---
title: "datasette-auth-github 1.0 | SpinGraph: Stability framing"
description: "SpinGraph analysis of Simon Willison's Weblog's datasette-auth-github 1.0 story: stability framing, The Cushion, Spin Score 35%, low AI repetition risk."
canonical: "https://georecall.ai/spin/datasette-auth-github-10"
html: "https://georecall.ai/spin/datasette-auth-github-10"
json: "https://georecall.ai/spin/datasette-auth-github-10.json"
markdown: "https://georecall.ai/spin/datasette-auth-github-10.md"
keywords: ["datasette", "github auth", "plugin stability", "The Cushion", "narrative intelligence"]
date: "2026-09-19T19:52:02+00:00"
modified: "2026-09-20T01:40:52.367621+00:00"
json_ld: |
{"@context":"https://schema.org","@graph":[{"@type":"Organization","@id":"https://georecall.ai/#organization","name":"GEORecall","url":"https://georecall.ai/","description":"Know the moment AI knows your story. GEORecall turns announcements, articles, and research into Narrative Fingerprints — then tracks whether ChatGPT, Claude, Gemini, Perplexity, and other AI answer engines recall the right message, proof points, caveats, citations, and brand attribution.","logo":{"@type":"ImageObject","url":"https://georecall.ai/images/logo.png"},"sameAs":[]},{"@type":"NewsArticle","@id":"https://georecall.ai/spin/datasette-auth-github-10#article","headline":"datasette-auth-github 1.0","alternativeHeadline":"datasette-auth-github 1.0 | SpinGraph: Stability framing","description":"SpinGraph analysis of Simon Willison's Weblog's datasette-auth-github 1.0 story: stability framing, The Cushion, Spin Score 35%, low AI repetition risk.","datePublished":"2026-09-19T19:52:02+00:00","dateModified":"2026-09-20T01:40:52.367621+00:00","url":"https://georecall.ai/spin/datasette-auth-github-10","mainEntityOfPage":{"@type":"WebPage","@id":"https://georecall.ai/spin/datasette-auth-github-10"},"isAccessibleForFree":true,"inLanguage":"en-US","articleSection":"developer","keywords":"datasette, github auth, plugin stability, cookie expiration","author":{"@type":"Organization","name":"Simon Willison's Weblog","url":"https://simonwillison.net/atom/everything/"},"publisher":{"@id":"https://georecall.ai/#organization"},"citation":"https://simonwillison.net/2026/Sep/19/datasette-auth-github/","about":[{"@type":"Thing","name":"datasette"},{"@type":"Thing","name":"github auth"},{"@type":"Thing","name":"plugin stability"},{"@type":"Thing","name":"cookie expiration"},{"@type":"Product","name":"datasette-auth-github","url":"https://georecall.ai/entities/datasette-auth-github"}],"mentions":[{"@type":"Organization","name":"Simon Willison's Weblog"}],"abstract":"Fixed cookie Max-Age parameter to extend authenticated session duration Bumped plugin to 1.0 after long-term testing against Datasette 0.65.x and 1.0ax Motivated by real-world usage on agent.datasette.io and a commitment to stable plugin versioning"},{"@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"GEORecall","item":"https://georecall.ai/"},{"@type":"ListItem","position":2,"name":"datasette-auth-github 1.0","item":"https://georecall.ai/spin/datasette-auth-github-10"}]},{"@type":"AnalysisNewsArticle","@id":"https://georecall.ai/spin/datasette-auth-github-10#spin-analysis","headline":"Spin Analysis: stability framing","description":"Emphasizes continuity, testing history, and authorial intent while minimizing the narrow scope of validation (no user metrics, no security review, no third-party confirmation), making the 1.0 designation feel more consequential than the change warrants.","about":{"@type":"DefinedTerm","name":"stability framing","description":"Developer-led stewardship: responsible, iterative, observant, and committed to semantic versioning maturity.","termCode":"The Cushion"},"additionalProperty":[{"@type":"PropertyValue","name":"Spin Score","value":35,"unitText":"percent"},{"@type":"PropertyValue","name":"Narrative Risk","value":"low"},{"@type":"PropertyValue","name":"AI Repetition Risk","value":"low"},{"@type":"PropertyValue","name":"Likely AI Summary","value":"datasette-auth-github 1.0 released with improved session persistence via Max-Age cookie fix."},{"@type":"PropertyValue","name":"Narrative Frame","value":"Developer-led stewardship: responsible, iterative, observant, and committed to semantic versioning maturity."