公开记录中等
软件健康报告模式 0.27.0 · 指标 1.13.0 · 2026-07-25 19:51 UTC
wintercms / wn-system-module
Read-only mirror of the System module for Winter CMS.
wintercms/wn-system-module 的健康指数为 100 分中的 54 分，处于「中等」区间。 其得分最高的类别是Vitality（66/100），最低的是Security（45/100）。 最近一次更新在今天。 近期的大部分工作由 2 位贡献者完成。
54
总分 / 100软件健康指数
指标归入加权类别，统一采用 1–100 量表。总体分先取类别加权平均；当公开证据触发高风险司法辖区政策时，评级会按政策调整，并设置 49（有风险）的上限。AI 就绪度不计入总体分。
54
优秀85-100堪称典范；基本满足所有检验标准
良好70-84健康；仅有轻微不足
中等50-69可接受，但存在明显不足；建议进行审查
存在风险30-49存在重大薄弱环节；采用时应保持审慎
危急1-29问题严重（项目被弃置、仅有单一维护者、缺乏基本工程规范）
评分画像
每条轴代表一个类别。形状比平均值更重要——健康的对象会填满整个图形，而“一峰一谷”式画像意味着某一维度的优势正掩盖另一维度的风险。
所有权
软件包生态系统
| 注册表 | 软件包 | 版本 | 月下载量 | 版本数 | 最近发布 | 标签 |
|---|---|---|---|---|---|---|
| Packagist | winter/wn-system-module | v1.2.12 | 4,134 | 26 | 155 天前 | systemwinterwinter-cms |
按类别列示的指标
活力
项目是否仍有生命——是否仍在编写代码，是否仍在发布版本？
66
开发活跃度
64中等
评分方式
| 36/36 | 推送新近度 — 最近一次推送于 0 天前 |
| 9/36 | 提交节奏 — 52 周中有 13 周有提交 |
| 12.2/18 | 提交量 — 最近一年 22 次提交 |
| 7/10 | OpenSSF Scorecard：Maintained — 9 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 7 |
所用输入
| commits_last_year | 22 |
| human_commit_share | 1 |
| days_since_last_push | 0 |
| active_weeks_last_year | 13 |
发布纪律
70良好
评分方式
| 16.2/27 | 有发布版本 — 26 个版本标签（无 GitHub 发布版本） |
| 27/36 | 发布时效 — 最近一次发布版本于 155 天前 |
| 19.8/27 | 发布节奏 — 约每 106.5 天发布一次 |
| 0/10 | OpenSSF Scorecard：Signed-Releases — 无数据 |
所用输入
| releases_count | 26 |
| latest_release_tag | v1.2.12 |
| releases_from_tags | 是 |
| days_since_latest_release | 155 |
| mean_days_between_releases | 106.5 |
已排除计分（无数据或不适用）：OpenSSF Scorecard：Signed-Releases。 其余权重已重新归一化。
社区与采用
项目是否拥有用户、下载量与关注度，并具备欢迎贡献者参与的配置？
52
流行度与采用
17危急
评分方式
| 7.7/60 | 星标 — 4 个星标 |
| 5.8/25 | 复刻 — 6 个复刻 |
| 3.3/15 | 关注者 — 5 位关注者 |
所用输入
| forks | 6 |
| stars | 4 |
| watchers | 5 |
| growth_state | unverified |
| growth_factor_pct | 100 |
| growth_unverified_reason | no_history |
社区健康
92优秀
评分方式
| 22.5/22.5 | README |
| 22.5/22.5 | 许可证 — 可识别的许可证（MIT） |
| 18/18 | CONTRIBUTING 指南 |
| 13.5/13.5 | 行为准则 |
| 0/7.2 | 议题模板 |
| 6.3/6.3 | PR 模板 |
所用输入
| has_readme | 是 |
| has_license | 是 |
| has_contributing | 是 |
| has_issue_template | 否 |
| has_code_of_conduct | 是 |
| has_pull_request_template | 是 |
生态采用（下载量）
54中等
评分方式
| 48.2/80 | 月度下载量 — packagist 合计每月 4,134 次下载 |
| 6/20 | 注册表被依赖数 — 7 个软件包依赖它 |
所用输入
| packages | winter/wn-system-module |
| dependents | 7 |
| ecosystems | packagist |
| total_downloads | 260,840 |
| monthly_downloads | 4,134 |
可持续性与治理
项目能否在其成员之外延续——巴士系数、响应能力、由谁支持，以及软件包的维护状况？
57
维护者韧性（巴士系数）
62中等
评分方式
| 25.2/54 | 巴士系数 — 2 位贡献者贡献了半数提交 |
| 13/22.5 | 提交分布 — 头号贡献者编写了 42% 的提交 |
| 13.5/13.5 | 贡献者广度 — 100 位贡献者 |
| 10/10 | OpenSSF Scorecard：Contributors — project has 34 contributing companies or organizations |
所用输入
| bus_factor | 2 |
| contributors_sampled | 100 |
| top_contributor_share | 0.424 |
议题与 PR 响应能力
1危急
评分方式
| 0/46.8 | 议题解决 — 没有议题或无数据 |
| 0/38.3 | PR 接受 — 已裁定的 PR 中 0/3 已合并 |
| 0/15 | OpenSSF Scorecard：Code-Review — Found 0/30 approved changesets -- score normalized to 0 |
所用输入
| merged_prs | 0 |
| open_issues | 0 |
| closed_issues | 0 |
| issue_closed_ratio | — |
| closed_unmerged_prs | 3 |
已排除计分（无数据或不适用）：议题解决。 其余权重已重新归一化。
所有权与托管责任
71良好
评分方式
| 30/30 | 所有权背书 — 组织持有 |
| 0/20 | 已验证域名 |
| 16.9/25 | 所有者影响力 — wintercms 有 223 位关注者 |
| 23.8/25 | 既往记录 — 77 个公开仓库，账户约 5 年 |
所用输入
| followers | 223 |
| owner_type | Organization |
| is_verified | — |
| owner_login | wintercms |
| public_repos | 77 |
| account_age_days | 1,969 |
软件包维护
100优秀
评分方式
| 25/25 | 已发布且可解析 — packagist 上有 1 个软件包 |
| 35/35 | 发布时效 — 最近一次发布于 155 天前 |
| 20/20 | 版本历史 — 26 个已发布版本 |
| 20/20 | 未被弃用 — 活跃，未被弃用或撤回 |
所用输入
| packages | winter/wn-system-module |
| ecosystems | packagist |
| any_deprecated | 否 |
| min_days_since_publish | 155 |
工程质量
基础的工程与文档实践是否到位？
46
工程实践
50中等
评分方式
| 0/24 | CI 工作流 |
| 24/24 | 存在测试 |
| 16/16 | Linter 配置 — .eslintrc.json |
| 0/9.6 | Pre-commit 钩子 |
| 0/6.4 | .editorconfig |
| 0/20 | OpenSSF Scorecard：CI-Tests — 无数据 |
所用输入
| has_ci | 否 |
| has_tests | 是 |
| has_editorconfig | 否 |
| has_linter_config | 是 |
| has_precommit_config | 否 |
已排除计分（无数据或不适用）：OpenSSF Scorecard：CI-Tests。 其余权重已重新归一化。
文档
40存在风险
评分方式
| 30/30 | README |
| 0/25 | 文档目录 |
| 0/15 | 文档 / 主页站点 |
| 10/10 | 仓库描述 |
| 0/10 | 主题标签 |
| 0/10 | Wiki |
所用输入
| topics | — |
| has_wiki | 否 |
| homepage | — |
| has_readme | 是 |
| has_docs_dir | 否 |
| has_description | 是 |
安全
可见的安全与供应链实践是否稳固，且不存在未解决的高风险司法辖区暴露？
45
安全态势
45存在风险
评分方式
| 7.5/7.5 | Binary-Artifacts — no binaries found in the repo |
| 0/7.5 | Branch-Protection — branch protection not enabled on development/release branches |
| 0/2.5 | CI-Tests — 无数据 |
| 0/2.5 | CII-Best-Practices — no effort to earn an OpenSSF best practices badge detected |
| 0/7.5 | Code-Review — Found 0/30 approved changesets -- score normalized to 0 |
| 2.5/2.5 | Contributors — project has 34 contributing companies or organizations |
| 0/10 | Dangerous-Workflow — 无数据 |
| 0/7.5 | Dependency-Update-Tool — no update tool detected |
| 0/5 | Fuzzing — project is not fuzzed |
| 2.5/2.5 | 许可证 — license file detected |
| 5.2/7.5 | Maintained — 9 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 7 |
| 0/5 | Packaging — 无数据 |
| 0/5 | Pinned-Dependencies — 无数据 |
| 0/5 | SAST — no SAST tool detected |
| 5/5 | Security-Policy — security policy file detected |
| 0/7.5 | Signed-Releases — 无数据 |
| 0/7.5 | Token-Permissions — 无数据 |
| 7.5/7.5 | Vulnerabilities — 0 existing vulnerabilities detected |
所用输入
| source | openssf_scorecard |
| checks_evaluated | 12 |
| scorecard_version | v5.5.0 |
| checks_inconclusive | 6 |
| scorecard_aggregate | 4.5 |
已排除计分（无数据或不适用）：ci_tests, dangerous_workflow, packaging, pinned_dependencies, signed_releases, token_permissions。 其余权重已重新归一化。
AI 就绪度
该仓库在多大程度上具备与 AI 编码代理协同开发与维护的条件？这是一枚独立的实验性徽章——权重为 0.0，因此单独呈现，不影响总体健康评分。
48
AI 代理上下文与指引
35存在风险
评分方式
| 0/45 | 代理指令 — 没有 CLAUDE.md / AGENTS.md / 编辑器规则 |
| 0/15 | 机器可读文档（llms.txt） |
| 35.2/40 | 可读的提交历史 — 100 次人类提交中有 66 次说明了意图（结构化标题或解释性正文） |
所用输入
| has_llms_txt | 否 |
| legible_history_share | 0.66 |
| agent_instruction_files | — |
| agent_instruction_max_bytes | — |
评分方式
| 18/18 | 一条命令的引导启动 — assets/ui/vendor/flot/Makefile |
| 22/22 | 自动化测试 |
| 11/11 | Lint / 格式化配置 — .eslintrc.json |
| 0/11 | 静态类型检查 |
| 0/10 | 可复现环境 |
| 2/10 | 已体现的代理实践 — 最近 100 次提交中有 1 次由代理编写或署名代理 |
| 0/8 | 自动化维护 — 未观察到自动依赖更新 |
| 0/10 | OpenSSF Scorecard：Pinned-Dependencies — 无数据 |
所用输入
| has_nix | 否 |
| has_tests | 是 |
| lockfiles | — |
| has_dockerfile | 否 |
| typed_language | 否 |
| bootstrap_files | assets/ui/vendor/flot/Makefile |
| has_devcontainer | 否 |
| has_linter_config | 是 |
| typecheck_configs | — |
| agent_commit_share | 0.01 |
| toolchain_manifests | — |
| dependency_bot_commit_share | 0 |
已排除计分（无数据或不适用）：OpenSSF Scorecard：Pinned-Dependencies。 其余权重已重新归一化。
面向模型的代码可读性
55中等
评分方式
| 0/45 | 可类型检查的代码 — PHP，未配置类型检查 |
| 54.9/55 | 可控的文件大小 — 采样的 664 个源文件中有 1 个超过 60KB |
所用输入
| primary_language | PHP |
| largest_source_bytes | 1,736,208 |
| source_files_sampled | 664 |
| oversized_source_files | 1 |
机器可读接口
40存在风险
评分方式
| 0/40 | API 模式（OpenAPI/GraphQL/proto） |
| 0/20 | MCP 服务器 |
| 40/40 | 可运行示例 — sample |
所用输入
| example_dirs | sample |
| has_mcp_signal | 否 |
| api_schema_files | — |
关键数据
4GitHub 星标
100贡献者
22最近 12 个月提交数
0距最近推送天数
26发布版本数
2巴士系数（bus factor）
0开放议题
npm, Packagist软件包生态系统数
数据采集警告
- Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token
- No resolved dependencies carried a version and a supported ecosystem
更多细节
Star 与 Fork 历史 0 ★ / 6 ⇿
0Star
6Fork
26发布
每颗 star 和每个 fork 的添加时间，来自 GitHub 并按天汇总。累计增长位于其构成来源——每日新增——的正上方，二者可相互对照：稳定的自然增长与短暂的突增形态截然不同。当这一差别可被衡量时，它会作为增长真实性予以报告。
主版本 0次版本 1修订 25
每个点涵盖 5 天。
OpenSSF Scorecard 4.5 / 10
4.5综合
来自开源项目 OpenSSF Scorecard 的独立、工具无关的安全评估。每项检查奖励的是安全实践本身，而非特定供应商的工具。Scorecard 无法判定的检查项标记为 不适用，并从安全评分中剔除（绝不按零分计）。
| 10 | Binary-Artifacts | no binaries found in the repo |
| 0 | Branch-Protection | branch protection not enabled on development/release branches |
| 不适用 | CI-Tests | no pull request found |
| 0 | CII-Best-Practices | no effort to earn an OpenSSF best practices badge detected |
| 0 | Code-Review | Found 0/30 approved changesets -- score normalized to 0 |
| 10 | Contributors | project has 34 contributing companies or organizations |
| 不适用 | Dangerous-Workflow | no workflows found |
| 0 | Dependency-Update-Tool | no update tool detected |
| 0 | Fuzzing | project is not fuzzed |
| 10 | License | license file detected |
| 7 | Maintained | 9 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 7 |
| 不适用 | Packaging | packaging workflow not detected |
| 不适用 | Pinned-Dependencies | no dependencies found |
| 0 | SAST | no SAST tool detected |
| 10 | Security-Policy | security policy file detected |
| 不适用 | Signed-Releases | no releases found |
| 不适用 | Token-Permissions | No tokens found |
| 10 | Vulnerabilities | 0 existing vulnerabilities detected |
直接依赖 3
| 注册表 | 软件包 | 版本约束 | 清单文件 |
|---|---|---|---|
| Packagist | laravel/framework | ^9.1 | composer.json |
| npm | @fortawesome/fontawesome-free | ^6.5.2 | package.json |
| npm | js-cookie | ^3.0.1 | package.json |
全部依赖 20
来自 GitHub 依赖图的完整解析依赖集合：3 个直接依赖与 17 个间接（传递）软件包。仓库提交锁文件时，传递闭包才是完整的。
| 注册表 | 软件包 | 版本 | 关系 |
|---|---|---|---|
| npm | @fortawesome/fontawesome-free | ^6.5.2 | 直接 |
| npm | js-cookie | ^3.0.1 | 直接 |
| Packagist | laravel/framework | — | 直接 |
| npm | @babel/core | ^7.16.0 | 间接 |
| npm | @babel/plugin-transform-runtime | ^7.16.4 | 间接 |
| npm | @babel/preset-env | ^7.16.4 | 间接 |
| npm | @babel/register | ^7.16.0 | 间接 |
| npm | @babel/runtime | ^7.16.3 | 间接 |
| npm | babel-plugin-module-resolver | ^5.0.0 | 间接 |
| npm | eslint | ^8.6.0 | 间接 |
| npm | eslint-config-airbnb-base | ^15.0.0 | 间接 |
| npm | eslint-plugin-import | ^2.25.4 | 间接 |
| npm | eslint-plugin-vue | ^8.5.0 | 间接 |
| npm | jest | ^27.4.3 | 间接 |
| npm | jsdom | ^18.1.1 | 间接 |
| npm | laravel-mix | ^6.0.34 | 间接 |
| npm | laravel-mix-polyfill | ^3.0.1 | 间接 |
| Packagist | composer/installers | — | 间接 |
| Packagist | composer/semver | — | 间接 |
| Packagist | php | — | 间接 |
依赖安全公告 未评估
本报告未能完成公告比对：No resolved dependencies carried a version and a supported ecosystem
原始 JSON 报告 机器可读
{
"data": {
"repo": {
"topics": [],
"is_fork": false,
"size_kb": 19805,
"has_wiki": false,
"homepage": null,
"languages": {
"CSS": 15031,
"PHP": 2309167,
"HTML": 11,
"Hack": 7487,
"Less": 418241,
"Blade": 787,
"JavaScript": 1067952
},
"pushed_at": "2026-07-25T19:44:02Z",
"created_at": "2021-03-05T20:52:05Z",
"owner_type": "Organization",
"updated_at": "2026-07-25T19:44:06Z",
"description": "Read-only mirror of the System module for Winter CMS.",
"is_archived": false,
"is_disabled": false,
"license_spdx": "MIT",
"default_branch": "develop",
"license_spdx_raw": "MIT",
"primary_language": "PHP",
"significant_languages": [
"PHP",
"JavaScript",
"Less"
]
},
"owner": {
