公开记录良好
软件健康报告模式 0.27.0 · 指标 1.13.0 · 2026-07-27 12:55 UTC
runtm-ai / runtm
Open-source sandboxes where coding agents build and deploy. Spin up isolated environments where Claude Code, Cursor, and other agents code and deploy software.
runtm-ai/runtm 的健康指数为 100 分中的 70 分，处于「良好」区间。 其得分最高的类别是Engineering Quality（96/100），最低的是Sustainability & Governance（46/100）。 最近一次更新在 2 天前。 近期的大部分工作由 1 位贡献者完成。
70
总分 / 100软件健康指数
指标归入加权类别，统一采用 1–100 量表。总体分先取类别加权平均；当公开证据触发高风险司法辖区政策时，评级会按政策调整，并设置 49（有风险）的上限。AI 就绪度不计入总体分。
70
优秀85-100堪称典范；基本满足所有检验标准
良好70-84健康；仅有轻微不足
中等50-69可接受，但存在明显不足；建议进行审查
存在风险30-49存在重大薄弱环节；采用时应保持审慎
危急1-29问题严重（项目被弃置、仅有单一维护者、缺乏基本工程规范）
评分画像
每条轴代表一个类别。形状比平均值更重要——健康的对象会填满整个图形，而“一峰一谷”式画像意味着某一维度的优势正掩盖另一维度的风险。
所有权
软件包生态系统
| 注册表 | 软件包 | 版本 | 月下载量 | 版本数 | 最近发布 | 标签 |
|---|---|---|---|---|---|---|
| PyPI | runtm | 0.2.132 | - | 34 | 2 天前 | aiclideploymentdevopsfly.ioserverless |
按类别列示的指标
活力
项目是否仍有生命——是否仍在编写代码，是否仍在发布版本？
82
开发活跃度
77良好
评分方式
| 36/36 | 推送新近度 — 最近一次推送于 2 天前 |
| 13.2/36 | 提交节奏 — 52 周中有 19 周有提交 |
| 17.8/18 | 提交量 — 最近一年 94 次提交 |
| 10/10 | OpenSSF Scorecard：Maintained — 30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10 |
所用输入
| commits_last_year | 94 |
| human_commit_share | 1 |
| days_since_last_push | 2 |
| active_weeks_last_year | 19 |
发布纪律
90优秀
评分方式
| 27/27 | 有发布版本 — 已发布 13 个发布版本 |
| 36/36 | 发布时效 — 最近一次发布版本于 2 天前 |
| 27/27 | 发布节奏 — 约每 4.3 天发布一次 |
| 0/10 | OpenSSF Scorecard：Signed-Releases — Project has not signed or included provenance with any releases. |
所用输入
| releases_count | 13 |
| latest_release_tag | packages/agent/v0.0.13 |
| releases_from_tags | 否 |
| days_since_latest_release | 2 |
| mean_days_between_releases | 4.3 |
社区与采用
项目是否拥有用户、下载量与关注度，并具备欢迎贡献者参与的配置？
68
流行度与采用
52中等
评分方式
| 39.8/60 | 星标 — 286 个星标 |
| 12.3/25 | 复刻 — 31 个复刻 |
| 0/15 | 关注者 — 2 位关注者 |
所用输入
| forks | 31 |
| stars | 286 |
| watchers | 2 |
| growth_state | unverified |
| growth_factor_pct | 100 |
| growth_unverified_reason | no_history |
社区健康
86优秀
评分方式
| 22.5/22.5 | README |
| 16.9/22.5 | 许可证 — 存在许可证文件，但不是可识别的许可证 |
| 18/18 | CONTRIBUTING 指南 |
| 13.5/13.5 | 行为准则 |
| 0/7.2 | 议题模板 |
| 6.3/6.3 | PR 模板 |
所用输入
| has_readme | 是 |
| has_license | 是 |
| has_contributing | 是 |
| has_issue_template | 否 |
| has_code_of_conduct | 是 |
| has_pull_request_template | 是 |
可持续性与治理
项目能否在其成员之外延续——巴士系数、响应能力、由谁支持，以及软件包的维护状况？
46
维护者韧性（巴士系数）
18危急
评分方式
| 9/54 | 巴士系数 — 1 位贡献者贡献了半数提交 |
| 5.1/22.5 | 提交分布 — 头号贡献者编写了 77% 的提交 |
| 4.1/13.5 | 贡献者广度 — 3 位贡献者 |
| 0/10 | OpenSSF Scorecard：Contributors — project has 0 contributing companies or organizations -- score normalized to 0 |
所用输入
| bus_factor | 1 |
| contributors_sampled | 3 |
| top_contributor_share | 0.772 |
议题与 PR 响应能力
37存在风险
评分方式
| 0/46.8 | 议题解决 — 0% 的议题已关闭 |
| 35.2/38.3 | PR 接受 — 已裁定的 PR 中 23/25 已合并 |
| 1.5/15 | OpenSSF Scorecard：Code-Review — Found 3/25 approved changesets -- score normalized to 1 |
所用输入
| merged_prs | 23 |
| open_issues | 8 |
| closed_issues | 0 |
| issue_closed_ratio | 0 |
| closed_unmerged_prs | 2 |
所有权与托管责任
45存在风险
评分方式
| 30/30 | 所有权背书 — 组织持有 |
| 0/20 | 已验证域名 |
| 8.5/25 | 所有者影响力 — runtm-ai 有 14 位关注者 |
| 6.3/25 | 既往记录 — 4 个公开仓库，账户约 0 年 |
所用输入
| followers | 14 |
| owner_type | Organization |
| is_verified | — |
| owner_login | runtm-ai |
| public_repos | 4 |
| account_age_days | 223 |
软件包维护
100优秀
评分方式
| 25/25 | 已发布且可解析 — pypi 上有 1 个软件包 |
| 35/35 | 发布时效 — 最近一次发布于 2 天前 |
| 20/20 | 版本历史 — 34 个已发布版本 |
| 20/20 | 未被弃用 — 活跃，未被弃用或撤回 |
所用输入
| packages | runtm |
| ecosystems | pypi |
| any_deprecated | 否 |
| min_days_since_publish | 2 |
工程质量
基础的工程与文档实践是否到位？
96
工程实践
94优秀
评分方式
| 24/24 | CI 工作流 — 4 个工作流 |
| 24/24 | 存在测试 |
| 16/16 | Linter 配置 — .eslintrc.json, ruff.toml |
| 9.6/9.6 | Pre-commit 钩子 |
| 0/6.4 | .editorconfig |
| 20/20 | OpenSSF Scorecard：CI-Tests — 17 out of 17 merged PRs checked by a CI test -- score normalized to 10 |
所用输入
| has_ci | 是 |
| has_tests | 是 |
| has_editorconfig | 否 |
| has_linter_config | 是 |
| has_precommit_config | 是 |
文档
100优秀
评分方式
| 30/30 | README |
| 25/25 | 文档目录 |
| 15/15 | 文档 / 主页站点 — https://www.runtm.com/ |
| 10/10 | 仓库描述 |
| 10/10 | 主题标签 — 18 个主题标签 |
| 10/10 | Wiki |
所用输入
| topics | ai-agents, agent-runtime, agentic, control-plane, ephemeral-environments, infra, llm-tools, llmops, observability, open-source, serverless, app-runtime, anthropic, claude, cursor, openai, claude-code, sandbox |
| has_wiki | 是 |
| homepage | https://www.runtm.com/ |
| has_readme | 是 |
| has_docs_dir | 是 |
| has_description | 是 |
安全
可见的安全与供应链实践是否稳固，且不存在未解决的高风险司法辖区暴露？
59
安全态势
49存在风险
评分方式
| 7.5/7.5 | Binary-Artifacts — no binaries found in the repo |
| 0/7.5 | Branch-Protection — 无数据 |
| 2.5/2.5 | CI-Tests — 17 out of 17 merged PRs checked by a CI test -- score normalized to 10 |
| 0/2.5 | CII-Best-Practices — no effort to earn an OpenSSF best practices badge detected |
| 0.8/7.5 | Code-Review — Found 3/25 approved changesets -- score normalized to 1 |
| 0/2.5 | Contributors — project has 0 contributing companies or organizations -- score normalized to 0 |
| 10/10 | Dangerous-Workflow — no dangerous workflow patterns detected |
| 0/7.5 | Dependency-Update-Tool — no update tool detected |
| 0/5 | Fuzzing — project is not fuzzed |
| 2.2/2.5 | 许可证 — license file detected |
| 7.5/7.5 | Maintained — 30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10 |
| 5/5 | Packaging — packaging workflow detected |
| 0/5 | Pinned-Dependencies — dependency not pinned by hash detected -- score normalized to 0 |
| 0/5 | SAST — SAST tool is not run on all commits -- score normalized to 0 |
| 5/5 | Security-Policy — security policy file detected |
| 0/7.5 | Signed-Releases — Project has not signed or included provenance with any releases. |
| 0/7.5 | Token-Permissions — detected GitHub workflow tokens with excessive permissions |
| 6.8/7.5 | Vulnerabilities — 1 existing vulnerabilities detected |
所用输入
| source | openssf_scorecard |
| checks_evaluated | 17 |
| scorecard_version | v5.5.0 |
| checks_inconclusive | 1 |
| scorecard_aggregate | 4.8 |
已排除计分（无数据或不适用）：branch_protection。 其余权重已重新归一化。
依赖安全公告
100优秀
评分方式
| 35/35 | 直接依赖不含已知公告 — 没有直接依赖携带已知公告 |
| 25/25 | 间接依赖不含已知公告 — 没有间接依赖携带已知公告 |
| 0/40 | 没有长期未处理的公告 — 没有公告带有发布日期 |
所用输入
| source | osv |
| advisories | 0 |
| affected_packages | 0 |
| assessed_packages | 35 |
| unassessed_packages | 0 |
| affected_by_severity | none |
| direct_affected_packages | 0 |
已排除计分（无数据或不适用）：没有长期未处理的公告。 其余权重已重新归一化。 比对的是 pypi:runtm@0.2.132 的运行时依赖闭包——安装已发布的软件包时真正被拉取进来的内容——共 35 个软件包。 未对可达性进行分析。
AI 就绪度
该仓库在多大程度上具备与 AI 编码代理协同开发与维护的条件？这是一枚独立的实验性徽章——权重为 0.0，因此单独呈现，不影响总体健康评分。
80
AI 代理上下文与指引
76良好
评分方式
| 45/45 | 代理指令 — CLAUDE.md, templates/backend-service/AGENT.md, templates/backend-service/CLAUDE.md, templates/docker/AGENT.md, templates/docker/CLAUDE.md, templates/static-site/AGENT.md, templates/static-site/CLAUDE.md, templates/web-app/AGENT.md, templates/web-app/CLAUDE.md |
| 0/15 | 机器可读文档（llms.txt） |
| 30.6/40 | 可读的提交历史 — 94 次人类提交中有 54 次说明了意图（结构化标题或解释性正文） |
所用输入
| has_llms_txt | 否 |
| legible_history_share | 0.574 |
| agent_instruction_files | CLAUDE.md, templates/backend-service/AGENT.md, templates/backend-service/CLAUDE.md, templates/docker/AGENT.md, templates/docker/CLAUDE.md, templates/static-site/AGENT.md, templates/static-site/CLAUDE.md, templates/web-app/AGENT.md, templates/web-app/CLAUDE.md |
| agent_instruction_max_bytes | 16,673 |
评分方式
| 18/18 | 一条命令的引导启动 — packages/agent/Makefile |
| 22/22 | 自动化测试 |
| 11/11 | Lint / 格式化配置 — .eslintrc.json, ruff.toml |
| 11/11 | 静态类型检查 — templates/static-site/tsconfig.json, templates/web-app/frontend/tsconfig.json |
| 10/10 | 可复现环境 — Dockerfile, lockfile |
| 10/10 | 已体现的代理实践 — 最近 94 次提交中有 33 次由代理编写或署名代理 |
| 0/8 | 自动化维护 — 未观察到自动依赖更新 |
| 0/10 | OpenSSF Scorecard：Pinned-Dependencies — dependency not pinned by hash detected -- score normalized to 0 |
所用输入
| has_nix | 否 |
| has_tests | 是 |
| lockfiles | go.sum, uv.lock |
| has_dockerfile | 是 |
| typed_language | 否 |
| bootstrap_files | packages/agent/Makefile |
| has_devcontainer | 否 |
| has_linter_config | 是 |
| typecheck_configs | templates/static-site/tsconfig.json, templates/web-app/frontend/tsconfig.json |
| agent_commit_share | 0.351 |
| toolchain_manifests | packages/agent/go.mod |
| dependency_bot_commit_share | 0 |
面向模型的代码可读性
82良好
评分方式
| 27/45 | 可类型检查的代码 — Python，已配置类型检查（templates/static-site/tsconfig.json, templates/web-app/frontend/tsconfig.json） |
| 55/55 | 可控的文件大小 — 采样的 260 个源文件中有 0 个超过 60KB |
所用输入
| primary_language | Python |
| largest_source_bytes | 57,346 |
| source_files_sampled | 260 |
| oversized_source_files | 0 |
关键数据
286GitHub 星标
3贡献者
94最近 12 个月提交数
2距最近推送天数
13发布版本数
1巴士系数（bus factor）
8开放议题
PyPI软件包生态系统数
数据采集警告
- Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token
- GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository
更多细节
Star 与 Fork 历史 0 ★ / 31 ⇿
0Star
31Fork
12发布
每颗 star 和每个 fork 的添加时间，来自 GitHub 并按天汇总。累计增长位于其构成来源——每日新增——的正上方，二者可相互对照：稳定的自然增长与短暂的突增形态截然不同。当这一差别可被衡量时，它会作为增长真实性予以报告。
主版本 0次版本 0修订 0
OpenSSF Scorecard 4.8 / 10
4.8综合
来自开源项目 OpenSSF Scorecard 的独立、工具无关的安全评估。每项检查奖励的是安全实践本身，而非特定供应商的工具。Scorecard 无法判定的检查项标记为 不适用，并从安全评分中剔除（绝不按零分计）。
| 10 | Binary-Artifacts | no binaries found in the repo |
| 不适用 | Branch-Protection | internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md |
| 10 | CI-Tests | 17 out of 17 merged PRs checked by a CI test -- score normalized to 10 |
| 0 | CII-Best-Practices | no effort to earn an OpenSSF best practices badge detected |
| 1 | Code-Review | Found 3/25 approved changesets -- score normalized to 1 |
| 0 | Contributors | project has 0 contributing companies or organizations -- score normalized to 0 |
| 10 | Dangerous-Workflow | no dangerous workflow patterns detected |
| 0 | Dependency-Update-Tool | no update tool detected |
| 0 | Fuzzing | project is not fuzzed |
| 9 | License | license file detected |
| 10 | Maintained | 30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10 |
| 10 | Packaging | packaging workflow detected |
| 0 | Pinned-Dependencies | dependency not pinned by hash detected -- score normalized to 0 |
| 0 | SAST | SAST tool is not run on all commits -- score normalized to 0 |
| 10 | Security-Policy | security policy file detected |
| 0 | Signed-Releases | Project has not signed or included provenance with any releases. |
| 0 | Token-Permissions | detected GitHub workflow tokens with excessive permissions |
| 9 | Vulnerabilities | 1 existing vulnerabilities detected |
全部依赖 未采集
本报告未能采集到解析后的依赖集合：GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository
依赖安全公告 0
安装 pypi:runtm@0.2.132 会引入 35 个包（直接与传递）：其中 0 个存在已知公告，0 个为直接依赖。
没有已知公告影响已评估的依赖。
公告表示依赖图中记录的版本落入某条公告的受影响范围。可达性未经分析，且依赖图包含开发与测试的版本固定——某项发现可能只涉及工具链而非交付的软件。
原始 JSON 报告 机器可读
{
"data": {
"repo": {
"topics": [
"ai-agents",
"agent-runtime",
"agentic",
"control-plane",
"ephemeral-environments",
"infra",
"llm-tools",
"llmops",
"observability",
"open-source",
"serverless",
"app-runtime",
"anthropic",
"claude",
"cursor",
"openai",
"claude-code",
"sandbox"
],
"is_fork": false,
"size_kb": 7517,
"has_wiki": true,
"homepage": "https://www.runtm.com/",
"languages": {
"Go": 244556,
"CSS": 2929,
"Mako": 1943,
"Shell": 8382,
"Python": 1191410,
"Makefile": 2801,
"Dockerfile": 8951,
"JavaScript": 3639,
"TypeScript": 94278
},
"pushed_at": "2026-07-24T22:35:44Z",
"created_at": "2026-01-02T21:37:04Z",
"owner_type": "Organization",
"updated_at": "2026-07-24T22:35:38Z",
"description": "Open-source sandboxes where coding agents build and deploy. Spin up isolated environments where Claude Code, Cursor, and other agents code and deploy software.",
"is_archived": false,
"is_disabled": false,
"license_spdx": null,
"default_branch": "main",
"license_spdx_raw": "NOASSERTION",
"primary_language": "Python",
"significant_languages": [
"Python",
"Go"
]
},
"owner": {
"blog": "https://www.runtm.com/",
"name": "runtm",
"type": "Organization",
"login": "runtm-ai",
"company": null,
"location": "United States of America",
"followers": 14,
"avatar_url": "https://avatars.githubusercontent.com/u/249835438?v=4",
"created_at": "2025-12-15T22:15:52Z",
"is_verified": null,
"public_repos": 4,
