公开记录存在风险
软件健康报告模式 0.27.0 · 指标 1.13.0 · 2026-07-23 20:15 UTC
timothy-billingrails / cadreen-sdks
Official Cadreen SDKs - TypeScript, Go, and Python
timothy-billingrails/cadreen-sdks 的健康指数为 100 分中的 48 分，处于「存在风险」区间。 其得分最高的类别是Vitality（71/100），最低的是Community & Adoption（32/100）。 最近一次更新在 1 天前。 近期的大部分工作由 1 位贡献者完成。
48
总分 / 100软件健康指数
指标归入加权类别，统一采用 1–100 量表。总体分先取类别加权平均；当公开证据触发高风险司法辖区政策时，评级会按政策调整，并设置 49（有风险）的上限。AI 就绪度不计入总体分。
48
优秀85-100堪称典范；基本满足所有检验标准
良好70-84健康；仅有轻微不足
中等50-69可接受，但存在明显不足；建议进行审查
存在风险30-49存在重大薄弱环节；采用时应保持审慎
危急1-29问题严重（项目被弃置、仅有单一维护者、缺乏基本工程规范）
评分画像
每条轴代表一个类别。形状比平均值更重要——健康的对象会填满整个图形，而“一峰一谷”式画像意味着某一维度的优势正掩盖另一维度的风险。
所有权
软件包生态系统
| 注册表 | 软件包 | 版本 | 月下载量 | 版本数 | 最近发布 | 标签 |
|---|---|---|---|---|---|---|
| Go | github.com/timothy-billingrails/cadreen-sdks/go | v0.7.2 | - | 12 | 2 天前 | — |
| npm | @cadreen/mcp | 0.1.2 | 226 | 2 | 2 天前 | — |
| PyPI | cadreen-sdk | 0.7.2 | - | 15 | 2 天前 | — |
| npm | @cadreen/sdk | 0.7.2 | 1,456 | 14 | 2 天前 | cadreensdkintelligenceautomationgovernance |
| npm | @cadreen/cli | 0.4.2 | 1,469 | 11 | 2 天前 | cadreencligovernancememoryintelligenceopenaiaiautomationorchestrationllmagenttool-callingpolicy |
按类别列示的指标
活力
项目是否仍有生命——是否仍在编写代码，是否仍在发布版本？
71
开发活跃度
59中等
评分方式
| 36/36 | 推送新近度 — 最近一次推送于 1 天前 |
| 4.8/36 | 提交节奏 — 52 周中有 7 周有提交 |
| 18/18 | 提交量 — 最近一年 113 次提交 |
| 0/10 | OpenSSF Scorecard：Maintained — project was created within the last 90 days. Please review its contents carefully |
所用输入
| commits_last_year | 113 |
| human_commit_share | 0.92 |
| days_since_last_push | 1 |
| active_weeks_last_year | 7 |
发布纪律
90优秀
评分方式
| 27/27 | 有发布版本 — 已发布 11 个发布版本 |
| 36/36 | 发布时效 — 最近一次发布版本于 2 天前 |
| 27/27 | 发布节奏 — 约每 3.4 天发布一次 |
| 0/10 | OpenSSF Scorecard：Signed-Releases — Project has not signed or included provenance with any releases. |
所用输入
| releases_count | 11 |
| latest_release_tag | cli-v0.4.2 |
| releases_from_tags | 否 |
| days_since_latest_release | 2 |
| mean_days_between_releases | 3.4 |
社区与采用
项目是否拥有用户、下载量与关注度，并具备欢迎贡献者参与的配置？
32
流行度与采用
1危急
评分方式
| 0/60 | 星标 — 0 个星标 |
| 0/25 | 复刻 — 0 个复刻 |
| 0/15 | 关注者 — 0 位关注者 |
所用输入
| forks | 0 |
| stars | 0 |
| watchers | 0 |
| growth_state | unverified |
| growth_factor_pct | 100 |
| growth_unverified_reason | no_history |
社区健康
50中等
评分方式
| 22.5/22.5 | README |
| 22.5/22.5 | 许可证 — 可识别的许可证（MIT） |
| 0/18 | CONTRIBUTING 指南 |
| 0/13.5 | 行为准则 |
| 0/7.2 | 议题模板 |
| 0/6.3 | PR 模板 |
所用输入
| has_readme | 是 |
| has_license | 是 |
| has_contributing | 否 |
| has_issue_template | 否 |
| has_code_of_conduct | 否 |
| has_pull_request_template | 否 |
生态采用（下载量）
58中等
评分方式
| 46.6/80 | 月度下载量 — go, npm, pypi 合计每月 3,151 次下载 |
| 0/20 | 注册表被依赖数 — 该生态系统不报告此项 |
所用输入
| packages | github.com/timothy-billingrails/cadreen-sdks/go, @cadreen/mcp, cadreen-sdk, @cadreen/sdk, @cadreen/cli |
| dependents | — |
| ecosystems | go, npm, pypi |
| total_downloads | — |
| monthly_downloads | 3,151 |
已排除计分（无数据或不适用）：注册表被依赖数。 其余权重已重新归一化。
可持续性与治理
项目能否在其成员之外延续——巴士系数、响应能力、由谁支持，以及软件包的维护状况？
42
维护者韧性（巴士系数）
10危急
评分方式
| 9/54 | 巴士系数 — 1 位贡献者贡献了半数提交 |
| 0/22.5 | 提交分布 — 头号贡献者编写了 100% 的提交 |
| 1.4/13.5 | 贡献者广度 — 1 位贡献者 |
| 0/10 | OpenSSF Scorecard：Contributors — project has 0 contributing companies or organizations -- score normalized to 0 |
所用输入
| bus_factor | 1 |
| contributors_sampled | 1 |
| top_contributor_share | 1 |
议题与 PR 响应能力
54中等
评分方式
| 0/46.8 | 议题解决 — 没有议题或无数据 |
| 28.7/38.3 | PR 接受 — 已裁定的 PR 中 3/4 已合并 |
| 0/15 | OpenSSF Scorecard：Code-Review — Found 0/20 approved changesets -- score normalized to 0 |
所用输入
| merged_prs | 3 |
| open_issues | 0 |
| closed_issues | 0 |
| issue_closed_ratio | — |
| closed_unmerged_prs | 1 |
已排除计分（无数据或不适用）：议题解决。 其余权重已重新归一化。
所有权与托管责任
23危急
评分方式
| 10/30 | 所有权背书 — 个人（用户）账户 |
| 0/20 | 已验证域名 — 不适用于个人账户 |
| 0/25 | 所有者影响力 — timothy-billingrails 有 0 位关注者 |
| 8.5/25 | 既往记录 — 1 个公开仓库，账户约 3 年 |
所用输入
| followers | 0 |
| owner_type | User |
| is_verified | — |
| owner_login | timothy-billingrails |
| public_repos | 1 |
| account_age_days | 1,145 |
已排除计分（无数据或不适用）：已验证域名。 其余权重已重新归一化。
软件包维护
100优秀
评分方式
| 25/25 | 已发布且可解析 — go, npm, pypi 上有 5 个软件包 |
| 35/35 | 发布时效 — 最近一次发布于 2 天前 |
| 20/20 | 版本历史 — 15 个已发布版本 |
| 20/20 | 未被弃用 — 活跃，未被弃用或撤回 |
所用输入
| packages | github.com/timothy-billingrails/cadreen-sdks/go, @cadreen/mcp, cadreen-sdk, @cadreen/sdk, @cadreen/cli |
| ecosystems | go, npm, pypi |
| any_deprecated | 否 |
| min_days_since_publish | 2 |
工程质量
基础的工程与文档实践是否到位？
54
工程实践
54中等
评分方式
| 24/24 | CI 工作流 — 1 个工作流 |
| 24/24 | 存在测试 |
| 0/16 | Linter 配置 |
| 0/9.6 | Pre-commit 钩子 |
| 0/6.4 | .editorconfig |
| 6/20 | OpenSSF Scorecard：CI-Tests — 1 out of 3 merged PRs checked by a CI test -- score normalized to 3 |
所用输入
| has_ci | 是 |
| has_tests | 是 |
| has_editorconfig | 否 |
| has_linter_config | 否 |
| has_precommit_config | 否 |
文档
55中等
评分方式
| 30/30 | README |
| 0/25 | 文档目录 |
| 15/15 | 文档 / 主页站点 — https://cadreen.com |
| 10/10 | 仓库描述 |
| 0/10 | 主题标签 |
| 0/10 | Wiki |
所用输入
| topics | — |
| has_wiki | 否 |
| homepage | https://cadreen.com |
| has_readme | 是 |
| has_docs_dir | 否 |
| has_description | 是 |
安全
可见的安全与供应链实践是否稳固，且不存在未解决的高风险司法辖区暴露？
34
安全态势
21危急
评分方式
| 7.5/7.5 | Binary-Artifacts — no binaries found in the repo |
| 0/7.5 | Branch-Protection — branch protection not enabled on development/release branches |
| 0.8/2.5 | CI-Tests — 1 out of 3 merged PRs checked by a CI test -- score normalized to 3 |
| 0/2.5 | CII-Best-Practices — no effort to earn an OpenSSF best practices badge detected |
| 0/7.5 | Code-Review — Found 0/20 approved changesets -- score normalized to 0 |
| 0/2.5 | Contributors — project has 0 contributing companies or organizations -- score normalized to 0 |
| 10/10 | Dangerous-Workflow — no dangerous workflow patterns detected |
| 0/7.5 | Dependency-Update-Tool — no update tool detected |
| 0/5 | Fuzzing — project is not fuzzed |
| 2.5/2.5 | 许可证 — license file detected |
| 0/7.5 | Maintained — project was created within the last 90 days. Please review its contents carefully |
| 0/5 | Packaging — 无数据 |
| 0/5 | Pinned-Dependencies — dependency not pinned by hash detected -- score normalized to 0 |
| 0/5 | SAST — SAST tool is not run on all commits -- score normalized to 0 |
| 0/5 | Security-Policy — security policy file not detected |
| 0/7.5 | Signed-Releases — Project has not signed or included provenance with any releases. |
| 0/7.5 | Token-Permissions — detected GitHub workflow tokens with excessive permissions |
| 0/7.5 | Vulnerabilities — 19 existing vulnerabilities detected |
所用输入
| source | openssf_scorecard |
| checks_evaluated | 17 |
| scorecard_version | v5.5.0 |
| checks_inconclusive | 1 |
| scorecard_aggregate | 2.1 |
已排除计分（无数据或不适用）：packaging。 其余权重已重新归一化。
依赖安全公告
88优秀
评分方式
| 35/35 | 直接依赖不含已知公告 — 没有直接依赖携带已知公告 |
| 13.2/25 | 间接依赖不含已知公告 — 1 个受影响：@hono/node-server 1.19.14 (moderate 5.9) |
| 40/40 | 没有长期未处理的公告 — 没有公告公开超过 90 天 |
所用输入
| source | osv |
| advisories | 1 |
| affected_packages | 1 |
| assessed_packages | 95 |
| unassessed_packages | 0 |
| affected_by_severity | moderate 1 |
| direct_affected_packages | 0 |
比对的是 npm:@cadreen/mcp@0.1.2 的运行时依赖闭包——安装已发布的软件包时真正被拉取进来的内容——共 95 个软件包。 未对可达性进行分析。
AI 就绪度
该仓库在多大程度上具备与 AI 编码代理协同开发与维护的条件？这是一枚独立的实验性徽章——权重为 0.0，因此单独呈现，不影响总体健康评分。
52
AI 代理上下文与指引
40存在风险
评分方式
| 0/45 | 代理指令 — 没有 CLAUDE.md / AGENTS.md / 编辑器规则 |
| 0/15 | 机器可读文档（llms.txt） |
| 40/40 | 可读的提交历史 — 92 次人类提交中有 84 次说明了意图（结构化标题或解释性正文） |
所用输入
| has_llms_txt | 否 |
| legible_history_share | 0.913 |
| agent_instruction_files | — |
| agent_instruction_max_bytes | — |
评分方式
| 12.6/18 | 一条命令的引导启动 — go/go.mod（工具链约定，无任务运行器） |
| 22/22 | 自动化测试 |
| 0/11 | Lint / 格式化配置 |
| 11/11 | 静态类型检查 — mcp/tsconfig.json, python/cadreen/py.typed, typescript/create-cadreen-app/template/tsconfig.json, typescript/tsconfig.json |
| 10/10 | 可复现环境 — lockfile |
| 0/10 | 已体现的代理实践 — 最近 100 次提交中没有代理编写的提交 |
| 0/8 | 自动化维护 — 未观察到自动依赖更新 |
| 0/10 | OpenSSF Scorecard：Pinned-Dependencies — dependency not pinned by hash detected -- score normalized to 0 |
所用输入
| has_nix | 否 |
| has_tests | 是 |
| lockfiles | go.sum, package-lock.json |
| has_dockerfile | 否 |
| typed_language | 是 |
| bootstrap_files | — |
| has_devcontainer | 否 |
| has_linter_config | 否 |
| typecheck_configs | mcp/tsconfig.json, python/cadreen/py.typed, typescript/create-cadreen-app/template/tsconfig.json, typescript/tsconfig.json |
| agent_commit_share | 0 |
| toolchain_manifests | go/go.mod |
| dependency_bot_commit_share | 0 |
面向模型的代码可读性
100优秀
评分方式
| 45/45 | 可类型检查的代码 — Go（静态类型） |
| 55/55 | 可控的文件大小 — 采样的 174 个源文件中有 0 个超过 60KB |
所用输入
| primary_language | Go |
| largest_source_bytes | 51,821 |
| source_files_sampled | 174 |
| oversized_source_files | 0 |
机器可读接口
20危急
评分方式
| 0/40 | API 模式（OpenAPI/GraphQL/proto） |
| 20/20 | MCP 服务器 |
| 0/40 | 可运行示例 |
所用输入
| example_dirs | — |
| has_mcp_signal | 是 |
| api_schema_files | — |
关键数据
0GitHub 星标
1贡献者
113最近 12 个月提交数
1距最近推送天数
11发布版本数
1巴士系数（bus factor）
0开放议题
Go, npm, PyPI软件包生态系统数
数据采集警告
- GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository
更多细节
OpenSSF Scorecard 2.1 / 10
2.1综合
来自开源项目 OpenSSF Scorecard 的独立、工具无关的安全评估。每项检查奖励的是安全实践本身，而非特定供应商的工具。Scorecard 无法判定的检查项标记为 不适用，并从安全评分中剔除（绝不按零分计）。
| 10 | Binary-Artifacts | no binaries found in the repo |
| 0 | Branch-Protection | branch protection not enabled on development/release branches |
| 3 | CI-Tests | 1 out of 3 merged PRs checked by a CI test -- score normalized to 3 |
| 0 | CII-Best-Practices | no effort to earn an OpenSSF best practices badge detected |
| 0 | Code-Review | Found 0/20 approved changesets -- score normalized to 0 |
| 0 | Contributors | project has 0 contributing companies or organizations -- score normalized to 0 |
| 10 | Dangerous-Workflow | no dangerous workflow patterns detected |
| 0 | Dependency-Update-Tool | no update tool detected |
| 0 | Fuzzing | project is not fuzzed |
| 10 | License | license file detected |
| 0 | Maintained | project was created within the last 90 days. Please review its contents carefully |
| 不适用 | Packaging | packaging workflow not detected |
| 0 | Pinned-Dependencies | dependency not pinned by hash detected -- score normalized to 0 |
| 0 | SAST | SAST tool is not run on all commits -- score normalized to 0 |
| 0 | Security-Policy | security policy file not detected |
| 0 | Signed-Releases | Project has not signed or included provenance with any releases. |
| 0 | Token-Permissions | detected GitHub workflow tokens with excessive permissions |
| 0 | Vulnerabilities | 19 existing vulnerabilities detected |
直接依赖 10
| 注册表 | 软件包 | 版本约束 | 清单文件 |
|---|---|---|---|
| Go | github.com/charmbracelet/bubbles | v1.0.0 | go/go.mod |
| Go | github.com/charmbracelet/bubbletea | v1.3.10 | go/go.mod |
| Go | github.com/charmbracelet/glamour | v1.0.0 | go/go.mod |
| Go | github.com/charmbracelet/lipgloss | v1.1.1-0.20250404203927-76690c660834 | go/go.mod |
| Go | github.com/fatih/color | v1.19.0 | go/go.mod |
| Go | github.com/spf13/cobra | v1.10.2 | go/go.mod |
| npm | @modelcontextprotocol/sdk | ^1.0.0 | mcp/package.json |
| npm | zod | ^3.22.0 | mcp/package.json |
| PyPI | httpx | >=0.25 | python/pyproject.toml |
| PyPI | httpx-sse | >=0.4 | python/pyproject.toml |
全部依赖 未采集
本报告未能采集到解析后的依赖集合：GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository
依赖安全公告 1
安装 npm:@cadreen/mcp@0.1.2 会引入 95 个包（直接与传递）：其中 1 个存在已知公告，0 个为直接依赖。
| 软件包 | 版本 | 关系 | 严重程度 | 公告数 | 修复版本 |
|---|---|---|---|---|---|
| @hono/node-server | 1.19.14 | 间接 | 中 | 1 | 2.0.5 |
公告表示依赖图中记录的版本落入某条公告的受影响范围。可达性未经分析，且依赖图包含开发与测试的版本固定——某项发现可能只涉及工具链而非交付的软件。
原始 JSON 报告 机器可读
{
"data": {
"repo": {
"topics": [],
"is_fork": false,
"size_kb": 465,
"has_wiki": false,
"homepage": "https://cadreen.com",
"languages": {
"Go": 461368,
"Ruby": 1306,
"Shell": 2146,
"Python": 350965,
"JavaScript": 19638,
"TypeScript": 219862
},
"pushed_at": "2026-07-22T07:50:09Z",
"created_at": "2026-06-06T23:36:46Z",
"owner_type": "User",
"updated_at": "2026-07-22T07:51:57Z",
"description": "Official Cadreen SDKs - TypeScript, Go, and Python",
"is_archived": false,
"is_disabled": false,
"license_spdx": "MIT",
"default_branch": "master",
"license_spdx_raw": "MIT",
"primary_language": "Go",
"significant_languages": [
"Go",
"Python",
"TypeScript"
]
},
"owner": {
"blog": null,
"name": null,
"type": "User",
"login": "timothy-billingrails",
"company": null,
"location": null,
"followers": 0,
"avatar_url": "https://avatars.githubusercontent.com/u/135520596?v=4",
