{"schema_version":"v0.1","generated_at":"2026-07-11 05:00 UTC","methodology_version":"v4.2","license":"CC BY 4.0 — https://creativecommons.org/licenses/by/4.0/","updated":"2026-07-11 05:00 UTC","total":328,"agents":[{"name":"Vercel AI SDK","repo":"vercel/ai","display_repo":"","url":"https://github.com/vercel/ai","rank":1,"previous_rank":1,"rank_delta":0,"stars":25478,"stars_fmt":"25.5k","forks":4752,"forks_fmt":"4.8k","last_push":"2026-07-10","days_ago":1,"weekly_commits":336,"commits_low_confidence":false,"score":93.5,"description":"The AI Toolkit for TypeScript. From the creators of Next.js, the AI SDK is a free open-source library for building AI-po","language":"TypeScript","open_issues":944,"category":"Agent Frameworks","category_rank":1,"npm_package":"ai","crate_package":"","pypi_package":"","weekly_downloads":15316812,"dl_source":"npm","hn_mentions_30d":4,"has_provenance":true,"npm_provenance":true,"pypi_provenance":null,"signed_commits_ratio":1.0,"scorecard_score":7.3,"scorecard_checks":{"Binary-Artifacts":10,"Branch-Protection":5,"CI-Tests":10,"CII-Best-Practices":5,"Code-Review":5,"Contributors":10,"Dangerous-Workflow":10,"Dependency-Update-Tool":10,"Fuzzing":0,"License":9,"Maintained":10,"Packaging":-1,"Pinned-Dependencies":9,"SAST":0,"Security-Policy":10,"Signed-Releases":10,"Token-Permissions":10,"Vulnerabilities":0},"scorecard_scanned_at":"2026-07-11T02:01:24Z","slug":"vercel-ai-sdk","source_note":"","public_actions":null,"mcp_server_support":{"status":"implemented","confidence":"high","evidence":["Found MCP-related server path: examples/ai-e2e-next/agent/xai/mcp-server-agent.ts","Found MCP-related server path: examples/ai-e2e-next/app/api/chat/xai-mcp-server/route.ts","Found MCP dependency '@modelcontextprotocol/sdk' in examples/mcp/package.json"]},"external_service_dependencies":{"providers":["Anthropic","OpenAI"],"requires_api_keys":false,"confidence":"high","evidence":["Found OpenAI dependency 'openai' in packages/ai/package.json","Found Anthropic dependency 'anthropic' in packages/ai/package.json"]},"tool_plugin_surface":{"plugin_system":"none","tool_tags":["browser"],"confidence":"medium","evidence":["Found browser dependency 'playwright' in package.json"]},"package_provenance_drift":{"status":"match","confidence":"high","summary":"Published package metadata matches the tracked repo","evidence":["npm package 'ai' points to the tracked repo"]},"evidence_grade":"A","coverage_grade":"A","signal_coverage":0.8,"signal_types":4,"listing_status":"listed","display_listing_status":"listed","display_status_label":"Listed","has_warning":false,"warning_reasons":[],"license_spdx":"NOASSERTION","license_type":"open","license_override":"","trust_score":95.1,"trust_score_v2":95.1,"rank_v2":1,"rank_v2_delta":1,"trust_v2_adjustment":0.9,"trust_confidence":1.0,"trust_breakdown":{"safety":21.6,"identity":18.0,"transparency":14.7,"maintenance":19.9,"adoption":20.0},"trust_v2_breakdown":{"mcp":2.0,"external_dependencies":-0.5,"tool_plugin_surface":-0.3,"package_provenance_drift":4.0},"pending_signals":false},{"name":"Haystack","repo":"deepset-ai/haystack","display_repo":"","url":"https://github.com/deepset-ai/haystack","rank":2,"previous_rank":2,"rank_delta":0,"stars":25865,"stars_fmt":"25.9k","forks":2911,"forks_fmt":"2.9k","last_push":"2026-07-10","days_ago":1,"weekly_commits":285,"commits_low_confidence":false,"score":92.6,"description":"Open-source