公开记录
软件健康报告模式 0.31.0 · 指标 2.5.0 · 2026-08-05 09:26 UTC

stein155 / retouch

🎵 ReTouch keeps Bose SoundTouch speakers working by hosting the required Bose API directly on the speaker itself.

Go · TypeScriptMIT★ 2 星标⑂ 2 复刻始于 2026年6月在 GitHub 上查看 ↗
类型网页界面如何判定

stein155/retouch 的健康指数为 100 分中的 60 分,处于「中等」区间。 其得分最高的类别是AI Readiness(85/100),最低的是Community & Adoption(24/100)。 最近一次更新在 1 天前。 近期的大部分工作由 1 位贡献者完成。

60
总分 / 100
中等

软件健康指数

指标归入加权类别,统一采用 1–100 量表。总体分先取类别加权平均,再依据公开记录的分布进行校准,使各等级具有百分位含义;当公开证据触发高风险司法辖区政策时,评级会按政策调整,并设置 34(存在风险)的上限。

60
卓越93-100公开记录中的最高层级(约前 5%);基本满足所有检验标准
优秀80-92各方面均表现强劲;仅有少量不足
良好65-79健康;不足之处有限且可控
中等50-64可接受,但存在明显不足;建议进行审查
薄弱35-49多个领域存在实质性薄弱环节
存在风险20-34存在重大薄弱环节;采用时应保持审慎
危急1-19问题严重(项目被弃置、仅有单一维护者、缺乏基本工程规范)
活力社区与采用可持续性与治理工程质量安全AI 就绪度

评分画像

每条轴代表一个类别。形状比平均值更重要——健康的对象会填满整个图形,而“一峰一谷”式画像意味着某一维度的优势正掩盖另一维度的风险。

加权总体分 57 经校准后在公布的指数量表上为 60(记录校准 2026-08-02)。

所有权

Stein Milder个人账户
2 关注者5 个公开仓库始于 2017年1月

该仓库由个人账户拥有。相较于组织支持的项目,单一所有者项目的延续性风险更高。

软件包生态系统

注册表软件包版本月下载量版本数最近发布
Gogithub.com/stein155/retouchv0.2.38-4010 天前

按类别列示的指标

活力

项目是否仍有生命——是否仍在编写代码,是否仍在发布版本?

74良好 · 占总体的 21%
评分方式
36/36推送新近度 — 最近一次推送于 1 天前
4.8/36提交节奏 — 52 周中有 7 周有提交
18/18提交量 — 最近一年 336 次提交
0/10OpenSSF Scorecard:Maintained — project was created within the last 90 days. Please review its contents carefully
所用输入
commits_last_year336
human_commit_share0.95
days_since_last_push1
active_weeks_last_year7

发布纪律

96卓越
评分方式
27/27有发布版本 — 已发布 40 个发布版本
36/36发布时效 — 最近一次发布版本于 10 天前
27/27发布节奏 — 约每 2.6 天发布一次
6/10OpenSSF Scorecard:Signed-Releases — 4 out of the last 5 releases have a total of 4 signed artifacts.
所用输入
releases_count40
latest_release_tagv0.2.38
releases_from_tags
days_since_latest_release10
mean_days_between_releases2.6

社区与采用

项目是否拥有用户、下载量与关注度,并具备欢迎贡献者参与的配置?

24存在风险 · 占总体的 17%
评分方式
0/60星标 — 2 个星标
0/25复刻 — 2 个复刻
0/15关注者 — 0 位关注者
所用输入
forks2
stars2
watchers0
growth_stateunverified
growth_factor_pct100
growth_unverified_reasonno_history

社区健康

50中等
评分方式
22.5/22.5README
22.5/22.5许可证 — 可识别的许可证(MIT)
0/18CONTRIBUTING 指南
0/13.5行为准则
0/7.2议题模板
0/6.3PR 模板
所用输入
has_readme
has_license
readme_badges5
has_contributing
has_issue_template
has_code_of_conduct
readme_badge_servicesshields.io
has_pull_request_template

可持续性与治理

项目能否在其成员之外延续——巴士系数、响应能力、由谁支持,以及软件包的维护状况?

57中等 · 占总体的 23%
评分方式
9/54巴士系数 — 1 位贡献者贡献了半数提交
7/22.5提交分布 — 头号贡献者编写了 69% 的提交
4.1/13.5贡献者广度 — 3 位贡献者
0/10OpenSSF Scorecard:Contributors — project has 0 contributing companies or organizations -- score normalized to 0
所用输入
bus_factor1
contributors_sampled3
top_contributor_share0.687
评分方式
0/42议题解决 — 没有议题或无数据
27.9/30PR 接受 — 已裁定的 PR 中 118/127 已合并
0/13Newcomer PR acceptance — 30 天内没有首次贡献者的 PR 得到裁决
10.5/15OpenSSF Scorecard:Code-Review — Found 5/7 approved changesets -- score normalized to 7
所用输入
merged_prs118
open_issues0
closed_issues0
prs_merged_7d0
prs_decided_7d0
prs_merged_30d42
prs_decided_30d45
issue_closed_ratio
closed_unmerged_prs9
first_time_authors_30d0
first_time_prs_merged_30d0
first_time_prs_decided_30d0
已排除计分(无数据或不适用):议题解决, newcomer_pr_acceptance。 其余权重已重新归一化。
评分方式
10/30所有权背书 — 个人(用户)账户
0/20已验证域名 — 不适用于个人账户
3.4/25所有者影响力 — stein155 有 2 位关注者
17.7/25既往记录 — 5 个公开仓库,账户约 9 年
所用输入
followers2
owner_typeUser
is_verified
owner_loginstein155
public_repos5
account_age_days3,479
已排除计分(无数据或不适用):已验证域名。 其余权重已重新归一化。
评分方式
25/25已发布且可解析 — go 上有 1 个软件包
35/35发布时效 — 最近一次发布于 10 天前
20/20版本历史 — 40 个已发布版本
20/20未被弃用 — 活跃,未被弃用或撤回
所用输入
packagesgithub.com/stein155/retouch
ecosystemsgo
any_deprecated
min_days_since_publish10

工程质量

基础的工程与文档实践是否到位?

71良好 · 占总体的 19%

工程实践

68良好
评分方式
24/24CI 工作流 — 4 个工作流
24/24存在测试
0/16Linter 配置
0/9.6Pre-commit 钩子
0/6.4.editorconfig
20/20OpenSSF Scorecard:CI-Tests — 12 out of 12 merged PRs checked by a CI test -- score normalized to 10
所用输入
has_ci
has_tests
has_editorconfig
has_linter_config
has_precommit_config

文档

75良好
评分方式
30/30README
25/25文档目录
0/15文档 / 主页站点
10/10仓库描述
10/10主题标签 — 9 个主题标签
0/10Wiki
所用输入
topicsbose, golang, internet-radio, multiroom, radio, react, self-hosted, soundtouch, tunein
has_wiki
homepage
has_readme
has_docs_dir
has_description

安全

可见的安全与供应链实践是否稳固,且不存在未解决的高风险司法辖区暴露?

46薄弱 · 占总体的 16%

安全态势

46薄弱
评分方式
7.5/7.5Binary-Artifacts — no binaries found in the repo
0/7.5Branch-Protection — branch protection not enabled on development/release branches
2.5/2.5CI-Tests — 12 out of 12 merged PRs checked by a CI test -- score normalized to 10
0/2.5CII-Best-Practices — no effort to earn an OpenSSF best practices badge detected
5.2/7.5Code-Review — Found 5/7 approved changesets -- score normalized to 7
0/2.5Contributors — project has 0 contributing companies or organizations -- score normalized to 0
10/10Dangerous-Workflow — no dangerous workflow patterns detected
7.5/7.5Dependency-Update-Tool — update tool detected
0/5Fuzzing — project is not fuzzed
2.5/2.5许可证 — license file detected
0/7.5Maintained — project was created within the last 90 days. Please review its contents carefully
0/5Packaging — 无数据
3/5Pinned-Dependencies — dependency not pinned by hash detected -- score normalized to 6
0/5SAST — SAST tool is not run on all commits -- score normalized to 0
0/5Security-Policy — security policy file not detected
4.5/7.5Signed-Releases — 4 out of the last 5 releases have a total of 4 signed artifacts.
0/7.5Token-Permissions — detected GitHub workflow tokens with excessive permissions
3/7.5Vulnerabilities — 6 existing vulnerabilities detected
所用输入
sourceopenssf_scorecard
checks_evaluated17
scorecard_versionv5.5.0
checks_inconclusive1
scorecard_aggregate4.6
已排除计分(无数据或不适用):packaging。 其余权重已重新归一化。

AI 就绪度

该仓库在多大程度上具备与 AI 编码代理协同开发与维护的条件?权重刻意设小(4%):代理工具链是一项真实的维护信号,但完全不具备的仓库仍可达到 100/100。

85优秀 · 占总体的 4%
评分方式
45/45代理指令 — AGENTS.md
0/15机器可读文档(llms.txt)
40/40可读的提交历史 — 95 次人类提交中有 95 次说明了意图(结构化标题或解释性正文)
所用输入
has_llms_txt
legible_history_share1
agent_instruction_filesAGENTS.md
agent_instruction_max_bytes6,731
评分方式
12.6/18一条命令的引导启动 — go.mod(工具链约定,无任务运行器)
22/22自动化测试
0/11Lint / 格式化配置
11/11静态类型检查 — frontend/tsconfig.json
10/10可复现环境 — lockfile
10/10已体现的代理实践 — 最近 100 次提交中有 33 次由代理编写或署名代理
8/8自动化维护 — 最近 100 次提交中有 5 次为自动依赖更新
6/10OpenSSF Scorecard:Pinned-Dependencies — dependency not pinned by hash detected -- score normalized to 6
所用输入
has_nix
has_tests
lockfilespackage-lock.json
has_dockerfile
typed_language
bootstrap_files
has_devcontainer
has_linter_config
typecheck_configsfrontend/tsconfig.json
agent_commit_share0.33
toolchain_manifestsgo.mod
dependency_bot_commit_share0.05
评分方式
45/45可类型检查的代码 — Go(静态类型)
55/55可控的文件大小 — 采样的 155 个源文件中有 0 个超过 60KB
所用输入
primary_languageGo
largest_source_bytes44,973
source_files_sampled155
oversized_source_files0

关键数据

2GitHub 星标
3贡献者
336最近 12 个月提交数
1距最近推送天数
40发布版本数
1巴士系数(bus factor)
0开放议题
Go, npm软件包生态系统数

数据采集警告

  • Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token
  • GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository

更多细节

Star 与 Fork 历史 0 ★ / 2 ⇿
0Star
2Fork
26发布

每颗 star 和每个 fork 的添加时间,来自 GitHub 并按天汇总。累计增长位于其构成来源——每日新增——的正上方,二者可相互对照:稳定的自然增长与短暂的突增形态截然不同。当这一差别可被衡量时,它会作为增长真实性予以报告。

111222212026-062026-062026-07
主版本 0次版本 0修订 26
OpenSSF Scorecard 4.6 / 10
4.6综合

来自开源项目 OpenSSF Scorecard 的独立、工具无关的安全评估。每项检查奖励的是安全实践本身,而非特定供应商的工具。Scorecard 无法判定的检查项标记为 不适用,并从安全评分中剔除(绝不按零分计)。Scorecard v5.5.0 · 2026-08-05 09:25 UTC

10Binary-Artifactsno binaries found in the repo
0Branch-Protectionbranch protection not enabled on development/release branches
10CI-Tests12 out of 12 merged PRs checked by a CI test -- score normalized to 10
0CII-Best-Practicesno effort to earn an OpenSSF best practices badge detected
7Code-ReviewFound 5/7 approved changesets -- score normalized to 7
0Contributorsproject has 0 contributing companies or organizations -- score normalized to 0
10Dangerous-Workflowno dangerous workflow patterns detected
10Dependency-Update-Toolupdate tool detected
0Fuzzingproject is not fuzzed
10Licenselicense file detected
0Maintainedproject was created within the last 90 days. Please review its contents carefully
不适用Packagingpackaging workflow not detected
6Pinned-Dependenciesdependency not pinned by hash detected -- score normalized to 6
0SASTSAST tool is not run on all commits -- score normalized to 0
0Security-Policysecurity policy file not detected
6Signed-Releases4 out of the last 5 releases have a total of 4 signed artifacts.
0Token-Permissionsdetected GitHub workflow tokens with excessive permissions
4Vulnerabilities6 existing vulnerabilities detected
直接依赖 3
注册表软件包版本约束清单文件
npmreact^19.2.0frontend/package.json
npmreact-dom^19.2.0frontend/package.json
npmstyled-components^6.4.4frontend/package.json
全部依赖 未采集