"blog": "https://wintercms.com",
"name": "Winter CMS",
"type": "Organization",
"login": "wintercms",
"company": null,
"location": "Canada",
"followers": 223,
"avatar_url": "https://avatars.githubusercontent.com/u/80017359?v=4",
"created_at": "2021-03-04T02:18:00Z",
"is_verified": null,
"public_repos": 77,
"account_age_days": 1969
},
"license": {
"state": "standard",
"spdx_id": "MIT",
"raw_spdx": "MIT",
"file_present": true,
"scorecard_found": true,
"profile_has_license": true
},
"activity": {
"releases": [
{
"tag": "v1.2.12",
"kind": "patch",
"published_at": "2026-02-20T08:37:49Z"
},
{
"tag": "v1.2.11",
"kind": "patch",
"published_at": "2026-02-08T19:30:26Z"
},
{
"tag": "v1.2.10",
"kind": "patch",
"published_at": "2026-01-21T22:27:15Z"
},
{
"tag": "v1.2.9",
"kind": "patch",
"published_at": "2025-08-13T22:52:19Z"
},
{
"tag": "v1.2.8",
"kind": "patch",
"published_at": "2025-06-25T21:31:18Z"
},
{
"tag": "v1.2.7",
"kind": "patch",
"published_at": "2024-12-04T21:26:45Z"
},
{
"tag": "v1.2.6",
"kind": "patch",
"published_at": "2024-04-25T21:49:06Z"
},
{
"tag": "v1.2.5",
"kind": "patch",
"published_at": "2024-03-05T00:19:17Z"
},
{
"tag": "v1.2.4",
"kind": "patch",
"published_at": "2023-12-05T00:02:49Z"
},
{
"tag": "v1.2.3",
"kind": "patch",
"published_at": "2023-07-07T20:13:19Z"
},
{
"tag": "v1.2.2",
"kind": "patch",
"published_at": "2023-04-27T17:00:16Z"
},
{
"tag": "v1.2.1",
"kind": "patch",
"published_at": "2022-10-20T05:01:16Z"
},
{
"tag": "v1.2.0",
"kind": "minor",
"published_at": "2022-07-15T04:36:00Z"
},
{
"tag": "v1.1.11",
"kind": "patch",
"published_at": "2024-10-16T05:48:52Z"
},
{
"tag": "v1.1.10",
"kind": "patch",
"published_at": "2022-09-16T07:41:23Z"
},
{
"tag": "v1.1.9",
"kind": "patch",
"published_at": "2022-06-26T20:19:41Z"
},
{
"tag": "v1.1.8",
"kind": "patch",
"published_at": "2022-02-15T16:43:29Z"
},
{
"tag": "v1.1.7",
"kind": "patch",
"published_at": "2021-11-07T18:30:51Z"
},
{
"tag": "v1.1.6",
"kind": "patch",
"published_at": "2021-08-10T03:35:44Z"
},
{
"tag": "v1.1.5",
"kind": "patch",
"published_at": "2021-08-10T03:35:44Z"
},
{
"tag": "v1.1.4",
"kind": "patch",
"published_at": "2021-08-20T22:02:52Z"
},
{
"tag": "v1.1.3",
"kind": "patch",
"published_at": "2021-08-09T16:57:00Z"
},
{
"tag": "v1.1.2",
"kind": "patch",
"published_at": "2021-03-12T06:37:47Z"
},
{
"tag": "v1.0.475",
"kind": "patch",
"published_at": "2022-03-02T21:08:17Z"
},
{
"tag": "v1.0.474",
"kind": "patch",
"published_at": "2021-04-02T02:03:13Z"
},
{
"tag": "v1.0.473",
"kind": "patch",
"published_at": "2021-04-02T02:03:13Z"
}
],
"recent_commits": [
{
"oid": "3f13e6ff39b54bde00850fe5a57afa5bf29844b8",
"body": "* Harden Twig sandbox against SecurityPolicy bypasses (GHSA-8cfw-pcwh-v63w)\n\nThe CVE-2024-54149 blocklist was incomplete: Model::__call transparently\nforwards to the query builder, and models hand out builders, connections,\nrelations and collections the policy did not cover.\n\n- Model the real __call\n[…]\nal\nblocklist (parity with the reporter's proposed fix) and cover with a test.\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>\n\n---------\n\nCo-authored-by: Claude Fable 5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "Merge commit from fork",
"author_name": "Luke Towers",
"author_login": "LukeTowers",
"committed_at": "2026-07-25T19:43:22Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "4b9129b1a21f19913997e726ee017bdf499e6772",
"body": null,
"is_bot": false,
"headline": "Fix code quality",
"author_name": "Luke Towers",
"author_login": "LukeTowers",
"committed_at": "2026-06-29T19:37:26Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a2703ca2ecea817d80ec29c8b314de8f435be86d",
"body": null,
"is_bot": false,
"headline": "Improve LESS import security functionality",
"author_name": "Luke Towers",
"author_login": "LukeTowers",
"committed_at": "2026-06-29T19:21:26Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "045b8de2eb859531c3819fe8fe5a4b1d9a50066d",
"body": null,
"is_bot": false,
"headline": "fix(php): resolve PHP 8.4/8.5 deprecations (#1486)",
"author_name": "Derrick Austin",
"author_login": "austinderrick",
"committed_at": "2026-05-28T16:05:49Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b2aaf1fa353d4f74f70b992222f7682036b628c8",
"body": null,
"is_bot": false,
"headline": "Improve Ukrainian translation (#1470)",
"author_name": "gviabcua",
"author_login": "gviabcua",
"committed_at": "2026-05-27T22:09:45Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "3b21b9b8aeabe8ec65051bada34b36c109ecb4a6",
"body": "… (#1478)\n\nFixes #421",
"is_bot": false,
"headline": "Fix infinite loop in form widget with circular dependsOn declarations…",
"author_name": "Derrick Austin",
"author_login": "austinderrick",
"committed_at": "2026-05-27T22:03:34Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4cb861e87af7e9ee8c9cbaa22ab1d1339d60dd91",
"body": null,
"is_bot": false,
"headline": "Fix TypeError when removing a non-existent plugin (#1484)",
"author_name": "fanti1",
"author_login": "fanti1",
"committed_at": "2026-05-27T00:21:13Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5b7cf378185a9a94d6a0f78d3aff92ec85724695",
"body": "* Added support for returning vite assets in their correct group\n\n* Add tests\n\n* Added expanded asset type detection for the ai\n\n* Apply suggestion from @jaxwilko\n\n---------\n\nCo-authored-by: Luke Towers <git@luketowers.ca>",
"is_bot": false,
"headline": "Added support for returning vite assets in their correct group (#1481)",
"author_name": "Jack Wilkinson",
"author_login": "jaxwilko",
"committed_at": "2026-05-13T15:33:50Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5285fd120b51ece542202c8b66e57787f72d4f47",
"body": "* Added basic viewer for event log details\n\n* Apply suggestion from @jaxwilko",
"is_bot": false,
"headline": "Added basic viewer for event log details (#1482)",
"author_name": "Jack Wilkinson",
"author_login": "jaxwilko",
"committed_at": "2026-05-13T05:24:30Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ab424119f26f5877dff380a5e044ca3006840646",
"body": "Some permissions in the Backend and CMS are expected to be given only to\ntrusted users, as they grant access to features of the CMS that can\nnegatively manipulate the experience of other users or grant themselves\nmore access than intended. We now make this explicit by providing hints\nabout these permissions.\n\nCo-authored-by: Luke Towers <git@luketowers.ca>",
"is_bot": false,
"headline": "Add comments on risky permissions (#1468)",
"author_name": "Ben Thomson",
"author_login": "bennothommo",
"committed_at": "2026-03-14T14:11:52Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "8f0c4daac6cca3264583b234aa1062fa4a93c9df",
"body": "Fixes #1416, replaces #1417",
"is_bot": false,
"headline": "Fix z-index on MediaManager move dropdown",
"author_name": "Luke Towers",
"author_login": "LukeTowers",
"committed_at": "2026-02-20T08:37:49Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "67f0b5cd8b104e46234e4c129262e598f19e8bb1",
"body": "This adds common License file names (which usually don't come with extensions) to the list of searchable files.",
"is_bot": false,
"headline": "Detect plugin license filenames without extensions (#1452)",
"author_name": "Hendrik Erz",
"author_login": "nathanlesage",
"committed_at": "2026-02-08T19:30:26Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c7e139a89b324088370667b4b9e009ff942184eb",
"body": "Co-authored-by: Luke Towers <git@luketowers.ca>\nCo-authored-by: Luke Towers <github@luketowers.ca>\n\nRead the PR for the details.",
"is_bot": false,
"headline": "Replace Ace Editor with Monaco Editor (#801)",
"author_name": "Ben Thomson",
"author_login": "bennothommo",
"committed_at": "2026-01-21T22:27:15Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "580348be05197dbac41694a6a09365b73c2fd1e7",
"body": null,
"is_bot": false,
"headline": "Add escaping to MailBrandSetting as well",
"author_name": "Luke Towers",
"author_login": "LukeTowers",
"committed_at": "2026-01-14T20:53:06Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b07699a5c2a178b4922c936a11e30f083bdf2874",
"body": null,
"is_bot": false,
"headline": "Trigger ajaxRedirected event always (#1438)",
"author_name": "Marc Jauvin",
"author_login": "mjauvin",
"committed_at": "2026-01-13T20:33:33Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1376dd7e61b19c0b44856ce16085327b4d9e90b5",
"body": null,
"is_bot": false,
"headline": "Add .user.ini to list of automatically mirrored files (#1426)",
"author_name": "Marc Jauvin",
"author_login": "mjauvin",
"committed_at": "2025-12-09T21:13:45Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "82d66de15766f8c9ab429e2effd69038474103b1",
"body": null,
"is_bot": false,
"headline": "Add 'llms.txt' to the list of mirrored files (#1425)",
"author_name": "AIC BV",
"author_login": "AIC-BV",
"committed_at": "2025-12-06T13:42:51Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d44dd4ff59785f67826a3202ab0ae3d95bb8b1e9",
"body": null,
"is_bot": false,
"headline": "Update Font Awesome API URL to specific release - 6.7.2 (#1420)",
"author_name": "Luke Towers",
"author_login": "LukeTowers",
"committed_at": "2025-10-30T15:06:26Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "fdf0deebac277909d91a802e85d417d32c1a4e99",
"body": null,
"is_bot": false,
"headline": "Fix 8.1",
"author_name": "Luke Towers",
"author_login": "LukeTowers",
"committed_at": "2025-08-13T22:52:19Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c77c91d1a2734003952b98f67c69ccf309823371",
"body": null,
"is_bot": false,
"headline": "Fix the squeaky gate",
"author_name": "Luke Towers",
"author_login": "LukeTowers",
"committed_at": "2025-08-13T22:11:57Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d788e9408f0c3fed12782f794f543c4a7bb83e05",
"body": "Co-authored-by: Roni Sommerfeld <roni@4tech.mobi>",
"is_bot": false,
"headline": "Include array indexes in FormData for Request.js (#1391)",
"author_name": "Roni Sommerfeld",
"author_login": "phpiando",
"committed_at": "2025-08-07T04:44:13Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "28ad281754dcfbc68fe66fcd5fe41708be8742dc",
"body": "Co-authored-by: Roni Sommerfeld <roni@4tech.mobi>",
"is_bot": false,
"headline": "Skip null/undefined values in Snowboard.request createFormData (#1386)",
"author_name": "Roni Sommerfeld",
"author_login": "phpiando",
"committed_at": "2025-08-07T04:38:16Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "379902647b30df0f49abfd4c8630aac23dfa4968",
"body": "Co-authored-by: Matteo Trubini <7964032+matteotrubini@users.noreply.github.com>",
"is_bot": false,
"headline": "Add failover transport to MailSetting (#1315)",
"author_name": "Marc Jauvin",
"author_login": "mjauvin",
