.0`	间接
npm	eslint-scope	`9.1.2`	间接
npm	eslint-visitor-keys	`3.4.3`	间接
npm	eslint-visitor-keys	`5.0.1`	间接
npm	espree	`11.2.0`	间接
npm	esquery	`1.7.0`	间接
npm	esrecurse	`4.3.0`	间接
npm	estraverse	`5.3.0`	间接
npm	esutils	`2.0.3`	间接
npm	event-target-shim	`5.0.1`	间接
npm	events	`3.3.0`	间接
npm	expand-tilde	`2.0.2`	间接
npm	extend	`3.0.2`	间接
npm	fancy-log	`2.0.0`	间接
npm	fast-deep-equal	`3.1.3`	间接
npm	fast-fifo	`1.3.2`	间接
npm	fast-glob	`3.3.3`	间接
npm	fast-json-stable-stringify	`2.1.0`	间接
npm	fast-levenshtein	`2.0.6`	间接
npm	fast-levenshtein	`3.0.0`	间接
npm	fastest-levenshtein	`1.0.16`	间接
npm	fastq	`1.19.1`	间接
npm	file-entry-cache	`8.0.0`	间接
npm	fill-range	`7.1.1`	间接
npm	find-up	`5.0.0`	间接
npm	findup-sync	`5.0.0`	间接
npm	fined	`2.0.0`	间接
npm	flagged-respawn	`2.0.0`	间接
npm	flat	`5.0.2`	间接
npm	flat-cache	`4.0.1`	间接
npm	flatted	`3.4.2`	间接
npm	for-in	`1.0.2`	间接
npm	for-own	`1.0.0`	间接
npm	foreground-child	`3.3.1`	间接
npm	fork-stream	`0.0.4`	间接
npm	fraction.js	`5.3.4`	间接
npm	fs-mkdirp-stream	`2.0.1`	间接
npm	fsevents	`2.3.3`	间接
npm	function-bind	`1.1.1`	间接
npm	get-caller-file	`2.0.5`	间接
npm	glob	`10.5.0`	间接
npm	glob	`13.0.6`	间接
npm	glob-parent	`5.1.2`	间接
npm	glob-parent	`6.0.2`	间接
npm	glob-stream	`8.0.3`	间接
npm	glob-watcher	`6.0.0`	间接
npm	global-modules	`1.0.0`	间接
npm	global-prefix	`1.0.2`	间接
npm	globals	`15.15.0`	间接
npm	globals	`16.4.0`	间接
npm	globby	`14.1.0`	间接
npm	glogg	`2.2.0`	间接
npm	graceful-fs	`4.2.11`	间接
npm	gulp	`5.0.1`	间接
npm	gulp-autoprefixer	`10.0.0`	间接
npm	gulp-cli	`3.1.0`	间接
npm	gulp-eslint-new	`2.6.2`	间接
npm	gulp-header	`2.0.12`	间接
npm	gulp-plugin-extras	`1.1.0`	间接
npm	gulp-rename	`2.1.0`	间接
npm	gulplog	`2.2.0`	间接
npm	has	`1.0.3`	间接
npm	has-flag	`4.0.0`	间接
npm	he	`1.2.0`	间接
npm	homedir-polyfill	`1.0.3`	间接
npm	html-webpack-plugin	`^5.6.7`	间接
npm	iconv-lite	`0.6.3`	间接
npm	ieee754	`1.2.1`	间接
npm	ignore	`5.2.0`	间接
npm	ignore	`7.0.5`	间接
npm	imurmurhash	`0.1.4`	间接
npm	inherits	`2.0.4`	间接
npm	ini	`1.3.8`	间接
npm	interpret	`3.1.1`	间接
npm	is-absolute	`1.0.0`	间接
npm	is-binary-path	`2.1.0`	间接
npm	is-core-module	`2.8.0`	间接
npm	is-extglob	`2.1.1`	间接
npm	is-fullwidth-code-point	`3.0.0`	间接
npm	is-glob	`4.0.3`	间接
npm	is-negated-glob	`1.0.0`	间接
npm	is-number	`7.0.0`	间接
npm	is-path-cwd	`3.0.0`	间接
npm	is-path-inside	`3.0.3`	间接
npm	is-path-inside	`4.0.0`	间接
npm	is-plain-obj	`2.1.0`	间接
npm	is-plain-object	`5.0.0`	间接
npm	is-relative	`1.0.0`	间接
npm	is-stream	`2.0.1`	间接
npm	is-unc-path	`1.0.0`	间接
npm	is-unicode-supported	`0.1.0`	间接
npm	is-valid-glob	`1.0.0`	间接
npm	is-windows	`1.0.2`	间接
npm	isarray	`1.0.0`	间接
npm	isexe	`2.0.0`	间接
npm	isobject	`3.0.1`	间接
npm	jackspeak	`3.4.3`	间接
npm	js-yaml	`4.2.0`	间接
npm	json-buffer	`3.0.1`	间接
npm	json-schema-traverse	`0.4.1`	间接
npm	json-stable-stringify-without-jsonify	`1.0.1`	间接
npm	keyv	`4.5.4`	间接
npm	last-run	`2.0.0`	间接
npm	lazystream	`1.0.1`	间接
npm	lead	`4.0.0`	间接
npm	levn	`0.4.1`	间接
npm	liftoff	`5.0.1`	间接
npm	locate-path	`6.0.0`	间接
npm	lodash	`4.18.1`	间接
npm	log-symbols	`4.1.0`	间接
npm	lru-cache	`10.4.3`	间接
npm	lru-cache	`11.2.7`	间接
npm	main.css	`3.0.0`	间接
npm	map-cache	`0.2.2`	间接
npm	map-stream	`0.0.7`	间接
npm	merge-stream	`2.0.0`	间接
npm	merge2	`1.4.1`	间接
npm	micromatch	`4.0.8`	间接
npm	minimatch	`10.2.4`	间接
npm	minimatch	`10.2.5`	间接
npm	minimatch	`5.1.9`	间接
npm	minimatch	`9.0.9`	间接
npm	minipass	`7.1.3`	间接
npm	mocha	`11.7.5`	间接
npm	ms	`2.1.2`	间接
npm	ms	`2.1.3`	间接
npm	mute-stdout	`2.0.0`	间接
npm	nanoid	`3.3.15`	间接
npm	natural-compare	`1.4.0`	间接
npm	node-releases	`2.0.49`	间接
npm	normalize-path	`3.0.0`	间接
npm	now-and-later	`3.0.0`	间接
npm	object.defaults	`1.1.0`	间接
npm	object.pick	`1.3.0`	间接
npm	once	`1.4.0`	间接
npm	optionator	`0.9.3`	间接
npm	p-limit	`3.1.0`	间接
npm	p-locate	`5.0.0`	间接
npm	p-map	`7.0.3`	间接
npm	package-json-from-dist	`1.0.0`	间接
npm	parse-filepath	`1.0.2`	间接
npm	parse-passwd	`1.0.0`	间接
npm	path-exists	`4.0.0`	间接
npm	path-key	`3.1.1`	间接
npm	path-parse	`1.0.7`	间接
npm	path-root	`0.1.1`	间接
npm	path-root-regex	`0.1.2`	间接
npm	path-scurry	`1.11.1`	间接
npm	path-scurry	`2.0.2`	间接
npm	path-type	`6.0.0`	间接
npm	picocolors	`1.1.1`	间接
npm	picomatch	`2.3.2`	间接
npm	plugin-error	`2.0.1`	间接
npm	postcss	`8.5.15`	间接
npm	postcss-value-parser	`4.2.0`	间接
npm	prelude-ls	`1.2.1`	间接
npm	presentable-error	`0.0.1`	间接
npm	prettier	`3.8.4`	间接
npm	process	`0.11.10`	间接
npm	process-nextick-args	`2.0.1`	间接
npm	punycode	`2.3.1`	间接
npm	queue-microtask	`1.2.3`	间接
npm	queue-tick	`1.0.1`	间接
npm	readable-stream	`2.3.8`	间接
npm	readable-stream	`3.6.2`	间接
npm	readable-stream	`4.5.2`	间接
npm	readdir-glob	`1.1.3`	间接
npm	readdirp	`3.6.0`	间接
npm	readdirp	`4.1.2`	间接
npm	rechoir	`0.8.0`	间接
npm	remove-trailing-separator	`1.1.0`	间接
npm	replace-ext	`2.0.0`	间接
npm	replace-homedir	`2.0.0`	间接
npm	require-directory	`2.1.1`	间接
npm	resolve	`1.20.0`	间接
npm	resolve-dir	`1.0.1`	间接
npm	resolve-options	`2.0.0`	间接
npm	reusify	`1.1.0`	间接
npm	run-parallel	`1.2.0`	间接
npm	safe-buffer	`5.1.2`	间接
npm	safe-buffer	`5.2.1`	间接
npm	safer-buffer	`2.1.2`	间接
npm	semver	`6.3.1`	间接
npm	semver	`7.7.4`	间接
npm	semver-greatest-satisfied-range	`2.0.0`	间接
npm	serialize-javascript	`7.0.5`	间接
npm	shebang-command	`2.0.0`	间接
npm	shebang-regex	`3.0.0`	间接
npm	signal-exit	`4.1.0`	间接
npm	slash	`5.1.0`	间接
npm	source-map	`0.5.7`	间接
npm	source-map	`0.6.1`	间接
npm	source-map-js	`1.2.1`	间接
npm	sparkles	`2.1.0`	间接
npm	stream-composer	`1.0.2`	间接
npm	stream-exhaust	`1.0.2`	间接
npm	stream-shift	`1.0.3`	间接
npm	streamx	`2.15.1`	间接
npm	string-width	`4.2.3`	间接
npm	string-width	`5.1.2`	间接
npm	string_decoder	`1.1.1`	间接
npm	string_decoder	`1.3.0`	间接
npm	strip-ansi	`6.0.1`	间接
npm	strip-ansi	`7.1.0`	间接
npm	strip-json-comments	`3.1.1`	间接
npm	supports-color	`7.2.0`	间接
npm	supports-color	`8.1.1`	间接
npm	sver	`1.8.4`	间接
npm	tar-stream	`3.1.6`	间接
npm	teex	`1.0.1`	间接
npm	ternary-stream	`3.0.0`	间接
npm	through2	`3.0.2`	间接
npm	through2	`4.0.2`	间接
npm	to-regex-range	`5.0.1`	间接
npm	to-through	`3.0.0`	间接
npm	type-check	`0.4.0`	间接
npm	unc-path-regex	`0.1.2`	间接
npm	undertaker	`2.0.0`	间接
npm	undertaker-registry	`2.0.0`	间接
npm	undici-types	`5.26.5`	间接
npm	unicorn-magic	`0.3.0`	间接
npm	update-browserslist-db	`1.2.3`	间接
npm	uri-js	`4.4.1`	间接
npm	util-deprecate	`1.0.2`	间接
npm	v8flags	`4.0.1`	间接
npm	value-or-function	`4.0.0`	间接
npm	vinyl	`3.0.1`	间接
npm	vinyl-contents	`2.0.0`	间接
npm	vinyl-fs	`4.0.2`	间接
npm	vinyl-sourcemap	`2.0.0`	间接
npm	vinyl-sourcemaps-apply	`0.2.1`	间接
npm	webpack	`^5.108.3`	间接
npm	webpack-cli	`^7.1.0`	间接
npm	webpack-dev-server	`^5.2.5`	间接
npm	webpack-merge	`^6.0.1`	间接
npm	which	`1.3.1`	间接
npm	which	`2.0.2`	间接
npm	workerpool	`9.3.3`	间接
npm	wrap-ansi	`7.0.0`	间接
npm	wrap-ansi	`8.1.0`	间接
npm	wrappy	`1.0.2`	间接
npm	y18n	`5.0.8`	间接
npm	yargs	`16.2.0`	间接
npm	yargs	`17.7.2`	间接
npm	yargs-parser	`20.2.9`	间接
npm	yargs-parser	`21.1.1`	间接
npm	yargs-unparser	`2.0.0`	间接
npm	yocto-queue	`0.1.0`	间接
npm	zip-stream	`6.0.1`	间接

依赖安全公告 3

该仓库未发布可被索引解析的包，因此评估的是其自身的依赖图——共 343 个包，其中也包含从不交付的开发与测试版本固定：3 个存在已知公告，0 个为直接依赖。有 6 个无法评估——没有已解析的版本、生态系统不受支持，或不在所列包清单之内。

软件包	版本	关系	严重程度	公告数	修复版本
brace-expansion	`2.1.0`	间接	高	1	`5.0.7`
brace-expansion	`5.0.6`	间接	高	1	`5.0.7`
js-yaml	`4.2.0`	间接	高	1	`4.3.0`