本报告未能采集到解析后的依赖集合:GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository

原始 JSON 报告 机器可读
{
  "data": {
    "icon": {
      "bytes": 12771,
      "width": 256,
      "height": 256,
      "rejected": [
        {
          "url": "https://raw.githubusercontent.com/stein155/retouch/main/docs/readme-header.png",
          "reason": "not square enough (1600x520)",
          "source_type": "readme"
        },
        {
          "url": "https://raw.githubusercontent.com/stein155/retouch/main/screenshots/home.png",
          "reason": "not square enough (824x1830)",
          "source_type": "readme"
        },
        {
          "url": "https://raw.githubusercontent.com/stein155/retouch/main/screenshots/search.png",
          "reason": "not square enough (824x1830)",
          "source_type": "readme"
        },
        {
          "url": "https://raw.githubusercontent.com/stein155/retouch/main/screenshots/settings.png",
          "reason": "not square enough (824x1830)",
          "source_type": "readme"
        },
        {
          "url": "https://raw.githubusercontent.com/stein155/retouch/main/screenshots/home-dark.png",
          "reason": "not square enough (824x1830)",
          "source_type": "readme"
        }
      ],
      "collected": true,
      "media_type": "image/jpeg",
      "source_url": "https://avatars.githubusercontent.com/u/25324301?v=4&s=256",
      "source_type": "avatar",
      "content_hash": "12798608713e1bebfbbb5ec6bf0185a582680f8f042994713d18ee5ae0bb9f95",
      "candidates_considered": 6
    },
    "repo": {
      "topics": [
        "bose",
        "golang",
        "internet-radio",
        "multiroom",
        "radio",
        "react",
        "self-hosted",
        "soundtouch",
        "tunein"
      ],
      "is_fork": false,
      "size_kb": 4499,
      "has_wiki": false,
      "homepage": null,
      "languages": {
        "Go": 561826,
        "HTML": 10529,
        "Shell": 65125,
        "JavaScript": 1238,
        "TypeScript": 304764
      },
      "pushed_at": "2026-08-03T18:56:05Z",
      "created_at": "2026-06-15T05:27:08Z",
      "owner_type": "User",
      "updated_at": "2026-07-26T15:19:01Z",
      "description": "🎵 ReTouch keeps Bose SoundTouch speakers working by hosting the required Bose API directly on the speaker itself.",
      "is_archived": false,
      "is_disabled": false,
      "license_spdx": "MIT",
      "default_branch": "main",
      "license_spdx_raw": "MIT",
      "primary_language": "Go",
      "significant_languages": [
        "Go",
        "TypeScript"
      ]
    },
    "owner": {
      "blog": null,
      "name": "Stein Milder",
      "type": "User",
      "login": "stein155",
      "company": null,
      "location": "Zevenaar, Netherlands",
      "followers": 2,
      "avatar_url": "https://avatars.githubusercontent.com/u/25324301?v=4",
      "created_at": "2017-01-24T14:05:52Z",
      "is_verified": null,
      "public_repos": 5,
      "account_age_days": 3479
    },
    "license": {
      "state": "standard",
      "spdx_id": "MIT",
      "raw_spdx": "MIT",
      "file_present": true,
      "scorecard_found": true,
      "profile_has_license": true
    },
    "activity": {
      "releases": [
        {
          "tag": "v0.2.38",
          "kind": "patch",
          "published_at": "2026-07-25T11:01:20Z"
        },
        {
          "tag": "v0.2.37",
          "kind": "patch",
          "published_at": "2026-07-25T09:56:39Z"
        },
        {
          "tag": "v0.2.36",
          "kind": "patch",
          "published_at": "2026-07-25T04:04:15Z"
        },
        {
          "tag": "v0.2.35",
          "kind": "patch",
          "published_at": "2026-07-16T15:30:01Z"
        },
        {
          "tag": "v0.2.34",
          "kind": "patch",
          "published_at": "2026-07-04T20:08:37Z"
        },
        {
          "tag": "v0.2.33",
          "kind": "patch",
          "published_at": "2026-07-04T11:06:56Z"
        },
        {
          "tag": "v0.2.32",
          "kind": "patch",
          "published_at": "2026-07-03T12:35:27Z"
        },
        {
          "tag": "v0.2.31",
          "kind": "patch",
          "published_at": "2026-07-03T05:40:01Z"
        },
        {
          "tag": "v0.2.30",
          "kind": "patch",
          "published_at": "2026-07-02T16:10:33Z"
        },
        {
          "tag": "v0.2.29",
          "kind": "patch",
          "published_at": "2026-07-02T11:04:01Z"
        },
        {
          "tag": "v0.2.28",
          "kind": "patch",
          "published_at": "2026-07-02T06:10:04Z"
        },
        {
          "tag": "v0.2.27",
          "kind": "patch",
          "published_at": "2026-07-02T05:31:30Z"
        },
        {
          "tag": "v0.2.26",
          "kind": "patch",
          "published_at": "2026-07-01T05:29:54Z"
        },
        {
          "tag": "v0.2.25",
          "kind": "patch",
          "published_at": "2026-06-28T15:52:29Z"
        },
        {
          "tag": "v0.2.24",
          "kind": "patch",
          "published_at": "2026-06-28T08:26:14Z"
        },
        {
          "tag": "v0.2.23",
          "kind": "patch",
          "published_at": "2026-06-27T07:19:24Z"
        },
        {
          "tag": "v0.2.22",
          "kind": "patch",
          "published_at": "2026-06-25T21:11:41Z"
        },
        {
          "tag": "v0.2.21",
          "kind": "patch",
          "published_at": "2026-06-21T17:19:36Z"
        },
        {
          "tag": "v0.2.20",
          "kind": "patch",
          "published_at": "2026-06-20T20:02:14Z"
        },
        {
          "tag": "v0.2.19",
          "kind": "patch",
          "published_at": "2026-06-20T19:39:10Z"
        },
        {
          "tag": "v0.2.18",
          "kind": "patch",
          "published_at": "2026-06-20T19:23:57Z"
        },
        {
          "tag": "v0.2.17",
          "kind": "patch",
          "published_at": "2026-06-20T18:23:53Z"
        },
        {
          "tag": "v0.2.16",
          "kind": "patch",
          "published_at": "2026-06-20T18:03:56Z"
        },
        {
          "tag": "v0.2.15",
          "kind": "patch",
          "published_at": "2026-06-20T16:43:58Z"
        },
        {
          "tag": "v0.2.14",
          "kind": "patch",
          "published_at": "2026-06-20T16:32:16Z"
        },
        {
          "tag": "v0.2.13",
          "kind": "patch",
          "published_at": "2026-06-20T15:36:12Z"
        },
        {
          "tag": "v0.2.12",
          "kind": "patch",
          "published_at": "2026-06-20T09:00:56Z"
        },
        {
          "tag": "v0.2.11",
          "kind": "patch",
          "published_at": "2026-06-20T08:43:55Z"
        },
        {
          "tag": "v0.2.10",
          "kind": "patch",
          "published_at": "2026-06-20T08:09:52Z"
        },
        {
          "tag": "v0.2.9",
          "kind": "patch",
          "published_at": "2026-06-20T06:01:31Z"
        },
        {
          "tag": "v0.2.8",
          "kind": "patch",
          "published_at": "2026-06-19T19:51:28Z"
        },
        {
          "tag": "v0.2.7",
          "kind": "patch",
          "published_at": "2026-06-19T19:26:42Z"
        },
        {
          "tag": "v0.2.6",
          "kind": "patch",
          "published_at": "2026-06-19T19:15:51Z"
        },
        {
          "tag": "v0.2.5",
          "kind": "patch",
          "published_at": "2026-06-19T19:00:41Z"
        },
        {
          "tag": "v0.2.4",
          "kind": "patch",
          "published_at": "2026-06-19T18:28:00Z"
        },
        {
          "tag": "v0.2.3",
          "kind": "patch",
          "published_at": "2026-06-19T17:13:32Z"
        },
        {
          "tag": "v0.2.2",
          "kind": "patch",
          "published_at": "2026-06-19T16:57:13Z"
        },
        {
          "tag": "v0.2.1",
          "kind": "patch",
          "published_at": "2026-06-15T19:23:11Z"
        },
        {
          "tag": "v0.2.0",
          "kind": "minor",
          "published_at": "2026-06-15T16:24:11Z"
        },
        {
          "tag": "v0.1.0",
          "kind": "minor",
          "published_at": "2026-06-15T05:32:24Z"
        }
      ],
      "recent_commits": [
        {
          "oid": "3ea8b0a14f9c9a00a24b931bd16e5568606b3765",
          "body": "fix(st20): stop the speaker asking to be set up, and start the mDNS daemon the firmware never starts",
          "is_bot": false,
          "headline": "Merge pull request #127 from milderdb/fix/st20-setup-state-machine",
          "author_name": "Stein Milder",
          "author_login": "stein155",
          "committed_at": "2026-07-26T15:18:56Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "123bdbe4b1e491c1ab49768effd3a9c4619f59aa",
          "body": "… whole bracket\n\nHardware measurement narrowed this down. What makes a speaker keep asking to be set\nup is the firmware's persistent flag, from GET /setup:\n\n    <setupStateResponse state=\"SETUP_INACTIVE\" systemstate=\"SETUP_LANG_NOT_SET\"/>\n\nand exactly one frame flips it:\n\n    <msg><header deviceID=\"\n[…]\ngger in favour of the explicit flag, which is a fact rather than an inference.\n\nspeaker.SetupState reads the flag; sim serves GET /setup and gains SetSystemState so the\nstate is reproducible in tests.",
          "is_bot": false,
          "headline": "fix(setup): flip the firmware's language flag with one frame, not the…",
          "author_name": "milderdb",
          "author_login": "milderdb",
          "committed_at": "2026-07-26T15:16:06Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "dff7aff7b51983da8c53d440a8a24472aff5319d",
          "body": "…r on free space\n\nTwo hardening changes found while working on a live speaker.\n\n**Minimal pairing payload.** setupsession could send the extended\n<PairDeviceWithAccount> shape the official Bose app uses — <boseServer>,\n<updateServer> and <accountEmail> — and autopair did. On a real ST20 the effect o\n[…]\nx (\"delete an old\nretouch.* binary\"), sized from the running binary plus a 1 MB margin, and stays\npermissive when the partition cannot be measured so an unmeasurable filesystem\nnever blocks an update.",
          "is_bot": false,
          "headline": "fix(pairing): send only the minimal account payload; guard the update…",
          "author_name": "milderdb",
          "author_login": "milderdb",
          "committed_at": "2026-07-26T12:54:54Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "76d0f15a5b654f7af1c23fd3f216ceb65f67b10d",
          "body": "…scoverable\n\nA SoundTouch 20 publishes no mDNS records at all: no _soundtouch, no\n_spotify-connect, no _raop, no _airplay. It is invisible to AirPlay, to Spotify\nand to every SoundTouch controller, while a SoundTouch 10 on the same LAN\npublishes all four.\n\nBoseApp does not publish mDNS itself — it l\n[…]\noundation, not yet the whole story: with avahi healthy,\nBoseApp still registers nothing, and its own IPC ports (30034, 40087) refuse\nconnections. That part is firmware-internal and tracked separately.",
          "is_bot": false,
          "headline": "fix(discovery): start the firmware's mDNS daemon so the speaker is di…",
          "author_name": "milderdb",
          "author_login": "milderdb",
          "committed_at": "2026-07-26T10:54:09Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "f876d2da1fda476ba981f2488a97f17913e54d91",
          "body": "After a cold boot a SoundTouch 20 parks in the firmware's setup mode:\n/now_playing reports source=SETUP, the speaker asks for the SoundTouch app on\nevery start, and its streaming services never initialise — it does not even\nadvertise _spotify-connect on mDNS, and its ZeroConf activeUser stays empty.\n[…]\nVerified on a live SoundTouch 20: all nine steps ack, source goes SETUP ->\nINVALID_SOURCE, and the firmware's own flag advances from SETUP_LANG_NOT_SET to\nSETUP_LANG_SET and stays there.\n\nCloses #126.",
          "is_bot": false,
          "headline": "fix(setup): drive the firmware SETUP state machine to leave setup mode",
          "author_name": "milderdb",
          "author_login": "milderdb",
          "committed_at": "2026-07-26T09:38:57Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "1c27a1367e7361df34591a977a6a8600fef29ed3",
          "body": "fix(display): lowercase font glyphs + larger line spacing for large layout",
          "is_bot": false,
          "headline": "Merge pull request #125 from milderdb/fix/st20-pairing-bootstrap",
          "author_name": "Stein Milder",
          "author_login": "stein155",
          "committed_at": "2026-07-25T10:48:53Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "1065f42bf2fe502ca53c3bc0e3d808ec615b3b4b",
          "body": "…ayout",
          "is_bot": false,
          "headline": "fix(display): lowercase font glyphs + larger line spacing for large l…",
          "author_name": "milderdb",
          "author_login": "milderdb",
          "committed_at": "2026-07-25T10:37:44Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "f26b47795dddd7d77b68450f345bf9f19c1046fc",
          "body": "feat(display): bigger waste icon layout with shortened text",
          "is_bot": false,
          "headline": "Merge pull request #124 from milderdb/fix/st20-pairing-bootstrap",
          "author_name": "Stein Milder",
          "author_login": "stein155",
          "committed_at": "2026-07-25T09:54:32Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "d980ea9457cac2746b0bbe374eedb86b39f6e28d",
          "body": "…ore logic",
          "is_bot": false,
          "headline": "refactor(display): generic Large layout flag; remove waste-specific c…",
          "author_name": "milderdb",
          "author_login": "milderdb",
          "committed_at": "2026-07-25T09:22:18Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "da284a72610b4a9180b0a20e79daf0265c0769b1",
          "body": null,
          "is_bot": false,
          "headline": "feat(display): bigger waste icon layout with shortened text",
          "author_name": "milderdb",
          "author_login": "milderdb",
          "committed_at": "2026-07-25T09:16:04Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "2b0a7823f8a98a603d8570c6b7b84dabbe4de55d",
          "body": "fix(installer): complete ST20 pairing bootstrap",
          "is_bot": false,
          "headline": "Merge pull request #123 from milderdb/fix/st20-pairing-bootstrap",
          "author_name": "Stein Milder",
          "author_login": "stein155",
          "committed_at": "2026-07-25T08:46:53Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "22ab98e00fdc4a026501b7f032e3307d2858bb95",
          "body": null,
          "is_bot": false,
          "headline": "fix(installer): complete ST20 pairing bootstrap",
          "author_name": "milderdb",
          "author_login": "milderdb",
          "committed_at": "2026-07-25T08:25:12Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "156e553b7de58584b0faab8774ed8b63f2bdc8db",
          "body": null,
          "is_bot": false,
          "headline": "fix(installer): use speaker route for pairing stub",
          "author_name": "milderdb",
          "author_login": "milderdb",
          "committed_at": "2026-07-25T08:13:24Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "951c59befaad39c45485c6aec33b03352b4845b6",
          "body": "…b-actions-4c2bda7e8b\n\nchore(deps): bump the github-actions group with 2 updates",
          "is_bot": false,
          "headline": "Merge pull request #119 from stein155/dependabot/github_actions/githu…",
          "author_name": "Stein Milder",
          "author_login": "stein155",
          "committed_at": "2026-07-24T20:23:29Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "7412566378f0a9c6e59f9e346d8625b1dcc934c8",
          "body": "…d/npm-production-59026ebf8a\n\nchore(deps): bump styled-components from 6.4.3 to 6.4.4 in /frontend in the npm-production group",
          "is_bot": false,
          "headline": "Merge pull request #120 from stein155/dependabot/npm_and_yarn/fronten…",
          "author_name": "Stein Milder",
          "author_login": "stein155",
          "committed_at": "2026-07-24T20:23:16Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "747224de7796a2b56f9a965c17dc4fa6ed52ca49",
          "body": "…d/npm-development-25b94af664\n\nchore(deps-dev): bump vite from 8.1.4 to 8.1.5 in /frontend in the npm-development group",
          "is_bot": false,
          "headline": "Merge pull request #121 from stein155/dependabot/npm_and_yarn/fronten…",
          "author_name": "Stein Milder",
          "author_login": "stein155",
          "committed_at": "2026-07-24T20:20:32Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "b912bf21f2f6eadfe8177c185315ee41f0207dde",
          "body": "fix(installer): handle factory-reset speakers",
          "is_bot": false,
          "headline": "Merge pull request #122 from milderdb/fix/factory-reset-installer",
          "author_name": "Stein Milder",
          "author_login": "stein155",
          "committed_at": "2026-07-24T20:20:18Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "471a94ea880c07641a7b10b95956b11165f2a05a",
          "body": null,
          "is_bot": false,
          "headline": "fix(installer): run cloud config repair on boot",
          "author_name": "milderdb",
