公开记录良好
软件健康报告模式 0.27.0 · 指标 2.3.1 · 2026-08-01 08:41 UTC
sampleXbro / agentsmesh
One reliable canonical source for AI coding agent rules, commands, skills, MCP, hooks, and permissions — synced across AI coding assistants.
sampleXbro/agentsmesh 的健康指数为 100 分中的 71 分，处于「良好」区间。 其得分最高的类别是Engineering Quality（84/100），最低的是Security（45/100）。 最近一次更新在 9 天前。 近期的大部分工作由 1 位贡献者完成。
71
总分 / 100软件健康指数
指标归入加权类别，统一采用 1–100 量表。总体分先取类别加权平均，再依据公开记录的分布进行校准，使各等级具有百分位含义；当公开证据触发高风险司法辖区政策时，评级会按政策调整，并设置 34（存在风险）的上限。
71
卓越93-100公开记录中的最高层级（约前 5%）；基本满足所有检验标准
优秀80-92各方面均表现强劲；仅有少量不足
良好65-79健康；不足之处有限且可控
中等50-64可接受，但存在明显不足；建议进行审查
薄弱35-49多个领域存在实质性薄弱环节
存在风险20-34存在重大薄弱环节；采用时应保持审慎
危急1-19问题严重（项目被弃置、仅有单一维护者、缺乏基本工程规范）
评分画像
每条轴代表一个类别。形状比平均值更重要——健康的对象会填满整个图形，而“一峰一谷”式画像意味着某一维度的优势正掩盖另一维度的风险。
加权总体分 63 经校准后在公布的指数量表上为 71（记录校准 2026-08-02）。
所有权
软件包生态系统
按类别列示的指标
活力
项目是否仍有生命——是否仍在编写代码，是否仍在发布版本？
77
开发活跃度
69良好
评分方式
| 28.8/36 | 推送新近度 — 最近一次推送于 9 天前 |
| 11.8/36 | 提交节奏 — 52 周中有 17 周有提交 |
| 18/18 | 提交量 — 最近一年 776 次提交 |
| 10/10 | OpenSSF Scorecard：Maintained — 30 commit(s) and 1 issue activity found in the last 90 days -- score normalized to 10 |
所用输入
| commits_last_year | 776 |
| human_commit_share | 0.95 |
| days_since_last_push | 9 |
| active_weeks_last_year | 17 |
发布纪律
90优秀
评分方式
| 27/27 | 有发布版本 — 已发布 43 个发布版本 |
| 36/36 | 发布时效 — 最近一次发布版本于 9 天前 |
| 27/27 | 发布节奏 — 约每 3.8 天发布一次 |
| 0/10 | OpenSSF Scorecard：Signed-Releases — Project has not signed or included provenance with any releases. |
所用输入
| releases_count | 43 |
| latest_release_tag | v0.32.0 |
| releases_from_tags | 否 |
| days_since_latest_release | 9 |
| mean_days_between_releases | 3.8 |
社区与采用
项目是否拥有用户、下载量与关注度，并具备欢迎贡献者参与的配置？
58
流行度与采用
26存在风险
评分方式
| 21.1/60 | 星标 — 21 个星标 |
| 5/25 | 复刻 — 5 个复刻 |
| 0/15 | 关注者 — 2 位关注者 |
所用输入
| forks | 5 |
| stars | 21 |
| watchers | 2 |
| growth_state | unverified |
| growth_factor_pct | 100 |
| growth_unverified_reason | no_history |
社区健康
92优秀
评分方式
| 22.5/22.5 | README |
| 22.5/22.5 | 许可证 — 可识别的许可证（MIT） |
| 18/18 | CONTRIBUTING 指南 |
| 13.5/13.5 | 行为准则 |
| 0/7.2 | 议题模板 |
| 6.3/6.3 | PR 模板 |
所用输入
| has_readme | 是 |
| has_license | 是 |
| readme_badges | — |
| has_contributing | 是 |
| has_issue_template | 否 |
| has_code_of_conduct | 是 |
| readme_badge_services | — |
| has_pull_request_template | 是 |
生态采用（下载量）
63中等
评分方式
| 50.1/80 | 月度下载量 — npm 合计每月 5,677 次下载 |
| 0/20 | 注册表被依赖数 — 该生态系统不报告此项 |
所用输入
| packages | agentsmesh |
| dependents | — |
| ecosystems | npm |
| total_downloads | — |
| monthly_downloads | 5,677 |
已排除计分（无数据或不适用）：注册表被依赖数。 其余权重已重新归一化。
可持续性与治理
项目能否在其成员之外延续——巴士系数、响应能力、由谁支持，以及软件包的维护状况？
49
维护者韧性（巴士系数）
17危急
评分方式
| 9/54 | 巴士系数 — 1 位贡献者贡献了半数提交 |
| 2.9/22.5 | 提交分布 — 头号贡献者编写了 87% 的提交 |
| 5.4/13.5 | 贡献者广度 — 4 位贡献者 |
| 0/10 | OpenSSF Scorecard：Contributors — project has 0 contributing companies or organizations -- score normalized to 0 |
所用输入
| bus_factor | 1 |
| contributors_sampled | 4 |
| top_contributor_share | 0.87 |
议题与 PR 响应能力
58中等
评分方式
| 17.5/42 | 议题解决 — 42% 的议题已关闭 |
| 29.7/30 | PR 接受 — 已裁定的 PR 中 92/93 已合并 |
| 0/13 | Newcomer PR acceptance — 30 天内没有首次贡献者的 PR 得到裁决 |
| 3/15 | OpenSSF Scorecard：Code-Review — Found 1/4 approved changesets -- score normalized to 2 |
所用输入
| merged_prs | 92 |
| open_issues | 7 |
| closed_issues | 5 |
| prs_merged_7d | — |
| prs_decided_7d | — |
| prs_merged_30d | — |
| prs_decided_30d | — |
| issue_closed_ratio | 0.417 |
| closed_unmerged_prs | 1 |
| first_time_authors_30d | — |
| first_time_prs_merged_30d | — |
| first_time_prs_decided_30d | — |
已排除计分（无数据或不适用）：newcomer_pr_acceptance。 其余权重已重新归一化。
所有权与托管责任
38薄弱
评分方式
| 10/30 | 所有权背书 — 个人（用户）账户 |
| 0/20 | 已验证域名 — 不适用于个人账户 |
| 0/25 | 所有者影响力 — sampleXbro 有 0 位关注者 |
| 20.6/25 | 既往记录 — 14 个公开仓库，账户约 6 年 |
所用输入
| followers | 0 |
| owner_type | User |
| is_verified | — |
| owner_login | sampleXbro |
| public_repos | 14 |
| account_age_days | 2,500 |
已排除计分（无数据或不适用）：已验证域名。 其余权重已重新归一化。
软件包维护
100卓越
评分方式
| 25/25 | 已发布且可解析 — npm 上有 1 个软件包 |
| 35/35 | 发布时效 — 最近一次发布于 9 天前 |
| 20/20 | 版本历史 — 44 个已发布版本 |
| 20/20 | 未被弃用 — 活跃，未被弃用或撤回 |
所用输入
| packages | agentsmesh |
| ecosystems | npm |
| any_deprecated | 否 |
| min_days_since_publish | 9 |
工程质量
基础的工程与文档实践是否到位？
84
工程实践
74良好
评分方式
| 24/24 | CI 工作流 — 4 个工作流 |
| 24/24 | 存在测试 |
| 16/16 | Linter 配置 — eslint.config.js |
| 0/9.6 | Pre-commit 钩子 |
| 0/6.4 | .editorconfig |
| 10/20 | OpenSSF Scorecard：CI-Tests — 3 out of 6 merged PRs checked by a CI test -- score normalized to 5 |
所用输入
| has_ci | 是 |
| has_tests | 是 |
| has_editorconfig | 否 |
| has_linter_config | 是 |
| has_precommit_config | 否 |
文档
100卓越
评分方式
| 30/30 | README |
| 25/25 | 文档目录 |
| 15/15 | 文档 / 主页站点 — https://samplexbro.github.io/agentsmesh/ |
| 10/10 | 仓库描述 |
| 10/10 | 主题标签 — 8 个主题标签 |
| 10/10 | Wiki |
所用输入
| topics | ai-agents, claude-code, cli, codex, config-sync, cursor, developer-tools, mcp |
| has_wiki | 是 |
| homepage | https://samplexbro.github.io/agentsmesh/ |
| has_readme | 是 |
| has_docs_dir | 是 |
| has_description | 是 |
安全
可见的安全与供应链实践是否稳固，且不存在未解决的高风险司法辖区暴露？
45
安全态势
35薄弱
评分方式
| 7.5/7.5 | Binary-Artifacts — no binaries found in the repo |
| 0/7.5 | Branch-Protection — branch protection not enabled on development/release branches |
| 1.2/2.5 | CI-Tests — 3 out of 6 merged PRs checked by a CI test -- score normalized to 5 |
| 0/2.5 | CII-Best-Practices — no effort to earn an OpenSSF best practices badge detected |
| 1.5/7.5 | Code-Review — Found 1/4 approved changesets -- score normalized to 2 |
| 0/2.5 | Contributors — project has 0 contributing companies or organizations -- score normalized to 0 |
| 10/10 | Dangerous-Workflow — no dangerous workflow patterns detected |
| 0/7.5 | Dependency-Update-Tool — no update tool detected |
| 0/5 | Fuzzing — project is not fuzzed |
| 2.5/2.5 | 许可证 — license file detected |
| 7.5/7.5 | Maintained — 30 commit(s) and 1 issue activity found in the last 90 days -- score normalized to 10 |
| 0/5 | Packaging — 无数据 |
| 0/5 | Pinned-Dependencies — dependency not pinned by hash detected -- score normalized to 0 |
| 0/5 | SAST — SAST tool is not run on all commits -- score normalized to 0 |
| 5/5 | Security-Policy — security policy file detected |
| 0/7.5 | Signed-Releases — Project has not signed or included provenance with any releases. |
| 0/7.5 | Token-Permissions — detected GitHub workflow tokens with excessive permissions |
| 0/7.5 | Vulnerabilities — 33 existing vulnerabilities detected |
所用输入
| source | openssf_scorecard |
| checks_evaluated | 17 |
| scorecard_version | v5.5.0 |
| checks_inconclusive | 1 |
| scorecard_aggregate | 3.5 |
已排除计分（无数据或不适用）：packaging。 其余权重已重新归一化。
依赖安全公告
85优秀
评分方式
| 20.2/35 | 直接依赖不含已知公告 — 1 个受影响：tar 7.5.20 (moderate 5.3) |
| 25/25 | 间接依赖不含已知公告 — 没有间接依赖携带已知公告 |
| 40/40 | 没有长期未处理的公告 — 没有公告公开超过 90 天 |
所用输入
| source | osv |
| advisories | 1 |
| affected_packages | 1 |
| assessed_packages | 113 |
| unassessed_packages | 0 |
| affected_by_severity | moderate 1 |
| direct_affected_packages | 1 |
比对的是 npm:agentsmesh@0.32.0 的运行时依赖闭包——安装已发布的软件包时真正被拉取进来的内容——共 113 个软件包。 未对可达性进行分析。
AI 就绪度
该仓库在多大程度上具备与 AI 编码代理协同开发与维护的条件？权重刻意设小（4%）：代理工具链是一项真实的维护信号，但完全不具备的仓库仍可达到 100/100。
71
AI 代理上下文与指引
85优秀
评分方式
| 45/45 | 代理指令 — AGENTS.md, CLAUDE.md, src/AGENTS.md, tests/e2e/fixtures/amp-project/AGENTS.md, tests/e2e/fixtures/claude-code-project/CLAUDE.md, tests/e2e/fixtures/codex-project/AGENTS.md, tests/e2e/fixtures/cursor-project/AGENTS.md, tests/e2e/fixtures/deepagents-cli-project/.deepagents/AGENTS.md, tests/e2e/fixtures/factory-droid-project/AGENTS.md, tests/e2e/fixtures/gemini-project/GEMINI.md, tests/e2e/fixtures/goose-project/.goosehints, tests/e2e/fixtures/jules-project/AGENTS.md, tests/e2e/fixtures/kilo-code-project/AGENTS.md, tests/e2e/fixtures/kiro-project/AGENTS.md, tests/e2e/fixtures/opencode-project/AGENTS.md, tests/e2e/fixtures/pi-agent-project/AGENTS.md, tests/e2e/fixtures/rovodev-project/AGENTS.md, tests/e2e/fixtures/warp-project/AGENTS.md, tests/e2e/fixtures/windsurf-agents-project/AGENTS.md, tests/e2e/fixtures/windsurf-project/.windsurfrules |
| 0/15 | 机器可读文档（llms.txt） |
| 40/40 | 可读的提交历史 — 95 次人类提交中有 92 次说明了意图（结构化标题或解释性正文） |
所用输入
| has_llms_txt | 否 |
| legible_history_share | 0.968 |
| agent_instruction_files | AGENTS.md, CLAUDE.md, src/AGENTS.md, tests/e2e/fixtures/amp-project/AGENTS.md, tests/e2e/fixtures/claude-code-project/CLAUDE.md, tests/e2e/fixtures/codex-project/AGENTS.md, tests/e2e/fixtures/cursor-project/AGENTS.md, tests/e2e/fixtures/deepagents-cli-project/.deepagents/AGENTS.md, tests/e2e/fixtures/factory-droid-project/AGENTS.md, tests/e2e/fixtures/gemini-project/GEMINI.md, tests/e2e/fixtures/goose-project/.goosehints, tests/e2e/fixtures/jules-project/AGENTS.md, tests/e2e/fixtures/kilo-code-project/AGENTS.md, tests/e2e/fixtures/kiro-project/AGENTS.md, tests/e2e/fixtures/opencode-project/AGENTS.md, tests/e2e/fixtures/pi-agent-project/AGENTS.md, tests/e2e/fixtures/rovodev-project/AGENTS.md, tests/e2e/fixtures/warp-project/AGENTS.md, tests/e2e/fixtures/windsurf-agents-project/AGENTS.md, tests/e2e/fixtures/windsurf-project/.windsurfrules |
| agent_instruction_max_bytes | 8,162 |
评分方式
| 0/18 | 一条命令的引导启动 |
| 22/22 | 自动化测试 |
| 11/11 | Lint / 格式化配置 — eslint.config.js |
| 11/11 | 静态类型检查 — tests/consumer-smoke/tsconfig.json, tsconfig.json, website/tsconfig.json |
| 10/10 | 可复现环境 — lockfile |
| 0/10 | 已体现的代理实践 — 最近 100 次提交中没有代理编写的提交 |
| 0/8 | 自动化维护 — 未观察到自动依赖更新 |
| 0/10 | OpenSSF Scorecard：Pinned-Dependencies — dependency not pinned by hash detected -- score normalized to 0 |
所用输入
| has_nix | 否 |
| has_tests | 是 |
| lockfiles | pnpm-lock.yaml |
| has_dockerfile | 否 |
| typed_language | 是 |
| bootstrap_files | — |
| has_devcontainer | 否 |
| has_linter_config | 是 |
| typecheck_configs | tests/consumer-smoke/tsconfig.json, tsconfig.json, website/tsconfig.json |
| agent_commit_share | 0 |
| toolchain_manifests | — |
| dependency_bot_commit_share | 0 |
面向模型的代码可读性
100卓越
评分方式
| 45/45 | 可类型检查的代码 — TypeScript（静态类型） |
| 54.9/55 | 可控的文件大小 — 采样的 1,832 个源文件中有 4 个超过 60KB |
所用输入
| primary_language | TypeScript |
| largest_source_bytes | 389,013 |
| source_files_sampled | 1,832 |
| oversized_source_files | 4 |
机器可读接口
60中等
评分方式
| 0/40 | API 模式（OpenAPI/GraphQL/proto） |
| 20/20 | MCP 服务器 |
| 40/40 | 可运行示例 — examples |
所用输入
| example_dirs | examples |
| has_mcp_signal | 是 |
| api_schema_files | — |
关键数据
21GitHub 星标
4贡献者
776最近 12 个月提交数
9距最近推送天数
43发布版本数
1巴士系数（bus factor）
7开放议题
npm软件包生态系统数
数据采集警告
- Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token
- GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository
更多细节
Star 与 Fork 历史 0 ★ / 5 ⇿
0Star
5Fork
25发布
每颗 star 和每个 fork 的添加时间，来自 GitHub 并按天汇总。累计增长位于其构成来源——每日新增——的正上方，二者可相互对照：稳定的自然增长与短暂的突增形态截然不同。当这一差别可被衡量时，它会作为增长真实性予以报告。
主版本 0次版本 21修订 4
OpenSSF Scorecard 3.5 / 10
3.5综合
来自开源项目 OpenSSF Scorecard 的独立、工具无关的安全评估。每项检查奖励的是安全实践本身，而非特定供应商的工具。Scorecard 无法判定的检查项标记为 不适用，并从安全评分中剔除（绝不按零分计）。
| 10 | Binary-Artifacts | no binaries found in the repo |
| 0 | Branch-Protection | branch protection not enabled on development/release branches |
| 5 | CI-Tests | 3 out of 6 merged PRs checked by a CI test -- score normalized to 5 |
| 0 | CII-Best-Practices | no effort to earn an OpenSSF best practices badge detected |
| 2 | Code-Review | Found 1/4 approved changesets -- score normalized to 2 |
| 0 | Contributors | project has 0 contributing companies or organizations -- score normalized to 0 |
| 10 | Dangerous-Workflow | no dangerous workflow patterns detected |
| 0 | Dependency-Update-Tool | no update tool detected |
| 0 | Fuzzing | project is not fuzzed |
| 10 | License | license file detected |
| 10 | Maintained | 30 commit(s) and 1 issue activity found in the last 90 days -- score normalized to 10 |
| 不适用 | Packaging | packaging workflow not detected |
| 0 | Pinned-Dependencies | dependency not pinned by hash detected -- score normalized to 0 |
| 0 | SAST | SAST tool is not run on all commits -- score normalized to 0 |
| 10 | Security-Policy | security policy file detected |
| 0 | Signed-Releases | Project has not signed or included provenance with any releases. |
| 0 | Token-Permissions | detected GitHub workflow tokens with excessive permissions |
| 0 | Vulnerabilities | 33 existing vulnerabilities detected |
直接依赖 12
| 注册表 | 软件包 | 版本约束 | 清单文件 |
|---|---|---|---|
| npm | @clack/prompts | ^1.6.0 | package.json |
| npm | @modelcontextprotocol/sdk | ^1.29.0 | package.json |
| npm | chokidar | ^5.0.0 | package.json |
| npm | diff | 8.0.4 | package.json |
| npm | picomatch | ^4.0.4 | package.json |
| npm | smol-toml | ^1.6.1 | package.json |
| npm | tar | 7.5.20 | package.json |
| npm | yaml | ^2.8.3 | package.json |
| npm | zod | ^4.3.6 | package.json |
| npm | @astrojs/starlight | ^0.32.0 | website/package.json |
| npm | astro | ^5.0.0 | website/package.json |
| npm | sharp | ^0.33.5 | website/package.json |
全部依赖 未采集
本报告未能采集到解析后的依赖集合：GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository
依赖安全公告 1
安装 npm:agentsmesh@0.32.0 会引入 113 个包（直接与传递）：其中 1 个存在已知公告，1 个为直接依赖。
| 软件包 | 版本 | 关系 | 严重程度 | 公告数 | 修复版本 |
|---|---|---|---|---|---|
| tar | 7.5.20 | 直接 | 中 | 1 | 7.5.21 |
