refactor: consolidate pipeline, auto-generate README, fix publishing

Pipeline:
- Move health scores, trends, alerts INTO orchestrator (were separate workflow steps)
- Fix duplicate manifest writes (3→2: preliminary + final)
- Remove redundant unprotected readme-stats call
- 403 rate-limit now falls through to Python fallback instead of hard fail

README auto-generation:
- update-readme-stats.ps1 rewritten (48→162 lines) to regenerate ALL marker sections
- TRACKED_PROJECTS table, CONTRIBUTIONS_MERGED, CONTRIBUTIONS_OPEN now data-driven
- Honest reframing: "across tracked ecosystem" instead of inflated claims

CI/CD:
- Add Pester test job to validate.yml
- Fix publish-cli.yml: npmjs.org registry + NPM_TOKEN + --access public
- Simplify evidence-daily.yml to single orchestrator call

Docs: update ARCHITECTURE, DATA_MODEL, ROADMAP, CHANGELOG, CONTRIBUTING

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

Author: dusan-maintains

.github/workflows/evidence-daily.yml

@@ -22,33 +22,15 @@ jobs:
           git config user.name "dusan-maintains-bot"
           git config user.email "action@users.noreply.github.com"
 
-      - name: Update All Evidence
+      - name: Full Refresh
         shell: pwsh
         env:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
-        run: |
-          ./scripts/update-all-evidence.ps1
-
-      - name: Compute Health Scores
-        shell: pwsh
-        run: |
-          ./scripts/compute-health-scores.ps1
-
-      - name: Compute Trends
-        shell: pwsh
-        run: |
-          ./scripts/compute-trends.ps1
-
-      - name: Check Alerts
-        shell: pwsh
-        env:
-          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
-        run: |
-          ./scripts/check-alerts.ps1
+        run: ./scripts/update-all-evidence.ps1
 
       - name: Commit and Push Changes
         run: |
-          git add evidence/*.json evidence/*.md evidence/badges/*.svg README.md
+          git add evidence/ README.md
           if git diff --cached --quiet; then
             echo "No changes to commit."
             exit 0

.github/workflows/publish-cli.yml

@@ -1,12 +1,11 @@
-name: Publish CLI to GitHub Packages
+name: Publish CLI to npm
 
 on:
   release:
     types: [published]
 
 permissions:
   contents: read
-  packages: write
 
 jobs:
   publish:
@@ -23,9 +22,9 @@ jobs:
         uses: actions/setup-node@v4
         with:
           node-version: '20'
-          registry-url: 'https://npm.pkg.github.com'
+          registry-url: 'https://registry.npmjs.org'
 
       - name: Publish
-        run: npm publish
+        run: npm publish --access public
         env:
-          NODE_AUTH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+          NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}

.github/workflows/validate.yml

@@ -15,9 +15,21 @@ jobs:
         uses: actions/checkout@v6
 
       - name: Validate configuration and scripts
+        shell: pwsh
+        run: ./scripts/validate-repo.ps1
+
+  test-pester:
+    runs-on: ubuntu-latest
+
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v6
+
+      - name: Run Pester tests
         shell: pwsh
         run: |
-          ./scripts/validate-repo.ps1
+          $results = Invoke-Pester tests/ -PassThru
+          if ($results.FailedCount -gt 0) { exit 1 }
 
   test-cli:
     runs-on: ubuntu-latest

CHANGELOG.md

@@ -2,10 +2,27 @@
 
 All notable changes to this project will be documented here.
 