公告表示依赖图中记录的版本落入某条公告的受影响范围。可达性未经分析，且依赖图包含开发与测试的版本固定——某项发现可能只涉及工具链而非交付的软件。

原始 JSON 报告机器可读

{
  "data": {
    "repo": {
      "topics": [],
      "is_fork": true,
      "size_kb": 22707,
      "has_wiki": false,
      "homepage": "http://html5boilerplate.com",
      "languages": {
        "HTML": 1922,
        "JavaScript": 10162
      },
      "pushed_at": "2026-07-03T01:42:03Z",
      "created_at": "2010-08-13T17:54:20Z",
      "owner_type": "User",
      "updated_at": "2026-07-03T01:30:17Z",
      "description": "starting html/css template. so much goodness baked in by default (previously named frontend pro template)",
      "is_archived": false,
      "is_disabled": false,
      "license_spdx": "MIT",
      "default_branch": "main",
      "license_spdx_raw": "MIT",
      "primary_language": "JavaScript",
      "significant_languages": [
        "JavaScript",
        "HTML"
      ]
    },
    "owner": {
      "blog": "http://htmlcssjavascript.com/",
      "name": "Rob Larsen",
      "type": "User",
      "login": "roblarsen",
      "company": "Palatino Consulting, LLC",
      "location": "Boston",
      "followers": 548,
      "avatar_url": "https://avatars.githubusercontent.com/u/361421?v=4",
      "created_at": "2010-08-11T20:54:10Z",
      "is_verified": null,
      "public_repos": 74,
      "account_age_days": 5824
    },
    "license": {
      "state": "standard",
      "spdx_id": "MIT",
      "raw_spdx": "MIT",
      "file_present": true,
      "scorecard_found": true,
      "profile_has_license": false
    },
    "activity": {
      "releases": [
        {
          "tag": "v0.0.1",
          "kind": "patch",
          "published_at": "2019-11-05T17:10:29Z"
        }
      ],
      "recent_commits": [
        {
          "oid": "b7e31d67f4cf83e23d51f4decc73618bf8bd77ba",
          "body": "Bumps [eslint](https://github.com/eslint/eslint) from 10.5.0 to 10.6.0.\n- [Release notes](https://github.com/eslint/eslint/releases)\n- [Commits](https://github.com/eslint/eslint/compare/v10.5.0...v10.6.0)\n\n---\nupdated-dependencies:\n- dependency-name: eslint\n  dependency-version: 10.6.0\n  dependency-\n[…]\nrect:development\n  update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore(deps-dev): bump eslint from 10.5.0 to 10.6.0 (#3449)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-07-02T03:06:38Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "f160f1b69dfb61bb915e56c9e0a2b73b6382938f",
          "body": "Updates the requirements on [webpack-cli](https://github.com/webpack/webpack-cli) to permit the latest version.\n- [Release notes](https://github.com/webpack/webpack-cli/releases)\n- [Changelog](https://github.com/webpack/webpack-cli/blob/main/CHANGELOG.md)\n- [Commits](https://github.com/webpack/webpa\n[…]\nndency-version: 7.1.0\n  dependency-type: direct:development\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore(deps-dev): update webpack-cli requirement in /src (#3458)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-07-01T20:45:53Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "227dbf75ffa076d95b10c994a2b51dcd0ff5533f",
          "body": "…updates (#3462)\n\n* chore(deps): bump the github-actions group across 1 directory with 6 updates\n\nBumps the github-actions group with 6 updates in the / directory:\n\n| Package | From | To |\n| --- | --- | --- |\n| [actions/checkout](https://github.com/actions/checkout) | `6.0.2` | `7.0.0` |\n| [github/c\n[…]\nndabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>\nCo-authored-by: copilot-swe-agent[bot] <198982749+Copilot@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore(deps): bump the github-actions group across 1 directory with 6 …",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-07-01T20:45:13Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "f6367d67e308b781ddea0f9ca525b2542579140f",
          "body": null,
          "is_bot": false,
          "headline": "Moves checkout action up the chain to fix Windows build (#3463)",
          "author_name": "Rob Larsen",
          "author_login": "roblarsen",
          "committed_at": "2026-07-01T19:57:44Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "f4fb2310c19024e735ff41acaf0444e1de987b22",
          "body": "…nce (#3324)",
          "is_bot": false,
          "headline": "ci: enhance Dependabot config with groups, cooldown, and monthly cade…",
          "author_name": "Christian Oliff",
          "author_login": "coliff",
          "committed_at": "2026-07-01T10:11:24Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "0e6f7705e3717ab66c2964fdfb94619d2b466a00",
          "body": "Updates the requirements on [webpack](https://github.com/webpack/webpack) to permit the latest version.\n- [Release notes](https://github.com/webpack/webpack/releases)\n- [Changelog](https://github.com/webpack/webpack/blob/main/CHANGELOG.md)\n- [Commits](https://github.com/webpack/webpack/compare/v5.10\n[…]\nency-version: 5.108.1\n  dependency-type: direct:development\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore(deps-dev): update webpack requirement in /src (#3459)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-07-01T02:58:19Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "663258eb5dfd1a2ced1112e7d59fcd238de386db",
          "body": "Updates the requirements on [webpack-dev-server](https://github.com/webpack/webpack-dev-server) to permit the latest version.\n- [Release notes](https://github.com/webpack/webpack-dev-server/releases)\n- [Changelog](https://github.com/webpack/webpack-dev-server/blob/main/CHANGELOG.md)\n- [Commits](http\n[…]\nndency-version: 5.2.5\n  dependency-type: direct:development\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore(deps-dev): update webpack-dev-server requirement in /src (#3460)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-07-01T02:31:43Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "e5638df2a27317c96acbb6224771cd322eb5281c",
          "body": "* Upgrading eslint.\n\n* update",
          "is_bot": false,
          "headline": "Upgrading eslint. (#3447)",
          "author_name": "Rob Larsen",
          "author_login": "roblarsen",
          "committed_at": "2026-06-26T11:02:03Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "8f0e475cd852d9ecbb04d2df2cc6b7381524a936",
          "body": "- Minimum = Node v22\n- Add Node v26 to support (as its current https://nodejs.org/en/about/previous-releases )",
          "is_bot": false,
          "headline": "Update NodeJS Support (#3446)",
          "author_name": "Christian Oliff",
          "author_login": "coliff",
          "committed_at": "2026-06-26T02:27:49Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "087f82148f5cb9e75077150a03878b9ac0380e6e",
          "body": "* Add proposal guidelines for new projects\n\nThis document outlines the proposal guidelines for new projects seeking inclusion in the @h5bp organization, detailing requirements, evaluation criteria, and the proposal process.\n\n* Update PROPOSAL_GUIDELINES.md\n\ntypo fixes\n\n---------\n\nCo-authored-by: Christian Oliff <christianoliff@pm.me>",
          "is_bot": false,
          "headline": "Add proposal guidelines for new projects (#3443)",
          "author_name": "Rob Larsen",
          "author_login": "roblarsen",
          "committed_at": "2026-06-26T00:44:09Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "f81eec066d832e4274a87db67a58e4ee406dc576",
          "body": "Bumps [actions/setup-node](https://github.com/actions/setup-node) from 6.0.0 to 6.4.0.\n- [Release notes](https://github.com/actions/setup-node/releases)\n- [Commits](https://github.com/actions/setup-node/compare/2028fbc5c25fe9cf00d9f06a71cc4710d4507903...48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e)\n\n---\n[…]\nirect:production\n  update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore(deps): bump actions/setup-node from 6.0.0 to 6.4.0 (#3422)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-06-25T03:53:07Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "4df3945e1fc092edad87d5b18afe6fe60d1e5e2b",
          "body": "Bumps [actions/upload-artifact](https://github.com/actions/upload-artifact) from 4.6.2 to 7.0.1.\n- [Release notes](https://github.com/actions/upload-artifact/releases)\n- [Commits](https://github.com/actions/upload-artifact/compare/ea165f8d65b6e75b540449e92b4886f43607fa02...043fb46d1a93c77aae656e7c1c\n[…]\nirect:production\n  update-type: version-update:semver-major\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore(deps): bump actions/upload-artifact from 4.6.2 to 7.0.1 (#3418)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-06-25T03:52:27Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "6edbf7fc4ccefa87547aaed2fac28dd66af348dc",
          "body": "Co-authored-by: roblarsen <361421+roblarsen@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore(dist): update dist folder after build (#3445)",
          "author_name": "github-actions[bot]",
          "author_login": "github-actions[bot]",
          "committed_at": "2026-06-25T03:51:52Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "bc7dc5eb02844aec6222af020b9b23c1e4152e10",
          "body": "…0 (#3417)\n\nBumps [streetsidesoftware/cspell-action](https://github.com/streetsidesoftware/cspell-action) from 8.3.0 to 8.4.0.\n- [Release notes](https://github.com/streetsidesoftware/cspell-action/releases)\n- [Changelog](https://github.com/streetsidesoftware/cspell-action/blob/main/CHANGELOG.md)\n- [\n[…]\nirect:production\n  update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore(deps): bump streetsidesoftware/cspell-action from 8.3.0 to 8.4.…",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-06-25T03:45:54Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "a748fa25ee2b6f04d39c74e10be8d556bcc05dce",
          "body": "Bumps [webpack-cli](https://github.com/webpack/webpack-cli) from 6.0.1 to 7.0.3.\n- [Release notes](https://github.com/webpack/webpack-cli/releases)\n- [Changelog](https://github.com/webpack/webpack-cli/blob/main/CHANGELOG.md)\n- [Commits](https://github.com/webpack/webpack-cli/compare/webpack-cli@6.0.\n[…]\nrect:development\n  update-type: version-update:semver-major\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore(deps-dev): bump webpack-cli from 6.0.1 to 7.0.3 in /src (#3386)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-06-25T03:18:34Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "572af58d1e31228cc9d9c655aa9bf64d21c4acad",
          "body": "…rc (#3384)\n\nBumps [copy-webpack-plugin](https://github.com/webpack/copy-webpack-plugin) from 13.0.1 to 14.0.0.\n- [Release notes](https://github.com/webpack/copy-webpack-plugin/releases)\n- [Changelog](https://github.com/webpack/copy-webpack-plugin/blob/main/CHANGELOG.md)\n- [Commits](https://github.c\n[…]\nrect:development\n  update-type: version-update:semver-major\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore(deps-dev): bump copy-webpack-plugin from 13.0.1 to 14.0.0 in /s…",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-06-25T03:03:26Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "f586e5e82446b33adaa38f944d5508f7ed30bbbc",
          "body": "Bumps [gulp-autoprefixer](https://github.com/sindresorhus/gulp-autoprefixer) from 9.0.0 to 10.0.0.\n- [Release notes](https://github.com/sindresorhus/gulp-autoprefixer/releases)\n- [Commits](https://github.com/sindresorhus/gulp-autoprefixer/compare/v9.0.0...v10.0.0)\n\n---\nupdated-dependencies:\n- depend\n[…]\nrect:development\n  update-type: version-update:semver-major\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore(deps-dev): bump gulp-autoprefixer from 9.0.0 to 10.0.0 (#3296)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-06-25T02:58:09Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "3c10145b1da310c5092531f6198049245d7ae107",
          "body": "Updates the requirements on [html-webpack-plugin](https://github.com/jantimon/html-webpack-plugin) to permit the latest version.\n- [Release notes](https://github.com/jantimon/html-webpack-plugin/releases)\n- [Changelog](https://github.com/jantimon/html-webpack-plugin/blob/main/CHANGELOG.md)\n- [Commit\n[…]\nndency-version: 5.6.7\n  dependency-type: direct:development\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore(deps-dev): update html-webpack-plugin requirement in /src (#3421)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-06-25T02:40:57Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "3d056fc98219c28dae16632939efc28bc3a8bf0e",
          "body": "Updates the requirements on [webpack-dev-server](https://github.com/webpack/webpack-dev-server) to permit the latest version.\n- [Release notes](https://github.com/webpack/webpack-dev-server/releases)\n- [Changelog](https://github.com/webpack/webpack-dev-server/blob/main/CHANGELOG.md)\n- [Commits](http\n[…]\nndency-version: 5.2.4\n  dependency-type: direct:development\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore(deps-dev): update webpack-dev-server requirement in /src (#3429)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-06-25T02:38:13Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "ae9124446e844d64a098ee1281e0ae1ef51e9187",
          "body": "* Initial plan\n\n* chore(deps): roll up patch/minor npm dependency updates\n\n- eslint-plugin-mocha: 11.1.0 → 11.3.0 (minor)\n- gulp-eslint-new: 2.6.0 → 2.6.2 (patch)\n- gulp-header: 2.0.9 → 2.0.12 (patch)\n- postcss: 8.4.32 → 8.5.15 (minor, transitive)\n- js-yaml: 4.1.1 → 4.2.0 (minor, transitive)\n- nanoi\n[…]\n 9→10,\ncopy-webpack-plugin 13→14, webpack-cli 6→7) will be handled in a\nfollow-up PR. All 25 tests pass.\n\n---------\n\nCo-authored-by: copilot-swe-agent[bot] <198982749+Copilot@users.noreply.github.com>",
          "is_bot": false,
          "headline": "chore(deps): roll up patch/minor npm dependency updates (#3444)",
          "author_name": "Copilot",
          "author_login": "Copilot",
          "committed_at": "2026-06-25T02:30:30Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "3f2d2e2fe59a54e8b57d60c29c4dda253879b35a",
          "body": "* Remove twitter cards docs\n\n* Add dist",
          "is_bot": false,
          "headline": "Remove twitter cards docs (#3434)",
          "author_name": "Lourdes",
          "author_login": "Lourdesmarco",
          "committed_at": "2026-06-24T20:57:32Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "a6ae2dfa2e5e66e65e684c86e53f6c96ab24a1f0",
          "body": "* Document color-scheme meta extension\n\n* Potential fix for pull request finding\n\nCo-authored-by: Copilot Autofix powered by AI <175728472+Copilot@users.noreply.github.com>\n\n---------\n\nCo-authored-by: Copilot Autofix powered by AI <175728472+Copilot@users.noreply.github.com>",
          "is_bot": false,
          "headline": "Document color-scheme meta extension (#3442)",
          "author_name": "Nightt",
          "author_login": "nightt5879",
          "committed_at": "2026-06-24T20:56:52Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "31357fdb7c4c4da60a7c910e95440444c2ca7a6d",
          "body": "* Initial plan\n\n* ci: drop Node 20 from test matrix, use Node 22 for publish, update docs\n\nAgent-Logs-Url: https://github.com/h5bp/html5-boilerplate/sessions/fc3e7fbd-ad7f-461e-adc2-a467bd7c365b\n\nCo-authored-by: roblarsen <361421+roblarsen@users.noreply.github.com>\n\n---------\n\nCo-authored-by: copilot-swe-agent[bot] <198982749+Copilot@users.noreply.github.com>\nCo-authored-by: roblarsen <361421+roblarsen@users.noreply.github.com>",
          "is_bot": false,
          "headline": "ci: drop Node 20 from matrix, migrate publish to Node 22 (#3414)",
          "author_name": "Copilot",
          "author_login": "Copilot",
          "committed_at": "2026-04-22T21:40:54Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "3d3ea0fb53d15c6f955acccdfdd09781b991a6fb",
          "body": "* Initial plan\n\n* Initial plan for supply chain health audit\n\nAgent-Logs-Url: https://github.com/h5bp/html5-boilerplate/sessions/01c785f4-3040-48bf-a01f-0a8ea9a890cb\n\nCo-authored-by: roblarsen <361421+roblarsen@users.noreply.github.com>\n\n* fix: clear CVEs, update dependabot to weekly schedule\n\nAgent\n[…]\noblarsen@users.noreply.github.com>\n\n---------\n\nCo-authored-by: copilot-swe-agent[bot] <198982749+Copilot@users.noreply.github.com>\nCo-authored-by: roblarsen <361421+roblarsen@users.noreply.github.com>",
          "is_bot": false,
          "headline": "fix: clear CVEs and switch Dependabot to weekly cadence (#3416)",
          "author_name": "Copilot",
          "author_login": "Copilot",
          "committed_at": "2026-04-22T21:36:48Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "3306aed80e0eb7630f76ab640129a3a9adc25cbb",
          "body": "* Improve GitHub Stars badge alt text\n\n* Fix: update GitHub Stars badge alt text only\n\n* Fix: revert title and update GitHub Stars alt text only\n\n* Update README.md\n\n* Fix badge order in README.md\n\n---------\n\nCo-authored-by: Christian Oliff <christianoliff@pm.me>",
          "is_bot": false,
          "headline": "Improve GitHub Stars badge alt text (#3409)",
          "author_name": "CHAITHANYA-KRISHNAPPA",
          "author_login": "CHAITHANYA-KRISHNAPPA",
          "committed_at": "2026-04-22T20:13:34Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "ce8ad3c32e1744da4adecb978797168d5ee7df51",
          "body": "Bumps [lodash](https://github.com/lodash/lodash) from 4.17.21 to 4.17.23.\n- [Release notes](https://github.com/lodash/lodash/releases)\n- [Commits](https://github.com/lodash/lodash/compare/4.17.21...4.17.23)\n\n---\nupdated-dependencies:\n- dependency-name: lodash\n  dependency-version: 4.17.23\n  dependency-type: indirect\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore(deps-dev): bump lodash from 4.17.21 to 4.17.23 (#3355)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-03-25T23:56:28Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "346671211c2f3121c8f59fff024bcd5aadec24ca",
          "body": "Updates the requirements on [webpack-dev-server](https://github.com/webpack/webpack-dev-server) to permit the latest version.\n- [Release notes](https://github.com/webpack/webpack-dev-server/releases)\n- [Changelog](https://github.com/webpack/webpack-dev-server/blob/main/CHANGELOG.md)\n- [Commits](http\n[…]\nndency-version: 5.2.3\n  dependency-type: direct:development\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore(deps-dev): update webpack-dev-server requirement in /src (#3356)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-03-25T23:55:42Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "76e4cc8b68b94a1e9953bdd02907880e3fa5620b",
          "body": "Bumps [mocha](https://github.com/mochajs/mocha) from 11.7.2 to 11.7.5.\n- [Release notes](https://github.com/mochajs/mocha/releases)\n- [Changelog](https://github.com/mochajs/mocha/blob/v11.7.5/CHANGELOG.md)\n- [Commits](https://github.com/mochajs/mocha/compare/v11.7.2...v11.7.5)\n\n---\nupdated-dependenc\n[…]\nrect:development\n  update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore(deps-dev): bump mocha from 11.7.2 to 11.7.5 (#3359)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-03-25T23:55:18Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "d2bba571b288fd3b88e2927713d822a2fe0c9364",
          "body": "Bumps [glob](https://github.com/isaacs/node-glob) from 11.1.0 to 13.0.1.\n- [Changelog](https://github.com/isaacs/node-glob/blob/main/changelog.md)\n- [Commits](https://github.com/isaacs/node-glob/compare/v11.1.0...v13.0.1)\n\n---\nupdated-dependencies:\n- dependency-name: glob\n  dependency-version: 13.0.\n[…]\nrect:development\n  update-type: version-update:semver-major\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore(deps-dev): bump glob from 11.1.0 to 13.0.1 (#3360)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-03-25T23:54:42Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "8de87c553fd9d6238dd96e50981521cafbeec348",
          "body": "Bumps [gulp-eslint-new](https://github.com/origin-1/gulp-eslint-new) from 2.4.0 to 2.6.0.\n- [Release notes](https://github.com/origin-1/gulp-eslint-new/releases)\n- [Changelog](https://github.com/origin-1/gulp-eslint-new/blob/main/CHANGELOG.md)\n- [Commits](https://github.com/origin-1/gulp-eslint-new/\n[…]\nrect:development\n  update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore(deps-dev): bump gulp-eslint-new from 2.4.0 to 2.6.0 (#3361)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-03-25T23:51:27Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "7e65e52bdb820c51995b8e2f17ed3b4af82c48c7",
          "body": "Updates the requirements on [html-webpack-plugin](https://github.com/jantimon/html-webpack-plugin) to permit the latest version.\n- [Release notes](https://github.com/jantimon/html-webpack-plugin/releases)\n- [Changelog](https://github.com/jantimon/html-webpack-plugin/blob/main/CHANGELOG.md)\n- [Commit\n[…]\nndency-version: 5.6.6\n  dependency-type: direct:development\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore(deps-dev): update html-webpack-plugin requirement in /src (#3363)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-03-25T23:50:57Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "8bd92af2d3d6ba05fffba04327950dbdee2e03a8",
          "body": "Bumps  and [minimatch](https://github.com/isaacs/minimatch). These dependencies needed to be updated together.\n\nUpdates `minimatch` from 9.0.5 to 9.0.9\n- [Changelog](https://github.com/isaacs/minimatch/blob/main/changelog.md)\n- [Commits](https://github.com/isaacs/minimatch/compare/v9.0.5...v9.0.9)\n\n\n[…]\nch\n  dependency-version: 10.2.4\n  dependency-type: indirect\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore(deps): bump minimatch (#3365)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-03-25T23:46:53Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "e7378571999893e3da7491054dafaa939e170b08",
          "body": "Bumps [actions/cache](https://github.com/actions/cache) from 3 to 5.\n- [Release notes](https://github.com/actions/cache/releases)\n- [Commits](https://github.com/actions/cache/compare/v3...v5)\n\n---\nupdated-dependencies:\n- dependency-name: actions/cache\n  dependency-version: '5'\n  dependency-type: direct:production\n  update-type: version-update:semver-major\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore(deps): bump actions/cache from 3 to 5 (#3366)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-03-25T23:36:58Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "3345fc0e814a40906b5461b2414d62fd51604e18",
          "body": "…0 (#3367)\n\nBumps [streetsidesoftware/cspell-action](https://github.com/streetsidesoftware/cspell-action) from 7.2.0 to 8.3.0.\n- [Release notes](https://github.com/streetsidesoftware/cspell-action/releases)\n- [Changelog](https://github.com/streetsidesoftware/cspell-action/blob/main/CHANGELOG.md)\n- [\n[…]\nirect:production\n  update-type: version-update:semver-major\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore(deps): bump streetsidesoftware/cspell-action from 7.2.0 to 8.3.…",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-03-25T23:36:15Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "e3660dc12294153a1446b0d3d98534167ebb4791",
          "body": "…3 (#3368)\n\nBumps [actions/dependency-review-action](https://github.com/actions/dependency-review-action) from 4.7.3 to 4.8.3.\n- [Release notes](https://github.com/actions/dependency-review-action/releases)\n- [Commits](https://github.com/actions/dependency-review-action/compare/595b5aeba73380359d98a\n[…]\nirect:production\n  update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore(deps): bump actions/dependency-review-action from 4.7.3 to 4.8.…",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-03-25T23:35:35Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "d6de3e55b86315c3cb7bcdb07af27aa12d19f6e8",
          "body": "Updates the requirements on [webpack](https://github.com/webpack/webpack) to permit the latest version.\n- [Release notes](https://github.com/webpack/webpack/releases)\n- [Changelog](https://github.com/webpack/webpack/blob/main/CHANGELOG.md)\n- [Commits](https://github.com/webpack/webpack/compare/v5.10\n[…]\nency-version: 5.105.3\n  dependency-type: direct:development\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore(deps-dev): update webpack requirement in /src (#3369)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-03-25T23:33:03Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "bd01e8ad95dbfd9dda97e173a8120a424bdd50f9",
          "body": "Bumps [actions/checkout](https://github.com/actions/checkout) from 5.0.0 to 6.0.2.\n- [Release notes](https://github.com/actions/checkout/releases)\n- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)\n- [Commits](https://github.com/actions/checkout/compare/08c6903cd8c0fde910a37f8\n[…]\nirect:production\n  update-type: version-update:semver-major\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore(deps): bump actions/checkout from 5.0.0 to 6.0.2 (#3370)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-03-25T23:31:58Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "f7636d6fe7158e54f7c15f4ddda3dbba00fb1ede",
          "body": "Bumps [peter-evans/create-pull-request](https://github.com/peter-evans/create-pull-request) from 6 to 8.\n- [Release notes](https://github.com/peter-evans/create-pull-request/releases)\n- [Commits](https://github.com/peter-evans/create-pull-request/compare/v6...v8)\n\n---\nupdated-dependencies:\n- depende\n[…]\nirect:production\n  update-type: version-update:semver-major\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore(deps): bump peter-evans/create-pull-request from 6 to 8 (#3371)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-03-25T23:31:29Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "323759f04199f890628fb97b02a2cd5afdfdf93b",
          "body": "Bumps [flatted](https://github.com/WebReflection/flatted) from 3.3.3 to 3.4.2.\n- [Commits](https://github.com/WebReflection/flatted/compare/v3.3.3...v3.4.2)\n\n---\nupdated-dependencies:\n- dependency-name: flatted\n  dependency-version: 3.4.2\n  dependency-type: indirect\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore(deps-dev): bump flatted from 3.3.3 to 3.4.2 (#3374)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-03-25T23:31:02Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "423ebd8cc3e4d9760201932b93d1af214b063459",
          "body": "Bumps [picomatch](https://github.com/micromatch/picomatch) from 2.3.1 to 2.3.2.\n- [Release notes](https://github.com/micromatch/picomatch/releases)\n- [Changelog](https://github.com/micromatch/picomatch/blob/master/CHANGELOG.md)\n- [Commits](https://github.com/micromatch/picomatch/compare/2.3.1...2.3.\n[…]\ntch\n  dependency-version: 2.3.2\n  dependency-type: indirect\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore(deps): bump picomatch from 2.3.1 to 2.3.2 (#3376)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-03-25T23:30:32Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "091a35738202b6dd03947368a95491af87e71dc8",
          "body": "Bumps [js-yaml](https://github.com/nodeca/js-yaml) from 4.1.0 to 4.1.1.\n- [Changelog](https://github.com/nodeca/js-yaml/blob/master/CHANGELOG.md)\n- [Commits](https://github.com/nodeca/js-yaml/compare/4.1.0...4.1.1)\n\n---\nupdated-dependencies:\n- dependency-name: js-yaml\n  dependency-version: 4.1.1\n  dependency-type: indirect\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore(deps-dev): bump js-yaml from 4.1.0 to 4.1.1 (#3328)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2025-12-01T07:43:02Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "88ce8763fcae9a63623bfc7284c5c57232befc4b",
          "body": "Bumps [glob](https://github.com/isaacs/node-glob) to 10.5.0 and updates ancestor dependency . These dependencies need to be updated together.\n\n\nUpdates `glob` from 10.4.5 to 10.5.0\n- [Changelog](https://github.com/isaacs/node-glob/blob/main/changelog.md)\n- [Commits](https://github.com/isaacs/node-gl\n[…]\ndency-version: 11.1.0\n  dependency-type: direct:development\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore(deps): bump glob (#3329)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2025-12-01T07:19:48Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "83ba9d23ff559a169ba843abc6cd8992585af9d4",