          "author_login": "milderdb",
          "committed_at": "2026-07-24T20:16:29Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "d0fa3c54bcc72bfb3c1fa4120113a6c00106642f",
          "body": null,
          "is_bot": false,
          "headline": "fix(player): fall back when TuneIn source is missing",
          "author_name": "milderdb",
          "author_login": "milderdb",
          "committed_at": "2026-07-24T19:58:37Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "7f1ef6a08af5f85d2e94544787cd6a9247ff3d0f",
          "body": null,
          "is_bot": false,
          "headline": "fix(installer): handle factory-reset speakers",
          "author_name": "milderdb",
          "author_login": "milderdb",
          "committed_at": "2026-07-24T19:21:23Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "0ed5474fb63e12b0748c25694fcfe25eae6f7376",
          "body": "Bumps the npm-development group in /frontend with 1 update: [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite).\n\n\nUpdates `vite` from 8.1.4 to 8.1.5\n- [Release notes](https://github.com/vitejs/vite/releases)\n- [Changelog](https://github.com/vitejs/vite/blob/main/packages/vite/CHANGELOG.m\n[…]\n dependency-version: 8.1.5\n  dependency-type: direct:development\n  update-type: version-update:semver-patch\n  dependency-group: npm-development\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
          "is_bot": true,
          "headline": "chore(deps-dev): bump vite in /frontend in the npm-development group",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-07-20T18:56:11Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "c9c029aeafb00d2e4b6c8cfd5e1cf1a8bfa05db1",
          "body": "Bumps the npm-production group in /frontend with 1 update: [styled-components](https://github.com/styled-components/styled-components).\n\n\nUpdates `styled-components` from 6.4.3 to 6.4.4\n- [Release notes](https://github.com/styled-components/styled-components/releases)\n- [Commits](https://github.com/\n[…]\n\n  dependency-version: 6.4.4\n  dependency-type: direct:production\n  update-type: version-update:semver-patch\n  dependency-group: npm-production\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
          "is_bot": true,
          "headline": "chore(deps): bump styled-components",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-07-20T18:55:56Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "630eaacbb782bc54dd254d737a6ba799b2d32605",
          "body": "Bumps the github-actions group with 2 updates: [actions/setup-node](https://github.com/actions/setup-node) and [actions/setup-go](https://github.com/actions/setup-go).\n\n\nUpdates `actions/setup-node` from 6 to 7\n- [Release notes](https://github.com/actions/setup-node/releases)\n- [Commits](https://git\n[…]\ngo\n  dependency-version: '7'\n  dependency-type: direct:production\n  update-type: version-update:semver-major\n  dependency-group: github-actions\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
          "is_bot": true,
          "headline": "chore(deps): bump the github-actions group with 2 updates",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-07-20T18:55:48Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "19ec45c19f53be9e7ced2921f48f87ec7b547c64",
          "body": "…malize\n\nfix(wifi): normalise dBm/percentage signal strength (POC)",
          "is_bot": false,
          "headline": "Merge pull request #116 from stein155/claude/wifi-signal-strength-nor…",
          "author_name": "Stein Milder",
          "author_login": "stein155",
          "committed_at": "2026-07-14T20:03:04Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "c049cedbe6f1e935d3306bdf0d3a58c341f1b0cf",
          "body": "…b-actions-8daa59a3df\n\nchore(deps): bump the github-actions group with 3 updates",
          "is_bot": false,
          "headline": "Merge pull request #117 from stein155/dependabot/github_actions/githu…",
          "author_name": "Stein Milder",
          "author_login": "stein155",
          "committed_at": "2026-07-14T20:02:52Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "0e5968e120fdde9a0ad36facc19de42048a7a1ee",
          "body": "…d/npm-development-886071112c\n\nchore(deps-dev): bump the npm-development group in /frontend with 2 updates",
          "is_bot": false,
          "headline": "Merge pull request #118 from stein155/dependabot/npm_and_yarn/fronten…",
          "author_name": "Stein Milder",
          "author_login": "stein155",
          "committed_at": "2026-07-14T20:02:40Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "f148fb24113b3b191702578bdb53e42d3f1637c2",
          "body": "Bumps the npm-development group in /frontend with 2 updates: [typescript](https://github.com/microsoft/TypeScript) and [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite).\n\n\nUpdates `typescript` from 5.9.3 to 7.0.2\n- [Release notes](https://github.com/microsoft/TypeScript/releases)\n- [Com\n[…]\n dependency-version: 8.1.4\n  dependency-type: direct:development\n  update-type: version-update:semver-patch\n  dependency-group: npm-development\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
          "is_bot": true,
          "headline": "chore(deps-dev): bump the npm-development group",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-07-13T18:56:33Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "190a7b620bd3b268414081d73402dd73c952ddb6",
          "body": "Bumps the github-actions group with 3 updates: [actions/upload-artifact](https://github.com/actions/upload-artifact), [actions/download-artifact](https://github.com/actions/download-artifact) and [softprops/action-gh-release](https://github.com/softprops/action-gh-release).\n\n\nUpdates `actions/upload\n[…]\n\n  dependency-version: 3.0.2\n  dependency-type: direct:production\n  update-type: version-update:semver-patch\n  dependency-group: github-actions\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
          "is_bot": true,
          "headline": "chore(deps): bump the github-actions group with 3 updates",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-07-13T18:56:14Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "21d85147c674fd20f131a5f562095bb41d6338a1",
          "body": "Real SoundTouch firmware reports the site-survey signalStrength as RSSI\nin dBm (a negative number), which the old parser rejected outright\n(n < 0 -> \"\"), so every real network showed no signal label.\n\nInstead of a second set of dBm buckets, normalise the raw value to a\nsingle 0..100 quality scale fi\n[…]\nve values are mapped with the common linear approximation\n2*(dBm+100), clamped to 0..100. Adds a small clamp helper and reuses it\nin SetVolume.\n\nCo-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix(wifi): normalise dBm/percentage signal strength once (POC)",
          "author_name": "Stein Milder",
          "author_login": "stein155",
          "committed_at": "2026-07-13T05:37:57Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "5c8b8ac971408d53cb4a68a8d3cf495fd5ad69cd",
          "body": "Settings: flags, layout & copy fixes + plugin update disk hygiene",
          "is_bot": false,
          "headline": "Merge pull request #114 from stein155/claude/retouch-ui-settings-cfa21b",
          "author_name": "Stein Milder",
          "author_login": "stein155",
          "committed_at": "2026-07-13T05:13:37Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "5d55e1aa5c0680100cf775b422b217718e4c88d8",
          "body": "The mini-player was showing the now-playing artist/title on both lines.\nReTouch deliberately injects the live track onto the speaker's own OLED\n(bmx_tunein), so the firmware echoes that track back as its station name\nin now-playing — which the player then printed on line one, with the same\ntrack aga\n[…]\nthe track. When no station name can be resolved, the player\nfalls back to the track for line one and suppresses the duplicate track\nline below.\n\nCo-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix(player): show the station on line one, the track on line two",
          "author_name": "Stein Milder",
          "author_login": "stein155",
          "committed_at": "2026-07-13T04:45:22Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "2b285eefe4b9e0e327e16068a2456c7af6f63fa7",
          "body": "Settings-sheet pass addressing a batch of UI feedback:\n\n- Language picker: prefix each option with its flag emoji.\n- Move Multiroom directly under Sound in the category menu.\n- Reword the Dutch bass/treble hints away from \"naar smaak\".\n- Network page: drop the redundant \"opnieuw zoeken\" rescan butto\n[…]\ny\".\n- plugins: clear stranded bin.new / rotated log before an install so a\n  crashed prior update can't fill the speaker's small disk on retry.\n\nCo-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat(settings): flags, layout, copy fixes + plugin update disk hygiene",
          "author_name": "Stein Milder",
          "author_login": "stein155",
          "committed_at": "2026-07-13T04:37:30Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "3bf02d7e62bbcf574c2e1d25d4331d71c26217fa",
          "body": "feat(speaker): audio notifications via /speaker (replaces PCM)",
          "is_bot": false,
          "headline": "Merge pull request #113 from stein155/feat/speaker-notifications",
          "author_name": "Stein Milder",
          "author_login": "stein155",
          "committed_at": "2026-07-12T20:23:57Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "c805c62f963e4545dd97ecdbe85367094734207f",
          "body": "Extend /api/speaker/notify so callers can either pass a URL the firmware\nfetches itself (JSON — for Google TTS and already-hosted clips) or upload the\naudio bytes directly (binary body). Uploaded clips are cached in RAM and served\nback to the co-located firmware over loopback (GET /api/speaker/audio\n[…]\nt TTL, and a cap on how many are\nheld at once — the speaker is memory-constrained. On-speaker the fetch URL is\nReTouch's own loopback web port.\n\nCo-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat(speaker): host uploaded notification clips + size cap",
          "author_name": "Stein Milder",
          "author_login": "stein155",
          "committed_at": "2026-07-12T08:49:18Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "85b4c85aac5f02ae53c3c3d80205aeebe2f2d5e8",
          "body": "Resurrect the firmware's /speaker audio-notification endpoint, which has been\ndead since Bose shut down its cloud: the firmware validates the request's\napp_key against Bose's audio-notification auth host, and that host is gone.\n\nThe firmware makes that auth call over HTTPS (:443), not plain HTTP, so\n[…]\n  play a clip by POSTing a URL, with the app_key + XML handled in the core.\n\nReworked from the #112 POC (verified on SoundTouch 10, fw 27.0.6).\n\nCo-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat(speaker): audio notifications via the /speaker endpoint",
          "author_name": "Stein Milder",
          "author_login": "stein155",
          "committed_at": "2026-07-12T08:35:23Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "b9cc7dcd563184b99deb1889a9d317437735537c",
          "body": "Redesign the plugin settings UI (iOS-style sections, slider + times fields, dark mode fixes)",
          "is_bot": false,
          "headline": "Merge pull request #110 from milderdb/feat/plugin-settings-redesign",
          "author_name": "Stein Milder",
          "author_login": "stein155",
          "committed_at": "2026-07-12T06:13:29Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "897646c06d8b0eafc15c8043443cb1cdb48ebd70",
          "body": "BassSlider's arrow keys move by 1; rounding that back to the nearest step\ncancelled the keypress. Run the slider in step units instead.\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix(plugins): slider moves in whole step units",
          "author_name": "milderdb",
          "author_login": "milderdb",
          "committed_at": "2026-07-11T21:38:28Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "20c910c39ac173a1504630b2245797dc01c8fa08",
          "body": "Restyle the server-driven plugin settings panel to match the rest of the\nsettings sheet: an uppercase section eyebrow per manifest section, a status\npill instead of a bare hint line, consistent section spacing, and action\nbuttons with real primary/default/danger variants (danger is quiet red\ninstead\n[…]\nR helpers used\nhardcoded light-theme colours; they now use the theme tokens. The QR quiet\nzone intentionally stays white so codes keep scanning.\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat(plugins): redesign the plugin settings renderer",
          "author_name": "milderdb",
          "author_login": "milderdb",
          "committed_at": "2026-07-11T21:20:23Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "b16c83f1d07d9dce10c848f69a9b3e50ce28b2e2",
          "body": "Add Afvalwijzer plugin to the catalog",
          "is_bot": false,
          "headline": "Merge pull request #107 from milderdb/feature/afvalwijzer-catalog",
          "author_name": "Stein Milder",
          "author_login": "stein155",
          "committed_at": "2026-07-11T20:29:03Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "788b131ea8c5843868a391db1fe72742f251cbca",
          "body": "plugins: select field type in the manifest renderer",
          "is_bot": false,
          "headline": "Merge pull request #109 from milderdb/feat/manifest-select",
          "author_name": "Stein Milder",
          "author_login": "stein155",
          "committed_at": "2026-07-11T20:28:38Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "e7626bbc72c48aa543b42c7db406b0afaa99bbad",
          "body": "A plugin can now offer a fixed choice ({\"type\": \"select\", \"options\":\n[{value, label}]}) instead of a free-text input; rendered as a native\nright-aligned <select> in the field row. Older hosts degrade it to the\ntext input, so plugins can adopt it without a version gate.\n\nFirst user: the Afvalwijzer plugin's provider choice.",
          "is_bot": false,
          "headline": "feat(plugins): select field type in the manifest renderer",
          "author_name": "milderdb",
          "author_login": "milderdb",
          "committed_at": "2026-07-11T20:27:01Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "0b43ae54d529ff705f462ef91b18c5cd049facc7",
          "body": "display: flicker-free content next to the firmware standby clock",
          "is_bot": false,
          "headline": "Merge pull request #108 from milderdb/fix/display-clock-fight",
          "author_name": "Stein Milder",
          "author_login": "stein155",
          "committed_at": "2026-07-11T20:24:32Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "46d40aebecfc02fec56f7b404ab00df99c1471f3",
          "body": "… -speaker-host with port\n\nReview findings:\n- restoreClock only ran when a frame was actually shown. If the clock\n  was suppressed but the first Draw failed, clearing the content left\n  the firmware clock disabled. The restore is now unconditional on the\n  nothing-to-show path (a no-op when untouche\n[…]\nock API address with JoinHostPort unconditionally,\n  turning an explicit \"host:port\" -speaker-host into host:port:8090.\n  The port now only defaults to 8090 when none is given, matching\n  speaker.New.",
          "is_bot": false,
          "headline": "fix(display): restore the clock even when no frame ever landed; honor…",
          "author_name": "milderdb",
          "author_login": "milderdb",
          "committed_at": "2026-07-11T20:13:25Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "8bd8a1057009d9f406d1b621694ca80c9bc18fae",
          "body": "The per-tick rewrite repaired clock overwrites within a second but\nthat still reads as a flash on an ST20 with the clock enabled. The\nmanager now does a read-modify-write on the firmware's /clockDisplay:\nwhen it takes over the panel it flips userEnable to false (keeping\ntimezone/format/brightness in\n[…]\nno message.\n\nBest-effort by design: if the endpoint is missing or the user already\nhas the clock off, nothing is touched and the per-tick rewrite remains\nthe fallback. Covered by httptest-based tests.",
          "is_bot": false,
          "headline": "feat(display): pause the firmware standby clock while content is shown",
          "author_name": "milderdb",
          "author_login": "milderdb",
          "committed_at": "2026-07-11T19:30:13Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "2c669c4c1d3983dd7e66037c3782c4907c5d69bc",
          "body": "The firmware paints its own standby clock over the panel whenever it\nupdates. The manager only wrote on content changes and assumed its\nframe was still up, so the clock won and plugin content only flashed\nbriefly. With standby/notification content active the frame is now\nrewritten every tick: identical bytes are visually a no-op, and a\nfirmware overwrite is repaired within a second.",
          "is_bot": false,
          "headline": "fix(display): rewrite the frame every tick to beat the standby clock",
          "author_name": "milderdb",
          "author_login": "milderdb",
          "committed_at": "2026-07-11T19:07:04Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "5e97f0e0010197d45c080ddf1261324788925ec0",