+## [1.1.0] — 2026-03-17
+
+### Added
+- CLI: retry logic with exponential backoff for transient HTTP failures
+- CLI: comprehensive unit tests for scoring algorithm (15 test cases)
+- CI: CLI unit tests and smoke test in validate workflow
+- GitHub Action (`action.yml`) as composite reusable action for other repos
+
+### Fixed
+- CLI: correct rate-limit header extraction from GitHub API responses
+- CLI: handle missing/null fields gracefully in score computation
+
+### Changed
+- Bumped `actions/checkout` from v4 to v6 in all workflows
+- README reframed for honest contribution scope (removed inflated aggregate claims)
+- CONTRIBUTING.md updated to reference config-driven workflow
+
 ## [1.0.0] — 2026-02-27
 
 ### Added
-- Automated health tracking for 7 OSS packages (9,066 combined stars, 1.6M npm downloads/week)
+- Automated health tracking for 7 OSS packages across the tracked ecosystem
 - GitHub Actions workflow running every 6 hours — zero manual updates required
 - Machine-readable JSON evidence snapshots in `evidence/`
 - Human-readable Markdown SLA reports per tracked repo

CONTRIBUTING.md

@@ -8,10 +8,10 @@ An automated health tracker for open-source packages that need maintenance. The
 
 ### Add a new tracked package
 
-1. Add the target definition in `scripts/update-ecosystem-status.ps1`
-2. Add a corresponding `update-review-sla.ps1` call in `.github/workflows/evidence-daily.yml`
-3. Run all scripts locally to verify output
-4. Submit a PR with the script changes + generated evidence files
+1. Add the repository definition to `config/tracked-repositories.json` — this is the single source of truth
+2. Run `./scripts/validate-repo.ps1` to check the config
+3. Run `./scripts/update-all-evidence.ps1` to generate evidence files
+4. Submit a PR with the config change + generated evidence files
 
 ### Improve the scripts
 
@@ -22,10 +22,15 @@ An automated health tracker for open-source packages that need maintenance. The
 ## Running Locally
 
 ```powershell
-./scripts/update-evidence.ps1
-./scripts/update-ecosystem-status.ps1
-./scripts/update-review-sla.ps1
-./scripts/update-action-queue.ps1
+# Validate config and structure
+./scripts/validate-repo.ps1
+
+# Full refresh (runs all steps)
+./scripts/update-all-evidence.ps1
+
+# Health scores + trends (after evidence refresh)
+./scripts/compute-health-scores.ps1
+./scripts/compute-trends.ps1
 ```
 
 Set `GITHUB_TOKEN` for higher API rate limits:

README.md

@@ -1,6 +1,6 @@
 # OSS Maintenance Log
 
-> <!-- TAGLINE:START -->One maintainer. 7 packages. **1.4M npm downloads/week** kept alive.<!-- TAGLINE:END -->
+> <!-- TAGLINE:START -->Contributing to 7 open-source packages — **1.4M npm downloads/week** across tracked ecosystem.<!-- TAGLINE:END -->
 
 [![⭐ Star if useful](https://img.shields.io/badge/⭐-Star_if_useful-ffd700?style=for-the-badge)](https://github.com/dusan-maintains/oss-maintenance-log/stargazers)
 [![npm](https://img.shields.io/npm/v/oss-health-scan?style=for-the-badge&color=cb3837&label=npm)](https://www.npmjs.com/package/oss-health-scan)
@@ -11,7 +11,7 @@
 <!-- RUN_STATUS:END -->
 [![License: MIT](https://img.shields.io/badge/License-MIT-green.svg)](./LICENSE)
 [![Tracked Packages](https://img.shields.io/badge/packages%20tracked-7-blue.svg)](#currently-tracked-projects)
-[![Weekly npm Downloads](https://img.shields.io/badge/npm%20downloads%2Fweek-1.4M%2B-brightgreen.svg)](#-live-data)
+[![Tracked Ecosystem](https://img.shields.io/badge/tracked%20ecosystem-1.4M%2B-brightgreen.svg)](#-live-data)
 [![Open PRs](https://img.shields.io/badge/upstream%20PRs-8%20open-orange.svg)](#contributions)
 [![Auto-Updates](https://img.shields.io/badge/auto--updates-every%206h-blueviolet.svg)](https://github.com/dusan-maintains/oss-maintenance-log/actions)
 