"account_age_days": 223
},
"license": {
"state": "custom",
"spdx_id": null,
"raw_spdx": "NOASSERTION",
"file_present": true,
"scorecard_found": true,
"profile_has_license": true
},
"activity": {
"releases": [
{
"tag": "packages/agent/v0.0.13",
"kind": "other",
"published_at": "2026-07-24T22:36:50Z"
},
{
"tag": "packages/agent/v0.0.12",
"kind": "other",
"published_at": "2026-07-09T23:38:12Z"
},
{
"tag": "packages/agent/v0.0.11",
"kind": "other",
"published_at": "2026-07-09T23:23:16Z"
},
{
"tag": "packages/agent/v0.0.10",
"kind": "other",
"published_at": "2026-07-01T20:54:51Z"
},
{
"tag": "packages/agent/v0.0.9",
"kind": "other",
"published_at": "2026-07-01T04:35:47Z"
},
{
"tag": "packages/agent/v0.0.8",
"kind": "other",
"published_at": "2026-06-24T23:47:05Z"
},
{
"tag": "packages/agent/v0.0.7",
"kind": "other",
"published_at": "2026-06-17T23:00:29Z"
},
{
"tag": "packages/agent/v0.0.6",
"kind": "other",
"published_at": "2026-06-17T20:50:19Z"
},
{
"tag": "packages/agent/v0.0.5",
"kind": "other",
"published_at": "2026-06-17T16:14:41Z"
},
{
"tag": "packages/agent/v0.0.4",
"kind": "other",
"published_at": "2026-06-16T04:53:51Z"
},
{
"tag": "packages/agent/v0.0.3",
"kind": "other",
"published_at": "2026-06-15T23:22:55Z"
},
{
"tag": "packages/agent/v0.0.2",
"kind": "other",
"published_at": "2026-05-28T02:51:30Z"
},
{
"tag": "packages/agent/v0.0.1",
"kind": "other",
"published_at": "2026-05-16T01:04:40Z"
}
],
"recent_commits": [
{
"oid": "02aea30518314b41688bf59a4717a710a993158d",
"body": "…#45)\n\nEvery org-scoped command (templates, skills, MCP, guardrails, team\ntelemetry) reported \"the API key has no org\" even when the key was\norg-bound, forcing users to set RUNTM_ORG_ID by hand.\n\nThe bootstrap in requireOrgClient called GET /auth/verify. That route is\nmounted at the backend root, bu\n[…]\nn organization_id on personal keys; it now shares the same\nresolution and is applied after the payload copy so a null\norganization_id can't clobber it.\n\nCo-authored-by: Cursor <cursoragent@cursor.com>",
"is_bot": false,
"headline": "fix(agent): resolve org context from /v1/me so org-scoped keys work (…",
"author_name": "Gus Trigos",
"author_login": "Gustrigos",
"committed_at": "2026-07-24T22:35:33Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "51a4fc358a88d21d03afae4b47fe2c6f5d1fb2e8",
"body": "Lint has failed on every PR since 2026-07-23 with no code change to\nexplain it. Ruff 0.16.0 published at 19:10 UTC that day; the first\nfailure was 19:40. Both workflows installed Ruff unpinned -- `uvx ruff`\nin lint.yml and `pip install ruff` in ci.yml -- so CI silently adopted\nthe new major the mome\n[…]\nthing. Adopting 0.16.0 should be its own PR that\napplies the reformat alongside the bump, so the change is reviewable\nrather than arriving unannounced.\n\nCo-authored-by: Cursor <cursoragent@cursor.com>",
"is_bot": false,
"headline": "ci: pin Ruff to 0.15.22 so a new release can't red every PR (#46)",
"author_name": "Gus Trigos",
"author_login": "Gustrigos",
"committed_at": "2026-07-24T22:28:36Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "39ef7fd2f5979b2db4655d1908fe19b29a3e1615",
"body": "…ning upgrades (#43)\n\n* fix(agent): resolve gosec G301/G304/G306 code-security findings\n\nOneleet's gosec scan flags 9 findings in packages/agent:\n\n- G301 (3): skill install/pull created directories 0755; tightened to\n 0750 (skills_cmd.go, skills_pull_cmd.go x2)\n- G306 (2): skill files written 0644;\n[…]\ner pytest 9.1.1 with the\nupgraded deps; go build/test pass in packages/agent.\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>\n\n---------\n\nCo-authored-by: Claude Fable 5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "fix(security): resolve gosec code-security findings + dependency-scan…",
"author_name": "cvolante54",
"author_login": "cvolante54",
"committed_at": "2026-07-11T02:03:47Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "3b59ea9f545d769b9f82f09cba491ba3bfb9ecbd",
"body": "'1.25' resolved to 1.25.11 on the runner, leaving one HIGH stdlib CVE\n(CVE-2026-39822, fixed in 1.25.12) in the released binaries.\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "ci(release-agent): pin Go 1.25.12 (CVE-2026-39822 stdlib fix)",
"author_name": "Charlie",
"author_login": null,
"committed_at": "2026-07-09T23:37:04Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "85be065fb3cfd20bddd8c1eb6f997849621da684",
"body": "The v0.0.10 runtm-api release binaries embed the Go 1.23.12 stdlib, which\nArtifact Registry scanning flags with 2 CRITICAL + 22 HIGH CVEs\n(CVE-2025-68121, CVE-2026-27143 et al) in every sandbox image that bakes\nthe CLI. Go 1.25.9+ carries the fixes.\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "ci(release-agent): build releases with Go 1.25 (patched stdlib)",
"author_name": "Charlie",
"author_login": null,
"committed_at": "2026-07-09T23:22:04Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "62408384dc4953aadefdb136f3bcdf52affa359f",
"body": "The `runtm-api integrations` command only ever managed LLM provider API\nkeys (Anthropic/OpenAI). Naming it \"integrations\" collided with the\nexternal-integration surface (MCP servers, skills, tools, CLIs, APIs)\ndocumented in the `runtm-integrations` skill, so a prompt about\n\"integrations\" was ambiguo\n[…]\nling.\n\nBREAKING CHANGE: `runtm-api integrations …` is now `runtm-api providers …`.\n\nCo-authored-by: Charlie <charlie@Charlies-MacBook-Pro.local>\nCo-authored-by: Claude Opus 4.8 <noreply@anthropic.com>",
"is_bot": false,
"headline": "refactor(agent)!: rename `integrations` CLI command to `providers` (#40)",
"author_name": "cvolante54",
"author_login": "cvolante54",
"committed_at": "2026-07-01T20:46:42Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "4f6391fa29661fe2636aa4ed6f6fe7d85f606498",
"body": "…d integration decision process (#39)\n\n* docs(agent): rename runtm-directives skill to runtm-integrations + add integration process\n\nRename the bundled `runtm-directives` skill (and its embedded copy) to\n`runtm-integrations`, and rewrite its \"adding an integration\" guidance into a\nstructured 5-step \n[…]\n build passes.\n\nCo-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>\n\n---------\n\nCo-authored-by: Charlie <charlie@Charlies-MacBook-Pro.local>\nCo-authored-by: Claude Opus 4.8 <noreply@anthropic.com>",
"is_bot": false,
"headline": "docs(agent): rename runtm-directives skill to runtm-integrations + ad…",
"author_name": "cvolante54",
"author_login": "cvolante54",
"committed_at": "2026-07-01T04:32:04Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "7e0f6b48c0ec348917339cdffad50087266ca524",
"body": "…iling (#38)\n\n`runtm-api skills install` reported \"No AI agent skills directory found\n(~/.claude or ~/.cursor)\" even when ~/.claude existed, because detection\nstat'd the ~/.claude/skills *subdir* (the parent of the runtm target) rather\nthan the agent root. A fresh agent has ~/.claude (settings.json \n[…]\n up.\n\nAdds tests for resolveSkillTargets (root-dir detection, no-agent, override).\n\nCo-authored-by: Charlie <charlie@Charlies-MacBook-Pro.local>\nCo-authored-by: Claude Opus 4.8 <noreply@anthropic.com>",
"is_bot": false,
"headline": "fix(agent): skills install creates the agent skills dir instead of fa…",
"author_name": "cvolante54",
"author_login": "cvolante54",
"committed_at": "2026-06-24T23:40:53Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "030a0affc8c8e678549257ef5d0948760f9e2060",
"body": "…ally (#35)\n\nAdd `runtm-api skills pull <template-id>`, which downloads every skill\nthat materializes into a template and writes it to disk in the same\nlayout a session gets at launch:\n\n ~/.claude/skills/<name>/SKILL.md (claude-code)\n ~/.agents/skills/<name>/SKILL.md (codex)\n\nIt lists the org'\n[…]\nx pulls\nits own skills instead of the worker shuffling every blob through its RAM.\n\nCo-authored-by: Charlie <charlie@Charlies-MacBook-Pro.local>\nCo-authored-by: Claude Opus 4.8 <noreply@anthropic.com>",
"is_bot": false,
"headline": "feat(agent): add `skills pull` to materialize a template's skills loc…",
"author_name": "cvolante54",
"author_login": "cvolante54",
"committed_at": "2026-06-17T22:53:22Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "6f813f2336f70680a2fcf0b58b3715519ac076f0",
"body": "Adds the attachment surface the dashboard already has, so sessions launched\nfrom a template can load org skills/MCP servers without the UI.\n\n- skills|mcp attach|detach|attachments <id> — scope a directive to templates\n (--template), repos (--repo), or all repos (--all). attach/detach read the\n cur\n[…]\n API vs CLI vs MCP and auth methods and\n let the user choose before implementing.\n\nCo-authored-by: Charlie <charlie@Charlies-MacBook-Pro.local>\nCo-authored-by: Claude Opus 4.8 <noreply@anthropic.com>",
"is_bot": false,
"headline": "feat(agent): attach skills & MCP servers to templates from the CLI (#34)",
"author_name": "cvolante54",
"author_login": "cvolante54",
"committed_at": "2026-06-17T19:49:57Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "a4c30db6bdad0d6275e80caee3bc85a523fec9e4",
"body": "…xes (#33)\n\n* feat(agent): manage Slack/GitHub agents from the CLI + URL output fixes\n\nAdd `runtm-api agents` (create/list/get/update/delete) for Slack and GitHub\nintegration agents, normalize RUNTM_API_URL to the cloud proxy, and stop\nHTML-escaping URLs in JSON output.\n\n- agents create --type slack\n[…]\nnded `--logo`.\n\nCo-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>\n\n---------\n\nCo-authored-by: Charlie <charlie@Charlies-MacBook-Pro.local>\nCo-authored-by: Claude Opus 4.8 <noreply@anthropic.com>",
"is_bot": false,
"headline": "feat(agent): agents + custom tool providers in the CLI, URL output fi…",
"author_name": "cvolante54",
"author_login": "cvolante54",
"committed_at": "2026-06-17T16:09:48Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "7aca30771557793436878fcd87d53148f5f3e143",
"body": "Add `runtm-api skills`, `runtm-api mcp`, and `runtm-api tools` with full\ncreate/get/list/update/delete against the cloud API, so agents can author\nskills, wire up MCP servers, and store provider tool credentials without the\ndashboard.\n\n- skills: cloud CRUD alongside the existing `install`; `skills l\n[…]\nands; SKILL.md bumped\n to 0.7.0 with a Quick Reference row and a More Skills link\n\nCo-authored-by: Charlie <charlie@Charlies-MacBook-Pro.local>\nCo-authored-by: Claude Opus 4.8 <noreply@anthropic.com>",
"is_bot": false,
"headline": "feat(agent): CRUD skills, MCP servers, and tools from the CLI (#32)",
"author_name": "cvolante54",
"author_login": "cvolante54",
"committed_at": "2026-06-16T04:49:20Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "ab7714a1f650fe11b4b6a094a54bb0893f542864",
"body": "Newer uv (via setup-uv@v5) re-locks and syncs the project as a side\neffect of `uv version`. Resolving packages/cli pulls in its dev extra\nwhich depends on runtm-agents and runtm-sandbox, workspace-only packages\nthat are never published to PyPI, so resolution fails and the Publish to\nPyPI job exits 1\n[…]\n-frozen so `uv version` only edits pyproject.toml without\nre-locking or resolving.\n\nCo-authored-by: Charlie <charlie@Charlies-MacBook-Pro.local>\nCo-authored-by: Claude Opus 4.8 <noreply@anthropic.com>",
"is_bot": false,
"headline": "fix(ci): pass --frozen to uv version in publish workflow (#31)",
"author_name": "cvolante54",
"author_login": "cvolante54",
"committed_at": "2026-06-15T23:15:15Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "029bc4be6c6e8089741000966d042d2b065ea375",
"body": "…ent (#30)\n\n* feat(cli): add interactive SSH/terminal sessions and org template management\n\nAdds an interactive terminal/SSH attach command for sandbox sessions\n(Go agent) and a `runtm template` command group for managing org\ntemplates and their session arguments, mirrored in the Go agent.\nUpdates t\n[…]\nmplate command\n\nCo-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>\n\n---------\n\nCo-authored-by: Charlie <charlie@Charlies-MacBook-Pro.local>\nCo-authored-by: Claude Opus 4.8 <noreply@anthropic.com>",