"created_at": "2023-06-04T13:00:33Z",
"is_verified": null,
"public_repos": 1,
"account_age_days": 1145
},
"license": {
"state": "standard",
"spdx_id": "MIT",
"raw_spdx": "MIT",
"file_present": true,
"scorecard_found": true,
"profile_has_license": true
},
"activity": {
"releases": [
{
"tag": "cli-v0.4.2",
"kind": "other",
"published_at": "2026-07-21T07:39:27Z"
},
{
"tag": "cli-v0.4.0",
"kind": "other",
"published_at": "2026-07-14T08:08:12Z"
},
{
"tag": "cli-v0.3.3",
"kind": "other",
"published_at": "2026-07-02T02:47:12Z"
},
{
"tag": "cli-v0.3.2",
"kind": "other",
"published_at": "2026-07-01T07:50:48Z"
},
{
"tag": "cli-v0.3.1",
"kind": "other",
"published_at": "2026-06-29T09:32:44Z"
},
{
"tag": "cli-v0.2.5",
"kind": "other",
"published_at": "2026-06-25T05:14:02Z"
},
{
"tag": "cli-v0.2.4",
"kind": "other",
"published_at": "2026-06-25T00:47:35Z"
},
{
"tag": "cli-v0.2.3",
"kind": "other",
"published_at": "2026-06-23T06:53:48Z"
},
{
"tag": "cli-v0.2.2",
"kind": "other",
"published_at": "2026-06-22T06:13:03Z"
},
{
"tag": "cli-v0.2.1",
"kind": "other",
"published_at": "2026-06-21T02:13:27Z"
},
{
"tag": "cli-v0.1.0",
"kind": "other",
"published_at": "2026-06-20T01:54:22Z"
}
],
"recent_commits": [
{
"oid": "75a31c6dbffd388c876df2275485b7e48f5cf4a8",
"body": null,
"is_bot": false,
"headline": "fix: use camelCase in federation agent fixtures (API returns camelCase)",
"author_name": "timothy-billingrails",
"author_login": "timothy-billingrails",
"committed_at": "2026-07-22T07:50:04Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ddc6d7cd34ff2104778a0968773d30646fcfbcfb",
"body": null,
"is_bot": false,
"headline": "fix: update Python SDK test fixtures to match current types",
"author_name": "timothy-billingrails",
"author_login": "timothy-billingrails",
"committed_at": "2026-07-22T07:37:08Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d819eed69a69d21bc8cae8ae64f44a39b200935c",
"body": "….py update() bug",
"is_bot": false,
"headline": "fix: align Python SDK tests with type-aligned API fields + fix agents…",
"author_name": "timothy-billingrails",
"author_login": "timothy-billingrails",
"committed_at": "2026-07-22T05:50:50Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "235b1e6892c6cda5ead58a8d2d7e23f99a9615cb",
"body": "Removed compatibility advisory for version 0.7.0 of the SDK.",
"is_bot": false,
"headline": "Update README",
"author_name": "timothy-billingrails",
"author_login": "timothy-billingrails",
"committed_at": "2026-07-21T07:44:13Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ab654fc44025d1ec86f47599d12acf0815f35b6c",
"body": null,
"is_bot": true,
"headline": "chore: update Homebrew formula SHA256 for v0.4.2",
"author_name": "github-actions[bot]",
"author_login": "github-actions[bot]",
"committed_at": "2026-07-21T07:39:27Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "9cd017b219106605e90676eedabdd08ed4e56dc5",
"body": null,
"is_bot": false,
"headline": "fix: remove unused imports in devices.ts",
"author_name": "timothy-billingrails",
"author_login": "timothy-billingrails",
"committed_at": "2026-07-21T07:25:53Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "6469d37179f1766eea51c00d5935e3924d769f42",
"body": "…d-release-bugs\n\nv0.7.2/0.4.2/0.1.2",
"is_bot": false,
"headline": "Merge pull request #4 from timothy-billingrails/fix/sandbox-guards-an…",
"author_name": "timothy-billingrails",
"author_login": "timothy-billingrails",
"committed_at": "2026-07-21T07:06:33Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "085f29fd80528dfe0ae34ef8212052c56caa6eaa",
"body": "…DME)",
"is_bot": false,
"headline": "docs: add Go SDK CHANGELOG.md (was missing, changelog was only in REA…",
"author_name": "timothy-billingrails",
"author_login": "timothy-billingrails",
"committed_at": "2026-07-21T06:05:15Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "68b67cbb4c1d3cee7aae36ee865e6504e40070d1",
"body": "MCP: content type format string→{type:'text',text:string} in2prompt handlers\nWatchdog: initialize stopped=true so first Start() actually launches goroutine\nAnalysis agent: bounds check on schema.CommonPatterns[:3], fallback on ValidateReadOnlySQL failure",
"is_bot": false,
"headline": "fix: pre-existing test/build failures",
"author_name": "timothy-billingrails",
"author_login": "timothy-billingrails",
"committed_at": "2026-07-21T01:48:36Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c77030cf327c1686557bfd7e40ae9fe4e70762b5",
"body": null,
"is_bot": false,
"headline": "fix: TS SDK PATCH retry support",
"author_name": "timothy-billingrails",
"author_login": "timothy-billingrails",
"committed_at": "2026-07-21T00:55:15Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "22d2a05586b5fbe2dee073bbe90033086be56a60",
"body": "Python SDK:\n- Agent: added health, system_prompt, capabilities, config, metadata, deployed_at\n- AgentCapabilities: added can_execute, can_federate, can_negotiate\n- AgentGovernancePolicy: added description, scope, enabled, updated_at\n- FederationAgent: aligned field names\n- FederationPermissions: add\n[…]\nepted bool → Action string\n- IntelligenceMeta.Version: string → *string omitempty\n- ListFederationsResponse: Federations → Links\n\nCLI:\n- Version default: 0.4.0 → 0.4.2\n- Formula: version 0.4.0 → 0.4.2",
"is_bot": false,
"headline": "fix: align SDK types to TypeScript source of truth",
"author_name": "timothy-billingrails",
"author_login": "timothy-billingrails",
"committed_at": "2026-07-21T00:30:36Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "1f872fd47eba22949255db06ec819a40b28a1e17",
"body": "SDK v0.7.2 (TypeScript, Python, Go):\n- Device SDK methods for all 3 languages (ListDevices, GetDevice, CreateDevice, DeleteDevice, GetDeviceStatus, DiagnoseDevice, AskDevice, + map/task/collision/sync/blackboard)\n- Fixed: DiagnoseRequest type shadowing → DeviceDiagnoseRequest (TS + Python)\n- Fixed: \n[…]\niagnose, ask, map, tasks, collisions, sync, blackboard)\n- Version bump in main.go hardcoded default\n\nMCP v0.1.2:\n- Removed incorrect 0.7.0/0.7.1 compatibility advisory (MCP has its own version scheme)",
"is_bot": false,
"headline": "feat: SDK v0.7.2 / CLI v0.4.2 / MCP v0.1.2",
"author_name": "timothy-billingrails",
"author_login": "timothy-billingrails",
"committed_at": "2026-07-20T03:55:52Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "51c642c52280906ec276233ca15d81666c346808",
"body": "…t docs\n\n- TypeScript/Python/Go: 0.7.0 -> 0.7.1\n- Sandbox mode: postStream/stream throw 404 in sandbox mode\n- Release workflow: fixed Homebrew formula update ordering\n- Documented new server-side execution events:\n execution_steps_complete (non-terminal), mission_completed_with_gaps\n (terminal, delivery governance blocked)",
"is_bot": false,
"headline": "chore: bump SDK versions to 0.7.1 — sandbox guards, release fix, even…",
"author_name": "timothy-billingrails",
"author_login": "timothy-billingrails",
"committed_at": "2026-07-16T21:33:06Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b0edaf015c43b5c24f261b9ab295f1490389c096",
"body": null,
"is_bot": false,
"headline": "fix: sandbox stream guards, release workflow, stale formula, doc drift",
"author_name": "timothy-billingrails",
"author_login": "timothy-billingrails",
"committed_at": "2026-07-16T21:30:38Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "8b58e6141979725db4515da2825a70d34ee11121",
"body": "fix: stash before checkout in release workflow",
"is_bot": false,
"headline": "Merge pull request #2 from timothy-billingrails/the-new-branch",
"author_name": "timothy-billingrails",
"author_login": "timothy-billingrails",
"committed_at": "2026-07-14T08:08:35Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1b120434148964a9a1863f084b80fe5badb349e9",
"body": null,
"is_bot": true,
"headline": "chore: update Homebrew formula SHA256 for v0.4.0",
"author_name": "github-actions[bot]",
"author_login": "github-actions[bot]",
"committed_at": "2026-07-14T08:08:12Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1a7b2c5f304d1d3a540c73c33ee2a1c550bd42cc",
"body": null,
"is_bot": false,
"headline": "fix: stash before checkout in release workflow",
"author_name": "timothy-billingrails",
"author_login": "timothy-billingrails",
"committed_at": "2026-07-14T08:05:46Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "79d90ab4ed5577b0f36fcdcd7547bc7e6b25ebb8",
"body": "feat: SDK v0.7.0 + CLI v0.4.0 + MCP server — agents, federation, exte…",
"is_bot": false,
"headline": "Merge pull request #1 from timothy-billingrails/the-new-branch",
"author_name": "timothy-billingrails",
"author_login": "timothy-billingrails",
"committed_at": "2026-07-14T07:51:27Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c18aa4adc7933fb9370a83bf1aa4ae830d4f1f00",
"body": null,
"is_bot": false,
"headline": "Merge branch 'master' into the-new-branch",
"author_name": "timothy-billingrails",
"author_login": "timothy-billingrails",
"committed_at": "2026-07-14T07:51:17Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "66f7936d58e62bfe45d8067f3449fe3ba2955b0a",
"body": "…rnal agents, responses\n\n- Add Agents namespace (full lifecycle, messaging, knowledge, governance, audit, negotiations)\n- Add Federation namespace (cross-workspace, permissions, agent linking)\n- Add External Agents (A2A) namespace\n- Add Responses API (OpenAI-compatible)\n- Add MCP server (@cadreen/mc\n[…]\ned authScheme from ExternalAgentConnection\n- Changed ConnectManualDetail shape\n- Entity responses no longer include workspace_id\n- Fixed CLI federation command target_workspace_id -> targetWorkspaceId",
"is_bot": false,
"headline": "feat: SDK v0.7.0 + CLI v0.4.0 + MCP server — agents, federation, exte…",
"author_name": "timothy-billingrails",
"author_login": "timothy-billingrails",
"committed_at": "2026-07-14T07:46:54Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "dc2d251e2631a22699f5ffdb1af8f252898b70fe",
"body": "Updated package versions for TypeScript, Python, and Go.",
"is_bot": false,
"headline": "Bump package versions to 0.6.3",
"author_name": "timothy-billingrails",
"author_login": "timothy-billingrails",
"committed_at": "2026-07-02T15:12:21Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e68215dfea994dbf5bc94abdc8dc89c187bc71a9",
"body": null,
"is_bot": true,
"headline": "chore: update Homebrew formula SHA256 for v0.3.3",
"author_name": "github-actions[bot]",
"author_login": "github-actions[bot]",
"committed_at": "2026-07-02T02:47:12Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d53f7bbed3cca3e5756c1233659e94c8ea47d0ae",
"body": "Version bumps:\n- TypeScript SDK: 0.6.2 -> 0.6.3\n- Python SDK: 0.6.2 -> 0.6.3\n- Go SDK: 0.6.2 -> 0.6.3\n- CLI: 0.3.2 -> 0.3.3\n\nChangelogs updated in all 8 required locations (README + CHANGELOG.md for each SDK/CLI).",
"is_bot": false,
"headline": "release: v0.6.3 / v0.3.3 — bug fixes and changelog updates",
"author_name": "timothy-billingrails",
"author_login": "timothy-billingrails",
"committed_at": "2026-07-02T02:42:47Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2cef28e0345e9f61e3e4776dc27c4f13f0f2e8b1",
"body": "Python SDK:\n- Fix invoke_stream() crash: replaced nonexistent _client._session with httpx-sse aconnect_sse\n- Fix chat.completions() and completions_stream() silently dropping user_id from request body\n\nGo SDK:\n- Fix retry body reuse bug: bytes.Reader was consumed on first attempt, retries sent empty\n[…]\n (were claimed in v0.6.2 changelog but not in the code)\n\nCLI:\n- Fix version string: 0.2.5 -> 0.3.2 (matches npm package version)\n- Fix traces output: add newline between confidence and duration lines",
"is_bot": false,
"headline": "fix: critical bugs across SDKs and CLI",
"author_name": "timothy-billingrails",
"author_login": "timothy-billingrails",
"committed_at": "2026-07-02T02:42:46Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "712d96173e4abf2b503c96e9c604ed39d882774a",
"body": "- Python: WebhooksResource.verify_signature(raw_body, signature, secret) using hmac.compare_digest\n- Go: VerifyWebhookSignature(rawBody []byte, signature, secret string) using hmac.Equal\n- Both use HMAC-SHA256, matching the TypeScript implementation\n- Timing-safe comparison in both languages",
"is_bot": false,
"headline": "feat: add verifySignature to Python and Go webhook SDKs",
