studio2201 / product 05 v0.2.0 Apache-2.0

Boneyard

Org-wide tech-debt radar. Discovers and ranks internal repositories by dormancy, exposure, dependency depth, and AI-agent attack surface to emit actionable remediation budgets.

View on GitHub → Framework Doctrine →

What it does

Five-Axis Repo Scoring

Evaluates repos across dormancy, risk, exposure, dependency depth, and AI-agent surface.

Composite Boneyard Index

Computes an org-wide health score in [0, 100] categorized into unambiguous Red, Amber, and Green risk tiers.

Remediation Budgets

Quantifies tech debt into concrete engineering work units, generating estimates in repo-weeks for sprint planning.

TOML Policy Gate

Enforces org-wide security and maintenance policies in CI, preventing unreviewed orphan repos from going public.

Installation

# Install Boneyard via the studio2201 installer:
curl -fsSL https://studio2201.com/install.sh | sh -s boneyard

Terminal usage

# Ingest org repositories and score dormancy
boneyard enrich --input repos.json --output scored.json

# Generate executive markdown report with remediation budgets
boneyard report --input scored.json --policy policy.toml --output report.md

# Assert compliance against org policy in CI
boneyard policy check --input scored.json --policy policy.toml

Enterprise Governance

Decommission Before Compromise

Exposes dormant internal repositories before forgotten credentials or vulnerable dependencies become attack vectors.

AI Surface Discovery

Surfaces codebases that have been rapidly altered by autonomous agents without corresponding test coverage or architectural reviews.

Zero External Crates

Zero third-party dependencies. Built in pure Rust standard library for maximum auditability and air-gapped deployment.

CI & Pipeline Integration

Runs cleanly in GitHub Actions, GitLab CI, and scheduled audit pipelines without daemon overhead.