          "body": "Bumps [del](https://github.com/sindresorhus/del) from 8.0.0 to 8.0.1.\n- [Release notes](https://github.com/sindresorhus/del/releases)\n- [Commits](https://github.com/sindresorhus/del/compare/v8.0.0...v8.0.1)\n\n---\nupdated-dependencies:\n- dependency-name: del\n  dependency-version: 8.0.1\n  dependency-ty\n[…]\nrect:development\n  update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore(deps-dev): bump del from 8.0.0 to 8.0.1 (#3299)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2025-11-07T10:50:41Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "c3a1e71d9864f3a1afa4f7ab42fdaaec1f59a914",
          "body": "Bumps [actions/setup-node](https://github.com/actions/setup-node) from 5.0.0 to 6.0.0.\n- [Release notes](https://github.com/actions/setup-node/releases)\n- [Commits](https://github.com/actions/setup-node/compare/a0853c24544627f65ddf259abe73b1d18a591444...2028fbc5c25fe9cf00d9f06a71cc4710d4507903)\n\n---\n[…]\nirect:production\n  update-type: version-update:semver-major\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore(deps): bump actions/setup-node from 5.0.0 to 6.0.0 (#3318)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2025-11-04T05:50:57Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "17f57319122b4c2c8baf81b0948cfd2f110d69dd",
          "body": "Bumps [ossf/scorecard-action](https://github.com/ossf/scorecard-action) from 2.4.2 to 2.4.3.\n- [Release notes](https://github.com/ossf/scorecard-action/releases)\n- [Changelog](https://github.com/ossf/scorecard-action/blob/main/RELEASE.md)\n- [Commits](https://github.com/ossf/scorecard-action/compare/\n[…]\nirect:production\n  update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore(deps): bump ossf/scorecard-action from 2.4.2 to 2.4.3 (#3303)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2025-10-01T07:08:14Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "97367a94f4ae679d09872d2fe44211443b3a6b91",
          "body": "Bumps [github/codeql-action](https://github.com/github/codeql-action) from 3.30.1 to 3.30.5.\n- [Release notes](https://github.com/github/codeql-action/releases)\n- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)\n- [Commits](https://github.com/github/codeql-action/compare/f\n[…]\nirect:production\n  update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore(deps): bump github/codeql-action from 3.30.1 to 3.30.5 (#3300)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2025-10-01T07:07:44Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "b99ebd644acaf36d14a434c67022c542dba72186",
          "body": "* trying this a different way!\n\n* Update GitHub Actions to use specific commit SHAs\n\nChanged actions/checkout and actions/setup-node to reference specific commit SHAs for improved security and reproducibility. Also set 'persist-credentials' to false for checkout.\n\n---------\n\nCo-authored-by: Christian Oliff <christian_oliff@trimble.com>",
          "is_bot": false,
          "headline": "Updating `dist` via GitHub Actions and an automated PR (#3282)",
          "author_name": "Rob Larsen",
          "author_login": "roblarsen",
          "committed_at": "2025-09-17T13:35:06Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "94f79e4c174c68e0e4929d930ef776657735765c",
          "body": "Bumps [globals](https://github.com/sindresorhus/globals) from 16.3.0 to 16.4.0.\n- [Release notes](https://github.com/sindresorhus/globals/releases)\n- [Commits](https://github.com/sindresorhus/globals/compare/v16.3.0...v16.4.0)\n\n---\nupdated-dependencies:\n- dependency-name: globals\n  dependency-versio\n[…]\nrect:development\n  update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore(deps-dev): bump globals from 16.3.0 to 16.4.0 (#3286)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2025-09-10T16:33:58Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "f814431eead3bda309ffd70876582aa500cb1be1",
          "body": "This also pins move GitHub Actions so our initial score will be higher.",
          "is_bot": false,
          "headline": "Add OSSF Scorecard security workflow (#3287)",
          "author_name": "Christian Oliff",
          "author_login": "coliff",
          "committed_at": "2025-09-10T16:31:34Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "1fd0124ecdd5861d5c2ad42761bd73400dfebd63",
          "body": "Updates the requirements on [webpack-dev-server](https://github.com/webpack/webpack-dev-server) to permit the latest version.\n- [Release notes](https://github.com/webpack/webpack-dev-server/releases)\n- [Changelog](https://github.com/webpack/webpack-dev-server/blob/master/CHANGELOG.md)\n- [Commits](ht\n[…]\nndency-version: 5.2.2\n  dependency-type: direct:development\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore(deps-dev): update webpack-dev-server requirement in /src (#3252)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2025-09-10T15:29:08Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "1e01d6e47fecfcaf339020751c86e7d1689e9fdb",
          "body": "Bumps [gulp-rename](https://github.com/hparra/gulp-rename) from 2.0.0 to 2.1.0.\n- [Release notes](https://github.com/hparra/gulp-rename/releases)\n- [Changelog](https://github.com/hparra/gulp-rename/blob/master/CHANGELOG.md)\n- [Commits](https://github.com/hparra/gulp-rename/commits)\n\n---\nupdated-depe\n[…]\nrect:development\n  update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore(deps-dev): bump gulp-rename from 2.0.0 to 2.1.0 (#3249)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2025-09-10T15:28:50Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "15bf5543c3559d680d62e7a76f5d47e30234cd14",
          "body": "* dependency updates, rolled up\n\n* eslintrc > eslint.config\n\n* eslint upgrade continues",
          "is_bot": false,
          "headline": "dependency updates, rolled up (#3281)",
          "author_name": "Rob Larsen",
          "author_login": "roblarsen",
          "committed_at": "2025-09-10T15:20:21Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "a0db7c3c5d3d6c0ad5eabab2c183e78489513754",
          "body": "Updated workflow files to use specific commit SHAs for actions/checkout, actions/setup-node, github/codeql-action, and streetsidesoftware/cspell-action. This improves security and reproducibility by preventing unexpected changes from upstream action updates. Also set 'persist-credentials: false' for checkout steps to enhance security.",
          "is_bot": false,
          "headline": "Pin GitHub Actions to specific commit SHAs (#3284)",
          "author_name": "Christian Oliff",
          "author_login": "coliff",
          "committed_at": "2025-09-10T14:13:59Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "ac08a17cb60a975336664c0090657a3e593f686e",
          "body": "Bumps [strip-json-comments](https://github.com/sindresorhus/strip-json-comments) from 5.0.1 to 5.0.2.\n- [Release notes](https://github.com/sindresorhus/strip-json-comments/releases)\n- [Commits](https://github.com/sindresorhus/strip-json-comments/compare/v5.0.1...v5.0.2)\n\n---\nupdated-dependencies:\n- \n[…]\nrect:development\n  update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore(deps-dev): bump strip-json-comments from 5.0.1 to 5.0.2 (#3242)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2025-06-23T02:30:01Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "ec50fce6bef1bab5405a45c310f0a9be73d52a20",
          "body": null,
          "is_bot": false,
          "headline": "Add .vscode/settings.json & extensions.json files to project (#3245)",
          "author_name": "Christian Oliff",
          "author_login": "coliff",
          "committed_at": "2025-06-23T02:29:33Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "2eb593dfaa6aa7b8b5784f8b3fd2a426976bfebf",
          "body": "Updates the requirements on [webpack](https://github.com/webpack/webpack) to permit the latest version.\n- [Release notes](https://github.com/webpack/webpack/releases)\n- [Commits](https://github.com/webpack/webpack/compare/v5.99.7...v5.99.9)\n\n---\nupdated-dependencies:\n- dependency-name: webpack\n  dep\n[…]\ndency-version: 5.99.9\n  dependency-type: direct:development\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore(deps-dev): update webpack requirement in /src (#3244)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2025-06-04T09:38:29Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "28417fd11d4d4d874898c60c451a630ed987d478",
          "body": "Bumps [mocha](https://github.com/mochajs/mocha) from 11.1.0 to 11.5.0.\n- [Release notes](https://github.com/mochajs/mocha/releases)\n- [Changelog](https://github.com/mochajs/mocha/blob/main/CHANGELOG.md)\n- [Commits](https://github.com/mochajs/mocha/compare/v11.1.0...v11.5.0)\n\n---\nupdated-dependencies\n[…]\nrect:development\n  update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore(deps-dev): bump mocha from 11.1.0 to 11.5.0 (#3240)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2025-06-04T09:31:30Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "9a9f4e199050e6364399865b4a8863ad71b4dc40",
          "body": "* Update Node Versions (for tests)\n\n- Move all test to a single file\n- test on Node 20, 22 and 24 - on Windows and Ubuntu\n- Sort `package.json` (with VS Code extension of this https://www.npmjs.com/package/sort-package-json)\n\n* Update test.yml",
          "is_bot": false,
          "headline": "Update Node Versions (for tests) (#3237)",
          "author_name": "Christian Oliff",
          "author_login": "coliff",
          "committed_at": "2025-06-04T09:30:00Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "fdd2d89351fd835c9e9be25771dfb3d4517bc645",
          "body": "Bumps [streetsidesoftware/cspell-action](https://github.com/streetsidesoftware/cspell-action) from 6 to 7.\n- [Release notes](https://github.com/streetsidesoftware/cspell-action/releases)\n- [Changelog](https://github.com/streetsidesoftware/cspell-action/blob/main/CHANGELOG.md)\n- [Commits](https://git\n[…]\nirect:production\n  update-type: version-update:semver-major\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore(deps): bump streetsidesoftware/cspell-action from 6 to 7 (#3243)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2025-06-02T04:13:02Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "d833efb44e437c745a1773e0b2e9ac877b7b3cd4",
          "body": "Updates the requirements on [webpack](https://github.com/webpack/webpack) to permit the latest version.\n- [Release notes](https://github.com/webpack/webpack/releases)\n- [Commits](https://github.com/webpack/webpack/compare/v5.99.5...v5.99.7)\n\n---\nupdated-dependencies:\n- dependency-name: webpack\n  dep\n[…]\ndency-version: 5.99.7\n  dependency-type: direct:development\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore(deps-dev): update webpack requirement in /src (#3233)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2025-05-02T15:14:22Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "a51c70150fa41ec3814c55859397b6f704e86623",
          "body": "Bumps [glob](https://github.com/isaacs/node-glob) from 11.0.1 to 11.0.2.\n- [Changelog](https://github.com/isaacs/node-glob/blob/main/changelog.md)\n- [Commits](https://github.com/isaacs/node-glob/compare/v11.0.1...v11.0.2)\n\n---\nupdated-dependencies:\n- dependency-name: glob\n  dependency-version: 11.0.\n[…]\nrect:development\n  update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore(deps-dev): bump glob from 11.0.1 to 11.0.2 (#3234)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2025-05-02T15:13:23Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "01e7f51b1d265fd47f85e7f1e820d02ee6bff0d4",
          "body": "Updates the requirements on [webpack-dev-server](https://github.com/webpack/webpack-dev-server) to permit the latest version.\n- [Release notes](https://github.com/webpack/webpack-dev-server/releases)\n- [Changelog](https://github.com/webpack/webpack-dev-server/blob/master/CHANGELOG.md)\n- [Commits](ht\n[…]\nndency-version: 5.2.1\n  dependency-type: direct:development\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore(deps-dev): update webpack-dev-server requirement in /src (#3227)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2025-04-16T14:04:45Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "5a7751fef3b4710a0e72d3cd210e697e7dddd088",
          "body": "…rc (#3218)\n\nBumps [copy-webpack-plugin](https://github.com/webpack-contrib/copy-webpack-plugin) from 11.0.0 to 13.0.0.\n- [Release notes](https://github.com/webpack-contrib/copy-webpack-plugin/releases)\n- [Changelog](https://github.com/webpack-contrib/copy-webpack-plugin/blob/master/CHANGELOG.md)\n- \n[…]\nrect:development\n  update-type: version-update:semver-major\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore(deps-dev): bump copy-webpack-plugin from 11.0.0 to 13.0.0 in /s…",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2025-04-16T13:59:55Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "acb43472fc2bcb97c22132529a512351f4492b1c",
          "body": "Updates the requirements on [webpack](https://github.com/webpack/webpack) to permit the latest version.\n- [Release notes](https://github.com/webpack/webpack/releases)\n- [Commits](https://github.com/webpack/webpack/compare/v5.94.0...v5.98.0)\n\n---\nupdated-dependencies:\n- dependency-name: webpack\n  dependency-type: direct:development\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore(deps-dev): update webpack requirement in /src (#3217)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2025-04-16T13:53:45Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "345287ef46f584de4864103b3b7aa507d31f8325",
          "body": "Bumps [mocha](https://github.com/mochajs/mocha) from 10.7.3 to 11.1.0.\n- [Release notes](https://github.com/mochajs/mocha/releases)\n- [Changelog](https://github.com/mochajs/mocha/blob/main/CHANGELOG.md)\n- [Commits](https://github.com/mochajs/mocha/compare/v10.7.3...v11.1.0)\n\n---\nupdated-dependencies\n[…]\nrect:development\n  update-type: version-update:semver-major\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore(deps-dev): bump mocha from 10.7.3 to 11.1.0 (#3208)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2025-04-16T13:29:21Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "fefdbc555e64c47905394cb51b0bb8f1207d2ea7",
          "body": "Bumps [webpack-cli](https://github.com/webpack/webpack-cli) from 5.1.4 to 6.0.1.\n- [Release notes](https://github.com/webpack/webpack-cli/releases)\n- [Changelog](https://github.com/webpack/webpack-cli/blob/master/CHANGELOG.md)\n- [Commits](https://github.com/webpack/webpack-cli/compare/webpack-cli@5.\n[…]\nrect:development\n  update-type: version-update:semver-major\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore(deps-dev): bump webpack-cli from 5.1.4 to 6.0.1 in /src (#3200)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2025-04-15T14:05:08Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "7541d5bb3b97eb2c759988c9df9f9c8c18e4e5cf",
          "body": "Updates the requirements on [html-webpack-plugin](https://github.com/jantimon/html-webpack-plugin) to permit the latest version.\n- [Release notes](https://github.com/jantimon/html-webpack-plugin/releases)\n- [Changelog](https://github.com/jantimon/html-webpack-plugin/blob/main/CHANGELOG.md)\n- [Commit\n[…]\n: html-webpack-plugin\n  dependency-type: direct:development\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore(deps-dev): update html-webpack-plugin requirement in /src (#3184)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2025-04-15T14:02:30Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "b8e133b851004cd6db20b707da1d29972b761809",
          "body": "Bumps [prettier](https://github.com/prettier/prettier) from 3.4.2 to 3.5.3.\n- [Release notes](https://github.com/prettier/prettier/releases)\n- [Changelog](https://github.com/prettier/prettier/blob/main/CHANGELOG.md)\n- [Commits](https://github.com/prettier/prettier/compare/3.4.2...3.5.3)\n\n---\nupdated\n[…]\nrect:development\n  update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore(deps-dev): bump prettier from 3.4.2 to 3.5.3 (#3226)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2025-03-25T07:33:10Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "789b7197fe68e8ac592f799649d08aeabb8da633",
          "body": "Bumps [glob](https://github.com/isaacs/node-glob) from 11.0.0 to 11.0.1.\n- [Changelog](https://github.com/isaacs/node-glob/blob/main/changelog.md)\n- [Commits](https://github.com/isaacs/node-glob/compare/v11.0.0...v11.0.1)\n\n---\nupdated-dependencies:\n- dependency-name: glob\n  dependency-type: direct:development\n  update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore(deps-dev): bump glob from 11.0.0 to 11.0.1 (#3209)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2025-03-25T07:12:38Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "c37e7b7e068ca53ff76459c255ebcb922bb13455",
          "body": "* Remove no-js class\n\n* Document alternative to no-js class",
          "is_bot": false,
          "headline": "Remove JS-conditional classes (#3222)",
          "author_name": "Adam Averay",
          "author_login": "adamaveray",
          "committed_at": "2025-03-06T15:27:11Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "401b4426e7a9a6008ffba276b103c25d52f8918b",
          "body": "Bumps [prettier](https://github.com/prettier/prettier) from 3.3.3 to 3.4.2.\n- [Release notes](https://github.com/prettier/prettier/releases)\n- [Changelog](https://github.com/prettier/prettier/blob/main/CHANGELOG.md)\n- [Commits](https://github.com/prettier/prettier/compare/3.3.3...3.4.2)\n\n---\nupdated\n[…]\nrect:development\n  update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore(deps-dev): bump prettier from 3.3.3 to 3.4.2 (#3202)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2025-02-05T09:43:44Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "e5a7112cff6e894d5e859cf08747e6e2c5e1689e",
          "body": "Bumps [eslint](https://github.com/eslint/eslint) from 8.57.0 to 8.57.1.\r\n- [Release notes](https://github.com/eslint/eslint/releases)\r\n- [Changelog](https://github.com/eslint/eslint/blob/main/CHANGELOG.md)\r\n- [Commits](https://github.com/eslint/eslint/compare/v8.57.0...v8.57.1)\r\n\r\n---\r\nupdated-depen\n[…]\ndevelopment\r\n  update-type: version-update:semver-patch\r\n...\r\n\r\nSigned-off-by: dependabot[bot] <support@github.com>\r\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore(deps-dev): bump eslint from 8.57.0 to 8.57.1 (#3167)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2024-10-01T11:24:39Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "2051e7f47eb2a8c4ff22b4dbaab699f501b43a65",
          "body": "Bumps [mocha](https://github.com/mochajs/mocha) from 10.5.2 to 10.7.3.\r\n- [Release notes](https://github.com/mochajs/mocha/releases)\r\n- [Changelog](https://github.com/mochajs/mocha/blob/main/CHANGELOG.md)\r\n- [Commits](https://github.com/mochajs/mocha/compare/v10.5.2...v10.7.3)\r\n\r\n---\r\nupdated-depend\n[…]\ndevelopment\r\n  update-type: version-update:semver-minor\r\n...\r\n\r\nSigned-off-by: dependabot[bot] <support@github.com>\r\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore(deps-dev): bump mocha from 10.5.2 to 10.7.3 (#3158)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2024-09-22T12:30:31Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "c4610f373e9f644bda64b915686f6a6befbb6c3b",
          "body": "Updates the requirements on [webpack](https://github.com/webpack/webpack) to permit the latest version.\r\n- [Release notes](https://github.com/webpack/webpack/releases)\r\n- [Commits](https://github.com/webpack/webpack/compare/v5.92.1...v5.94.0)\r\n\r\n---\r\nupdated-dependencies:\r\n- dependency-name: webpack\r\n  dependency-type: direct:development\r\n...\r\n\r\nSigned-off-by: dependabot[bot] <support@github.com>\r\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore(deps-dev): update webpack requirement in /src (#3157)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2024-09-04T17:45:12Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "16a8a07b2f2c6742cfd33e3abbf59a1df0c38dfb",
          "body": "Bumps [prettier](https://github.com/prettier/prettier) from 3.3.2 to 3.3.3.\r\n- [Release notes](https://github.com/prettier/prettier/releases)\r\n- [Changelog](https://github.com/prettier/prettier/blob/main/CHANGELOG.md)\r\n- [Commits](https://github.com/prettier/prettier/compare/3.3.2...3.3.3)\r\n\r\n---\r\nu\n[…]\ndevelopment\r\n  update-type: version-update:semver-patch\r\n...\r\n\r\nSigned-off-by: dependabot[bot] <support@github.com>\r\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore(deps-dev): bump prettier from 3.3.2 to 3.3.3 (#3147)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2024-09-04T17:44:26Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "a545d58fd94aa61221665b183afa2f22f2ab104c",
          "body": "Bumps [glob](https://github.com/isaacs/node-glob) from 10.4.2 to 11.0.0.\r\n- [Changelog](https://github.com/isaacs/node-glob/blob/main/changelog.md)\r\n- [Commits](https://github.com/isaacs/node-glob/compare/v10.4.2...v11.0.0)\r\n\r\n---\r\nupdated-dependencies:\r\n- dependency-name: glob\r\n  dependency-type: d\n[…]\ndevelopment\r\n  update-type: version-update:semver-major\r\n...\r\n\r\nSigned-off-by: dependabot[bot] <support@github.com>\r\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore(deps-dev): bump glob from 10.4.2 to 11.0.0 (#3145)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2024-09-04T17:27:50Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "92602749bf794f7dcb3c7e47140134aff02f16d7",
          "body": "Bumps [eslint-plugin-mocha](https://github.com/lo1tuma/eslint-plugin-mocha) from 10.4.3 to 10.5.0.\r\n- [Release notes](https://github.com/lo1tuma/eslint-plugin-mocha/releases)\r\n- [Changelog](https://github.com/lo1tuma/eslint-plugin-mocha/blob/10.5.0/CHANGELOG.md)\r\n- [Commits](https://github.com/lo1tu\n[…]\ndevelopment\r\n  update-type: version-update:semver-minor\r\n...\r\n\r\nSigned-off-by: dependabot[bot] <support@github.com>\r\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore(deps-dev): bump eslint-plugin-mocha from 10.4.3 to 10.5.0 (#3144)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2024-09-04T17:14:49Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "859dad015b75b7a4d528aa525a1398bb24380231",
          "body": "Bumps [webpack-merge](https://github.com/survivejs/webpack-merge) from 5.10.0 to 6.0.1.\r\n- [Changelog](https://github.com/survivejs/webpack-merge/blob/develop/CHANGELOG.md)\r\n- [Commits](https://github.com/survivejs/webpack-merge/compare/v5.10.0...v6.0.1)\r\n\r\n---\r\nupdated-dependencies:\r\n- dependency-n\n[…]\ndevelopment\r\n  update-type: version-update:semver-major\r\n...\r\n\r\nSigned-off-by: dependabot[bot] <support@github.com>\r\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore(deps-dev): bump webpack-merge from 5.10.0 to 6.0.1 in /src (#3143)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2024-09-04T17:13:21Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "250757e847b69084de1da3aac4cbca7ca6c56644",
          "body": null,
          "is_bot": false,
          "headline": "Update Issue Config (#3160)",
          "author_name": "Christian Oliff",
          "author_login": "coliff",
          "committed_at": "2024-09-04T17:11:43Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "8228b2adc2faddf742fae4f9e33fe95f79be688d",
          "body": "Bumps [mocha](https://github.com/mochajs/mocha) from 10.4.0 to 10.5.2.\r\n- [Release notes](https://github.com/mochajs/mocha/releases)\r\n- [Changelog](https://github.com/mochajs/mocha/blob/main/CHANGELOG.md)\r\n- [Commits](https://github.com/mochajs/mocha/compare/v10.4.0...v10.5.2)\r\n\r\n---\r\nupdated-depend\n[…]\ndevelopment\r\n  update-type: version-update:semver-minor\r\n...\r\n\r\nSigned-off-by: dependabot[bot] <support@github.com>\r\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore(deps-dev): bump mocha from 10.4.0 to 10.5.2 (#3131)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2024-07-02T15:13:21Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "ba99a1360babf6da476dad2a97ebd60be89cf0fc",
          "body": "Bumps [prettier](https://github.com/prettier/prettier) from 3.2.5 to 3.3.2.\r\n- [Release notes](https://github.com/prettier/prettier/releases)\r\n- [Changelog](https://github.com/prettier/prettier/blob/main/CHANGELOG.md)\r\n- [Commits](https://github.com/prettier/prettier/compare/3.2.5...3.3.2)\r\n\r\n---\r\nu\n[…]\ndevelopment\r\n  update-type: version-update:semver-minor\r\n...\r\n\r\nSigned-off-by: dependabot[bot] <support@github.com>\r\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore(deps-dev): bump prettier from 3.2.5 to 3.3.2 (#3129)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2024-07-02T15:04:16Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "0ba9d75e12d95f75aa766c4e637ad34d6be00947",
          "body": "Bumps [glob](https://github.com/isaacs/node-glob) from 10.3.12 to 10.4.2.\r\n- [Changelog](https://github.com/isaacs/node-glob/blob/main/changelog.md)\r\n- [Commits](https://github.com/isaacs/node-glob/compare/v10.3.12...v10.4.2)\r\n\r\n---\r\nupdated-dependencies:\r\n- dependency-name: glob\r\n  dependency-type:\n[…]\ndevelopment\r\n  update-type: version-update:semver-minor\r\n...\r\n\r\nSigned-off-by: dependabot[bot] <support@github.com>\r\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore(deps-dev): bump glob from 10.3.12 to 10.4.2 (#3128)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2024-07-02T15:03:40Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "218f5270cf19af43899e02c7dbf36b7fc8b6ed77",
          "body": "Updates the requirements on [webpack](https://github.com/webpack/webpack) to permit the latest version.\r\n- [Release notes](https://github.com/webpack/webpack/releases)\r\n- [Commits](https://github.com/webpack/webpack/compare/v5.91.0...v5.92.1)\r\n\r\n---\r\nupdated-dependencies:\r\n- dependency-name: webpack\r\n  dependency-type: direct:development\r\n...\r\n\r\nSigned-off-by: dependabot[bot] <support@github.com>\r\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore(deps-dev): update webpack requirement in /src (#3127)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2024-07-02T15:03:08Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "7aad29bfb4efc2be6155bbcbac8937963a0a6725",
          "body": "Bumps [braces](https://github.com/micromatch/braces) from 3.0.2 to 3.0.3.\r\n- [Changelog](https://github.com/micromatch/braces/blob/master/CHANGELOG.md)\r\n- [Commits](https://github.com/micromatch/braces/compare/3.0.2...3.0.3)\r\n\r\n---\r\nupdated-dependencies:\r\n- dependency-name: braces\r\n  dependency-type: indirect\r\n...\r\n\r\nSigned-off-by: dependabot[bot] <support@github.com>\r\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore(deps-dev): bump braces from 3.0.2 to 3.0.3 (#3124)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2024-06-25T01:50:53Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "1ebdce9a80b4233aca081903d0047971f5ee68cc",
          "body": "- Fix release date year for recent release on CHANGELOG\r\n- Add https:// to www.robotstxt.org link-  this has advantage of allowing users to Ctrl+click to view site to view more details\r\n- Remove broken `#server-configuration` in-page link (doesn't exist)",
          "is_bot": false,
          "headline": "Minor docs fixes (#3119)",
          "author_name": "Christian Oliff",
          "author_login": "coliff",
          "committed_at": "2024-05-20T16:14:01Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "3deb82a9c6bcde26f348957a880e1d27aee57b07",
          "body": "Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore(deps-dev): bump eslint-plugin-mocha from 10.4.1 to 10.4.3 (#3117)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2024-05-01T10:39:28Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "07e9dc66b96ece4645bf47c7b656cec50227c93a",
          "body": "- Allow CodeQL workflow to be run from GitHub Actions WebUI at any time\r\n- Set CodeQL to also check for best practises/code problems (as well as security)\r\n- Capitalize Publish GH Action\r\n- Change Windows Test workflow for consistent file extension (also means its formatted with Prettier) and remove leading empty linebreak\r\n- Run Prettier (maybe we should add this to build script to ensure all code is formatted?)\r\n- Change .gitattributes to have LF line-endings for more file types",