公告表示依赖图中记录的版本落入某条公告的受影响范围。可达性未经分析，且依赖图包含开发与测试的版本固定——某项发现可能只涉及工具链而非交付的软件。
原始 JSON 报告 机器可读
{
"data": {
"repo": {
"topics": [
"ai-agents",
"claude-code",
"cli",
"codex",
"config-sync",
"cursor",
"developer-tools",
"mcp"
],
"is_fork": false,
"size_kb": 18651,
"has_wiki": true,
"homepage": "https://samplexbro.github.io/agentsmesh/",
"languages": {
"CSS": 10993,
"MDX": 388527,
"Astro": 5574,
"Shell": 7910,
"Python": 757052,
"JavaScript": 16844,
"TypeScript": 8976446,
"Go Template": 680
},
"pushed_at": "2026-07-22T20:39:33Z",
"created_at": "2026-03-25T07:35:43Z",
"owner_type": "User",
"updated_at": "2026-07-26T20:20:50Z",
"description": "One reliable canonical source for AI coding agent rules, commands, skills, MCP, hooks, and permissions — synced across AI coding assistants.",
"is_archived": false,
"is_disabled": false,
"license_spdx": "MIT",
"default_branch": "master",
"license_spdx_raw": "MIT",
"primary_language": "TypeScript",
"significant_languages": [
"TypeScript"
]
},
"owner": {
"blog": null,
"name": "Serhii Zhabskyi",
"type": "User",
"login": "sampleXbro",
"company": null,
"location": "Germany",
"followers": 0,
"avatar_url": "https://avatars.githubusercontent.com/u/55853222?v=4",
"created_at": "2019-09-26T18:32:13Z",
"is_verified": null,
"public_repos": 14,
"account_age_days": 2500
},
"license": {
"state": "standard",
"spdx_id": "MIT",
"raw_spdx": "MIT",
"file_present": true,
"scorecard_found": true,
"profile_has_license": true
},
"activity": {
"releases": [
{
"tag": "v0.32.0",
"kind": "minor",
"published_at": "2026-07-22T20:40:22Z"
},
{
"tag": "v0.31.0",
"kind": "minor",
"published_at": "2026-07-20T19:18:05Z"
},
{
"tag": "v0.30.2",
"kind": "patch",
"published_at": "2026-07-10T06:33:50Z"
},
{
"tag": "v0.30.1",
"kind": "patch",
"published_at": "2026-07-08T20:46:36Z"
},
{
"tag": "v0.30.0",
"kind": "minor",
"published_at": "2026-07-07T15:33:22Z"
},
{
"tag": "v0.29.0",
"kind": "minor",
"published_at": "2026-06-28T09:07:25Z"
},
{
"tag": "v0.28.0",
"kind": "minor",
"published_at": "2026-06-26T12:50:57Z"
},
{
"tag": "v0.27.0",
"kind": "minor",
"published_at": "2026-06-26T05:32:57Z"
},
{
"tag": "v0.26.0",
"kind": "minor",
"published_at": "2026-06-23T16:16:35Z"
},
{
"tag": "v0.25.0",
"kind": "minor",
"published_at": "2026-06-18T15:25:12Z"
},
{
"tag": "v0.24.0",
"kind": "minor",
"published_at": "2026-06-16T18:51:30Z"
},
{
"tag": "v0.23.0",
"kind": "minor",
"published_at": "2026-06-13T18:34:10Z"
},
{
"tag": "v0.22.0",
"kind": "minor",
"published_at": "2026-06-03T08:59:44Z"
},
{
"tag": "v0.21.0",
"kind": "minor",
"published_at": "2026-05-29T13:08:35Z"
},
{
"tag": "v0.20.0",
"kind": "minor",
"published_at": "2026-05-27T12:56:42Z"
},
{
"tag": "v0.19.1",
"kind": "patch",
"published_at": "2026-05-25T20:47:53Z"
},
{
"tag": "v0.19.0",
"kind": "minor",
"published_at": "2026-05-25T16:02:42Z"
},
{
"tag": "v0.18.1",
"kind": "patch",
"published_at": "2026-05-15T12:11:21Z"
},
{
"tag": "v0.18.0",
"kind": "minor",
"published_at": "2026-05-11T14:07:24Z"
},
{
"tag": "v0.17.0",
"kind": "minor",
"published_at": "2026-05-11T07:17:30Z"
},
{
"tag": "v0.16.0",
"kind": "minor",
"published_at": "2026-05-08T17:16:06Z"
},
{
"tag": "v0.15.0",
"kind": "minor",
"published_at": "2026-05-08T09:48:44Z"
},
{
"tag": "v0.14.0",
"kind": "minor",
"published_at": "2026-05-06T19:25:56Z"
},
{
"tag": "v0.13.0",
"kind": "minor",
"published_at": "2026-05-06T11:51:42Z"
},
{
"tag": "v0.12.0",
"kind": "minor",
"published_at": "2026-05-04T19:04:27Z"
},
{
"tag": "v0.11.0",
"kind": "minor",
"published_at": "2026-05-03T19:03:20Z"
},
{
"tag": "v0.10.0",
"kind": "minor",
"published_at": "2026-05-02T08:29:34Z"
},
{
"tag": "v0.9.0",
"kind": "minor",
"published_at": "2026-04-29T09:28:47Z"
},
{
"tag": "v0.8.0",
"kind": "minor",
"published_at": "2026-04-28T08:13:19Z"
},
{
"tag": "v0.7.0",
"kind": "minor",
"published_at": "2026-04-27T08:06:02Z"
},
{
"tag": "v0.6.0",
"kind": "minor",
"published_at": "2026-04-25T20:02:38Z"
},
{
"tag": "v0.5.0",
"kind": "minor",
"published_at": "2026-04-23T10:23:19Z"
},
{
"tag": "v0.3.1",
"kind": "patch",
"published_at": "2026-04-12T13:39:30Z"
},
{
"tag": "v0.3.0",
"kind": "minor",
"published_at": "2026-04-12T11:57:46Z"
},
{
"tag": "v0.2.10",
"kind": "patch",
"published_at": "2026-03-31T10:17:05Z"
},
{
"tag": "v0.2.9",
"kind": "patch",
"published_at": "2026-03-29T14:52:01Z"
},
{
"tag": "v0.2.8",
"kind": "patch",
"published_at": "2026-03-29T10:47:04Z"
},
{
"tag": "v0.2.6",
"kind": "patch",
"published_at": "2026-03-28T17:18:37Z"
},
{
"tag": "v0.2.5",
"kind": "patch",
"published_at": "2026-03-28T07:50:44Z"
},
{
"tag": "v0.2.4",
"kind": "patch",
"published_at": "2026-03-27T22:36:11Z"
},
{
"tag": "v0.2.3",
"kind": "patch",
"published_at": "2026-03-27T10:13:10Z"
},
{
"tag": "v0.2.2",
"kind": "patch",
"published_at": "2026-03-26T12:22:17Z"
},
{
"tag": "v0.2.1",
"kind": "patch",
"published_at": "2026-03-26T08:45:17Z"
}
],
"recent_commits": [
{
"oid": "ac8e24449c34f19925721dc60a0d902f5217b1e3",
"body": "chore: version packages",
"is_bot": false,
"headline": "Merge pull request #104 from sampleXbro/changeset-release/master",
"author_name": "Serhii Zhabskyi",
"author_login": "sampleXbro",
"committed_at": "2026-07-22T20:38:55Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "70f6a822747a21e0e05b267346110a0949060433",
"body": null,
"is_bot": true,
"headline": "chore: version packages",
"author_name": "github-actions[bot]",
"author_login": "github-actions[bot]",
"committed_at": "2026-07-22T20:29:41Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "8662544f7b4fb1c3e8c7aba4f9d5c6ca66a81860",
"body": "Develop",
"is_bot": false,
"headline": "Merge pull request #105 from sampleXbro/develop",
"author_name": "Serhii Zhabskyi",
"author_login": "sampleXbro",
"committed_at": "2026-07-22T20:29:21Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "41eeba537784b316735ca078fff1e76dc91ede8a",
"body": "Transitive via @modelcontextprotocol/sdk > ajv > fast-uri (was 3.1.2). Clears GHSA-v2hh-gcrm-f6hx and GHSA-4c8g-83qw-93j6 (host confusion) so 'pnpm audit --prod --audit-level=high' passes CI. Override added to package.json + pnpm-workspace.yaml and lockfile regenerated with pnpm 10 (lockfile stays 9.0); frozen install verified exit 0.",
"is_bot": false,
"headline": "fix(deps): override fast-uri to ^3.1.4 to clear high-severity advisories",
"author_name": "Serhii Zhabskyi",
"author_login": "serhiizhabskiy",
"committed_at": "2026-07-22T19:59:31Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0daa7d4ebc472784af354fbb14ab69b389cca4aa",
"body": "…th current repo\n\nPin pnpm 10 (pnpm 11 trips --frozen-lockfile on the lockfile); note CI Node 22/24; document the husky pre-commit gate and lint:dead. Add the load-bearing rules that were missing: never edit generated files (.agentsmesh is source of truth), docs must stay current, strict artifact te\n[…]\ns/interface shapes. Add a dedicated Changesets section (published surface vs no-ship dirs; never hand-edit version/CHANGELOG). Expand the real CI gate list and fix the mis-nested capabilities heading.",
"is_bot": false,
"headline": "docs(contributing): align dev commands, gates, and changeset rules wi…",
"author_name": "Serhii Zhabskyi",
"author_login": "serhiizhabskiy",
"committed_at": "2026-07-22T19:46:56Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "a7229213b9b1a8b90f6373c33fc41a6082e147a5",
"body": "…-in trigger repair\n\nPreToolUse recurrence gate: when the exact action has already failed >=2x and a captured lesson covers it, re-inject the covering rule above the recall bullets as a RECURRENT FAILURE escalation that cuts through session dedup. Advisory-only, once per action per session; the esca\n[…]\n to itself.\n\nSplit captureLesson into capture.ts for the 200-line cap; update CLI/MCP/public importers. Docs (README + cli/reference mdx), changeset, and resynced .agentsmesh/.lock (0.30.1 -> 0.31.0).",
"is_bot": false,
"headline": "feat(lessons): recurrence-gate escalation, per-session telemetry, opt…",
"author_name": "Serhii Zhabskyi",
"author_login": "serhiizhabskiy",
"committed_at": "2026-07-22T19:38:09Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "69ec8334a702bf53ef5276b0f67e91110e10667b",
"body": "Develop",
"is_bot": false,
"headline": "Merge pull request #103 from sampleXbro/develop",
"author_name": "Serhii Zhabskyi",
"author_login": "sampleXbro",
"committed_at": "2026-07-21T18:09:13Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "65c153705f76f28262b6e035762ee86adacf126f",
"body": "fix(check): detect stale generated outputs",
"is_bot": false,
"headline": "Merge pull request #102 from VVeb1250/check-stale-outputs",
"author_name": "Serhii Zhabskyi",
"author_login": "sampleXbro",
"committed_at": "2026-07-21T17:05:31Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a180aedd95607500c4698a6331e1cba3b0a4a2af",
"body": "pnpm audit --prod --audit-level=high failed on tar versions up to 7.5.18:\n- critical GHSA-23hp-3jrh-7fpw (decompression/parse DoS), patched 7.5.19+\n- high GHSA-8x88-c5mf-7j5w (negative entry size infinite loop), patched 7.5.18+\n\ntar is a direct prod dependency, so bumping the pin from 7.5.13 to 7.5.20\nclears both. Lockfile regenerated with pnpm 10 to match CI; frozen install\nand the audit gate both verified green. Pre-existing issue, unrelated to\nthe check changes on this branch.",
"is_bot": false,
"headline": "fix(deps): bump tar to 7.5.20 to clear high/critical advisories",
"author_name": "Serhii Zhabskyi",
"author_login": "serhiizhabskiy",
"committed_at": "2026-07-21T16:30:17Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "49d70d2a098d43ac744d5d4853677b851a6ede80",
"body": "Stale-output detection adds new user-facing behavior plus additive CLI\nJSON and MCP result fields (canonicalDrift, outputDrift, outputsStale).\nUnder semver that is a backward-compatible feature, so minor is the\ncorrect bump for a 0.x release rather than patch.",
"is_bot": false,
"headline": "chore(changeset): bump check-stale-outputs from patch to minor",
"author_name": "Serhii Zhabskyi",
"author_login": "serhiizhabskiy",
"committed_at": "2026-07-21T16:03:29Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "626a50699eda27277d9fbe9046f0c1a84e6cf887",
"body": "Per the repo 'plugins are first-class targets' contract, any code that\niterates targets must hold for registered plugin descriptors, not just\nbuiltins. The stale-output scan iterates config.pluginTargets, so add a\nlock-sync test that registers a plugin descriptor with a managedOutputs\nlayout and asserts a hand-added file under its managed dir is reported in\noutputsStale (resolved via getDescriptor, not builtin-only).",
"is_bot": false,
"headline": "test(check): cover stale detection for registered plugin descriptors",
"author_name": "Serhii Zhabskyi",
"author_login": "serhiizhabskiy",
"committed_at": "2026-07-21T16:03:04Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "076a683afe9bda0b6bc17035b3ac409635c6d54d",
"body": "The stale-output scan spread config.pluginTargets directly; every other\ncall site in the codebase guards it with '?? []'. ValidatedConfig always\npopulates the field, so this is a robustness/consistency fix for configs\nconstructed outside the Zod parse path.",
"is_bot": false,
"headline": "fix(check): default pluginTargets when scanning for stale outputs",
"author_name": "Serhii Zhabskyi",
"author_login": "serhiizhabskiy",
"committed_at": "2026-07-21T16:02:34Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "9efbab1f0c7412361a8f0099d4f03bb2e7b49161",
"body": null,
"is_bot": false,
"headline": "fix(check): detect stale generated outputs",
"author_name": "VVeb1250",
"author_login": "VVeb1250",
"committed_at": "2026-07-21T06:30:53Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "8afffa67c60955dade1dc2ac34750ce2726582cc",
"body": "chore: version packages",
"is_bot": false,
"headline": "Merge pull request #101 from sampleXbro/changeset-release/master",
"author_name": "Serhii Zhabskyi",
"author_login": "sampleXbro",
"committed_at": "2026-07-20T19:16:42Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "8085c8965341dcad3ff90fab4bbaec0a90c8346f",
"body": null,
"is_bot": true,
"headline": "chore: version packages",
"author_name": "github-actions[bot]",
"author_login": "github-actions[bot]",
"committed_at": "2026-07-20T19:07:11Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1231ac42791bda71dcb24947418b053e3e20bbe7",
"body": "Develop",
"is_bot": false,
"headline": "Merge pull request #100 from sampleXbro/develop",
"author_name": "Serhii Zhabskyi",
"author_login": "sampleXbro",
"committed_at": "2026-07-20T19:06:50Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b8f3fa87c37a6a6e79496c89406350dc0972d704",
"body": "generateRules built the execution-rule output path with\n`rule.source.split('/').pop()`, which on Windows leaves the whole native\nbackslash absolute path as the \"slug\" — emitting a bogus\n`.codex/rules/C:\\...\\.agentsmesh\\rules\\<name>.rules`. Its dirname mkdir\nthrows ENOENT (drive-colon mid-path), so `\n[…]\nename regardless\nof platform. Adds a platform-independent regression test feeding a Windows\nabsolute source. Fixes codex-format-roundtrip, global-roundtrip-codex e2e\nand generate unit test on Windows.",