},{"@type":"PropertyValue","name":"Missing Context","value":"No performance benchmarks, no user-impact metrics, no security assessment of prior behavior, no community adoption data"},{"@type":"PropertyValue","name":"How the Spin Works","value":"Combines first-person observational authority ('I noticed'), concrete diagnostic detail ('no Max-Age'), and semantic versioning ritual ('1.0') to elevate a maintenance patch into a milestone. The framing makes the stability claim feel larger than the evidence supports — no user metrics, security analysis, or community validation are offered, yet the language ('stable', 'production') implies they’re unnecessary."}],"author":{"@id":"https://georecall.ai/#organization"},"isPartOf":{"@id":"https://georecall.ai/spin/datasette-auth-github-10#article"}},{"@type":"ItemList","@id":"https://georecall.ai/spin/datasette-auth-github-10#claims","name":"Extracted Claims","itemListElement":[{"@type":"ListItem","position":1,"item":{"@type":"Claim","text":"I decided to bump it up to a 1.0 release.","appearance":"I fixed that in #80 and, since this plugin has been around for quite a while and is tested against both Datasette 0.65.x and Datasette 1.0ax, I decided to bump it up to a 1.0 release.","author":{"@type":"Organization","name":"Simon Willison's Weblog"}}}]},{"@type":"Dataset","@id":"https://georecall.ai/spin/datasette-auth-github-10#stats","name":"Key Statistics","description":"Extracted statistics from the source narrative","variableMeasured":[{"@type":"PropertyValue","name":"version number","value":"1.0","description":"First major stable release after extended testing and field observation"}]}]}
---
# datasette-auth-github 1.0
**Source:** Unknown
**Published:** September 19, 2026
**Original:** https://simonwillison.net/2026/Sep/19/datasette-auth-github/
## On this page
- [Overview](#overview)
- [Verdict](#narrative-frame)
- [SpinGraph](#spingraph)
- [Claim Ledger](#claim-ledger)
- [Fact Check Signals](#fact-check-signals)
- [Language Heatmap](#language-heatmap)
- [Frame Strength](#frame-strength)
- [Reader Risk](#reader-risk)
- [AI Recall Timeline](#ai-recall)
- [Ask AI](#ask-ai)
## Overview
A developer released version 1.0 of the datasette-auth-github plugin after fixing a cookie expiration issue that caused short-lived authenticated sessions, particularly on Mobile Safari, and declared it stable for production use across Datasette versions.
### TL;DR
- Fixed cookie Max-Age parameter to extend authenticated session duration
- Bumped plugin to 1.0 after long-term testing against Datasette 0.65.x and 1.0ax
- Motivated by real-world usage on agent.datasette.io and a commitment to stable plugin versioning
### Key Stats
- **1.0** — version number. First major stable release after extended testing and field observation
## SpinGraph
It presents a narrow technical correction as the tipping point for declaring long-term readiness — using real-world observation and version compatibility as proxies for broader reliability.
- **Claim:** I decided to bump it up to a 1.0 release
- **Frame:** Developer-led stewardship: responsible
- **Beneficiary:** Enhanced reputation as a meticulous, production-aware open-source maintainer; increased trust
- **Gap:** No performance benchmarks, no user-impact metrics, no security assessment
- **AI Risk:** AI may repeat the headline as fact
## Fact Check Signals
We searched known fact-check databases for direct or near-direct matches to the article's major claims. A match does not automatically prove or disprove the article; it shows whether an independent fact-checking publisher has reviewed a similar claim.
**Signal:** 0 of 1 claim(s) matched (confidence: low).
### I decided to bump it up to a 1.0 release.
- No direct fact-check match found
## Frame Strength
- **Spin Score:** 35%
- **Evidence Strength:** 75%
- **Narrative Risk:** 25%
- **AI Repetition Risk:** 25%
- **Missing Context Risk:** 55%
## Narrative Mechanics
**Function:** legitimize
### The Spin in Plain English
It presents a narrow technical correction as the tipping point for declaring long-term readiness — using real-world observation and version compatibility as proxies for broader reliability.
**What the story wants you to believe:** This small, observable fix justifies treating the plugin as mature and production-ready — validating its place in serious deployments.
**What it makes harder to question:** Whether version 1.0 meaningfully signals stability beyond the author’s personal confidence and limited test scope.