          "is_bot": false,
          "headline": "GitHub Actions Tidy-up (#3114)",
          "author_name": "Christian Oliff",
          "author_login": "coliff",
          "committed_at": "2024-04-23T17:16:32Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "90066899f33e83c0866f8e078e97f9b82999db58",
          "body": "* Release 9.0.1\r\n\r\n* Updates Changelog",
          "is_bot": false,
          "headline": "Release 9.0.1 (#3112)",
          "author_name": "Rob Larsen",
          "author_login": "roblarsen",
          "committed_at": "2024-04-16T14:31:00Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "519966c30cdbea60456f6609b0f4b01e80f16e5c",
          "body": null,
          "is_bot": false,
          "headline": "Update bug_report.yml",
          "author_name": "Rob Larsen",
          "author_login": "roblarsen",
          "committed_at": "2024-04-10T18:56:35Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "72a8f610c892b49c9323d8e8420e010995a4f3a6",
          "body": "* Updates for gulp 5\r\n\r\n* .DS_Store ignored from copy operations",
          "is_bot": false,
          "headline": "Fixing tests on Windows + Windows test action (#3110)",
          "author_name": "Rob Larsen",
          "author_login": "roblarsen",
          "committed_at": "2024-04-10T02:53:17Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "38cf0f0c60e9bcf8c5572b11c6804085db356a5e",
          "body": "* Updates for gulp 5\r\n\r\n* .DS_Store ignored from copy operations",
          "is_bot": false,
          "headline": "Updates for gulp 5 (#3105)",
          "author_name": "Rob Larsen",
          "author_login": "roblarsen",
          "committed_at": "2024-04-09T14:22:16Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "d00a4b9fdadce8dc1992ce9b36c13eb9c1d3a9d8",
          "body": "* node 18+\r\n\r\n* Remove LGTM mention (service is no longer available)\r\n\r\n---------\r\n\r\nCo-authored-by: Christian Oliff <christianoliff@pm.me>",
          "is_bot": false,
          "headline": "node 18+ (#3104)",
          "author_name": "Rob Larsen",
          "author_login": "roblarsen",
          "committed_at": "2024-04-08T20:22:49Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "6782409dafccb3c5ca209920473df2f6f4b325a8",
          "body": "Bumps [archiver](https://github.com/archiverjs/node-archiver) from 7.0.0 to 7.0.1.\r\n- [Release notes](https://github.com/archiverjs/node-archiver/releases)\r\n- [Changelog](https://github.com/archiverjs/node-archiver/blob/master/CHANGELOG.md)\r\n- [Commits](https://github.com/archiverjs/node-archiver/co\n[…]\ndevelopment\r\n  update-type: version-update:semver-patch\r\n...\r\n\r\nSigned-off-by: dependabot[bot] <support@github.com>\r\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore(deps-dev): bump archiver from 7.0.0 to 7.0.1 (#3095)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2024-04-01T17:37:50Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "494a23993639a4e656b8207fdb06d360f2bda46d",
          "body": "Bumps [glob](https://github.com/isaacs/node-glob) from 10.3.10 to 10.3.12.\r\n- [Changelog](https://github.com/isaacs/node-glob/blob/main/changelog.md)\r\n- [Commits](https://github.com/isaacs/node-glob/compare/v10.3.10...v10.3.12)\r\n\r\n---\r\nupdated-dependencies:\r\n- dependency-name: glob\r\n  dependency-typ\n[…]\ndevelopment\r\n  update-type: version-update:semver-patch\r\n...\r\n\r\nSigned-off-by: dependabot[bot] <support@github.com>\r\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore(deps-dev): bump glob from 10.3.10 to 10.3.12 (#3096)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2024-04-01T17:37:03Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "8bd981261dfb969878f227b4b4f75c8f0a89ab79",
          "body": "Bumps [eslint-plugin-mocha](https://github.com/lo1tuma/eslint-plugin-mocha) from 10.3.0 to 10.4.1.\r\n- [Release notes](https://github.com/lo1tuma/eslint-plugin-mocha/releases)\r\n- [Changelog](https://github.com/lo1tuma/eslint-plugin-mocha/blob/10.4.1/CHANGELOG.md)\r\n- [Commits](https://github.com/lo1tu\n[…]\ndevelopment\r\n  update-type: version-update:semver-minor\r\n...\r\n\r\nSigned-off-by: dependabot[bot] <support@github.com>\r\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore(deps-dev): bump eslint-plugin-mocha from 10.3.0 to 10.4.1 (#3098)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2024-04-01T17:33:55Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "c4f57fa9c08b1b01576f076778522d525f88e2ef",
          "body": "Bumps [mocha](https://github.com/mochajs/mocha) from 10.3.0 to 10.4.0.\r\n- [Release notes](https://github.com/mochajs/mocha/releases)\r\n- [Changelog](https://github.com/mochajs/mocha/blob/master/CHANGELOG.md)\r\n- [Commits](https://github.com/mochajs/mocha/compare/v10.3.0...v10.4.0)\r\n\r\n---\r\nupdated-depe\n[…]\ndevelopment\r\n  update-type: version-update:semver-minor\r\n...\r\n\r\nSigned-off-by: dependabot[bot] <support@github.com>\r\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore(deps-dev): bump mocha from 10.3.0 to 10.4.0 (#3099)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2024-04-01T17:23:47Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "01f2040e99b67830f8029114e5c85649c56888c1",
          "body": "Updates the requirements on [webpack](https://github.com/webpack/webpack) to permit the latest version.\r\n- [Release notes](https://github.com/webpack/webpack/releases)\r\n- [Commits](https://github.com/webpack/webpack/compare/v5.90.3...v5.91.0)\r\n\r\n---\r\nupdated-dependencies:\r\n- dependency-name: webpack\r\n  dependency-type: direct:development\r\n...\r\n\r\nSigned-off-by: dependabot[bot] <support@github.com>\r\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore(deps-dev): update webpack requirement in /src (#3101)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2024-04-01T17:22:36Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "307cef7a753848ff5ab526c8aa841a72b823cc04",
          "body": "Updates the requirements on [webpack-dev-server](https://github.com/webpack/webpack-dev-server) to permit the latest version.\r\n- [Release notes](https://github.com/webpack/webpack-dev-server/releases)\r\n- [Changelog](https://github.com/webpack/webpack-dev-server/blob/master/CHANGELOG.md)\r\n- [Commits]\n[…]\nbpack-dev-server\r\n  dependency-type: direct:development\r\n...\r\n\r\nSigned-off-by: dependabot[bot] <support@github.com>\r\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore(deps-dev): update webpack-dev-server requirement in /src (#3102)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2024-04-01T17:20:11Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "e750b328a2621a469fdf1533a55575a6edecc786",
          "body": "Bumps [gulp](https://github.com/gulpjs/gulp) from 4.0.2 to 5.0.0.\r\n- [Release notes](https://github.com/gulpjs/gulp/releases)\r\n- [Changelog](https://github.com/gulpjs/gulp/blob/master/CHANGELOG.md)\r\n- [Commits](https://github.com/gulpjs/gulp/compare/v4.0.2...v5.0.0)\r\n\r\n---\r\nupdated-dependencies:\r\n- \n[…]\ndevelopment\r\n  update-type: version-update:semver-major\r\n...\r\n\r\nSigned-off-by: dependabot[bot] <support@github.com>\r\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore(deps-dev): bump gulp from 4.0.2 to 5.0.0 (#3100)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2024-04-01T17:18:50Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "e99a501a25f64aafb9a50f441087ed9486662e86",
          "body": "Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore(deps): bump streetsidesoftware/cspell-action from 5 to 6 (#3097)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2024-04-01T07:28:34Z",
          "body_truncated": false,
          "is_coding_agent": false
        }
      ],
      "releases_count": 1,
      "commits_last_year": 53,
      "latest_release_at": "2019-11-05T17:10:29Z",
      "latest_release_tag": "v0.0.1",
      "releases_from_tags": false,
      "days_since_last_push": 20,
      "active_weeks_last_year": 11,
      "days_since_latest_release": 2451,
      "mean_days_between_releases": null
    },
    "community": {
      "has_readme": false,
      "has_license": false,
      "has_description": false,
      "has_contributing": false,
      "health_percentage": null,
      "has_issue_template": false,
      "has_code_of_conduct": false,
      "has_pull_request_template": false
    },
    "ecosystem": {
      "packages": [
        {
          "name": "html5-boilerplate",
          "exists": true,
          "license": "MIT",
          "keywords": [
            "h5bp",
            "template",
            "front-end"
          ],
          "ecosystem": "npm",
          "matches_repo": false,
          "registry_url": "https://www.npmjs.com/package/html5-boilerplate",
          "is_deprecated": false,
          "latest_version": "9.0.1",
          "repository_url": "https://github.com/h5bp/html5-boilerplate",
          "versions_count": 15,
          "total_downloads": null,
          "dependents_count": null,
          "deprecation_note": null,
          "maintainers_count": 1,
          "monthly_downloads": 3682,
          "first_published_at": "2016-09-29T11:39:26.809000Z",
          "latest_published_at": "2024-04-16T14:35:40.940000Z",
          "latest_version_yanked": null,
          "days_since_latest_publish": 827
        }
      ]
    },
    "popularity": {
      "forks": 2,
      "stars": 11,
      "watchers": 1,
      "fork_history": {
        "days": [
          {
            "date": "2014-04-09",
            "count": 1
          },
          {
            "date": "2018-05-30",
            "count": 1
          }
        ],
        "complete": true,
        "collected": 2,
        "total_forks": 2
      },
      "star_history": null,
      "open_issues_and_prs": 1
    },
    "ai_readiness": {
      "has_nix": false,
      "example_dirs": [],
      "has_llms_txt": false,
      "has_dockerfile": false,
      "has_mcp_signal": false,
      "bootstrap_files": [],
      "api_schema_files": [],
      "has_devcontainer": false,
      "typecheck_configs": [],
      "toolchain_manifests": [],
      "largest_source_bytes": 3644,
      "source_files_sampled": 8,
      "oversized_source_files": 0,
      "agent_instruction_files": [],
      "agent_instruction_max_bytes": null
    },
    "dependencies": {
      "manifests": [
        "dist/package.json",
        "package.json",
        "src/package.json"
      ],
      "advisories": {
        "error": null,
        "scope": "repository_graph",
        "source": "osv",
        "findings": [
          {
            "name": "brace-expansion",
            "direct": false,
            "version": "2.1.0",
            "severity": "high",
            "ecosystem": "npm",
            "cvss_score": 7.5,
            "advisory_ids": [
              "GHSA-3jxr-9vmj-r5cp"
            ],
            "fixed_version": "5.0.7",
            "advisory_count": 1,
            "oldest_advisory_days": 2
          },
          {
            "name": "brace-expansion",
            "direct": false,
            "version": "5.0.6",
            "severity": "high",
            "ecosystem": "npm",
            "cvss_score": 7.5,
            "advisory_ids": [
              "GHSA-3jxr-9vmj-r5cp"
            ],
            "fixed_version": "5.0.7",
            "advisory_count": 1,
            "oldest_advisory_days": 2
          },
          {
            "name": "js-yaml",
            "direct": false,
            "version": "4.2.0",
            "severity": "high",
            "ecosystem": "npm",
            "cvss_score": 7.5,
            "advisory_ids": [
              "GHSA-52cp-r559-cp3m"
            ],
            "fixed_version": "4.3.0",
            "advisory_count": 1,
            "oldest_advisory_days": 2
          }
        ],
        "collected": true,
        "malicious": [],
        "truncated": false,
        "by_severity": {
          "high": 3
        },
        "advisory_count": 3,
        "affected_count": 3,
        "assessed_count": 343,
        "malicious_count": 0,
        "assessed_package": null,
        "unassessed_count": 6,
        "direct_affected_count": 0
      },
      "ecosystems": [
        "npm"
      ],
      "dependencies": [],
      "all_dependencies": {
        "error": null,
        "source": "github-sbom",
        "packages": [
          {
            "name": "@aashutoshrathi/word-wrap",
            "direct": false,
            "version": "1.2.6",
            "ecosystem": "npm"
          },
          {
            "name": "@eslint-community/eslint-utils",
            "direct": false,
            "version": "4.9.0",
            "ecosystem": "npm"
          },
          {
            "name": "@eslint-community/regexpp",
            "direct": false,
            "version": "4.12.2",
            "ecosystem": "npm"
          },
          {
            "name": "@eslint/config-array",
            "direct": false,
            "version": "0.23.5",
            "ecosystem": "npm"
          },
          {
            "name": "@eslint/config-helpers",
            "direct": false,
            "version": "0.6.0",
            "ecosystem": "npm"
          },
          {
            "name": "@eslint/core",
            "direct": false,
            "version": "1.2.1",
            "ecosystem": "npm"
          },
          {
            "name": "@eslint/js",
            "direct": false,
            "version": "10.0.1",
            "ecosystem": "npm"
          },
          {
            "name": "@eslint/object-schema",
            "direct": false,
            "version": "3.0.5",
            "ecosystem": "npm"
          },
          {
            "name": "@eslint/plugin-kit",
            "direct": false,
            "version": "0.7.2",
            "ecosystem": "npm"
          },
          {
            "name": "@gulpjs/messages",
            "direct": false,
            "version": "1.1.0",
            "ecosystem": "npm"
          },
          {
            "name": "@gulpjs/to-absolute-glob",
            "direct": false,
            "version": "4.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "@humanfs/core",
            "direct": false,
            "version": "0.19.1",
            "ecosystem": "npm"
          },
          {
            "name": "@humanfs/node",
            "direct": false,
            "version": "0.16.7",
            "ecosystem": "npm"
          },
          {
            "name": "@humanwhocodes/module-importer",
            "direct": false,
            "version": "1.0.1",
            "ecosystem": "npm"
          },
          {
            "name": "@humanwhocodes/retry",
            "direct": false,
            "version": "0.4.3",
            "ecosystem": "npm"
          },
          {
            "name": "@isaacs/cliui",
            "direct": false,
            "version": "8.0.2",
            "ecosystem": "npm"
          },
          {
            "name": "@nodelib/fs.scandir",
            "direct": false,
            "version": "2.1.5",
            "ecosystem": "npm"
          },
          {
            "name": "@nodelib/fs.stat",
            "direct": false,
            "version": "2.0.5",
            "ecosystem": "npm"
          },
          {
            "name": "@nodelib/fs.walk",
            "direct": false,
            "version": "1.2.8",
            "ecosystem": "npm"
          },
          {
            "name": "@pkgjs/parseargs",
            "direct": false,
            "version": "0.11.0",
            "ecosystem": "npm"
          },
          {
            "name": "@sindresorhus/merge-streams",
            "direct": false,
            "version": "2.3.0",
            "ecosystem": "npm"
          },
          {
            "name": "@types/esrecurse",
            "direct": false,
            "version": "4.3.1",
            "ecosystem": "npm"
          },
          {
            "name": "@types/estree",
            "direct": false,
            "version": "1.0.8",
            "ecosystem": "npm"
          },
          {
            "name": "@types/expect",
            "direct": false,
            "version": "1.20.4",
            "ecosystem": "npm"
          },
          {
            "name": "@types/json-schema",
            "direct": false,
            "version": "7.0.15",
            "ecosystem": "npm"
          },
          {
            "name": "@types/node",
            "direct": false,
            "version": "20.10.3",
            "ecosystem": "npm"
          },
          {
            "name": "@types/vinyl",
            "direct": false,
            "version": "2.0.12",
            "ecosystem": "npm"
          },
          {
            "name": "abort-controller",
            "direct": false,
            "version": "3.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "acorn",
            "direct": false,
            "version": "8.17.0",
            "ecosystem": "npm"
          },
          {
            "name": "acorn-jsx",
            "direct": false,
            "version": "5.3.2",
            "ecosystem": "npm"
          },
          {
            "name": "ajv",
            "direct": false,
            "version": "6.15.0",
            "ecosystem": "npm"
          },
          {
            "name": "ansi-colors",
            "direct": false,
            "version": "1.1.0",
            "ecosystem": "npm"
          },
          {
            "name": "ansi-regex",
            "direct": false,
            "version": "5.0.1",
            "ecosystem": "npm"
          },
          {
            "name": "ansi-regex",
            "direct": false,
            "version": "6.0.1",
            "ecosystem": "npm"
          },
          {
            "name": "ansi-styles",
            "direct": false,
            "version": "4.3.0",
            "ecosystem": "npm"
          },
          {
            "name": "ansi-styles",
            "direct": false,
            "version": "6.2.1",
            "ecosystem": "npm"
          },
          {
            "name": "ansi-wrap",
            "direct": false,
            "version": "0.1.0",
            "ecosystem": "npm"
          },
          {
            "name": "anymatch",
            "direct": false,
            "version": "3.1.3",
            "ecosystem": "npm"
          },
          {
            "name": "archiver",
            "direct": false,
            "version": "7.0.1",
            "ecosystem": "npm"
          },
          {
            "name": "archiver-utils",
            "direct": false,
            "version": "5.0.2",
            "ecosystem": "npm"
          },
          {
            "name": "argparse",
            "direct": false,
            "version": "2.0.1",
            "ecosystem": "npm"
          },
          {
            "name": "array-each",
            "direct": false,
            "version": "1.0.1",
            "ecosystem": "npm"
          },
          {
            "name": "array-slice",
            "direct": false,
            "version": "1.1.0",
            "ecosystem": "npm"
          },
          {
            "name": "async",
            "direct": false,
            "version": "3.2.4",
            "ecosystem": "npm"
          },
          {
            "name": "async-done",
            "direct": false,
            "version": "2.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "async-settle",
            "direct": false,
            "version": "2.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "autoprefixer",
            "direct": false,
            "version": "10.5.2",
            "ecosystem": "npm"
          },
          {
            "name": "b4a",
            "direct": false,
            "version": "1.6.4",
            "ecosystem": "npm"
          },
          {
            "name": "bach",
            "direct": false,
            "version": "2.0.1",
            "ecosystem": "npm"
          },
          {
            "name": "balanced-match",
            "direct": false,
            "version": "1.0.2",
            "ecosystem": "npm"
          },
          {
            "name": "balanced-match",
            "direct": false,
            "version": "4.0.4",
            "ecosystem": "npm"
          },
          {
            "name": "base64-js",
            "direct": false,
            "version": "1.5.1",
            "ecosystem": "npm"
          },
          {
            "name": "baseline-browser-mapping",
            "direct": false,
            "version": "2.10.38",
            "ecosystem": "npm"
          },
          {
            "name": "binary-extensions",
            "direct": false,
            "version": "2.3.0",
            "ecosystem": "npm"
          },
          {
            "name": "bl",
            "direct": false,
            "version": "5.1.0",
            "ecosystem": "npm"
          },
          {
            "name": "brace-expansion",
            "direct": false,
            "version": "2.1.0",
            "ecosystem": "npm"
          },
          {
            "name": "brace-expansion",
            "direct": false,
            "version": "5.0.6",
            "ecosystem": "npm"
          },
          {
            "name": "braces",
            "direct": false,
            "version": "3.0.3",
            "ecosystem": "npm"
          },
          {
            "name": "browser-stdout",
            "direct": false,
            "version": "1.3.1",
            "ecosystem": "npm"
          },
          {
            "name": "browserslist",
            "direct": false,
            "version": "4.28.4",
            "ecosystem": "npm"
          },
          {
            "name": "buffer",
            "direct": false,
            "version": "6.0.3",
            "ecosystem": "npm"
          },
          {
            "name": "buffer-crc32",
            "direct": false,
            "version": "1.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "camelcase",
            "direct": false,
            "version": "6.2.1",
            "ecosystem": "npm"
          },
          {
            "name": "caniuse-lite",
            "direct": false,
            "version": "1.0.30001799",
            "ecosystem": "npm"
          },
          {
            "name": "chalk",
            "direct": false,
            "version": "4.1.2",
            "ecosystem": "npm"
          },
          {
            "name": "chalk",
            "direct": false,
            "version": "5.6.2",
            "ecosystem": "npm"
          },
          {
            "name": "chokidar",
            "direct": false,
            "version": "3.6.0",
            "ecosystem": "npm"
          },
          {
            "name": "chokidar",
            "direct": false,
            "version": "4.0.3",
            "ecosystem": "npm"
          },
          {
            "name": "cliui",
            "direct": false,
            "version": "7.0.4",
            "ecosystem": "npm"
          },
          {
            "name": "cliui",
            "direct": false,
            "version": "8.0.1",
            "ecosystem": "npm"
          },
          {
            "name": "clone",
            "direct": false,
            "version": "2.1.2",
            "ecosystem": "npm"
          },
          {
            "name": "color-convert",
            "direct": false,
            "version": "2.0.1",
            "ecosystem": "npm"
          },
          {
            "name": "color-name",
            "direct": false,
            "version": "1.1.4",
            "ecosystem": "npm"
          },
          {
            "name": "color-support",
            "direct": false,
            "version": "1.1.3",
            "ecosystem": "npm"
          },
          {
            "name": "compress-commons",
            "direct": false,
            "version": "6.0.2",
            "ecosystem": "npm"
          },
          {
            "name": "concat-with-sourcemaps",
            "direct": false,
            "version": "1.1.0",
            "ecosystem": "npm"
          },
          {
            "name": "convert-source-map",
            "direct": false,
            "version": "2.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "copy-props",
            "direct": false,
            "version": "4.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "copy-webpack-plugin",
            "direct": false,
            "version": "^14.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "core-util-is",
            "direct": false,
            "version": "1.0.3",
            "ecosystem": "npm"
          },
          {
            "name": "crc-32",
            "direct": false,
            "version": "1.2.2",
            "ecosystem": "npm"
          },
          {
            "name": "crc32-stream",
            "direct": false,
            "version": "6.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "cross-spawn",
            "direct": false,
            "version": "7.0.6",
            "ecosystem": "npm"
          },
          {
            "name": "debug",
            "direct": false,
            "version": "4.3.6",
            "ecosystem": "npm"
          },
          {
            "name": "decamelize",
            "direct": false,
            "version": "4.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "deep-is",
            "direct": false,
            "version": "0.1.4",
            "ecosystem": "npm"
          },
          {
            "name": "del",
            "direct": false,
            "version": "8.0.1",
            "ecosystem": "npm"
          },
          {
            "name": "detect-file",
            "direct": false,
            "version": "1.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "diff",
            "direct": false,
            "version": "8.0.4",
            "ecosystem": "npm"
          },
          {
            "name": "duplexify",
            "direct": false,
            "version": "4.1.3",
            "ecosystem": "npm"
          },
          {
            "name": "each-props",
            "direct": false,
            "version": "3.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "eastasianwidth",
            "direct": false,
            "version": "0.2.0",
            "ecosystem": "npm"
          },
          {
            "name": "easy-transform-stream",
            "direct": false,
            "version": "1.0.1",
            "ecosystem": "npm"
          },
          {
            "name": "electron-to-chromium",
            "direct": false,
            "version": "1.5.378",
            "ecosystem": "npm"
          },
          {
            "name": "emoji-regex",
            "direct": false,
            "version": "8.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "emoji-regex",
            "direct": false,
            "version": "9.2.2",
            "ecosystem": "npm"
          },
          {
            "name": "end-of-stream",
            "direct": false,
            "version": "1.4.4",
            "ecosystem": "npm"
          },
          {
            "name": "escalade",
            "direct": false,
            "version": "3.2.0",
            "ecosystem": "npm"
          },
          {
            "name": "escape-string-regexp",
            "direct": false,
            "version": "4.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "eslint",
            "direct": false,
            "version": "10.6.0",
            "ecosystem": "npm"
          },
          {
            "name": "eslint-plugin-mocha",
            "direct": false,
            "version": "11.3.0",
            "ecosystem": "npm"
          },
          {
            "name": "eslint-scope",
            "direct": false,
            "version": "9.1.2",
            "ecosystem": "npm"
          },
          {
            "name": "eslint-visitor-keys",
            "direct": false,
            "version": "3.4.3",
            "ecosystem": "npm"
          },
          {
            "name": "eslint-visitor-keys",
            "direct": false,
            "version": "5.0.1",
            "ecosystem": "npm"
          },
          {
            "name": "espree",
            "direct": false,
            "version": "11.2.0",
            "ecosystem": "npm"
          },
          {
            "name": "esquery",
            "direct": false,
            "version": "1.7.0",
            "ecosystem": "npm"
          },
          {
            "name": "esrecurse",
            "direct": false,
            "version": "4.3.0",
            "ecosystem": "npm"
          },
          {