"committed_at": "2025-07-28T08:25:05Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "94a09c761091ead3362e90ae3448e9bd1dd7e3db",
"body": "…red (#1314)\n\nCo-authored-by: Luke Towers <git@luketowers.ca>",
"is_bot": false,
"headline": "Allow \"winter:util compile\" command to download Font Awesome if requi…",
"author_name": "Ben Thomson",
"author_login": "bennothommo",
"committed_at": "2025-07-23T19:43:34Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c38064a3f01a0444cd5de41dbd70ec136e9caf51",
"body": null,
"is_bot": false,
"headline": "Improve PHP 8.4 support",
"author_name": "Luke Towers",
"author_login": null,
"committed_at": "2025-07-20T05:51:37Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1ee7fe45bc7aa672971cd87c7fa837af84aec73a",
"body": "Replaces #1377.\nCo-authored-by: Matteo Trubini <7964032+matteotrubini@users.noreply.github.com>",
"is_bot": false,
"headline": "Improve vite base path generation to fix importing fonts (#1388)",
"author_name": "Jack Wilkinson",
"author_login": "jaxwilko",
"committed_at": "2025-07-16T21:04:02Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "010394f8eb51684ab5b1862c420553950ce34a2d",
"body": null,
"is_bot": false,
"headline": "Fix winter:util purge uploads deleting files that are in-use (#1387)",
"author_name": "Mark Bingham",
"author_login": "Mrkbingham",
"committed_at": "2025-07-16T20:06:29Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "da5858f0335c10200b0028207247585d53930369",
"body": null,
"is_bot": false,
"headline": "Add fix to unify asset:compile & asset:watch arguments (#1384)",
"author_name": "Jack Wilkinson",
"author_login": "jaxwilko",
"committed_at": "2025-07-09T14:49:00Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e25244cd22594943d3a43a17bf8deb904839470d",
"body": "…for the command scaffolder (#1379)",
"is_bot": false,
"headline": "Add support for hyphens in command names and specifying descriptions …",
"author_name": "Damien MATHIEU",
"author_login": "damsfx",
"committed_at": "2025-07-02T20:11:46Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4556ba7226c1a1384a17b402ebc7c091750e6e86",
"body": "Co-authored-by: Marc Jauvin <marc.jauvin@gmail.com>\nCo-authored-by: Luke Towers <luke@luketowers.ca>\n\nAdds default views for the following backend controller behaviors:\n\n- FormController\n- ImportExportController\n- ListController\n- ReorderController\n\n`Backend\\Classes\\ControllerBehavior` will now auto\n[…]\n\n- Improved handling of `abort(404)` in the backend\n- Improved styling of disabled fields in the fancy form layout\n- Improved styling of file generated / updated status message in scaffolding commands",
"is_bot": false,
"headline": "Add support for Behaviour default views (#1312)",
"author_name": "Jack Wilkinson",
"author_login": "jaxwilko",
"committed_at": "2025-06-25T21:31:18Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "58b1c67ef7655e21bcaf6178b9f0faa511f6374c",
"body": null,
"is_bot": false,
"headline": "Add asset:create module support (#1370)",
"author_name": "Jack Wilkinson",
"author_login": "jaxwilko",
"committed_at": "2025-06-18T18:28:48Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2115e400dbeb8af8e8103ad06641811184a308fc",
"body": null,
"is_bot": false,
"headline": "Fix support for --force in winter:env (#1368)",
"author_name": "Isaiah Paget",
"author_login": "IsaiahPaget",
"committed_at": "2025-06-13T04:29:26Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "37fb24fc5ae54271e1156e5219ed57929579ad27",
"body": null,
"is_bot": false,
"headline": "Added fix for multiple vite assets being deleted as duplicate (#1362)",
"author_name": "Jack Wilkinson",
"author_login": "jaxwilko",
"committed_at": "2025-06-06T17:14:38Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d0e07143683e4bd5875c80cb5758b16cd5906601",
"body": null,
"is_bot": false,
"headline": "Improve Dutch translation (#1357)",
"author_name": "AIC BV",
"author_login": "AIC-BV",
"committed_at": "2025-05-28T20:19:56Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "28240a81bfc4189298761e67c37a65ae341ee3c7",
"body": null,
"is_bot": false,
"headline": "only show sort icon if column is actually sortable (#1356)",
"author_name": "Marc Jauvin",
"author_login": "mjauvin",
"committed_at": "2025-05-19T16:19:22Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e9d9269d7ea4962bd7af7139250507b0c3f43034",
"body": "Co-authored-by: Marc Jauvin <marc.jauvin@gmail.com>\n\nDocumented by https://github.com/wintercms/docs/pull/235",
"is_bot": false,
"headline": "List filter improvements (button-group & dropdown filter scopes) (#1349)",
"author_name": "Luke Towers",
"author_login": "LukeTowers",
"committed_at": "2025-05-09T20:28:21Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e6363f5ecdb9cd2122afc05590df3680886b72ce",
"body": null,
"is_bot": false,
"headline": "Redo migration",
"author_name": "Luke Towers",
"author_login": "LukeTowers",
"committed_at": "2025-05-09T15:05:09Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "6bd2e0621d4da1f6aafd48d973bf607d72a16cb6",
"body": null,
"is_bot": false,
"headline": "Fix migration",
"author_name": "Luke Towers",
"author_login": "LukeTowers",
"committed_at": "2025-05-09T15:03:33Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "7a87c01d2bd4dfcd780d0b25e9edd3df91e7197a",
"body": null,
"is_bot": false,
"headline": "Fix casing in namespace",
"author_name": "Ben Thomson",
"author_login": "bennothommo",
"committed_at": "2025-05-08T07:40:38Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5b50f2ec442fb5191f5306a666704af1980f1f86",
"body": "Style read-only columns with slightly darker grey background to indicate read-only state\nPrevent editors from being created for all column types if read-only (previously, only string columns would be rendered read-only by setting the readonly attribute, this is not ideal because it can be easily cha\n[…]\ndding and deleting buttons are disabled\nFixed styling of toolbar if only the search box is shown (no background previously)\nFixed styling of pagination\nFixed broken search if client datasource is used",
"is_bot": false,
"headline": "Table widget improvements (#1285)",
"author_name": "Ben Thomson",
"author_login": "bennothommo",
"committed_at": "2025-05-05T02:56:09Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "919eec7267aa56f238eea2986dfc79cc3e671bf4",
"body": "…e Lists columns\n\nSortable columns will now display a \"right arrow\" instead of a greyed out down arrow when they aren't actively applied.",
"is_bot": false,
"headline": "Use right arrow for default UI element on currently unapplied sortabl…",
"author_name": "Luke Towers",
"author_login": "LukeTowers",
"committed_at": "2025-05-01T20:04:47Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ad316e72554f6d69c1b4ae8974b7f32aaa598a95",
"body": null,
"is_bot": false,
"headline": "Added fix for addVite method to bind assets to parent controller (#1345)",
"author_name": "Jack Wilkinson",
"author_login": "jaxwilko",
"committed_at": "2025-04-30T21:50:51Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "aee3e4b73575d762b2ef5dad5e78e36870a3a482",
"body": null,
"is_bot": false,
"headline": "Improve stubs",
"author_name": "Luke Towers",
"author_login": "LukeTowers",
"committed_at": "2025-04-27T04:03:39Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "9059a3e780c9151507fae1d9bc700e59c8fa5493",
"body": null,
"is_bot": false,
"headline": "add pull method to allowed session methods (#1342)",
"author_name": "Marc Jauvin",
"author_login": "mjauvin",
"committed_at": "2025-04-23T19:39:06Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5f8fdd8ec36c5469f7a9458605428c5252273eb4",
"body": null,
"is_bot": false,
"headline": "Improve argument description",
"author_name": "Luke Towers",
"author_login": "LukeTowers",
"committed_at": "2025-04-15T16:23:07Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1ad9172ff9f1d37d00bd2ef20237c8da6ded3293",
"body": null,
"is_bot": false,
"headline": "Fix for case sensitive file systems",
"author_name": "Luke Towers",
"author_login": "LukeTowers",
"committed_at": "2025-04-11T08:50:57Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e11b939d60e1b08455fdfaf30125c3e55662c6c8",
"body": "…order",
"is_bot": false,
"headline": "Reset routes during tests so plugin routes are loaded in the correct …",
"author_name": "Luke Towers",
"author_login": "LukeTowers",
"committed_at": "2025-04-11T06:37:30Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "88b4c758329c19717def7c0edac9b606db1e699d",
"body": "…thod signatures on File model",
"is_bot": false,
"headline": "Add migration for metadata column to system_files table and update me…",
"author_name": "Luke Towers",
"author_login": "LukeTowers",
"committed_at": "2025-04-10T22:41:07Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5eaea1be983e02aa0d36cb82f7d8c08c61f6fa5c",
"body": null,
"is_bot": false,
"headline": "Fix tests",
"author_name": "Luke Towers",
"author_login": "LukeTowers",
"committed_at": "2025-02-26T18:53:07Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "6aaa42cb8bff2ea9f41a6bf593d235dd021cd62e",
"body": "…n run yet\n\nFixes #1273, #1317. Also fixes issues when trying to interact with a Parameter model when the database is present but the migrations haven't been run yet.",
"is_bot": false,
"headline": "Fix infinite loop when database is present but migrations haven't bee…",
"author_name": "Luke Towers",
"author_login": "LukeTowers",
"committed_at": "2025-02-26T18:29:56Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ffd291cef1b03aa55f8cc9d7caee4fca5ec3425a",
"body": "… being written (#1319)\n\nCo-authored-by: Luke Towers <luke@luketowers.ca>\n\nRequires wintercms/storm#208",
"is_bot": false,
"headline": "Migrate logging code to winter from storm to prevent excess file logs…",
"author_name": "Jack Wilkinson",
"author_login": "jaxwilko",
"committed_at": "2025-02-26T16:47:15Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "25e3b1bdfeb2a84cc5616605504213f4a9633548",
"body": "Related: https://github.com/wintercms/storm/commit/78f58d14b2676c39b35e86d1797317957a92b1f5",
"is_bot": false,
"headline": "Drop PHP 8.0 support",
"author_name": "Luke Towers",
"author_login": "LukeTowers",
"committed_at": "2025-02-26T15:46:34Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "860f7aed2d73f9b36d1575e0ba4148a5d19b670c",
"body": "…n't been run yet.\n\nRelated: 8c0d2f490030d04187aab7d0605465021b5022d2, https://github.com/octobercms/october/issues/3208, #1317, #1273.",
"is_bot": false,
"headline": "Gracefully handle registering or booting plugins when migrations have…",
"author_name": "Luke Towers",
"author_login": "LukeTowers",
"committed_at": "2025-02-26T15:42:25Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "dffb57e2aa940e503047cf275b7f9cdb16cc3abe",