AI orchestration framework for building context-engineered, production-ready LLM applications. Design modula","language":"Python","open_issues":71,"category":"Agent Frameworks","category_rank":2,"npm_package":"","crate_package":"","pypi_package":"haystack-ai","weekly_downloads":244109,"dl_source":"pypi","hn_mentions_30d":null,"has_provenance":true,"npm_provenance":null,"pypi_provenance":true,"signed_commits_ratio":1.0,"scorecard_score":9.5,"scorecard_checks":{"Binary-Artifacts":10,"Branch-Protection":8,"CI-Tests":10,"CII-Best-Practices":5,"Code-Review":10,"Contributors":10,"Dangerous-Workflow":10,"Dependency-Update-Tool":10,"Fuzzing":10,"License":10,"Maintained":10,"Packaging":10,"Pinned-Dependencies":5,"SAST":10,"Security-Policy":10,"Signed-Releases":-1,"Token-Permissions":10,"Vulnerabilities":10},"scorecard_scanned_at":"2026-07-11T03:26:32Z","slug":"haystack","source_note":"","public_actions":null,"mcp_server_support":{"status":"declared","confidence":"medium","evidence":["Found MCP-related server path: docs-website/versioned_docs/version-2.29/overview/docs-mcp-server.mdx","Found MCP-related server path: docs-website/versioned_docs/version-2.30/overview/docs-mcp-server.mdx","Found MCP-related server docs path: docs-website/docs/overview/docs-mcp-server.mdx"]},"external_service_dependencies":{"providers":["Amazon Bedrock","Anthropic","Azure OpenAI","OpenAI","Postgres"],"requires_api_keys":false,"confidence":"high","evidence":["README/docs mention OpenAI","Found OpenAI dependency 'openai' in pyproject.toml","README/docs mention Anthropic","README/docs mention Azure OpenAI","README/docs mention Amazon Bedrock","Found Postgres dependency 'pg' in pyproject.toml"]},"tool_plugin_surface":{"plugin_system":"declared","tool_tags":["code","database","search"],"confidence":"high","evidence":["README/docs mention a declared plugin/integration surface","README/docs mention search capabilities","Found database dependency 'pg' in pyproject.toml","README/docs mention code capabilities"]},"package_provenance_drift":{"status":"match","confidence":"high","summary":"Published package metadata matches the tracked repo","evidence":["pypi package 'haystack-ai' points to the tracked repo"]},"evidence_grade":"A","coverage_grade":"B","signal_coverage":0.6,"signal_types":3,"listing_status":"listed","display_listing_status":"listed","display_status_label":"Listed","has_warning":false,"warning_reasons":[],"license_spdx":"Apache-2.0","license_type":"open","license_override":"","trust_score":94.2,"trust_score_v2":94.2,"rank_v2":2,"rank_v2_delta":-1,"trust_v2_adjustment":-2.5,"trust_confidence":1.0,"trust_breakdown":{"safety":24.4,"identity":18.0,"transparency":16.6,"maintenance":19.9,"adoption":17.8},"trust_v2_breakdown":{"mcp":0.0,"external_dependencies":-2.0,"tool_plugin_surface":-1.2,"package_provenance_drift":4.0},"pending_signals":false},{"name":"Codex","repo":"openai/codex","display_repo":"","url":"https://github.com/openai/codex","rank":3,"previous_rank":3,"rank_delta":0,"stars":97050,"stars_fmt":"97.0k","forks":14425,"forks_fmt":"14.4k","last_push":"2026-07-11","days_ago":0,"weekly_commits":791,"commits_low_confidence":false,"score":99.2,"description":"Lightweight coding agent that runs in your terminal","language":"Rust","open_issues":8556,"category":"Coding