"is_bot": false,
"headline": "fix(codex-cli): derive .rules slug via both path separators (Windows)",
"author_name": "Serhii Zhabskyi",
"author_login": "serhiizhabskiy",
"committed_at": "2026-07-19T18:20:25Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "bb8bba0c1a3fdbc1cc516d470c7f7c653a84d0da",
"body": "…act ignores\n\nThe .cursor/, .kiro/, .warp/ (and sibling) ignore patterns were unanchored,\nso they matched the same-named dirs inside tests/e2e/fixtures/ too. Three\nfixture sources were thus silently gitignored and never committed:\n cursor-project/.cursor/cli.json -> permissions.yaml\n kiro\n[…]\nilently skips emission, failing import-capabilities\ne2e only on CI. Root-anchor every generated-artifact pattern (leading /,\nmatching the existing /docs//tasks/ convention) and commit the three files.",
"is_bot": false,
"headline": "test(e2e): recover gitignored import fixtures; anchor generated-artif…",
"author_name": "Serhii Zhabskyi",
"author_login": "serhiizhabskiy",
"committed_at": "2026-07-19T17:00:05Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "c0c6774dc818a95e1f5515f0b98dbd258f63c694",
"body": "Trailing working-tree artifacts from the completed check output-drift work\n(1991a3ff): captured lessons (incl. pnpm three-source override sync), the\nFix #98 task log, and the regenerated agents e2e run report.",
"is_bot": false,
"headline": "chore: sync lessons graph and Fix #98 task/e2e artifacts",
"author_name": "Serhii Zhabskyi",
"author_login": "serhiizhabskiy",
"committed_at": "2026-07-19T16:22:57Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2e5b97bc49dc4b3e0c0342e91c4bee177ecc8244",
"body": "The hono ^4.12.25 CORS-advisory override (68851507) was added only to\npackage.json pnpm.overrides, leaving pnpm-workspace.yaml and the lockfile\noverrides snapshot stale. This broke CI's pnpm 10 --frozen-lockfile with\nERR_PNPM_LOCKFILE_CONFIG_MISMATCH. Add hono to the workspace overrides and\nregenerate the lock so all three sources agree.",
"is_bot": false,
"headline": "fix(deps): sync hono override across pnpm-workspace.yaml and lockfile",
"author_name": "Serhii Zhabskyi",
"author_login": "serhiizhabskiy",
"committed_at": "2026-07-19T16:17:52Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1991a3ff87d7155cd048ea7212f965b3b9b901d0",
"body": "agentsmesh check verified only canonical sources against the lock, so\ndirect edits to generated files passed CI despite documented behavior.\n\n- generate records checksums of all generated outputs in .agentsmesh/.lock\n (outputs map); full runs replace the map, --targets/--features runs\n merge per-p\n[…]\n(passes projectRoot)\n- merge's lock rewrite intentionally omits outputs until regenerate\n- docs: check/generate/merge CLI pages, CI guide, generation pipeline,\n MCP reference, README lock description",
"is_bot": false,
"headline": "fix(check): detect generated-output drift via lock outputs map (#98)",
"author_name": "Serhii Zhabskyi",
"author_login": "serhiizhabskiy",
"committed_at": "2026-07-19T15:32:21Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "a09ae2043390a67a41acc1db2b41dcb3dacb532d",
"body": "…, sync generated outputs",
"is_bot": false,
"headline": "chore: encode fast audit playbook in update-target-capabilities skill…",
"author_name": "Serhii Zhabskyi",
"author_login": "serhiizhabskiy",
"committed_at": "2026-07-18T08:33:39Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "94539f4ef6bcb18c2d8b4dfff8eed875848e50d7",
"body": "…ect cell formats and fingerprints",
"is_bot": false,
"headline": "test(capabilities): add global-scope ledger conformance harness, corr…",
"author_name": "Serhii Zhabskyi",
"author_login": "serhiizhabskiy",
"committed_at": "2026-07-18T08:33:39Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0ea9e4fbfba472f9fcd4a97c8e9eb0f9d2700caa",
"body": null,
"is_bot": false,
"headline": "fix(crush): merge all global settings features into one crush.json",
"author_name": "Serhii Zhabskyi",
"author_login": "serhiizhabskiy",
"committed_at": "2026-07-18T08:33:39Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "059b177aaad66ec6b0260faf7987ab219ffceba6",
"body": null,
"is_bot": false,
"headline": "feat(capabilities): add text ledger format for plain-text surfaces",
"author_name": "Serhii Zhabskyi",
"author_login": "serhiizhabskiy",
"committed_at": "2026-07-18T08:33:38Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b4f22f2cdc1b528d5fac28de31342437df5b0192",
"body": null,
"is_bot": false,
"headline": "chore: update lessons graph and task notes",
"author_name": "Serhii Zhabskyi",
"author_login": "serhiizhabskiy",
"committed_at": "2026-07-18T08:03:44Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e421a7451578cd9b64f2306449c17bcf2b278477",
"body": null,
"is_bot": false,
"headline": "docs: regenerate support matrix and sync target docs",
"author_name": "Serhii Zhabskyi",
"author_login": "serhiizhabskiy",
"committed_at": "2026-07-18T08:03:43Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "6fa5852c1532e27ff593b3608f47621cc36b8317",
"body": "…ed, 21 rejected cells)",
"is_bot": false,
"headline": "chore(capabilities): record verified research provenance (182 confirm…",
"author_name": "Serhii Zhabskyi",
"author_login": "serhiizhabskiy",
"committed_at": "2026-07-18T08:03:43Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2f27b64a9b73cf7bbe6fe463acaee597609dc305",
"body": "…te all builtin descriptors",
"is_bot": false,
"headline": "test: sync cross-cutting suites with capability audit changes, valida…",
"author_name": "Serhii Zhabskyi",
"author_login": "serhiizhabskiy",
"committed_at": "2026-07-18T08:03:43Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4cca64a1a258a63d4c84248d7d5235be9c01381e",
"body": "…ls round-trip",
"is_bot": false,
"headline": "fix(zed): revert hooks to none (unshipped proposal), wire global skil…",
"author_name": "Serhii Zhabskyi",
"author_login": "serhiizhabskiy",
"committed_at": "2026-07-18T08:03:14Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5be661a0a41600bfb8218e552091c93fe5ee455c",
"body": "…ions partial with lint coverage",
"is_bot": false,
"headline": "fix(windsurf): raise global additionalRules to embedded, keep permiss…",
"author_name": "Serhii Zhabskyi",
"author_login": "serhiizhabskiy",
"committed_at": "2026-07-18T08:03:14Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "cc4c1b681ce5ff9501dc7bd1f5f629509f2ca6ca",
"body": "… changeset with raises",
"is_bot": false,
"headline": "fix(warp): move project MCP to .warp/.mcp.json native surface, extend…",
"author_name": "Serhii Zhabskyi",
"author_login": "serhiizhabskiy",
"committed_at": "2026-07-18T08:03:14Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f5df6c130eda11b9521a78bcfd0785273f6080b0",
"body": "… full test coverage",
"is_bot": false,
"headline": "feat(trae): raise hooks to native, add agents importer round-trip and…",
"author_name": "Serhii Zhabskyi",
"author_login": "serhiizhabskiy",
"committed_at": "2026-07-18T08:03:14Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "66e3da4ec102d4b8baaab3f539fd3878622c0930",
"body": "…audit",
"is_bot": false,
"headline": "fix(rovodev): sync global layout tests and changeset with capability …",
"author_name": "Serhii Zhabskyi",
"author_login": "serhiizhabskiy",
"committed_at": "2026-07-18T08:03:13Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "948b97dafe38710f62cd2201aab4d539a3606309",
"body": "…nore)",
"is_bot": false,
"headline": "fix(roo-code): downgrade global ignore to none (workspace-only .rooig…",
"author_name": "Serhii Zhabskyi",
"author_login": "serhiizhabskiy",
"committed_at": "2026-07-18T08:03:13Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "73b48723c157e13189ab49f323928c80c13b270a",
"body": "…h no-op stubs",
"is_bot": false,
"headline": "feat(replit-agent): raise mcp/hooks/ignore/permissions to partial wit…",
"author_name": "Serhii Zhabskyi",
"author_login": "serhiizhabskiy",
"committed_at": "2026-07-18T08:03:13Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "27c977f0b9ee0ea91647aa026248aca84a94008a",
"body": "…lint messaging",
"is_bot": false,
"headline": "fix(pi-agent): downgrade mcp to none (no MCP surface in pi), correct …",
"author_name": "Serhii Zhabskyi",
"author_login": "serhiizhabskiy",
"committed_at": "2026-07-18T08:03:12Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "763ff061e22fdc7de5554bd35c932ff76cb013a6",
"body": "…te fix",
"is_bot": false,
"headline": "fix(opencode): sync scoped-settings tests and changeset with rules-ga…",
"author_name": "Serhii Zhabskyi",
"author_login": "serhiizhabskiy",
"committed_at": "2026-07-18T08:03:12Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "054ff57e3f4188c0cb31cd994698977d97b5e315",
"body": "…obal and permissions to partial",
"is_bot": false,
"headline": "feat(kiro): migrate hooks to v1 trigger/action schema, raise hooks/gl…",
"author_name": "Serhii Zhabskyi",
"author_login": "serhiizhabskiy",
"committed_at": "2026-07-18T08:03:12Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "9ac38a0181e4f1ce218ecaaed597c142494f00e3",
"body": null,
"is_bot": false,
"headline": "fix(kilo-code): align hooks comments with plugin-based partial surface",
"author_name": "Serhii Zhabskyi",
"author_login": "serhiizhabskiy",
"committed_at": "2026-07-18T08:03:12Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5dcf7310810e3fd29e1cb1a9b349fac287299336",
"body": "…dded, permissions/project to partial",
"is_bot": false,
"headline": "fix(junie): correct allowlist.json schema, raise hooks/global to embe…",
"author_name": "Serhii Zhabskyi",
"author_login": "serhiizhabskiy",
"committed_at": "2026-07-18T08:02:46Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ac93729e87ed54985e05800125ac1bcaabbac73f",
"body": "…ith lint warnings",
"is_bot": false,
"headline": "feat(jules): raise commands/mcp/hooks/ignore/permissions to partial w…",
"author_name": "Serhii Zhabskyi",
"author_login": "serhiizhabskiy",
"committed_at": "2026-07-18T08:02:45Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "27799dd54446ebff7fd9113e6073b3031b6cbd20",
"body": "…rtial, scope-gate lintMcp",
"is_bot": false,
"headline": "feat(goose): raise commands/agents to embedded, mcp/permissions to pa…",
"author_name": "Serhii Zhabskyi",
"author_login": "serhiizhabskiy",
"committed_at": "2026-07-18T08:02:45Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b4b78f5754ddcf62d08bf01c1bf90cb9618d68ee",
"body": null,
"is_bot": false,
"headline": "feat(gemini-cli): raise hooks to native with full event mapping",
"author_name": "Serhii Zhabskyi",
"author_login": "serhiizhabskiy",
"committed_at": "2026-07-18T08:02:45Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "969b4a40c16997859bb9d7147d8ed575bdd13525",
"body": "…e, raise permissions to native",
"is_bot": false,
"headline": "feat(factory-droid): move hooks to .factory/hooks.json primary surfac…",
"author_name": "Serhii Zhabskyi",
"author_login": "serhiizhabskiy",
"committed_at": "2026-07-18T08:02:45Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d06e01fab455de27a0982103160f4a743f49e178",
"body": "…r docs)",
"is_bot": false,
"headline": "fix(deepagents-cli): revert project hooks to none (no file surface pe…",
"author_name": "Serhii Zhabskyi",
"author_login": "serhiizhabskiy",
"committed_at": "2026-07-18T08:02:44Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "45684bd1f3ffd670b815ab810822baf2c2c015ec",
"body": "…or/cli-config.json",
"is_bot": false,
"headline": "feat(cursor): raise permissions to native, fix global path to ~/.curs…",
"author_name": "Serhii Zhabskyi",
"author_login": "serhiizhabskiy",
"committed_at": "2026-07-18T07:57:50Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "944efc259bdebd0af2d86de6fc40af38057c8319",
"body": "…mmands to embedded",
"is_bot": false,
"headline": "feat(crush): raise permissions to native with round-trip importer, co…",
"author_name": "Serhii Zhabskyi",
"author_login": "serhiizhabskiy",
"committed_at": "2026-07-18T07:55:15Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "26c4a84d4e0998c24d55adbf65e30e1cf2a17df4",
"body": null,
"is_bot": false,
"headline": "fix(copilot): sync capability lint and declarations with verified audit",
"author_name": "Serhii Zhabskyi",
"author_login": "serhiizhabskiy",
"committed_at": "2026-07-18T07:52:50Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "cec0e7acb9036170b7a9e6dbcb7363b1d218fad8",
"body": "…re round-trip)",
"is_bot": false,
"headline": "feat(continue): raise ignore to native for both scopes (.continueigno…",
"author_name": "Serhii Zhabskyi",
"author_login": "serhiizhabskiy",
"committed_at": "2026-07-18T07:50:19Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "7addacfaa5a15d5d2211122da43b1b9f48190b1c",
"body": "…er and content contracts",
"is_bot": false,
"headline": "fix(cline): move agents to documented .cline/agents.yaml, sync import…",
"author_name": "Serhii Zhabskyi",
"author_login": "serhiizhabskiy",