            "name": "estraverse",
            "direct": false,
            "version": "5.3.0",
            "ecosystem": "npm"
          },
          {
            "name": "esutils",
            "direct": false,
            "version": "2.0.3",
            "ecosystem": "npm"
          },
          {
            "name": "event-target-shim",
            "direct": false,
            "version": "5.0.1",
            "ecosystem": "npm"
          },
          {
            "name": "events",
            "direct": false,
            "version": "3.3.0",
            "ecosystem": "npm"
          },
          {
            "name": "expand-tilde",
            "direct": false,
            "version": "2.0.2",
            "ecosystem": "npm"
          },
          {
            "name": "extend",
            "direct": false,
            "version": "3.0.2",
            "ecosystem": "npm"
          },
          {
            "name": "fancy-log",
            "direct": false,
            "version": "2.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "fast-deep-equal",
            "direct": false,
            "version": "3.1.3",
            "ecosystem": "npm"
          },
          {
            "name": "fast-fifo",
            "direct": false,
            "version": "1.3.2",
            "ecosystem": "npm"
          },
          {
            "name": "fast-glob",
            "direct": false,
            "version": "3.3.3",
            "ecosystem": "npm"
          },
          {
            "name": "fast-json-stable-stringify",
            "direct": false,
            "version": "2.1.0",
            "ecosystem": "npm"
          },
          {
            "name": "fast-levenshtein",
            "direct": false,
            "version": "2.0.6",
            "ecosystem": "npm"
          },
          {
            "name": "fast-levenshtein",
            "direct": false,
            "version": "3.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "fastest-levenshtein",
            "direct": false,
            "version": "1.0.16",
            "ecosystem": "npm"
          },
          {
            "name": "fastq",
            "direct": false,
            "version": "1.19.1",
            "ecosystem": "npm"
          },
          {
            "name": "file-entry-cache",
            "direct": false,
            "version": "8.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "fill-range",
            "direct": false,
            "version": "7.1.1",
            "ecosystem": "npm"
          },
          {
            "name": "find-up",
            "direct": false,
            "version": "5.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "findup-sync",
            "direct": false,
            "version": "5.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "fined",
            "direct": false,
            "version": "2.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "flagged-respawn",
            "direct": false,
            "version": "2.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "flat",
            "direct": false,
            "version": "5.0.2",
            "ecosystem": "npm"
          },
          {
            "name": "flat-cache",
            "direct": false,
            "version": "4.0.1",
            "ecosystem": "npm"
          },
          {
            "name": "flatted",
            "direct": false,
            "version": "3.4.2",
            "ecosystem": "npm"
          },
          {
            "name": "for-in",
            "direct": false,
            "version": "1.0.2",
            "ecosystem": "npm"
          },
          {
            "name": "for-own",
            "direct": false,
            "version": "1.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "foreground-child",
            "direct": false,
            "version": "3.3.1",
            "ecosystem": "npm"
          },
          {
            "name": "fork-stream",
            "direct": false,
            "version": "0.0.4",
            "ecosystem": "npm"
          },
          {
            "name": "fraction.js",
            "direct": false,
            "version": "5.3.4",
            "ecosystem": "npm"
          },
          {
            "name": "fs-mkdirp-stream",
            "direct": false,
            "version": "2.0.1",
            "ecosystem": "npm"
          },
          {
            "name": "fsevents",
            "direct": false,
            "version": "2.3.3",
            "ecosystem": "npm"
          },
          {
            "name": "function-bind",
            "direct": false,
            "version": "1.1.1",
            "ecosystem": "npm"
          },
          {
            "name": "get-caller-file",
            "direct": false,
            "version": "2.0.5",
            "ecosystem": "npm"
          },
          {
            "name": "glob",
            "direct": false,
            "version": "10.5.0",
            "ecosystem": "npm"
          },
          {
            "name": "glob",
            "direct": false,
            "version": "13.0.6",
            "ecosystem": "npm"
          },
          {
            "name": "glob-parent",
            "direct": false,
            "version": "5.1.2",
            "ecosystem": "npm"
          },
          {
            "name": "glob-parent",
            "direct": false,
            "version": "6.0.2",
            "ecosystem": "npm"
          },
          {
            "name": "glob-stream",
            "direct": false,
            "version": "8.0.3",
            "ecosystem": "npm"
          },
          {
            "name": "glob-watcher",
            "direct": false,
            "version": "6.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "global-modules",
            "direct": false,
            "version": "1.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "global-prefix",
            "direct": false,
            "version": "1.0.2",
            "ecosystem": "npm"
          },
          {
            "name": "globals",
            "direct": false,
            "version": "15.15.0",
            "ecosystem": "npm"
          },
          {
            "name": "globals",
            "direct": false,
            "version": "16.4.0",
            "ecosystem": "npm"
          },
          {
            "name": "globby",
            "direct": false,
            "version": "14.1.0",
            "ecosystem": "npm"
          },
          {
            "name": "glogg",
            "direct": false,
            "version": "2.2.0",
            "ecosystem": "npm"
          },
          {
            "name": "graceful-fs",
            "direct": false,
            "version": "4.2.11",
            "ecosystem": "npm"
          },
          {
            "name": "gulp",
            "direct": false,
            "version": "5.0.1",
            "ecosystem": "npm"
          },
          {
            "name": "gulp-autoprefixer",
            "direct": false,
            "version": "10.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "gulp-cli",
            "direct": false,
            "version": "3.1.0",
            "ecosystem": "npm"
          },
          {
            "name": "gulp-eslint-new",
            "direct": false,
            "version": "2.6.2",
            "ecosystem": "npm"
          },
          {
            "name": "gulp-header",
            "direct": false,
            "version": "2.0.12",
            "ecosystem": "npm"
          },
          {
            "name": "gulp-plugin-extras",
            "direct": false,
            "version": "1.1.0",
            "ecosystem": "npm"
          },
          {
            "name": "gulp-rename",
            "direct": false,
            "version": "2.1.0",
            "ecosystem": "npm"
          },
          {
            "name": "gulplog",
            "direct": false,
            "version": "2.2.0",
            "ecosystem": "npm"
          },
          {
            "name": "has",
            "direct": false,
            "version": "1.0.3",
            "ecosystem": "npm"
          },
          {
            "name": "has-flag",
            "direct": false,
            "version": "4.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "he",
            "direct": false,
            "version": "1.2.0",
            "ecosystem": "npm"
          },
          {
            "name": "homedir-polyfill",
            "direct": false,
            "version": "1.0.3",
            "ecosystem": "npm"
          },
          {
            "name": "html-webpack-plugin",
            "direct": false,
            "version": "^5.6.7",
            "ecosystem": "npm"
          },
          {
            "name": "iconv-lite",
            "direct": false,
            "version": "0.6.3",
            "ecosystem": "npm"
          },
          {
            "name": "ieee754",
            "direct": false,
            "version": "1.2.1",
            "ecosystem": "npm"
          },
          {
            "name": "ignore",
            "direct": false,
            "version": "5.2.0",
            "ecosystem": "npm"
          },
          {
            "name": "ignore",
            "direct": false,
            "version": "7.0.5",
            "ecosystem": "npm"
          },
          {
            "name": "imurmurhash",
            "direct": false,
            "version": "0.1.4",
            "ecosystem": "npm"
          },
          {
            "name": "inherits",
            "direct": false,
            "version": "2.0.4",
            "ecosystem": "npm"
          },
          {
            "name": "ini",
            "direct": false,
            "version": "1.3.8",
            "ecosystem": "npm"
          },
          {
            "name": "interpret",
            "direct": false,
            "version": "3.1.1",
            "ecosystem": "npm"
          },
          {
            "name": "is-absolute",
            "direct": false,
            "version": "1.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "is-binary-path",
            "direct": false,
            "version": "2.1.0",
            "ecosystem": "npm"
          },
          {
            "name": "is-core-module",
            "direct": false,
            "version": "2.8.0",
            "ecosystem": "npm"
          },
          {
            "name": "is-extglob",
            "direct": false,
            "version": "2.1.1",
            "ecosystem": "npm"
          },
          {
            "name": "is-fullwidth-code-point",
            "direct": false,
            "version": "3.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "is-glob",
            "direct": false,
            "version": "4.0.3",
            "ecosystem": "npm"
          },
          {
            "name": "is-negated-glob",
            "direct": false,
            "version": "1.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "is-number",
            "direct": false,
            "version": "7.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "is-path-cwd",
            "direct": false,
            "version": "3.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "is-path-inside",
            "direct": false,
            "version": "3.0.3",
            "ecosystem": "npm"
          },
          {
            "name": "is-path-inside",
            "direct": false,
            "version": "4.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "is-plain-obj",
            "direct": false,
            "version": "2.1.0",
            "ecosystem": "npm"
          },
          {
            "name": "is-plain-object",
            "direct": false,
            "version": "5.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "is-relative",
            "direct": false,
            "version": "1.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "is-stream",
            "direct": false,
            "version": "2.0.1",
            "ecosystem": "npm"
          },
          {
            "name": "is-unc-path",
            "direct": false,
            "version": "1.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "is-unicode-supported",
            "direct": false,
            "version": "0.1.0",
            "ecosystem": "npm"
          },
          {
            "name": "is-valid-glob",
            "direct": false,
            "version": "1.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "is-windows",
            "direct": false,
            "version": "1.0.2",
            "ecosystem": "npm"
          },
          {
            "name": "isarray",
            "direct": false,
            "version": "1.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "isexe",
            "direct": false,
            "version": "2.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "isobject",
            "direct": false,
            "version": "3.0.1",
            "ecosystem": "npm"
          },
          {
            "name": "jackspeak",
            "direct": false,
            "version": "3.4.3",
            "ecosystem": "npm"
          },
          {
            "name": "js-yaml",
            "direct": false,
            "version": "4.2.0",
            "ecosystem": "npm"
          },
          {
            "name": "json-buffer",
            "direct": false,
            "version": "3.0.1",
            "ecosystem": "npm"
          },
          {
            "name": "json-schema-traverse",
            "direct": false,
            "version": "0.4.1",
            "ecosystem": "npm"
          },
          {
            "name": "json-stable-stringify-without-jsonify",
            "direct": false,
            "version": "1.0.1",
            "ecosystem": "npm"
          },
          {
            "name": "keyv",
            "direct": false,
            "version": "4.5.4",
            "ecosystem": "npm"
          },
          {
            "name": "last-run",
            "direct": false,
            "version": "2.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "lazystream",
            "direct": false,
            "version": "1.0.1",
            "ecosystem": "npm"
          },
          {
            "name": "lead",
            "direct": false,
            "version": "4.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "levn",
            "direct": false,
            "version": "0.4.1",
            "ecosystem": "npm"
          },
          {
            "name": "liftoff",
            "direct": false,
            "version": "5.0.1",
            "ecosystem": "npm"
          },
          {
            "name": "locate-path",
            "direct": false,
            "version": "6.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "lodash",
            "direct": false,
            "version": "4.18.1",
            "ecosystem": "npm"
          },
          {
            "name": "log-symbols",
            "direct": false,
            "version": "4.1.0",
            "ecosystem": "npm"
          },
          {
            "name": "lru-cache",
            "direct": false,
            "version": "10.4.3",
            "ecosystem": "npm"
          },
          {
            "name": "lru-cache",
            "direct": false,
            "version": "11.2.7",
            "ecosystem": "npm"
          },
          {
            "name": "main.css",
            "direct": false,
            "version": "3.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "map-cache",
            "direct": false,
            "version": "0.2.2",
            "ecosystem": "npm"
          },
          {
            "name": "map-stream",
            "direct": false,
            "version": "0.0.7",
            "ecosystem": "npm"
          },
          {
            "name": "merge-stream",
            "direct": false,
            "version": "2.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "merge2",
            "direct": false,
            "version": "1.4.1",
            "ecosystem": "npm"
          },
          {
            "name": "micromatch",
            "direct": false,
            "version": "4.0.8",
            "ecosystem": "npm"
          },
          {
            "name": "minimatch",
            "direct": false,
            "version": "10.2.4",
            "ecosystem": "npm"
          },
          {
            "name": "minimatch",
            "direct": false,
            "version": "10.2.5",
            "ecosystem": "npm"
          },
          {
            "name": "minimatch",
            "direct": false,
            "version": "5.1.9",
            "ecosystem": "npm"
          },
          {
            "name": "minimatch",
            "direct": false,
            "version": "9.0.9",
            "ecosystem": "npm"
          },
          {
            "name": "minipass",
            "direct": false,
            "version": "7.1.3",
            "ecosystem": "npm"
          },
          {
            "name": "mocha",
            "direct": false,
            "version": "11.7.5",
            "ecosystem": "npm"
          },
          {
            "name": "ms",
            "direct": false,
            "version": "2.1.2",
            "ecosystem": "npm"
          },
          {
            "name": "ms",
            "direct": false,
            "version": "2.1.3",
            "ecosystem": "npm"
          },
          {
            "name": "mute-stdout",
            "direct": false,
            "version": "2.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "nanoid",
            "direct": false,
            "version": "3.3.15",
            "ecosystem": "npm"
          },
          {
            "name": "natural-compare",
            "direct": false,
            "version": "1.4.0",
            "ecosystem": "npm"
          },
          {
            "name": "node-releases",
            "direct": false,
            "version": "2.0.49",
            "ecosystem": "npm"
          },
          {
            "name": "normalize-path",
            "direct": false,
            "version": "3.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "now-and-later",
            "direct": false,
            "version": "3.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "object.defaults",
            "direct": false,
            "version": "1.1.0",
            "ecosystem": "npm"
          },
          {
            "name": "object.pick",
            "direct": false,
            "version": "1.3.0",
            "ecosystem": "npm"
          },
          {
            "name": "once",
            "direct": false,
            "version": "1.4.0",
            "ecosystem": "npm"
          },
          {
            "name": "optionator",
            "direct": false,
            "version": "0.9.3",
            "ecosystem": "npm"
          },
          {
            "name": "p-limit",
            "direct": false,
            "version": "3.1.0",
            "ecosystem": "npm"
          },
          {
            "name": "p-locate",
            "direct": false,
            "version": "5.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "p-map",
            "direct": false,
            "version": "7.0.3",
            "ecosystem": "npm"
          },
          {
            "name": "package-json-from-dist",
            "direct": false,
            "version": "1.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "parse-filepath",
            "direct": false,
            "version": "1.0.2",
            "ecosystem": "npm"
          },
          {
            "name": "parse-passwd",
            "direct": false,
            "version": "1.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "path-exists",
            "direct": false,
            "version": "4.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "path-key",
            "direct": false,
            "version": "3.1.1",
            "ecosystem": "npm"
          },
          {
            "name": "path-parse",
            "direct": false,
            "version": "1.0.7",
            "ecosystem": "npm"
          },
          {
            "name": "path-root",
            "direct": false,
            "version": "0.1.1",
            "ecosystem": "npm"
          },
          {
            "name": "path-root-regex",
            "direct": false,
            "version": "0.1.2",
            "ecosystem": "npm"
          },
          {
            "name": "path-scurry",
            "direct": false,
            "version": "1.11.1",
            "ecosystem": "npm"
          },
          {
            "name": "path-scurry",
            "direct": false,
            "version": "2.0.2",
            "ecosystem": "npm"
          },
          {
            "name": "path-type",
            "direct": false,
            "version": "6.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "picocolors",
            "direct": false,
            "version": "1.1.1",
            "ecosystem": "npm"
          },
          {
            "name": "picomatch",
            "direct": false,
            "version": "2.3.2",
            "ecosystem": "npm"
          },
          {
            "name": "plugin-error",
            "direct": false,
            "version": "2.0.1",
            "ecosystem": "npm"
          },
          {
            "name": "postcss",
            "direct": false,
            "version": "8.5.15",
            "ecosystem": "npm"
          },
          {
            "name": "postcss-value-parser",
            "direct": false,
            "version": "4.2.0",
            "ecosystem": "npm"
          },
          {
            "name": "prelude-ls",
            "direct": false,
            "version": "1.2.1",
            "ecosystem": "npm"
          },
          {
            "name": "presentable-error",
            "direct": false,
            "version": "0.0.1",
            "ecosystem": "npm"
          },
          {
            "name": "prettier",
            "direct": false,
            "version": "3.8.4",
            "ecosystem": "npm"
          },
          {
            "name": "process",
            "direct": false,
            "version": "0.11.10",
            "ecosystem": "npm"
          },
          {
            "name": "process-nextick-args",
            "direct": false,
            "version": "2.0.1",
            "ecosystem": "npm"
          },
          {
            "name": "punycode",
            "direct": false,
            "version": "2.3.1",
            "ecosystem": "npm"
          },
          {
            "name": "queue-microtask",
            "direct": false,
            "version": "1.2.3",
            "ecosystem": "npm"
          },
          {
            "name": "queue-tick",
            "direct": false,
            "version": "1.0.1",
            "ecosystem": "npm"
          },
          {
            "name": "readable-stream",
            "direct": false,
            "version": "2.3.8",
            "ecosystem": "npm"
          },
          {
            "name": "readable-stream",
            "direct": false,
            "version": "3.6.2",
            "ecosystem": "npm"
          },
          {
            "name": "readable-stream",
            "direct": false,
            "version": "4.5.2",
            "ecosystem": "npm"
          },
          {
            "name": "readdir-glob",
            "direct": false,
            "version": "1.1.3",
            "ecosystem": "npm"
          },
          {
            "name": "readdirp",
            "direct": false,
            "version": "3.6.0",
            "ecosystem": "npm"
          },
          {
            "name": "readdirp",
            "direct": false,
            "version": "4.1.2",
            "ecosystem": "npm"
          },
          {
            "name": "rechoir",
            "direct": false,
            "version": "0.8.0",
            "ecosystem": "npm"
          },
          {
            "name": "remove-trailing-separator",
            "direct": false,
            "version": "1.1.0",
            "ecosystem": "npm"
          },
          {
            "name": "replace-ext",
            "direct": false,
            "version": "2.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "replace-homedir",
            "direct": false,
            "version": "2.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "require-directory",
            "direct": false,
            "version": "2.1.1",
            "ecosystem": "npm"
          },
          {
            "name": "resolve",
            "direct": false,
            "version": "1.20.0",
            "ecosystem": "npm"
          },
          {
            "name": "resolve-dir",
            "direct": false,
            "version": "1.0.1",
            "ecosystem": "npm"
          },
          {
            "name": "resolve-options",
            "direct": false,
            "version": "2.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "reusify",
            "direct": false,
            "version": "1.1.0",
            "ecosystem": "npm"
          },
          {
            "name": "run-parallel",
            "direct": false,
            "version": "1.2.0",
            "ecosystem": "npm"
          },
          {
            "name": "safe-buffer",
            "direct": false,
            "version": "5.1.2",
            "ecosystem": "npm"
          },
          {
            "name": "safe-buffer",
            "direct": false,
            "version": "5.2.1",
            "ecosystem": "npm"
          },
          {
            "name": "safer-buffer",
            "direct": false,
            "version": "2.1.2",
            "ecosystem": "npm"
          },
          {
            "name": "semver",
            "direct": false,
            "version": "6.3.1",
            "ecosystem": "npm"
          },
          {
            "name": "semver",
            "direct": false,
            "version": "7.7.4",
            "ecosystem": "npm"
          },
          {
            "name": "semver-greatest-satisfied-range",
            "direct": false,
            "version": "2.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "serialize-javascript",
            "direct": false,
            "version": "7.0.5",
            "ecosystem": "npm"
          },
          {
            "name": "shebang-command",
            "direct": false,
            "version": "2.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "shebang-regex",
            "direct": false,
            "version": "3.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "signal-exit",
            "direct": false,
            "version": "4.1.0",
            "ecosystem": "npm"
          },
          {
            "name": "slash",
            "direct": false,
            "version": "5.1.0",
            "ecosystem": "npm"
          },
          {
            "name": "source-map",
            "direct": false,
            "version": "0.5.7",
            "ecosystem": "npm"
          },
          {
            "name": "source-map",
            "direct": false,
            "version": "0.6.1",
            "ecosystem": "npm"
          },
          {
            "name": "source-map-js",
            "direct": false,
            "version": "1.2.1",
            "ecosystem": "npm"
          },
          {
            "name": "sparkles",
            "direct": false,
            "version": "2.1.0",
            "ecosystem": "npm"
          },
          {
            "name": "stream-composer",
            "direct": false,
            "version": "1.0.2",
            "ecosystem": "npm"
          },
          {
            "name": "stream-exhaust",
            "direct": false,
            "version": "1.0.2",
            "ecosystem": "npm"
          },
          {
            "name": "stream-shift",
            "direct": false,
            "version": "1.0.3",
            "ecosystem": "npm"
          },
          {
            "name": "streamx",
            "direct": false,
            "version": "2.15.1",
            "ecosystem": "npm"
          },
          {
            "name": "string-width",
            "direct": false,
            "version": "4.2.3",
            "ecosystem": "npm"
          },
          {
            "name": "string-width",
            "direct": false,
            "version": "5.1.2",
            "ecosystem": "npm"
          },
          {
            "name": "string_decoder",
            "direct": false,
            "version": "1.1.1",
            "ecosystem": "npm"
          },
          {
            "name": "string_decoder",
            "direct": false,
            "version": "1.3.0",
            "ecosystem": "npm"
          },
          {
            "name": "strip-ansi",