          "body": "Shows the next Dutch waste pickup on the ST20 display (via the display\nAPI) and can announce it through the speaker at configured times.\nPublic repo with released armv7l binary + SHA256SUMS (checksum-only,\nno signing key yet).",
          "is_bot": false,
          "headline": "feat(plugins): add Afvalwijzer to the catalog",
          "author_name": "milderdb",
          "author_login": "milderdb",
          "committed_at": "2026-07-11T16:40:39Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "63d579948ed00c47783d07557796801895b7f816",
          "body": "Show internet radio icon on SoundTouch displays",
          "is_bot": false,
          "headline": "Merge pull request #105 from milderdb/fix/smoother-controls",
          "author_name": "Stein Milder",
          "author_login": "stein155",
          "committed_at": "2026-07-11T16:39:18Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "cb3aae8b0b5cfe34cfa7fec8817b130cf13d35d8",
          "body": "Central OLED display manager + /api/display plugin endpoints",
          "is_bot": false,
          "headline": "Merge pull request #106 from milderdb/feature/display-api",
          "author_name": "Stein Milder",
          "author_login": "stein155",
          "committed_at": "2026-07-11T16:39:07Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "d4efd79e652794143c27c443f135fa7c3143be89",
          "body": null,
          "is_bot": false,
          "headline": "test(display): ICONDUMP preview dump of all built-in icons",
          "author_name": "milderdb",
          "author_login": "milderdb",
          "committed_at": "2026-07-11T14:06:21Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "89723cf801629d52239ea9238636bf2ed694ad83",
          "body": "internal/display is now the single writer to the ST20's /dev/fb0.\nPlugins and internal features hand it content (a built-in icon or a\ncustom sprite plus a text line); the manager arbitrates: a short-lived\nnotification beats a standby screen, standby screens only show while\nthe speaker is in standby \n[…]\n         {owner, icon|sprite, text}\n  DELETE /api/display/standby?owner=  remove a standby screen\n\nOn models without the 128x100 framebuffer the manager is a no-op and\nthe API reports available:false.",
          "is_bot": false,
          "headline": "feat(display): central OLED manager + /api/display endpoints",
          "author_name": "milderdb",
          "author_login": "milderdb",
          "committed_at": "2026-07-11T14:06:21Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "84bc4ef35cb9278f7ed9d1585f67ea6d060b6309",
          "body": "…OLED\n\nA small Canvas (5x7 font with accent folding, rects, ASCII-art sprites,\nword wrap) plus a Framebuffer that snapshots the panel on first draw and\nrestores it afterwards. oled.Available() detects the ST20's 128x100\ngrayscale framebuffer so callers can skip drawing on other models.\n\nExtracted from the afvalwijzer plugin so plugins (afvalwijzer, ring) and\nReTouch itself (e.g. the Home Assistant bridge) can share one\nimplementation.",
          "is_bot": false,
          "headline": "feat(oled): shared drawing package for the SoundTouch 20 front-panel …",
          "author_name": "milderdb",
          "author_login": "milderdb",
          "committed_at": "2026-07-11T14:05:46Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "e7a5fdb7090741ab02d439541f02c5865ec48ec2",
          "body": "The speaker-side preset art is now the local display icon (a file://\npath browsers cannot load). GET /api/presets blanked it, which lost\nthe station logo on every preset tile. Serve the station's real logo\nfrom the local preset store instead (matched by slot + station id).\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix(presets): keep station logos in the web UI",
          "author_name": "milderdb",
          "author_login": "milderdb",
          "committed_at": "2026-07-11T13:49:58Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "efb0014a871a86d15b1acbe067977deffec1bc59",
          "body": null,
          "is_bot": false,
          "headline": "fix(playback): use local internet radio icon",
          "author_name": "milderdb",
          "author_login": "milderdb",
          "committed_at": "2026-07-11T09:04:27Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "5bd4a1f000c6f209a13c4454a7df796da9bb76b1",
          "body": "feat(plugins): hide version, flag updates with a \"!\" badge",
          "is_bot": false,
          "headline": "Merge pull request #104 from milderdb/feat/plugin-update-badge",
          "author_name": "Stein Milder",
          "author_login": "stein155",
          "committed_at": "2026-07-11T08:15:29Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "45b595054eb12954ba55dcf48e1bfbfc93aa62cc",
          "body": "The plugin settings page showed a version-number card by default, which is\nnoise for a non-technical user. Hide it. What actually matters — that an\nupdate is waiting — now surfaces two ways:\n\n- a small \"!\" badge on the installed-plugin list row, so a pending update is\n  glanceable without opening th\n[…]\nesolves the newest release per (non-sideloaded) plugin to decide\nwhether to show the badge. New i18n key `updateAvailable` in all six languages.\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat(plugins): hide version, flag available updates with a \"!\" badge",
          "author_name": "milderdb",
          "author_login": "milderdb",
          "committed_at": "2026-07-11T08:07:48Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "a04334465609466910ce1c3cdc5ef97f22c1086a",
          "body": "feat: browse TuneIn by genre/region",
          "is_bot": false,
          "headline": "Merge pull request #101 from milderdb/feat/tunein-browse",
          "author_name": "Stein Milder",
          "author_login": "stein155",
          "committed_at": "2026-07-11T08:00:39Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "f828f07208ac1ba306a3cb830f359947c8ee5ed6",
          "body": "fix: security & robustness bugs from an adversarial audit",
          "is_bot": false,
          "headline": "Merge pull request #103 from milderdb/fix/audit-round2",
          "author_name": "Stein Milder",
          "author_login": "stein155",
          "committed_at": "2026-07-11T08:00:08Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "3e4938702d29608dcf9ba7d92641c875739383d7",
          "body": "Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "style: gofmt update_test.go",
          "author_name": "milderdb",
          "author_login": "milderdb",
          "committed_at": "2026-07-11T07:42:17Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "eb4cf3ed39b38cd0b60c871927082dcd236278bb",
          "body": "Two bugs in the browse directory:\n\n- Category labels (\"By Location\", \"By Language\", …) were always English\n  because the Browse.ashx request sent no locale. Pass the UI language's\n  TuneIn locale on every browse request; TuneIn propagates it into the child\n  URLs it returns, so labels stay translate\n[…]\nsts: api.browse.test.ts covers locale forcing, station parsing under a\ngroup outline, and the By-Language id rewrite. tsc clean; 37 vitest pass.\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix(browse): localize TuneIn labels and make By Language reach stations",
          "author_name": "milderdb",
          "author_login": "milderdb",
          "committed_at": "2026-07-11T07:35:17Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "7924b049299cc716b4a5f23cb0c279fbc8380513",
          "body": "Follow-up scan after PR #102. Four independent reviewers went over the\nrelease/update/plugin, web/marge, and network-client/persistence layers.\n\n- update: the binary download used a default http.Client, bypassing the\n  SSRF-safe transport the API lookups use — a 302/DNS-rebind on the artifact\n  host\n[…]\ncjson round-trip,\nsettings .corrupt preservation, plugin routes added to the auth-401 table.\ngo vet + go test clean; ARMv7 + amd64 builds clean.\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix: security & robustness bugs from an adversarial audit",
          "author_name": "milderdb",
          "author_login": "milderdb",
          "committed_at": "2026-07-11T07:21:19Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "ab26d006a5ee204d915fe3dc0d37615be64af61b",
          "body": "The search sheet's empty state is now a browsable directory instead of a\nblank prompt: it loads TuneIn's Browse.ashx tree (Music, By Location, By\nLanguage, …), drills into categories with a back button, and plays a\nstation on tap.\n\n- lib/api.ts: browseTuneIn(path) walks one Browse level into categor\n[…]\nt search showed \"No stations found\" during the debounce (now shows\n  \"Searching…\").\n\ntypecheck clean; 34 vitest tests pass; build ok on Node 24.\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat(browse): browse TuneIn by genre/region",
          "author_name": "milderdb",
          "author_login": "milderdb",
          "committed_at": "2026-07-11T06:45:20Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "e96a6ced1e76972a62d53090c8d08922727a063a",
          "body": "fix: four bugs found by an adversarial audit",
          "is_bot": false,
          "headline": "Merge pull request #102 from milderdb/fix/audit-bugs",
          "author_name": "Stein Milder",
          "author_login": "stein155",
          "committed_at": "2026-07-11T06:43:05Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "a523cae2f7964f044a143560136a312f1db30266",
          "body": "- speaker.Wake: `sys power` is a TOGGLE, but Wake sent it unconditionally,\n  so playing/preset actions on an already-awake speaker switched it OFF and\n  then stalled ~6s waiting to leave the standby they'd just caused. Only\n  toggle when actually in standby (mirrors habridge.setPower). [MED]\n- telne\n[…]\neset in finally. [MED]\n\nTests: Wake-skips-when-awake (sim-backed), telnet-failure-doesn't-persist.\ngo vet + go test + tsc clean; all tests pass.\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix: four bugs found by an adversarial audit",
          "author_name": "milderdb",
          "author_login": "milderdb",
          "committed_at": "2026-07-10T23:37:28Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "0bae7b64f59c78bee69603245d9d526abe542959",
          "body": "test(frontend): cover API client, MiniPlayer, StationLogo, optimistic playback",
          "is_bot": false,
          "headline": "Merge pull request #100 from milderdb/test/frontend-more-tests",
          "author_name": "Stein Milder",
          "author_login": "stein155",
          "committed_at": "2026-07-10T23:33:35Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "ae2b9f3c1836c1d1eb3c106ad2e2c69a53578537",
          "body": "…stic playback\n\n+19 tests (34 -> 53):\n- lib/api.test.ts: normalizeNowPlaying (standby/invalid/full/trim), getVolume,\n  getPresets (6-slot mapping, location->tuneInId, out-of-range drop, failure),\n  searchTuneIn (nested OPML walk, s-prefix filter, 30-cap, failure).\n- MiniPlayer.test.tsx: station + li\n[…]\n.test.ts: playOptimistic -> starting, stopOptimistic -> idle,\n  cancelPending -> idle.\n\ntsc --noEmit clean; all 53 vitest tests pass on Node 24.\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "test(frontend): cover the API client, MiniPlayer, StationLogo, optimi…",
          "author_name": "milderdb",
          "author_login": "milderdb",
          "committed_at": "2026-07-10T23:12:23Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "948834d132deaf06317b279432aae042160e51f7",
          "body": "refactor(frontend): migrate the web UI to TypeScript (strict)",
          "is_bot": false,
          "headline": "Merge pull request #99 from milderdb/refactor/frontend-typescript",
          "author_name": "Stein Milder",
          "author_login": "stein155",
          "committed_at": "2026-07-10T23:07:34Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "a2807d8614bbb3883ca7a02360eea2fe2cd1bb02",
          "body": "Convert the whole web UI from JS/JSX to TS/TSX under `strict`:\n\n- Rename every src file .jsx->.tsx / .js->.ts; index.html -> main.tsx.\n- Add tsconfig.json (strict), typescript + @types/react(-dom) devDeps,\n  a `typecheck` script, and vite-env.d.ts.\n- Add src/lib/types.ts: shared domain types (NowPla\n[…]\nblind build can't mask regressions.\n\nNo runtime/behaviour change: build (86 modules) is byte-equivalent and\nall 34 vitest tests pass on Node 24.\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "refactor(frontend): migrate to TypeScript (strict)",
          "author_name": "milderdb",
          "author_login": "milderdb",
          "committed_at": "2026-07-10T23:00:29Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "4863cf64d97c5c2eae99c003acbd795ffc8059d5",
          "body": null,
          "is_bot": false,
          "headline": "wip(frontend): type lib, hooks, theme, qr, api (domain types)",
          "author_name": "milderdb",
          "author_login": "milderdb",
          "committed_at": "2026-07-10T22:45:40Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "f3a8e15a36928a2421130cd94487bf09a47871b4",
          "body": null,
          "is_bot": false,
          "headline": "wip(frontend): partial TS types (atoms/molecules/small organisms)",
          "author_name": "milderdb",
          "author_login": "milderdb",
          "committed_at": "2026-07-10T22:36:45Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "31cf1acc6f52f998cfe006f7f2b055d22b3dca0c",
          "body": "Add tsconfig.json (strict), typescript + @types/react(-dom) devDeps, a\ntypecheck script, and vite-env.d.ts; rename every src file .jsx->.tsx /\n.js->.ts and point index.html at main.tsx. Vite/vitest handle TS\nnatively so the build stays green; type annotations follow (tsc is not\nyet clean).\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "refactor(frontend): TypeScript scaffolding + rename to .ts/.tsx",
          "author_name": "milderdb",
          "author_login": "milderdb",
          "committed_at": "2026-07-10T16:48:05Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "3c46820fecc6ccb2d89f3d4d630577802cc9a906",
          "body": "feat(settings): iOS-style Wi-Fi network settings",
          "is_bot": false,
          "headline": "Merge pull request #62 from stein155/claude/wifi-network-settings",
          "author_name": "Stein Milder",
          "author_login": "stein155",
          "committed_at": "2026-07-10T16:44:50Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "efdb50b7ee068b41756d4bf64e089717ead3bae9",
          "body": "fix(icy): decode Latin-1/Windows-1252 now-playing metadata",
          "is_bot": false,
          "headline": "Merge pull request #98 from stein155/fix/icy-latin1-decoding",
          "author_name": "Stein Milder",
          "author_login": "stein155",
          "committed_at": "2026-07-10T16:44:31Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "9e529e7b5ddb044117358060a7cbdad625b225a3",
          "body": "…ettings\n\n# Conflicts:\n#\tfrontend/src/components/organisms/SettingsSheet/index.jsx\n#\tinternal/web/web.go",
          "is_bot": false,
          "headline": "Merge remote-tracking branch 'origin/main' into claude/wifi-network-s…",
          "author_name": "Stein Milder",
          "author_login": "stein155",
          "committed_at": "2026-07-10T16:32:54Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "138ca2cd136386f0f5f346203ebf23c79723c204",
          "body": "ICY metadata is often sent Latin-1 or Windows-1252 encoded, but the\nblock was decoded as UTF-8, so bytes like 0xE9 (\"é\") rendered as the\nreplacement character (e.g. \"André\" → \"Andr�\"). Keep valid UTF-8 as-is\nand decode anything else byte-for-byte through Windows-1252.\n\nCo-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix(icy): decode Latin-1/Windows-1252 StreamTitle metadata",
          "author_name": "Stein Milder",
          "author_login": "stein155",
          "committed_at": "2026-07-10T16:24:33Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "8432d6c2a95eaec7f8b1caba27e3c9a21322abd1",
          "body": "test(sim): cover the simulator's wire format + state machine",
          "is_bot": false,
          "headline": "Merge pull request #97 from milderdb/test/sim-coverage",
          "author_name": "Stein Milder",
          "author_login": "stein155",
          "committed_at": "2026-07-10T16:12:15Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "4d02a26df9026985797575f061ab78fe9862929d",
          "body": "refactor(frontend): component-per-folder layout with styled/index.js",
          "is_bot": false,
          "headline": "Merge pull request #96 from milderdb/refactor/styled-folders",
          "author_name": "Stein Milder",
          "author_login": "stein155",
          "committed_at": "2026-07-10T16:12:06Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "a8a2581e41346a617d4c1676261cfc3c38be0398",
          "body": "The SoundTouch simulator backs every web/marge/speaker integration test\nbut had no tests of its own. Add direct HTTP/CLI coverage: /info wire\nformat, standby default, select -> now_playing, key transitions\n(PAUSE/PLAY/STOP/PLAY_PAUSE), press-only (release ignored), POWER +\nCLI 'sys power' standby to\n[…]\ng endpoints.\n\nAlso dedup the POWER toggle: /key POWER and CLI 'sys power' now share\npowerToggleLocked() instead of duplicating the standby swap.\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "test(sim): cover the simulator's wire format and state machine",