"committed_at": "2026-07-18T07:47:54Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "91d3885352f02748509156d6c633f74df1d83928",
"body": null,
"is_bot": false,
"headline": "feat(augment-code): raise global hooks from none to native",
"author_name": "Serhii Zhabskyi",
"author_login": "serhiizhabskiy",
"committed_at": "2026-07-18T07:40:23Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a9698e3cd636e5a04516c52ea3eae3faca7e8cea",
"body": "…ws path to ~/.gemini/antigravity/global_workflows/",
"is_bot": false,
"headline": "feat(antigravity): promote commands to native, correct global workflo…",
"author_name": "Serhii Zhabskyi",
"author_login": "serhiizhabskiy",
"committed_at": "2026-07-18T07:37:45Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a1a0cb92e2ef688b8c0b279d188c3347f2c7d57b",
"body": "…ties",
"is_bot": false,
"headline": "fix(amp): sync tests and lint with downgraded commands/hooks capabili…",
"author_name": "Serhii Zhabskyi",
"author_login": "serhiizhabskiy",
"committed_at": "2026-07-18T07:34:45Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b71fd29dce7dfe9a5fa14f05aaefe1f803662ce6",
"body": "…ledger cells",
"is_bot": false,
"headline": "feat(amazon-q): raise hooks and permissions to embedded, add missing …",
"author_name": "Serhii Zhabskyi",
"author_login": "serhiizhabskiy",
"committed_at": "2026-07-18T07:32:03Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "580c7ea20922e8776deabf19f80d8f8d6931e1d9",
"body": "…-op stubs",
"is_bot": false,
"headline": "feat(aider): raise mcp/hooks/permissions from none to partial with no…",
"author_name": "Serhii Zhabskyi",
"author_login": "serhiizhabskiy",
"committed_at": "2026-07-18T07:29:23Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e2059144ed9d59ed4a39b8dfc7e9b8654904d4cb",
"body": "… loss, report over-declared cells\n\n- src/core/capabilities/merge.ts: extract mergeCell/hasNonEmptyFingerprint into pure unit-tested module; register pnpm capabilities:merge script\n- scripts/merge-capability-ledger.ts: fix two data-loss bugs — confirmed/rejected cells now keep their researched maxAc\n[…]\nrt over-declared cells independently from unverified so both signals surface together\n- package.json/pnpm-lock.yaml: register capabilities:merge script\n- CONTRIBUTING.md: document audit/merge workflow",
"is_bot": false,
"headline": "feat(capabilities): extract merge logic, fix fingerprint/ceiling data…",
"author_name": "Serhii Zhabskyi",
"author_login": "serhiizhabskiy",
"committed_at": "2026-07-18T07:26:35Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "bd6d532003f22c0c17588cef19c35495e30234aa",
"body": "…gnore-lint dispatch\n\n- reference/map.ts, output-source-map.ts: track combined-agent output sources so the rewriter resolves references inside merged agent files\n- import-maps/cline.ts, roo-code.ts, trae.ts: add missing import-map entries for agent and hook paths introduced by capability audit\n- gen\n[…]\nlinter.ts: dispatch descriptor.lint.ignore so partial-ignore targets (Jules, Pi Agent, Kiro, etc.) emit warnings\n- zed/lint.ts: remove unused lintHooks export (hooks=none; silent-drop guard covers it)",
"is_bot": false,
"headline": "fix(core): handle combined-agent reference rewrite, rules gate, and i…",
"author_name": "Serhii Zhabskyi",
"author_login": "serhiizhabskiy",
"committed_at": "2026-07-18T07:23:43Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "41fd09542d4dd9aa93dbc5f88a2f808972adfaef",
"body": "…global ignore\n\n- Rules/AdditionalRules/Commands/Agents (global, native): move from the\n ~/.kilo/ mirror to the documented ~/.config/kilo/ unified config dir;\n non-root rules now register under kilo.jsonc's `instructions` key\n (a bare rules dir isn't auto-loaded at global scope).\n- MCP (global, n\n[…]\ns (workspace-root-only per kilo's own docs).\n- Skills (global) re-verified unchanged: ~/.kilo/skills/ is correct.\n- Update capability-ledger.json, README/website support matrix, and add\n a changeset.",
"is_bot": false,
"headline": "fix(kilo-code): unify global config under ~/.config/kilo/, downgrade …",
"author_name": "Serhii Zhabskyi",
"author_login": "serhiizhabskiy",
"committed_at": "2026-07-12T06:47:36Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "cc7de1064b9d275b4d339d98d55d91d3508cab4d",
"body": "…nds, downgrade project hooks\n\n- hooks (project): native -> none; docs.langchain.com/oss/javascript/deepagents/code/hooks\n documents only the global ~/.deepagents/hooks.json, no project-level surface exists\n- hooks (global): broken-fix; generator wrote Claude-Code-style {EventName:[...]} shape,\n D\n[…]\ncells + one rejected for project hooks),\n README/docs support matrices, and blast-radius references (import-maps, contract\n paths, e2e reference-targets, target-contract-matrix projected-agents set)",
"is_bot": false,
"headline": "fix(deepagents-cli): scope global paths per-agent, raise agents/comma…",
"author_name": "Serhii Zhabskyi",
"author_login": "serhiizhabskiy",
"committed_at": "2026-07-12T06:07:39Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "e61f789a25c82886a45e2542c66a8aff17cf8d1b",
"body": "…schema\n\n- Commands (project + global, none -> native): .rovodev/prompts.yml\n (+ ~/.rovodev/prompts.yml) saved-prompts manifest, with a\n .rovodev/commands/<name>.md content file per canonical command.\n Commands are no longer projected as skills for this target.\n- MCP (project): native -> none. No\n[…]\nls.bash.{default,commands} schema instead of a flat\n allow/deny/ask list.\n- Updated capability ledger, README/website support matrix, contract\n fixtures, and reference-rewrite test helpers to match.",
"is_bot": false,
"headline": "fix(rovodev): raise commands to native, fix mcp path and permissions …",
"author_name": "Serhii Zhabskyi",
"author_login": "serhiizhabskiy",
"committed_at": "2026-07-12T04:46:34Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "0fa60696fabf99d37283d74adab0763c63060717",
"body": "…ents/mcp/hooks/rules\n\nRebase the cline target on the standalone CLI's documented layout\n(docs.cline.bot/cli/cli-reference) instead of the VS Code extension's\nIDE-era paths, per confirmed capability-drift research.\n\n- rules (project+global, native): .clinerules/{slug}.md -> .cline/rules/;\n ~/Docume\n[…]\nrkflows/ path is kept.\n\nRecords ledger provenance for every changed cell and syncs README +\nwebsite docs (support matrix, global-mode paths table, CLI reference\nprose, hooks Windows-portability note).",
"is_bot": false,
"headline": "fix(cline): rebase on standalone CLI paths, raise permissions, fix ag…",
"author_name": "Serhii Zhabskyi",
"author_login": "serhiizhabskiy",
"committed_at": "2026-07-12T03:54:28Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "3462660182002ffa0e221cd17f2c9c070ea83982",
"body": "- commands (project+global): native -> embedded. Amp has no declarative\n slash-command file format (ampcode.com/manual); commands only exist\n via amp.registerCommand(...) in a TS plugin. Generated output is\n unchanged (still .agents/skills/<name>/SKILL.md via the native skills\n surface) -- only \n[…]\nn\n with the verification trail.\n- Updated capability-ledger.json (commands confirmed embedded; hooks\n marked rejected for both scopes) and synced README/website support\n matrix via matrix:generate.",
"is_bot": false,
"headline": "fix(amp): downgrade commands to embedded, hooks to none",
"author_name": "Serhii Zhabskyi",
"author_login": "serhiizhabskiy",
"committed_at": "2026-07-12T02:30:55Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "c24a762d6492149448ff2e688b013e085e0fbb37",
"body": "…and frontmatter keys\n\n- additionalRules (global): embedded -> native. Non-root rules now write\n real files to ~/.qwen/rules/<slug>.md (loadRules() reads .qwen/rules/\n from both global and project dirs identically) instead of being folded\n into ~/.qwen/QWEN.md's body. Adds QWEN_GLOBAL_RULES_DIR, \n[…]\nbal,\n commands project+global) as confirmed with source URLs.\n- Docs: regenerate README.md / supported-tools.mdx support matrices;\n hand-update the global-mode paths table row for the new rules dir.",
"is_bot": false,
"headline": "fix(qwen-code): raise global additionalRules to native, fix rule/comm…",
"author_name": "Serhii Zhabskyi",
"author_login": "serhiizhabskiy",
"committed_at": "2026-07-12T01:59:55Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "27f3a6133935d9c355aa59f8eae57376d18d6369",
"body": "…tive)\n\n- additionalRules (project + global): .opencode/rules/<slug>.md files are\n now also declared in opencode.json's instructions array (project glob\n .opencode/rules/*.md; global absolute ~/.config/opencode/rules/*.md).\n OpenCode does not auto-scan any rules directory (opencode.ai/docs/rules)\n[…]\ntive-directory prefix\n legitimately appearing in its own generated settings file is not a\n cross-target leak; exclude the current target's own prefix from the\n no-target-specific-prefix-leak check.",
"is_bot": false,
"headline": "fix(opencode): fix broken additionalRules and agents (native stays na…",
"author_name": "Serhii Zhabskyi",
"author_login": "serhiizhabskiy",
"committed_at": "2026-07-12T01:26:39Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "df5bf44117e026dc555354588c7b5f97aa6c5cd1",
"body": "… commands\n\n- MCP (global): none -> native. ~/.copilot/mcp-config.json (mcpServers key),\n wired via globalSupport.scopeExtras with generator + importer round-trip.\n Corrects a prior ledger cell that pointed at the VS Code extension's\n OS-specific user-profile mcp.json instead of Copilot CLI's own\n[…]\nnote: the research pass also flagged canonical Notification\nhooks as unsupported -- current docs contradict that ('notification' is a\nreal, documented Copilot hook event), so no change was made there.",
"is_bot": false,
"headline": "fix(copilot): raise global mcp/hooks, fix hooks matcher, drop phantom…",
"author_name": "Serhii Zhabskyi",
"author_login": "serhiizhabskiy",
"committed_at": "2026-07-12T00:39:55Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "8cae45c072efb3af8f9b3a47c9e004b67e012b80",
"body": "- permissions (project+global): none -> native via .codex/rules/*.rules\n using the same Starlark prefix_rule(pattern, decision, justification)\n DSL Codex already documents for command-execution permission decisions\n- hooks (project+global): drop canonical Notification hooks (no matching\n Codex li\n[…]\nheaders) on both generate and import; the importer previously\n hardcoded type:'stdio' and dropped url-based servers on import\n\nRecorded ledger provenance for all changed cells and synced README/docs.",
"is_bot": false,
"headline": "fix(codex-cli): raise permissions to native, fix broken hooks/rules/mcp",
"author_name": "Serhii Zhabskyi",
"author_login": "serhiizhabskiy",
"committed_at": "2026-07-11T23:44:45Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "d715e69e6c4bed0e064967bde437d914c06ffebf",
"body": "…ns to native\n\n- agents (project/global): emit required groups + non-empty roleDefinition\n in .roomodes / custom_modes.yaml (Roo's modeConfigSchema has no default\n for either, so omitting them silently dropped ALL modes on load)\n- agents (global): fix custom_modes.yaml path to ~/.roo/settings/... \n[…]\nayout.ts/merge.ts to stay under the 200-line limit.\nCore: generatePermissionsFeature now passes scope context to generators.\n\nRecorded ledger provenance for all 6 changed cells and synced README/docs.",
"is_bot": false,
"headline": "fix(roo-code): fix broken agents/rules/mcp/ignore and raise permissio…",
"author_name": "Serhii Zhabskyi",
"author_login": "serhiizhabskiy",
"committed_at": "2026-07-11T23:39:21Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "fbc1aecf2fd1df15870ce66e411c3d710394bf31",
"body": "warp/mcp/global, copilot/mcp/global, gemini-cli/hooks (proj+global) confirmed\nraise-candidates; windsurf/mcp/global confirmed native; windsurf project,\ncopilot/hooks, kiro/hooks rejected with evidence.",
"is_bot": false,
"headline": "chore(capabilities): record verified research findings in ledger",
"author_name": "Serhii Zhabskyi",
"author_login": "serhiizhabskiy",
"committed_at": "2026-07-11T19:11:13Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c09be1c9e60b3e213676bab1b9b4c24f51e71b9d",
"body": null,
"is_bot": false,
"headline": "feat(warp): support global MCP config (~/.warp/.mcp.json) natively",
"author_name": "Serhii Zhabskyi",
"author_login": "serhiizhabskiy",
"committed_at": "2026-07-11T19:05:22Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "25f84e94785b671a8f7ffe5169603cecb3dc5cac",
"body": "…cate cells)",
"is_bot": false,
"headline": "test(capabilities): enforce ledger integrity (no orphan/invalid/dupli…",
"author_name": "Serhii Zhabskyi",
"author_login": "serhiizhabskiy",
"committed_at": "2026-07-11T17:57:36Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5369c3befe275951736497668aa62acd15ad6f86",
"body": "…dd changeset",
"is_bot": false,
"headline": "docs(capabilities): document audit workflow, drop temp knip ignore, a…",
"author_name": "Serhii Zhabskyi",