            "direct": false,
            "version": "6.0.1",
            "ecosystem": "npm"
          },
          {
            "name": "strip-ansi",
            "direct": false,
            "version": "7.1.0",
            "ecosystem": "npm"
          },
          {
            "name": "strip-json-comments",
            "direct": false,
            "version": "3.1.1",
            "ecosystem": "npm"
          },
          {
            "name": "supports-color",
            "direct": false,
            "version": "7.2.0",
            "ecosystem": "npm"
          },
          {
            "name": "supports-color",
            "direct": false,
            "version": "8.1.1",
            "ecosystem": "npm"
          },
          {
            "name": "sver",
            "direct": false,
            "version": "1.8.4",
            "ecosystem": "npm"
          },
          {
            "name": "tar-stream",
            "direct": false,
            "version": "3.1.6",
            "ecosystem": "npm"
          },
          {
            "name": "teex",
            "direct": false,
            "version": "1.0.1",
            "ecosystem": "npm"
          },
          {
            "name": "ternary-stream",
            "direct": false,
            "version": "3.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "through2",
            "direct": false,
            "version": "3.0.2",
            "ecosystem": "npm"
          },
          {
            "name": "through2",
            "direct": false,
            "version": "4.0.2",
            "ecosystem": "npm"
          },
          {
            "name": "to-regex-range",
            "direct": false,
            "version": "5.0.1",
            "ecosystem": "npm"
          },
          {
            "name": "to-through",
            "direct": false,
            "version": "3.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "type-check",
            "direct": false,
            "version": "0.4.0",
            "ecosystem": "npm"
          },
          {
            "name": "unc-path-regex",
            "direct": false,
            "version": "0.1.2",
            "ecosystem": "npm"
          },
          {
            "name": "undertaker",
            "direct": false,
            "version": "2.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "undertaker-registry",
            "direct": false,
            "version": "2.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "undici-types",
            "direct": false,
            "version": "5.26.5",
            "ecosystem": "npm"
          },
          {
            "name": "unicorn-magic",
            "direct": false,
            "version": "0.3.0",
            "ecosystem": "npm"
          },
          {
            "name": "update-browserslist-db",
            "direct": false,
            "version": "1.2.3",
            "ecosystem": "npm"
          },
          {
            "name": "uri-js",
            "direct": false,
            "version": "4.4.1",
            "ecosystem": "npm"
          },
          {
            "name": "util-deprecate",
            "direct": false,
            "version": "1.0.2",
            "ecosystem": "npm"
          },
          {
            "name": "v8flags",
            "direct": false,
            "version": "4.0.1",
            "ecosystem": "npm"
          },
          {
            "name": "value-or-function",
            "direct": false,
            "version": "4.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "vinyl",
            "direct": false,
            "version": "3.0.1",
            "ecosystem": "npm"
          },
          {
            "name": "vinyl-contents",
            "direct": false,
            "version": "2.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "vinyl-fs",
            "direct": false,
            "version": "4.0.2",
            "ecosystem": "npm"
          },
          {
            "name": "vinyl-sourcemap",
            "direct": false,
            "version": "2.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "vinyl-sourcemaps-apply",
            "direct": false,
            "version": "0.2.1",
            "ecosystem": "npm"
          },
          {
            "name": "webpack",
            "direct": false,
            "version": "^5.108.3",
            "ecosystem": "npm"
          },
          {
            "name": "webpack-cli",
            "direct": false,
            "version": "^7.1.0",
            "ecosystem": "npm"
          },
          {
            "name": "webpack-dev-server",
            "direct": false,
            "version": "^5.2.5",
            "ecosystem": "npm"
          },
          {
            "name": "webpack-merge",
            "direct": false,
            "version": "^6.0.1",
            "ecosystem": "npm"
          },
          {
            "name": "which",
            "direct": false,
            "version": "1.3.1",
            "ecosystem": "npm"
          },
          {
            "name": "which",
            "direct": false,
            "version": "2.0.2",
            "ecosystem": "npm"
          },
          {
            "name": "workerpool",
            "direct": false,
            "version": "9.3.3",
            "ecosystem": "npm"
          },
          {
            "name": "wrap-ansi",
            "direct": false,
            "version": "7.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "wrap-ansi",
            "direct": false,
            "version": "8.1.0",
            "ecosystem": "npm"
          },
          {
            "name": "wrappy",
            "direct": false,
            "version": "1.0.2",
            "ecosystem": "npm"
          },
          {
            "name": "y18n",
            "direct": false,
            "version": "5.0.8",
            "ecosystem": "npm"
          },
          {
            "name": "yargs",
            "direct": false,
            "version": "16.2.0",
            "ecosystem": "npm"
          },
          {
            "name": "yargs",
            "direct": false,
            "version": "17.7.2",
            "ecosystem": "npm"
          },
          {
            "name": "yargs-parser",
            "direct": false,
            "version": "20.2.9",
            "ecosystem": "npm"
          },
          {
            "name": "yargs-parser",
            "direct": false,
            "version": "21.1.1",
            "ecosystem": "npm"
          },
          {
            "name": "yargs-unparser",
            "direct": false,
            "version": "2.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "yocto-queue",
            "direct": false,
            "version": "0.1.0",
            "ecosystem": "npm"
          },
          {
            "name": "zip-stream",
            "direct": false,
            "version": "6.0.1",
            "ecosystem": "npm"
          }
        ],
        "collected": true,
        "truncated": false,
        "total_count": 349,
        "direct_count": 0,
        "indirect_count": 349
      }
    },
    "maintainership": {
      "issues": {
        "open_prs": 1,
        "merged_prs": 0,
        "open_issues": 0,
        "closed_ratio": null,
        "closed_issues": 0,
        "closed_unmerged_prs": 1
      },
      "bus_factor": 3,
      "bot_contributors": 2,
      "top_contributors": [
        {
          "type": "User",
          "login": "paulirish",
          "commits": 420,
          "avatar_url": "https://avatars.githubusercontent.com/u/39191?v=4"
        },
        {
          "type": "User",
          "login": "roblarsen",
          "commits": 384,
          "avatar_url": "https://avatars.githubusercontent.com/u/361421?v=4"
        },
        {
          "type": "User",
          "login": "coliff",
          "commits": 251,
          "avatar_url": "https://avatars.githubusercontent.com/u/1212885?v=4"
        },
        {
          "type": "User",
          "login": "necolas",
          "commits": 161,
          "avatar_url": "https://avatars.githubusercontent.com/u/239676?v=4"
        },
        {
          "type": "User",
          "login": "alrra",
          "commits": 149,
          "avatar_url": "https://avatars.githubusercontent.com/u/1223565?v=4"
        },
        {
          "type": "User",
          "login": "mathiasbynens",
          "commits": 59,
          "avatar_url": "https://avatars.githubusercontent.com/u/81942?v=4"
        },
        {
          "type": "User",
          "login": "drublic",
          "commits": 43,
          "avatar_url": "https://avatars.githubusercontent.com/u/502487?v=4"
        },
        {
          "type": "User",
          "login": "chuanxshi",
          "commits": 27,
          "avatar_url": "https://avatars.githubusercontent.com/u/153513?v=4"
        },
        {
          "type": "User",
          "login": "h5bp-bot",
          "commits": 26,
          "avatar_url": "https://avatars.githubusercontent.com/u/8667317?v=4"
        },
        {
          "type": "User",
          "login": "darktable",
          "commits": 20,
          "avatar_url": "https://avatars.githubusercontent.com/u/585604?v=4"
        }
      ],
      "contributors_sampled": 98,
      "top_contributor_share": 0.231
    },
    "quality_signals": {
      "has_ci": true,
      "has_tests": true,
      "ci_workflows": [
        "build-dist.yml",
        "codeql-analysis.yml",
        "dependency-review.yml",
        "ossf-scorecard.yml",
        "publish.yml",
        "push-to-template.yml",
        "spellcheck.yml",
        "test.yml"
      ],
      "has_docs_dir": true,
      "linter_configs": [
        "eslint.config.mjs"
      ],
      "has_editorconfig": true,
      "has_linter_config": true,
      "has_precommit_config": false
    },
    "security_signals": {
      "lockfiles": [
        "package-lock.json"
      ],
      "scorecard": {
        "checks": [
          {
            "name": "Binary-Artifacts",
            "score": 10,
            "reason": "no binaries found in the repo",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#binary-artifacts"
          },
          {
            "name": "Branch-Protection",
            "score": 0,
            "reason": "branch protection not enabled on development/release branches",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#branch-protection"
          },
          {
            "name": "CI-Tests",
            "score": null,
            "reason": "no pull request found",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#ci-tests"
          },
          {
            "name": "CII-Best-Practices",
            "score": 0,
            "reason": "no effort to earn an OpenSSF best practices badge detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#cii-best-practices"
          },
          {
            "name": "Code-Review",
            "score": 0,
            "reason": "Found 0/30 approved changesets -- score normalized to 0",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#code-review"
          },
          {
            "name": "Contributors",
            "score": 10,
            "reason": "project has 82 contributing companies or organizations",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#contributors"
          },
          {
            "name": "Dangerous-Workflow",
            "score": 10,
            "reason": "no dangerous workflow patterns detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dangerous-workflow"
          },
          {
            "name": "Dependency-Update-Tool",
            "score": 10,
            "reason": "update tool detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dependency-update-tool"
          },
          {
            "name": "Fuzzing",
            "score": 0,
            "reason": "project is not fuzzed",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#fuzzing"
          },
          {
            "name": "License",
            "score": 10,
            "reason": "license file detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#license"
          },
          {
            "name": "Maintained",
            "score": 10,
            "reason": "22 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#maintained"
          },
          {
            "name": "Packaging",
            "score": null,
            "reason": "packaging workflow not detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#packaging"
          },
          {
            "name": "Pinned-Dependencies",
            "score": 8,
            "reason": "dependency not pinned by hash detected -- score normalized to 8",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#pinned-dependencies"
          },
          {
            "name": "SAST",
            "score": 10,
            "reason": "SAST tool detected: CodeQL",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#sast"
          },
          {
            "name": "Security-Policy",
            "score": 0,
            "reason": "security policy file not detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#security-policy"
          },
          {
            "name": "Signed-Releases",
            "score": null,
            "reason": "no releases found",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#signed-releases"
          },
          {
            "name": "Token-Permissions",
            "score": 0,
            "reason": "detected GitHub workflow tokens with excessive permissions",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#token-permissions"
          },
          {
            "name": "Vulnerabilities",
            "score": 8,
            "reason": "2 existing vulnerabilities detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#vulnerabilities"
          }
        ],
        "commit": "b7e31d67f4cf83e23d51f4decc73618bf8bd77ba",
        "ran_at": "2026-07-23T12:26:20Z",
        "aggregate_score": 5.8,
        "scorecard_version": "v5.5.0"
      },
      "has_codeql_workflow": true,
      "has_security_policy": false,
      "has_dependabot_config": true
    },
    "contribution_flow": {
      "collected": true,
      "ci_last_run_at": "2026-07-21T12:58:21Z",
      "oldest_open_prs": [
        {
          "number": 2,
          "created_at": "2025-09-09T18:50:21Z",
          "last_comment_at": null,
          "last_comment_author": null
        }
      ],
      "last_merged_pr_at": null,
      "ci_last_conclusion": "SUCCESS",
      "oldest_open_issues": []
    }
  },
  "config": {
    "disabled_metrics": [],
    "disabled_categories": [],
    "disabled_components": {}
  },
  "source": {
    "url": "https://github.com/roblarsen/html5-boilerplate",
    "host": "github.com",
    "name": "html5-boilerplate",
    "owner": "roblarsen"
  },
  "metrics": {
    "overall": {
      "key": "overall",
      "band": "moderate",
      "name": "Overall health",
      "note": null,
      "notes": [],
      "value": 52,
      "inputs": {
        "security": 66,
        "vitality": 55,
        "community": 20,
        "governance": 50,
        "engineering": 69
      },
      "components": []
    },
    "categories": [
      {
        "key": "vitality",
        "band": "moderate",
        "name": "Vitality",
        "value": 55,
        "weight": 0.22,
        "metrics": [
          {
            "key": "development_activity",
            "band": "moderate",
            "name": "Development activity",
            "note": null,
            "notes": [],
            "value": 62,
            "inputs": {
              "commits_last_year": 53,
              "human_commit_share": 0.26,
              "days_since_last_push": 20,
              "active_weeks_last_year": 11
            },
            "components": [
              {
                "key": "push_recency",
                "name": "Push recency",
                "detail": "last push 20 days ago",
                "points": 28.8,
                "status": "partial",
                "details": [
                  {
                    "code": "push_recency",
                    "params": {
                      "days": 20
                    }
                  }
                ],
                "max_points": 36
              },
              {
                "key": "commit_cadence",
                "name": "Commit cadence",
                "detail": "11/52 weeks with commits",
                "points": 7.6,
                "status": "partial",
                "details": [
                  {
                    "code": "commit_cadence_weeks",
                    "params": {
                      "weeks": 11
                    }
                  }
                ],
                "max_points": 36
              },
              {
                "key": "commit_volume",
                "name": "Commit volume",
                "detail": "53 commits in the last year",
                "points": 15.6,
                "status": "partial",
                "details": [
                  {
                    "code": "commits_last_year",
                    "params": {
                      "count": 53
                    }
                  }
                ],
                "max_points": 18
              },
              {
                "key": "openssf_scorecard_maintained",
                "name": "OpenSSF Scorecard: Maintained",
                "detail": "22 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10",
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "release_discipline",
            "band": "at_risk",
            "name": "Release discipline",
            "note": "Excluded from scoring (no data or not applicable): OpenSSF Scorecard: Signed-Releases. Remaining weights renormalized.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "openssf_scorecard_signed_releases"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              }
            ],
            "value": 44,
            "inputs": {
              "releases_count": 1,
              "latest_release_tag": "v0.0.1",
              "releases_from_tags": false,
              "days_since_latest_release": 2451,
              "mean_days_between_releases": null
            },
            "components": [
              {
                "key": "ships_releases",
                "name": "Ships releases",
                "detail": "1 releases published",
                "points": 27,
                "status": "met",
                "details": [
                  {
                    "code": "releases_published",
                    "params": {
                      "count": 1
                    }
                  }
                ],
                "max_points": 27
              },
              {
                "key": "release_recency",
                "name": "Release recency",
                "detail": "latest release 2451 days ago",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "release_recency",
                    "params": {
                      "days": 2451
                    }
                  }
                ],
                "max_points": 36
              },
              {
                "key": "release_cadence",
                "name": "Release cadence",
                "detail": "cadence unknown (single release)",
                "points": 12.6,
                "status": "partial",
                "details": [
                  {
                    "code": "release_cadence_unknown",
                    "params": {}
                  }
                ],
                "max_points": 27
              },
              {
                "key": "openssf_scorecard_signed_releases",
                "name": "OpenSSF Scorecard: Signed-Releases",
                "detail": "no releases found",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_data",
                    "params": {}
                  }
                ],
                "max_points": 10
              }
            ]
          },
          {
            "key": "abandonment",
            "band": "excellent",
            "name": "Abandonment",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "cap": null,
              "state": "maintained",
              "guards": [],
              "signals": [],
              "red_flag": false,
              "multiplier_pct": 100,
              "declared_reason": null,
              "unverified_reason": null,
              "unanswered_open_prs": null,
              "unanswered_open_issues": null,
              "days_since_last_merged_pr": null,
              "days_since_last_human_commit": 21,
              "days_since_last_human_commit_is_floor": false
            },
            "components": [
              {
                "key": "project_is_still_maintained",
                "name": "Project is still maintained",
                "detail": "last human commit 21 days ago",
                "points": 100,
                "status": "met",
                "details": [
                  {
                    "code": "abandonment_maintained",
                    "params": {
                      "days": 21
                    }
                  }
                ],
                "max_points": 100
              }
            ]
          }
        ],
        "description": "Is the project alive — is code being written and are releases shipping?"
      },
      {
        "key": "community",
        "band": "critical",
        "name": "Community & Adoption",
        "value": 20,
        "weight": 0.18,
        "metrics": [
          {
            "key": "popularity",
            "band": "critical",
            "name": "Popularity & adoption",
            "note": null,
            "notes": [],
            "value": 16,
            "inputs": {
              "forks": 2,
              "stars": 11,
              "watchers": 1,
              "growth_state": "unverified",
              "growth_factor_pct": 100,
              "growth_unverified_reason": "no_history"
            },
            "components": [
              {
                "key": "stars",
                "name": "Stars",
                "detail": "11 stars",
                "points": 16.2,
                "status": "partial",
                "details": [
                  {
                    "code": "stars",
                    "params": {
                      "count": 11
                    }
                  }
                ],
                "max_points": 60
              },
              {
                "key": "forks",
                "name": "Forks",
                "detail": "2 forks",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "forks",
                    "params": {
                      "count": 2
                    }
                  }
                ],
                "max_points": 25
              },
              {
                "key": "watchers",
                "name": "Watchers",
                "detail": "1 watchers",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "watchers",
                    "params": {
                      "count": 1
                    }
                  }
                ],
                "max_points": 15
              }
            ]
          },
          {
            "key": "community_health",
            "band": "critical",
            "name": "Community health",
            "note": null,
            "notes": [],
            "value": 25,
            "inputs": {
              "has_readme": false,
              "has_license": false,
              "has_contributing": false,
              "has_issue_template": false,
              "has_code_of_conduct": false,
              "has_pull_request_template": false
            },
            "components": [
              {
                "key": "readme",
                "name": "README",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 22.5
              },
              {
                "key": "license",
                "name": "License",
                "detail": "recognized license (MIT)",
                "points": 22.5,
                "status": "met",
                "details": [
                  {
                    "code": "license_standard",
                    "params": {}
                  },
                  {
                    "code": "license_spdx",
                    "params": {
                      "spdx": "MIT"
                    }
                  }
                ],
                "max_points": 22.5
              },
              {
                "key": "contributing_guide",
                "name": "CONTRIBUTING guide",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 18
              },
              {
                "key": "code_of_conduct",
                "name": "Code of conduct",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 13.5
              },
              {
                "key": "issue_template",
                "name": "Issue template",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.2
              },
              {
                "key": "pr_template",
                "name": "PR template",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 6.3
              }
            ]
          }
        ],
        "description": "Does the project have users, downloads, attention, and a welcoming setup for contributors?"
      },
      {
        "key": "governance",
        "band": "moderate",
        "name": "Sustainability & Governance",
        "value": 50,
        "weight": 0.24,
        "metrics": [
          {
            "key": "maintainer_resilience",
            "band": "good",
            "name": "Maintainer resilience (bus factor)",
            "note": null,
            "notes": [],
            "value": 77,
            "inputs": {
              "bus_factor": 3,
              "contributors_sampled": 98,
              "top_contributor_share": 0.231
            },
            "components": [
              {
                "key": "bus_factor",
                "name": "Bus factor",
                "detail": "3 contributor(s) cover half of all commits",
                "points": 36,
                "status": "partial",
                "details": [
                  {
                    "code": "bus_factor",
                    "params": {
                      "count": 3
                    }
                  }
                ],
                "max_points": 54
              },
              {
                "key": "commit_distribution",
                "name": "Commit distribution",
                "detail": "top contributor authored 23% of commits",
                "points": 17.3,
                "status": "partial",
                "details": [
                  {
                    "code": "top_contributor_share",
                    "params": {
                      "share": 23
                    }
                  }
                ],
                "max_points": 22.5
              },
              {
                "key": "contributor_breadth",
                "name": "Contributor breadth",
                "detail": "98 contributors",
                "points": 13.5,
                "status": "met",
                "details": [
                  {
                    "code": "contributors_sampled",
                    "params": {
                      "count": 98
                    }
                  }
                ],
                "max_points": 13.5
              },
              {
                "key": "openssf_scorecard_contributors",
                "name": "OpenSSF Scorecard: Contributors",
                "detail": "project has 82 contributing companies or organizations",
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "responsiveness",
            "band": "critical",
            "name": "Issue & PR responsiveness",
            "note": "Excluded from scoring (no data or not applicable): Issue resolution. Remaining weights renormalized.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "issue_resolution"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              }
            ],
            "value": 1,
            "inputs": {
              "merged_prs": 0,
              "open_issues": 0,
              "closed_issues": 0,
              "issue_closed_ratio": null,
              "closed_unmerged_prs": 1
            },
            "components": [
              {
                "key": "issue_resolution",
                "name": "Issue resolution",
                "detail": "no issues or no data",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_issues_or_data",