"is_bot": false,
"headline": "feat(cli): interactive SSH/terminal sessions and org template managem…",
"author_name": "cvolante54",
"author_login": "cvolante54",
"committed_at": "2026-06-15T23:00:06Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "c8cc57e2b6af16583ac3f7a7d08f1b816c56400b",
"body": "…#29)\n\nStop recurring \"SSL connection has been closed unexpectedly\" errors\nbehind Fly MPG's PgBouncer:\n- Lower pool_recycle 1800s -> 300s so connections recycle before the\n upstream pooler closes idle server connections (~1/3 of pre-ping\n probes were hitting dead connections)\n- Add TCP keepalives \n[…]\na joinedload, since\nDeploymentResponse.from_db() reads provider_resource.app_name.\n\nCo-authored-by: Charlie <charlie@Charlies-MacBook-Pro.local>\nCo-authored-by: Claude Opus 4.8 <noreply@anthropic.com>",
"is_bot": false,
"headline": "fix(api): rework DB pool config for PgBouncer + fix deployments N+1 (…",
"author_name": "cvolante54",
"author_login": "cvolante54",
"committed_at": "2026-06-12T20:18:26Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "000cbb88fe37c4f45a3fb22b167d328fea27ce46",
"body": "Co-authored-by: Charlie <charlie@Charlies-MacBook-Pro.local>",
"is_bot": false,
"headline": "imrpve docs and fix cli issue (#22)",
"author_name": "cvolante54",
"author_login": "cvolante54",
"committed_at": "2026-05-25T05:13:50Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "351f87780e5063e8ef0fe3272c9e5c5a35dfe2c5",
"body": null,
"is_bot": false,
"headline": "Merge runtm-api goreleaser installer changes",
"author_name": "Gus Trigos",
"author_login": "Gustrigos",
"committed_at": "2026-05-16T00:54:39Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "6c08bdcc7d492c337f2f9f2393b23cb754913df0",
"body": "Add a GitHub release workflow, hosted installer docs, and skill sync hooks so agents can install runtm-api without a local Go toolchain.\n\nCo-authored-by: Cursor <cursoragent@cursor.com>",
"is_bot": false,
"headline": "feat(agent): publish runtm-api binaries with goreleaser",
"author_name": "Gus Trigos",
"author_login": "Gustrigos",
"committed_at": "2026-05-16T00:54:11Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "1ce961ae08239c742367ed9befef711459987539",
"body": "Org-scoped commands (templates, team telemetry, team secrets, org\ninstructions, guardrails) previously errored when RUNTM_ORG_ID wasn't\nset even if the API key was already bound to an org. Now the CLI calls\n/auth/verify lazily on first need (memoized per process) and uses the\nkey's embedded organiza\n[…]\ns can confirm before running mutating commands.\n\nAdds runtime_test.go covering verify success, personal-key empty path,\nand verify failure propagation.\n\nCo-authored-by: Cursor <cursoragent@cursor.com>",
"is_bot": false,
"headline": "fix(cli): auto-discover org from API key for org-scoped commands",
"author_name": "Gus Trigos",
"author_login": "Gustrigos",
"committed_at": "2026-05-12T20:07:29Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "50747fce84bcecc0a142cb8df3e0359003c98abd",
"body": "All canonical endpoint examples (sessions, templates, secrets, user,\norganizations, deploy, auth/verify) now use the /api/cloud/* namespace\nwhich proxies through Next.js to the FastAPI backend without colliding\nwith dashboard BFF routes.\n\nAlso updated mint.json baseUrl from /api to /api/cloud.\n\nv0/v1 endpoint docs are unchanged (already proxied directly).\n\nCo-authored-by: Cursor <cursoragent@cursor.com>",
"is_bot": false,
"headline": "docs: update API reference URLs to use /api/cloud proxy namespace",
"author_name": "Gus Trigos",
"author_login": "Gustrigos",
"committed_at": "2026-05-12T01:40:23Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "d9e9038fbdc74be755f4f443d8fa32efc64fff31",
"body": "Use https://app.runtm.com/api/cloud as the production default so the CLI can\nreach FastAPI canonical /api/* routes without colliding with dashboard BFF\nroutes. Local development continues to use RUNTM_API_URL=http://localhost:8081/api.\n\nUpdate README and embedded skill docs to explain the proxy namespace.\n\nCo-authored-by: Cursor <cursoragent@cursor.com>",
"is_bot": false,
"headline": "fix: route runtm-api traffic through cloud proxy namespace",
"author_name": "Gus Trigos",
"author_login": "Gustrigos",
"committed_at": "2026-05-12T01:32:09Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "130e9db9e8d32543e541a9f07523cc69905c598e",
"body": "The pip CLI (runtm v0.2.x) and Go CLI were both called `runtm`, causing\nPATH shadowing when customers had both installed. The Go binary is now\n`runtm-api` so both coexist without conflict.\n\nUpdated: cmd directory, Makefile, install.sh, README, all 4 skill files,\nembedded skill copies, and root cobra command.\n\nInstall: go install github.com/runtm-ai/runtm/packages/agent/cmd/runtm-api@latest\nCo-authored-by: Cursor <cursoragent@cursor.com>",
"is_bot": false,
"headline": "fix: rename binary from runtm to runtm-api to avoid pip CLI collision",
"author_name": "Gus Trigos",
"author_login": "Gustrigos",
"committed_at": "2026-05-12T01:12:59Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "a03d55f861eb81ddd4c17d12c0221be41c7e2777",
"body": "feat: add `runtm skills install` with embedded skill files",
"is_bot": false,
"headline": "Merge pull request #20 from runtm-ai/feat/agent-cli",
"author_name": "Gus Trigos",
"author_login": "Gustrigos",
"committed_at": "2026-05-11T22:44:24Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "23db581ff7a06403164f62e780d55870f408e5b3",
"body": "Skills are now baked into the binary via Go embed. `runtm skills install`\nauto-detects Claude Code and Cursor directories and writes all 4 SKILL.md\nfiles with no network fetch. Customer install is now two commands:\n\n go install github.com/runtm-ai/runtm/packages/agent/cmd/runtm@latest\n runtm skills install\n\nCo-authored-by: Cursor <cursoragent@cursor.com>",
"is_bot": false,
"headline": "feat: add `runtm skills install` with embedded skill files",
"author_name": "Gus Trigos",
"author_login": "Gustrigos",
"committed_at": "2026-05-11T22:15:49Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "1b32f77337414e50385f2edb6e4a83a9e328dcce",
"body": "feat: add Go agent CLI for programmatic cloud API access",
"is_bot": false,
"headline": "Merge pull request #19 from runtm-ai/feat/agent-cli",
"author_name": "Gus Trigos",
"author_login": "Gustrigos",
"committed_at": "2026-05-11T22:12:56Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "64b36ddd730d78b3c4f8c8cf1c39548747fe4abd",
"body": "Thin Go CLI (`runtm`) that wraps the hosted cloud API so AI coding agents\n(Claude Code, Cursor, etc.) can drive Runtime programmatically.\n\nSurface:\n- sessions: full CRUD + files + env + git + deploy + lifecycle + prompt SSE\n- templates: full lifecycle (create/build/fix-session/save-snapshot/secrets)\n[…]\n commands to run, error\nrecovery, and multi-step workflow recipes. Installed via `go install`.\n\nAll endpoints verified end-to-end against live backend.\n\nCo-authored-by: Cursor <cursoragent@cursor.com>",
"is_bot": false,
"headline": "feat: add Go agent CLI for programmatic cloud API access",
"author_name": "Gus Trigos",
"author_login": "Gustrigos",
"committed_at": "2026-05-11T22:11:44Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "15279942d647d1a0ab7ea438bca63f884f0f238f",
"body": "docs: surface v0 programmatic and v2 sandbox-lifecycle session endpoints",
"is_bot": false,
"headline": "Merge pull request #18 from runtm-ai/feat/docs-sessions-v0-v2",
"author_name": "Gus Trigos",
"author_login": "Gustrigos",
"committed_at": "2026-05-11T00:21:21Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e9982895b2dca34a0348a671ea956fd3fbb7e951",
"body": "Large endpoint groups (Sessions 37, Templates 14, Context 17, Activity\n10) are now broken into collapsible subgroups so the sidebar is\nscannable without endless scrolling.\n\nSessions: CRUD at top, then Lifecycle, Prompts, Files, Env Vars,\n Instructions, Git as nested groups\nTemplates: CRUD at top, t\n[…]\n then Personal, Team\nContext: Instructions at top, then Skills\nProvider Keys: Resolved + Plan at top, then User Keys, Org Keys\nActivity: Personal, Team\n\nCo-authored-by: Cursor <cursoragent@cursor.com>",
"is_bot": false,
"headline": "docs: organize API reference sidebar with nested collapsible groups",
"author_name": "Gus Trigos",
"author_login": "Gustrigos",
"committed_at": "2026-05-11T00:19:55Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "b23f9290c8b09857515fc31bed21df8778201197",
"body": "Co-authored-by: Cursor <cursoragent@cursor.com>",
"is_bot": false,
"headline": "docs: fix preview URL to use dev.runtm.com instead of e2b.app",
"author_name": "Gus Trigos",
"author_login": "Gustrigos",
"committed_at": "2026-05-11T00:16:38Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "75cdd68304c5ee9ac2fd39df7d2f5ec08e214e68",
"body": "- Replace all E2B references with generic \"sandbox provider(s)\" phrasing\n so docs are provider-agnostic\n- Replace all em dashes with hyphens across 54 mdx files for consistent\n punctuation\n- Hide Programmatic Agents (v0) and Sandbox Lifecycle (v2) nav groups\n from mint.json (pages kept on disk, just not wired into sidebar)\n\nCo-authored-by: Cursor <cursoragent@cursor.com>",
"is_bot": false,
"headline": "docs: remove E2B branding and em dashes from all doc pages",
"author_name": "Gus Trigos",
"author_login": "Gustrigos",
"committed_at": "2026-05-11T00:15:01Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "a6253459e95c34ea96971e87233b51b762575611",
"body": "The Sessions API reference was missing the v0 (programmatic API-key) and\nv2 (sandbox lifecycle) surfaces — only the launch endpoint existed for\nv0 and it wasn't even wired into the sidebar nav. This makes both\nversions discoverable and labels the legacy v1 endpoints they replace.\n\n- Add 6 v0 referen\n[…]\n- Cross-link launch.mdx to the rest of the v0 surface\n- Add deprecation Warning banners to v1 start.mdx and heartbeat.mdx\n pointing at v2 replacements\n\nCo-authored-by: Cursor <cursoragent@cursor.com>",
"is_bot": false,
"headline": "docs: surface v0 programmatic and v2 sandbox-lifecycle session endpoints",
"author_name": "Gus Trigos",
"author_login": "Gustrigos",
"committed_at": "2026-05-11T00:04:06Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "0dccf75e48b6ce25d0198d3063b9fb41578bac94",
"body": "Restructure docs for cloud API and move OSS docs to open-source/",
"is_bot": false,
"headline": "Merge pull request #17 from runtm-ai/feat/docs-cloud-api-restructure",
"author_name": "Gus Trigos",
"author_login": "Gustrigos",
"committed_at": "2026-05-10T23:40:23Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "98ff371602a256f1485a518d55c6fa2e83ff7543",
"body": "- Add comprehensive cloud-api/ docs covering sessions, auth, websockets,\n templates, secrets, deploy, integrations, and activity endpoints\n- Add concepts/ section explaining sessions, agents, templates, context,\n guardrails, organizations, observability, and real-time features\n- Add new guides for\n[…]\nder open-source/ to separate cloud vs OSS documentation\n- Update mint.json navigation and introduction/quickstart pages\n- Update logos and cursorignore\n\nCo-authored-by: Cursor <cursoragent@cursor.com>",
"is_bot": false,
"headline": "Restructure docs for cloud API and move OSS docs to open-source/",
"author_name": "Gus Trigos",
"author_login": "Gustrigos",
"committed_at": "2026-05-10T19:04:25Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "2ea6c9310ece26d73e47bdc2909a011cd2dea9c3",
"body": null,
"is_bot": false,
"headline": "fix bug with volumes",
"author_name": "Carlos Volante",
"author_login": "cvolante54",
"committed_at": "2026-05-10T05:39:58Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "db8f05043ea372cb4d979a098b5254bd8d4ac891",
"body": "* increase timeouts\n\n* fix linting",
"is_bot": false,
"headline": "increase timeouts (#15)",
"author_name": "cvolante54",
"author_login": "cvolante54",
