uzomuzo-oss: Command for Claude Code

OSS Select — OSS Health Evaluation and Selection Support with uzomuzo

Support adoption decisions for new OSS packages, or scan the health of existing dependencies.

---

S1 Mode Detection

Determine the mode from the user message:

Mode	Trigger	Behavior
compare	Multiple PURLs specified	Compare candidates and present recommendation
evaluate	Single PURL specified	Detailed evaluation of one package
scan	scan keyword	Bulk check all go.mod dependencies

---

S2 Package Evaluation

S2.1 Run uzomuzo

# When PURLs are directly specified
GOWORK=off go run . <purl1> [purl2 ...]

# Scan mode: generate PURL list from go.mod and evaluate in batches
GOWORK=off go list -m -f '{{.Path}}' all | python3 -c "
import sys
for line in sys.stdin:
    path = line.strip()
    if not path:
        continue
    if path.startswith('github.com/vuls-saas/') or path.startswith('github.com/future-architect/'):
        continue
    print(f'pkg:golang/{path}')
" > /tmp/oss-select-purls.txt
# Use xargs to avoid shell argument-length limits on large projects
cat /tmp/oss-select-purls.txt | xargs GOWORK=off go run .

S2.2 Read CSV Data

In batch (file) mode, uzomuzo writes detailed results to scorecard.csv. Read this CSV for structured indicator data when generating evaluation reports.

---

S3 Evaluation Report Output

S3.1 Single Package Evaluation (evaluate mode)

Output in the following format:

## pkg:golang/modernc.org/sqlite

| Indicator | Value | Verdict |
|-----------|-------|---------|
| Lifecycle | Active | ✅ |
| Scorecard | 5.3/10 | ⚠️ |
| Maintained | 10/10 | ✅ |
| Code-Review | 2/10 | ⚠️ |
| Vulnerabilities | 0 | ✅ |
| Stars | 5,000+ | ✅ |
| Last Release | 18 days ago | ✅ |
| License | BSD | ✅ |
| Archived | No | ✅ |

### Overall Verdict: Approved
- Strengths: Actively maintained, no vulnerabilities, pure-Go (no CGO required)
- Concerns: Single maintainer (bus factor=1), low Code-Review score