"author_name": "timothy-billingrails",
"author_login": "timothy-billingrails",
"committed_at": "2026-07-02T02:42:46Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "7f506a9f0f9db401e520353004e80c4c144d641d",
"body": "- Go SDK Version constant: 0.5.5 -> 0.6.2 (version.go)\n- Add v0.6.2 changelog to TS/Python/Go READMEs\n- Add v0.3.2 changelog to CLI README\n- Fix create-cadreen-app template: remove broken result.status/intelligence.summary references\n- Fix indentation in README changelog entries",
"is_bot": false,
"headline": "fix: SDK changelogs, version constant, create-cadreen-app template",
"author_name": "timothy-billingrails",
"author_login": "timothy-billingrails",
"committed_at": "2026-07-02T02:42:46Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e75ec152b7ef30b12d9a8b91b17a96e70aeb0e85",
"body": null,
"is_bot": false,
"headline": "Update SDK versions in README.md",
"author_name": "timothy-billingrails",
"author_login": "timothy-billingrails",
"committed_at": "2026-07-01T07:54:05Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "7db5a7f40aa099fb2d3b2d31e0003b8698a0bf9a",
"body": null,
"is_bot": true,
"headline": "chore: update Homebrew formula SHA256 for v0.3.2",
"author_name": "github-actions[bot]",
"author_login": "github-actions[bot]",
"committed_at": "2026-07-01T07:52:43Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c188fae6ea684d37b311dda97f3c2b90709e2142",
"body": null,
"is_bot": false,
"headline": "chore: add 'intelligence' keyword to CLI package.json",
"author_name": "timothy-billingrails",
"author_login": "timothy-billingrails",
"committed_at": "2026-07-01T07:30:09Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4e6b2f761ce7279f028063055b435007e49df550",
"body": null,
"is_bot": false,
"headline": "chore: bump versions to 0.6.2 (SDKs) and 0.3.2 (CLI)",
"author_name": "timothy-billingrails",
"author_login": "timothy-billingrails",
"committed_at": "2026-07-01T07:30:09Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ac481fd46732cacd5add48adcb7dc30fe87ffeaa",
"body": null,
"is_bot": false,
"headline": "fix: remove internal provider names from changelogs",
"author_name": "timothy-billingrails",
"author_login": "timothy-billingrails",
"committed_at": "2026-07-01T07:30:09Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "30fc693cc2c3691c747d85ecb45334b371994fd9",
"body": "CLI:\n- chat and ask commands now display reasoning from thinking models (gray text)\n- Changelog v0.3.2\n\nSDKs:\n- Changelog v0.6.2 for TS, Python, Go — reasoning, intelligence, conversation_id, blueprints, schedules",
"is_bot": false,
"headline": "feat: reasoning display in CLI, changelogs v0.6.2/0.3.2",
"author_name": "timothy-billingrails",
"author_login": "timothy-billingrails",
"committed_at": "2026-07-01T07:30:09Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "038ec865d7d216841dd1458b822a5bad82fc1b6f",
"body": "…s/schedules, README updates\n\nSDKs:\n- Go/TS/Python: ChatCompletionResponse with intelligence, conversation_id, reasoning_tokens\n- Go/TS/Python: reasoning field on ChatDelta for streaming reasoning\n- Python: blueprints.py and schedules.py resources (16 new types)\n- IntelligenceMeta shape aligned (cap\n[…]\nhumility — not capability_assessment, epistemic_humility)\n\nREADMEs:\n- All 3: reasoning_delta streaming examples\n- Go: resp.ID -> resp.ConversationID bug fix\n- Changelogs: v0.6.2 entries for all 3 SDKs",
"is_bot": false,
"headline": "feat: reasoning support, IntelligenceMeta alignment, Python blueprint…",
"author_name": "timothy-billingrails",
"author_login": "timothy-billingrails",
"committed_at": "2026-07-01T07:30:08Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "981eaccda0115579b4393fdb14954c963e50724b",
"body": null,
"is_bot": false,
"headline": "Update README.md",
"author_name": "timothy-billingrails",
"author_login": "timothy-billingrails",
"committed_at": "2026-06-30T14:14:08Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "64409cf5b49a4b9b4bfb88ba5bc5c91e5e3865c0",
"body": null,
"is_bot": true,
"headline": "chore: update Homebrew formula SHA256 for v0.3.1",
"author_name": "github-actions[bot]",
"author_login": "github-actions[bot]",
"committed_at": "2026-06-29T09:34:34Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e20a4eac709e8828b1618331cba06d3193311400",
"body": null,
"is_bot": false,
"headline": "Update README.md",
"author_name": "timothy-billingrails",
"author_login": "timothy-billingrails",
"committed_at": "2026-06-29T07:49:53Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "22f9c0e9e83c37efa269bca5ac62c7602a79ed05",
"body": "SDKs (TS, Python, Go) 0.6.0 -> 0.6.1:\n- Add user_id optional field to IntentRequest and ChatCompletionRequest\n- Add WorkspaceUsersResource: list, invite, updateRole, remove\n- Add WorkspaceUser, WorkspaceRole, InviteUserRequest, UpdateRoleRequest types\n- Add HttpClient.patch() method\n\nCLI 0.3.0 -> 0.3.1:\n- Add --user-id flag to ask and chat commands\n- Add workspace users command group: list, invite, role, remove\n\nAll changelogs and READMEs updated. No cross-SDK references.",
"is_bot": false,
"headline": "feat: user_id field, workspace users, SDK 0.6.1, CLI 0.3.1",
"author_name": "timothy-billingrails",
"author_login": "timothy-billingrails",
"committed_at": "2026-06-29T07:32:04Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "dd986ffe2a1a4da2a332362017dc18d2d2bbee24",
"body": "SDKs (TS, Python, Go) 0.5.5 -> 0.6.0 (BREAKING):\n- ResolveEscalationRequest.resolution -> decision\n- DiagnoseRequest.error -> error_message\n- Retry default aligned to 3\n\nCLI 0.2.5 -> 0.3.0 (BREAKING):\n- setup-session -> setup session (nested under setup)\n- setup flags moved to setup run\n- Fixed 0.2.5 changelog (was setup sessions, not version bump)\n\nAll changelogs and READMEs updated. No cross-SDK references.",
"is_bot": false,
"headline": "chore: bump SDKs to 0.6.0, CLI to 0.3.0 — changelogs and version bumps",
"author_name": "timothy-billingrails",
"author_login": "timothy-billingrails",
"committed_at": "2026-06-29T07:32:04Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e1bb3e0788f5b97b283571c362d9c9e7c4a4caab",
"body": null,
"is_bot": false,
"headline": "fix(cli): add examples to proposals and learning help text",
"author_name": "timothy-billingrails",
"author_login": "timothy-billingrails",
"committed_at": "2026-06-29T07:32:04Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ddcd9fa9bd5570376a5500a62eaafa63fa09b845",
"body": null,
"is_bot": false,
"headline": "fix(cli): nest setup-session under setup as 'session' subcommand",
"author_name": "timothy-billingrails",
"author_login": "timothy-billingrails",
"committed_at": "2026-06-29T07:32:04Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "fe3fabecd7d583cfd4bda8589e8cd5a65d797d71",
"body": null,
"is_bot": false,
"headline": "fix: align SDK retry defaults to 3 (was 2 in TS/Python)",
"author_name": "timothy-billingrails",
"author_login": "timothy-billingrails",
"committed_at": "2026-06-29T07:32:04Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f947bb7a31e89bcb409326a98b09301354ce38ec",
"body": "- escalation resolve: resolution -> decision (TS, Go, Python types + resources)\n- healing diagnose: error -> error_message (TS, Go, Python types + resources + CLI)",
"is_bot": false,
"headline": "fix: SDK field name bugs — escalation resolve + healing diagnose",
"author_name": "timothy-billingrails",
"author_login": "timothy-billingrails",
"committed_at": "2026-06-29T07:32:03Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1a92fb5e7b63d975ae1e20845be37f85ba9e06d3",
"body": null,
"is_bot": true,
"headline": "chore: update Homebrew formula SHA256 for v0.2.5",
"author_name": "github-actions[bot]",
"author_login": "github-actions[bot]",
"committed_at": "2026-06-25T05:14:02Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a8c4220fd414a65f5f9a56af813c297893498d36",
"body": null,
"is_bot": false,
"headline": "chore: bump npm CLI wrapper to 0.2.5",
"author_name": "timothy-billingrails",
"author_login": "timothy-billingrails",
"committed_at": "2026-06-25T05:01:36Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f395d5e95e5a943e5764399608d3d702bb180d91",
"body": "Version bumped 0.2.3 → 0.2.5. SHA256 values reset to PLACEHOLDER_*\nso the release-cli workflow can replace them with real checksums\nafter building binaries.",
"is_bot": false,
"headline": "fix: reset Homebrew formula SHA256 to placeholders for v0.2.5 release",
"author_name": "timothy-billingrails",
"author_login": "timothy-billingrails",
"committed_at": "2026-06-25T05:01:36Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "26fb3586cbc8240ad65bc488f65e5c5ef7e5f0a5",
"body": "- TypeScript: 0.5.4 → 0.5.5\n- Python: 0.5.4 → 0.5.5\n- Go: 0.5.4 → 0.5.5\n- CLI: 0.2.4 → 0.2.5\n- All CHANGELOGs: added 0.5.5 entry for setup sessions\n- TypeScript README: added cadreen.setupSessions to resource table\n- Go README: added 5 setup session methods to resource table\n- Root README: updated version table to 0.5.5",
"is_bot": false,
"headline": "chore: bump versions to 0.5.5/0.2.5, update changelogs and READMEs",
"author_name": "timothy-billingrails",
"author_login": "timothy-billingrails",
"committed_at": "2026-06-25T05:00:14Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5660e7fa44601d911fe4af47ac6882b22b3130e3",
"body": "TypeScript:\n- SetupSessionsResource (create, list, get, addResources, apply)\n- Types: SetupSession, SetupSessionCreateRequest, SetupSessionAddRequest, SetupSessionApplyRequest, SetupSessionApplyResult\n- Wired as cadreen.setupSessions\n\nPython:\n- SetupSessionsResource (create, list, get, add_resources\n[…]\nn, ApplySetupSession\n- Types: SetupSession, SetupSessionCreateRequest, SetupSessionAddRequest, SetupSessionApplyRequest, SetupSessionApplyResult\n\nCLI:\n- cadreen setup-session create/list/get/add/apply",
"is_bot": false,
"headline": "feat(7.4): setup sessions SDK + CLI support",
"author_name": "timothy-billingrails",
"author_login": "timothy-billingrails",
"committed_at": "2026-06-25T05:00:14Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "48c523219aaebd22447819481b4f5b90c8a46f62",
"body": null,
"is_bot": true,
"headline": "chore: update Homebrew formula SHA256 for v0.2.4",
"author_name": "github-actions[bot]",
"author_login": "github-actions[bot]",
"committed_at": "2026-06-25T00:47:36Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f8222c911bbdafbcc01c21b4aa53b0d6a1384990",
"body": "- npm-cadreen/package.json: 0.2.3 -> 0.2.4\n- Root README: version table 0.5.2 -> 0.5.4\n- TypeScript README: add proposals section + resources table + v0.5.4 changelog\n- Python README: add proposals section + v0.5.4 changelog\n- Go README: add proposals section + resources table + v0.5.4 changelog\n- CLI README: add proposals commands + v0.2.4 changelog",
"is_bot": false,
"headline": "fix: update all READMEs with proposals docs, fix npm-cadreen version",
"author_name": "timothy-billingrails",
"author_login": "timothy-billingrails",
"committed_at": "2026-06-25T00:19:49Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "09af17d2dc08134d7d3e6e6614b2018cd4c18e99",
"body": "TypeScript SDK (0.5.4):\n- Add ProposalsResource: list, get, accept, dismiss, stats\n- Add types: TaskProposal, ProposalEvidence, ListProposalsResponse, AcceptProposalResponse, DismissProposalResponse, ProposalStatsResponse\n- Register in index.ts, export types\n\nPython SDK (0.5.4):\n- Add ProposalsResou\n[…]\ndd proposals command group: list, get, accept, dismiss, stats\n- Flags: --status, --limit, --reason\n\nAll SDKs: removed tenant_id from public types (internal concept, auth token handles tenant context).",
"is_bot": false,
"headline": "feat: add ProposalsResource to all SDKs + CLI (v0.5.4 / v0.2.4)",
"author_name": "timothy-billingrails",
"author_login": "timothy-billingrails",
"committed_at": "2026-06-25T00:13:39Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "55fca0521b1df3371c0c33a1c213521e0e4991d6",
"body": null,
"is_bot": true,
"headline": "chore: update Homebrew formula SHA256 for v0.2.3",
"author_name": "github-actions[bot]",
"author_login": "github-actions[bot]",
"committed_at": "2026-06-23T06:53:48Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d4459c57bea4ae2aeceb69202cd1061c956d37d4",