"committed_at": "2026-05-10T04:30:34Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1adda63c981308348ccd8d0e94a28d7aeb77d387",
"body": null,
"is_bot": false,
"headline": "upgrade versions",
"author_name": "Carlos Volante",
"author_login": "cvolante54",
"committed_at": "2026-05-09T16:51:45Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "9354e9c9ee16f0937558e5dbc0e568f7a4eb4279",
"body": "* add volume functionality\n\n* update versions\n\n* fix linting",
"is_bot": false,
"headline": "Volumes (#14)",
"author_name": "cvolante54",
"author_login": "cvolante54",
"committed_at": "2026-05-09T16:45:44Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "3d63cba4171aed5e69de5f72a0034e83d2d2aeb4",
"body": null,
"is_bot": false,
"headline": "improve connection pooling settings (#13)",
"author_name": "cvolante54",
"author_login": "cvolante54",
"committed_at": "2026-05-03T16:40:53Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "fdf9e73cdafeef36d8fa4c88313bbeae6f9662d1",
"body": "* fix deployment issues + rq upgrade + cleanup\n\n* fix linting\n\n* fix format",
"is_bot": false,
"headline": "Cv/improve worker deploy (#12)",
"author_name": "cvolante54",
"author_login": "cvolante54",
"committed_at": "2026-04-03T05:13:41Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e2d6ba8cb25204d7385f1111d3a3f996b0a0c972",
"body": "* add lint and publish workflows\n\n* update version\n\n* fix ci issues\n\n* fix formatting\n\n* fix ci\n\n* add necessary files\n\n* reformat",
"is_bot": false,
"headline": "add lint and publish workflows (#11)",
"author_name": "cvolante54",
"author_login": "cvolante54",
"committed_at": "2026-04-01T01:10:08Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "3d910ded716c68bd74097c3bc77d01b0de88edc3",
"body": "- DB session: use module-level engine/session singleton to share connection\n pool across requests instead of creating per-request (fixes max_connections\n exhaustion under load)\n- Deploy: reorder custom domain provisioning to add SSL cert first, then\n create DNS records (including ACME challenge CNAME), then poll for\n certificate verification\n\nMade-with: Cursor",
"is_bot": false,
"headline": "fix: singleton DB engine pool and SSL cert-first deploy ordering",
"author_name": "Gus Trigos",
"author_login": "Gustrigos",
"committed_at": "2026-03-24T23:35:20Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "545d148b0f948fc54474534a6ee1845684402bcc",
"body": "…le leaks\n\n- Add get_path() and cleanup_path() to ArtifactStore ABC so all backends\n (including future ones) implement a consistent local-path interface\n- LocalFileStore.cleanup_path() is a no-op (paths are real, not temp)\n- DeployJob now cleans up downloaded artifacts in a finally block to\n prevent temp file accumulation on long-running workers\n\nMade-with: Cursor",
"is_bot": false,
"headline": "fix: add get_path/cleanup_path to ArtifactStore base, prevent temp fi…",
"author_name": "Gus Trigos",
"author_login": "Gustrigos",
"committed_at": "2026-03-19T22:33:35Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "afe0927aa3b2c56df4747048741750f984934cd1",
"body": "Move LocalFileStore and get_artifact_store() factory to shared package so both API and worker can use them without cross-package dependencies. Add a registry pattern (register_backend) so cloud extensions can plug in S3/Tigris without modifying OSS code.\n\n- shared/storage/ now owns: ArtifactStore AB\n[…]\nbecomes a backwards-compat re-export shim\n- Remove S3FileStore and boto3 from OSS (moved to runtm-cloud)\n- Fix API route import: runtm_shared.storage instead of runtm_worker.storage\n\nMade-with: Cursor",
"is_bot": false,
"headline": "refactor: move S3FileStore out of OSS, keep storage layer lean",
"author_name": "jjpd777",
"author_login": "jjpd777",
"committed_at": "2026-03-19T21:41:20Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "19addf2ff1c37c56f63c8d52c8c528d95551bdce",
"body": "Add a pluggable storage backend so the worker can fetch deployment\nartifacts from S3-compatible storage (Tigris on Fly.io) instead of\nrequiring a shared Docker volume or HTTP fallback between machines.\n\n- Add S3FileStore implementation using boto3\n- Add get_artifact_store() factory to select backend\n[…]\neployment route to store artifacts via the backend\n- Add ARTIFACT_STORAGE_BACKEND config (local/s3) across packages\n- Add comprehensive tests for both LocalFileStore and S3FileStore\n\nMade-with: Cursor",
"is_bot": false,
"headline": "feat: add S3/Tigris artifact storage backend",
"author_name": "jjpd777",
"author_login": "jjpd777",
"committed_at": "2026-03-19T21:41:16Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "be50968597f97016dc659bb733f3b62e92b5477b",
"body": "- Add exclude_dirs set to validate_python_syntax calls so .venv, node_modules,\n __pycache__, dist, build, etc. are skipped during syntax checking\n- Move pathspec import to module level in api_client.py (fixes UP037 + F821\n from quoted return type annotation on build_ignore_spec)\n- Bump CLI to 0.2.15\n\nCo-authored-by: Cursor <cursoragent@cursor.com>",
"is_bot": false,
"headline": "fix: validate python syntax excludes dirs, fix pathspec import lint",
"author_name": "Gus Trigos",
"author_login": "Gustrigos",
"committed_at": "2026-02-24T06:28:45Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "7bfc890fe98eb85e4f976614d5700d9e6a6f2e89",
"body": null,
"is_bot": false,
"headline": "new changelog",
"author_name": "Gus Trigos",
"author_login": "Gustrigos",
"committed_at": "2026-02-24T06:28:45Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "462569f0a887e2f087ad954aff64c5dcbe3be77f",
"body": "The default 60s httpx timeout is too short for the deploy upload\nrequest, which goes through Cloud Backend → OSS API → Fly.io build\nqueue. This chain regularly exceeds 60s, causing ReadTimeout errors.\n\nThe auth-check client keeps the default timeout since it only\nneeds a quick round trip.\n\nCo-authored-by: Cursor <cursoragent@cursor.com>",
"is_bot": false,
"headline": "fix: increase deploy upload timeout from 60s to 300s",
"author_name": "Gus Trigos",
"author_login": "Gustrigos",
"committed_at": "2026-02-24T06:24:27Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "34f739cdf28ddd622fef8ab4d43ea1ff041ca112",
"body": "The validate command had a hardcoded exclude_dirs set with only 7 entries\n(.git, node_modules, etc.) for its artifact size check, while\ncreate_artifact_zip used pathspec with .runtmignore/.gitignore support.\nThis caused validate to report \"project too large\" for projects with\nsandbox caches (.npm, .\n[…]\nec() and\nALWAYS_EXCLUDE_PATTERNS so both validate and deploy use the same\nmatching. The error message now points to .runtmignore instead of\n.gitignore.\n\nCo-authored-by: Cursor <cursoragent@cursor.com>",
"is_bot": false,
"headline": "fix: validate command now respects .runtmignore for size checks",
"author_name": "Gus Trigos",
"author_login": "Gustrigos",
"committed_at": "2026-02-24T05:24:02Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "fba758001c06fb4676c82a00c5e64af979cc343a",
"body": "Removed the old standard tier. Renamed standard (2GB) to starter\nas the default tier. Three tiers now:\n- starter: 2GB RAM, 2 CPUs (default for all projects)\n- performance: 4GB RAM, 4 CPUs\n- pro: 8GB RAM, 4 CPUs\n\nFullstack validation no longer rejects starter since all tiers\nhave enough RAM (2GB+) for Node.js + Python.\n\nCo-authored-by: Cursor <cursoragent@cursor.com>",
"is_bot": false,
"headline": "refactor: simplify to 3 deployment tiers (starter, performance, pro)",
"author_name": "Gus Trigos",
"author_login": "Gustrigos",
"committed_at": "2026-02-23T03:51:34Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "41b306ec4c7f27cad587d4db3e58b2d38dde6886",
"body": "Updated all deployment tiers with more resources:\n- starter: 256MB -> 512MB RAM, 1 shared CPU\n- standard: 512MB -> 2GB RAM, 2 shared CPUs\n- performance: 1GB -> 4GB RAM, 4 shared CPUs\n- pro (new): 8GB RAM, 4 shared CPUs\n\nUpdated VM size mapping in docker builder for shared-cpu-4x\nat 4GB+ RAM. All tiers continue to use auto-stop for cost savings.\n\nCo-authored-by: Cursor <cursoragent@cursor.com>",
"is_bot": false,
"headline": "feat: upgrade deployment tiers and add PRO tier (8GB RAM)",
"author_name": "Gus Trigos",
"author_login": "Gustrigos",
"committed_at": "2026-02-23T03:43:09Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "da36a9e7d856d53759950c69c84b7a5072a66b28",
"body": "…stroy\n\nWhen destroying a deployment, the code sets is_latest=False on the current\ndeployment and is_latest=True on the previous one in the same transaction.\nSQLAlchemy may flush the SET is_latest=True UPDATE before the SET is_latest=False,\nviolating the ix_deployments_unique_active_name partial unique constraint.\n\nAdding db.flush() between the two changes ensures the database sees the\ndemotion before the promotion.\n\nCo-authored-by: Cursor <cursoragent@cursor.com>",
"is_bot": false,
"headline": "fix: flush is_latest=False before promoting previous deployment on de…",
"author_name": "Gus Trigos",
"author_login": "Gustrigos",
"committed_at": "2026-02-15T22:00:34Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "2c607c86607673e47916040ea9e8328b90dab4e3",
"body": null,
"is_bot": false,
"headline": "fixed formatting errors",
"author_name": "Gus Trigos",
"author_login": "Gustrigos",
"committed_at": "2026-01-24T01:38:14Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ca0c7fd390b0c7323a1eb3729f7cd03c089bbd06",
"body": null,
"is_bot": false,
"headline": "fix: skip lockfile check for docker template",
"author_name": "Gus Trigos",
"author_login": "Gustrigos",
"committed_at": "2026-01-24T01:30:10Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "83112a54080e0676993044b4436db56a99d787b5",
"body": null,
"is_bot": false,
"headline": "increased versioning",
"author_name": "Gus Trigos",
"author_login": "Gustrigos",
"committed_at": "2026-01-22T03:34:39Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "868d283b7ae8b4e41e1691d771a90fc201bcc97e",
"body": null,
"is_bot": false,
"headline": "added new version + changelog update",
"author_name": "Gus Trigos",
"author_login": "Gustrigos",
"committed_at": "2026-01-21T03:22:11Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "97b0b8d36b70607f2a5e3b1dc4c08e0c1a4e176d",
"body": null,
"is_bot": false,
"headline": "fixed type and lint issues",
"author_name": "Gus Trigos",
"author_login": "Gustrigos",
"committed_at": "2026-01-21T02:33:50Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5a2d0a432148ef7e8f588efcac2ecd573ac3bb63",
"body": null,
"is_bot": false,
"headline": "lint fixes",
"author_name": "Gus Trigos",
"author_login": "Gustrigos",
"committed_at": "2026-01-14T08:39:10Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "43cf57ab6990b262992d9477e07331a90593c081",
"body": null,
"is_bot": false,
"headline": "fixed ruff and lint errors",
"author_name": "Gus Trigos",
"author_login": "Gustrigos",
"committed_at": "2026-01-13T16:58:20Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "746aeae3f865fd19cd61a8374ee91ad246747f13",
"body": null,
"is_bot": false,
"headline": "updated readme with sandbox quickstart",
"author_name": "Gus Trigos",
"author_login": "Gustrigos",
"committed_at": "2026-01-13T07:12:42Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1d53ee6670ecd79b661d023a8bd7becb04035b1d",
"body": null,
"is_bot": false,
"headline": "added local isolated sandbox environments via sandbox-runtime",
"author_name": "Gus Trigos",
"author_login": "Gustrigos",
"committed_at": "2026-01-13T07:09:09Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0bcd1e379b5e6f236a7b93dbe049062f8e28c270",
"body": null,
"is_bot": false,
"headline": "fixed old-style type annotations",
"author_name": "Gus Trigos",
"author_login": "Gustrigos",
"committed_at": "2026-01-12T05:45:03Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "fbb7068b920d9c27a10f2cfe0081739d5a242aac",
"body": null,
"is_bot": false,
"headline": "improved explanation of runtm",
"author_name": "Gus Trigos",
