A critical matter has surfaced. I'd see to it before the tea goes cold.
Nothing's stirred since my last round. A quiet portfolio is a contented one.
| # | Repo | Action | Effort |
|---|---|---|---|
| 1 | ismaelmartinez.me.uk | Fix 4 high vulnerability alerts | moderate |
| 2 | bonnie-wee-plot | Fix 2 high vulnerability alerts | moderate |
By remediation: 2 agent (local PR) · 6 manual (your hand)
Dependabot autofix: in flight = GitHub's automated security fixes are opening the bump PRs; not driven = enable them via the dependabot-security apply action.
| Repo | Priority | Source | Open alerts | Dependabot autofix |
|---|---|---|---|---|
| ismaelmartinez.me.uk | medium | dependabot | 4 high | ✓ in flight |
| bonnie-wee-plot | medium | dependabot | 2 high | ✓ in flight |
Repos whose health tier fell since the previous weekly snapshot. The way back up is in Tier Uplift Opportunities below.
| Repo | Change | Priority | Since |
|---|---|---|---|
| bonnie-wee-plot | Gold → Silver | high | 2026-W35 |
| ismaelmartinez.me.uk | Gold → Silver | high | 2026-W35 |
| Repo | Path | Priority | Remaining checks |
|---|---|---|---|
| ismaelmartinez.me.uk | Silver → Gold | high | Zero critical/high security findings |
| bonnie-wee-plot | Silver → Gold | high | Zero critical/high security findings |
| Repo | Tier | Issues | PRs | CI% | Vulns | Next Step |
|---|---|---|---|---|---|---|
| repo-butler ↗ | Gold | 1 | 1 | 100% | 0 | All checks pass |
| ismaelmartinez.me.uk ↗ | Silver | 4 | 8 | 97% | 6 | Zero critical/high security findings |
| generator-atlassian-compass-event-catalog | Gold | 0 | 1 | 100% | 0 | All checks pass |
| teams-for-linux ↗ | Gold | 20 | 13 | 100% | 0 | All checks pass |
| wifisentinel | Gold | 0 | 2 | 95% | 0 | All checks pass |
| bonnie-wee-plot ↗ | Silver | 0 | 3 | 99% | 2 | Zero critical/high security findings |
| yourear ↗ | Gold | 0 | 0 | 92% | 1 | All checks pass |
| sound3fy ↗ | Gold | 0 | 1 | 93% | 1 | All checks pass |
| ai-model-advisor ↗ | Gold | 0 | 0 | 97% | 0 | All checks pass |
| betis-escocia ↗ | Gold | 0 | 2 | 96% | 0 | All checks pass |
| lounge-tv ↗ | Gold | 0 | 0 | 85% | 0 | All checks pass |
| delegate-local | Gold | 8 | 1 | 100% | 0 | All checks pass |
| github-issue-triage-bot ↗ | Gold | 0 | 0 | 92% | 0 | All checks pass |
| skill-sources | Gold | 2 | 2 | 100% | 0 | All checks pass |
| Repo | Lang | Stars | Issues | Commits | CI | License | Community | Vulns | Deps | Contributors | Status | Tier |
|---|---|---|---|---|---|---|---|---|---|---|---|---|
| repo-butler ↗ | JavaScript | 3 | 1 | 447 | 100% (14) | MIT | 100% | 0 | 10 | 1 | active | Gold |
| ismaelmartinez.me.uk ↗ | TypeScript | 1 | 4 | 237 | 97% (12) | MIT | 100% | 6 | 670 | 1 | active | Silver |
| generator-atlassian-compass-event-catalog | TypeScript | 4 | 0 | 81 | 100% (10) | MIT | 85% | 0 | 382 (341.2y) | 1 | active | Gold |
| teams-for-linux ↗ | JavaScript | 5005 | 20 | 385 | 100% (19) | GPL-3.0 | 100% | 0 | — | 13 | active | Gold |
| wifisentinel | TypeScript | 2 | 0 | 326 | 95% (8) | MIT | 100% | 0 | 433 | 1 | active | Gold |
| bonnie-wee-plot ↗ | TypeScript | 2 | 0 | 283 | 99% (9) | NOASSERTION | 100% | 2 | — | 1 | active | Silver |
| yourear ↗ | TypeScript | 1 | 0 | 65 | 92% (9) | MIT | 100% | 1 | 513 (308.3y) | 1 | active | Gold |
| sound3fy ↗ | JavaScript | 5 | 0 | 51 | 93% (9) | MIT | 100% | 1 | 221 (101.9y) | 1 | active | Gold |
| ai-model-advisor ↗ | JavaScript | 1 | 0 | 104 | 97% (11) | MIT | 100% | 0 | 200 (50.5y) | 1 | active | Gold |
| betis-escocia ↗ | TypeScript | 1 | 0 | 108 | 96% (9) | MIT | 100% | 0 | — | 1 | active | Gold |
| lounge-tv ↗ | HTML | 1 | 0 | 51 | 85% (8) | MIT | 100% | 0 | 10 | 0 | active | Gold |
| delegate-local | Shell | 5 | 8 | 409 | 100% (8) | MIT | 100% | 0 | 5 | 1 | active | Gold |
| github-issue-triage-bot ↗ | Go | 1 | 0 | 124 | 92% (17) | MIT | 100% | 0 | 25 | 1 | active | Gold |
| skill-sources | JavaScript | 0 | 2 | 59 | 100% (10) | MIT | 100% | 0 | 78 (6.0y) | 1 | active | Gold |
| Package | Repos | License |
|---|---|---|
| google/osv-scanner-action/.github/workflows/osv-scanner-reusable.yml | 9 | unknown |
| google/osv-scanner-action/.github/workflows/osv-scanner-reusable-pr.yml | 9 | unknown |
| dependabot/fetch-metadata | 8 | unknown |
| github/codeql-action/analyze | 5 | unknown |
| github/codeql-action/init | 5 | unknown |
| dependabot/fetch-metadata | 3 | unknown |
| google/osv-scanner-action/.github/workflows/osv-scanner-reusable.yml | 2 | unknown |
| google/osv-scanner-action/.github/workflows/osv-scanner-reusable-pr.yml | 2 | unknown |
| License | Dependencies | Note |
|---|---|---|
| MPL-2.0 | @resvg/resvg-js-linux-arm64-gnu, @resvg/resvg-js-win32-x64-msvc, lightningcss-linux-arm-gnueabihf +22 more | File-level copyleft: only modified files must stay MPL-2.0. Fine as a dependency. |
| LGPL-3.0-or-later | @img/sharp-libvips-darwin-x64, @img/sharp-libvips-linux-ppc64, @img/sharp-libvips-linux-x64 +7 more | Weak copyleft: only modifications to the library itself must be shared. Fine as a dependency. |
| Apache-2.0 AND LGPL-3.0-or-later AND MIT | @img/sharp-wasm32 | Weak copyleft: only modifications to the library itself must be shared. Fine as a dependency. |
| Apache-2.0 AND LGPL-3.0-or-later | @img/sharp-win32-ia32, @img/sharp-win32-arm64, @img/sharp-win32-x64 | Weak copyleft: only modifications to the library itself must be shared. Fine as a dependency. |
| (MPL-2.0 OR Apache-2.0) | dompurify | File-level copyleft: only modified files must stay MPL-2.0. Fine as a dependency. |
| Apache-2.0 OR (Apache-2.0 AND LGPL-3.0-only) | @opentelemetry/api | Weak copyleft: only modifications to the library itself must be shared. Fine as a dependency. |
max_issues_per_run, sorted by priority, labelled for human review.