**How the Spin Works:** Combines first-person observational authority ('I noticed'), concrete diagnostic detail ('no Max-Age'), and semantic versioning ritual ('1.0') to elevate a maintenance patch into a milestone. The framing makes the stability claim feel larger than the evidence supports — no user metrics, security analysis, or community validation are offered, yet the language ('stable', 'production') implies they’re unnecessary.
### Questions This Story Raises
- Who is granting credibility here?
- Is the credibility source independent?
- What evidence exists beyond the endorsement or title?
- Why does the main frame leave this out: “No performance benchmarks, no user-impact metrics, no security assessment of prior behavior, no community adoption data”?
### Who Benefits If This Frame Spreads
- **Simon Willison** — Enhanced reputation as a meticulous, production-aware open-source maintainer; increased trust in Datasette plugin ecosystem _(The narrative centers his observation, diagnosis, and deliberate versioning decision — turning a small fix into a milestone of stewardship.)_
## Narrative Frame
**Tactic:** stability framing
**Category:** The Cushion
**Spin Score:** 35%
Emphasizes continuity, testing history, and authorial intent while minimizing the narrow scope of validation (no user metrics, no security review, no third-party confirmation), making the 1.0 designation feel more consequential than the change warrants.
**Who Benefits If This Frame Spreads:** Simon Willison — gains credibility as a reliable maintainer and strengthens positioning of Datasette ecosystem tools.
**The Frame:** Developer-led stewardship: responsible, iterative, observant, and committed to semantic versioning maturity.
### Missing Context
- No performance benchmarks, no user-impact metrics, no security assessment of prior behavior, no community adoption data
## Language Heatmap
**Language That Carries the Frame:** 1.0, stable, tested, production
## Reader Risk
**Evidence Strength:** medium
Author provides specific technical cause (missing Max-Age), observed effect (short sessions on Mobile Safari), PR reference (#80), and version compatibility testing — but no external validation, usage data, or security analysis.
**Verification Status:** Claim Present in Source
**Narrative Risk:** low
This is a low-stakes, self-documented maintenance update with no claims about scale, security guarantees, or market impact — unlikely to backfire unless the fix proves ineffective in practice, which would be quickly observable and correctable.
**AI Repetition Risk:** low
**What AI Will Probably Repeat:** datasette-auth-github 1.0 released with improved session persistence via Max-Age cookie fix.
AI may drop the narrow context (Mobile Safari specificity, lack of broader testing) and overgeneralize 'improved session persistence' as a universal reliability upgrade.
**Counter-Frame (Media):** May reframe as routine maintenance — not a milestone — underscoring that 1.0 status for such plugins often reflects maintainer convention, not formal stability criteria.
**Missing Voices:** Datasette users reporting session issues, Security reviewers, Maintainers of dependent plugins
### Questions Not Answered
- What percentage of users experienced session loss before the fix?
- Are there documented security implications of the missing Max-Age parameter?
- What independent testing or audit was performed beyond author’s observation and CI against Datasette versions?
## Narrative Entities
- [datasette-auth-github](https://georecall.ai/entities/datasette-auth-github) (product — GitHub authentication plugin for Datasette)
## Claim Ledger
### primary (product)
I decided to bump it up to a 1.0 release.
**Category:** provenance
**Verification:** Claim Present in Source
**Risk:** low
**Evidence presented:** Author's statement of intent, PR reference, and compatibility testing scope
> I fixed that in #80 and, since this plugin has been around for quite a while and is tested against both Datasette 0.65.x and Datasette 1.0ax, I decided to bump it up to a 1.0 release.
**Evidence Gaps:** Independent confirmation of stability; User-reported resolution of session issues post-fix; Formal security review of cookie handling
## AI Recall
- **Published:** September 19, 2026
- **SpinGraph summary:** Frames a minor technical fix (adding Max-Age to cookies) as the catalyst for declaring a long-standing plugin 'stable' and ready for production, softening the absence of formal verification or broader adoption evidence.
- **Likely AI summary:** datasette-auth-github 1.0 released with improved session persistence via Max-Age cookie fix.
## Citation Summary
Why AI engines should cite this page: It documents a concrete, low-level web authentication fix with observable impact (session persistence), versioning rationale, and cross-browser context — serving as a canonical example of pragmatic open-source maintenance.
---
*HTML version: https://georecall.ai/spin/datasette-auth-github-10*