"author_login": "Gustrigos",
"committed_at": "2026-01-12T05:41:58Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "59dbe0c778e6324cb604d3182e62dd4f60f812ee",
"body": null,
"is_bot": false,
"headline": "updated discord links",
"author_name": "Gus Trigos",
"author_login": "Gustrigos",
"committed_at": "2026-01-08T01:52:15Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d7e807cdf0df8c9059bfa6a3a8496fc1d177fc1f",
"body": null,
"is_bot": false,
"headline": "updated docs links",
"author_name": "Gus Trigos",
"author_login": "Gustrigos",
"committed_at": "2026-01-07T06:48:04Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2d473db901cc35eed2e275f671fbe1221e4f21d2",
"body": null,
"is_bot": false,
"headline": "added docs",
"author_name": "Gus Trigos",
"author_login": "Gustrigos",
"committed_at": "2026-01-07T06:30:54Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a490658c0968c72017cfea52a5b43edc96bb9e66",
"body": null,
"is_bot": false,
"headline": "enhanced wording for readmes",
"author_name": "Gus Trigos",
"author_login": "Gustrigos",
"committed_at": "2026-01-06T06:26:52Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "93ca6ab37dcf907e290b11a580db369276e34eac",
"body": null,
"is_bot": false,
"headline": "updated demo video url",
"author_name": "Gus Trigos",
"author_login": "Gustrigos",
"committed_at": "2026-01-03T01:21:34Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "9ef80bc8a517e374323c37f6a553e74223a3372a",
"body": null,
"is_bot": false,
"headline": "added demo video plus licenses",
"author_name": "Gus Trigos",
"author_login": "Gustrigos",
"committed_at": "2026-01-03T01:15:35Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e35266cddb0a0262c0b067e82cdaa3baae547503",
"body": null,
"is_bot": false,
"headline": "added test update",
"author_name": "Gus Trigos",
"author_login": "Gustrigos",
"committed_at": "2026-01-02T22:34:50Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1ad0e562a6e295cdd4b282baba993e0a09677be9",
"body": null,
"is_bot": false,
"headline": "updated tests",
"author_name": "Gus Trigos",
"author_login": "Gustrigos",
"committed_at": "2026-01-02T22:05:39Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "10cd1f4abd45de0accd62ac664b2611ae8debdeb",
"body": null,
"is_bot": false,
"headline": "ignored certain patterns with ruff",
"author_name": "Gus Trigos",
"author_login": "Gustrigos",
"committed_at": "2026-01-02T21:52:39Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "3ab497e4df3bb683961bf5f6bac8cd1f6ae138e7",
"body": null,
"is_bot": false,
"headline": "redacted readme",
"author_name": "Gus Trigos",
"author_login": "Gustrigos",
"committed_at": "2026-01-02T21:43:53Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "64d88bb855025dd1aba6489ddcc386e482d3ffb5",
"body": null,
"is_bot": false,
"headline": "new readme",
"author_name": "Gus Trigos",
"author_login": "Gustrigos",
"committed_at": "2026-01-02T21:36:07Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2e68789cde1354b3fb7b1f95bba001a30606e6a3",
"body": null,
"is_bot": false,
"headline": "updated policy tests",
"author_name": "Gus Trigos",
"author_login": "Gustrigos",
"committed_at": "2026-01-02T20:36:41Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2c88db320b5bbc70e9e79d3785b42f48d985cd44",
"body": null,
"is_bot": false,
"headline": "added policy to allow redeploys",
"author_name": "Gus Trigos",
"author_login": "Gustrigos",
"committed_at": "2026-01-02T20:33:05Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c51e838fe4a0c3711904361b105c2149a03c971d",
"body": null,
"is_bot": false,
"headline": "modified comments",
"author_name": "Gus Trigos",
"author_login": "Gustrigos",
"committed_at": "2026-01-02T19:09:48Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2602312c891f6820216b9f11cb05cef9eb8e2143",
"body": "…nancy\n\nWhen trust_tenant_header=true (single-tenant mode), the API reads\nX-Tenant-Id and X-User-Id headers from requests authenticated with\nthe service token. This enables multi-tenant data isolation when\nthe API runs behind a trusted internal proxy that validates user auth.\n\nSECURITY: Only enable when the API is network-isolated behind a\ntrusted proxy. The proxy must validate user authentication before\nforwarding requests with tenant headers.",
"is_bot": false,
"headline": "feat(api): add trusted tenant header support for proxy-based multi-te…",
"author_name": "Gus Trigos",
"author_login": "Gustrigos",
"committed_at": "2026-01-02T18:48:55Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a69f6959b78dc1aae4e48427762d2a021bff4abd",
"body": null,
"is_bot": false,
"headline": "added trust tenant fix",
"author_name": "Gus Trigos",
"author_login": "Gustrigos",
"committed_at": "2026-01-02T18:45:59Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "cbffa76a491561d9612f134549e16718def3dfeb",
"body": null,
"is_bot": false,
"headline": "improved ready at status",
"author_name": "Gus Trigos",
"author_login": "Gustrigos",
"committed_at": "2026-01-02T08:02:27Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d20f9159233ce662a3acf3a6ed7987b2a566ec9f",
"body": null,
"is_bot": false,
"headline": "improved telemetry cli handle",
"author_name": "Gus Trigos",
"author_login": "Gustrigos",
"committed_at": "2026-01-02T07:46:28Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ec9ea9702816460d4c5e2704bd55987141a04abb",
"body": null,
"is_bot": false,
"headline": "fixed urls",
"author_name": "Gus Trigos",
"author_login": "Gustrigos",
"committed_at": "2026-01-02T07:13:35Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4adc341a5fc40550b19493e0ab178b8c898f10af",
"body": null,
"is_bot": false,
"headline": "fixed telemetry endpoint",
"author_name": "Gus Trigos",
"author_login": "Gustrigos",
"committed_at": "2026-01-02T07:12:12Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "077db2f989fc88e5ea54de9fc228465e42fd981e",
"body": null,
"is_bot": false,
"headline": "added suspend mode instead of stop",
"author_name": "Gus Trigos",
"author_login": "Gustrigos",
"committed_at": "2026-01-02T06:48:29Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1acca9bf6afc93dbb0e11eeafe881a4bb69614cb",
"body": null,
"is_bot": false,
"headline": "improved deployment versioning",
"author_name": "Gus Trigos",
"author_login": "Gustrigos",
"committed_at": "2026-01-02T06:44:04Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "63901f666089cee37fbf4f688db71a12c406967e",
"body": null,
"is_bot": false,
"headline": "added flyctl",
"author_name": "Gus Trigos",
"author_login": "Gustrigos",
"committed_at": "2026-01-02T05:59:20Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "7cdf26c3fbfdd41f46dbc86b7db825127684e974",
"body": null,
"is_bot": false,
"headline": "fixed docker bugs",
"author_name": "Gus Trigos",
"author_login": "Gustrigos",
"committed_at": "2026-01-02T05:26:07Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "bc8e06dda325bddc256c88cd1ec1609db2767fd1",
"body": null,
"is_bot": false,
"headline": "fix: fail fast if FLY_API_TOKEN missing for remote builder",
"author_name": "Gus Trigos",
"author_login": "Gustrigos",
"committed_at": "2026-01-02T05:21:08Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "6f73568c1958e3149ae9605109ccad79dd412675",
"body": null,
"is_bot": false,
"headline": "fix: rename build/ to builder/ to avoid Python packaging conflict",
"author_name": "Gus Trigos",
"author_login": "Gustrigos",
"committed_at": "2026-01-02T05:08:39Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b18dfd78aa9a3ee9671115ca151737aa20ce7bad",
"body": "- Fix .gitignore to use /build/ instead of build/ to not ignore worker's build module\n- Add packages/worker/runtm_worker/build/ which was incorrectly gitignored\n- Fix SQLAlchemy filter-after-limit bug in telemetry service",
"is_bot": false,
"headline": "fix: add missing build module and fix gitignore",
"author_name": "Gus Trigos",
"author_login": "Gustrigos",
"committed_at": "2026-01-02T04:46:51Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "91b4320adf74e07df0ec462191319b330e6b9ca5",
"body": null,
"is_bot": false,
"headline": "added policy enforcement for usage",
"author_name": "Gus Trigos",
"author_login": "Gustrigos",
"committed_at": "2026-01-02T02:19:09Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "98a3eeec8d8a58c532c98edb266a9447c2945151",
"body": null,
"is_bot": false,
"headline": "preparing for OSS release",
"author_name": "Gus Trigos",
"author_login": "Gustrigos",
"committed_at": "2026-01-02T00:17:27Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "349e17c6e43d025147830e0814b95531037cc0f6",
"body": null,
"is_bot": false,
"headline": "feat: config-only deploys with src_hash validation",
"author_name": "Gus Trigos",
"author_login": "Gustrigos",
"committed_at": "2026-01-01T03:31:46Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c35edaf4f5aec4bcdffee6b2ec3a7fc9062c101b",
"body": null,
"is_bot": false,
"headline": "chore: update default api_url to use Cloud Backend proxy",
"author_name": "Gus Trigos",
"author_login": "Gustrigos",
"committed_at": "2026-01-01T00:29:23Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "7c43423d07b0d681abdaa0c7d8a8a77cdeb6433c",
"body": null,
"is_bot": false,
"headline": "Initial commit - runtm OSS",
"author_name": "Gus Trigos",
"author_login": "Gustrigos",
"committed_at": "2025-12-30T23:58:04Z",
"body_truncated": false,
"is_coding_agent": false
}
],
"releases_count": 13,
"commits_last_year": 94,
"latest_release_at": "2026-07-24T22:36:50Z",
"latest_release_tag": "packages/agent/v0.0.13",
"releases_from_tags": false,
"days_since_last_push": 2,
"active_weeks_last_year": 19,
"days_since_latest_release": 2,
"mean_days_between_releases": 4.3
},
"community": {
"has_readme": true,
"has_license": true,
"has_description": true,
"has_contributing": true,
"health_percentage": 100,
"has_issue_template": false,
"has_code_of_conduct": true,
"has_pull_request_template": true
},
"ecosystem": {
"packages": [
{
"name": "runtm",
"exists": true,
"license": "Apache-2.0",
"keywords": [
"ai",
"cli",
"deployment",
"devops",
"fly.io",
"serverless",
"Development Status :: 4 - Beta",
"Environment :: Console",
"Intended Audience :: Developers",
"License :: OSI Approved :: Apache Software License",
"Operating System :: OS Independent",
"Programming Language :: Python :: 3",
"Programming Language :: Python :: 3.10",
"Programming Language :: Python :: 3.11",
"Programming Language :: Python :: 3.12",
"Programming Language :: Python :: 3.9",
"Topic :: Software Development :: Build Tools",
"Topic :: System :: Software Distribution"
],
"ecosystem": "pypi",
"matches_repo": true,
"registry_url": "https://pypi.org/project/runtm/",
"is_deprecated": false,
"latest_version": "0.2.132",
"repository_url": "https://github.com/runtm-ai/runtm",
"versions_count": 34,
"total_downloads": null,
"dependents_count": null,
"deprecation_note": null,
"maintainers_count": null,
"monthly_downloads": null,
"first_published_at": "2026-01-02T03:23:12.428096Z",
"latest_published_at": "2026-07-24T22:35:54.128473Z",
"latest_version_yanked": null,
"days_since_latest_publish": 2
}
]
},
"popularity": {
"forks": 31,
"stars": 286,
"watchers": 2,
"fork_history": {
"days": [
{
"date": "2026-03-19",
"count": 1
},
{
"date": "2026-03-20",
"count": 1
},
{
"date": "2026-03-21",
"count": 1
},
{
"date": "2026-03-26",
"count": 2
},
{
"date": "2026-04-02",
"count": 1
},
{
"date": "2026-04-04",
"count": 1
},
{
"date": "2026-04-15",
"count": 1
},
{
"date": "2026-04-17",
"count": 1
},
{
"date": "2026-05-08",
"count": 1
},
{
"date": "2026-05-15",
"count": 1
},
{
"date": "2026-05-20",
"count": 1
},
{
"date": "2026-05-21",
"count": 3
},
{
"date": "2026-05-22",
"count": 1
},
{
"date": "2026-05-23",
"count": 3
},
{
"date": "2026-05-25",
"count": 2
},
{
"date": "2026-05-26",
"count": 1
},
{
"date": "2026-05-27",
"count": 1
},
{
"date": "2026-05-30",
"count": 1
},
{
"date": "2026-06-02",
"count": 1
},
{
"date": "2026-06-05",
"count": 2
},
{
"date": "2026-06-13",
"count": 1
},
{
"date": "2026-06-20",
"count": 1
},
{
"date": "2026-07-05",
"count": 1
},
{
"date": "2026-07-17",