"body": "* Added support for translations to the event log details partial\n\n* Update modules/system/lang/en/lang.php\n\n---------\n\nCo-authored-by: Luke Towers <luke@luketowers.ca>",
"is_bot": false,
"headline": "Added support for translations to the event log details partial (#1310)",
"author_name": "Jack Wilkinson",
"author_login": "jaxwilko",
"committed_at": "2025-02-15T05:52:31Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "736f1d047537d78cfd9dec5cf554afb75a6d8036",
"body": null,
"is_bot": false,
"headline": "Added fix for some labels in the new exception page (#1309)",
"author_name": "Jack Wilkinson",
"author_login": "jaxwilko",
"committed_at": "2025-02-13T20:34:11Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5c8ee1752263578fe8896f7f1e8a3dfe0a853761",
"body": "Documented by wintercms/docs#229.\r\n\r\nAdditional instructions for adding to a theme:\r\n\r\n- Run `artisan create:theme mytheme tailwind` to generate a theme that makes use of Tailwind\r\n- Run `artisan vite:create theme-mytheme --tailwind --react --force` to generate the required files for React\r\n- Run `a\n[…]\ne/footer.htm`\r\nAdd the `<div id=\"root\"></div>` element wherever you want your React app to be injected into the DOM (either in `themes/mytheme/layouts/default.htm` or `themes/mytheme/pages/home.htm`).",
"is_bot": false,
"headline": "Add support for React (#1304)",
"author_name": "Luke Towers",
"author_login": "LukeTowers",
"committed_at": "2025-02-13T05:19:47Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "9e4385086566bfe97a236f37662228ea124d7cbc",
"body": "Co-authored-by: Luke Towers <git@luketowers.ca>\r\nRelated: wintercms/storm#204\r\n\r\nThis adds a fully backwards compatible \"v2\" log viewer that allows of unrolling of all previous exceptions. It also adds snippets for each frame in the call stack and extra information about the environment is recorded and displayed to the user.\r\n\r\nThis is a stopgap solution until we get around to fully implementing the Ignition error page in Winter CMS core and displaying stored errors with that instead.",
"is_bot": false,
"headline": "Added better log viewing (#1303)",
"author_name": "Jack Wilkinson",
"author_login": "jaxwilko",
"committed_at": "2025-02-13T05:13:53Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1d73c4ca0b12a5615228d9794618debe174537b9",
"body": null,
"is_bot": false,
"headline": "Support customizing the Vite build directory (#1272)",
"author_name": "Roman Chernyshov",
"author_login": "truechernyshov",
"committed_at": "2025-02-05T23:35:20Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5ae3cc0a45566da93a8a53ffb706347acd17b7a4",
"body": "Co-authored-by: HitArrowLegend <fun_dropper@msn.com>\r\nCo-authored-by: Ben Thomson <git@alfreido.com>",
"is_bot": false,
"headline": "Update Winter's branding colors (#93)",
"author_name": "Luke Towers",
"author_login": "LukeTowers",
"committed_at": "2025-02-05T23:19:21Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "fe74e23eb343186ad55d9361e86d96023a2f864c",
"body": null,
"is_bot": false,
"headline": "Add `test` alias for `winter:test`",
"author_name": "Luke Towers",
"author_login": "LukeTowers",
"committed_at": "2025-02-05T21:32:20Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "6c27e2777e798e5aee2a085a07df48b8096b32b8",
"body": null,
"is_bot": false,
"headline": "Add allowList functionality to Twig security policy (#1293)",
"author_name": "Luke Towers",
"author_login": "LukeTowers",
"committed_at": "2025-02-05T21:30:51Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "491805bff7b224eb9a3e5bbbcf7c680c46bcbc52",
"body": "Requires https://github.com/wintercms/storm/commit/b9b5aae924eaa4be17a10c7c8138732328be6b7f",
"is_bot": false,
"headline": "Improve factory stub",
"author_name": "Luke Towers",
"author_login": "LukeTowers",
"committed_at": "2025-02-01T06:46:31Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "245a9dfec41f59f3541b870cdbc9db0a515a74c3",
"body": null,
"is_bot": false,
"headline": "Clarify decision on adding detected packages",
"author_name": "Luke Towers",
"author_login": "LukeTowers",
"committed_at": "2025-01-25T04:50:35Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "3a9bf6e4cbd06a3a4630c4af7028a771f28cad8e",
"body": "Should improve #1288.",
"is_bot": false,
"headline": "Use Laravel's Windows-Friendly symlinking",
"author_name": "Luke Towers",
"author_login": "LukeTowers",
"committed_at": "2025-01-22T20:18:23Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "fe3401a7df34302d41fb633c6650038c79556eeb",
"body": null,
"is_bot": false,
"headline": "Fix using vite packages when they're ignored from compiling (#1284)",
"author_name": "Luke Towers",
"author_login": "LukeTowers",
"committed_at": "2025-01-08T21:04:53Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4488fa3747035d87c52abff985d903bd81ef094d",
"body": null,
"is_bot": false,
"headline": "Recompile assets",
"author_name": "Ben Thomson",
"author_login": "bennothommo",
"committed_at": "2024-12-19T03:33:14Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ebe5d5dfe49857c675d30e00f751f91df38cf81e",
"body": "…ASE env values (#1266)\n\nCo-authored-by: Luke Towers <luke@luketowers.ca>\r\n\r\nRelated #1242",
"is_bot": false,
"headline": "Added fix to ensure escaped backslash paths are preserved in DB_DATAB…",
"author_name": "Jack Wilkinson",
"author_login": "jaxwilko",
"committed_at": "2024-12-04T21:26:45Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f5e038a8e7d0067583380ea2ae0dda195e74a77a",
"body": null,
"is_bot": false,
"headline": "Force mirror absolute paths on Windows (#1265)",
"author_name": "Jack Wilkinson",
"author_login": "jaxwilko",
"committed_at": "2024-12-04T21:04:26Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4623562445777c9e8e63565817a1471e70831866",
"body": null,
"is_bot": false,
"headline": "Avoid Vite generating an extra `assets` folder in `assets/dist` (#1264)",
"author_name": "Damien MATHIEU",
"author_login": "damsfx",
"committed_at": "2024-12-04T20:15:31Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "32719152566aa5fee719d43f52d35ab2679fa34a",
"body": null,
"is_bot": false,
"headline": "Add support for showTotals in the Lists widget (#1262)",
"author_name": "Luke Towers",
"author_login": "LukeTowers",
"committed_at": "2024-12-03T23:03:14Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "707faa374470cbb07e1f81f1064bb18cb80a1418",
"body": null,
"is_bot": false,
"headline": "Bump vite and laravel vite plugin versions (#1260)",
"author_name": "Jack Wilkinson",
"author_login": "jaxwilko",
"committed_at": "2024-12-03T15:26:49Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a526993c288bd381921055b79cad412829a9dec4",
"body": null,
"is_bot": false,
"headline": "Allow create:migration --update flag for models without fields.yaml",
"author_name": "Luke Towers",
"author_login": "LukeTowers",
"committed_at": "2024-12-03T10:02:05Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "88d589caf137117ecd6abd281b0ce4910fde9a94",
"body": null,
"is_bot": false,
"headline": "Tailwind theme create improvements (#1255)",
"author_name": "Jack Wilkinson",
"author_login": "jaxwilko",
"committed_at": "2024-11-25T17:02:39Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "24883da838145ae4211634675510c92542493c9a",
"body": "Replaces #1244. Alters how create:theme [name] tailwind works to generate the default asset configs via the vite:* commands, it also runs an initial compile to ensure styles are generated before first load.",
"is_bot": false,
"headline": "Vite theme create (#1253)",
"author_name": "Jack Wilkinson",
"author_login": "jaxwilko",
"committed_at": "2024-11-22T15:53:27Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "8d570ec1f16189e2beaedc1830615d4d671df7bb",
"body": "See https://laravel.com/docs/11.x/artisan#isolatable-commands",
"is_bot": false,
"headline": "Support --isolatable flag on migration command (#1226)",
"author_name": "Alex Orosciuc",
"author_login": "lex0r",
"committed_at": "2024-11-13T22:06:50Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "95e36ebd901b6afc2e8eac6ef8c1c6620a21bc3d",
"body": null,
"is_bot": false,
"headline": "Remove redundent vite logic (#1249)",
"author_name": "Jack Wilkinson",
"author_login": "jaxwilko",
"committed_at": "2024-11-08T09:28:06Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b95f5e5e756b5174db28a55170306b9126f2bbef",
"body": "… (#1235)\"\n\nThis reverts commit 4ff066f4700c82ea5fc7387ea03cbf3cfc6021b9.",
"is_bot": false,
"headline": "Revert \"Attach original AJAX framework events to Snowboard in Backend…",
"author_name": "Luke Towers",
"author_login": "LukeTowers",
"committed_at": "2024-11-06T21:07:16Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d4f533dc9c11c2471c3af0da8bba20f4e2915976",
"body": "Replaces #1234, fixes #1233.\r\n\r\nInstead of loading framework.extras.css, which appears to be excluded from the Backend, this PR hooks the necessary original AJAX framework events into Snowboard's events, allowing the applicable events to execute UI functionality such as data-attach-loading and the S\n[…]\n a full Snowboard request, so there's the potential for custom Snowboard event listeners to break if they are relying on Snowboard request information, but I'm not aware of that happening yet in core.",
"is_bot": false,
"headline": "Attach original AJAX framework events to Snowboard in Backend (#1235)",
"author_name": "Ben Thomson",
"author_login": "bennothommo",
"committed_at": "2024-10-31T01:27:22Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "2aa7910207102fbf1cf38a1d6978e80720dd6524",
"body": "When using a mirrored public folder (i.e. `artisan winter:mirror public`), the working directory for the request is set to base_path('public') instead of base_path(), so it is important to use absolute paths when calling File::exists() as it internally just calls file_exists(), which uses the curren\n[…]\n8423e91aa0e8ecbeb4fa064#diff-58c1a5c5e22fc25e75bb02e4af9d2085cfe66b8cfe7c3cffc2f32a4fb60240aaR31\n- https://github.com/laravel/framework/issues/45679\n- https://github.com/laravel/framework/issues/13243",
"is_bot": false,
"headline": "Fix compilable assets when using a mirrored public folder",
"author_name": "Luke Towers",
"author_login": "LukeTowers",
"committed_at": "2024-10-30T22:27:10Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "5d2d26e476a87423125a93634d52e2251d9b9ce6",
"body": null,
"is_bot": false,
"headline": "Move CMS error handling to CMS module",
"author_name": "Luke Towers",
"author_login": "LukeTowers",
"committed_at": "2024-10-26T09:08:58Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "7d67661d23fc0515d4546733ecbc46dab2db0f14",
"body": "Documented by https://github.com/wintercms/docs/pull/213",
"is_bot": false,