          "author_name": "milderdb",
          "author_login": "milderdb",
          "committed_at": "2026-07-10T16:05:52Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "203b670c837f3e06699fc1e9bc1f13d7e4810a44",
          "body": "Every component that defines styled-components keeps them in\n<Name>/styled/index.js and imports them into index.jsx; pure-styled\nmodules (Button, Section, Slider, Field, AppShell, ...) re-export from\n./styled. Components with none (Icon, QRCode, StationLogo, Volume/\nBassSlider) stay plain. 22 styled\n[…]\n\n\nRebuilt on current main so it includes the plugin-OTA additions. Byte-\nidentical styling; build (86 modules) and all 34 tests pass on Node 24.\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "refactor(frontend): extract all styled-components into styled/index.js",
          "author_name": "milderdb",
          "author_login": "milderdb",
          "committed_at": "2026-07-10T16:04:07Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "70af8ef656a286887edeb038c435185a31f4db30",
          "body": "Move every component to <Name>/index.jsx (rebuilt on current main, which\nincludes the plugin OTA additions). Imports into components unchanged;\nwithin-file imports re-depthed. styled extraction follows.\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "refactor(frontend): component-per-folder layout (index.jsx)",
          "author_name": "milderdb",
          "author_login": "milderdb",
          "committed_at": "2026-07-10T15:57:29Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "8e0d05931ce34cdc50b39e73fa8306450316ff64",
          "body": "chore: build the frontend on Node 24 (current LTS)",
          "is_bot": false,
          "headline": "Merge pull request #95 from milderdb/chore/node-24",
          "author_name": "Stein Milder",
          "author_login": "stein155",
          "committed_at": "2026-07-10T15:51:27Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "9d513cecc5ac2d630d9100616842f406bbab61bc",
          "body": "fix(frontend): resolve 8 UI state/lifecycle bugs",
          "is_bot": false,
          "headline": "Merge pull request #94 from milderdb/fix/frontend-bugs",
          "author_name": "Stein Milder",
          "author_login": "stein155",
          "committed_at": "2026-07-10T13:32:54Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "4ce6b0cc48277b877b8d822aae071d6a78cb4e9e",
          "body": "Node 20 reached end-of-life in April 2026; Node 24 (Krypton) is the\ncurrent active LTS. Bump the CI, beta and release workflows and the\nAGENTS.md build commands from node 20 -> 24, and pin a floor via a\npackage.json engines field (>=22, the oldest still-supported LTS).\n\nVerified: npm ci + vitest + vite build all pass on node:24-alpine.\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "chore: build the frontend on Node 24 (current LTS)",
          "author_name": "milderdb",
          "author_login": "milderdb",
          "committed_at": "2026-07-10T13:30:02Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "2653735c7ce236efa360cc1514532bda08bb5d25",
          "body": "- PresetTile: a loose station-name match lit up several tiles at once\n  ('Radio 1' + 'NPO Radio 1'). Move matching into station.activePresetIndex\n  (prefer id, then exact name, then a UNIQUE loose match) and resolve the\n  single active slot in PresetGrid; the tile just takes an `active` prop.\n- Stat\n[…]\ning.\n\nMatching logic moves out of the tile into lib/station (tested), keeping\nUI presentational. No security/XSS issues were found in the sweep.\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix(frontend): resolve 8 UI state/lifecycle bugs from a bug hunt",
          "author_name": "milderdb",
          "author_login": "milderdb",
          "committed_at": "2026-07-10T13:26:48Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "f3dc50aa96bff907a246fdc577ac42fdf0c150d2",
          "body": "feat(display): show the live track on the speaker's own display via marge",
          "is_bot": false,
          "headline": "Merge pull request #93 from milderdb/feat/nowplaying-on-display",
          "author_name": "Stein Milder",
          "author_login": "stein155",
          "committed_at": "2026-07-10T13:19:30Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "93be8abe0a0442113e396bfe87671a72c0b3d858",
          "body": "refactor(web): extract telnet LAN-block into internal/telnet",
          "is_bot": false,
          "headline": "Merge pull request #92 from milderdb/refactor/extract-telnet",
          "author_name": "Stein Milder",
          "author_login": "stein155",
          "committed_at": "2026-07-10T13:19:18Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "86c48b0c366224e1c3936959a68b7bd5195f8430",
          "body": "…entitem\n\nrefactor(speaker): own native-preset play and ContentItem XML",
          "is_bot": false,
          "headline": "Merge pull request #91 from milderdb/refactor/speaker-preset-and-cont…",
          "author_name": "Stein Milder",
          "author_login": "stein155",
          "committed_at": "2026-07-10T13:19:03Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "ece1c533254a18710147d5fdd42947755419c10e",
          "body": "refactor: extract now-playing enrichment from web into internal/nowplaying",
          "is_bot": false,
          "headline": "Merge pull request #90 from milderdb/refactor/extract-nowplaying",
          "author_name": "Stein Milder",
          "author_login": "stein155",
          "committed_at": "2026-07-10T13:18:49Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "3752a8b958255bb7736850f71cbe1da0c331a9ec",
          "body": "refactor: extract self-update engine from web into internal/update",
          "is_bot": false,
          "headline": "Merge pull request #89 from milderdb/refactor/extract-self-update",
          "author_name": "Stein Milder",
          "author_login": "stein155",
          "committed_at": "2026-07-10T13:18:31Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "3c737b066a0cd084dc3b4a67132e78880daaa8f1",
          "body": "feat(ui): tidy plugins UI — collapsible settings, no run-status text",
          "is_bot": false,
          "headline": "Merge pull request #88 from stein155/claude/gracious-mirzakhani-cc374f",
          "author_name": "Stein Milder",
          "author_login": "stein155",
          "committed_at": "2026-07-10T13:18:17Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "7ae955893eb2970e541f2edadcb1bed8722150aa",
          "body": "Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "style: gofmt web.go struct comment alignment",
          "author_name": "milderdb",
          "author_login": "milderdb",
          "committed_at": "2026-07-10T12:35:51Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "b8fbc4e72cff64ae5db1e9fb4ab3ca89841368ef",
          "body": "…arge\n\nThe speaker's front-panel display shows whatever Name the TuneIn\nplayback doc carries. The Bose cloud used to push the rolling track\nthere; with the cloud gone, marge only ever returned the station name,\nso the display lost the now-playing line (the station logo/icon still\nworks).\n\nFeed the l\n[…]\n re-polls is visible in marge's logs\n(\"bmx tunein now-playing on display\") and /debug/requests, so the effect\ncan be confirmed on real hardware.\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat(display): show the live track on the speaker's own display via m…",
          "author_name": "milderdb",
          "author_login": "milderdb",
          "committed_at": "2026-07-10T12:14:09Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "13e08aa50abc2dc2ab1299c5de4d331155d1df81",
          "body": "The iptables raw-table DROP that hides the :17000 diagnostic CLI from\nthe LAN — plus its .close-telnet reboot-persistence marker, the\nstartup re-apply, and the exec seam that existed only to keep iptables\nout of web's tests — lived inside the HTTP handler package. That is host\n/OS logic (root exec, \n[…]\n pass as-is and internal/telnet gets its\nown unit tests. web loses its os/exec dependency.\n\nStacked on the now-playing extraction (same web.go).\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "refactor(web): extract telnet LAN-block into internal/telnet",
          "author_name": "milderdb",
          "author_login": "milderdb",
          "committed_at": "2026-07-10T12:05:41Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "9ccbba773f64b00d705dcfce2d4b21bbfd60a2d6",
          "body": "Two bits of speaker-protocol knowledge had leaked out of the speaker\npackage into its callers:\n\n- Playing a native preset (wake, then press PRESET_<n>) was hand-\n  assembled identically in web.playPreset and habridge.selectPreset,\n  each rebuilding the wake-then-key sequence and the \"PRESET_\"+n key\n\n[…]\ns byte-identical (covered by the new contentItemXML test\nand the existing preset/select round-trips against the simulator); no\nbehaviour change.\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "refactor(speaker): own native-preset play and ContentItem XML",
          "author_name": "milderdb",
          "author_login": "milderdb",
          "committed_at": "2026-07-10T11:43:46Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "a5d8206a8c9c8395e94e8cde78ebee27a84a444d",
          "body": "…aying\n\nThe live track/artist/cover enrichment (ICY stream metadata, TuneIn\nfallback, iTunes artwork lookup, plus the now-playing and stream-URL\ncaches) lived inside the web server, and the Home Assistant bridge\nconsumed it by reaching through web.Server.EnrichedNowPlaying.\n\nMove it to internal/nowp\n[…]\nion dropped, stopped/non-TuneIn ids untouched),\n  which had no direct coverage before.\n\nCode moved verbatim where possible; no behaviour change.\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "refactor: extract now-playing enrichment from web into internal/nowpl…",
          "author_name": "milderdb",
          "author_login": "milderdb",
          "committed_at": "2026-07-10T11:17:50Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "52876702ea41ed43abb8fd11aeee908d618e8085",
          "body": "The web package owned the whole OTA machinery next to its HTTP handlers:\nGitHub release discovery, download + checksum/signature verification,\nthe binary swap with rollback, and the process restart (os.Exit). That\nmade web the package habridge had to depend on for its Home Assistant\nupdate entity, a\n[…]\nove with the code; web's signature/download tests duplicated\n  internal/release coverage and are folded into that package.\n\nNo behaviour change.\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "refactor: extract self-update engine from web into internal/update",
          "author_name": "milderdb",
          "author_login": "milderdb",
          "committed_at": "2026-07-10T10:43:38Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "9a46c469c48717274696585b1de98459ad8b90a1",
          "body": ".gitignore documents that internal/web/dist/.gitkeep is committed so\n//go:embed all:dist compiles before the frontend is built, but the file\nwas missing — go vet/test failed on a clean clone.\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix: commit dist/.gitkeep so a fresh checkout builds",
          "author_name": "milderdb",
          "author_login": "milderdb",
          "committed_at": "2026-07-10T10:43:37Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "87583cd946a5352e93b43bac3616ccd796b18329",
          "body": "Installed plugins had no update path in the UI: the catalog card only shows\nfor plugins that aren't installed yet, so the only way to get a newer build\nwas remove + reinstall — which wipes the plugin's state dir (the HomeKit\npairing). A plain re-install upgrades the binary in place and keeps that\nst\n[…]\ntalls latest (pairing preserved) and re-mounts the config panel;\n  otherwise it shows \"up to date\". Sideloaded plugins keep the can't-OTA hint.\n\nCo-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat(plugins): over-the-air update button for installed plugins",
          "author_name": "Stein Milder",
          "author_login": "stein155",
          "committed_at": "2026-07-10T06:01:02Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "17e894561b417d564a0e60fb95b02012766a3fdd",
          "body": "Replace the inline accordion with a real subpage: each installed plugin is\nnow a single row (name + \"Geïnstalleerd\" + \"Instellingen ›\") that opens the\nplugin's config — QR / pairing code and the remove button — as its own\nsettings subpage, with the sheet's back arrow walking detail → list → menu.\n\nA\n[…]\nved by the plugin binary\nitself; the app already forwards ?lang= so the plugin can localise it, but\nthat must land in the retouch-homekit repo.\n\nCo-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat(ui): open plugin settings as a subpage; localise Apple Home catalog",
          "author_name": "Stein Milder",
          "author_login": "stein155",
          "committed_at": "2026-07-10T05:43:43Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "420c82dc16e5ff87259d774dfd00c9bb63047b62",
          "body": "docs: regenerate README screenshots in English",
          "is_bot": false,
          "headline": "Merge pull request #87 from stein155/claude/goofy-kirch-b6b901",
          "author_name": "Stein Milder",
          "author_login": "stein155",
          "committed_at": "2026-07-10T05:32:59Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "289f8314786065064b67629e14dea9abb51ef3e8",
          "body": "Rework the Plugins settings section:\n\n- Drop the \"Draait niet\"/\"Draait\" run-status label; each installed plugin\n  now reads \"Geïnstalleerd\" under its name.\n- Make each installed plugin a tappable, collapsed-by-default row (name +\n  chevron) that expands to reveal the plugin's own settings panel — wh\n[…]\n as ?lang= to the plugin /manifest and /action\n  endpoints so a plugin can localise its own manifest text (the plugin\n  itself must honour it).\n\nCo-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat(ui): tidy plugins UI — collapsible settings, no run-status text",
          "author_name": "Stein Milder",
          "author_login": "stein155",
          "committed_at": "2026-07-10T05:31:00Z",
          "body_truncated": true,
          "is_coding_agent": true
        }
      ],
      "releases_count": 40,
      "commits_last_year": 336,
      "latest_release_at": "2026-07-25T11:01:20Z",
      "latest_release_tag": "v0.2.38",
      "releases_from_tags": false,
      "days_since_last_push": 1,
      "active_weeks_last_year": 7,
      "days_since_latest_release": 10,
      "mean_days_between_releases": 2.6
    },
    "artifacts": {
      "collected": true,
      "structure": [
        "tree.go_importable",
        "tree.go_main"
      ],
      "declarations": [
        {
          "name": null,
          "path": "frontend/package.json",
          "tokens": [
            "npm.private"
          ],
          "ecosystem": "npm"
        }
      ]
    },
    "community": {
      "has_readme": true,
      "has_license": true,
      "readme_badges": {
        "hosts": [
          "shields.io"
        ],
        "total": 5,
        "header": 5,
        "collected": true,
        "has_inspect_badge": false
      },
      "has_description": true,
      "has_contributing": false,
      "health_percentage": 42,
      "has_issue_template": false,
      "has_code_of_conduct": false,
      "has_pull_request_template": false
    },
    "ecosystem": {
      "packages": [
        {
          "name": "github.com/stein155/retouch",
          "exists": true,
          "license": null,
          "keywords": [],
          "ecosystem": "go",
          "categories": [],
          "matches_repo": true,
          "registry_url": "https://pkg.go.dev/github.com/stein155/retouch",
          "declared_type": null,
          "is_deprecated": false,
          "latest_version": "v0.2.38",
          "repository_url": "https://github.com/stein155/retouch",
          "versions_count": 40,
          "total_downloads": null,
          "dependents_count": null,
          "deprecation_note": null,
          "maintainers_count": null,
          "monthly_downloads": null,
          "first_published_at": null,
          "latest_published_at": "2026-07-25T10:48:53Z",
          "latest_version_yanked": null,
          "days_since_latest_publish": 10
        }
      ]
    },
    "popularity": {
      "forks": 2,
      "stars": 2,
      "watchers": 0,
      "fork_history": {
        "days": [
          {
            "date": "2026-06-20",
            "count": 1
          },
          {
            "date": "2026-07-10",
            "count": 1
          }
        ],
        "complete": true,
        "collected": 2,
        "total_forks": 2
      },
      "star_history": null,
      "open_issues_and_prs": 3
    },
    "ai_readiness": {
      "has_nix": false,
      "example_dirs": [],
      "has_llms_txt": false,
      "has_dockerfile": false,
      "has_mcp_signal": false,
      "bootstrap_files": [],
      "api_schema_files": [],
      "has_devcontainer": false,
      "typecheck_configs": [