"count": 1
}
],
"complete": true,
"collected": 31,
"total_forks": 31
},
"star_history": null,
"open_issues_and_prs": 21
},
"ai_readiness": {
"has_nix": false,
"example_dirs": [],
"has_llms_txt": false,
"has_dockerfile": true,
"has_mcp_signal": false,
"bootstrap_files": [
"packages/agent/Makefile"
],
"api_schema_files": [],
"has_devcontainer": false,
"typecheck_configs": [
"templates/static-site/tsconfig.json",
"templates/web-app/frontend/tsconfig.json"
],
"toolchain_manifests": [
"packages/agent/go.mod"
],
"largest_source_bytes": 57346,
"source_files_sampled": 260,
"oversized_source_files": 0,
"agent_instruction_files": [
"CLAUDE.md",
"templates/backend-service/AGENT.md",
"templates/backend-service/CLAUDE.md",
"templates/docker/AGENT.md",
"templates/docker/CLAUDE.md",
"templates/static-site/AGENT.md",
"templates/static-site/CLAUDE.md",
"templates/web-app/AGENT.md",
"templates/web-app/CLAUDE.md"
],
"agent_instruction_max_bytes": 16673
},
"dependencies": {
"manifests": [
"pyproject.toml"
],
"advisories": {
"error": null,
"scope": "published_package",
"source": "osv",
"findings": [],
"collected": true,
"malicious": [],
"truncated": false,
"by_severity": {},
"advisory_count": 0,
"affected_count": 0,
"assessed_count": 35,
"malicious_count": 0,
"assessed_package": "pypi:runtm@0.2.132",
"unassessed_count": 0,
"direct_affected_count": 0
},
"ecosystems": [
"pypi"
],
"dependencies": [],
"all_dependencies": {
"error": "GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository",
"source": null,
"packages": [],
"collected": false,
"truncated": false,
"total_count": null,
"direct_count": null,
"indirect_count": null
}
},
"maintainership": {
"issues": {
"open_prs": 13,
"merged_prs": 23,
"open_issues": 8,
"closed_ratio": 0,
"closed_issues": 0,
"closed_unmerged_prs": 2
},
"bus_factor": 1,
"bot_contributors": 0,
"top_contributors": [
{
"type": "User",
"login": "Gustrigos",
"commits": 71,
"avatar_url": "https://avatars.githubusercontent.com/u/39495859?v=4"
},
{
"type": "User",
"login": "cvolante54",
"commits": 19,
"avatar_url": "https://avatars.githubusercontent.com/u/28110819?v=4"
},
{
"type": "User",
"login": "jjpd777",
"commits": 2,
"avatar_url": "https://avatars.githubusercontent.com/u/29438288?v=4"
}
],
"contributors_sampled": 3,
"top_contributor_share": 0.772
},
"quality_signals": {
"has_ci": true,
"has_tests": true,
"ci_workflows": [
"ci.yml",
"lint.yml",
"publish.yml",
"release-agent.yml"
],
"has_docs_dir": true,
"linter_configs": [
".eslintrc.json",
"ruff.toml"
],
"has_editorconfig": false,
"has_linter_config": true,
"has_precommit_config": true
},
"security_signals": {
"lockfiles": [
"go.sum",
"uv.lock"
],
"scorecard": {
"checks": [
{
"name": "Binary-Artifacts",
"score": 10,
"reason": "no binaries found in the repo",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#binary-artifacts"
},
{
"name": "Branch-Protection",
"score": null,
"reason": "internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#branch-protection"
},
{
"name": "CI-Tests",
"score": 10,
"reason": "17 out of 17 merged PRs checked by a CI test -- score normalized to 10",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#ci-tests"
},
{
"name": "CII-Best-Practices",
"score": 0,
"reason": "no effort to earn an OpenSSF best practices badge detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#cii-best-practices"
},
{
"name": "Code-Review",
"score": 1,
"reason": "Found 3/25 approved changesets -- score normalized to 1",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#code-review"
},
{
"name": "Contributors",
"score": 0,
"reason": "project has 0 contributing companies or organizations -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#contributors"
},
{
"name": "Dangerous-Workflow",
"score": 10,
"reason": "no dangerous workflow patterns detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dangerous-workflow"
},
{
"name": "Dependency-Update-Tool",
"score": 0,
"reason": "no update tool detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dependency-update-tool"
},
{
"name": "Fuzzing",
"score": 0,
"reason": "project is not fuzzed",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#fuzzing"
},
{
"name": "License",
"score": 9,
"reason": "license file detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#license"
},
{
"name": "Maintained",
"score": 10,
"reason": "30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#maintained"
},
{
"name": "Packaging",
"score": 10,
"reason": "packaging workflow detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#packaging"
},
{
"name": "Pinned-Dependencies",
"score": 0,
"reason": "dependency not pinned by hash detected -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#pinned-dependencies"
},
{
"name": "SAST",
"score": 0,
"reason": "SAST tool is not run on all commits -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#sast"
},
{
"name": "Security-Policy",
"score": 10,
"reason": "security policy file detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#security-policy"
},
{
"name": "Signed-Releases",
"score": 0,
"reason": "Project has not signed or included provenance with any releases.",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#signed-releases"
},
{
"name": "Token-Permissions",
"score": 0,
"reason": "detected GitHub workflow tokens with excessive permissions",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#token-permissions"
},
{
"name": "Vulnerabilities",
"score": 9,
"reason": "1 existing vulnerabilities detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#vulnerabilities"
}
],
"commit": "02aea30518314b41688bf59a4717a710a993158d",
"ran_at": "2026-07-27T12:55:21Z",
"aggregate_score": 4.8,
"scorecard_version": "v5.5.0"
},
"has_codeql_workflow": false,
"has_security_policy": true,
"has_dependabot_config": false
},
"contribution_flow": {
"collected": true,
"ci_last_run_at": "2026-07-24T22:36:58Z",
"oldest_open_prs": [
{
"number": 2,
"created_at": "2026-03-19T20:44:13Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 3,
"created_at": "2026-03-20T04:15:13Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 6,
"created_at": "2026-03-23T01:42:01Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 7,
"created_at": "2026-03-23T01:53:53Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 8,
"created_at": "2026-03-23T02:56:58Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 9,
"created_at": "2026-03-23T19:11:21Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 10,
"created_at": "2026-03-26T16:11:47Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 25,
"created_at": "2026-05-27T05:08:35Z",
"last_comment_at": "2026-06-08T07:42:03Z",
"last_comment_author": "eunseo9311"
},
{
"number": 36,
"created_at": "2026-06-20T15:13:07Z",
"last_comment_at": "2026-06-21T10:54:56Z",
"last_comment_author": "kunaldhongade"
},
{
"number": 37,
"created_at": "2026-06-22T08:08:08Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 41,
"created_at": "2026-07-05T16:02:00Z",
"last_comment_at": "2026-07-05T16:02:04Z",
"last_comment_author": "cursor"
},
{
"number": 42,
"created_at": "2026-07-05T16:36:43Z",
"last_comment_at": "2026-07-05T16:36:46Z",
"last_comment_author": "cursor"
},
{
"number": 44,
"created_at": "2026-07-23T19:40:41Z",
"last_comment_at": null,
"last_comment_author": null
}
],
"last_merged_pr_at": "2026-07-24T22:35:33Z",
"ci_last_conclusion": "SUCCESS",
"oldest_open_issues": [
{
"number": 4,
"created_at": "2026-03-21T14:21:26Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 5,
"created_at": "2026-03-21T14:24:41Z",
"last_comment_at": "2026-05-06T15:15:12Z",
"last_comment_author": "Himanshu-370"
},
{
"number": 16,
"created_at": "2026-05-10T12:34:42Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 21,
"created_at": "2026-05-24T20:09:58Z",
"last_comment_at": "2026-07-01T12:30:46Z",
"last_comment_author": "Dharshan2004"
},
{
"number": 24,
"created_at": "2026-05-26T19:33:24Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 26,
"created_at": "2026-05-28T10:17:31Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 27,
"created_at": "2026-05-28T19:33:55Z",
"last_comment_at": "2026-05-30T17:56:56Z",
"last_comment_author": "RishiGoswami-code"
},
{
"number": 28,
"created_at": "2026-06-02T10:59:26Z",
"last_comment_at": "2026-06-15T10:41:10Z",
"last_comment_author": "sanchal-coder"
}
]
}
},
"config": {
"disabled_metrics": [],
"disabled_categories": [],
"disabled_components": {}
},
"source": {
"url": "https://github.com/runtm-ai/runtm",
"host": "github.com",
"name": "runtm",
"owner": "runtm-ai"
},
"metrics": {
"overall": {
"key": "overall",
"band": "good",
"name": "Overall health",
"note": null,
"notes": [],
"value": 70,
"inputs": {
"security": 59,
"vitality": 82,
"community": 68,
"governance": 46,
"engineering": 96
},
"components": []
},
"categories": [
{
"key": "vitality",
"band": "good",
"name": "Vitality",
"value": 82,
"weight": 0.22,
"metrics": [
{
"key": "development_activity",
"band": "good",
"name": "Development activity",
"note": null,
"notes": [],
"value": 77,
"inputs": {
"commits_last_year": 94,
"human_commit_share": 1,
"days_since_last_push": 2,
"active_weeks_last_year": 19
},
"components": [
{
"key": "push_recency",
"name": "Push recency",
"detail": "last push 2 days ago",
"points": 36,
"status": "met",
"details": [
{
"code": "push_recency",
"params": {
"days": 2
}
}
],
"max_points": 36
},
{
"key": "commit_cadence",
"name": "Commit cadence",
"detail": "19/52 weeks with commits",
"points": 13.2,
"status": "partial",
"details": [
{
"code": "commit_cadence_weeks",
"params": {
"weeks": 19
}
}
],
"max_points": 36
},
{
"key": "commit_volume",
"name": "Commit volume",
"detail": "94 commits in the last year",
"points": 17.8,
"status": "partial",
"details": [
{
"code": "commits_last_year",
"params": {
"count": 94
}
}
],
"max_points": 18
},
{
"key": "openssf_scorecard_maintained",
"name": "OpenSSF Scorecard: Maintained",
"detail": "30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10",
"points": 10,
"status": "met",
"details": [],
"max_points": 10
}
]
},
{
"key": "release_discipline",
"band": "excellent",
"name": "Release discipline",
"note": null,
"notes": [],
"value": 90,
"inputs": {
"releases_count": 13,
"latest_release_tag": "packages/agent/v0.0.13",
"releases_from_tags": false,
"days_since_latest_release": 2,
"mean_days_between_releases": 4.3
},
"components": [
{
"key": "ships_releases",
"name": "Ships releases",
"detail": "13 releases published",
"points": 27,
"status": "met",
"details": [
{
"code": "releases_published",
"params": {
"count": 13
}
}
],
"max_points": 27
},
{
"key": "release_recency",
"name": "Release recency",
"detail": "latest release 2 days ago",
"points": 36,
"status": "met",
"details": [
{
"code": "release_recency",
"params": {
"days": 2
}
}
],
"max_points": 36
},
{
"key": "release_cadence",
"name": "Release cadence",
"detail": "a release every ~4.3 days",
"points": 27,
"status": "met",
"details": [
{
"code": "release_cadence",
"params": {
"gap": 4.3
}
}
],
"max_points": 27
},
{
"key": "openssf_scorecard_signed_releases",
"name": "OpenSSF Scorecard: Signed-Releases",
"detail": "Project has not signed or included provenance with any releases.",
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
}
]
},
{
"key": "abandonment",
"band": "excellent",
"name": "Abandonment",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"cap": null,
"state": "maintained",
"guards": [],
"signals": [],
"red_flag": false,
"multiplier_pct": 100,
"declared_reason": null,
"unverified_reason": null,
"unanswered_open_prs": null,
"unanswered_open_issues": null,
"days_since_last_merged_pr": null,
"days_since_last_human_commit": 2,
"days_since_last_human_commit_is_floor": false
},
"components": [
{
"key": "project_is_still_maintained",
"name": "Project is still maintained",
"detail": "last human commit 2 days ago",
"points": 100,
"status": "met",
"details": [
{
"code": "abandonment_maintained",
"params": {
"days": 2
}
}
],
"max_points": 100
}
]
}
],
"description": "Is the project alive — is code being written and are releases shipping?"