"headline": "Completed npm commands (npm:install, npm:update, npm:run) (#1202)",
"author_name": "Jack Wilkinson",
"author_login": "jaxwilko",
"committed_at": "2024-10-25T19:02:09Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "76b9331d22c788cd572305a40d2184cbb980d15f",
"body": "This adds support for all abort($code) errors that can be thrown.\r\n\r\n404 will always display the 404 page (either provided by the theme or the default CMS 404 view)\r\n\r\nAny other status code will either display the exception itself when debug mode is enabled or the nice error page (provided by the theme /error page or the default CMS error view) when debug mode is disabled.\r\n\r\nFixes #1236",
"is_bot": false,
"headline": "Add error handling for HttpExceptions",
"author_name": "Luke Towers",
"author_login": "LukeTowers",
"committed_at": "2024-10-23T21:38:58Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "711e129acf71a140478742ac05810307f9cc9120",
"body": "* Harden theme objects, prevent certain properties from being passed through to ThemeData object\n\n* Improve and properly scope Twig security policy\n\n- Deny access to \"include\" and \"extends\" tags/functions, as per Markup docs\n- Block methods that write, delete or modify records and attributes in Data\n[…]\nvided to extended objects should still be OK)\n\n* Minor\n\n* Make theme magic method calls case insensitive\n\n* Allow include and extends tags/functions\n\n* Add additional blocked methods\n\n* Add test cases",
"is_bot": false,
"headline": "Merge commit from fork",
"author_name": "Ben Thomson",
"author_login": "bennothommo",
"committed_at": "2024-10-16T05:31:35Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "9ac3b57083034aa7580e18383249dc2f66b5f3c9",
"body": null,
"is_bot": false,
"headline": "Use local path for sqlite in winter:install",
"author_name": "Luke Towers",
"author_login": "LukeTowers",
"committed_at": "2024-10-15T05:17:14Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "283d2b4ad461dbf38eeadf3565ae656e5d3e4ee2",
"body": "Some developers are used to including the --seed option, this makes for a smoother experience for them.\r\n\r\nNote: at some point we should review all of the options provided by Laravel's artisan migrate and include matching functionality in our migrator.",
"is_bot": false,
"headline": "Improve compatibility with artisan migrate",
"author_name": "Luke Towers",
"author_login": "LukeTowers",
"committed_at": "2024-10-15T04:53:09Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b338b7924e3fc6b01bb12fe21031a04cb0712e8c",
"body": "Co-authored-by: Luke Towers <github@luketowers.ca>",
"is_bot": false,
"headline": "Add create:factory command (#1209)",
"author_name": "gseph",
"author_login": "sephyld",
"committed_at": "2024-10-03T17:52:48Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ab965fdb75ac06b0c6b474e3bb29a6cade43e32f",
"body": null,
"is_bot": false,
"headline": "Remove extraneous CSS file",
"author_name": "Ben Thomson",
"author_login": "bennothommo",
"committed_at": "2024-09-27T02:36:20Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2b7d4d61c5a46311ef4a0d031ab953c841192241",
"body": null,
"is_bot": false,
"headline": "Make stripe loader configurable with data attribute (#1201)",
"author_name": "Luca Benati",
"author_login": "webbati",
"committed_at": "2024-09-26T18:44:02Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1334303ae657869d4b06999ae003c4d617ea3655",
"body": null,
"is_bot": false,
"headline": "Add --batchable option to create:job command (#1215)",
"author_name": "Damien MATHIEU",
"author_login": "damsfx",
"committed_at": "2024-09-26T18:33:01Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "dbd19856c4639860d50cbaf61abb93e471534586",
"body": null,
"is_bot": false,
"headline": "Allow command names to contain number (#1207)",
"author_name": "Damien MATHIEU",
"author_login": "damsfx",
"committed_at": "2024-09-26T18:31:15Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f2095a4c705d866acd9ee9a87498637b1fda3f9e",
"body": null,
"is_bot": false,
"headline": "Fix job class generated twice when using the sync option (#1204)",
"author_name": "Damien MATHIEU",
"author_login": "damsfx",
"committed_at": "2024-09-26T08:54:18Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e9734dc109a1e56152120dee8a97b160f2fc1f97",
"body": "Replaces https://github.com/wintercms/winter/pull/1213",
"is_bot": false,
"headline": "Fix icon path for error pages, recompile",
"author_name": "Ben Thomson",
"author_login": "bennothommo",
"committed_at": "2024-09-26T07:57:19Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "6b6e2ffda1cdd397028831e5eedfa9d0111c1a07",
"body": null,
"is_bot": false,
"headline": "Fix display of deleted files when reviewing changes in \"winter:version\"",
"author_name": "Ben Thomson",
"author_login": "bennothommo",
"committed_at": "2024-09-05T00:11:20Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "3bea4bfbed37c81ad327785f6e71dbd87c0555cd",
"body": null,
"is_bot": false,
"headline": "Add ability to print only the version number in \"winter:version\" command",
"author_name": "Ben Thomson",
"author_login": "bennothommo",
"committed_at": "2024-09-05T00:11:03Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "902aed79a50a1ce9c7d07516cf3e309b885971b8",
"body": "Console command to purge all entries in resized storage folder.",
"is_bot": false,
"headline": "Add winter:util purge resized console command (#1186)",
"author_name": "Marc Jauvin",
"author_login": "mjauvin",
"committed_at": "2024-08-19T18:29:28Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "998653acd2905280ef4c2921dbc1056e07cd32b2",
"body": "This fix allows nested objects within the request data to be correctly converted to nested form data when sending the request.\r\n\r\nPreviously, if the data option in a Request contained nested objects or arrays within the data, these were being incorrectly converted to [Array array] or [Object object]\n[…]\normData object would simply convert them to strings. With this fix, we traverse the data structure and ensure that they are given the right key in order to keep the shape of the data in the POST data.",
"is_bot": false,
"headline": "Fix nested form data in Snowboard requests (#1182)",
"author_name": "Ben Thomson",
"author_login": "bennothommo",
"committed_at": "2024-08-14T15:33:45Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "6284e7f7232401e5df2217450346d4d4eeb3afb8",
"body": null,
"is_bot": false,
"headline": "Quick test for request data attribute parsing",
"author_name": "Ben Thomson",
"author_login": "bennothommo",
"committed_at": "2024-08-13T00:56:35Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1316042736d1696db47a71f4ff823aff714e977f",
"body": null,
"is_bot": false,
"headline": "Update model.stub",
"author_name": "Luke Towers",
"author_login": "LukeTowers",
"committed_at": "2024-08-10T06:07:08Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e3795917e801a8e0519149d7feadbcbbf2a89ce0",
"body": null,
"is_bot": false,
"headline": "Fix minor issues with styling for select2 inputs",
"author_name": "Luke Towers",
"author_login": "LukeTowers",
"committed_at": "2024-08-02T15:46:00Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e685fb93fcf07eae68d3d18bb1c7821265e07508",
"body": null,
"is_bot": false,
"headline": "Fix Mix webpack config not being cleaned (#1175)",
"author_name": "Jack Wilkinson",
"author_login": "jaxwilko",
"committed_at": "2024-07-30T18:42:59Z",
"body_truncated": false,
"is_coding_agent": false
}
],
"releases_count": 26,
"commits_last_year": 22,
"latest_release_at": "2026-02-20T08:37:49Z",
"latest_release_tag": "v1.2.12",
"releases_from_tags": true,
"days_since_last_push": 0,
"active_weeks_last_year": 13,
"days_since_latest_release": 155,
"mean_days_between_releases": 106.5
},
"community": {
"has_readme": true,
"has_license": true,
"has_description": true,
"has_contributing": true,
"health_percentage": 87,
"has_issue_template": false,
"has_code_of_conduct": true,
"has_pull_request_template": true
},
"ecosystem": {
"packages": [
{
"name": "winter/wn-system-module",
"exists": true,
"license": "MIT",
"keywords": [
"system",
"winter",
"winter cms"
],
"ecosystem": "packagist",
"matches_repo": true,
"registry_url": "https://packagist.org/packages/winter/wn-system-module",
"is_deprecated": false,
"latest_version": "v1.2.12",
"repository_url": "https://github.com/wintercms/wn-system-module",
"versions_count": 26,
"total_downloads": 260840,
"dependents_count": 7,
"deprecation_note": null,
"maintainers_count": null,
"monthly_downloads": 4134,
"first_published_at": null,
"latest_published_at": "2026-02-20T08:37:49Z",
"latest_version_yanked": null,
"days_since_latest_publish": 155
}
]
},
"popularity": {
"forks": 6,
"stars": 4,
"watchers": 5,
"fork_history": {
"days": [
{
"date": "2021-03-12",
"count": 1
},
{
"date": "2021-03-23",
"count": 1
},
{
"date": "2021-06-25",
"count": 1
},
{
"date": "2021-09-05",
"count": 1
},
{
"date": "2026-06-08",
"count": 1
},
{
"date": "2026-06-20",
"count": 1
}
],
"complete": true,
"collected": 6,
"total_forks": 6
},
"star_history": null,
"open_issues_and_prs": 0
},
"ai_readiness": {
"has_nix": false,
"example_dirs": [
"sample"
],
"has_llms_txt": false,
"has_dockerfile": false,
"has_mcp_signal": false,
"bootstrap_files": [
"assets/ui/vendor/flot/Makefile"
],
"api_schema_files": [],
"has_devcontainer": false,
"typecheck_configs": [],
"toolchain_manifests": [],
"largest_source_bytes": 1736208,
"source_files_sampled": 664,
"oversized_source_files": 1,
"agent_instruction_files": [],
"agent_instruction_max_bytes": null
},
"dependencies": {
"manifests": [
"composer.json",
"package.json"
],
"advisories": {
"error": "No resolved dependencies carried a version and a supported ecosystem",
"scope": "repository_graph",
"source": null,
"findings": [],
"collected": false,
"malicious": [],
"truncated": false,
"by_severity": {},
"advisory_count": 0,
"affected_count": 0,
"assessed_count": 0,
"malicious_count": 0,
"assessed_package": null,
"unassessed_count": 20,
"direct_affected_count": 0
},
"ecosystems": [
"npm",
"packagist"
],
"dependencies": [
{
"name": "laravel/framework",
"manifest": "composer.json",
"ecosystem": "packagist",
"version_constraint": "^9.1"
},
{
"name": "@fortawesome/fontawesome-free",
"manifest": "package.json",
"ecosystem": "npm",
"version_constraint": "^6.5.2"
},
{
"name": "js-cookie",
"manifest": "package.json",
"ecosystem": "npm",
"version_constraint": "^3.0.1"
}
],
"all_dependencies": {
"error": null,
"source": "github-sbom",
"packages": [
{
"name": "@fortawesome/fontawesome-free",
"direct": true,
"version": "^6.5.2",
"ecosystem": "npm"
},
{
"name": "js-cookie",
"direct": true,
"version": "^3.0.1",
"ecosystem": "npm"
},
{
"name": "laravel/framework",