        "frontend/tsconfig.json"
      ],
      "toolchain_manifests": [
        "go.mod"
      ],
      "largest_source_bytes": 44973,
      "source_files_sampled": 155,
      "oversized_source_files": 0,
      "agent_instruction_files": [
        "AGENTS.md"
      ],
      "agent_instruction_max_bytes": 6731
    },
    "dependencies": {
      "manifests": [
        "frontend/package.json",
        "go.mod"
      ],
      "advisories": {
        "error": null,
        "scope": null,
        "source": null,
        "findings": [],
        "collected": false,
        "malicious": [],
        "truncated": false,
        "by_severity": {},
        "advisory_count": 0,
        "affected_count": 0,
        "assessed_count": 0,
        "malicious_count": 0,
        "assessed_package": null,
        "unassessed_count": 0,
        "direct_affected_count": 0
      },
      "ecosystems": [
        "go",
        "npm"
      ],
      "dependencies": [
        {
          "name": "react",
          "manifest": "frontend/package.json",
          "ecosystem": "npm",
          "version_constraint": "^19.2.0"
        },
        {
          "name": "react-dom",
          "manifest": "frontend/package.json",
          "ecosystem": "npm",
          "version_constraint": "^19.2.0"
        },
        {
          "name": "styled-components",
          "manifest": "frontend/package.json",
          "ecosystem": "npm",
          "version_constraint": "^6.4.4"
        }
      ],
      "all_dependencies": {
        "error": "GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository",
        "source": null,
        "packages": [],
        "collected": false,
        "truncated": false,
        "total_count": null,
        "direct_count": null,
        "indirect_count": null
      }
    },
    "maintainership": {
      "issues": {
        "open_prs": 3,
        "merged_prs": 118,
        "open_issues": 0,
        "closed_ratio": null,
        "closed_issues": 0,
        "closed_unmerged_prs": 9
      },
      "bus_factor": 1,
      "bot_contributors": 1,
      "top_contributors": [
        {
          "type": "User",
          "login": "stein155",
          "commits": 224,
          "avatar_url": "https://avatars.githubusercontent.com/u/25324301?v=4"
        },
        {
          "type": "User",
          "login": "milderdb",
          "commits": 99,
          "avatar_url": "https://avatars.githubusercontent.com/u/293030091?v=4"
        },
        {
          "type": "User",
          "login": "MauritsvanderZee",
          "commits": 3,
          "avatar_url": "https://avatars.githubusercontent.com/u/32610905?v=4"
        }
      ],
      "contributors_sampled": 3,
      "top_contributor_share": 0.687
    },
    "quality_signals": {
      "has_ci": true,
      "has_tests": true,
      "ci_workflows": [
        "beta.yml",
        "ci.yml",
        "release-drafter.yml",
        "release.yml"
      ],
      "has_docs_dir": true,
      "linter_configs": [],
      "has_editorconfig": false,
      "has_linter_config": false,
      "has_precommit_config": false
    },
    "security_signals": {
      "lockfiles": [
        "package-lock.json"
      ],
      "scorecard": {
        "checks": [
          {
            "name": "Binary-Artifacts",
            "score": 10,
            "reason": "no binaries found in the repo",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#binary-artifacts"
          },
          {
            "name": "Branch-Protection",
            "score": 0,
            "reason": "branch protection not enabled on development/release branches",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#branch-protection"
          },
          {
            "name": "CI-Tests",
            "score": 10,
            "reason": "12 out of 12 merged PRs checked by a CI test -- score normalized to 10",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#ci-tests"
          },
          {
            "name": "CII-Best-Practices",
            "score": 0,
            "reason": "no effort to earn an OpenSSF best practices badge detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#cii-best-practices"
          },
          {
            "name": "Code-Review",
            "score": 7,
            "reason": "Found 5/7 approved changesets -- score normalized to 7",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#code-review"
          },
          {
            "name": "Contributors",
            "score": 0,
            "reason": "project has 0 contributing companies or organizations -- score normalized to 0",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#contributors"
          },
          {
            "name": "Dangerous-Workflow",
            "score": 10,
            "reason": "no dangerous workflow patterns detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dangerous-workflow"
          },
          {
            "name": "Dependency-Update-Tool",
            "score": 10,
            "reason": "update tool detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dependency-update-tool"
          },
          {
            "name": "Fuzzing",
            "score": 0,
            "reason": "project is not fuzzed",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#fuzzing"
          },
          {
            "name": "License",
            "score": 10,
            "reason": "license file detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#license"
          },
          {
            "name": "Maintained",
            "score": 0,
            "reason": "project was created within the last 90 days. Please review its contents carefully",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#maintained"
          },
          {
            "name": "Packaging",
            "score": null,
            "reason": "packaging workflow not detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#packaging"
          },
          {
            "name": "Pinned-Dependencies",
            "score": 6,
            "reason": "dependency not pinned by hash detected -- score normalized to 6",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#pinned-dependencies"
          },
          {
            "name": "SAST",
            "score": 0,
            "reason": "SAST tool is not run on all commits -- score normalized to 0",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#sast"
          },
          {
            "name": "Security-Policy",
            "score": 0,
            "reason": "security policy file not detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#security-policy"
          },
          {
            "name": "Signed-Releases",
            "score": 6,
            "reason": "4 out of the last 5 releases have a total of 4 signed artifacts.",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#signed-releases"
          },
          {
            "name": "Token-Permissions",
            "score": 0,
            "reason": "detected GitHub workflow tokens with excessive permissions",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#token-permissions"
          },
          {
            "name": "Vulnerabilities",
            "score": 4,
            "reason": "6 existing vulnerabilities detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#vulnerabilities"
          }
        ],
        "commit": "3ea8b0a14f9c9a00a24b931bd16e5568606b3765",
        "ran_at": "2026-08-05T09:25:48Z",
        "aggregate_score": 4.6,
        "scorecard_version": "v5.5.0"
      },
      "has_codeql_workflow": false,
      "has_security_policy": false,
      "has_dependabot_config": true
    },
    "contribution_flow": {
      "collected": true,
      "recent_prs": {
        "merged_7d": 0,
        "decided_7d": 0,
        "merged_30d": 42,
        "authors_30d": 2,
        "decided_30d": 45,
        "sample_size": 60,
        "window_days": 30,
        "sample_exhausted": false,
        "authors_probed_30d": 2,
        "newcomer_merged_30d": 0,
        "bot_prs_excluded_30d": 7,
        "newcomer_authors_30d": 0,
        "newcomer_decided_30d": 0
      },
      "ci_last_run_at": "2026-08-03T18:56:11Z",
      "oldest_open_prs": [
        {
          "number": 111,
          "created_at": "2026-07-11T21:36:59Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 128,
          "created_at": "2026-07-27T18:55:19Z",
          "last_comment_at": "2026-07-27T18:55:19Z",
          "last_comment_author": "dependabot"
        },
        {
          "number": 130,
          "created_at": "2026-08-03T18:56:05Z",
          "last_comment_at": "2026-08-03T18:56:06Z",
          "last_comment_author": "dependabot"
        }
      ],
      "last_merged_pr_at": "2026-07-26T15:18:56Z",
      "ci_last_conclusion": "SKIPPED",
      "oldest_open_issues": []
    }
  },
  "config": {
    "disabled_metrics": [],
    "disabled_categories": [],
    "disabled_components": {}
  },
  "source": {
    "url": "https://github.com/stein155/retouch",
    "host": "github.com",
    "name": "retouch",
    "owner": "stein155"
  },
  "metrics": {
    "overall": {
      "key": "overall",
      "band": "moderate",
      "name": "Overall health",
      "note": "The weighted overall 57 is calibrated to 60 on the published index scale (record calibration 2026-08-02).",
      "notes": [
        {
          "code": "overall_calibration",
          "params": {
            "raw": 57,
            "calibrated": 60,
            "calibration": "2026-08-02"
          }
        }
      ],
      "value": 60,
      "inputs": {
        "security": 46,
        "vitality": 74,
        "community": 24,
        "governance": 57,
        "calibration": "2026-08-02",
        "engineering": 71,
        "ai_readiness": 85,
        "weighted_overall_raw": 57
      },
      "components": []
    },
    "categories": [
      {
        "key": "vitality",
        "band": "good",
        "name": "Vitality",
        "value": 74,
        "weight": 0.21,
        "metrics": [
          {
            "key": "development_activity",
            "band": "moderate",
            "name": "Development activity",
            "note": null,
            "notes": [],
            "value": 59,
            "inputs": {
              "commits_last_year": 336,
              "human_commit_share": 0.95,
              "days_since_last_push": 1,
              "active_weeks_last_year": 7
            },
            "components": [
              {
                "key": "push_recency",
                "name": "Push recency",
                "detail": "last push 1 days ago",
                "points": 36,
                "status": "met",
                "details": [
                  {
                    "code": "push_recency",
                    "params": {
                      "days": 1
                    }
                  }
                ],
                "max_points": 36
              },
              {
                "key": "commit_cadence",
                "name": "Commit cadence",
                "detail": "7/52 weeks with commits",
                "points": 4.8,
                "status": "partial",
                "details": [
                  {
                    "code": "commit_cadence_weeks",
                    "params": {
                      "weeks": 7
                    }
                  }
                ],
                "max_points": 36
              },
              {
                "key": "commit_volume",
                "name": "Commit volume",
                "detail": "336 commits in the last year",
                "points": 18,
                "status": "met",
                "details": [
                  {
                    "code": "commits_last_year",
                    "params": {
                      "count": 336
                    }
                  }
                ],
                "max_points": 18
              },
              {
                "key": "openssf_scorecard_maintained",
                "name": "OpenSSF Scorecard: Maintained",
                "detail": "project was created within the last 90 days. Please review its contents carefully",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "release_discipline",
            "band": "exceptional",
            "name": "Release discipline",
            "note": null,
            "notes": [],
            "value": 96,
            "inputs": {
              "releases_count": 40,
              "latest_release_tag": "v0.2.38",
              "releases_from_tags": false,
              "days_since_latest_release": 10,
              "mean_days_between_releases": 2.6
            },
            "components": [
              {
                "key": "ships_releases",
                "name": "Ships releases",
                "detail": "40 releases published",
                "points": 27,
                "status": "met",
                "details": [
                  {
                    "code": "releases_published",
                    "params": {
                      "count": 40
                    }
                  }
                ],
                "max_points": 27
              },
              {
                "key": "release_recency",
                "name": "Release recency",
                "detail": "latest release 10 days ago",
                "points": 36,
                "status": "met",
                "details": [
                  {
                    "code": "release_recency",
                    "params": {
                      "days": 10
                    }
                  }
                ],
                "max_points": 36
              },
              {
                "key": "release_cadence",
                "name": "Release cadence",
                "detail": "a release every ~2.6 days",
                "points": 27,
                "status": "met",
                "details": [
                  {
                    "code": "release_cadence",
                    "params": {
                      "gap": 2.6
                    }
                  }
                ],
                "max_points": 27
              },
              {
                "key": "openssf_scorecard_signed_releases",
                "name": "OpenSSF Scorecard: Signed-Releases",
                "detail": "4 out of the last 5 releases have a total of 4 signed artifacts.",
                "points": 6,
                "status": "partial",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "abandonment",
            "band": "exceptional",
            "name": "Abandonment",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "cap": null,
              "state": "unverified",
              "guards": [],
              "signals": [],
              "red_flag": false,
              "multiplier_pct": 100,
              "declared_reason": null,
              "unverified_reason": "repository_too_young",
              "unanswered_open_prs": null,
              "unanswered_open_issues": null,
              "days_since_last_merged_pr": null,
              "days_since_last_human_commit": null,
              "days_since_last_human_commit_is_floor": false
            },
            "components": [
              {
                "key": "project_is_still_maintained",
                "name": "Project is still maintained",
                "detail": "maintenance record not established from the collected data",
                "points": 100,
                "status": "met",
                "details": [
                  {
                    "code": "abandonment_unverified",
                    "params": {}
                  }
                ],
                "max_points": 100
              }
            ]
          }
        ],
        "description": "Is the project alive — is code being written and are releases shipping?"
      },
      {
        "key": "community",
        "band": "at_risk",
        "name": "Community & Adoption",
        "value": 24,
        "weight": 0.17,
        "metrics": [
          {
            "key": "popularity",
            "band": "critical",
            "name": "Popularity & adoption",
            "note": null,
            "notes": [],
            "value": 1,
            "inputs": {
              "forks": 2,
              "stars": 2,
              "watchers": 0,
              "growth_state": "unverified",
              "growth_factor_pct": 100,
              "growth_unverified_reason": "no_history"
            },
            "components": [
              {
                "key": "stars",
                "name": "Stars",
                "detail": "2 stars",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "stars",
                    "params": {
                      "count": 2
                    }
                  }
                ],
                "max_points": 60
              },
              {
                "key": "forks",
                "name": "Forks",
                "detail": "2 forks",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "forks",
                    "params": {
                      "count": 2
                    }
                  }
                ],
                "max_points": 25
              },
              {
                "key": "watchers",
                "name": "Watchers",
                "detail": "0 watchers",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "watchers",