"body": "…lity)\n\nSDKs v0.5.3:\n- Add dry_run field to IntentRequest in all 3 SDKs (TS, Python, Go)\n- Fix Go SDK Version constant (was stuck at 0.5.0 since v0.5.0)\n- Changelog entries for 0.5.3 in all READMEs\n\nCLI v0.2.3:\n- Updated npm description: AI orchestration, governance, memory\n- Updated npm keywords: openai, ai, automation, orchestration, llm, agent, tool-calling, policy\n- Changelog entry for 0.2.3 in README",
"is_bot": false,
"headline": "feat: SDKs v0.5.3 (dry_run on IntentRequest), CLI v0.2.3 (discoverabi…",
"author_name": "timothy-billingrails",
"author_login": "timothy-billingrails",
"committed_at": "2026-06-23T06:44:34Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0a63296a57db735bce26338327fe103608b489c8",
"body": null,
"is_bot": false,
"headline": "Update README.md",
"author_name": "timothy-billingrails",
"author_login": "timothy-billingrails",
"committed_at": "2026-06-22T14:01:59Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "fae90b19c1f48641f74b3d4807c378e1b489b4a1",
"body": null,
"is_bot": false,
"headline": "Update README.md",
"author_name": "timothy-billingrails",
"author_login": "timothy-billingrails",
"committed_at": "2026-06-22T07:00:42Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "09ec635517b5d6815547bdcd560d6cc806d9b505",
"body": null,
"is_bot": false,
"headline": "fix: add fetch-depth: 0 to release workflow so git checkout master works",
"author_name": "timothy-billingrails",
"author_login": "timothy-billingrails",
"committed_at": "2026-06-22T06:39:01Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "692b110cd3eb7608204b0de9904528d57ec4c53d",
"body": null,
"is_bot": false,
"headline": "docs: add v0.5.2 and v0.2.2 changelog entries to all READMEs",
"author_name": "timothy-billingrails",
"author_login": "timothy-billingrails",
"committed_at": "2026-06-22T06:32:04Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "8b662e62e70b7c6bb4d5cde95726a02094ed9640",
"body": null,
"is_bot": false,
"headline": "fix: add readme field to pyproject.toml, update Python SDK changelog",
"author_name": "timothy-billingrails",
"author_login": "timothy-billingrails",
"committed_at": "2026-06-22T06:26:26Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "cc4134068517926d874ea59a43699645129ec859",
"body": null,
"is_bot": false,
"headline": "chore: bump @cadreen/cli to 0.2.2",
"author_name": "timothy-billingrails",
"author_login": "timothy-billingrails",
"committed_at": "2026-06-22T06:18:22Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "763e48bc934b5f2ce3ecef62f34879f522ebf2fd",
"body": null,
"is_bot": false,
"headline": "chore: update Homebrew formula SHA256 for CLI v0.2.2",
"author_name": "timothy-billingrails",
"author_login": "timothy-billingrails",
"committed_at": "2026-06-22T06:16:02Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "6da8dbf88d63ac652cd4f045ce314f39f9f5d10b",
"body": "… blueprints.ts",
"is_bot": false,
"headline": "fix: unused import in setup.go, remove non-existent patch method from…",
"author_name": "timothy-billingrails",
"author_login": "timothy-billingrails",
"committed_at": "2026-06-22T06:10:31Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1d7e0673ae7237071390041e7a9a143884a3b3bf",
"body": null,
"is_bot": false,
"headline": "chore: reset Homebrew SHA256 to placeholders for v0.2.2 release workflow",
"author_name": "timothy-billingrails",
"author_login": "timothy-billingrails",
"committed_at": "2026-06-22T05:28:06Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4063323cfad598b621bf51a299682c9b92e6a992",
"body": "SetupCredentialResult, SetupMemoryResult, SetupPolicyResult status\nnow includes 'would_create' alongside 'created' and 'failed'.",
"is_bot": false,
"headline": "fix: add would_create to TypeScript SDK status unions for dry_run",
"author_name": "timothy-billingrails",
"author_login": "timothy-billingrails",
"committed_at": "2026-06-22T05:21:16Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "091ae544a12ab277acb40e5adeff3ca1652e0294",
"body": "Go SDK:\n- blueprints.go: ListBlueprints, GetBlueprint, CreateBlueprint, DeleteBlueprint, RunBlueprint, ListBlueprintRuns\n- schedules.go: ListSchedules, GetSchedule, CreateSchedule, PauseSchedule, ResumeSchedule\n\nTypeScript SDK:\n- resources/blueprints.ts: BlueprintsResource with list/get/create/updat\n[…]\nlueprint, delete_blueprint, run_blueprint, list_blueprint_runs\n- Added list_schedules, get_schedule, create_schedule, pause_schedule, resume_schedule\n\nHomebrew formula:\n- Homepage URL: /infra appended",
"is_bot": false,
"headline": "feat: SDK resource methods for blueprints + schedules + homepage URL",
"author_name": "timothy-billingrails",
"author_login": "timothy-billingrails",
"committed_at": "2026-06-22T04:51:30Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "7e28995706545d45bd438b1a1ddb498e28ad3d51",
"body": "- TypeScript SDK: 0.5.1 → 0.5.2\n- Python SDK: 0.5.1 → 0.5.2\n- CLI: default version 0.2.2\n- Homebrew formula: 0.2.1 → 0.2.2 (SHA256 hashes need updating after release)",
"is_bot": false,
"headline": "chore: version bump — SDKs v0.5.2, CLI v0.2.2",
"author_name": "timothy-billingrails",
"author_login": "timothy-billingrails",
"committed_at": "2026-06-22T04:37:20Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "afcc53ba2622a2b77a6c656462b57987dcb6f5da",
"body": "New commands:\n- cadreen setup --purpose '...' [--dry-run] [--memory '...'] [--policy '...']\n- cadreen blueprints list|create|run|show|runs|archive\n- cadreen schedules list|create|pause|resume|show\n- cadreen policies create --name '...' --rule '...' [--severity ...]\n\nAll commands support --format json for programmatic use.",
"is_bot": false,
"headline": "feat: CLI commands — setup, blueprints, schedules, policies create",
"author_name": "timothy-billingrails",
"author_login": "timothy-billingrails",
"committed_at": "2026-06-22T04:35:55Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "8f25ba655d0cabec87d4d60ee1141cb27b199d56",
"body": "Also added missing Notice field to SetupResult.",
"is_bot": false,
"headline": "feat: setup dry_run — add dry_run to SetupRequest and SetupResult",
"author_name": "timothy-billingrails",
"author_login": "timothy-billingrails",
"committed_at": "2026-06-22T03:59:39Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f183d5bb2cd96406b5a2ba0263ec0020d90b0332",
"body": "Also added missing notice field to SetupResult.",
"is_bot": false,
"headline": "feat: setup dry_run — add dry_run to SetupRequest and SetupResult",
"author_name": "timothy-billingrails",
"author_login": "timothy-billingrails",
"committed_at": "2026-06-22T03:59:36Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "8ef208fcc9066e139c3761e693b568e9deaa550e",
"body": null,
"is_bot": false,
"headline": "chore: update Homebrew formula SHA256 for CLI v0.2.1",
"author_name": "timothy-billingrails",
"author_login": "timothy-billingrails",
"committed_at": "2026-06-21T02:15:58Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "7e6597d09faeb607e2c96c3ee463c6ed43bdf2d0",
"body": "Version bumped to 0.2.1, SHA256s restored to PLACEHOLDER_* values so the\nrelease-cli.yml workflow can replace them automatically on tag push.",
"is_bot": false,
"headline": "fix: restore Homebrew formula placeholders for workflow sed replacement",
"author_name": "timothy-billingrails",
"author_login": "timothy-billingrails",
"committed_at": "2026-06-21T02:10:23Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "04e6884e0026d55b95b3b915217bc8b60092bdd7",
"body": "- typescript/package.json: 0.5.0 → 0.5.1\n- python/pyproject.toml: 0.5.0 → 0.5.1\n- npm-cadreen/package.json: 0.2.0 → 0.2.1",
"is_bot": false,
"headline": "fix: bump SDK versions to 0.5.1 and CLI to 0.2.1",
"author_name": "timothy-billingrails",
"author_login": "timothy-billingrails",
"committed_at": "2026-06-21T01:56:07Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "30eb5d166c5ef2892275f3f89d101ac5383deaaf",
"body": null,
"is_bot": false,
"headline": "fix: update root README version table to 0.5.1",
"author_name": "timothy-billingrails",
"author_login": "timothy-billingrails",
"committed_at": "2026-06-20T23:52:23Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "83802e6c0c405c46a4e6916ad2d02ac3809e380c",
"body": "Go SDK: UploadDocument(ctx, filePath)\nTS SDK: documents.upload(file, filename?) with postMultipart client method\nPython SDK: documents.upload(file_path) + upload_bytes(content, filename)\nCLI: cadreen documents upload [filepath]\n\nAll READMEs updated with upload examples and changelog entries.",
"is_bot": false,
"headline": "feat: document upload support in all SDKs + CLI",
"author_name": "timothy-billingrails",
"author_login": "timothy-billingrails",
"committed_at": "2026-06-20T23:09:15Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d6d8dd55c77c1daecfcdbd35eec6d8d46a087e39",
"body": "… learning, credentials\n\nNew resources added to all 3 SDKs + CLI:\n- Documents: list, get, download\n- Escalations: list, get, resolve\n- Healing: stats, precedents, diagnose\n- Webhooks: create, list, delete\n- Learning: patterns, episodes, suggestions\n- Credentials: list, create, delete\n\nSDK inconsiste\n[…]\nstPolicies(), GetPolicy()\n- Python SDK: added list_capabilities(), assess()\n- TypeScript SDK: added listCapabilities(), assess()\n\nVersion bumps:\n- Go/TS/Python SDKs: 0.5.0 → 0.5.1\n- CLI: 0.2.0 → 0.2.1",
"is_bot": false,
"headline": "feat: close SDK/CLI gaps — documents, escalations, healing, webhooks,…",
"author_name": "timothy-billingrails",
"author_login": "timothy-billingrails",
"committed_at": "2026-06-20T22:54:28Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "cb5aabd643eb0fb0ffd9a5d205afeecb5af683fb",
"body": "BREAKING: API endpoints moved to Cadreen surface (/api/v1/cadreen/):\n- /api/v1/chat/completions → /api/v1/cadreen/chat/completions\n- /api/v1/tools → /api/v1/cadreen/tools\n\nAll three SDKs (TS, Python, Go) and CLI updated:\n- TypeScript @cadreen/sdk: 0.4.0 → 0.5.0\n- Python cadreen-sdk: 0.4.0 → 0.5.0\n- \n[…]\n- CLI @cadreen/cli: 0.1.0 → 0.2.0\n\nAlso:\n- Replace 'intelligence envelope' with 'response metadata' in all SDK READMEs\n- Update root README version table\n- Add changelog entries for v0.5.0 to all SDKs",
"is_bot": false,
"headline": "fix!: move SDK paths to Cadreen surface + v0.5.0",
"author_name": "timothy-billingrails",
"author_login": "timothy-billingrails",
"committed_at": "2026-06-20T21:45:39Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "a4810b9dc1cf4a673e1d9fc6f9f1db5e47a238c3",
"body": null,
"is_bot": false,
"headline": "chore: move Homebrew formula to Formula/cadreen.rb",
"author_name": "timothy-billingrails",
"author_login": "timothy-billingrails",
"committed_at": "2026-06-20T02:05:28Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "7d84c5ee8be6403cacd75b21f6b05cc55290a3e6",
"body": null,
"is_bot": false,
"headline": "chore: update Homebrew formula SHA256 for v0.1.0",
"author_name": "timothy-billingrails",
"author_login": "timothy-billingrails",
"committed_at": "2026-06-20T01:58:21Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "8b83b7004f0ecb664e272dad1e39b3bc85d2600b",
"body": null,
"is_bot": false,
"headline": "fix: checkout master before pushing Homebrew formula update",
"author_name": "timothy-billingrails",
"author_login": "timothy-billingrails",
"committed_at": "2026-06-20T01:57:08Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4bf4410027c0897f5f7bbef634573e225b6921dd",
"body": null,
"is_bot": false,
"headline": "docs: add npm README, remove 'ai' from keywords",
"author_name": "timothy-billingrails",
"author_login": "timothy-billingrails",
"committed_at": "2026-06-20T01:53:27Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "20180f09f4b6d97cb12b5df73762f02e7284e10e",
"body": "…1.25",
"is_bot": false,
"headline": "fix: use go-version-file instead of hardcoded 1.22 — go.mod requires …",
"author_name": "timothy-billingrails",
"author_login": "timothy-billingrails",
"committed_at": "2026-06-20T01:51:12Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "7b1bbf8805814c2e52bca954be31b19950bd06f3",
"body": "… layout",
"is_bot": false,
"headline": "fix: render help overlay in TUI View() and account for help height in…",
"author_name": "timothy-billingrails",
"author_login": "timothy-billingrails",