"direct": true,
"version": null,
"ecosystem": "packagist"
},
{
"name": "@babel/core",
"direct": false,
"version": "^7.16.0",
"ecosystem": "npm"
},
{
"name": "@babel/plugin-transform-runtime",
"direct": false,
"version": "^7.16.4",
"ecosystem": "npm"
},
{
"name": "@babel/preset-env",
"direct": false,
"version": "^7.16.4",
"ecosystem": "npm"
},
{
"name": "@babel/register",
"direct": false,
"version": "^7.16.0",
"ecosystem": "npm"
},
{
"name": "@babel/runtime",
"direct": false,
"version": "^7.16.3",
"ecosystem": "npm"
},
{
"name": "babel-plugin-module-resolver",
"direct": false,
"version": "^5.0.0",
"ecosystem": "npm"
},
{
"name": "eslint",
"direct": false,
"version": "^8.6.0",
"ecosystem": "npm"
},
{
"name": "eslint-config-airbnb-base",
"direct": false,
"version": "^15.0.0",
"ecosystem": "npm"
},
{
"name": "eslint-plugin-import",
"direct": false,
"version": "^2.25.4",
"ecosystem": "npm"
},
{
"name": "eslint-plugin-vue",
"direct": false,
"version": "^8.5.0",
"ecosystem": "npm"
},
{
"name": "jest",
"direct": false,
"version": "^27.4.3",
"ecosystem": "npm"
},
{
"name": "jsdom",
"direct": false,
"version": "^18.1.1",
"ecosystem": "npm"
},
{
"name": "laravel-mix",
"direct": false,
"version": "^6.0.34",
"ecosystem": "npm"
},
{
"name": "laravel-mix-polyfill",
"direct": false,
"version": "^3.0.1",
"ecosystem": "npm"
},
{
"name": "composer/installers",
"direct": false,
"version": null,
"ecosystem": "packagist"
},
{
"name": "composer/semver",
"direct": false,
"version": null,
"ecosystem": "packagist"
},
{
"name": "php",
"direct": false,
"version": null,
"ecosystem": "packagist"
}
],
"collected": true,
"truncated": false,
"total_count": 20,
"direct_count": 3,
"indirect_count": 17
}
},
"maintainership": {
"issues": {
"open_prs": 0,
"merged_prs": 0,
"open_issues": 0,
"closed_ratio": null,
"closed_issues": 0,
"closed_unmerged_prs": 3
},
"bus_factor": 2,
"bot_contributors": 0,
"top_contributors": [
{
"type": "User",
"login": "daftspunk",
"commits": 1053,
"avatar_url": "https://avatars.githubusercontent.com/u/1392869?v=4"
},
{
"type": "User",
"login": "LukeTowers",
"commits": 459,
"avatar_url": "https://avatars.githubusercontent.com/u/7253840?v=4"
},
{
"type": "User",
"login": "bennothommo",
"commits": 230,
"avatar_url": "https://avatars.githubusercontent.com/u/15900351?v=4"
},
{
"type": "User",
"login": "jaxwilko",
"commits": 111,
"avatar_url": "https://avatars.githubusercontent.com/u/31214002?v=4"
},
{
"type": "User",
"login": "alekseybobkov",
"commits": 107,
"avatar_url": "https://avatars.githubusercontent.com/u/481606?v=4"
},
{
"type": "User",
"login": "gergo85",
"commits": 56,
"avatar_url": "https://avatars.githubusercontent.com/u/2959112?v=4"
},
{
"type": "User",
"login": "mjauvin",
"commits": 52,
"avatar_url": "https://avatars.githubusercontent.com/u/2013630?v=4"
},
{
"type": "User",
"login": "gabsource",
"commits": 32,
"avatar_url": "https://avatars.githubusercontent.com/u/1851314?v=4"
},
{
"type": "User",
"login": "WebVPF",
"commits": 24,
"avatar_url": "https://avatars.githubusercontent.com/u/61043464?v=4"
},
{
"type": "User",
"login": "nathan-van-der-werf",
"commits": 18,
"avatar_url": "https://avatars.githubusercontent.com/u/1123054?v=4"
}
],
"contributors_sampled": 100,
"top_contributor_share": 0.424
},
"quality_signals": {
"has_ci": false,
"has_tests": true,
"ci_workflows": [],
"has_docs_dir": false,
"linter_configs": [
".eslintrc.json"
],
"has_editorconfig": false,
"has_linter_config": true,
"has_precommit_config": false
},
"security_signals": {
"lockfiles": [],
"scorecard": {
"checks": [
{
"name": "Binary-Artifacts",
"score": 10,
"reason": "no binaries found in the repo",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#binary-artifacts"
},
{
"name": "Branch-Protection",
"score": 0,
"reason": "branch protection not enabled on development/release branches",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#branch-protection"
},
{
"name": "CI-Tests",
"score": null,
"reason": "no pull request found",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#ci-tests"
},
{
"name": "CII-Best-Practices",
"score": 0,
"reason": "no effort to earn an OpenSSF best practices badge detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#cii-best-practices"
},
{
"name": "Code-Review",
"score": 0,
"reason": "Found 0/30 approved changesets -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#code-review"
},
{
"name": "Contributors",
"score": 10,
"reason": "project has 34 contributing companies or organizations",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#contributors"
},
{
"name": "Dangerous-Workflow",
"score": null,
"reason": "no workflows found",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dangerous-workflow"
},
{
"name": "Dependency-Update-Tool",
"score": 0,
"reason": "no update tool detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dependency-update-tool"
},
{
"name": "Fuzzing",
"score": 0,
"reason": "project is not fuzzed",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#fuzzing"
},
{
"name": "License",
"score": 10,
"reason": "license file detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#license"
},
{
"name": "Maintained",
"score": 7,
"reason": "9 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 7",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#maintained"
},
{
"name": "Packaging",
"score": null,
"reason": "packaging workflow not detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#packaging"
},
{
"name": "Pinned-Dependencies",
"score": null,
"reason": "no dependencies found",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#pinned-dependencies"
},
{
"name": "SAST",
"score": 0,
"reason": "no SAST tool detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#sast"
},
{
"name": "Security-Policy",
"score": 10,
"reason": "security policy file detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#security-policy"
},
{
"name": "Signed-Releases",
"score": null,
"reason": "no releases found",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#signed-releases"
},
{
"name": "Token-Permissions",
"score": null,
"reason": "No tokens found",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#token-permissions"
},
{
"name": "Vulnerabilities",
"score": 10,
"reason": "0 existing vulnerabilities detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#vulnerabilities"
}
],
"commit": "3f13e6ff39b54bde00850fe5a57afa5bf29844b8",
"ran_at": "2026-07-25T19:51:17Z",
"aggregate_score": 4.5,
"scorecard_version": "v5.5.0"
},
"has_codeql_workflow": false,
"has_security_policy": false,
"has_dependabot_config": false
},
"contribution_flow": {
"collected": true,
"ci_last_run_at": "2026-07-25T19:44:04Z",
"oldest_open_prs": [],
"last_merged_pr_at": null,
"ci_last_conclusion": null,
"oldest_open_issues": []
}
},
"config": {
"disabled_metrics": [],
"disabled_categories": [],
"disabled_components": {}
},
"source": {
"url": "https://github.com/wintercms/wn-system-module",
"host": "github.com",
"name": "wn-system-module",
"owner": "wintercms"
},
"metrics": {
"overall": {
"key": "overall",
"band": "moderate",
"name": "Overall health",
"note": null,
"notes": [],
"value": 54,
"inputs": {
"security": 45,
"vitality": 66,
"community": 52,
"governance": 57,
"engineering": 46
},
"components": []
},
"categories": [
{
"key": "vitality",
"band": "moderate",
"name": "Vitality",
"value": 66,
"weight": 0.22,
"metrics": [
{
"key": "development_activity",
"band": "moderate",
"name": "Development activity",
"note": null,
"notes": [],
"value": 64,
"inputs": {
"commits_last_year": 22,
"human_commit_share": 1,
"days_since_last_push": 0,
"active_weeks_last_year": 13
},
"components": [
{
"key": "push_recency",
"name": "Push recency",
"detail": "last push 0 days ago",
"points": 36,
"status": "met",
"details": [
{
"code": "push_recency",
"params": {
"days": 0
}
}
],
"max_points": 36
},
{
"key": "commit_cadence",
"name": "Commit cadence",
"detail": "13/52 weeks with commits",
"points": 9,
"status": "partial",
"details": [
{
"code": "commit_cadence_weeks",
"params": {
"weeks": 13
}
}
],
"max_points": 36
},
{
"key": "commit_volume",
"name": "Commit volume",
"detail": "22 commits in the last year",
"points": 12.2,
"status": "partial",
"details": [
{
"code": "commits_last_year",
"params": {
"count": 22
}
}
],
"max_points": 18
},
{
"key": "openssf_scorecard_maintained",
"name": "OpenSSF Scorecard: Maintained",
"detail": "9 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 7",
"points": 7,
"status": "partial",
"details": [],
"max_points": 10
}
]
},
{
"key": "release_discipline",
"band": "good",
"name": "Release discipline",
"note": "Excluded from scoring (no data or not applicable): OpenSSF Scorecard: Signed-Releases. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"openssf_scorecard_signed_releases"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 70,
"inputs": {
"releases_count": 26,
"latest_release_tag": "v1.2.12",
"releases_from_tags": true,
"days_since_latest_release": 155,
"mean_days_between_releases": 106.5
},
"components": [
{
"key": "ships_releases",
"name": "Ships releases",
"detail": "26 version tags (no GitHub releases)",
"points": 16.2,
"status": "partial",
"details": [
{
"code": "version_tags_no_releases",
"params": {
"count": 26
}
}
],
"max_points": 27
},
{
"key": "release_recency",
"name": "Release recency",
"detail": "latest release 155 days ago",
"points": 27,
"status": "partial",
"details": [
{
"code": "release_recency",
"params": {
"days": 155
}
}
],
"max_points": 36
},
{
"key": "release_cadence",
"name": "Release cadence",
"detail": "a release every ~106.5 days",
"points": 19.8,
"status": "partial",
"details": [
{
"code": "release_cadence",
"params": {
"gap": 106.5
}
}
],
"max_points": 27
},
{
"key": "openssf_scorecard_signed_releases",
"name": "OpenSSF Scorecard: Signed-Releases",
"detail": "no releases found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 10
}
]
},
{
"key": "abandonment",
"band": "excellent",
"name": "Abandonment",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"cap": null,
"state": "maintained",
"guards": [],
"signals": [],
"red_flag": false,
"multiplier_pct": 100,
"declared_reason": null,
"unverified_reason": null,
"unanswered_open_prs": null,
"unanswered_open_issues": null,
"days_since_last_merged_pr": null,
"days_since_last_human_commit": 0,
"days_since_last_human_commit_is_floor": false
},
"components": [
{
"key": "project_is_still_maintained",
"name": "Project is still maintained",
"detail": "last human commit 0 days ago",
"points": 100,
"status": "met",
"details": [
{
"code": "abandonment_maintained",
"params": {
"days": 0
}
}
],
"max_points": 100
}
]
}
],
"description": "Is the project alive — is code being written and are releases shipping?"