                    "params": {
                      "count": 0
                    }
                  }
                ],
                "max_points": 15
              }
            ]
          },
          {
            "key": "community_health",
            "band": "moderate",
            "name": "Community health",
            "note": null,
            "notes": [],
            "value": 50,
            "inputs": {
              "has_readme": true,
              "has_license": true,
              "readme_badges": 5,
              "has_contributing": false,
              "has_issue_template": false,
              "has_code_of_conduct": false,
              "readme_badge_services": [
                "shields.io"
              ],
              "has_pull_request_template": false
            },
            "components": [
              {
                "key": "readme",
                "name": "README",
                "detail": null,
                "points": 22.5,
                "status": "met",
                "details": [],
                "max_points": 22.5
              },
              {
                "key": "license",
                "name": "License",
                "detail": "recognized license (MIT)",
                "points": 22.5,
                "status": "met",
                "details": [
                  {
                    "code": "license_standard",
                    "params": {}
                  },
                  {
                    "code": "license_spdx",
                    "params": {
                      "spdx": "MIT"
                    }
                  }
                ],
                "max_points": 22.5
              },
              {
                "key": "contributing_guide",
                "name": "CONTRIBUTING guide",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 18
              },
              {
                "key": "code_of_conduct",
                "name": "Code of conduct",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 13.5
              },
              {
                "key": "issue_template",
                "name": "Issue template",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.2
              },
              {
                "key": "pr_template",
                "name": "PR template",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 6.3
              }
            ]
          }
        ],
        "description": "Does the project have users, downloads, attention, and a welcoming setup for contributors?"
      },
      {
        "key": "governance",
        "band": "moderate",
        "name": "Sustainability & Governance",
        "value": 57,
        "weight": 0.23,
        "metrics": [
          {
            "key": "maintainer_resilience",
            "band": "at_risk",
            "name": "Maintainer resilience (bus factor)",
            "note": null,
            "notes": [],
            "value": 20,
            "inputs": {
              "bus_factor": 1,
              "contributors_sampled": 3,
              "top_contributor_share": 0.687
            },
            "components": [
              {
                "key": "bus_factor",
                "name": "Bus factor",
                "detail": "1 contributor(s) cover half of all commits",
                "points": 9,
                "status": "partial",
                "details": [
                  {
                    "code": "bus_factor",
                    "params": {
                      "count": 1
                    }
                  }
                ],
                "max_points": 54
              },
              {
                "key": "commit_distribution",
                "name": "Commit distribution",
                "detail": "top contributor authored 69% of commits",
                "points": 7,
                "status": "partial",
                "details": [
                  {
                    "code": "top_contributor_share",
                    "params": {
                      "share": 69
                    }
                  }
                ],
                "max_points": 22.5
              },
              {
                "key": "contributor_breadth",
                "name": "Contributor breadth",
                "detail": "3 contributors",
                "points": 4.1,
                "status": "partial",
                "details": [
                  {
                    "code": "contributors_sampled",
                    "params": {
                      "count": 3
                    }
                  }
                ],
                "max_points": 13.5
              },
              {
                "key": "openssf_scorecard_contributors",
                "name": "OpenSSF Scorecard: Contributors",
                "detail": "project has 0 contributing companies or organizations -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "responsiveness",
            "band": "excellent",
            "name": "Issue & PR responsiveness",
            "note": "Excluded from scoring (no data or not applicable): Issue resolution, Newcomer PR acceptance. Remaining weights renormalized.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "issue_resolution",
                    "newcomer_pr_acceptance"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              }
            ],
            "value": 85,
            "inputs": {
              "merged_prs": 118,
              "open_issues": 0,
              "closed_issues": 0,
              "prs_merged_7d": 0,
              "prs_decided_7d": 0,
              "prs_merged_30d": 42,
              "prs_decided_30d": 45,
              "issue_closed_ratio": null,
              "closed_unmerged_prs": 9,
              "first_time_authors_30d": 0,
              "first_time_prs_merged_30d": 0,
              "first_time_prs_decided_30d": 0
            },
            "components": [
              {
                "key": "issue_resolution",
                "name": "Issue resolution",
                "detail": "no issues or no data",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_issues_or_data",
                    "params": {}
                  }
                ],
                "max_points": 42
              },
              {
                "key": "pr_acceptance",
                "name": "PR acceptance",
                "detail": "118/127 decided PRs merged",
                "points": 27.9,
                "status": "partial",
                "details": [
                  {
                    "code": "decided_prs_merged",
                    "params": {
                      "merged": 118,
                      "decided": 127
                    }
                  }
                ],
                "max_points": 30
              },
              {
                "key": "newcomer_pr_acceptance",
                "name": "Newcomer PR acceptance",
                "detail": "no first-time contributor's PR decided in 30d",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_newcomer_prs",
                    "params": {
                      "days": 30
                    }
                  }
                ],
                "max_points": 13
              },
              {
                "key": "openssf_scorecard_code_review",
                "name": "OpenSSF Scorecard: Code-Review",
                "detail": "Found 5/7 approved changesets -- score normalized to 7",
                "points": 10.5,
                "status": "partial",
                "details": [],
                "max_points": 15
              }
            ]
          },
          {
            "key": "stewardship",
            "band": "weak",
            "name": "Ownership & stewardship",
            "note": "Excluded from scoring (no data or not applicable): Verified domain. Remaining weights renormalized.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "verified_domain"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              }
            ],
            "value": 39,
            "inputs": {
              "followers": 2,
              "owner_type": "User",
              "is_verified": null,
              "owner_login": "stein155",
              "public_repos": 5,
              "account_age_days": 3479
            },
            "components": [
              {
                "key": "ownership_backing",
                "name": "Ownership backing",
                "detail": "personal (user) account",
                "points": 10,
                "status": "partial",
                "details": [
                  {
                    "code": "owner_personal",
                    "params": {}
                  }
                ],
                "max_points": 30
              },
              {
                "key": "verified_domain",
                "name": "Verified domain",
                "detail": "not applicable to user accounts",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "not_applicable_to_user_accounts",
                    "params": {}
                  }
                ],
                "max_points": 20
              },
              {
                "key": "owner_reach",
                "name": "Owner reach",
                "detail": "2 followers of stein155",
                "points": 3.4,
                "status": "partial",
                "details": [
                  {
                    "code": "owner_followers",
                    "params": {
                      "count": 2,
                      "login": "stein155"
                    }
                  }
                ],
                "max_points": 25
              },
              {
                "key": "track_record",
                "name": "Track record",
                "detail": "5 public repos, account ~9 yr old",
                "points": 17.7,
                "status": "partial",
                "details": [
                  {
                    "code": "public_repos",
                    "params": {
                      "count": 5
                    }
                  },
                  {
                    "code": "account_age_years",
                    "params": {
                      "years": 9
                    }
                  }
                ],
                "max_points": 25
              }
            ]
          },
          {
            "key": "package_maintenance",
            "band": "exceptional",
            "name": "Package maintenance",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "packages": [
                "github.com/stein155/retouch"
              ],
              "ecosystems": "go",
              "any_deprecated": false,
              "min_days_since_publish": 10
            },
            "components": [
              {
                "key": "published_resolvable",
                "name": "Published & resolvable",
                "detail": "1 package(s) on go",
                "points": 25,
                "status": "met",
                "details": [
                  {
                    "code": "packages_published",
                    "params": {
                      "count": 1,
                      "ecosystems": "go"
                    }
                  }
                ],
                "max_points": 25
              },
              {
                "key": "publish_recency",
                "name": "Publish recency",
                "detail": "latest publish 10 days ago",
                "points": 35,
                "status": "met",
                "details": [
                  {
                    "code": "publish_recency",
                    "params": {
                      "days": 10
                    }
                  }
                ],
                "max_points": 35
              },
              {
                "key": "version_history",
                "name": "Version history",
                "detail": "40 published versions",
                "points": 20,
                "status": "met",
                "details": [
                  {
                    "code": "published_versions",
                    "params": {
                      "count": 40
                    }
                  }
                ],
                "max_points": 20
              },
              {
                "key": "not_deprecated",
                "name": "Not deprecated",
                "detail": "active, not deprecated or yanked",
                "points": 20,
                "status": "met",
                "details": [
                  {
                    "code": "package_not_deprecated",
                    "params": {}
                  }
                ],
                "max_points": 20
              }
            ]
          }
        ],
        "description": "Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?"
      },
      {
        "key": "engineering",
        "band": "good",
        "name": "Engineering Quality",
        "value": 71,
        "weight": 0.19,
        "metrics": [
          {
            "key": "engineering_practices",
            "band": "good",
            "name": "Engineering practices",
            "note": null,
            "notes": [],
            "value": 68,
            "inputs": {
              "has_ci": true,
              "has_tests": true,
              "has_editorconfig": false,
              "has_linter_config": false,
              "has_precommit_config": false
            },
            "components": [
              {
                "key": "ci_workflows",
                "name": "CI workflows",
                "detail": "4 workflow(s)",
                "points": 24,
                "status": "met",
                "details": [
                  {
                    "code": "ci_workflows",
                    "params": {
                      "count": 4
                    }
                  }
                ],
                "max_points": 24
              },
              {
                "key": "tests_present",
                "name": "Tests present",
                "detail": null,
                "points": 24,
                "status": "met",
                "details": [],
                "max_points": 24
              },
              {
                "key": "linter_config",
                "name": "Linter config",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 16
              },
              {
                "key": "pre_commit_hooks",
                "name": "Pre-commit hooks",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 9.6
              },
              {
                "key": "editorconfig",
                "name": ".editorconfig",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 6.4
              },
              {
                "key": "openssf_scorecard_ci_tests",
                "name": "OpenSSF Scorecard: CI-Tests",
                "detail": "12 out of 12 merged PRs checked by a CI test -- score normalized to 10",
                "points": 20,
                "status": "met",
                "details": [],
                "max_points": 20
              }
            ]
          },
          {
            "key": "documentation",
            "band": "good",
            "name": "Documentation",
            "note": null,
            "notes": [],
            "value": 75,
            "inputs": {
              "topics": [
                "bose",
                "golang",
                "internet-radio",
                "multiroom",
                "radio",
                "react",
                "self-hosted",
                "soundtouch",
                "tunein"
              ],
              "has_wiki": false,
              "homepage": null,
              "has_readme": true,
              "has_docs_dir": true,
              "has_description": true
            },
            "components": [
              {
                "key": "readme",
                "name": "README",
                "detail": null,
                "points": 30,
                "status": "met",
                "details": [],
                "max_points": 30
              },
              {
                "key": "documentation_directory",
                "name": "Documentation directory",
                "detail": null,
                "points": 25,
                "status": "met",
                "details": [],
                "max_points": 25
              },
              {
                "key": "documentation_homepage_site",
                "name": "Documentation / homepage site",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 15
              },
              {
                "key": "repository_description",
                "name": "Repository description",
                "detail": null,
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              },
              {
                "key": "topics",
                "name": "Topics",
                "detail": "9 topics",
                "points": 10,
                "status": "met",
                "details": [
                  {
                    "code": "topics_count",
                    "params": {
                      "count": 9
                    }
                  }
                ],
                "max_points": 10
              },
              {
                "key": "wiki",