                    "params": {}
                  }
                ],
                "max_points": 46.75
              },
              {
                "key": "pr_acceptance",
                "name": "PR acceptance",
                "detail": "0/1 decided PRs merged",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "decided_prs_merged",
                    "params": {
                      "merged": 0,
                      "decided": 1
                    }
                  }
                ],
                "max_points": 38.25
              },
              {
                "key": "openssf_scorecard_code_review",
                "name": "OpenSSF Scorecard: Code-Review",
                "detail": "Found 0/30 approved changesets -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 15
              }
            ]
          },
          {
            "key": "stewardship",
            "band": "moderate",
            "name": "Ownership & stewardship",
            "note": "Excluded from scoring (no data or not applicable): Verified domain. Remaining weights renormalized.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "verified_domain"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              }
            ],
            "value": 68,
            "inputs": {
              "followers": 548,
              "owner_type": "User",
              "is_verified": null,
              "owner_login": "roblarsen",
              "public_repos": 74,
              "account_age_days": 5824
            },
            "components": [
              {
                "key": "ownership_backing",
                "name": "Ownership backing",
                "detail": "personal (user) account",
                "points": 10,
                "status": "partial",
                "details": [
                  {
                    "code": "owner_personal",
                    "params": {}
                  }
                ],
                "max_points": 30
              },
              {
                "key": "verified_domain",
                "name": "Verified domain",
                "detail": "not applicable to user accounts",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "not_applicable_to_user_accounts",
                    "params": {}
                  }
                ],
                "max_points": 20
              },
              {
                "key": "owner_reach",
                "name": "Owner reach",
                "detail": "548 followers of roblarsen",
                "points": 19.7,
                "status": "partial",
                "details": [
                  {
                    "code": "owner_followers",
                    "params": {
                      "count": 548,
                      "login": "roblarsen"
                    }
                  }
                ],
                "max_points": 25
              },
              {
                "key": "track_record",
                "name": "Track record",
                "detail": "74 public repos, account ~15 yr old",
                "points": 25,
                "status": "met",
                "details": [
                  {
                    "code": "public_repos",
                    "params": {
                      "count": 74
                    }
                  },
                  {
                    "code": "account_age_years",
                    "params": {
                      "years": 15
                    }
                  }
                ],
                "max_points": 25
              }
            ]
          }
        ],
        "description": "Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?"
      },
      {
        "key": "engineering",
        "band": "moderate",
        "name": "Engineering Quality",
        "value": 69,
        "weight": 0.2,
        "metrics": [
          {
            "key": "engineering_practices",
            "band": "excellent",
            "name": "Engineering practices",
            "note": "Excluded from scoring (no data or not applicable): OpenSSF Scorecard: CI-Tests. Remaining weights renormalized.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "openssf_scorecard_ci_tests"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              }
            ],
            "value": 88,
            "inputs": {
              "has_ci": true,
              "has_tests": true,
              "has_editorconfig": true,
              "has_linter_config": true,
              "has_precommit_config": false
            },
            "components": [
              {
                "key": "ci_workflows",
                "name": "CI workflows",
                "detail": "8 workflow(s)",
                "points": 24,
                "status": "met",
                "details": [
                  {
                    "code": "ci_workflows",
                    "params": {
                      "count": 8
                    }
                  }
                ],
                "max_points": 24
              },
              {
                "key": "tests_present",
                "name": "Tests present",
                "detail": null,
                "points": 24,
                "status": "met",
                "details": [],
                "max_points": 24
              },
              {
                "key": "linter_config",
                "name": "Linter config",
                "detail": "eslint.config.mjs",
                "points": 16,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": "eslint.config.mjs"
                    }
                  }
                ],
                "max_points": 16
              },
              {
                "key": "pre_commit_hooks",
                "name": "Pre-commit hooks",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 9.6
              },
              {
                "key": "editorconfig",
                "name": ".editorconfig",
                "detail": null,
                "points": 6.4,
                "status": "met",
                "details": [],
                "max_points": 6.4
              },
              {
                "key": "openssf_scorecard_ci_tests",
                "name": "OpenSSF Scorecard: CI-Tests",
                "detail": "no pull request found",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_data",
                    "params": {}
                  }
                ],
                "max_points": 20
              }
            ]
          },
          {
            "key": "documentation",
            "band": "at_risk",
            "name": "Documentation",
            "note": null,
            "notes": [],
            "value": 40,
            "inputs": {
              "topics": [],
              "has_wiki": false,
              "homepage": "http://html5boilerplate.com",
              "has_readme": false,
              "has_docs_dir": true,
              "has_description": false
            },
            "components": [
              {
                "key": "readme",
                "name": "README",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 30
              },
              {
                "key": "documentation_directory",
                "name": "Documentation directory",
                "detail": null,
                "points": 25,
                "status": "met",
                "details": [],
                "max_points": 25
              },
              {
                "key": "documentation_homepage_site",
                "name": "Documentation / homepage site",
                "detail": "http://html5boilerplate.com",
                "points": 15,
                "status": "met",
                "details": [],
                "max_points": 15
              },
              {
                "key": "repository_description",
                "name": "Repository description",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 10
              },
              {
                "key": "topics",
                "name": "Topics",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 10
              },
              {
                "key": "wiki",
                "name": "Wiki",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 10
              }
            ]
          }
        ],
        "description": "Are baseline engineering and documentation practices in place?"
      },
      {
        "key": "security",
        "band": "moderate",
        "name": "Security",
        "value": 66,
        "weight": 0.16,
        "metrics": [
          {
            "key": "security_posture",
            "band": "moderate",
            "name": "Security posture",
            "note": "Excluded from scoring (no data or not applicable): CI-Tests, Packaging, Signed-Releases. Remaining weights renormalized.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "ci_tests",
                    "packaging",
                    "signed_releases"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              }
            ],
            "value": 58,
            "inputs": {
              "source": "openssf_scorecard",
              "checks_evaluated": 15,
              "scorecard_version": "v5.5.0",
              "checks_inconclusive": 3,
              "scorecard_aggregate": 5.8
            },
            "components": [
              {
                "key": "binary_artifacts",
                "name": "Binary-Artifacts",
                "detail": "no binaries found in the repo",
                "points": 7.5,
                "status": "met",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "branch_protection",
                "name": "Branch-Protection",
                "detail": "branch protection not enabled on development/release branches",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "ci_tests",
                "name": "CI-Tests",
                "detail": "no pull request found",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_data",
                    "params": {}
                  }
                ],
                "max_points": 2.5
              },
              {
                "key": "cii_best_practices",
                "name": "CII-Best-Practices",
                "detail": "no effort to earn an OpenSSF best practices badge detected",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "code_review",
                "name": "Code-Review",
                "detail": "Found 0/30 approved changesets -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "contributors",
                "name": "Contributors",
                "detail": "project has 82 contributing companies or organizations",
                "points": 2.5,
                "status": "met",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "dangerous_workflow",
                "name": "Dangerous-Workflow",
                "detail": "no dangerous workflow patterns detected",
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              },
              {
                "key": "dependency_update_tool",
                "name": "Dependency-Update-Tool",
                "detail": "update tool detected",
                "points": 7.5,
                "status": "met",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "fuzzing",
                "name": "Fuzzing",
                "detail": "project is not fuzzed",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 5
              },
              {
                "key": "license",
                "name": "License",
                "detail": "license file detected",
                "points": 2.5,
                "status": "met",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "maintained",
                "name": "Maintained",
                "detail": "22 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10",
                "points": 7.5,
                "status": "met",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "packaging",
                "name": "Packaging",
                "detail": "packaging workflow not detected",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_data",
                    "params": {}
                  }
                ],
                "max_points": 5
              },
              {
                "key": "pinned_dependencies",
                "name": "Pinned-Dependencies",
                "detail": "dependency not pinned by hash detected -- score normalized to 8",
                "points": 4,
                "status": "partial",
                "details": [],
                "max_points": 5
              },
              {
                "key": "sast",
                "name": "SAST",
                "detail": "SAST tool detected: CodeQL",
                "points": 5,
                "status": "met",
                "details": [],
                "max_points": 5
              },
              {
                "key": "security_policy",
                "name": "Security-Policy",
                "detail": "security policy file not detected",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 5
              },
              {
                "key": "signed_releases",
                "name": "Signed-Releases",
                "detail": "no releases found",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_data",
                    "params": {}
                  }
                ],
                "max_points": 7.5
              },
              {
                "key": "token_permissions",
                "name": "Token-Permissions",
                "detail": "detected GitHub workflow tokens with excessive permissions",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "vulnerabilities",
                "name": "Vulnerabilities",
                "detail": "2 existing vulnerabilities detected",
                "points": 6,
                "status": "partial",
                "details": [],
                "max_points": 7.5
              }
            ]
          },
          {
            "key": "dependency_advisories",
            "band": "excellent",
            "name": "Dependency advisories",
            "note": "Excluded from scoring (no data or not applicable): Indirect dependencies free of known advisories, No advisories left outstanding. Remaining weights renormalized. Matched 343 resolved dependencies against OSV; 6 could not be assessed (no resolved version, an unsupported ecosystem, or beyond the reported package list). This repository publishes no package the index resolves, so the repository dependency graph was assessed instead. That graph mixes development and test pins with shipped dependencies, so only the declared runtime dependencies are scored; transitive findings are reported as context and excluded from the score. Reachability is not analyzed.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "indirect_dependencies_free_of_known_advisories",
                    "no_advisories_left_outstanding"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              },
              {
                "code": "advisories_scope_repository",
                "params": {
                  "assessed": 343
                }
              },
              {
                "code": "advisories_unassessed",
                "params": {
                  "count": 6
                }
              },
              {
                "code": "advisories_repo_graph_caveat",
                "params": {}
              },
              {
                "code": "advisories_reachability",
                "params": {}
              }
            ],
            "value": 100,
            "inputs": {
              "source": "osv",
              "advisories": 3,
              "affected_packages": 3,
              "assessed_packages": 343,
              "unassessed_packages": 6,
              "affected_by_severity": "high 3",
              "direct_affected_packages": 0
            },
            "components": [
              {
                "key": "direct_dependencies_free_of_known_advisories",
                "name": "Direct dependencies free of known advisories",
                "detail": "no direct dependency carries a known advisory",
                "points": 35,
                "status": "met",
                "details": [
                  {
                    "code": "no_direct_advisories",
                    "params": {}
                  }
                ],
                "max_points": 35
              },
              {
                "key": "indirect_dependencies_free_of_known_advisories",
                "name": "Indirect dependencies free of known advisories",
                "detail": "transitive set not separable from development and test dependencies in this scope",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "advisories_scope_not_separable",
                    "params": {}
                  }
                ],
                "max_points": 25
              },
              {
                "key": "no_advisories_left_outstanding",
                "name": "No advisories left outstanding",
                "detail": "no advisory carries a publication date",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "advisories_no_publication_date",
                    "params": {}
                  }
                ],
                "max_points": 40
              }
            ]
          },
          {
            "key": "malicious_dependencies",
            "band": "excellent",
            "name": "Malicious dependencies",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "source": "osv",
              "meaning": "reported as a malicious package by the OpenSSF corpus; the remedy is removal or moving off the compromised name, never an upgrade of the same artifact. Versions the registry has since pulled are listed but not scored",
              "packages": [],
              "red_flag": false,
              "assessed_packages": 343,
              "malicious_packages": 0,
              "direct_malicious_packages": 0,
              "withdrawn_malicious_packages": 0,
              "installable_malicious_packages": 0
            },
            "components": [
              {
                "key": "no_dependency_reported_as_a_malicious_package",
                "name": "No dependency reported as a malicious package",
                "detail": "no dependency is reported as a malicious package",
                "points": 100,
                "status": "met",
                "details": [
                  {
                    "code": "no_malicious_dependencies",
                    "params": {}
                  }
                ],
                "max_points": 100
              }
            ]
          },
          {
            "key": "high_risk_jurisdiction_exposure",
            "band": "excellent",
            "name": "High-Risk Jurisdiction Exposure",
            "note": "Only high-confidence self-published location evidence affects this multiplier. Ambiguous matches are review-only; country evidence is not proof of nationality, citizenship, legal registration, malicious intent, or sanctions status.",
            "notes": [
              {
                "code": "jurisdiction_evidence_limits",
                "params": {}
              }
            ],
            "value": 100,
            "inputs": {
              "meaning": "self-published location evidence; not nationality or citizenship",
              "red_flag": false,
              "exposures": [],
              "policy_countries": [
                "Russia",
                "Iran",
                "North Korea"
              ],
              "review_only_matches": 0,
              "assessed_self_published_locations": 27
            },
            "components": [
              {
                "key": "policy_exposure_multiplier",
                "name": "Policy exposure multiplier",
                "detail": "no confirmed policy-scope location match",
                "points": 100,
                "status": "met",
                "details": [
                  {
                    "code": "jurisdiction_no_match",
                    "params": {}
                  }
                ],
                "max_points": 100
              }
            ]
          }
        ],
        "description": "Are visible security and supply-chain practices strong, with no malicious dependency and no unresolved high-risk jurisdiction exposure?"
      },
      {
        "key": "ai_readiness",
        "band": "moderate",
        "name": "AI Readiness",
        "value": 56,
        "weight": 0,
        "metrics": [
          {
            "key": "ai_agent_context",
            "band": "at_risk",
            "name": "Agent context & guidance",
            "note": null,
            "notes": [],
            "value": 40,
            "inputs": {
              "has_llms_txt": false,
              "legible_history_share": 0.962,
              "agent_instruction_files": [],
              "agent_instruction_max_bytes": null
            },
            "components": [
              {
                "key": "agent_instructions",
                "name": "Agent instructions",
                "detail": "no CLAUDE.md / AGENTS.md / editor rules",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "no_agent_instructions",
                    "params": {}
                  }
                ],
                "max_points": 45
              },
              {
                "key": "machine_readable_docs_llms_txt",
                "name": "Machine-readable docs (llms.txt)",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 15
              },
              {
                "key": "legible_commit_history",
                "name": "Legible commit history",
                "detail": "25 of 26 human commits state their intent (structured subject or explanatory body)",
                "points": 40,
                "status": "met",
                "details": [
                  {
                    "code": "legible_history",
                    "params": {
                      "legible": 25,
                      "sampled": 26
                    }
                  }
                ],
                "max_points": 40
              }
            ]
          },
          {
            "key": "ai_verify_loop",
            "band": "moderate",
            "name": "Verify loop (build / test / typecheck)",
            "note": null,
            "notes": [],
            "value": 69,
            "inputs": {
              "has_nix": false,
              "has_tests": true,
              "lockfiles": [
                "package-lock.json"
              ],
              "has_dockerfile": false,
              "typed_language": false,
              "bootstrap_files": [],
              "has_devcontainer": false,
              "has_linter_config": true,
              "typecheck_configs": [],
              "agent_commit_share": 0.05,
              "toolchain_manifests": [],
              "dependency_bot_commit_share": 0.73
            },
            "components": [
              {
                "key": "one_command_bootstrap",
                "name": "One-command bootstrap",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 18
              },
              {
                "key": "automated_tests",
                "name": "Automated tests",
                "detail": null,
                "points": 22,
                "status": "met",
                "details": [],
                "max_points": 22
              },
              {
                "key": "lint_format_config",
                "name": "Lint / format config",
                "detail": "eslint.config.mjs",
                "points": 11,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": "eslint.config.mjs"
                    }
                  }
                ],
                "max_points": 11
              },
              {
                "key": "static_type_checking",
                "name": "Static type checking",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 11
              },
              {
                "key": "reproducible_environment",
                "name": "Reproducible environment",
                "detail": "lockfile",
                "points": 10,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": "lockfile"
                    }
                  }
                ],
                "max_points": 10
              },
              {
                "key": "demonstrated_agent_practice",
                "name": "Demonstrated agent practice",
                "detail": "5 of the last 100 commits agent-authored or agent-credited",
                "points": 10,
                "status": "met",
                "details": [
                  {
                    "code": "agent_authored_commits",
                    "params": {
                      "count": 5,
                      "sampled": 100
                    }
                  }
                ],
                "max_points": 10
              },
              {
                "key": "automated_maintenance",
                "name": "Automated maintenance",
                "detail": "73 of the last 100 commits are automated dependency updates",
                "points": 8,
                "status": "met",
                "details": [
                  {
                    "code": "dependency_bot_commits",
                    "params": {
                      "count": 73,
                      "sampled": 100
                    }
                  }
                ],
                "max_points": 8
              },
              {
                "key": "openssf_scorecard_pinned_dependencies",
                "name": "OpenSSF Scorecard: Pinned-Dependencies",
                "detail": "dependency not pinned by hash detected -- score normalized to 8",
                "points": 8,
                "status": "partial",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "ai_code_legibility",
            "band": "moderate",
            "name": "Code legibility for models",
            "note": null,
            "notes": [],
            "value": 55,
            "inputs": {
              "primary_language": "JavaScript",
              "largest_source_bytes": 3644,
              "source_files_sampled": 8,
              "oversized_source_files": 0
            },
            "components": [
              {
                "key": "type_checkable_code",
                "name": "Type-checkable code",
                "detail": "JavaScript without a type-check config",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "no_typecheck_config_language",
                    "params": {
                      "language": "JavaScript"
                    }
                  }
                ],
                "max_points": 45
              },
              {
                "key": "manageable_file_sizes",
                "name": "Manageable file sizes",
                "detail": "0/8 source files over 60KB",
                "points": 55,
                "status": "met",
                "details": [
                  {
                    "code": "oversized_source_files",
                    "params": {
                      "kb": 60,
                      "sampled": 8,
                      "oversized": 0
                    }
                  }
                ],
                "max_points": 55
              }
            ]
          }
        ],
        "description": "How well is the repo equipped to be developed and maintained with AI coding agents? An independent, experimental badge — weight 0.0, so it is surfaced on its own and does not affect the overall health score."
      }
    ],
    "metrics_version": "1.13.0"
  },
  "warnings": [
    "Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token",
    "Community profile unavailable",
    "npm package 'html5-boilerplate' points at a different repository (https://github.com/h5bp/html5-boilerplate); excluded from ecosystem scoring"
  ],
  "report_type": "repository",
  "generated_at": "2026-07-23T12:26:36.525923Z",
  "schema_version": "0.27.0",
  "badge_url": "https://raw.githubusercontent.com/inspect-software/badges/main/v1/r/roblarsen/html5-boilerplate.svg",
  "full_name": "roblarsen/html5-boilerplate",
  "license_state": "standard",
  "license_spdx": "MIT"
}