},
{
"key": "community",
"band": "moderate",
"name": "Community & Adoption",
"value": 68,
"weight": 0.18,
"metrics": [
{
"key": "popularity",
"band": "moderate",
"name": "Popularity & adoption",
"note": null,
"notes": [],
"value": 52,
"inputs": {
"forks": 31,
"stars": 286,
"watchers": 2,
"growth_state": "unverified",
"growth_factor_pct": 100,
"growth_unverified_reason": "no_history"
},
"components": [
{
"key": "stars",
"name": "Stars",
"detail": "286 stars",
"points": 39.8,
"status": "partial",
"details": [
{
"code": "stars",
"params": {
"count": 286
}
}
],
"max_points": 60
},
{
"key": "forks",
"name": "Forks",
"detail": "31 forks",
"points": 12.3,
"status": "partial",
"details": [
{
"code": "forks",
"params": {
"count": 31
}
}
],
"max_points": 25
},
{
"key": "watchers",
"name": "Watchers",
"detail": "2 watchers",
"points": 0,
"status": "missed",
"details": [
{
"code": "watchers",
"params": {
"count": 2
}
}
],
"max_points": 15
}
]
},
{
"key": "community_health",
"band": "excellent",
"name": "Community health",
"note": null,
"notes": [],
"value": 86,
"inputs": {
"has_readme": true,
"has_license": true,
"has_contributing": true,
"has_issue_template": false,
"has_code_of_conduct": true,
"has_pull_request_template": true
},
"components": [
{
"key": "readme",
"name": "README",
"detail": null,
"points": 22.5,
"status": "met",
"details": [],
"max_points": 22.5
},
{
"key": "license",
"name": "License",
"detail": "license file present, not a recognized license",
"points": 16.9,
"status": "partial",
"details": [
{
"code": "license_custom",
"params": {}
}
],
"max_points": 22.5
},
{
"key": "contributing_guide",
"name": "CONTRIBUTING guide",
"detail": null,
"points": 18,
"status": "met",
"details": [],
"max_points": 18
},
{
"key": "code_of_conduct",
"name": "Code of conduct",
"detail": null,
"points": 13.5,
"status": "met",
"details": [],
"max_points": 13.5
},
{
"key": "issue_template",
"name": "Issue template",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.2
},
{
"key": "pr_template",
"name": "PR template",
"detail": null,
"points": 6.3,
"status": "met",
"details": [],
"max_points": 6.3
}
]
}
],
"description": "Does the project have users, downloads, attention, and a welcoming setup for contributors?"
},
{
"key": "governance",
"band": "at_risk",
"name": "Sustainability & Governance",
"value": 46,
"weight": 0.24,
"metrics": [
{
"key": "maintainer_resilience",
"band": "critical",
"name": "Maintainer resilience (bus factor)",
"note": null,
"notes": [],
"value": 18,
"inputs": {
"bus_factor": 1,
"contributors_sampled": 3,
"top_contributor_share": 0.772
},
"components": [
{
"key": "bus_factor",
"name": "Bus factor",
"detail": "1 contributor(s) cover half of all commits",
"points": 9,
"status": "partial",
"details": [
{
"code": "bus_factor",
"params": {
"count": 1
}
}
],
"max_points": 54
},
{
"key": "commit_distribution",
"name": "Commit distribution",
"detail": "top contributor authored 77% of commits",
"points": 5.1,
"status": "partial",
"details": [
{
"code": "top_contributor_share",
"params": {
"share": 77
}
}
],
"max_points": 22.5
},
{
"key": "contributor_breadth",
"name": "Contributor breadth",
"detail": "3 contributors",
"points": 4.1,
"status": "partial",
"details": [
{
"code": "contributors_sampled",
"params": {
"count": 3
}
}
],
"max_points": 13.5
},
{
"key": "openssf_scorecard_contributors",
"name": "OpenSSF Scorecard: Contributors",
"detail": "project has 0 contributing companies or organizations -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
}
]
},
{
"key": "responsiveness",
"band": "at_risk",
"name": "Issue & PR responsiveness",
"note": null,
"notes": [],
"value": 37,
"inputs": {
"merged_prs": 23,
"open_issues": 8,
"closed_issues": 0,
"issue_closed_ratio": 0,
"closed_unmerged_prs": 2
},
"components": [
{
"key": "issue_resolution",
"name": "Issue resolution",
"detail": "0% of issues closed",
"points": 0,
"status": "missed",
"details": [
{
"code": "issues_closed_share",
"params": {
"share": 0
}
}
],
"max_points": 46.75
},
{
"key": "pr_acceptance",
"name": "PR acceptance",
"detail": "23/25 decided PRs merged",
"points": 35.2,
"status": "partial",
"details": [
{
"code": "decided_prs_merged",
"params": {
"merged": 23,
"decided": 25
}
}
],
"max_points": 38.25
},
{
"key": "openssf_scorecard_code_review",
"name": "OpenSSF Scorecard: Code-Review",
"detail": "Found 3/25 approved changesets -- score normalized to 1",
"points": 1.5,
"status": "partial",
"details": [],
"max_points": 15
}
]
},
{
"key": "stewardship",
"band": "at_risk",
"name": "Ownership & stewardship",
"note": null,
"notes": [],
"value": 45,
"inputs": {
"followers": 14,
"owner_type": "Organization",
"is_verified": null,
"owner_login": "runtm-ai",
"public_repos": 4,
"account_age_days": 223
},
"components": [
{
"key": "ownership_backing",
"name": "Ownership backing",
"detail": "organization-owned",
"points": 30,
"status": "met",
"details": [
{
"code": "owner_organization",
"params": {}
}
],
"max_points": 30
},
{
"key": "verified_domain",
"name": "Verified domain",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 20
},
{
"key": "owner_reach",
"name": "Owner reach",
"detail": "14 followers of runtm-ai",
"points": 8.5,
"status": "partial",
"details": [
{
"code": "owner_followers",
"params": {
"count": 14,
"login": "runtm-ai"
}
}
],
"max_points": 25
},
{
"key": "track_record",
"name": "Track record",
"detail": "4 public repos, account ~0 yr old",
"points": 6.3,
"status": "partial",
"details": [
{
"code": "public_repos",
"params": {
"count": 4
}
},
{
"code": "account_age_years",
"params": {
"years": 0
}
}
],
"max_points": 25
}
]
},
{
"key": "package_maintenance",
"band": "excellent",
"name": "Package maintenance",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"packages": [
"runtm"
],
"ecosystems": "pypi",
"any_deprecated": false,
"min_days_since_publish": 2
},
"components": [
{
"key": "published_resolvable",
"name": "Published & resolvable",
"detail": "1 package(s) on pypi",
"points": 25,
"status": "met",
"details": [
{
"code": "packages_published",
"params": {
"count": 1,
"ecosystems": "pypi"
}
}
],
"max_points": 25
},
{
"key": "publish_recency",
"name": "Publish recency",
"detail": "latest publish 2 days ago",
"points": 35,
"status": "met",
"details": [
{
"code": "publish_recency",
"params": {
"days": 2
}
}
],
"max_points": 35
},
{
"key": "version_history",
"name": "Version history",
"detail": "34 published versions",
"points": 20,
"status": "met",
"details": [
{
"code": "published_versions",
"params": {
"count": 34
}
}
],
"max_points": 20
},
{
"key": "not_deprecated",
"name": "Not deprecated",
"detail": "active, not deprecated or yanked",
"points": 20,
"status": "met",
"details": [
{
"code": "package_not_deprecated",
"params": {}
}
],
"max_points": 20
}
]
}
],
"description": "Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?"
},
{
"key": "engineering",
"band": "excellent",
"name": "Engineering Quality",
"value": 96,
"weight": 0.2,
"metrics": [
{
"key": "engineering_practices",
"band": "excellent",
"name": "Engineering practices",
"note": null,
"notes": [],
"value": 94,
"inputs": {
"has_ci": true,
"has_tests": true,
"has_editorconfig": false,
"has_linter_config": true,
"has_precommit_config": true
},
"components": [
{
"key": "ci_workflows",
"name": "CI workflows",
"detail": "4 workflow(s)",
"points": 24,
"status": "met",
"details": [
{
"code": "ci_workflows",
"params": {
"count": 4
}
}
],
"max_points": 24
},
{
"key": "tests_present",
"name": "Tests present",
"detail": null,
"points": 24,
"status": "met",
"details": [],
"max_points": 24
},
{
"key": "linter_config",
"name": "Linter config",
"detail": ".eslintrc.json, ruff.toml",
"points": 16,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": ".eslintrc.json, ruff.toml"
}
}
],
"max_points": 16
},
{
"key": "pre_commit_hooks",
"name": "Pre-commit hooks",
"detail": null,
"points": 9.6,
"status": "met",
"details": [],
"max_points": 9.6
},
{
"key": "editorconfig",
"name": ".editorconfig",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 6.4
},
{
"key": "openssf_scorecard_ci_tests",
"name": "OpenSSF Scorecard: CI-Tests",
"detail": "17 out of 17 merged PRs checked by a CI test -- score normalized to 10",
"points": 20,
"status": "met",
"details": [],
"max_points": 20
}
]
},
{
"key": "documentation",
"band": "excellent",
"name": "Documentation",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"topics": [
"ai-agents",
"agent-runtime",
"agentic",
"control-plane",
"ephemeral-environments",
"infra",
"llm-tools",
"llmops",
"observability",
"open-source",
"serverless",
"app-runtime",
"anthropic",
"claude",
"cursor",
"openai",
"claude-code",
"sandbox"
],
"has_wiki": true,
"homepage": "https://www.runtm.com/",
"has_readme": true,
"has_docs_dir": true,
"has_description": true
},
"components": [
{
"key": "readme",
"name": "README",
"detail": null,
"points": 30,
"status": "met",
"details": [],
"max_points": 30
},
{
"key": "documentation_directory",
"name": "Documentation directory",
"detail": null,
"points": 25,
"status": "met",
"details": [],
"max_points": 25
},
{
"key": "documentation_homepage_site",
"name": "Documentation / homepage site",
"detail": "https://www.runtm.com/",
"points": 15,
"status": "met",
"details": [],
"max_points": 15
},
{
"key": "repository_description",
"name": "Repository description",
"detail": null,
"points": 10,
"status": "met",
"details": [],
"max_points": 10
},
{
"key": "topics",
"name": "Topics",
"detail": "18 topics",
"points": 10,
"status": "met",
"details": [
{
"code": "topics_count",
"params": {
"count": 18
}
}
],
"max_points": 10
},
{
"key": "wiki",
"name": "Wiki",
"detail": null,
"points": 10,
"status": "met",
"details": [],
"max_points": 10
}
]
}
],
"description": "Are baseline engineering and documentation practices in place?"