"author_login": "serhiizhabskiy",
"committed_at": "2026-07-11T17:47:29Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "7a081333abf7411e168190500b3fa4d98d6d4ee8",
"body": null,
"is_bot": false,
"headline": "docs(skill): make update-target-capabilities audit-driven",
"author_name": "Serhii Zhabskyi",
"author_login": "serhiizhabskiy",
"committed_at": "2026-07-11T17:18:44Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "6223a3525c1c0bbf6a949d888b4d78f7484b301c",
"body": null,
"is_bot": false,
"headline": "feat(capabilities): seed capability ledger from generated output",
"author_name": "Serhii Zhabskyi",
"author_login": "serhiizhabskiy",
"committed_at": "2026-07-11T17:07:12Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "263aadb2bb7d31a07bcbfc540362dd0ddded8423",
"body": "…ripts",
"is_bot": false,
"headline": "feat(capabilities): add capabilities:audit and capabilities:verify sc…",
"author_name": "Serhii Zhabskyi",
"author_login": "serhiizhabskiy",
"committed_at": "2026-07-11T16:51:11Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1e428c4ec7810aa649a4e3bde535272cc1164488",
"body": null,
"is_bot": false,
"headline": "test(capabilities): add ledger conformance harness",
"author_name": "Serhii Zhabskyi",
"author_login": "serhiizhabskiy",
"committed_at": "2026-07-11T16:47:27Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4b0ce8aec4f54c607264a66cb36551930fa01db9",
"body": null,
"is_bot": false,
"headline": "feat(capabilities): add structural fingerprint parse/derive/check",
"author_name": "Serhii Zhabskyi",
"author_login": "serhiizhabskiy",
"committed_at": "2026-07-11T16:45:45Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "8f39ea75ff7a38d699981568aa8912163ba73b22",
"body": null,
"is_bot": false,
"headline": "feat(capabilities): add deterministic audit engine (gaps/stale/missing)",
"author_name": "Serhii Zhabskyi",
"author_login": "serhiizhabskiy",
"committed_at": "2026-07-11T16:35:00Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "259cc8791c3c067780ad6be5ad154484237d9b76",
"body": null,
"is_bot": false,
"headline": "feat(capabilities): load and validate the capability ledger",
"author_name": "Serhii Zhabskyi",
"author_login": "serhiizhabskiy",
"committed_at": "2026-07-11T16:25:56Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c486b787082ede99eb5c14ae8cdb1c61479acfdb",
"body": "Add LedgerCell, CapabilityLedger, LEVEL_RANK, CAPABILITY_FEATURES, and\nCAPABILITY_SCOPES to src/core/capabilities/ledger-types.ts. Suppress knip\nunused-export warnings for this file via ignoreIssues since consumers\narrive in subsequent tasks.",
"is_bot": false,
"headline": "feat(capabilities): add capability ledger types and level rank",
"author_name": "Serhii Zhabskyi",
"author_login": "serhiizhabskiy",
"committed_at": "2026-07-11T16:22:40Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a09c1ccb813ad7d140d4b2cea4bf27d2f26d4b34",
"body": "chore: version packages",
"is_bot": false,
"headline": "Merge pull request #97 from sampleXbro/changeset-release/master",
"author_name": "Serhii Zhabskyi",
"author_login": "sampleXbro",
"committed_at": "2026-07-10T06:32:26Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c3a4f87b8dacedfd82be659ba6e4588418555901",
"body": null,
"is_bot": true,
"headline": "chore: version packages",
"author_name": "github-actions[bot]",
"author_login": "github-actions[bot]",
"committed_at": "2026-07-10T05:54:56Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c2a2654cc5905125f54a61ec8a9d1700b3f7a8b2",
"body": "fix(cli): stop interactive prompts hanging behind the status spinner",
"is_bot": false,
"headline": "Merge pull request #96 from sampleXbro/develop",
"author_name": "Serhii Zhabskyi",
"author_login": "sampleXbro",
"committed_at": "2026-07-10T05:54:36Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f6e80962c0869e5b7f74f4716e4ef1ffa4e783e6",
"body": "install, uninstall, and refresh held a clack spinner across the whole run;\nits redraw timer overwrote the interactive prompts underneath (skill-pack\nselect, broken-link, invalid-resource confirm, uninstall drift, and the\nrefresh consent prompt), so the command waited on invisible stdin — refresh\nsil\n[…]\nwrites (invalid resources were wrongly dropped from the preview).\n\nTests: refresh spinner-gating, confirm() EOF/error via readLine, readLine\nstream-error, and pool-resolution force+dry-run precedence.",
"is_bot": false,
"headline": "fix(cli): stop interactive prompts hanging behind the status spinner",
"author_name": "Serhii Zhabskyi",
"author_login": "serhiizhabskiy",
"committed_at": "2026-07-09T20:54:17Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "53aca22f8f9cb6c2f4d1df3c9edbe5a2c5091296",
"body": "chore: version packages",
"is_bot": false,
"headline": "Merge pull request #95 from sampleXbro/changeset-release/master",
"author_name": "Serhii Zhabskyi",
"author_login": "sampleXbro",
"committed_at": "2026-07-08T20:45:27Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5e15f301627485639093a7c24570861944f2f15a",
"body": null,
"is_bot": true,
"headline": "chore: version packages",
"author_name": "github-actions[bot]",
"author_login": "github-actions[bot]",
"committed_at": "2026-07-08T20:36:46Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "fae4234208ac6fb3b76fcd115210dafafe52abc3",
"body": "Develop",
"is_bot": false,
"headline": "Merge pull request #94 from sampleXbro/develop",
"author_name": "Serhii Zhabskyi",
"author_login": "sampleXbro",
"committed_at": "2026-07-08T20:36:30Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5d38ee4630caf9f929058c09cb0d7d90d841a1e1",
"body": "…nment\n\nfix(mcp): reject symlink path escapes",
"is_bot": false,
"headline": "Merge pull request #93 from fengjikui/codex/mcp-writer-symlink-contai…",
"author_name": "Serhii Zhabskyi",
"author_login": "sampleXbro",
"committed_at": "2026-07-08T20:30:31Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "bdbaf900c9eb1bfec06d91afc39d078dfdc29ed4",
"body": null,
"is_bot": false,
"headline": "Merge branch 'master' into develop",
"author_name": "Serhii Zhabskyi",
"author_login": "serhiizhabskiy",
"committed_at": "2026-07-08T20:09:39Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "7edbf1f933be681545f2c8c63ef06bb24c8ca792",
"body": "…lessons",
"is_bot": false,
"headline": "chore(lessons): capture MCP path-containment + PR-fetch verification …",
"author_name": "Serhii Zhabskyi",
"author_login": "serhiizhabskiy",
"committed_at": "2026-07-08T20:06:43Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "54b4f38f8d0e253d2e2d1a5af78b943cf3851dd2",
"body": "…ete surfaces\n\nBuilds on @fengjikui's PR #93. Anchors containment at the project root — a\n`.agentsmesh` boundary canonicalizes through a symlinked `.agentsmesh` and\ncancels, so a symlinked parent still escaped — and extends the guard to every\nremaining MCP filesystem surface:\n\n- settings config read\n[…]\nws EPERM on the windows-latest CI matrix).\n\nAlso drops the unrelated lessons.json trigger churn that rode in the original PR.\n\nCo-authored-by: sampleXbro <55853222+sampleXbro@users.noreply.github.com>",
"is_bot": false,
"headline": "fix(mcp): complete symlink path containment across all read/write/del…",
"author_name": "Serhii Zhabskyi",
"author_login": "serhiizhabskiy",
"committed_at": "2026-07-08T19:51:16Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "d4e496a5219e120c8de342e2d33e451b7e858ef0",
"body": null,
"is_bot": false,
"headline": "fix(mcp): reject symlink path escapes",
"author_name": "冯基魁",
"author_login": "fengjikui",
"committed_at": "2026-07-07T17:12:02Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a9fcfb3580c203b3a75dc5876ff1311e6e1dc2de",
"body": "chore: version packages",
"is_bot": false,
"headline": "Merge pull request #92 from sampleXbro/changeset-release/master",
"author_name": "Serhii Zhabskyi",
"author_login": "sampleXbro",
"committed_at": "2026-07-07T15:32:02Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "bbbc7cd1bf2e25d38f7d5b6ccb942f21b1dc1e45",
"body": null,
"is_bot": true,
"headline": "chore: version packages",
"author_name": "github-actions[bot]",
"author_login": "github-actions[bot]",
"committed_at": "2026-07-07T15:16:44Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "af206e14d54953e4757bae119bb7aa91e0c790a6",
"body": "Develop",
"is_bot": false,
"headline": "Merge pull request #91 from sampleXbro/develop",
"author_name": "Serhii Zhabskyi",
"author_login": "sampleXbro",
"committed_at": "2026-07-07T15:16:25Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "47cdd5818e962a2eff4dfbe70c98292747feb3ea",
"body": "The line-50 endsWith assertion compared native join() output against a\nforward-slash literal, so it passed on macOS/Linux but failed on\nwindows-latest CI ('expected false to be true'). Normalize separators\nwith .replaceAll('\\\\', '/') to match the sibling lessons path tests.",
"is_bot": false,
"headline": "fix(lessons): make outcome-log path assertion cross-platform",
"author_name": "Serhii Zhabskyi",
"author_login": "serhiizhabskiy",
"committed_at": "2026-07-07T14:56:50Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "fa877168c4dbc053c1f366c8c9d4f36bb88e1d96",
"body": null,
"is_bot": false,
"headline": "Merge branch 'master' into develop",
"author_name": "Serhii Zhabskyi",
"author_login": "serhiizhabskiy",
"committed_at": "2026-07-07T14:00:20Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "096c40df41d5d207bf736338bf8ab74416c81d2c",
"body": null,
"is_bot": false,
"headline": "Merge remote-tracking branch 'origin/master'",
"author_name": "Serhii Zhabskyi",
"author_login": "serhiizhabskiy",
"committed_at": "2026-07-07T13:59:23Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "13730ca5ed58fb68ec2f385050ac562f781736f1",
"body": "…ents\n\nThe unsupported-hook warning (and Cursor's unmapped-event handling) now exclude the recall/capture events agentsmesh itself injects — UserPromptSubmit, PostToolUseFailure, SessionStart — since dropping one on a target that can't represent it is not user data loss and the warning would be permanent and unactionable.",
"is_bot": false,
"headline": "fix(lint): stop warning about agentsmesh-injected best-effort hook ev…",
"author_name": "Serhii Zhabskyi",
"author_login": "serhiizhabskiy",
"committed_at": "2026-07-07T13:50:00Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "7b795b83ec437b8cfd7df9f63d7a075d36632150",
"body": "Opt-in outcome log tracks whether a delivered lesson prevented the repeat, feeding recall down-ranking, `validate` health findings (INEFFECTIVE_LESSON/UNCOVERED_FAILURE), and a `stats` effectiveness block. Plus: diff-aware recall, camelCase keyword reach, a capped/silent injection, a recurrence-driv\n[…]\nH capture warning, --scope always universal lessons, and `init --lessons` wiring the lessons.json merge driver. All opt-in and backward-compatible — no change to the CLI, MCP, or lessons.json surface.",
"is_bot": false,
"headline": "feat(lessons): measure effectiveness, sharpen recall, add scope:always",
"author_name": "Serhii Zhabskyi",
"author_login": "serhiizhabskiy",
"committed_at": "2026-07-07T13:28:58Z",
"body_truncated": true,
"is_coding_agent": false
}
],
"releases_count": 43,
"commits_last_year": 776,
"latest_release_at": "2026-07-22T20:40:22Z",
"latest_release_tag": "v0.32.0",
"releases_from_tags": false,
"days_since_last_push": 9,
"active_weeks_last_year": 17,
"days_since_latest_release": 9,
"mean_days_between_releases": 3.8
},
"community": {
"has_readme": true,
"has_license": true,
"has_description": true,
"has_contributing": true,
"health_percentage": 100,
"has_issue_template": false,
"has_code_of_conduct": true,
"has_pull_request_template": true
},
"ecosystem": {
"packages": [
{
"name": "agentsmesh",
"exists": true,
"license": "MIT",
"keywords": [
"ai-rules",
"ai-agents",
"ai-config",
"ai-coding",
"agentic",
"agent-rules",
"cursor-rules",
"claude-rules",
"config-sync",
"config-management",
"mcp",
"rules",
"skills",
"claude-code",
"cursor",
"copilot",
"continue",
"junie",
"gemini-cli",
"cline",
"codex",
"windsurf",
"antigravity",
"roo-code",
"developer-tools",
"devtools",
"code-assistant",
"cli"
],
"ecosystem": "npm",
"matches_repo": true,
"registry_url": "https://www.npmjs.com/package/agentsmesh",
"is_deprecated": false,
"latest_version": "0.32.0",
"repository_url": "https://github.com/sampleXbro/agentsmesh",
"versions_count": 44,
"total_downloads": null,
"dependents_count": null,
"deprecation_note": null,
"maintainers_count": 1,
"monthly_downloads": 5677,
"first_published_at": "2026-03-26T07:52:55.603000Z",
"latest_published_at": "2026-07-22T20:39:31.278000Z",
"latest_version_yanked": null,
"days_since_latest_publish": 9
}
]
},
"popularity": {
"forks": 5,
"stars": 21,
"watchers": 2,
"fork_history": {
"days": [
{
"date": "2026-05-02",
"count": 1
},
{
"date": "2026-05-04",
"count": 1
},
{
"date": "2026-05-28",
"count": 1
},
{
"date": "2026-07-07",
"count": 1
},
{
"date": "2026-07-18",
"count": 1
}
],
"complete": true,
"collected": 5,
"total_forks": 5
},
"star_history": null,
"open_issues_and_prs": 7
},