@@ -103,7 +103,7 @@ Config-driven PowerShell + GitHub Actions that automatically:
 | [Hellenic/react-hexgrid](https://github.com/Hellenic/react-hexgrid) | 350 | 1,702 | 🟡 Maintainer Needed | ![health](evidence/badges/health-react-hexgrid.svg) | [#123](https://github.com/Hellenic/react-hexgrid/pull/123) |
 <!-- TRACKED_PROJECTS:END -->
 
-**Combined: <!-- STATS:START -->83.7k stars · 1.4M npm downloads/week<!-- STATS:END -->**
+*Across tracked projects:* **<!-- STATS:START -->83.7k stars · 1.4M downloads/week across tracked projects<!-- STATS:END -->**
 
 ## Health Scoring
 
@@ -139,26 +139,6 @@ Each package gets a **weighted health score (0–100)**:
 - **react-hexgrid #123** — Add tests for `GridGenerator.ring()` and `GridGenerator.spiral()`
 <!-- CONTRIBUTIONS_OPEN:END -->
 
-<details>
-<summary><strong>Full contribution log (25 entries)</strong></summary>
-
-| Date (UTC) | Project | Type | Link | Status |
-|---|---|---|---|---|
-| 2026-02-27 | jquery-modal | Fork | [dusan-maintains/jquery-modal](https://github.com/dusan-maintains/jquery-modal) | Active |
-| 2026-02-27 | jquery-modal | PR | [#315](https://github.com/kylefox/jquery-modal/pull/315) | Open |
-| 2026-02-27 | jquery-modal | PR | [#316](https://github.com/kylefox/jquery-modal/pull/316) | Open |
-| 2026-02-27 | jquery-modal | PR | [#317](https://github.com/kylefox/jquery-modal/pull/317) | Open |
-| 2026-02-27 | jquery-tablesort | Fork | [dusan-maintains/jquery-tablesort](https://github.com/dusan-maintains/jquery-tablesort) | Active |
-| 2026-02-27 | jquery-tablesort | PR | [#49](https://github.com/kylefox/jquery-tablesort/pull/49) | Open |
-| 2026-02-27 | python-shell | Fork | [dusan-maintains/python-shell](https://github.com/dusan-maintains/python-shell) | Active |
-| 2026-02-27 | python-shell | PR | [#320](https://github.com/extrabacon/python-shell/pull/320) | Open |
-| 2026-02-27 | rrule | Fork | [dusan-maintains/rrule](https://github.com/dusan-maintains/rrule) | Active |
-| 2026-02-27 | rrule | PR | [#664](https://github.com/jkbrzt/rrule/pull/664) | Open |
-| 2026-02-27 | react-hexgrid | Fork | [dusan-maintains/react-hexgrid](https://github.com/dusan-maintains/react-hexgrid) | Active |
-| 2026-02-27 | react-hexgrid | PR | [#123](https://github.com/Hellenic/react-hexgrid/pull/123) | Open |
-
-</details>
-
 ## Use It Yourself
 