"committed_at": "2026-06-20T01:45:12Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "6bd2734df01448134bc53407a26a494ace1cc3b3",
"body": null,
"is_bot": false,
"headline": "fix: replace 'AI' with 'Cadreen' in all CLI copy",
"author_name": "timothy-billingrails",
"author_login": "timothy-billingrails",
"committed_at": "2026-06-20T01:29:31Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c65bf98c713a2d73957354f5a0c4d02e4dea455d",
"body": null,
"is_bot": false,
"headline": "ci: auto-update Homebrew formula SHA256 after release build",
"author_name": "timothy-billingrails",
"author_login": "timothy-billingrails",
"committed_at": "2026-06-20T01:18:37Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "61cdcbe68f579fe4ef09a8e99499f533323bef11",
"body": null,
"is_bot": false,
"headline": "docs: add v0.4.1 changelog entry — RawJSON on ChatStreamEvent",
"author_name": "timothy-billingrails",
"author_login": "timothy-billingrails",
"committed_at": "2026-06-20T01:14:12Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "35d7bfb5745e373dbec10332c4e625f3072a71c5",
"body": "…y, visual confirmation, header/footer, wizard, list model\n\nPhase 1: Core UX\n- Replace textinput with textarea (multi-line, Shift+Enter for newlines)\n- Add spinner.MiniDot in status bar during streaming\n- Add help overlay (? key toggle, human-language labels)\n- Add glamour markdown rendering in Cadr\n[…]\ner tick (was one-shot)\n- Bounds checks on messages[-1] and convID[:8]\n- Unconditional glamour init on first layout\n- Wire wizard to init --tui flag\n- Remove dead code (unused err field, unused styles)",
"is_bot": false,
"headline": "feat: enhanced TUI — spinner, textarea, glamour markdown, help overla…",
"author_name": "timothy-billingrails",
"author_login": "timothy-billingrails",
"committed_at": "2026-06-20T01:13:16Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "e9e5b8c313e15a5b03f1c9ce683be0bed5754365",
"body": "- Bubbletea TUI: root 'cadreen' launches split-pane chat with viewport,\n text input, status bar, streaming, governance confirmation prompts\n- Color output: ANSI colors for errors (red), hints (yellow), try (cyan),\n success (green), doctor checks (green/red/yellow)\n- First-run detection: unauthenticated root shows welcome with setup steps\n- Auth guidance: 'Not authenticated' now suggests 'cadreen init' specifically\n- Dependencies: bubbletea, lipgloss, bubbles, fatih/color",
"is_bot": false,
"headline": "feat: TUI, color output, first-run detection, improved auth guidance",
"author_name": "timothy-billingrails",
"author_login": "timothy-billingrails",
"committed_at": "2026-06-20T00:36:24Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d795d24290c38cf85efaeba2d1db0c052b6a8f08",
"body": "- CLI at go/cmd/cadreen/ with Cobra framework\n- Commands: init, login, logout, whoami, doctor, ask, chat, status,\n config, memory list/add, policies list/evaluate, traces, tools,\n update, completion, version\n- Streaming output via SDK ChatCompletionsStream\n- Governance confirmation flow via pendin\n[…]\nHub Releases\n- Release workflow: cli-v* tags trigger cross-platform builds\n- Install script, Homebrew formula, npm package for distribution\n- SDK: RawJSON on ChatStreamEvent, unused import fix, v0.4.1",
"is_bot": false,
"headline": "feat: add Cadreen CLI — 17 commands, streaming, governance, memory",
"author_name": "timothy-billingrails",
"author_login": "timothy-billingrails",
"committed_at": "2026-06-20T00:15:55Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "f0c71c3b898ce4b41026aa9e1331d24dfdadea4c",
"body": "- ProcessTrace.components: Record<string, boolean> → Record<string, unknown>\n- NoOpSpan/NoOpMeter: add parameter signatures to match TelemetrySpan/TelemetryMeter interfaces\n- Remove unused IntentResult imports from test files\n- Fix Error-to-Record cast in failures.test.ts",
"is_bot": false,
"headline": "fix: TypeScript build errors for v0.4.0 publish",
"author_name": "timothy-billingrails",
"author_login": "timothy-billingrails",
"committed_at": "2026-06-18T21:37:20Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "45db89e2a94a62789d574913109c9fe5a88579f6",
"body": "…ing, conversation_id\n\n- Root README: add chat completions, streaming, tool discovery quick start examples\n- TypeScript README: add Chat Completions section (completions, streaming, tool chaining, tool discovery), v0.4.0 changelog, update resource table\n- Python README: add Chat Completions section (completions, streaming, tool chaining, tool discovery), v0.4.0 changelog\n- Go README: created from scratch with full API coverage (intent, chat, executions, marketplace, sandbox)",
"is_bot": false,
"headline": "docs: update all SDK READMEs for v0.4.0 — chat completions, tool call…",
"author_name": "timothy-billingrails",
"author_login": "timothy-billingrails",
"committed_at": "2026-06-18T21:30:23Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "97a651e857101b95e519c00faac4cc2a7ef9d455",
"body": "…cutionData\n\n- Fix chat completions and tools paths: /v1/* -> /api/v1/* across all 3 SDKs\n- Add Go SDK executions resource (ExecutionStream, GetExecutionStatus)\n- Add TS SDK IntentStream (invokeStream method)\n- Add Python SDK IntentStream (invoke_stream method)\n- Type Python ExecutionResult.execution as ExecutionData (TypedDict) instead of object\n- Update README version from 0.3.0 to 0.4.0",
"is_bot": false,
"headline": "fix: SDK path alignment, executions resource, IntentStream, typed Exe…",
"author_name": "timothy-billingrails",
"author_login": "timothy-billingrails",
"committed_at": "2026-06-18T16:44:25Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "6f16febfa66318d4e56656e1ee708ef8d8df02f6",
"body": "The ExecutionAlias middleware converts 'mission' to 'execution' in responses.\nBoth SDKs only handled 'mission' type, causing execution results to silently\nbecome 'direct' with empty content. Now both handle 'execution' type with\nfallback to 'mission' fields for backward compatibility.",
"is_bot": false,
"headline": "fix: handle 'execution' type in TS and Python SDKs",
"author_name": "timothy-billingrails",
"author_login": "timothy-billingrails",
"committed_at": "2026-06-18T16:35:12Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "399a2ce542359e9e771cae1012cf08bfe4656393",
"body": "Go SDK:\n- ChatCompletionRequest.Model now has omitempty\n- Added version.go with Version constant\n\nTypeScript SDK:\n- Bumped to 0.4.0\n\nPython SDK:\n- Bumped to 0.4.0\n- Fixed silent error swallowing in completions_stream (now logs warnings)",
"is_bot": false,
"headline": "fix: SDK bugs and bump to v0.4.0",
"author_name": "timothy-billingrails",
"author_login": "timothy-billingrails",
"committed_at": "2026-06-18T10:55:42Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "7af060a0e60bd221fc9545591337add8f32f9796",
"body": "All three SDKs now support conversation_id in ChatCompletionRequest.\nThis enables proper conversation tracking for governance and tool chaining.",
"is_bot": false,
"headline": "feat: add conversation_id to chat completion requests",
"author_name": "timothy-billingrails",
"author_login": "timothy-billingrails",
"committed_at": "2026-06-18T09:36:50Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "9635f202ed9e98d5bebaf0a21cf2eb44ed2dfc8c",
"body": "Adds OpenAI-compatible chat completions and tool calling to the Python SDK:\n\nChatResource:\n- completions() for non-streaming requests\n- completions_stream() for async SSE streaming\n- list_tools() for tool discovery\n\nTypes:\n- ChatMessage, ChatToolCall, ChatFunctionCall\n- ChatToolDefinition, ChatFunctionDefinition\n- ChatCompletionRequest/Response\n- ChatCompletionChunk for streaming\n- ToolEntry, ListToolsResponse\n\nWired into Cadreen class as cadreen.chat",
"is_bot": false,
"headline": "feat: chat completions and tool calling support",
"author_name": "timothy-billingrails",
"author_login": "timothy-billingrails",
"committed_at": "2026-06-18T08:54:29Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "126d4e374794869f148ab93ce9fa0d9fe24eac27",
"body": "Adds OpenAI-compatible chat completions and tool calling to the TS SDK:\n\nChatResource:\n- completions() for non-streaming requests\n- completionsStream() for async iterable streaming\n- listTools() for tool discovery\n\nTypes:\n- ChatMessage, ChatToolCall, ChatFunctionCall\n- ChatToolDefinition, ChatFuncti\n[…]\non\n- ChatCompletionRequest/Response\n- ChatCompletionChunk for streaming\n- ChatStreamEvent union type\n\nHttpClient:\n- postStream() method for POST SSE streaming\n\nWired into Cadreen class as cadreen.chat",
"is_bot": false,
"headline": "feat: chat completions and tool calling support",
"author_name": "timothy-billingrails",
"author_login": "timothy-billingrails",
"committed_at": "2026-06-18T08:46:05Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "f06dab7f59c79af1e5378d1c19201c93c55e6c11",
"body": "Adds OpenAI-compatible chat completions and tool calling to the Go SDK:\n\nChat Completions:\n- ChatCompletions() for non-streaming requests\n- ChatCompletionsStream() for streaming SSE responses\n- Full type support: ChatMessage, ChatToolCall, ChatToolDefinition\n- Tool result messages (role: tool) with \n[…]\nstTools() returns available tools as function definitions\n\nTypes:\n- ChatCompletionRequest/Response\n- ChatCompletionChunk for streaming\n- ChatStreamEvent for channel-based streaming\n- ListToolsResponse",
"is_bot": false,
"headline": "feat: chat completions and tool calling support",
"author_name": "timothy-billingrails",
"author_login": "timothy-billingrails",
"committed_at": "2026-06-18T08:39:20Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "fe98bbbd1209d6cbfd5d1ce1510265cb1d85a818",
"body": "TypeScript: 148 tests (14 files) — client, types, intelligence_helpers, telemetry, resources (intent/memory/policies/connections/executions/traces/webhooks/failures/skills), integration\nPython: 196 tests (12 files) — client, types, redaction, telemetry, resources (intent/memory/policies/connections/\n[…]\nntegration\nGo: 62 tests (9 files) — client, types, intent, memory, policies, connections, intelligence, assess, setup\n\nAll tests use sandbox mode exclusively — zero network calls, zero API keys needed",
"is_bot": false,
"headline": "test: add comprehensive test suites for all three SDKs",
"author_name": "timothy-billingrails",
"author_login": "timothy-billingrails",
"committed_at": "2026-06-18T00:25:09Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "bd12a72f1e7fd2a815c29ecca510a460240b8665",
"body": "…verifySignature()\n\nError subclasses:\n- CadreenBlockedError — thrown by intent.invoke() when governance blocks\n action. Carries reason_code, policy_id, intelligence, traceId.\n- CadreenClarifyError — thrown by intent.invoke() when system needs\n clarification. Carries questions, conversationId, inte\n[…]\nMAC-SHA256 comparison\n- Export webhooks property on Cadreen class\n\nOther:\n- Add @types/node as dev dependency for crypto module types\n- Export CadreenBlockedError and CadreenClarifyError from index.ts",
"is_bot": false,
"headline": "feat(ts-sdk): add CadreenBlockedError, CadreenClarifyError, webhooks.…",
"author_name": "timothy-billingrails",
"author_login": "timothy-billingrails",
"committed_at": "2026-06-17T14:08:33Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "ab99890d13797636196c93c02eade1c596975fe3",
"body": "CRITICAL:\n- TS SDK: added missing type exports (CatalogResponse, InstallResponse,\n ReplayResult, HandoffPacket, PromoteResult, SetupProposal)\n- Python SDK: added missing marketplace type exports\n- Python SDK: policies.create/evaluate/guardrails.check/add use kwargs\n (consistent with memory.remember, connections.register_openapi, etc.)\n- Go SDK: removed omitempty from Featured/Popularity fields\n- Python README: fixed to use kwargs style",
"is_bot": false,
"headline": "fix: final QA — missing exports, kwargs consistency, port matching",
"author_name": "timothy-billingrails",
"author_login": "timothy-billingrails",
"committed_at": "2026-06-17T00:20:40Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b3d6b1dcf7a64ee456b60561eb36bb531714b6b7",