                "name": "Wiki",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 10
              }
            ]
          }
        ],
        "description": "Are baseline engineering and documentation practices in place?"
      },
      {
        "key": "security",
        "band": "weak",
        "name": "Security",
        "value": 46,
        "weight": 0.16,
        "metrics": [
          {
            "key": "security_posture",
            "band": "weak",
            "name": "Security posture",
            "note": "Excluded from scoring (no data or not applicable): Packaging. Remaining weights renormalized.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "packaging"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              }
            ],
            "value": 46,
            "inputs": {
              "source": "openssf_scorecard",
              "checks_evaluated": 17,
              "scorecard_version": "v5.5.0",
              "checks_inconclusive": 1,
              "scorecard_aggregate": 4.6
            },
            "components": [
              {
                "key": "binary_artifacts",
                "name": "Binary-Artifacts",
                "detail": "no binaries found in the repo",
                "points": 7.5,
                "status": "met",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "branch_protection",
                "name": "Branch-Protection",
                "detail": "branch protection not enabled on development/release branches",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "ci_tests",
                "name": "CI-Tests",
                "detail": "12 out of 12 merged PRs checked by a CI test -- score normalized to 10",
                "points": 2.5,
                "status": "met",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "cii_best_practices",
                "name": "CII-Best-Practices",
                "detail": "no effort to earn an OpenSSF best practices badge detected",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "code_review",
                "name": "Code-Review",
                "detail": "Found 5/7 approved changesets -- score normalized to 7",
                "points": 5.2,
                "status": "partial",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "contributors",
                "name": "Contributors",
                "detail": "project has 0 contributing companies or organizations -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "dangerous_workflow",
                "name": "Dangerous-Workflow",
                "detail": "no dangerous workflow patterns detected",
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              },
              {
                "key": "dependency_update_tool",
                "name": "Dependency-Update-Tool",
                "detail": "update tool detected",
                "points": 7.5,
                "status": "met",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "fuzzing",
                "name": "Fuzzing",
                "detail": "project is not fuzzed",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 5
              },
              {
                "key": "license",
                "name": "License",
                "detail": "license file detected",
                "points": 2.5,
                "status": "met",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "maintained",
                "name": "Maintained",
                "detail": "project was created within the last 90 days. Please review its contents carefully",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "packaging",
                "name": "Packaging",
                "detail": "packaging workflow not detected",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_data",
                    "params": {}
                  }
                ],
                "max_points": 5
              },
              {
                "key": "pinned_dependencies",
                "name": "Pinned-Dependencies",
                "detail": "dependency not pinned by hash detected -- score normalized to 6",
                "points": 3,
                "status": "partial",
                "details": [],
                "max_points": 5
              },
              {
                "key": "sast",
                "name": "SAST",
                "detail": "SAST tool is not run on all commits -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 5
              },
              {
                "key": "security_policy",
                "name": "Security-Policy",
                "detail": "security policy file not detected",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 5
              },
              {
                "key": "signed_releases",
                "name": "Signed-Releases",
                "detail": "4 out of the last 5 releases have a total of 4 signed artifacts.",
                "points": 4.5,
                "status": "partial",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "token_permissions",
                "name": "Token-Permissions",
                "detail": "detected GitHub workflow tokens with excessive permissions",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "vulnerabilities",
                "name": "Vulnerabilities",
                "detail": "6 existing vulnerabilities detected",
                "points": 3,
                "status": "partial",
                "details": [],
                "max_points": 7.5
              }
            ]
          },
          {
            "key": "high_risk_jurisdiction_exposure",
            "band": "exceptional",
            "name": "High-Risk Jurisdiction Exposure",
            "note": "Only high-confidence self-published location evidence affects this multiplier. Ambiguous matches are review-only; country evidence is not proof of nationality, citizenship, legal registration, malicious intent, or sanctions status.",
            "notes": [
              {
                "code": "jurisdiction_evidence_limits",
                "params": {}
              }
            ],
            "value": 100,
            "inputs": {
              "meaning": "self-published location evidence; not nationality or citizenship",
              "red_flag": false,
              "exposures": [],
              "policy_countries": [
                "Russia",
                "Iran",
                "North Korea"
              ],
              "commit_weight_rule": {
                "min_commits": 50,
                "min_commit_share": 0.1
              },
              "review_only_matches": 0,
              "below_threshold_exposures": [],
              "assessed_self_published_locations": 3
            },
            "components": [
              {
                "key": "policy_exposure_multiplier",
                "name": "Policy exposure multiplier",
                "detail": "no confirmed policy-scope location match",
                "points": 100,
                "status": "met",
                "details": [
                  {
                    "code": "jurisdiction_no_match",
                    "params": {}
                  }
                ],
                "max_points": 100
              }
            ]
          }
        ],
        "description": "Are visible security and supply-chain practices strong, with no malicious dependency and no unresolved high-risk jurisdiction exposure?"
      },
      {
        "key": "ai_readiness",
        "band": "excellent",
        "name": "AI Readiness",
        "value": 85,
        "weight": 0.04,
        "metrics": [
          {
            "key": "ai_agent_context",
            "band": "excellent",
            "name": "Agent context & guidance",
            "note": null,
            "notes": [],
            "value": 85,
            "inputs": {
              "has_llms_txt": false,
              "legible_history_share": 1,
              "agent_instruction_files": [
                "AGENTS.md"
              ],
              "agent_instruction_max_bytes": 6731
            },
            "components": [
              {
                "key": "agent_instructions",
                "name": "Agent instructions",
                "detail": "AGENTS.md",
                "points": 45,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": "AGENTS.md"
                    }
                  }
                ],
                "max_points": 45
              },
              {
                "key": "machine_readable_docs_llms_txt",
                "name": "Machine-readable docs (llms.txt)",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 15
              },
              {
                "key": "legible_commit_history",
                "name": "Legible commit history",
                "detail": "95 of 95 human commits state their intent (structured subject or explanatory body)",
                "points": 40,
                "status": "met",
                "details": [
                  {
                    "code": "legible_history",
                    "params": {
                      "legible": 95,
                      "sampled": 95
                    }
                  }
                ],
                "max_points": 40
              }
            ]
          },
          {
            "key": "ai_verify_loop",
            "band": "excellent",
            "name": "Verify loop (build / test / typecheck)",
            "note": null,
            "notes": [],
            "value": 80,
            "inputs": {
              "has_nix": false,
              "has_tests": true,
              "lockfiles": [
                "package-lock.json"
              ],
              "has_dockerfile": false,
              "typed_language": true,
              "bootstrap_files": [],
              "has_devcontainer": false,
              "has_linter_config": false,
              "typecheck_configs": [
                "frontend/tsconfig.json"
              ],
              "agent_commit_share": 0.33,
              "toolchain_manifests": [
                "go.mod"
              ],
              "dependency_bot_commit_share": 0.05
            },
            "components": [
              {
                "key": "one_command_bootstrap",
                "name": "One-command bootstrap",
                "detail": "go.mod (toolchain convention, no task runner)",
                "points": 12.6,
                "status": "partial",
                "details": [
                  {
                    "code": "toolchain_convention",
                    "params": {
                      "files": "go.mod"
                    }
                  }
                ],
                "max_points": 18
              },
              {
                "key": "automated_tests",
                "name": "Automated tests",
                "detail": null,
                "points": 22,
                "status": "met",
                "details": [],
                "max_points": 22
              },
              {
                "key": "lint_format_config",
                "name": "Lint / format config",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 11
              },
              {
                "key": "static_type_checking",
                "name": "Static type checking",
                "detail": "frontend/tsconfig.json",
                "points": 11,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": "frontend/tsconfig.json"
                    }
                  }
                ],
                "max_points": 11
              },
              {
                "key": "reproducible_environment",
                "name": "Reproducible environment",
                "detail": "lockfile",
                "points": 10,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": "lockfile"
                    }
                  }
                ],
                "max_points": 10
              },
              {
                "key": "demonstrated_agent_practice",
                "name": "Demonstrated agent practice",
                "detail": "33 of the last 100 commits agent-authored or agent-credited",
                "points": 10,
                "status": "met",
                "details": [
                  {
                    "code": "agent_authored_commits",
                    "params": {
                      "count": 33,
                      "sampled": 100
                    }
                  }
                ],
                "max_points": 10
              },
              {
                "key": "automated_maintenance",
                "name": "Automated maintenance",
                "detail": "5 of the last 100 commits are automated dependency updates",
                "points": 8,
                "status": "met",
                "details": [
                  {
                    "code": "dependency_bot_commits",
                    "params": {
                      "count": 5,
                      "sampled": 100
                    }
                  }
                ],
                "max_points": 8
              },
              {
                "key": "openssf_scorecard_pinned_dependencies",
                "name": "OpenSSF Scorecard: Pinned-Dependencies",
                "detail": "dependency not pinned by hash detected -- score normalized to 6",
                "points": 6,
                "status": "partial",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "ai_code_legibility",
            "band": "exceptional",
            "name": "Code legibility for models",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "primary_language": "Go",
              "largest_source_bytes": 44973,
              "source_files_sampled": 155,
              "oversized_source_files": 0
            },
            "components": [
              {
                "key": "type_checkable_code",
                "name": "Type-checkable code",
                "detail": "Go (statically typed)",
                "points": 45,
                "status": "met",
                "details": [
                  {
                    "code": "statically_typed_language",
                    "params": {
                      "language": "Go"
                    }
                  }
                ],
                "max_points": 45
              },
              {
                "key": "manageable_file_sizes",
                "name": "Manageable file sizes",
                "detail": "0/155 source files over 60KB",
                "points": 55,
                "status": "met",
                "details": [
                  {
                    "code": "oversized_source_files",
                    "params": {
                      "kb": 60,
                      "sampled": 155,
                      "oversized": 0
                    }
                  }
                ],
                "max_points": 55
              }
            ]
          }
        ],
        "description": "How well is the repo equipped to be developed and maintained with AI coding agents? Carries a deliberately small weight: agent tooling is a real maintenance signal, but its absence must never gate the top of the scale (calibration saturates at raw 91, so 100/100 remains reachable with AI Readiness at zero)."
      }
    ],
    "classification": {
      "top": [
        "application"
      ],
      "labels": [
        "web-ui"
      ],
      "scores": {
        "web-ui": 4,
        "library": 2.4,
        "application": 5,
        "network-service": 2
      },
      "primary": "web-ui",
      "evidence": [
        {
          "tier": "structure",
          "label": "application",
          "source": "tree.go_main",
          "weight": 5
        },
        {
          "tier": "dependencies",
          "label": "web-ui",
          "source": "dep:react-dom",
          "weight": 4
        },
        {
          "tier": "declared",
          "label": "library",
          "source": "npm.private",
          "weight": -3.6
        },
        {
          "tier": "distribution",
          "label": "library",
          "source": "registry:go",
          "weight": 3
        },
        {
          "tier": "structure",
          "label": "library",
          "source": "tree.go_importable",
          "weight": 3
        },
        {
          "tier": "tags",
          "label": "network-service",
          "source": "tag:self-hosted",
          "weight": 2
        }
      ],
      "artifacts": [
        {
          "path": "frontend/package.json",
          "labels": [],
          "ecosystem": "npm"
        }
      ],
      "confidence": "medium",
      "host_extension": false,
      "runs_as_process": true,
      "consumed_by_code": false
    },
    "metrics_version": "2.5.0"
  },
  "warnings": [
    "Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token",
    "GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository"
  ],
  "report_type": "repository",
  "generated_at": "2026-08-05T09:26:13.289940Z",
  "schema_version": "0.31.0",
  "badge_url": "https://raw.githubusercontent.com/inspect-software/badges/main/v1/s/stein155/retouch.svg",
  "full_name": "stein155/retouch",
  "license_state": "standard",
  "license_spdx": "MIT"
}

评分是信号,而非担保。 评分反映的是 GitHub 上公开可见的实践——不是代码审计,也不是安全保证。

缺失数据将被剔除并重新归一化权重,绝不按零分计。方法论已版本化并公开:指标 v2.5.0、模式 v0.31.0—— 完整方法论 · 指标知识库.

单项结果在整体记录中的位置: 汇总统计Go.