},
{
"key": "community",
"band": "moderate",
"name": "Community & Adoption",
"value": 52,
"weight": 0.18,
"metrics": [
{
"key": "popularity",
"band": "critical",
"name": "Popularity & adoption",
"note": null,
"notes": [],
"value": 17,
"inputs": {
"forks": 6,
"stars": 4,
"watchers": 5,
"growth_state": "unverified",
"growth_factor_pct": 100,
"growth_unverified_reason": "no_history"
},
"components": [
{
"key": "stars",
"name": "Stars",
"detail": "4 stars",
"points": 7.7,
"status": "partial",
"details": [
{
"code": "stars",
"params": {
"count": 4
}
}
],
"max_points": 60
},
{
"key": "forks",
"name": "Forks",
"detail": "6 forks",
"points": 5.8,
"status": "partial",
"details": [
{
"code": "forks",
"params": {
"count": 6
}
}
],
"max_points": 25
},
{
"key": "watchers",
"name": "Watchers",
"detail": "5 watchers",
"points": 3.3,
"status": "partial",
"details": [
{
"code": "watchers",
"params": {
"count": 5
}
}
],
"max_points": 15
}
]
},
{
"key": "community_health",
"band": "excellent",
"name": "Community health",
"note": null,
"notes": [],
"value": 92,
"inputs": {
"has_readme": true,
"has_license": true,
"has_contributing": true,
"has_issue_template": false,
"has_code_of_conduct": true,
"has_pull_request_template": true
},
"components": [
{
"key": "readme",
"name": "README",
"detail": null,
"points": 22.5,
"status": "met",
"details": [],
"max_points": 22.5
},
{
"key": "license",
"name": "License",
"detail": "recognized license (MIT)",
"points": 22.5,
"status": "met",
"details": [
{
"code": "license_standard",
"params": {}
},
{
"code": "license_spdx",
"params": {
"spdx": "MIT"
}
}
],
"max_points": 22.5
},
{
"key": "contributing_guide",
"name": "CONTRIBUTING guide",
"detail": null,
"points": 18,
"status": "met",
"details": [],
"max_points": 18
},
{
"key": "code_of_conduct",
"name": "Code of conduct",
"detail": null,
"points": 13.5,
"status": "met",
"details": [],
"max_points": 13.5
},
{
"key": "issue_template",
"name": "Issue template",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.2
},
{
"key": "pr_template",
"name": "PR template",
"detail": null,
"points": 6.3,
"status": "met",
"details": [],
"max_points": 6.3
}
]
},
{
"key": "ecosystem_adoption",
"band": "moderate",
"name": "Ecosystem adoption (downloads)",
"note": null,
"notes": [],
"value": 54,
"inputs": {
"packages": [
"winter/wn-system-module"
],
"dependents": 7,
"ecosystems": "packagist",
"total_downloads": 260840,
"monthly_downloads": 4134
},
"components": [
{
"key": "monthly_downloads",
"name": "Monthly downloads",
"detail": "4,134 downloads/month across packagist",
"points": 48.2,
"status": "partial",
"details": [
{
"code": "downloads_monthly",
"params": {
"count": 4134,
"ecosystems": "packagist"
}
}
],
"max_points": 80
},
{
"key": "registry_dependents",
"name": "Registry dependents",
"detail": "7 packages depend on it",
"points": 6,
"status": "partial",
"details": [
{
"code": "registry_dependents",
"params": {
"count": 7
}
}
],
"max_points": 20
}
]
}
],
"description": "Does the project have users, downloads, attention, and a welcoming setup for contributors?"
},
{
"key": "governance",
"band": "moderate",
"name": "Sustainability & Governance",
"value": 57,
"weight": 0.24,
"metrics": [
{
"key": "maintainer_resilience",
"band": "moderate",
"name": "Maintainer resilience (bus factor)",
"note": null,
"notes": [],
"value": 62,
"inputs": {
"bus_factor": 2,
"contributors_sampled": 100,
"top_contributor_share": 0.424
},
"components": [
{
"key": "bus_factor",
"name": "Bus factor",
"detail": "2 contributor(s) cover half of all commits",
"points": 25.2,
"status": "partial",
"details": [
{
"code": "bus_factor",
"params": {
"count": 2
}
}
],
"max_points": 54
},
{
"key": "commit_distribution",
"name": "Commit distribution",
"detail": "top contributor authored 42% of commits",
"points": 13,
"status": "partial",
"details": [
{
"code": "top_contributor_share",
"params": {
"share": 42
}
}
],
"max_points": 22.5
},
{
"key": "contributor_breadth",
"name": "Contributor breadth",
"detail": "100 contributors",
"points": 13.5,
"status": "met",
"details": [
{
"code": "contributors_sampled",
"params": {
"count": 100
}
}
],
"max_points": 13.5
},
{
"key": "openssf_scorecard_contributors",
"name": "OpenSSF Scorecard: Contributors",
"detail": "project has 34 contributing companies or organizations",
"points": 10,
"status": "met",
"details": [],
"max_points": 10
}
]
},
{
"key": "responsiveness",
"band": "critical",
"name": "Issue & PR responsiveness",
"note": "Excluded from scoring (no data or not applicable): Issue resolution. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"issue_resolution"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 1,
"inputs": {
"merged_prs": 0,
"open_issues": 0,
"closed_issues": 0,
"issue_closed_ratio": null,
"closed_unmerged_prs": 3
},
"components": [
{
"key": "issue_resolution",
"name": "Issue resolution",
"detail": "no issues or no data",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_issues_or_data",
"params": {}
}
],
"max_points": 46.75
},
{
"key": "pr_acceptance",
"name": "PR acceptance",
"detail": "0/3 decided PRs merged",
"points": 0,
"status": "missed",
"details": [
{
"code": "decided_prs_merged",
"params": {
"merged": 0,
"decided": 3
}
}
],
"max_points": 38.25
},
{
"key": "openssf_scorecard_code_review",
"name": "OpenSSF Scorecard: Code-Review",
"detail": "Found 0/30 approved changesets -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
}
]
},
{
"key": "stewardship",
"band": "good",
"name": "Ownership & stewardship",
"note": null,
"notes": [],
"value": 71,
"inputs": {
"followers": 223,
"owner_type": "Organization",
"is_verified": null,
"owner_login": "wintercms",
"public_repos": 77,
"account_age_days": 1969
},
"components": [
{
"key": "ownership_backing",
"name": "Ownership backing",
"detail": "organization-owned",
"points": 30,
"status": "met",
"details": [
{
"code": "owner_organization",
"params": {}
}
],
"max_points": 30
},
{
"key": "verified_domain",
"name": "Verified domain",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 20
},
{
"key": "owner_reach",
"name": "Owner reach",
"detail": "223 followers of wintercms",
"points": 16.9,
"status": "partial",
"details": [
{
"code": "owner_followers",
"params": {
"count": 223,
"login": "wintercms"
}
}
],
"max_points": 25
},
{
"key": "track_record",
"name": "Track record",
"detail": "77 public repos, account ~5 yr old",
"points": 23.8,
"status": "partial",
"details": [
{
"code": "public_repos",
"params": {
"count": 77
}
},
{
"code": "account_age_years",
"params": {
"years": 5
}
}
],
"max_points": 25
}
]
},
{
"key": "package_maintenance",
"band": "excellent",
"name": "Package maintenance",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"packages": [
"winter/wn-system-module"
],
"ecosystems": "packagist",
"any_deprecated": false,
"min_days_since_publish": 155
},
"components": [
{
"key": "published_resolvable",
"name": "Published & resolvable",
"detail": "1 package(s) on packagist",
"points": 25,
"status": "met",
"details": [
{
"code": "packages_published",
"params": {
"count": 1,
"ecosystems": "packagist"
}
}
],
"max_points": 25
},
{
"key": "publish_recency",
"name": "Publish recency",
"detail": "latest publish 155 days ago",
"points": 35,
"status": "met",
"details": [
{
"code": "publish_recency",
"params": {
"days": 155
}
}
],
"max_points": 35
},
{
"key": "version_history",
"name": "Version history",
"detail": "26 published versions",
"points": 20,
"status": "met",
"details": [
{
"code": "published_versions",
"params": {
"count": 26
}
}
],
"max_points": 20
},
{
"key": "not_deprecated",
"name": "Not deprecated",
"detail": "active, not deprecated or yanked",
"points": 20,
"status": "met",
"details": [
{
"code": "package_not_deprecated",
"params": {}
}
],
"max_points": 20
}
]
}
],
"description": "Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?"