 ### Quick Scan (no install)
@@ -226,10 +206,11 @@ jobs:
 config/tracked-repositories.json     ← All configuration
 scripts/
   common.ps1                        ← Shared functions (DRY)
-  update-all-evidence.ps1            ← Orchestrator
+  update-all-evidence.ps1            ← Single orchestrator (full pipeline)
   compute-health-scores.ps1          ← Health scoring (0-100)
   compute-trends.ps1                 ← 180-day trend engine
   check-alerts.ps1                   ← Auto GitHub Issues
+  update-readme-stats.ps1            ← Auto-regenerates all README sections
 cli/
   bin/scan.js                        ← CLI entry point
   lib/scoring.js                     ← JS health algorithm
@@ -241,9 +222,9 @@ tests/
   common.Tests.ps1                   ← Pester tests (21 passing)
   health-score.Tests.ps1
 .github/workflows/
-  evidence-daily.yml                 ← Cron: every 6 hours
-  validate.yml                       ← CI: config validation
-  publish-cli.yml                    ← Auto-publish on release
+  evidence-daily.yml                 ← Cron: full pipeline every 6 hours
+  validate.yml                       ← CI: config + Pester + CLI tests
+  publish-cli.yml                    ← Publish to npm on release
 ```
 
 ## License

cli/bin/scan.js

@@ -179,6 +179,7 @@ async function main() {
 
     for (const info of infos) {
       if (info.error) {
+        if (!flags.json) process.stderr.write(`  ⚠ ${info.name}: ${info.error}\n`);
         results.push({ name: info.name, health_score: null, error: info.error });
         continue;
       }

docs/ARCHITECTURE.md

@@ -17,20 +17,35 @@ OSS Maintenance Log is a public evidence system for open-source maintenance work
 
 ## Refresh Flow
 
+Single orchestrator (`update-all-evidence.ps1`) runs the full pipeline:
+
 1. Load tracked repositories from the config.
 2. Generate `evidence/ecosystem-status.json` and `.md`.
 3. Generate per-repository detailed snapshots.
 4. Generate per-repository review SLA reports.
 5. Generate the cross-repo action queue.
-6. Write a refresh manifest with global and per-repository status.
-7. Regenerate marker-based sections in `README.md`.
+6. Compute health scores (0–100) with SVG badges.
+7. Compute 180-day trends (7d/30d deltas).
+8. Check alert thresholds and auto-create GitHub Issues.
+9. Write preliminary manifest (so README generator can read freshness data).
+10. Regenerate ALL marker-based sections in `README.md`:
+    - `TAGLINE` and `STATS` (inline) from ecosystem summary + manifest freshness.
+    - `TRACKED_PROJECTS` table from config + ecosystem + health data.
+    - `CONTRIBUTIONS_MERGED` from ecosystem PR details (merged_at).
+    - `CONTRIBUTIONS_OPEN` from ecosystem PR details (state = open).
+    - Badge URLs (tracked packages count, open PRs, ecosystem downloads).
+11. Write final manifest including all step results.
+
+Every step is wrapped in `Invoke-RefreshStep` — failures are caught, logged, and tracked in the manifest. Downstream steps check for required inputs and skip gracefully if dependencies failed.
 
 ## Automation
 
 - `.github/workflows/evidence-daily.yml`
-  Scheduled refresh every 6 hours.
+  Scheduled refresh every 6 hours. Single orchestrator call + commit.
 - `.github/workflows/validate.yml`
-  Validation on push and pull request.
+  Validation on push and PR: config validation, Pester tests, CLI unit tests.
+- `.github/workflows/publish-cli.yml`
+  Publish CLI to npm on release.
 - `action.yml`
   Composite action for reuse in other repositories.
 

docs/DATA_MODEL.md

@@ -28,6 +28,7 @@ Key fields:
 - `summary.total_forks`
 - `summary.total_npm_downloads_last_week`
 - `projects[]`
+- `projects[].tracked_pr_details[].merged_at` — used by README generator to distinguish merged from closed PRs
 
 ### `evidence/latest-status-*.json`
 
@@ -87,11 +88,13 @@ Key fields:
 
 `README.md` contains marker-delimited generated sections:
 
-- `TAGLINE`
-- `STATS`
-- `TRACKED_PROJECTS`
-- `CONTRIBUTIONS_MERGED`
-- `CONTRIBUTIONS_OPEN`
-- `LIVE_DATA`
+- `TAGLINE` — inline, auto-generated from ecosystem summary
+- `RUN_STATUS` — workflow badges, static
+- `STATS` — inline, auto-generated from ecosystem summary + manifest freshness
+- `TRACKED_PROJECTS` — block, auto-generated table from config + ecosystem + health data
+- `CONTRIBUTIONS_MERGED` — block, auto-generated from ecosystem PR details (merged_at != null)
+- `CONTRIBUTIONS_OPEN` — block, auto-generated from ecosystem PR details (state = open)
+- `LIVE_DATA` — static links to evidence files
 
+All marker sections except `RUN_STATUS` and `LIVE_DATA` are regenerated by `update-readme-stats.ps1`.
 Do not remove or rename these markers without updating validation and regeneration logic.