"ai_readiness": {
"has_nix": false,
"example_dirs": [
"examples"
],
"has_llms_txt": false,
"has_dockerfile": false,
"has_mcp_signal": true,
"bootstrap_files": [],
"api_schema_files": [],
"has_devcontainer": false,
"typecheck_configs": [
"tests/consumer-smoke/tsconfig.json",
"tsconfig.json",
"website/tsconfig.json"
],
"toolchain_manifests": [],
"largest_source_bytes": 389013,
"source_files_sampled": 1832,
"oversized_source_files": 4,
"agent_instruction_files": [
"AGENTS.md",
"CLAUDE.md",
"src/AGENTS.md",
"tests/e2e/fixtures/amp-project/AGENTS.md",
"tests/e2e/fixtures/claude-code-project/CLAUDE.md",
"tests/e2e/fixtures/codex-project/AGENTS.md",
"tests/e2e/fixtures/cursor-project/AGENTS.md",
"tests/e2e/fixtures/deepagents-cli-project/.deepagents/AGENTS.md",
"tests/e2e/fixtures/factory-droid-project/AGENTS.md",
"tests/e2e/fixtures/gemini-project/GEMINI.md",
"tests/e2e/fixtures/goose-project/.goosehints",
"tests/e2e/fixtures/jules-project/AGENTS.md",
"tests/e2e/fixtures/kilo-code-project/AGENTS.md",
"tests/e2e/fixtures/kiro-project/AGENTS.md",
"tests/e2e/fixtures/opencode-project/AGENTS.md",
"tests/e2e/fixtures/pi-agent-project/AGENTS.md",
"tests/e2e/fixtures/rovodev-project/AGENTS.md",
"tests/e2e/fixtures/warp-project/AGENTS.md",
"tests/e2e/fixtures/windsurf-agents-project/AGENTS.md",
"tests/e2e/fixtures/windsurf-project/.windsurfrules"
],
"agent_instruction_max_bytes": 8162
},
"dependencies": {
"manifests": [
"package.json",
"website/package.json"
],
"advisories": {
"error": null,
"scope": "published_package",
"source": "osv",
"findings": [
{
"name": "tar",
"direct": true,
"version": "7.5.20",
"severity": "moderate",
"ecosystem": "npm",
"cvss_score": 5.3,
"advisory_ids": [
"GHSA-r292-9mhp-454m"
],
"fixed_version": "7.5.21",
"advisory_count": 1,
"oldest_advisory_days": 7
}
],
"collected": true,
"malicious": [],
"truncated": false,
"by_severity": {
"moderate": 1
},
"advisory_count": 1,
"affected_count": 1,
"assessed_count": 113,
"malicious_count": 0,
"assessed_package": "npm:agentsmesh@0.32.0",
"unassessed_count": 0,
"direct_affected_count": 1
},
"ecosystems": [
"npm"
],
"dependencies": [
{
"name": "@clack/prompts",
"manifest": "package.json",
"ecosystem": "npm",
"version_constraint": "^1.6.0"
},
{
"name": "@modelcontextprotocol/sdk",
"manifest": "package.json",
"ecosystem": "npm",
"version_constraint": "^1.29.0"
},
{
"name": "chokidar",
"manifest": "package.json",
"ecosystem": "npm",
"version_constraint": "^5.0.0"
},
{
"name": "diff",
"manifest": "package.json",
"ecosystem": "npm",
"version_constraint": "8.0.4"
},
{
"name": "picomatch",
"manifest": "package.json",
"ecosystem": "npm",
"version_constraint": "^4.0.4"
},
{
"name": "smol-toml",
"manifest": "package.json",
"ecosystem": "npm",
"version_constraint": "^1.6.1"
},
{
"name": "tar",
"manifest": "package.json",
"ecosystem": "npm",
"version_constraint": "7.5.20"
},
{
"name": "yaml",
"manifest": "package.json",
"ecosystem": "npm",
"version_constraint": "^2.8.3"
},
{
"name": "zod",
"manifest": "package.json",
"ecosystem": "npm",
"version_constraint": "^4.3.6"
},
{
"name": "@astrojs/starlight",
"manifest": "website/package.json",
"ecosystem": "npm",
"version_constraint": "^0.32.0"
},
{
"name": "astro",
"manifest": "website/package.json",
"ecosystem": "npm",
"version_constraint": "^5.0.0"
},
{
"name": "sharp",
"manifest": "website/package.json",
"ecosystem": "npm",
"version_constraint": "^0.33.5"
}
],
"all_dependencies": {
"error": "GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository",
"source": null,
"packages": [],
"collected": false,
"truncated": false,
"total_count": null,
"direct_count": null,
"indirect_count": null
}
},
"maintainership": {
"issues": {
"open_prs": 0,
"merged_prs": 92,
"open_issues": 7,
"closed_ratio": 0.417,
"closed_issues": 5,
"closed_unmerged_prs": 1
},
"bus_factor": 1,
"bot_contributors": 1,
"top_contributors": [
{
"type": "User",
"login": "serhiizhabskiy",
"commits": 643,
"avatar_url": "https://avatars.githubusercontent.com/u/147726171?v=4"
},
{
"type": "User",
"login": "sampleXbro",
"commits": 94,
"avatar_url": "https://avatars.githubusercontent.com/u/55853222?v=4"
},
{
"type": "User",
"login": "VVeb1250",
"commits": 1,
"avatar_url": "https://avatars.githubusercontent.com/u/188834110?v=4"
},
{
"type": "User",
"login": "fengjikui",
"commits": 1,
"avatar_url": "https://avatars.githubusercontent.com/u/56265583?v=4"
}
],
"contributors_sampled": 4,
"top_contributor_share": 0.87
},
"quality_signals": {
"has_ci": true,
"has_tests": true,
"ci_workflows": [
"ci.yml",
"deploy-website.yml",
"flake.yml",
"publish.yml"
],
"has_docs_dir": true,
"linter_configs": [
"eslint.config.js"
],
"has_editorconfig": false,
"has_linter_config": true,
"has_precommit_config": false
},
"security_signals": {
"lockfiles": [
"pnpm-lock.yaml"
],
"scorecard": {
"checks": [
{
"name": "Binary-Artifacts",
"score": 10,
"reason": "no binaries found in the repo",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#binary-artifacts"
},
{
"name": "Branch-Protection",
"score": 0,
"reason": "branch protection not enabled on development/release branches",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#branch-protection"
},
{
"name": "CI-Tests",
"score": 5,
"reason": "3 out of 6 merged PRs checked by a CI test -- score normalized to 5",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#ci-tests"
},
{
"name": "CII-Best-Practices",
"score": 0,
"reason": "no effort to earn an OpenSSF best practices badge detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#cii-best-practices"
},
{
"name": "Code-Review",
"score": 2,
"reason": "Found 1/4 approved changesets -- score normalized to 2",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#code-review"
},
{
"name": "Contributors",
"score": 0,
"reason": "project has 0 contributing companies or organizations -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#contributors"
},
{
"name": "Dangerous-Workflow",
"score": 10,
"reason": "no dangerous workflow patterns detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dangerous-workflow"
},
{
"name": "Dependency-Update-Tool",
"score": 0,
"reason": "no update tool detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dependency-update-tool"
},
{
"name": "Fuzzing",
"score": 0,
"reason": "project is not fuzzed",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#fuzzing"
},
{
"name": "License",
"score": 10,
"reason": "license file detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#license"
},
{
"name": "Maintained",
"score": 10,
"reason": "30 commit(s) and 1 issue activity found in the last 90 days -- score normalized to 10",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#maintained"
},
{
"name": "Packaging",
"score": null,
"reason": "packaging workflow not detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#packaging"
},
{
"name": "Pinned-Dependencies",
"score": 0,
"reason": "dependency not pinned by hash detected -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#pinned-dependencies"
},
{
"name": "SAST",
"score": 0,
"reason": "SAST tool is not run on all commits -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#sast"
},
{
"name": "Security-Policy",
"score": 10,
"reason": "security policy file detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#security-policy"
},
{
"name": "Signed-Releases",
"score": 0,
"reason": "Project has not signed or included provenance with any releases.",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#signed-releases"
},
{
"name": "Token-Permissions",
"score": 0,
"reason": "detected GitHub workflow tokens with excessive permissions",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#token-permissions"
},
{
"name": "Vulnerabilities",
"score": 0,
"reason": "33 existing vulnerabilities detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#vulnerabilities"
}
],
"commit": "ac8e24449c34f19925721dc60a0d902f5217b1e3",
"ran_at": "2026-08-01T08:41:33Z",
"aggregate_score": 3.5,
"scorecard_version": "v5.5.0"
},
"has_codeql_workflow": false,
"has_security_policy": true,
"has_dependabot_config": false
},
"contribution_flow": {
"collected": true,
"ci_last_run_at": "2026-07-27T10:29:31Z",
"oldest_open_prs": [],
"last_merged_pr_at": "2026-07-22T20:38:55Z",
"ci_last_conclusion": "SUCCESS",
"oldest_open_issues": [
{
"number": 23,
"created_at": "2026-04-29T06:03:48Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 24,
"created_at": "2026-04-29T06:05:41Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 25,
"created_at": "2026-04-29T06:07:04Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 32,
"created_at": "2026-04-29T11:48:23Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 35,
"created_at": "2026-04-29T11:50:45Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 36,
"created_at": "2026-04-29T11:51:26Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 37,
"created_at": "2026-04-29T11:52:06Z",
"last_comment_at": null,
"last_comment_author": null
}
]
}
},
"config": {
"disabled_metrics": [],
"disabled_categories": [],
"disabled_components": {}
},
"source": {
"url": "https://github.com/sampleXbro/agentsmesh",
"host": "github.com",
"name": "agentsmesh",
"owner": "sampleXbro"
},
"metrics": {
"overall": {
"key": "overall",
"band": "good",
"name": "Overall health",
"note": "The weighted overall 63 is calibrated to 71 on the published index scale (record calibration 2026-08-02).",
"notes": [
{
"code": "overall_calibration",
"params": {
"raw": 63,
"calibrated": 71,
"calibration": "2026-08-02"
}
}
],
"value": 71,
"inputs": {
"security": 45,
"vitality": 77,
"community": 58,
"governance": 49,
"calibration": "2026-08-02",
"engineering": 84,
"ai_readiness": 71,
"weighted_overall_raw": 63
},
"components": []
},
"categories": [
{
"key": "vitality",
"band": "good",
"name": "Vitality",
"value": 77,
"weight": 0.21,
"metrics": [
{
"key": "development_activity",
"band": "good",
"name": "Development activity",
"note": null,
"notes": [],
"value": 69,
"inputs": {
"commits_last_year": 776,
"human_commit_share": 0.95,
"days_since_last_push": 9,
"active_weeks_last_year": 17
},
"components": [
{
"key": "push_recency",
"name": "Push recency",
"detail": "last push 9 days ago",
"points": 28.8,
"status": "partial",
"details": [
{
"code": "push_recency",
"params": {
"days": 9
}
}
],
"max_points": 36
},
{
"key": "commit_cadence",
"name": "Commit cadence",
"detail": "17/52 weeks with commits",
"points": 11.8,
"status": "partial",
"details": [
{
"code": "commit_cadence_weeks",
"params": {
"weeks": 17
}
}
],
"max_points": 36
},
{
"key": "commit_volume",
"name": "Commit volume",
"detail": "776 commits in the last year",
"points": 18,
"status": "met",
"details": [
{
"code": "commits_last_year",
"params": {
"count": 776
}
}
],
"max_points": 18
},
{
"key": "openssf_scorecard_maintained",
"name": "OpenSSF Scorecard: Maintained",
"detail": "30 commit(s) and 1 issue activity found in the last 90 days -- score normalized to 10",
"points": 10,
"status": "met",
"details": [],
"max_points": 10
}
]
},
{
"key": "release_discipline",
"band": "excellent",
"name": "Release discipline",
"note": null,
"notes": [],
"value": 90,
"inputs": {
"releases_count": 43,
"latest_release_tag": "v0.32.0",
"releases_from_tags": false,
"days_since_latest_release": 9,
"mean_days_between_releases": 3.8
},
"components": [
{
"key": "ships_releases",
"name": "Ships releases",
"detail": "43 releases published",
"points": 27,
"status": "met",
"details": [
{
"code": "releases_published",
"params": {
"count": 43
}
}
],
"max_points": 27
},
{
"key": "release_recency",
"name": "Release recency",
"detail": "latest release 9 days ago",
"points": 36,
"status": "met",
"details": [
{
"code": "release_recency",
"params": {
"days": 9
}
}
],
"max_points": 36
},
{
"key": "release_cadence",
"name": "Release cadence",
"detail": "a release every ~3.8 days",
"points": 27,
"status": "met",
"details": [
{
"code": "release_cadence",
"params": {
"gap": 3.8
}
}
],
"max_points": 27
},
{
"key": "openssf_scorecard_signed_releases",
"name": "OpenSSF Scorecard: Signed-Releases",
"detail": "Project has not signed or included provenance with any releases.",
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
}
]
},
{
"key": "abandonment",
"band": "exceptional",
"name": "Abandonment",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"cap": null,
"state": "unverified",
"guards": [],
"signals": [],
"red_flag": false,
"multiplier_pct": 100,
"declared_reason": null,
"unverified_reason": "repository_too_young",
"unanswered_open_prs": null,
"unanswered_open_issues": null,
"days_since_last_merged_pr": null,
"days_since_last_human_commit": null,
"days_since_last_human_commit_is_floor": false
},
"components": [
{
"key": "project_is_still_maintained",
"name": "Project is still maintained",
"detail": "maintenance record not established from the collected data",
"points": 100,
"status": "met",
"details": [
{
"code": "abandonment_unverified",
"params": {}
}
],
"max_points": 100
}
]
}
],
"description": "Is the project alive — is code being written and are releases shipping?"