评分是信号，而非担保。 评分反映的是 GitHub 上公开可见的实践——不是代码审计，也不是安全保证。

缺失数据将被剔除并重新归一化权重，绝不按零分计。方法论已版本化并公开：指标 v1.13.0、模式 v0.27.0—— 完整方法论 · 指标知识库.

单项结果在整体记录中的位置：汇总统计 — npm.

36/54	巴士系数 — 3 位贡献者贡献了半数提交
17.3/22.5	提交分布 — 头号贡献者编写了 23% 的提交
13.5/13.5	贡献者广度 — 98 位贡献者
10/10	OpenSSF Scorecard：Contributors — project has 82 contributing companies or organizations

0/46.8	议题解决 — 没有议题或无数据
0/38.3	PR 接受 — 已裁定的 PR 中 0/1 已合并
0/15	OpenSSF Scorecard：Code-Review — Found 0/30 approved changesets -- score normalized to 0

10/30	所有权背书 — 个人（用户）账户
0/20	已验证域名 — 不适用于个人账户
19.7/25	所有者影响力 — roblarsen 有 548 位关注者
25/25	既往记录 — 74 个公开仓库，账户约 15 年

roblarsen / html5-boilerplate

软件健康指数

评分画像

所有权

软件包生态系统

按类别列示的指标

活力

开发活跃度

发布纪律

社区与采用

流行度与采用

社区健康

可持续性与治理

维护者韧性（巴士系数）

议题与 PR 响应能力

所有权与托管责任

工程质量

工程实践

文档

安全

安全态势

依赖安全公告

AI 就绪度

AI 代理上下文与指引

验证循环（构建 / 测试 / 类型检查）

面向模型的代码可读性

关键数据

数据采集警告

更多细节

merged_prs	0
open_issues	0
closed_issues	0
issue_closed_ratio	—
closed_unmerged_prs	1

followers	548
owner_type	User
is_verified	—
owner_login	roblarsen
public_repos	74
account_age_days	5,824

bus_factor	3
contributors_sampled	98
top_contributor_share	0.231

软件健康指数

评分画像

所有权

软件包生态系统

按类别列示的指标

关键数据

数据采集警告

更多细节

相关记录