@IsmaelMartinez

Portfolio health · 2026-10-13 · click any repo for detail · weekly digest

This rather wants your attention

A critical matter has surfaced. I'd see to it before the tea goes cold.

8 Gold 6 Silver · 14 security alerts

57% Gold · 14 repos, 14 active

Since the last run

Nothing's stirred since my last round. A quiet portfolio is a contented one.

Needs your attention

#	Repo	Action	Effort
1	teams-for-linux	Fix 2 critical, 1 high vulnerability alerts	moderate
2	wifisentinel	Fix 1 high vulnerability alerts	moderate
3	ismaelmartinez.me.uk	Fix 3 high vulnerability alerts	moderate
4	ismaelmartinez.me.uk	Fix 1 high code scanning alerts	moderate
5	bonnie-wee-plot	Fix 2 high vulnerability alerts	moderate
6	betis-escocia	Fix 2 high vulnerability alerts	moderate
7	generator-atlassian-compass-event-catalog	Fix 1 critical, 1 high vulnerability alerts	moderate

Governance (14)

By remediation: 6 agent (local PR) · 8 manual (your hand)

Open Vulnerabilities

Dependabot autofix: in flight = GitHub's automated security fixes are opening the bump PRs; not driven = enable them via the dependabot-security apply action.

Repo	Priority	Source	Open alerts	Dependabot autofix
ismaelmartinez.me.uk	medium	dependabot, code-scanning	4 high	✓ in flight
teams-for-linux	medium	dependabot	2 critical, 1 high	✓ in flight
generator-atlassian-compass-event-catalog	medium	dependabot	1 critical, 1 high	✓ in flight
bonnie-wee-plot	medium	dependabot	2 high	✓ in flight
betis-escocia	medium	dependabot	2 high	✓ in flight
wifisentinel	medium	dependabot	1 high	✓ in flight

Tier Regressions

Repos whose health tier fell since the previous weekly snapshot. The way back up is in Tier Uplift Opportunities below.

Repo	Change	Priority	Since
betis-escocia	Gold → Silver	high	2026-W41
bonnie-wee-plot	Gold → Silver	high	2026-W41

Tier Uplift Opportunities

Repo	Path	Priority	Remaining checks
teams-for-linux	Silver → Gold	high	Zero critical/high security findings
generator-atlassian-compass-event-catalog	Silver → Gold	high	Zero critical/high security findings
bonnie-wee-plot	Silver → Gold	high	Zero critical/high security findings
betis-escocia	Silver → Gold	high	Zero critical/high security findings
ismaelmartinez.me.uk	Silver → Gold	high	Release in the last 90 days, Zero critical/high security findings
wifisentinel	Silver → Gold	high	Release in the last 90 days, Zero critical/high security findings

Improvement Campaigns

Community Health

14/14

Repos with community health score >= 80%

100% complete

All repos compliant

Vulnerability Free

8/14

Repos with zero critical/high vulnerabilities

57% complete

6 repos need attention

teams-for-linux, wifisentinel, ismaelmartinez.me.uk, bonnie-wee-plot, betis-escocia, generator-atlassian-compass-event-catalog

CI Reliability

12/14

Repos with CI pass rate >= 90%

86% complete

2 repos need attention

wifisentinel, lounge-tv

License Compliance

14/14

Repos with a license configured

100% complete

All repos compliant

Issue Templates

14/14

Repos with issue templates configured

100% complete

All repos compliant

All repos · 14

Repo	Tier	Issues	PRs	CI%	Vulns	Next Step
teams-for-linux ↗	Silver	22	18	93%	6	Zero critical/high security findings
wifisentinel	Silver	0	4	88%	1	Release in the last 90 days
repo-butler ↗	Gold	8	1	100%	0	All checks pass
ismaelmartinez.me.uk ↗	Silver	4	8	99%	5	Release in the last 90 days
bonnie-wee-plot ↗	Silver	0	3	93%	2	Zero critical/high security findings
betis-escocia ↗	Silver	0	0	92%	2	Zero critical/high security findings
yourear ↗	Gold	0	3	98%	2	All checks pass
ai-model-advisor ↗	Gold	10	1	94%	0	All checks pass
delegate-local	Gold	6	9	97%	0	All checks pass
generator-atlassian-compass-event-catalog	Silver	0	0	100%	3	Zero critical/high security findings
lounge-tv ↗	Gold	0	0	88%	0	All checks pass
sound3fy ↗	Gold	0	0	96%	0	All checks pass
skill-sources	Gold	1	0	100%	0	All checks pass
github-issue-triage-bot ↗	Gold	0	0	92%	0	All checks pass

Show all columns (14 repos)

