You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Following up on #711, which was closed with a pointer to Discussions.
Headroom has a public profile on HVTracker, an independent registry that scores open-source AI agent projects on signals you can verify: OSSF Scorecard, signed commits, release provenance, maintenance activity and known advisories.
Would you be open to adding one badge to the README badge row? It's a live SVG that updates as the score changes, and it links readers to the full profile:
deepset-ai/haystack, HKUDS/LightRAG and ComposioHQ/composio carry it today.
One thing the profile flags that's easy to fix: PyPI releases since 0.32.1 ship without provenance attestations (attestations: false in release.yml, added in #2405). 0.30.0, 0.31.0 and four of the 0.32.0 wheels uploaded fine with attestations on, so they probably weren't what broke the 0.32.0 Windows upload. Happy to open a one-line PR to turn them back on, separate from the badge.
Disclosure: I maintain HVTracker. If you'd rather keep the badge row as it is, no problem at all.
reacted with thumbs up emoji reacted with thumbs down emoji reacted with laugh emoji reacted with hooray emoji reacted with confused emoji reacted with heart emoji reacted with rocket emoji reacted with eyes emoji
Uh oh!
There was an error while loading. Please reload this page.
Following up on #711, which was closed with a pointer to Discussions.
Headroom has a public profile on HVTracker, an independent registry that scores open-source AI agent projects on signals you can verify: OSSF Scorecard, signed commits, release provenance, maintenance activity and known advisories.
Profile: https://hvtracker.net/agents/headroom/
It currently reads HVTrust 74.0/100, Grade B, with 100% signed commits and an OSSF Scorecard of 6.5.
Would you be open to adding one badge to the README badge row? It's a live SVG that updates as the score changes, and it links readers to the full profile:
deepset-ai/haystack, HKUDS/LightRAG and ComposioHQ/composio carry it today.
One thing the profile flags that's easy to fix: PyPI releases since 0.32.1 ship without provenance attestations (
attestations: falseinrelease.yml, added in #2405). 0.30.0, 0.31.0 and four of the 0.32.0 wheels uploaded fine with attestations on, so they probably weren't what broke the 0.32.0 Windows upload. Happy to open a one-line PR to turn them back on, separate from the badge.Disclosure: I maintain HVTracker. If you'd rather keep the badge row as it is, no problem at all.
All reactions