"body": "CRITICAL:\n- Python: setup() crash fixed (json= → positional arg)\n- Python: catalog() now parses tags field\n- TS: CatalogIntegration missing category field added\n- All SDKs: removed Composio types, methods, imports, exports\n\nREADME fixes:\n- Python: fixed broken examples (intent→ask, policy/memory signatures)\n- TS: fixed property paths (result.policy.reason→result.reason_code)\n- Both: removed provider name leaks, updated changelog",
"is_bot": false,
"headline": "fix: comprehensive QA — remove Composio, fix types, fix examples",
"author_name": "timothy-billingrails",
"author_login": "timothy-billingrails",
"committed_at": "2026-06-16T23:58:54Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ad8d532f6ef9029d594dba811fd6b5cb8d260882",
"body": "…field\n\nCRITICAL: Python SDK — add missing ComposioToolkit import (search_composio crashed)\n\nWARNING:\n- SearchComposioResponse: field renamed toolkits (was results, matched backend)\n- CatalogIntegration: added tags field (Go backend returns it)\n- Python connections.py: search_composio uses toolkits key",
"is_bot": false,
"headline": "fix: QA findings — missing import, field name mismatch, missing tags …",
"author_name": "timothy-billingrails",
"author_login": "timothy-billingrails",
"committed_at": "2026-06-16T23:36:15Z",
"body_truncated": false,
"is_coding_agent": false
}
],
"releases_count": 11,
"commits_last_year": 113,
"latest_release_at": "2026-07-21T07:39:27Z",
"latest_release_tag": "cli-v0.4.2",
"releases_from_tags": false,
"days_since_last_push": 1,
"active_weeks_last_year": 7,
"days_since_latest_release": 2,
"mean_days_between_releases": 3.4
},
"community": {
"has_readme": true,
"has_license": true,
"has_description": true,
"has_contributing": false,
"health_percentage": 42,
"has_issue_template": false,
"has_code_of_conduct": false,
"has_pull_request_template": false
},
"ecosystem": {
"packages": [
{
"name": "github.com/timothy-billingrails/cadreen-sdks/go",
"exists": true,
"license": null,
"keywords": [],
"ecosystem": "go",
"matches_repo": true,
"registry_url": "https://pkg.go.dev/github.com/timothy-billingrails/cadreen-sdks/go",
"is_deprecated": false,
"latest_version": "v0.7.2",
"repository_url": "https://github.com/timothy-billingrails/cadreen-sdks",
"versions_count": 12,
"total_downloads": null,
"dependents_count": null,
"deprecation_note": null,
"maintainers_count": null,
"monthly_downloads": null,
"first_published_at": null,
"latest_published_at": "2026-07-21T07:06:33Z",
"latest_version_yanked": null,
"days_since_latest_publish": 2
},
{
"name": "@cadreen/mcp",
"exists": true,
"license": "MIT",
"keywords": [],
"ecosystem": "npm",
"matches_repo": null,
"registry_url": "https://www.npmjs.com/package/@cadreen/mcp",
"is_deprecated": false,
"latest_version": "0.1.2",
"repository_url": null,
"versions_count": 2,
"total_downloads": null,
"dependents_count": null,
"deprecation_note": null,
"maintainers_count": 1,
"monthly_downloads": 226,
"first_published_at": "2026-07-14T07:58:25.705000Z",
"latest_published_at": "2026-07-21T07:30:59.618000Z",
"latest_version_yanked": null,
"days_since_latest_publish": 2
},
{
"name": "cadreen-sdk",
"exists": true,
"license": "MIT",
"keywords": [],
"ecosystem": "pypi",
"matches_repo": null,
"registry_url": "https://pypi.org/project/cadreen-sdk/",
"is_deprecated": false,
"latest_version": "0.7.2",
"repository_url": null,
"versions_count": 15,
"total_downloads": null,
"dependents_count": null,
"deprecation_note": null,
"maintainers_count": null,
"monthly_downloads": null,
"first_published_at": "2026-06-08T00:53:44.218490Z",
"latest_published_at": "2026-07-21T07:34:42.511327Z",
"latest_version_yanked": null,
"days_since_latest_publish": 2
},
{
"name": "@cadreen/sdk",
"exists": true,
"license": "MIT",
"keywords": [
"cadreen",
"sdk",
"intelligence",
"automation",
"governance"
],
"ecosystem": "npm",
"matches_repo": null,
"registry_url": "https://www.npmjs.com/package/@cadreen/sdk",
"is_deprecated": false,
"latest_version": "0.7.2",
"repository_url": null,
"versions_count": 14,
"total_downloads": null,
"dependents_count": null,
"deprecation_note": null,
"maintainers_count": 1,
"monthly_downloads": 1456,
"first_published_at": "2026-06-08T01:01:57.448000Z",
"latest_published_at": "2026-07-21T07:29:43.044000Z",
"latest_version_yanked": null,
"days_since_latest_publish": 2
},
{
"name": "@cadreen/cli",
"exists": true,
"license": "UNLICENSED",
"keywords": [
"cadreen",
"cli",
"governance",
"memory",
"intelligence",
"openai",
"ai",
"automation",
"orchestration",
"llm",
"agent",
"tool-calling",
"policy"
],
"ecosystem": "npm",
"matches_repo": true,
"registry_url": "https://www.npmjs.com/package/@cadreen/cli",
"is_deprecated": false,
"latest_version": "0.4.2",
"repository_url": "https://github.com/timothy-billingrails/cadreen-sdks",
"versions_count": 11,
"total_downloads": null,
"dependents_count": null,
"deprecation_note": null,
"maintainers_count": 1,
"monthly_downloads": 1469,
"first_published_at": "2026-06-20T02:01:01.965000Z",
"latest_published_at": "2026-07-21T07:32:17.803000Z",
"latest_version_yanked": null,
"days_since_latest_publish": 2
}
]
},
"popularity": {
"forks": 0,
"stars": 0,
"watchers": 0,
"fork_history": {
"days": [],
"complete": true,
"collected": 0,
"total_forks": 0
},
"star_history": {
"days": [],
"complete": true,
"collected": 0,
"total_stars": 0,
"collected_at": null
},
"open_issues_and_prs": 0
},
"ai_readiness": {
"has_nix": false,
"example_dirs": [],
"has_llms_txt": false,
"has_dockerfile": false,
"has_mcp_signal": true,
"bootstrap_files": [],
"api_schema_files": [],
"has_devcontainer": false,
"typecheck_configs": [
"mcp/tsconfig.json",
"python/cadreen/py.typed",
"typescript/create-cadreen-app/template/tsconfig.json",
"typescript/tsconfig.json"
],
"toolchain_manifests": [
"go/go.mod"
],
"largest_source_bytes": 51821,
"source_files_sampled": 174,
"oversized_source_files": 0,
"agent_instruction_files": [],
"agent_instruction_max_bytes": null
},
"dependencies": {
"manifests": [
"go/go.mod",
"mcp/package.json",
"npm-cadreen/package.json",
"python/pyproject.toml",
"typescript/package.json"
],
"advisories": {
"error": null,
"scope": "published_package",
"source": "osv",
"findings": [
{
"name": "@hono/node-server",
"direct": false,
"version": "1.19.14",
"severity": "moderate",
"ecosystem": "npm",
"cvss_score": 5.9,
"advisory_ids": [
"GHSA-frvp-7c67-39w9"
],
"fixed_version": "2.0.5",
"advisory_count": 1,
"oldest_advisory_days": 2
}
],
"collected": true,
"malicious": [],
"truncated": false,
"by_severity": {
"moderate": 1
},
"advisory_count": 1,
"affected_count": 1,
"assessed_count": 95,
"malicious_count": 0,
"assessed_package": "npm:@cadreen/mcp@0.1.2",
"unassessed_count": 0,
"direct_affected_count": 0
},
"ecosystems": [
"go",
"npm",
"pypi"
],
"dependencies": [
{
"name": "github.com/charmbracelet/bubbles",
"manifest": "go/go.mod",
"ecosystem": "go",
"version_constraint": "v1.0.0"
},
{
"name": "github.com/charmbracelet/bubbletea",
"manifest": "go/go.mod",
"ecosystem": "go",
"version_constraint": "v1.3.10"
},
{
"name": "github.com/charmbracelet/glamour",
"manifest": "go/go.mod",
"ecosystem": "go",
"version_constraint": "v1.0.0"
},
{
"name": "github.com/charmbracelet/lipgloss",
"manifest": "go/go.mod",
"ecosystem": "go",
"version_constraint": "v1.1.1-0.20250404203927-76690c660834"
},
{
"name": "github.com/fatih/color",
"manifest": "go/go.mod",
"ecosystem": "go",
"version_constraint": "v1.19.0"
},
{
"name": "github.com/spf13/cobra",
"manifest": "go/go.mod",
"ecosystem": "go",
"version_constraint": "v1.10.2"
},
{
"name": "@modelcontextprotocol/sdk",
"manifest": "mcp/package.json",
"ecosystem": "npm",
"version_constraint": "^1.0.0"
},
{
"name": "zod",
"manifest": "mcp/package.json",
"ecosystem": "npm",
"version_constraint": "^3.22.0"
},
{
"name": "httpx",
"manifest": "python/pyproject.toml",
"ecosystem": "pypi",
"version_constraint": ">=0.25"
},
{
"name": "httpx-sse",
"manifest": "python/pyproject.toml",
"ecosystem": "pypi",
"version_constraint": ">=0.4"
}
],
"all_dependencies": {
"error": "GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository",
"source": null,
"packages": [],
"collected": false,
"truncated": false,
"total_count": null,
"direct_count": null,
"indirect_count": null
}
},
"maintainership": {
"issues": {
"open_prs": 0,
"merged_prs": 3,
"open_issues": 0,
"closed_ratio": null,
"closed_issues": 0,
"closed_unmerged_prs": 1
},
"bus_factor": 1,
"bot_contributors": 1,
"top_contributors": [
{
"type": "User",
"login": "timothy-billingrails",
"commits": 105,
"avatar_url": "https://avatars.githubusercontent.com/u/135520596?v=4"
}
],
"contributors_sampled": 1,
"top_contributor_share": 1
},
"quality_signals": {
"has_ci": true,
"has_tests": true,
"ci_workflows": [
"release-cli.yml"
],
"has_docs_dir": false,
"linter_configs": [],
"has_editorconfig": false,
"has_linter_config": false,
"has_precommit_config": false
},
"security_signals": {
"lockfiles": [
"go.sum",
"package-lock.json"
],
"scorecard": {
"checks": [
{
"name": "Binary-Artifacts",
"score": 10,
"reason": "no binaries found in the repo",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#binary-artifacts"
},
{
"name": "Branch-Protection",
"score": 0,
"reason": "branch protection not enabled on development/release branches",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#branch-protection"
},
{
"name": "CI-Tests",
"score": 3,
"reason": "1 out of 3 merged PRs checked by a CI test -- score normalized to 3",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#ci-tests"
},
{
"name": "CII-Best-Practices",
"score": 0,
"reason": "no effort to earn an OpenSSF best practices badge detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#cii-best-practices"
},
{
"name": "Code-Review",
"score": 0,
"reason": "Found 0/20 approved changesets -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#code-review"
},
{
"name": "Contributors",
"score": 0,
"reason": "project has 0 contributing companies or organizations -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#contributors"
},
{
"name": "Dangerous-Workflow",
"score": 10,
"reason": "no dangerous workflow patterns detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dangerous-workflow"
},
{
"name": "Dependency-Update-Tool",
"score": 0,
"reason": "no update tool detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dependency-update-tool"
},
{
"name": "Fuzzing",
"score": 0,
"reason": "project is not fuzzed",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#fuzzing"
},
{
"name": "License",
"score": 10,
"reason": "license file detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#license"
},
{
"name": "Maintained",
"score": 0,
"reason": "project was created within the last 90 days. Please review its contents carefully",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#maintained"
},
{
"name": "Packaging",
"score": null,
"reason": "packaging workflow not detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#packaging"
},
{
"name": "Pinned-Dependencies",
"score": 0,
"reason": "dependency not pinned by hash detected -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#pinned-dependencies"
},
{
"name": "SAST",
"score": 0,
"reason": "SAST tool is not run on all commits -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#sast"
},
{
"name": "Security-Policy",
"score": 0,
"reason": "security policy file not detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#security-policy"
},
{
"name": "Signed-Releases",
"score": 0,
"reason": "Project has not signed or included provenance with any releases.",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#signed-releases"
},
{
"name": "Token-Permissions",
"score": 0,
"reason": "detected GitHub workflow tokens with excessive permissions",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#token-permissions"
},
{
"name": "Vulnerabilities",
"score": 0,
"reason": "19 existing vulnerabilities detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#vulnerabilities"
}
],
"commit": "75a31c6dbffd388c876df2275485b7e48f5cf4a8",
"ran_at": "2026-07-23T20:15:35Z",
"aggregate_score": 2.1,
"scorecard_version": "v5.5.0"
},
"has_codeql_workflow": false,
"has_security_policy": false,
"has_dependabot_config": false
},
"contribution_flow": {
"collected": true,
"ci_last_run_at": "2026-07-22T07:50:10Z",
"oldest_open_prs": [],
"last_merged_pr_at": "2026-07-21T07:06:33Z",
"ci_last_conclusion": null,