Repo	Lang	Stars	Issues	Commits	CI	License	Community	Vulns	Deps	Contributors	Status	Tier
teams-for-linux ↗	JavaScript	5134	22	401	93% (20)	GPL-3.0	100%	6	1852	21	active	Silver
wifisentinel	TypeScript	3	0	156	88% (8)	MIT	100%	1	428	1	active	Silver
repo-butler ↗	JavaScript	3	8	314	100% (14)	MIT	100%	0	10	1	active	Gold
ismaelmartinez.me.uk ↗	TypeScript	1	4	257	99% (12)	MIT	100%	5	—	1	active	Silver
bonnie-wee-plot ↗	TypeScript	3	0	319	93% (9)	NOASSERTION	100%	2	—	1	active	Silver
betis-escocia ↗	TypeScript	2	0	111	92% (9)	MIT	100%	2	—	1	active	Silver
yourear ↗	TypeScript	1	0	85	98% (8)	MIT	100%	2	—	1	active	Gold
ai-model-advisor ↗	JavaScript	1	10	90	94% (11)	MIT	100%	0	—	1	active	Gold
delegate-local	Shell	7	6	527	97% (8)	MIT	100%	0	—	1	active	Gold
generator-atlassian-compass-event-catalog	TypeScript	4	0	57	100% (10)	MIT	85%	3	—	1	active	Silver
lounge-tv ↗	HTML	2	0	35	88% (8)	MIT	100%	0	—	1	active	Gold
sound3fy ↗	JavaScript	5	0	58	96% (9)	MIT	100%	0	—	1	active	Gold
skill-sources	JavaScript	0	1	69	100% (10)	MIT	100%	0	—	1	active	Gold
github-issue-triage-bot ↗	Go	1	0	83	92% (17)	MIT	100%	0	—	1	active	Gold

Commit Activity (26 weeks)

Weekly Commits by Repository

Dependency Inventory

Total Unique Dependencies

2.3k

across 3 repos with SBOM

Shared Dependencies

used in 2+ repos

License Notes

27 low-risk

copyleft deps (low risk for non-commercial use)

Most Common Dependencies (used in 2+ repos)

Package	Repos	License
google/osv-scanner-action/.github/workflows/osv-scanner-reusable.yml	3	unknown
google/osv-scanner-action/.github/workflows/osv-scanner-reusable-pr.yml	3	unknown
github/codeql-action/analyze	2	unknown
github/codeql-action/init	2	unknown
dependabot/fetch-metadata	2	unknown

Low-risk copyleft dependencies (27) — fine for non-commercial use

License	Dependencies	Note
Apache-2.0 OR (Apache-2.0 AND LGPL-3.0-only)	@opentelemetry/api	Weak copyleft: only modifications to the library itself must be shared. Fine as a dependency.
MPL-2.0	lightningcss-win32-x64-msvc, lightningcss-linux-arm64-gnu, lightningcss-linux-arm-gnueabihf +9 more	File-level copyleft: only modified files must stay MPL-2.0. Fine as a dependency.
Apache-2.0 AND LGPL-3.0-or-later	@img/sharp-win32-arm64, @img/sharp-win32-x64, @img/sharp-win32-ia32	Weak copyleft: only modifications to the library itself must be shared. Fine as a dependency.
LGPL-3.0-or-later	@img/sharp-libvips-linux-arm64, @img/sharp-libvips-linux-riscv64, @img/sharp-libvips-linuxmusl-arm64 +7 more	Weak copyleft: only modifications to the library itself must be shared. Fine as a dependency.
Apache-2.0 AND LGPL-3.0-or-later AND MIT	@img/sharp-wasm32	Weak copyleft: only modifications to the library itself must be shared. Fine as a dependency.

About Repo Butler

Repo Butler is a GitHub Action that runs a seven-phase pipeline — OBSERVE → ASSESS → UPDATE → GOVERNANCE → IDEATE → PROPOSE → REPORT — across a portfolio of repositories, generating this dashboard, opening improvement issues, and surfacing governance findings. It runs four times a day on GitHub Actions with zero npm dependencies. Source and docs: github.com/IsmaelMartinez/repo-butler.

About — How it works

OBSERVE — gathers project state via the GitHub API (issues, PRs, releases, labels, workflows, roadmap content) and classifies all portfolio repos by activity level. No LLM needed.
ASSESS — diffs the current snapshot against the previous run, computes weekly trends (growing/shrinking/stable), and optionally summarises changes with Gemini Flash.
UPDATE — generates an updated roadmap document, validates it through a safety layer, and opens a PR.
GOVERNANCE — runs deterministic detectors over the portfolio — standards gaps, policy drift, tier-uplift opportunities, tier regressions, open vulnerabilities, stale Dependabot PRs — and persists findings to the data branch. No LLM cost, so the daily pipeline runs it 4×/day.
IDEATE — generates improvement ideas using an LLM (Claude for deeper reasoning, Gemini Flash as default), feeding off the fresh governance findings.
PROPOSE — safety-filters ideas (URL allowlist, @mention blocking, secret detection), then creates GitHub issues capped at max_issues_per_run, sorted by priority, labelled for human review.
REPORT — generates HTML dashboards for every active repo in the portfolio, deployed to GitHub Pages.