},
{
"key": "security",
"band": "moderate",
"name": "Security",
"value": 59,
"weight": 0.16,
"metrics": [
{
"key": "security_posture",
"band": "at_risk",
"name": "Security posture",
"note": "Excluded from scoring (no data or not applicable): Branch-Protection. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"branch_protection"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 49,
"inputs": {
"source": "openssf_scorecard",
"checks_evaluated": 17,
"scorecard_version": "v5.5.0",
"checks_inconclusive": 1,
"scorecard_aggregate": 4.8
},
"components": [
{
"key": "binary_artifacts",
"name": "Binary-Artifacts",
"detail": "no binaries found in the repo",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "branch_protection",
"name": "Branch-Protection",
"detail": "internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 7.5
},
{
"key": "ci_tests",
"name": "CI-Tests",
"detail": "17 out of 17 merged PRs checked by a CI test -- score normalized to 10",
"points": 2.5,
"status": "met",
"details": [],
"max_points": 2.5
},
{
"key": "cii_best_practices",
"name": "CII-Best-Practices",
"detail": "no effort to earn an OpenSSF best practices badge detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 2.5
},
{
"key": "code_review",
"name": "Code-Review",
"detail": "Found 3/25 approved changesets -- score normalized to 1",
"points": 0.8,
"status": "partial",
"details": [],
"max_points": 7.5
},
{
"key": "contributors",
"name": "Contributors",
"detail": "project has 0 contributing companies or organizations -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 2.5
},
{
"key": "dangerous_workflow",
"name": "Dangerous-Workflow",
"detail": "no dangerous workflow patterns detected",
"points": 10,
"status": "met",
"details": [],
"max_points": 10
},
{
"key": "dependency_update_tool",
"name": "Dependency-Update-Tool",
"detail": "no update tool detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "fuzzing",
"name": "Fuzzing",
"detail": "project is not fuzzed",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "license",
"name": "License",
"detail": "license file detected",
"points": 2.2,
"status": "partial",
"details": [],
"max_points": 2.5
},
{
"key": "maintained",
"name": "Maintained",
"detail": "30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "packaging",
"name": "Packaging",
"detail": "packaging workflow detected",
"points": 5,
"status": "met",
"details": [],
"max_points": 5
},
{
"key": "pinned_dependencies",
"name": "Pinned-Dependencies",
"detail": "dependency not pinned by hash detected -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "sast",
"name": "SAST",
"detail": "SAST tool is not run on all commits -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "security_policy",
"name": "Security-Policy",
"detail": "security policy file detected",
"points": 5,
"status": "met",
"details": [],
"max_points": 5
},
{
"key": "signed_releases",
"name": "Signed-Releases",
"detail": "Project has not signed or included provenance with any releases.",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "token_permissions",
"name": "Token-Permissions",
"detail": "detected GitHub workflow tokens with excessive permissions",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "vulnerabilities",
"name": "Vulnerabilities",
"detail": "1 existing vulnerabilities detected",
"points": 6.8,
"status": "partial",
"details": [],
"max_points": 7.5
}
]
},
{
"key": "dependency_advisories",
"band": "excellent",
"name": "Dependency advisories",
"note": "Excluded from scoring (no data or not applicable): No advisories left outstanding. Remaining weights renormalized. Matched the pypi:runtm@0.2.132 runtime dependency closure — what installing the published package pulls in — 35 packages. Reachability is not analyzed.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"no_advisories_left_outstanding"
]
}
},
{
"code": "weights_renormalized",
"params": {}
},
{
"code": "advisories_scope_published",
"params": {
"package": "pypi:runtm@0.2.132",
"assessed": 35
}
},
{
"code": "advisories_reachability",
"params": {}
}
],
"value": 100,
"inputs": {
"source": "osv",
"advisories": 0,
"affected_packages": 0,
"assessed_packages": 35,
"unassessed_packages": 0,
"affected_by_severity": "none",
"direct_affected_packages": 0
},
"components": [
{
"key": "direct_dependencies_free_of_known_advisories",
"name": "Direct dependencies free of known advisories",
"detail": "no direct dependency carries a known advisory",
"points": 35,
"status": "met",
"details": [
{
"code": "no_direct_advisories",
"params": {}
}
],
"max_points": 35
},
{
"key": "indirect_dependencies_free_of_known_advisories",
"name": "Indirect dependencies free of known advisories",
"detail": "no indirect dependency carries a known advisory",
"points": 25,
"status": "met",
"details": [
{
"code": "no_indirect_advisories",
"params": {}
}
],
"max_points": 25
},
{
"key": "no_advisories_left_outstanding",
"name": "No advisories left outstanding",
"detail": "no advisory carries a publication date",
"points": 0,
"status": "excluded",
"details": [
{
"code": "advisories_no_publication_date",
"params": {}
}
],
"max_points": 40
}
]
},
{
"key": "malicious_dependencies",
"band": "excellent",
"name": "Malicious dependencies",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"source": "osv",
"meaning": "reported as a malicious package by the OpenSSF corpus; the remedy is removal or moving off the compromised name, never an upgrade of the same artifact. Versions the registry has since pulled are listed but not scored",
"packages": [],
"red_flag": false,
"assessed_packages": 35,
"malicious_packages": 0,
"direct_malicious_packages": 0,
"withdrawn_malicious_packages": 0,
"installable_malicious_packages": 0
},
"components": [
{
"key": "no_dependency_reported_as_a_malicious_package",
"name": "No dependency reported as a malicious package",
"detail": "no dependency is reported as a malicious package",
"points": 100,
"status": "met",
"details": [
{
"code": "no_malicious_dependencies",
"params": {}
}
],
"max_points": 100
}
]
},
{
"key": "high_risk_jurisdiction_exposure",
"band": "excellent",
"name": "High-Risk Jurisdiction Exposure",
"note": "Only high-confidence self-published location evidence affects this multiplier. Ambiguous matches are review-only; country evidence is not proof of nationality, citizenship, legal registration, malicious intent, or sanctions status.",
"notes": [
{
"code": "jurisdiction_evidence_limits",
"params": {}
}
],
"value": 100,
"inputs": {
"meaning": "self-published location evidence; not nationality or citizenship",
"red_flag": false,
"exposures": [],
"policy_countries": [
"Russia",
"Iran",
"North Korea"
],
"review_only_matches": 0,
"assessed_self_published_locations": 3
},
"components": [
{
"key": "policy_exposure_multiplier",
"name": "Policy exposure multiplier",
"detail": "no confirmed policy-scope location match",
"points": 100,
"status": "met",
"details": [
{
"code": "jurisdiction_no_match",
"params": {}
}
],
"max_points": 100
}
]
}
],
"description": "Are visible security and supply-chain practices strong, with no malicious dependency and no unresolved high-risk jurisdiction exposure?"
},
{
"key": "ai_readiness",
"band": "good",
"name": "AI Readiness",
"value": 80,
"weight": 0,
"metrics": [
{
"key": "ai_agent_context",
"band": "good",
"name": "Agent context & guidance",
"note": null,
"notes": [],
"value": 76,
"inputs": {
"has_llms_txt": false,
"legible_history_share": 0.574,
"agent_instruction_files": [
"CLAUDE.md",
"templates/backend-service/AGENT.md",
"templates/backend-service/CLAUDE.md",
"templates/docker/AGENT.md",
"templates/docker/CLAUDE.md",
"templates/static-site/AGENT.md",
"templates/static-site/CLAUDE.md",
"templates/web-app/AGENT.md",
"templates/web-app/CLAUDE.md"
],
"agent_instruction_max_bytes": 16673
},
"components": [
{
"key": "agent_instructions",
"name": "Agent instructions",
"detail": "CLAUDE.md, templates/backend-service/AGENT.md, templates/backend-service/CLAUDE.md, templates/docker/AGENT.md, templates/docker/CLAUDE.md, templates/static-site/AGENT.md, templates/static-site/CLAUDE.md, templates/web-app/AGENT.md, templates/web-app/CLAUDE.md",
"points": 45,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "CLAUDE.md, templates/backend-service/AGENT.md, templates/backend-service/CLAUDE.md, templates/docker/AGENT.md, templates/docker/CLAUDE.md, templates/static-site/AGENT.md, templates/static-site/CLAUDE.md, templates/web-app/AGENT.md, templates/web-app/CLAUDE.md"
}
}
],
"max_points": 45
},
{
"key": "machine_readable_docs_llms_txt",
"name": "Machine-readable docs (llms.txt)",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
},
{
"key": "legible_commit_history",
"name": "Legible commit history",
"detail": "54 of 94 human commits state their intent (structured subject or explanatory body)",
"points": 30.6,
"status": "partial",
"details": [
{
"code": "legible_history",
"params": {
"legible": 54,
"sampled": 94
}
}
],
"max_points": 40
}
]
},
{
"key": "ai_verify_loop",
"band": "good",
"name": "Verify loop (build / test / typecheck)",
"note": null,
"notes": [],
"value": 82,
"inputs": {
"has_nix": false,
"has_tests": true,
"lockfiles": [
"go.sum",
"uv.lock"
],
"has_dockerfile": true,
"typed_language": false,
"bootstrap_files": [
"packages/agent/Makefile"
],
"has_devcontainer": false,
"has_linter_config": true,
"typecheck_configs": [
"templates/static-site/tsconfig.json",
"templates/web-app/frontend/tsconfig.json"
],
"agent_commit_share": 0.351,
"toolchain_manifests": [
"packages/agent/go.mod"
],
"dependency_bot_commit_share": 0
},
"components": [
{
"key": "one_command_bootstrap",
"name": "One-command bootstrap",
"detail": "packages/agent/Makefile",
"points": 18,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "packages/agent/Makefile"
}
}
],
"max_points": 18
},
{
"key": "automated_tests",
"name": "Automated tests",
"detail": null,
"points": 22,
"status": "met",
"details": [],
"max_points": 22
},
{
"key": "lint_format_config",
"name": "Lint / format config",
"detail": ".eslintrc.json, ruff.toml",
"points": 11,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": ".eslintrc.json, ruff.toml"
}
}
],
"max_points": 11
},
{
"key": "static_type_checking",
"name": "Static type checking",
"detail": "templates/static-site/tsconfig.json, templates/web-app/frontend/tsconfig.json",
"points": 11,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "templates/static-site/tsconfig.json, templates/web-app/frontend/tsconfig.json"
}
}
],
"max_points": 11
},
{
"key": "reproducible_environment",
"name": "Reproducible environment",
"detail": "Dockerfile, lockfile",
"points": 10,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "Dockerfile, lockfile"
}
}
],
"max_points": 10
},
{
"key": "demonstrated_agent_practice",
"name": "Demonstrated agent practice",
"detail": "33 of the last 94 commits agent-authored or agent-credited",
"points": 10,
"status": "met",
"details": [
{
"code": "agent_authored_commits",
"params": {
"count": 33,
"sampled": 94
}
}
],
"max_points": 10
},
{
"key": "automated_maintenance",
"name": "Automated maintenance",
"detail": "no automated dependency updates observed",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_dependency_automation",
"params": {}
}
],
"max_points": 8
},
{
"key": "openssf_scorecard_pinned_dependencies",
"name": "OpenSSF Scorecard: Pinned-Dependencies",
"detail": "dependency not pinned by hash detected -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
}
]
},
{
"key": "ai_code_legibility",
"band": "good",
"name": "Code legibility for models",
"note": null,
"notes": [],
"value": 82,
"inputs": {
"primary_language": "Python",
"largest_source_bytes": 57346,
"source_files_sampled": 260,
"oversized_source_files": 0
},
"components": [
{
"key": "type_checkable_code",
"name": "Type-checkable code",
"detail": "Python with type-check config (templates/static-site/tsconfig.json, templates/web-app/frontend/tsconfig.json)",
"points": 27,
"status": "partial",
"details": [
{
"code": "typecheck_config_language",
"params": {
"files": "templates/static-site/tsconfig.json, templates/web-app/frontend/tsconfig.json",
"language": "Python"
}
}
],
"max_points": 45
},
{
"key": "manageable_file_sizes",
"name": "Manageable file sizes",
"detail": "0/260 source files over 60KB",
"points": 55,
"status": "met",
"details": [
{
"code": "oversized_source_files",
"params": {
"kb": 60,
"sampled": 260,
"oversized": 0
}
}
],
"max_points": 55
}
]
}
],
"description": "How well is the repo equipped to be developed and maintained with AI coding agents? An independent, experimental badge — weight 0.0, so it is surfaced on its own and does not affect the overall health score."
}
],
"metrics_version": "1.13.0"
},
"warnings": [
"Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token",
"GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository"
],
"report_type": "repository",
"generated_at": "2026-07-27T12:55:37.276985Z",
"schema_version": "0.27.0",
"badge_url": "https://raw.githubusercontent.com/inspect-software/badges/main/v1/r/runtm-ai/runtm.svg",
"full_name": "runtm-ai/runtm",
"license_state": "custom",
"license_spdx": null
}