},
{
"key": "community",
"band": "moderate",
"name": "Community & Adoption",
"value": 58,
"weight": 0.17,
"metrics": [
{
"key": "popularity",
"band": "at_risk",
"name": "Popularity & adoption",
"note": null,
"notes": [],
"value": 26,
"inputs": {
"forks": 5,
"stars": 21,
"watchers": 2,
"growth_state": "unverified",
"growth_factor_pct": 100,
"growth_unverified_reason": "no_history"
},
"components": [
{
"key": "stars",
"name": "Stars",
"detail": "21 stars",
"points": 21.1,
"status": "partial",
"details": [
{
"code": "stars",
"params": {
"count": 21
}
}
],
"max_points": 60
},
{
"key": "forks",
"name": "Forks",
"detail": "5 forks",
"points": 5,
"status": "partial",
"details": [
{
"code": "forks",
"params": {
"count": 5
}
}
],
"max_points": 25
},
{
"key": "watchers",
"name": "Watchers",
"detail": "2 watchers",
"points": 0,
"status": "missed",
"details": [
{
"code": "watchers",
"params": {
"count": 2
}
}
],
"max_points": 15
}
]
},
{
"key": "community_health",
"band": "excellent",
"name": "Community health",
"note": null,
"notes": [],
"value": 92,
"inputs": {
"has_readme": true,
"has_license": true,
"readme_badges": null,
"has_contributing": true,
"has_issue_template": false,
"has_code_of_conduct": true,
"readme_badge_services": [],
"has_pull_request_template": true
},
"components": [
{
"key": "readme",
"name": "README",
"detail": null,
"points": 22.5,
"status": "met",
"details": [],
"max_points": 22.5
},
{
"key": "license",
"name": "License",
"detail": "recognized license (MIT)",
"points": 22.5,
"status": "met",
"details": [
{
"code": "license_standard",
"params": {}
},
{
"code": "license_spdx",
"params": {
"spdx": "MIT"
}
}
],
"max_points": 22.5
},
{
"key": "contributing_guide",
"name": "CONTRIBUTING guide",
"detail": null,
"points": 18,
"status": "met",
"details": [],
"max_points": 18
},
{
"key": "code_of_conduct",
"name": "Code of conduct",
"detail": null,
"points": 13.5,
"status": "met",
"details": [],
"max_points": 13.5
},
{
"key": "issue_template",
"name": "Issue template",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.2
},
{
"key": "pr_template",
"name": "PR template",
"detail": null,
"points": 6.3,
"status": "met",
"details": [],
"max_points": 6.3
}
]
},
{
"key": "ecosystem_adoption",
"band": "moderate",
"name": "Ecosystem adoption (downloads)",
"note": "Excluded from scoring (no data or not applicable): Registry dependents. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"registry_dependents"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 63,
"inputs": {
"packages": [
"agentsmesh"
],
"dependents": null,
"ecosystems": "npm",
"total_downloads": null,
"monthly_downloads": 5677
},
"components": [
{
"key": "monthly_downloads",
"name": "Monthly downloads",
"detail": "5,677 downloads/month across npm",
"points": 50.1,
"status": "partial",
"details": [
{
"code": "downloads_monthly",
"params": {
"count": 5677,
"ecosystems": "npm"
}
}
],
"max_points": 80
},
{
"key": "registry_dependents",
"name": "Registry dependents",
"detail": "not reported by this ecosystem",
"points": 0,
"status": "excluded",
"details": [
{
"code": "not_reported_by_this_ecosystem",
"params": {}
}
],
"max_points": 20
}
]
}
],
"description": "Does the project have users, downloads, attention, and a welcoming setup for contributors?"
},
{
"key": "governance",
"band": "weak",
"name": "Sustainability & Governance",
"value": 49,
"weight": 0.23,
"metrics": [
{
"key": "maintainer_resilience",
"band": "critical",
"name": "Maintainer resilience (bus factor)",
"note": null,
"notes": [],
"value": 17,
"inputs": {
"bus_factor": 1,
"contributors_sampled": 4,
"top_contributor_share": 0.87
},
"components": [
{
"key": "bus_factor",
"name": "Bus factor",
"detail": "1 contributor(s) cover half of all commits",
"points": 9,
"status": "partial",
"details": [
{
"code": "bus_factor",
"params": {
"count": 1
}
}
],
"max_points": 54
},
{
"key": "commit_distribution",
"name": "Commit distribution",
"detail": "top contributor authored 87% of commits",
"points": 2.9,
"status": "partial",
"details": [
{
"code": "top_contributor_share",
"params": {
"share": 87
}
}
],
"max_points": 22.5
},
{
"key": "contributor_breadth",
"name": "Contributor breadth",
"detail": "4 contributors",
"points": 5.4,
"status": "partial",
"details": [
{
"code": "contributors_sampled",
"params": {
"count": 4
}
}
],
"max_points": 13.5
},
{
"key": "openssf_scorecard_contributors",
"name": "OpenSSF Scorecard: Contributors",
"detail": "project has 0 contributing companies or organizations -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
}
]
},
{
"key": "responsiveness",
"band": "moderate",
"name": "Issue & PR responsiveness",
"note": "Excluded from scoring (no data or not applicable): Newcomer PR acceptance. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"newcomer_pr_acceptance"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 58,
"inputs": {
"merged_prs": 92,
"open_issues": 7,
"closed_issues": 5,
"prs_merged_7d": null,
"prs_decided_7d": null,
"prs_merged_30d": null,
"prs_decided_30d": null,
"issue_closed_ratio": 0.417,
"closed_unmerged_prs": 1,
"first_time_authors_30d": null,
"first_time_prs_merged_30d": null,
"first_time_prs_decided_30d": null
},
"components": [
{
"key": "issue_resolution",
"name": "Issue resolution",
"detail": "42% of issues closed",
"points": 17.5,
"status": "partial",
"details": [
{
"code": "issues_closed_share",
"params": {
"share": 42
}
}
],
"max_points": 42
},
{
"key": "pr_acceptance",
"name": "PR acceptance",
"detail": "92/93 decided PRs merged",
"points": 29.7,
"status": "partial",
"details": [
{
"code": "decided_prs_merged",
"params": {
"merged": 92,
"decided": 93
}
}
],
"max_points": 30
},
{
"key": "newcomer_pr_acceptance",
"name": "Newcomer PR acceptance",
"detail": "no first-time contributor's PR decided in 30d",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_newcomer_prs",
"params": {
"days": 30
}
}
],
"max_points": 13
},
{
"key": "openssf_scorecard_code_review",
"name": "OpenSSF Scorecard: Code-Review",
"detail": "Found 1/4 approved changesets -- score normalized to 2",
"points": 3,
"status": "partial",
"details": [],
"max_points": 15
}
]
},
{
"key": "stewardship",
"band": "weak",
"name": "Ownership & stewardship",
"note": "Excluded from scoring (no data or not applicable): Verified domain. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"verified_domain"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 38,
"inputs": {
"followers": 0,
"owner_type": "User",
"is_verified": null,
"owner_login": "sampleXbro",
"public_repos": 14,
"account_age_days": 2500
},
"components": [
{
"key": "ownership_backing",
"name": "Ownership backing",
"detail": "personal (user) account",
"points": 10,
"status": "partial",
"details": [
{
"code": "owner_personal",
"params": {}
}
],
"max_points": 30
},
{
"key": "verified_domain",
"name": "Verified domain",
"detail": "not applicable to user accounts",
"points": 0,
"status": "excluded",
"details": [
{
"code": "not_applicable_to_user_accounts",
"params": {}
}
],
"max_points": 20
},
{
"key": "owner_reach",
"name": "Owner reach",
"detail": "0 followers of sampleXbro",
"points": 0,
"status": "missed",
"details": [
{
"code": "owner_followers",
"params": {
"count": 0,
"login": "sampleXbro"
}
}
],
"max_points": 25
},
{
"key": "track_record",
"name": "Track record",
"detail": "14 public repos, account ~6 yr old",
"points": 20.6,
"status": "partial",
"details": [
{
"code": "public_repos",
"params": {
"count": 14
}
},
{
"code": "account_age_years",
"params": {
"years": 6
}
}
],
"max_points": 25
}
]
},
{
"key": "package_maintenance",
"band": "exceptional",
"name": "Package maintenance",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"packages": [
"agentsmesh"
],
"ecosystems": "npm",
"any_deprecated": false,
"min_days_since_publish": 9
},
"components": [
{
"key": "published_resolvable",
"name": "Published & resolvable",
"detail": "1 package(s) on npm",
"points": 25,
"status": "met",
"details": [
{
"code": "packages_published",
"params": {
"count": 1,
"ecosystems": "npm"
}
}
],
"max_points": 25
},
{
"key": "publish_recency",
"name": "Publish recency",
"detail": "latest publish 9 days ago",
"points": 35,
"status": "met",
"details": [
{
"code": "publish_recency",
"params": {
"days": 9
}
}
],
"max_points": 35
},
{
"key": "version_history",
"name": "Version history",
"detail": "44 published versions",
"points": 20,
"status": "met",
"details": [
{
"code": "published_versions",
"params": {
"count": 44
}
}
],
"max_points": 20
},
{
"key": "not_deprecated",
"name": "Not deprecated",
"detail": "active, not deprecated or yanked",
"points": 20,
"status": "met",
"details": [
{
"code": "package_not_deprecated",
"params": {}
}
],
"max_points": 20
}
]
}
],
"description": "Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?"
},
{
"key": "engineering",
"band": "excellent",
"name": "Engineering Quality",
"value": 84,
"weight": 0.19,
"metrics": [
{
"key": "engineering_practices",
"band": "good",
"name": "Engineering practices",
"note": null,
"notes": [],
"value": 74,
"inputs": {
"has_ci": true,
"has_tests": true,
"has_editorconfig": false,
"has_linter_config": true,
"has_precommit_config": false
},
"components": [
{
"key": "ci_workflows",
"name": "CI workflows",
"detail": "4 workflow(s)",
"points": 24,
"status": "met",
"details": [
{
"code": "ci_workflows",
"params": {
"count": 4
}
}
],
"max_points": 24
},
{
"key": "tests_present",
"name": "Tests present",
"detail": null,
"points": 24,
"status": "met",
"details": [],
"max_points": 24
},
{
"key": "linter_config",
"name": "Linter config",
"detail": "eslint.config.js",
"points": 16,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "eslint.config.js"
}
}
],
"max_points": 16
},
{
"key": "pre_commit_hooks",
"name": "Pre-commit hooks",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 9.6
},
{
"key": "editorconfig",
"name": ".editorconfig",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 6.4
},
{
"key": "openssf_scorecard_ci_tests",
"name": "OpenSSF Scorecard: CI-Tests",
"detail": "3 out of 6 merged PRs checked by a CI test -- score normalized to 5",
"points": 10,
"status": "partial",
"details": [],
"max_points": 20
}
]
},
{
"key": "documentation",
"band": "exceptional",
"name": "Documentation",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"topics": [
"ai-agents",
"claude-code",
"cli",
"codex",
"config-sync",
"cursor",
"developer-tools",
"mcp"
],
"has_wiki": true,
"homepage": "https://samplexbro.github.io/agentsmesh/",
"has_readme": true,
"has_docs_dir": true,
"has_description": true
},
"components": [
{
"key": "readme",
"name": "README",
"detail": null,
"points": 30,
"status": "met",
"details": [],
"max_points": 30
},
{
"key": "documentation_directory",
"name": "Documentation directory",
"detail": null,
"points": 25,
"status": "met",
"details": [],
"max_points": 25
},
{
"key": "documentation_homepage_site",
"name": "Documentation / homepage site",
"detail": "https://samplexbro.github.io/agentsmesh/",
"points": 15,
"status": "met",
"details": [],
"max_points": 15
},
{
"key": "repository_description",
"name": "Repository description",
"detail": null,
"points": 10,
"status": "met",
"details": [],
"max_points": 10
},
{
"key": "topics",
"name": "Topics",
"detail": "8 topics",
"points": 10,
"status": "met",
"details": [
{
"code": "topics_count",
"params": {
"count": 8
}
}
],
"max_points": 10
},
{
"key": "wiki",
"name": "Wiki",
"detail": null,
"points": 10,
"status": "met",
"details": [],
"max_points": 10
}
]
}
],
"description": "Are baseline engineering and documentation practices in place?"