"oldest_open_issues": []
}
},
"config": {
"disabled_metrics": [],
"disabled_categories": [],
"disabled_components": {}
},
"source": {
"url": "https://github.com/timothy-billingrails/cadreen-sdks",
"host": "github.com",
"name": "cadreen-sdks",
"owner": "timothy-billingrails"
},
"metrics": {
"overall": {
"key": "overall",
"band": "at_risk",
"name": "Overall health",
"note": null,
"notes": [],
"value": 48,
"inputs": {
"security": 34,
"vitality": 71,
"community": 32,
"governance": 42,
"engineering": 54
},
"components": []
},
"categories": [
{
"key": "vitality",
"band": "good",
"name": "Vitality",
"value": 71,
"weight": 0.22,
"metrics": [
{
"key": "development_activity",
"band": "moderate",
"name": "Development activity",
"note": null,
"notes": [],
"value": 59,
"inputs": {
"commits_last_year": 113,
"human_commit_share": 0.92,
"days_since_last_push": 1,
"active_weeks_last_year": 7
},
"components": [
{
"key": "push_recency",
"name": "Push recency",
"detail": "last push 1 days ago",
"points": 36,
"status": "met",
"details": [
{
"code": "push_recency",
"params": {
"days": 1
}
}
],
"max_points": 36
},
{
"key": "commit_cadence",
"name": "Commit cadence",
"detail": "7/52 weeks with commits",
"points": 4.8,
"status": "partial",
"details": [
{
"code": "commit_cadence_weeks",
"params": {
"weeks": 7
}
}
],
"max_points": 36
},
{
"key": "commit_volume",
"name": "Commit volume",
"detail": "113 commits in the last year",
"points": 18,
"status": "met",
"details": [
{
"code": "commits_last_year",
"params": {
"count": 113
}
}
],
"max_points": 18
},
{
"key": "openssf_scorecard_maintained",
"name": "OpenSSF Scorecard: Maintained",
"detail": "project was created within the last 90 days. Please review its contents carefully",
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
}
]
},
{
"key": "release_discipline",
"band": "excellent",
"name": "Release discipline",
"note": null,
"notes": [],
"value": 90,
"inputs": {
"releases_count": 11,
"latest_release_tag": "cli-v0.4.2",
"releases_from_tags": false,
"days_since_latest_release": 2,
"mean_days_between_releases": 3.4
},
"components": [
{
"key": "ships_releases",
"name": "Ships releases",
"detail": "11 releases published",
"points": 27,
"status": "met",
"details": [
{
"code": "releases_published",
"params": {
"count": 11
}
}
],
"max_points": 27
},
{
"key": "release_recency",
"name": "Release recency",
"detail": "latest release 2 days ago",
"points": 36,
"status": "met",
"details": [
{
"code": "release_recency",
"params": {
"days": 2
}
}
],
"max_points": 36
},
{
"key": "release_cadence",
"name": "Release cadence",
"detail": "a release every ~3.4 days",
"points": 27,
"status": "met",
"details": [
{
"code": "release_cadence",
"params": {
"gap": 3.4
}
}
],
"max_points": 27
},
{
"key": "openssf_scorecard_signed_releases",
"name": "OpenSSF Scorecard: Signed-Releases",
"detail": "Project has not signed or included provenance with any releases.",
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
}
]
},
{
"key": "abandonment",
"band": "excellent",
"name": "Abandonment",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"cap": null,
"state": "unverified",
"guards": [],
"signals": [],
"red_flag": false,
"multiplier_pct": 100,
"declared_reason": null,
"unverified_reason": "repository_too_young",
"unanswered_open_prs": null,
"unanswered_open_issues": null,
"days_since_last_merged_pr": null,
"days_since_last_human_commit": null,
"days_since_last_human_commit_is_floor": false
},
"components": [
{
"key": "project_is_still_maintained",
"name": "Project is still maintained",
"detail": "maintenance record not established from the collected data",
"points": 100,
"status": "met",
"details": [
{
"code": "abandonment_unverified",
"params": {}
}
],
"max_points": 100
}
]
}
],
"description": "Is the project alive — is code being written and are releases shipping?"
},
{
"key": "community",
"band": "at_risk",
"name": "Community & Adoption",
"value": 32,
"weight": 0.18,
"metrics": [
{
"key": "popularity",
"band": "critical",
"name": "Popularity & adoption",
"note": null,
"notes": [],
"value": 1,
"inputs": {
"forks": 0,
"stars": 0,
"watchers": 0,
"growth_state": "unverified",
"growth_factor_pct": 100,
"growth_unverified_reason": "no_history"
},
"components": [
{
"key": "stars",
"name": "Stars",
"detail": "0 stars",
"points": 0,
"status": "missed",
"details": [
{
"code": "stars",
"params": {
"count": 0
}
}
],
"max_points": 60
},
{
"key": "forks",
"name": "Forks",
"detail": "0 forks",
"points": 0,
"status": "missed",
"details": [
{
"code": "forks",
"params": {
"count": 0
}
}
],
"max_points": 25
},
{
"key": "watchers",
"name": "Watchers",
"detail": "0 watchers",
"points": 0,
"status": "missed",
"details": [
{
"code": "watchers",
"params": {
"count": 0
}
}
],
"max_points": 15
}
]
},
{
"key": "community_health",
"band": "moderate",
"name": "Community health",
"note": null,
"notes": [],
"value": 50,
"inputs": {
"has_readme": true,
"has_license": true,
"has_contributing": false,
"has_issue_template": false,
"has_code_of_conduct": false,
"has_pull_request_template": false
},
"components": [
{
"key": "readme",
"name": "README",
"detail": null,
"points": 22.5,
"status": "met",
"details": [],
"max_points": 22.5
},
{
"key": "license",
"name": "License",
"detail": "recognized license (MIT)",
"points": 22.5,
"status": "met",
"details": [
{
"code": "license_standard",
"params": {}
},
{
"code": "license_spdx",
"params": {
"spdx": "MIT"
}
}
],
"max_points": 22.5
},
{
"key": "contributing_guide",
"name": "CONTRIBUTING guide",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 18
},
{
"key": "code_of_conduct",
"name": "Code of conduct",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 13.5
},
{
"key": "issue_template",
"name": "Issue template",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.2
},
{
"key": "pr_template",
"name": "PR template",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 6.3
}
]
},
{
"key": "ecosystem_adoption",
"band": "moderate",
"name": "Ecosystem adoption (downloads)",
"note": "Excluded from scoring (no data or not applicable): Registry dependents. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"registry_dependents"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 58,
"inputs": {
"packages": [
"github.com/timothy-billingrails/cadreen-sdks/go",
"@cadreen/mcp",
"cadreen-sdk",
"@cadreen/sdk",
"@cadreen/cli"
],
"dependents": null,
"ecosystems": "go, npm, pypi",
"total_downloads": null,
"monthly_downloads": 3151
},
"components": [
{
"key": "monthly_downloads",
"name": "Monthly downloads",
"detail": "3,151 downloads/month across go, npm, pypi",
"points": 46.6,
"status": "partial",
"details": [
{
"code": "downloads_monthly",
"params": {
"count": 3151,
"ecosystems": "go, npm, pypi"
}
}
],
"max_points": 80
},
{
"key": "registry_dependents",
"name": "Registry dependents",
"detail": "not reported by this ecosystem",
"points": 0,
"status": "excluded",
"details": [
{
"code": "not_reported_by_this_ecosystem",
"params": {}
}
],
"max_points": 20
}
]
}
],
"description": "Does the project have users, downloads, attention, and a welcoming setup for contributors?"
},
{
"key": "governance",
"band": "at_risk",
"name": "Sustainability & Governance",
"value": 42,
"weight": 0.24,
"metrics": [
{
"key": "maintainer_resilience",
"band": "critical",
"name": "Maintainer resilience (bus factor)",
"note": null,
"notes": [],
"value": 10,
"inputs": {
"bus_factor": 1,
"contributors_sampled": 1,
"top_contributor_share": 1
},
"components": [
{
"key": "bus_factor",
"name": "Bus factor",
"detail": "1 contributor(s) cover half of all commits",
"points": 9,
"status": "partial",
"details": [
{
"code": "bus_factor",
"params": {
"count": 1
}
}
],
"max_points": 54
},
{
"key": "commit_distribution",
"name": "Commit distribution",
"detail": "top contributor authored 100% of commits",
"points": 0,
"status": "missed",
"details": [
{
"code": "top_contributor_share",
"params": {
"share": 100
}
}
],
"max_points": 22.5
},
{
"key": "contributor_breadth",
"name": "Contributor breadth",
"detail": "1 contributors",
"points": 1.4,
"status": "partial",
"details": [
{
"code": "contributors_sampled",
"params": {
"count": 1
}
}
],
"max_points": 13.5
},
{
"key": "openssf_scorecard_contributors",
"name": "OpenSSF Scorecard: Contributors",
"detail": "project has 0 contributing companies or organizations -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
}
]
},
{
"key": "responsiveness",
"band": "moderate",
"name": "Issue & PR responsiveness",
"note": "Excluded from scoring (no data or not applicable): Issue resolution. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"issue_resolution"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 54,
"inputs": {
"merged_prs": 3,
"open_issues": 0,
"closed_issues": 0,
"issue_closed_ratio": null,
"closed_unmerged_prs": 1
},
"components": [
{
"key": "issue_resolution",
"name": "Issue resolution",
"detail": "no issues or no data",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_issues_or_data",
"params": {}
}
],
"max_points": 46.75
},
{
"key": "pr_acceptance",
"name": "PR acceptance",
"detail": "3/4 decided PRs merged",
"points": 28.7,
"status": "partial",
"details": [
{
"code": "decided_prs_merged",
"params": {
"merged": 3,
"decided": 4
}
}
],
"max_points": 38.25
},
{
"key": "openssf_scorecard_code_review",
"name": "OpenSSF Scorecard: Code-Review",
"detail": "Found 0/20 approved changesets -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
}
]
},
{
"key": "stewardship",
"band": "critical",
"name": "Ownership & stewardship",
"note": "Excluded from scoring (no data or not applicable): Verified domain. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"verified_domain"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 23,
"inputs": {
"followers": 0,
"owner_type": "User",
"is_verified": null,
"owner_login": "timothy-billingrails",
"public_repos": 1,
"account_age_days": 1145
},
"components": [
{
"key": "ownership_backing",
"name": "Ownership backing",
"detail": "personal (user) account",
"points": 10,
"status": "partial",
"details": [
{
"code": "owner_personal",
"params": {}
}
],
"max_points": 30
},
{
"key": "verified_domain",
"name": "Verified domain",
"detail": "not applicable to user accounts",
"points": 0,
"status": "excluded",
"details": [
{
"code": "not_applicable_to_user_accounts",
"params": {}
}
],
"max_points": 20
},
{
"key": "owner_reach",
"name": "Owner reach",
"detail": "0 followers of timothy-billingrails",
"points": 0,
"status": "missed",
"details": [
{
"code": "owner_followers",
"params": {
"count": 0,
"login": "timothy-billingrails"
}
}
],
"max_points": 25
},
{
"key": "track_record",
"name": "Track record",
"detail": "1 public repos, account ~3 yr old",
"points": 8.5,
"status": "partial",
"details": [
{
"code": "public_repos",
"params": {
"count": 1
}
},
{
"code": "account_age_years",
"params": {
"years": 3
}
}
],
"max_points": 25
}
]
},
{
"key": "package_maintenance",
"band": "excellent",
"name": "Package maintenance",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"packages": [
"github.com/timothy-billingrails/cadreen-sdks/go",
"@cadreen/mcp",
"cadreen-sdk",
"@cadreen/sdk",
"@cadreen/cli"
],
"ecosystems": "go, npm, pypi",
"any_deprecated": false,
"min_days_since_publish": 2
},
"components": [
{
"key": "published_resolvable",
"name": "Published & resolvable",
"detail": "5 package(s) on go, npm, pypi",
"points": 25,
"status": "met",
"details": [
{
"code": "packages_published",
"params": {
"count": 5,
"ecosystems": "go, npm, pypi"
}
}
],
"max_points": 25
},
{
"key": "publish_recency",
"name": "Publish recency",
"detail": "latest publish 2 days ago",
"points": 35,
"status": "met",
"details": [
{
"code": "publish_recency",
"params": {
"days": 2
}
}
],
"max_points": 35
},
{
"key": "version_history",
"name": "Version history",
"detail": "15 published versions",
"points": 20,
"status": "met",
"details": [
{
"code": "published_versions",
"params": {
"count": 15
}
}
],
"max_points": 20
},
{
"key": "not_deprecated",
"name": "Not deprecated",
"detail": "active, not deprecated or yanked",
"points": 20,
"status": "met",
"details": [
{
"code": "package_not_deprecated",
"params": {}
}
],
"max_points": 20
}
]
}
],
"description": "Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?"