},
{
"key": "engineering",
"band": "at_risk",
"name": "Engineering Quality",
"value": 46,
"weight": 0.2,
"metrics": [
{
"key": "engineering_practices",
"band": "moderate",
"name": "Engineering practices",
"note": "Excluded from scoring (no data or not applicable): OpenSSF Scorecard: CI-Tests. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"openssf_scorecard_ci_tests"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 50,
"inputs": {
"has_ci": false,
"has_tests": true,
"has_editorconfig": false,
"has_linter_config": true,
"has_precommit_config": false
},
"components": [
{
"key": "ci_workflows",
"name": "CI workflows",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 24
},
{
"key": "tests_present",
"name": "Tests present",
"detail": null,
"points": 24,
"status": "met",
"details": [],
"max_points": 24
},
{
"key": "linter_config",
"name": "Linter config",
"detail": ".eslintrc.json",
"points": 16,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": ".eslintrc.json"
}
}
],
"max_points": 16
},
{
"key": "pre_commit_hooks",
"name": "Pre-commit hooks",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 9.6
},
{
"key": "editorconfig",
"name": ".editorconfig",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 6.4
},
{
"key": "openssf_scorecard_ci_tests",
"name": "OpenSSF Scorecard: CI-Tests",
"detail": "no pull request found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 20
}
]
},
{
"key": "documentation",
"band": "at_risk",
"name": "Documentation",
"note": null,
"notes": [],
"value": 40,
"inputs": {
"topics": [],
"has_wiki": false,
"homepage": null,
"has_readme": true,
"has_docs_dir": false,
"has_description": true
},
"components": [
{
"key": "readme",
"name": "README",
"detail": null,
"points": 30,
"status": "met",
"details": [],
"max_points": 30
},
{
"key": "documentation_directory",
"name": "Documentation directory",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 25
},
{
"key": "documentation_homepage_site",
"name": "Documentation / homepage site",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
},
{
"key": "repository_description",
"name": "Repository description",
"detail": null,
"points": 10,
"status": "met",
"details": [],
"max_points": 10
},
{
"key": "topics",
"name": "Topics",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
},
{
"key": "wiki",
"name": "Wiki",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
}
]
}
],
"description": "Are baseline engineering and documentation practices in place?"
},
{
"key": "security",
"band": "at_risk",
"name": "Security",
"value": 45,
"weight": 0.16,
"metrics": [
{
"key": "security_posture",
"band": "at_risk",
"name": "Security posture",
"note": "Excluded from scoring (no data or not applicable): CI-Tests, Dangerous-Workflow, Packaging, Pinned-Dependencies, Signed-Releases, Token-Permissions. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"ci_tests",
"dangerous_workflow",
"packaging",
"pinned_dependencies",
"signed_releases",
"token_permissions"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 45,
"inputs": {
"source": "openssf_scorecard",
"checks_evaluated": 12,
"scorecard_version": "v5.5.0",
"checks_inconclusive": 6,
"scorecard_aggregate": 4.5
},
"components": [
{
"key": "binary_artifacts",
"name": "Binary-Artifacts",
"detail": "no binaries found in the repo",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "branch_protection",
"name": "Branch-Protection",
"detail": "branch protection not enabled on development/release branches",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "ci_tests",
"name": "CI-Tests",
"detail": "no pull request found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 2.5
},
{
"key": "cii_best_practices",
"name": "CII-Best-Practices",
"detail": "no effort to earn an OpenSSF best practices badge detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 2.5
},
{
"key": "code_review",
"name": "Code-Review",
"detail": "Found 0/30 approved changesets -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "contributors",
"name": "Contributors",
"detail": "project has 34 contributing companies or organizations",
"points": 2.5,
"status": "met",
"details": [],
"max_points": 2.5
},
{
"key": "dangerous_workflow",
"name": "Dangerous-Workflow",
"detail": "no workflows found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 10
},
{
"key": "dependency_update_tool",
"name": "Dependency-Update-Tool",
"detail": "no update tool detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "fuzzing",
"name": "Fuzzing",
"detail": "project is not fuzzed",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "license",
"name": "License",
"detail": "license file detected",
"points": 2.5,
"status": "met",
"details": [],
"max_points": 2.5
},
{
"key": "maintained",
"name": "Maintained",
"detail": "9 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 7",
"points": 5.2,
"status": "partial",
"details": [],
"max_points": 7.5
},
{
"key": "packaging",
"name": "Packaging",
"detail": "packaging workflow not detected",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 5
},
{
"key": "pinned_dependencies",
"name": "Pinned-Dependencies",
"detail": "no dependencies found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 5
},
{
"key": "sast",
"name": "SAST",
"detail": "no SAST tool detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "security_policy",
"name": "Security-Policy",
"detail": "security policy file detected",
"points": 5,
"status": "met",
"details": [],
"max_points": 5
},
{
"key": "signed_releases",
"name": "Signed-Releases",
"detail": "no releases found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 7.5
},
{
"key": "token_permissions",
"name": "Token-Permissions",
"detail": "No tokens found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 7.5
},
{
"key": "vulnerabilities",
"name": "Vulnerabilities",
"detail": "0 existing vulnerabilities detected",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
}
]
},
{
"key": "high_risk_jurisdiction_exposure",
"band": "excellent",
"name": "High-Risk Jurisdiction Exposure",
"note": "Only high-confidence self-published location evidence affects this multiplier. Ambiguous matches are review-only; country evidence is not proof of nationality, citizenship, legal registration, malicious intent, or sanctions status.",
"notes": [
{
"code": "jurisdiction_evidence_limits",
"params": {}
}
],
"value": 100,
"inputs": {
"meaning": "self-published location evidence; not nationality or citizenship",
"red_flag": false,
"exposures": [],
"policy_countries": [
"Russia",
"Iran",
"North Korea"
],
"review_only_matches": 0,
"assessed_self_published_locations": 20
},
"components": [
{
"key": "policy_exposure_multiplier",
"name": "Policy exposure multiplier",
"detail": "no confirmed policy-scope location match",
"points": 100,
"status": "met",
"details": [
{
"code": "jurisdiction_no_match",
"params": {}
}
],
"max_points": 100
}
]
}
],
"description": "Are visible security and supply-chain practices strong, with no malicious dependency and no unresolved high-risk jurisdiction exposure?"
},
{
"key": "ai_readiness",
"band": "at_risk",
"name": "AI Readiness",
"value": 48,
"weight": 0,
"metrics": [
{
"key": "ai_agent_context",
"band": "at_risk",
"name": "Agent context & guidance",
"note": null,
"notes": [],
"value": 35,
"inputs": {
"has_llms_txt": false,
"legible_history_share": 0.66,
"agent_instruction_files": [],
"agent_instruction_max_bytes": null
},
"components": [
{
"key": "agent_instructions",
"name": "Agent instructions",
"detail": "no CLAUDE.md / AGENTS.md / editor rules",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_agent_instructions",
"params": {}
}
],
"max_points": 45
},
{
"key": "machine_readable_docs_llms_txt",
"name": "Machine-readable docs (llms.txt)",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
},
{
"key": "legible_commit_history",
"name": "Legible commit history",
"detail": "66 of 100 human commits state their intent (structured subject or explanatory body)",
"points": 35.2,
"status": "partial",
"details": [
{
"code": "legible_history",
"params": {
"legible": 66,
"sampled": 100
}
}
],
"max_points": 40
}
]
},
{
"key": "ai_verify_loop",
"band": "moderate",
"name": "Verify loop (build / test / typecheck)",
"note": "Excluded from scoring (no data or not applicable): OpenSSF Scorecard: Pinned-Dependencies. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"openssf_scorecard_pinned_dependencies"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 59,
"inputs": {
"has_nix": false,
"has_tests": true,
"lockfiles": [],
"has_dockerfile": false,
"typed_language": false,
"bootstrap_files": [
"assets/ui/vendor/flot/Makefile"
],
"has_devcontainer": false,
"has_linter_config": true,
"typecheck_configs": [],
"agent_commit_share": 0.01,
"toolchain_manifests": [],
"dependency_bot_commit_share": 0
},
"components": [
{
"key": "one_command_bootstrap",
"name": "One-command bootstrap",
"detail": "assets/ui/vendor/flot/Makefile",
"points": 18,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "assets/ui/vendor/flot/Makefile"
}
}
],
"max_points": 18
},
{
"key": "automated_tests",
"name": "Automated tests",
"detail": null,
"points": 22,
"status": "met",
"details": [],
"max_points": 22
},
{
"key": "lint_format_config",
"name": "Lint / format config",
"detail": ".eslintrc.json",
"points": 11,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": ".eslintrc.json"
}
}
],
"max_points": 11
},
{
"key": "static_type_checking",
"name": "Static type checking",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 11
},
{
"key": "reproducible_environment",
"name": "Reproducible environment",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
},
{
"key": "demonstrated_agent_practice",
"name": "Demonstrated agent practice",
"detail": "1 of the last 100 commits agent-authored or agent-credited",
"points": 2,
"status": "partial",
"details": [
{
"code": "agent_authored_commits",
"params": {
"count": 1,
"sampled": 100
}
}
],
"max_points": 10
},
{
"key": "automated_maintenance",
"name": "Automated maintenance",
"detail": "no automated dependency updates observed",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_dependency_automation",
"params": {}
}
],
"max_points": 8
},
{
"key": "openssf_scorecard_pinned_dependencies",
"name": "OpenSSF Scorecard: Pinned-Dependencies",
"detail": "no dependencies found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 10
}
]
},
{
"key": "ai_code_legibility",
"band": "moderate",
"name": "Code legibility for models",
"note": null,
"notes": [],
"value": 55,
"inputs": {
"primary_language": "PHP",
"largest_source_bytes": 1736208,
"source_files_sampled": 664,
"oversized_source_files": 1
},
"components": [
{
"key": "type_checkable_code",
"name": "Type-checkable code",
"detail": "PHP without a type-check config",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_typecheck_config_language",
"params": {
"language": "PHP"
}
}
],
"max_points": 45
},
{
"key": "manageable_file_sizes",
"name": "Manageable file sizes",
"detail": "1/664 source files over 60KB",
"points": 54.9,
"status": "partial",
"details": [
{
"code": "oversized_source_files",
"params": {
"kb": 60,
"sampled": 664,
"oversized": 1
}
}
],
"max_points": 55
}
]
},
{
"key": "ai_interfaces",
"band": "at_risk",
"name": "Machine-readable interfaces",
"note": null,
"notes": [],
"value": 40,
"inputs": {
"example_dirs": [
"sample"
],
"has_mcp_signal": false,
"api_schema_files": []
},
"components": [
{
"key": "api_schema_openapi_graphql_proto",
"name": "API schema (OpenAPI/GraphQL/proto)",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 40
},
{
"key": "mcp_server",
"name": "MCP server",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 20
},
{
"key": "runnable_examples",
"name": "Runnable examples",
"detail": "sample",
"points": 40,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "sample"
}
}
],
"max_points": 40
}
]
}
],
"description": "How well is the repo equipped to be developed and maintained with AI coding agents? An independent, experimental badge — weight 0.0, so it is surfaced on its own and does not affect the overall health score."
}
],
"metrics_version": "1.13.0"
},
"warnings": [
"Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token",
"No resolved dependencies carried a version and a supported ecosystem"
],
"report_type": "repository",
"generated_at": "2026-07-25T19:51:35.074699Z",
"schema_version": "0.27.0",
"badge_url": "https://raw.githubusercontent.com/inspect-software/badges/main/v1/w/wintercms/wn-system-module.svg",
"full_name": "wintercms/wn-system-module",
"license_state": "standard",
"license_spdx": "MIT"
}