v2.9.0 — an engine that proves it, then shows you the proof
v2.9.0 announcement — paste-ready
Paste-ready for X/LinkedIn/dev.to. Cover: docs/og.png. Tags: ai, webdev, security, opensource.
reimagine-it v2.9.0 — an engine that proves it, then shows you the proof
We just cut v2.9.0. Where v2.8.0 made the output move, v2.9.0 makes the repo auditable at a glance: everything the CI enforces is now visible on the project page and the live site.
Three things worth your time:
1. The site now shows the receipts. The docs site carries the same security badge row as the README (CI Gate, protected main, secret scanning, SLSA provenance, live OpenSSF Scorecard), a new agents section (the 8 MCP tools — an agent can generate, self-audit with 19 rules, and explain its design decision), and a measured-quality section: 17/17 tokens at 100/100 usability, byte-identical regeneration enforced by CI, fuzzed honesty contract, offline-by-construction. Hero stats and the token marquee now tell the truth: 17 directions, 9 committed journeys.
2. The Scorecard sweep is done. Every fixable OpenSSF check is at 10/10 — token permissions, SHA-pinned actions, complete PyPI hash-set pins (106 hashes for Pillow alone, after partial pins broke on a third-platform wheel), CodeQL + Semgrep on every push, a structural workflow lint in the required gate (negative-tested against the exact parse-time outage it prevents), cosign-signed release artifacts, SLSA provenance on npm. Weekly automated trend tracking opens a regression issue if the aggregate ever drops.
3. Branch protection at maximum. enforce_admins is on: every change — including the owner's — lands through a reviewed PR with the full battery green. For client audits, "who can change this code" now has a one-word answer: nobody without a green gate and a review.
Try it: npx reimagine-it --auto -i page.html -o redesign.html — or paste HTML into the in-browser playground: https://kayforkind.github.io/reimagine-it/
MIT · offline · deterministic · no API keys.
Verification checklist (filled at release)
npm view reimagine-it versionreturns 2.9.0npm view reimagine-it dist.attestationsshows provenance- Release assets carry cosign signatures (verify with
cosign verify-blob) - Docs site version chip reads v2.9.0, identical to README and npm
📊 Measured quality (auto-generated)
| Direction | Fidelity (title kept) | Usability (quality /100) | Content art (glyphs/donut/bars/prism) |
|---|---|---|---|
webpage |
18/18 | 100/100 | 9.0 |
landing |
18/18 | 100/100 | 10.0 |
dashboard |
18/18 | 100/100 | 10.8 |
infographic |
18/18 | 100/100 | 9.0 |
cinematic |
18/18 | 100/100 | 13.0 |
artistic |
18/18 | 100/100 | 11.0 |
photography |
18/18 | 100/100 | 20.0 |
svg |
18/18 | 100/100 | 10.0 |
3js |
18/18 | 100/100 | 2.0 |
simulation |
18/18 | 100/100 | 13.0 |
glass |
18/18 | 100/100 | 10.0 |
editorial |
18/18 | 100/100 | 8.0 |
motion |
18/18 | 100/100 | 14.0 |
gradient |
18/18 | 100/100 | 10.0 |
showcase |
18/18 | 100/100 | 14.0 |
lookbook |
18/18 | 100/100 | 20.0 |
particles |
18/18 | 100/100 | 8.0 |
| Output diversity: 22.7% mean pairwise difference between directions on the same source — no two tokens produce the same page. | |||
Coverage: 68 generated pages (17 tokens × 4 sources), all audited structurally. Regenerate with node scripts/benchmark-tokens.js. |
🛒 GitHub Actions Marketplace
This release publishes the reimagine-it Design Health action to the GitHub Actions marketplace.
Quick start
- uses: Kayforkind/reimagine-it@v2.9.0
with:
path: "**/*.html"What it checks
| Category | Checks |
|---|---|
| Typography | Hierarchy levels, text measure, banned default fonts |
| Palette | Off-palette accents, unstyled ::selection, transition:all |
| Motion | Missing prefers-reduced-motion, missing :focus-visible, non-compositor animation |
| Content | Placeholder copy, vibe adjectives, emoji farm |
| Structure | CDN / external font fetch, figure system |
| Performance | Image dimensions, content-visibility |
19 deterministic rules. No LLM. No API key.