},
{
"key": "engineering",
"band": "moderate",
"name": "Engineering Quality",
"value": 54,
"weight": 0.2,
"metrics": [
{
"key": "engineering_practices",
"band": "moderate",
"name": "Engineering practices",
"note": null,
"notes": [],
"value": 54,
"inputs": {
"has_ci": true,
"has_tests": true,
"has_editorconfig": false,
"has_linter_config": false,
"has_precommit_config": false
},
"components": [
{
"key": "ci_workflows",
"name": "CI workflows",
"detail": "1 workflow(s)",
"points": 24,
"status": "met",
"details": [
{
"code": "ci_workflows",
"params": {
"count": 1
}
}
],
"max_points": 24
},
{
"key": "tests_present",
"name": "Tests present",
"detail": null,
"points": 24,
"status": "met",
"details": [],
"max_points": 24
},
{
"key": "linter_config",
"name": "Linter config",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 16
},
{
"key": "pre_commit_hooks",
"name": "Pre-commit hooks",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 9.6
},
{
"key": "editorconfig",
"name": ".editorconfig",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 6.4
},
{
"key": "openssf_scorecard_ci_tests",
"name": "OpenSSF Scorecard: CI-Tests",
"detail": "1 out of 3 merged PRs checked by a CI test -- score normalized to 3",
"points": 6,
"status": "partial",
"details": [],
"max_points": 20
}
]
},
{
"key": "documentation",
"band": "moderate",
"name": "Documentation",
"note": null,
"notes": [],
"value": 55,
"inputs": {
"topics": [],
"has_wiki": false,
"homepage": "https://cadreen.com",
"has_readme": true,
"has_docs_dir": false,
"has_description": true
},
"components": [
{
"key": "readme",
"name": "README",
"detail": null,
"points": 30,
"status": "met",
"details": [],
"max_points": 30
},
{
"key": "documentation_directory",
"name": "Documentation directory",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 25
},
{
"key": "documentation_homepage_site",
"name": "Documentation / homepage site",
"detail": "https://cadreen.com",
"points": 15,
"status": "met",
"details": [],
"max_points": 15
},
{
"key": "repository_description",
"name": "Repository description",
"detail": null,
"points": 10,
"status": "met",
"details": [],
"max_points": 10
},
{
"key": "topics",
"name": "Topics",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
},
{
"key": "wiki",
"name": "Wiki",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
}
]
}
],
"description": "Are baseline engineering and documentation practices in place?"
},
{
"key": "security",
"band": "at_risk",
"name": "Security",
"value": 34,
"weight": 0.16,
"metrics": [
{
"key": "security_posture",
"band": "critical",
"name": "Security posture",
"note": "Excluded from scoring (no data or not applicable): Packaging. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"packaging"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 21,
"inputs": {
"source": "openssf_scorecard",
"checks_evaluated": 17,
"scorecard_version": "v5.5.0",
"checks_inconclusive": 1,
"scorecard_aggregate": 2.1
},
"components": [
{
"key": "binary_artifacts",
"name": "Binary-Artifacts",
"detail": "no binaries found in the repo",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "branch_protection",
"name": "Branch-Protection",
"detail": "branch protection not enabled on development/release branches",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "ci_tests",
"name": "CI-Tests",
"detail": "1 out of 3 merged PRs checked by a CI test -- score normalized to 3",
"points": 0.8,
"status": "partial",
"details": [],
"max_points": 2.5
},
{
"key": "cii_best_practices",
"name": "CII-Best-Practices",
"detail": "no effort to earn an OpenSSF best practices badge detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 2.5
},
{
"key": "code_review",
"name": "Code-Review",
"detail": "Found 0/20 approved changesets -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "contributors",
"name": "Contributors",
"detail": "project has 0 contributing companies or organizations -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 2.5
},
{
"key": "dangerous_workflow",
"name": "Dangerous-Workflow",
"detail": "no dangerous workflow patterns detected",
"points": 10,
"status": "met",
"details": [],
"max_points": 10
},
{
"key": "dependency_update_tool",
"name": "Dependency-Update-Tool",
"detail": "no update tool detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "fuzzing",
"name": "Fuzzing",
"detail": "project is not fuzzed",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "license",
"name": "License",
"detail": "license file detected",
"points": 2.5,
"status": "met",
"details": [],
"max_points": 2.5
},
{
"key": "maintained",
"name": "Maintained",
"detail": "project was created within the last 90 days. Please review its contents carefully",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "packaging",
"name": "Packaging",
"detail": "packaging workflow not detected",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 5
},
{
"key": "pinned_dependencies",
"name": "Pinned-Dependencies",
"detail": "dependency not pinned by hash detected -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "sast",
"name": "SAST",
"detail": "SAST tool is not run on all commits -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "security_policy",
"name": "Security-Policy",
"detail": "security policy file not detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "signed_releases",
"name": "Signed-Releases",
"detail": "Project has not signed or included provenance with any releases.",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "token_permissions",
"name": "Token-Permissions",
"detail": "detected GitHub workflow tokens with excessive permissions",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "vulnerabilities",
"name": "Vulnerabilities",
"detail": "19 existing vulnerabilities detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
}
]
},
{
"key": "dependency_advisories",
"band": "excellent",
"name": "Dependency advisories",
"note": "Matched the npm:@cadreen/mcp@0.1.2 runtime dependency closure — what installing the published package pulls in — 95 packages. Reachability is not analyzed.",
"notes": [
{
"code": "advisories_scope_published",
"params": {
"package": "npm:@cadreen/mcp@0.1.2",
"assessed": 95
}
},
{
"code": "advisories_reachability",
"params": {}
}
],
"value": 88,
"inputs": {
"source": "osv",
"advisories": 1,
"affected_packages": 1,
"assessed_packages": 95,
"unassessed_packages": 0,
"affected_by_severity": "moderate 1",
"direct_affected_packages": 0
},
"components": [
{
"key": "direct_dependencies_free_of_known_advisories",
"name": "Direct dependencies free of known advisories",
"detail": "no direct dependency carries a known advisory",
"points": 35,
"status": "met",
"details": [
{
"code": "no_direct_advisories",
"params": {}
}
],
"max_points": 35
},
{
"key": "indirect_dependencies_free_of_known_advisories",
"name": "Indirect dependencies free of known advisories",
"detail": "1 affected: @hono/node-server 1.19.14 (moderate 5.9)",
"points": 13.2,
"status": "partial",
"details": [
{
"code": "advisories_affected",
"params": {
"count": 1,
"packages": "@hono/node-server 1.19.14 (moderate 5.9)"
}
}
],
"max_points": 25
},
{
"key": "no_advisories_left_outstanding",
"name": "No advisories left outstanding",
"detail": "no advisory has been public longer than 90 days",
"points": 40,
"status": "met",
"details": [
{
"code": "advisories_none_stale",
"params": {
"days": 90
}
}
],
"max_points": 40
}
]
},
{
"key": "malicious_dependencies",
"band": "excellent",
"name": "Malicious dependencies",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"source": "osv",
"meaning": "reported as a malicious package by the OpenSSF corpus; the remedy is removal or moving off the compromised name, never an upgrade of the same artifact. Versions the registry has since pulled are listed but not scored",
"packages": [],
"red_flag": false,
"assessed_packages": 95,
"malicious_packages": 0,
"direct_malicious_packages": 0,
"withdrawn_malicious_packages": 0,
"installable_malicious_packages": 0
},
"components": [
{
"key": "no_dependency_reported_as_a_malicious_package",
"name": "No dependency reported as a malicious package",
"detail": "no dependency is reported as a malicious package",
"points": 100,
"status": "met",
"details": [
{
"code": "no_malicious_dependencies",
"params": {}
}
],
"max_points": 100
}
]
}
],
"description": "Are visible security and supply-chain practices strong, with no malicious dependency and no unresolved high-risk jurisdiction exposure?"
},
{
"key": "ai_readiness",
"band": "moderate",
"name": "AI Readiness",
"value": 52,
"weight": 0,
"metrics": [
{
"key": "ai_agent_context",
"band": "at_risk",
"name": "Agent context & guidance",
"note": null,
"notes": [],
"value": 40,
"inputs": {
"has_llms_txt": false,
"legible_history_share": 0.913,
"agent_instruction_files": [],
"agent_instruction_max_bytes": null
},
"components": [
{
"key": "agent_instructions",
"name": "Agent instructions",
"detail": "no CLAUDE.md / AGENTS.md / editor rules",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_agent_instructions",
"params": {}
}
],
"max_points": 45
},
{
"key": "machine_readable_docs_llms_txt",
"name": "Machine-readable docs (llms.txt)",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
},
{
"key": "legible_commit_history",
"name": "Legible commit history",
"detail": "84 of 92 human commits state their intent (structured subject or explanatory body)",
"points": 40,
"status": "met",
"details": [
{
"code": "legible_history",
"params": {
"legible": 84,
"sampled": 92
}
}
],
"max_points": 40
}
]
},
{
"key": "ai_verify_loop",
"band": "moderate",
"name": "Verify loop (build / test / typecheck)",
"note": null,
"notes": [],
"value": 56,
"inputs": {
"has_nix": false,
"has_tests": true,
"lockfiles": [
"go.sum",
"package-lock.json"
],
"has_dockerfile": false,
"typed_language": true,
"bootstrap_files": [],
"has_devcontainer": false,
"has_linter_config": false,
"typecheck_configs": [
"mcp/tsconfig.json",
"python/cadreen/py.typed",
"typescript/create-cadreen-app/template/tsconfig.json",
"typescript/tsconfig.json"
],
"agent_commit_share": 0,
"toolchain_manifests": [
"go/go.mod"
],
"dependency_bot_commit_share": 0
},
"components": [
{
"key": "one_command_bootstrap",
"name": "One-command bootstrap",
"detail": "go/go.mod (toolchain convention, no task runner)",
"points": 12.6,
"status": "partial",
"details": [
{
"code": "toolchain_convention",
"params": {
"files": "go/go.mod"
}
}
],
"max_points": 18
},
{
"key": "automated_tests",
"name": "Automated tests",
"detail": null,
"points": 22,
"status": "met",
"details": [],
"max_points": 22
},
{
"key": "lint_format_config",
"name": "Lint / format config",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 11
},
{
"key": "static_type_checking",
"name": "Static type checking",
"detail": "mcp/tsconfig.json, python/cadreen/py.typed, typescript/create-cadreen-app/template/tsconfig.json, typescript/tsconfig.json",
"points": 11,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "mcp/tsconfig.json, python/cadreen/py.typed, typescript/create-cadreen-app/template/tsconfig.json, typescript/tsconfig.json"
}
}
],
"max_points": 11
},
{
"key": "reproducible_environment",
"name": "Reproducible environment",
"detail": "lockfile",
"points": 10,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "lockfile"
}
}
],
"max_points": 10
},
{
"key": "demonstrated_agent_practice",
"name": "Demonstrated agent practice",
"detail": "no agent-authored commits among the last 100",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_agent_authored_commits",
"params": {
"sampled": 100
}
}
],
"max_points": 10
},
{
"key": "automated_maintenance",
"name": "Automated maintenance",
"detail": "no automated dependency updates observed",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_dependency_automation",
"params": {}
}
],
"max_points": 8
},
{
"key": "openssf_scorecard_pinned_dependencies",
"name": "OpenSSF Scorecard: Pinned-Dependencies",
"detail": "dependency not pinned by hash detected -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
}
]
},
{
"key": "ai_code_legibility",
"band": "excellent",
"name": "Code legibility for models",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"primary_language": "Go",
"largest_source_bytes": 51821,
"source_files_sampled": 174,
"oversized_source_files": 0
},
"components": [
{
"key": "type_checkable_code",
"name": "Type-checkable code",
"detail": "Go (statically typed)",
"points": 45,
"status": "met",
"details": [
{
"code": "statically_typed_language",
"params": {
"language": "Go"
}
}
],
"max_points": 45
},
{
"key": "manageable_file_sizes",
"name": "Manageable file sizes",
"detail": "0/174 source files over 60KB",
"points": 55,
"status": "met",
"details": [
{
"code": "oversized_source_files",
"params": {
"kb": 60,
"sampled": 174,
"oversized": 0
}
}
],
"max_points": 55
}
]
},
{
"key": "ai_interfaces",
"band": "critical",
"name": "Machine-readable interfaces",
"note": null,
"notes": [],
"value": 20,
"inputs": {
"example_dirs": [],
"has_mcp_signal": true,
"api_schema_files": []
},
"components": [
{
"key": "api_schema_openapi_graphql_proto",
"name": "API schema (OpenAPI/GraphQL/proto)",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 40
},
{
"key": "mcp_server",
"name": "MCP server",
"detail": null,
"points": 20,
"status": "met",
"details": [],
"max_points": 20
},
{
"key": "runnable_examples",
"name": "Runnable examples",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 40
}
]
}
],
"description": "How well is the repo equipped to be developed and maintained with AI coding agents? An independent, experimental badge — weight 0.0, so it is surfaced on its own and does not affect the overall health score."
}
],
"metrics_version": "1.13.0"
},
"warnings": [
"GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository"
],
"report_type": "repository",
"generated_at": "2026-07-23T20:15:44.200057Z",
"schema_version": "0.27.0",
"badge_url": "https://raw.githubusercontent.com/inspect-software/badges/main/v1/t/timothy-billingrails/cadreen-sdks.svg",
"full_name": "timothy-billingrails/cadreen-sdks",
"license_state": "standard",
"license_spdx": "MIT"
}