},
{
"key": "security",
"band": "weak",
"name": "Security",
"value": 45,
"weight": 0.16,
"metrics": [
{
"key": "security_posture",
"band": "weak",
"name": "Security posture",
"note": "Excluded from scoring (no data or not applicable): Packaging. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"packaging"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 35,
"inputs": {
"source": "openssf_scorecard",
"checks_evaluated": 17,
"scorecard_version": "v5.5.0",
"checks_inconclusive": 1,
"scorecard_aggregate": 3.5
},
"components": [
{
"key": "binary_artifacts",
"name": "Binary-Artifacts",
"detail": "no binaries found in the repo",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "branch_protection",
"name": "Branch-Protection",
"detail": "branch protection not enabled on development/release branches",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "ci_tests",
"name": "CI-Tests",
"detail": "3 out of 6 merged PRs checked by a CI test -- score normalized to 5",
"points": 1.2,
"status": "partial",
"details": [],
"max_points": 2.5
},
{
"key": "cii_best_practices",
"name": "CII-Best-Practices",
"detail": "no effort to earn an OpenSSF best practices badge detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 2.5
},
{
"key": "code_review",
"name": "Code-Review",
"detail": "Found 1/4 approved changesets -- score normalized to 2",
"points": 1.5,
"status": "partial",
"details": [],
"max_points": 7.5
},
{
"key": "contributors",
"name": "Contributors",
"detail": "project has 0 contributing companies or organizations -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 2.5
},
{
"key": "dangerous_workflow",
"name": "Dangerous-Workflow",
"detail": "no dangerous workflow patterns detected",
"points": 10,
"status": "met",
"details": [],
"max_points": 10
},
{
"key": "dependency_update_tool",
"name": "Dependency-Update-Tool",
"detail": "no update tool detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "fuzzing",
"name": "Fuzzing",
"detail": "project is not fuzzed",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "license",
"name": "License",
"detail": "license file detected",
"points": 2.5,
"status": "met",
"details": [],
"max_points": 2.5
},
{
"key": "maintained",
"name": "Maintained",
"detail": "30 commit(s) and 1 issue activity found in the last 90 days -- score normalized to 10",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "packaging",
"name": "Packaging",
"detail": "packaging workflow not detected",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 5
},
{
"key": "pinned_dependencies",
"name": "Pinned-Dependencies",
"detail": "dependency not pinned by hash detected -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "sast",
"name": "SAST",
"detail": "SAST tool is not run on all commits -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "security_policy",
"name": "Security-Policy",
"detail": "security policy file detected",
"points": 5,
"status": "met",
"details": [],
"max_points": 5
},
{
"key": "signed_releases",
"name": "Signed-Releases",
"detail": "Project has not signed or included provenance with any releases.",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "token_permissions",
"name": "Token-Permissions",
"detail": "detected GitHub workflow tokens with excessive permissions",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "vulnerabilities",
"name": "Vulnerabilities",
"detail": "33 existing vulnerabilities detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
}
]
},
{
"key": "dependency_advisories",
"band": "excellent",
"name": "Dependency advisories",
"note": "Matched the npm:agentsmesh@0.32.0 runtime dependency closure — what installing the published package pulls in — 113 packages. Reachability is not analyzed.",
"notes": [
{
"code": "advisories_scope_published",
"params": {
"package": "npm:agentsmesh@0.32.0",
"assessed": 113
}
},
{
"code": "advisories_reachability",
"params": {}
}
],
"value": 85,
"inputs": {
"source": "osv",
"advisories": 1,
"affected_packages": 1,
"assessed_packages": 113,
"unassessed_packages": 0,
"affected_by_severity": "moderate 1",
"direct_affected_packages": 1
},
"components": [
{
"key": "direct_dependencies_free_of_known_advisories",
"name": "Direct dependencies free of known advisories",
"detail": "1 affected: tar 7.5.20 (moderate 5.3)",
"points": 20.2,
"status": "partial",
"details": [
{
"code": "advisories_affected",
"params": {
"count": 1,
"packages": "tar 7.5.20 (moderate 5.3)"
}
}
],
"max_points": 35
},
{
"key": "indirect_dependencies_free_of_known_advisories",
"name": "Indirect dependencies free of known advisories",
"detail": "no indirect dependency carries a known advisory",
"points": 25,
"status": "met",
"details": [
{
"code": "no_indirect_advisories",
"params": {}
}
],
"max_points": 25
},
{
"key": "no_advisories_left_outstanding",
"name": "No advisories left outstanding",
"detail": "no advisory has been public longer than 90 days",
"points": 40,
"status": "met",
"details": [
{
"code": "advisories_none_stale",
"params": {
"days": 90
}
}
],
"max_points": 40
}
]
},
{
"key": "malicious_dependencies",
"band": "exceptional",
"name": "Malicious dependencies",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"source": "osv",
"meaning": "reported as a malicious package by the OpenSSF corpus; the remedy is removal or moving off the compromised name, never an upgrade of the same artifact. Versions the registry has since pulled are listed but not scored",
"packages": [],
"red_flag": false,
"assessed_packages": 113,
"malicious_packages": 0,
"direct_malicious_packages": 0,
"withdrawn_malicious_packages": 0,
"installable_malicious_packages": 0
},
"components": [
{
"key": "no_dependency_reported_as_a_malicious_package",
"name": "No dependency reported as a malicious package",
"detail": "no dependency is reported as a malicious package",
"points": 100,
"status": "met",
"details": [
{
"code": "no_malicious_dependencies",
"params": {}
}
],
"max_points": 100
}
]
},
{
"key": "high_risk_jurisdiction_exposure",
"band": "exceptional",
"name": "High-Risk Jurisdiction Exposure",
"note": "Only high-confidence self-published location evidence affects this multiplier. Ambiguous matches are review-only; country evidence is not proof of nationality, citizenship, legal registration, malicious intent, or sanctions status.",
"notes": [
{
"code": "jurisdiction_evidence_limits",
"params": {}
}
],
"value": 100,
"inputs": {
"meaning": "self-published location evidence; not nationality or citizenship",
"red_flag": false,
"exposures": [],
"policy_countries": [
"Russia",
"Iran",
"North Korea"
],
"commit_weight_rule": {
"min_commits": 50,
"min_commit_share": 0.1
},
"review_only_matches": 0,
"below_threshold_exposures": [],
"assessed_self_published_locations": 3
},
"components": [
{
"key": "policy_exposure_multiplier",
"name": "Policy exposure multiplier",
"detail": "no confirmed policy-scope location match",
"points": 100,
"status": "met",
"details": [
{
"code": "jurisdiction_no_match",
"params": {}
}
],
"max_points": 100
}
]
}
],
"description": "Are visible security and supply-chain practices strong, with no malicious dependency and no unresolved high-risk jurisdiction exposure?"
},
{
"key": "ai_readiness",
"band": "good",
"name": "AI Readiness",
"value": 71,
"weight": 0.04,
"metrics": [
{
"key": "ai_agent_context",
"band": "excellent",
"name": "Agent context & guidance",
"note": null,
"notes": [],
"value": 85,
"inputs": {
"has_llms_txt": false,
"legible_history_share": 0.968,
"agent_instruction_files": [
"AGENTS.md",
"CLAUDE.md",
"src/AGENTS.md",
"tests/e2e/fixtures/amp-project/AGENTS.md",
"tests/e2e/fixtures/claude-code-project/CLAUDE.md",
"tests/e2e/fixtures/codex-project/AGENTS.md",
"tests/e2e/fixtures/cursor-project/AGENTS.md",
"tests/e2e/fixtures/deepagents-cli-project/.deepagents/AGENTS.md",
"tests/e2e/fixtures/factory-droid-project/AGENTS.md",
"tests/e2e/fixtures/gemini-project/GEMINI.md",
"tests/e2e/fixtures/goose-project/.goosehints",
"tests/e2e/fixtures/jules-project/AGENTS.md",
"tests/e2e/fixtures/kilo-code-project/AGENTS.md",
"tests/e2e/fixtures/kiro-project/AGENTS.md",
"tests/e2e/fixtures/opencode-project/AGENTS.md",
"tests/e2e/fixtures/pi-agent-project/AGENTS.md",
"tests/e2e/fixtures/rovodev-project/AGENTS.md",
"tests/e2e/fixtures/warp-project/AGENTS.md",
"tests/e2e/fixtures/windsurf-agents-project/AGENTS.md",
"tests/e2e/fixtures/windsurf-project/.windsurfrules"
],
"agent_instruction_max_bytes": 8162
},
"components": [
{
"key": "agent_instructions",
"name": "Agent instructions",
"detail": "AGENTS.md, CLAUDE.md, src/AGENTS.md, tests/e2e/fixtures/amp-project/AGENTS.md, tests/e2e/fixtures/claude-code-project/CLAUDE.md, tests/e2e/fixtures/codex-project/AGENTS.md, tests/e2e/fixtures/cursor-project/AGENTS.md, tests/e2e/fixtures/deepagents-cli-project/.deepagents/AGENTS.md, tests/e2e/fixtures/factory-droid-project/AGENTS.md, tests/e2e/fixtures/gemini-project/GEMINI.md, tests/e2e/fixtures/goose-project/.goosehints, tests/e2e/fixtures/jules-project/AGENTS.md, tests/e2e/fixtures/kilo-code-project/AGENTS.md, tests/e2e/fixtures/kiro-project/AGENTS.md, tests/e2e/fixtures/opencode-project/AGENTS.md, tests/e2e/fixtures/pi-agent-project/AGENTS.md, tests/e2e/fixtures/rovodev-project/AGENTS.md, tests/e2e/fixtures/warp-project/AGENTS.md, tests/e2e/fixtures/windsurf-agents-project/AGENTS.md, tests/e2e/fixtures/windsurf-project/.windsurfrules",
"points": 45,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "AGENTS.md, CLAUDE.md, src/AGENTS.md, tests/e2e/fixtures/amp-project/AGENTS.md, tests/e2e/fixtures/claude-code-project/CLAUDE.md, tests/e2e/fixtures/codex-project/AGENTS.md, tests/e2e/fixtures/cursor-project/AGENTS.md, tests/e2e/fixtures/deepagents-cli-project/.deepagents/AGENTS.md, tests/e2e/fixtures/factory-droid-project/AGENTS.md, tests/e2e/fixtures/gemini-project/GEMINI.md, tests/e2e/fixtures/goose-project/.goosehints, tests/e2e/fixtures/jules-project/AGENTS.md, tests/e2e/fixtures/kilo-code-project/AGENTS.md, tests/e2e/fixtures/kiro-project/AGENTS.md, tests/e2e/fixtures/opencode-project/AGENTS.md, tests/e2e/fixtures/pi-agent-project/AGENTS.md, tests/e2e/fixtures/rovodev-project/AGENTS.md, tests/e2e/fixtures/warp-project/AGENTS.md, tests/e2e/fixtures/windsurf-agents-project/AGENTS.md, tests/e2e/fixtures/windsurf-project/.windsurfrules"
}
}
],
"max_points": 45
},
{
"key": "machine_readable_docs_llms_txt",
"name": "Machine-readable docs (llms.txt)",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
},
{
"key": "legible_commit_history",
"name": "Legible commit history",
"detail": "92 of 95 human commits state their intent (structured subject or explanatory body)",
"points": 40,
"status": "met",
"details": [
{
"code": "legible_history",
"params": {
"legible": 92,
"sampled": 95
}
}
],
"max_points": 40
}
]
},
{
"key": "ai_verify_loop",
"band": "moderate",
"name": "Verify loop (build / test / typecheck)",
"note": null,
"notes": [],
"value": 54,
"inputs": {
"has_nix": false,
"has_tests": true,
"lockfiles": [
"pnpm-lock.yaml"
],
"has_dockerfile": false,
"typed_language": true,
"bootstrap_files": [],
"has_devcontainer": false,
"has_linter_config": true,
"typecheck_configs": [
"tests/consumer-smoke/tsconfig.json",
"tsconfig.json",
"website/tsconfig.json"
],
"agent_commit_share": 0,
"toolchain_manifests": [],
"dependency_bot_commit_share": 0
},
"components": [
{
"key": "one_command_bootstrap",
"name": "One-command bootstrap",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 18
},
{
"key": "automated_tests",
"name": "Automated tests",
"detail": null,
"points": 22,
"status": "met",
"details": [],
"max_points": 22
},
{
"key": "lint_format_config",
"name": "Lint / format config",
"detail": "eslint.config.js",
"points": 11,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "eslint.config.js"
}
}
],
"max_points": 11
},
{
"key": "static_type_checking",
"name": "Static type checking",
"detail": "tests/consumer-smoke/tsconfig.json, tsconfig.json, website/tsconfig.json",
"points": 11,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "tests/consumer-smoke/tsconfig.json, tsconfig.json, website/tsconfig.json"
}
}
],
"max_points": 11
},
{
"key": "reproducible_environment",
"name": "Reproducible environment",
"detail": "lockfile",
"points": 10,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "lockfile"
}
}
],
"max_points": 10
},
{
"key": "demonstrated_agent_practice",
"name": "Demonstrated agent practice",
"detail": "no agent-authored commits among the last 100",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_agent_authored_commits",
"params": {
"sampled": 100
}
}
],
"max_points": 10
},
{
"key": "automated_maintenance",
"name": "Automated maintenance",
"detail": "no automated dependency updates observed",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_dependency_automation",
"params": {}
}
],
"max_points": 8
},
{
"key": "openssf_scorecard_pinned_dependencies",
"name": "OpenSSF Scorecard: Pinned-Dependencies",
"detail": "dependency not pinned by hash detected -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
}
]
},
{
"key": "ai_code_legibility",
"band": "exceptional",
"name": "Code legibility for models",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"primary_language": "TypeScript",
"largest_source_bytes": 389013,
"source_files_sampled": 1832,
"oversized_source_files": 4
},
"components": [
{
"key": "type_checkable_code",
"name": "Type-checkable code",
"detail": "TypeScript (statically typed)",
"points": 45,
"status": "met",
"details": [
{
"code": "statically_typed_language",
"params": {
"language": "TypeScript"
}
}
],
"max_points": 45
},
{
"key": "manageable_file_sizes",
"name": "Manageable file sizes",
"detail": "4/1832 source files over 60KB",
"points": 54.9,
"status": "partial",
"details": [
{
"code": "oversized_source_files",
"params": {
"kb": 60,
"sampled": 1832,
"oversized": 4
}
}
],
"max_points": 55
}
]
},
{
"key": "ai_interfaces",
"band": "moderate",
"name": "Machine-readable interfaces",
"note": null,
"notes": [],
"value": 60,
"inputs": {
"example_dirs": [
"examples"
],
"has_mcp_signal": true,
"api_schema_files": []
},
"components": [
{
"key": "api_schema_openapi_graphql_proto",
"name": "API schema (OpenAPI/GraphQL/proto)",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 40
},
{
"key": "mcp_server",
"name": "MCP server",
"detail": null,
"points": 20,
"status": "met",
"details": [],
"max_points": 20
},
{
"key": "runnable_examples",
"name": "Runnable examples",
"detail": "examples",
"points": 40,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "examples"
}
}
],
"max_points": 40
}
]
}
],
"description": "How well is the repo equipped to be developed and maintained with AI coding agents? Carries a deliberately small weight: agent tooling is a real maintenance signal, but its absence must never gate the top of the scale (calibration saturates at raw 91, so 100/100 remains reachable with AI Readiness at zero)."
}
],
"classification": {
"labels": [
"mcp-server",
"library"
],
"scores": {
"cli": 2,
"library": 6,
"mcp-server": 7
},
"primary": "mcp-server",
"evidence": [
{
"tier": "distribution",
"label": "library",
"source": "registry:npm",
"weight": 6
},
{
"tier": "dependencies",
"label": "mcp-server",
"source": "dep:@modelcontextprotocol/sdk",
"weight": 4
},
{
"tier": "structure",
"label": "mcp-server",
"source": "mcp_signal",
"weight": 3
},
{
"tier": "tags",
"label": "cli",
"source": "tag:cli",
"weight": 2
}
],
"artifacts": [],
"confidence": "medium",
"host_extension": false,
"runs_as_process": true,
"consumed_by_code": true
},
"metrics_version": "2.3.1"
},
"warnings": [
"Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token",
"GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository"
],
"report_type": "repository",
"generated_at": "2026-08-01T08:41:50.384805Z",
"schema_version": "0.27.0",
"badge_url": "https://raw.githubusercontent.com/inspect-software/badges/main/v1/s/sampleXbro/agentsmesh.svg",
"full_name": "sampleXbro/agentsmesh",
"license_state": "standard",
"license_spdx": "MIT"
}