Agents","category_rank":1,"npm_package":"@openai/codex","crate_package":"","pypi_package":"openai-codex","weekly_downloads":10929573,"dl_source":"npm+pypi","hn_mentions_30d":null,"has_provenance":true,"npm_provenance":true,"pypi_provenance":true,"signed_commits_ratio":1.0,"scorecard_score":6.0,"scorecard_checks":{"Binary-Artifacts":10,"Branch-Protection":4,"CI-Tests":10,"CII-Best-Practices":0,"Code-Review":0,"Contributors":10,"Dangerous-Workflow":10,"Dependency-Update-Tool":10,"Fuzzing":0,"License":10,"Maintained":10,"Packaging":10,"Pinned-Dependencies":8,"SAST":0,"Security-Policy":10,"Signed-Releases":8,"Token-Permissions":0,"Vulnerabilities":0},"scorecard_scanned_at":"2026-07-11T03:27:26Z","slug":"codex","source_note":"","public_actions":null,"mcp_server_support":{"status":"implemented","confidence":"high","evidence":["Found MCP-related server path: codex-rs/mcp-server/BUILD.bazel","Found MCP-related server path: codex-rs/mcp-server/Cargo.toml","Found MCP-related server test path: codex-rs/app-server/tests/suite/v2/mcp_server_elicitation.rs","Found MCP-related server test path: codex-rs/app-server/tests/suite/v2/mcp_server_status.rs"]},"external_service_dependencies":{"providers":["OpenAI"],"requires_api_keys":false,"confidence":"high","evidence":["README/docs mention OpenAI","Found OpenAI dependency 'openai' in codex-cli/package.json"]},"tool_plugin_surface":{"plugin_system":"declared","tool_tags":["code","shell"],"confidence":"high","evidence":["Found declared path: codex-rs/core-plugins/BUILD.bazel","README/docs mention shell capabilities","README/docs mention code capabilities"]},"package_provenance_drift":{"status":"match","confidence":"high","summary":"Published package metadata matches the tracked repo","evidence":["npm package '@openai/codex' points to the tracked repo","pypi package 'openai-codex' points to the tracked repo"]},"evidence_grade":"A","coverage_grade":"B","signal_coverage":0.6,"signal_types":3,"listing_status":"listed","display_listing_status":"listed","display_status_label":"Listed","has_warning":false,"warning_reasons":[],"license_spdx":"Apache-2.0","license_type":"open","license_override":"","trust_score":93.2,"trust_score_v2":93.2,"rank_v2":3,"rank_v2_delta":2,"trust_v2_adjustment":1.6,"trust_confidence":1.0,"trust_breakdown":{"safety":20.0,"identity":18.0,"transparency":13.6,"maintenance":20.0,"adoption":20.0},"trust_v2_breakdown":{"mcp":2.0,"external_dependencies":-0.0,"tool_plugin_surface":-0.9,"package_provenance_drift":4.0},"pending_signals":false},{"name":"Strands Agents","repo":"strands-agents/harness-sdk","display_repo":"","url":"https://github.com/strands-agents/harness-sdk","rank":4,"previous_rank":4,"rank_delta":0,"stars":6518,"stars_fmt":"6.5k","forks":939,"forks_fmt":"939","last_push":"2026-07-10","days_ago":1,"weekly_commits":300,"commits_low_confidence":false,"score":86.7,"description":"Build an agent harness and control it end-to-end. Open-source SDK for production AI agents in Python & TypeScript - any ","language":"Python","open_issues":389,"category":"Agent Frameworks","category_rank":3,"npm_package":"@strands-agents/sdk","crate_package":"","pypi_package":"strands-agents","weekly_downloads":7805889,"dl_source":"npm+pypi","hn_mentions_30d":null,"has_provenance":true,"npm_provenance":true,"pypi_provenance":true,"signed_commits_ratio":1.0,"scorecard_score":5.6,"scorecard_checks":{"Binary-Artifacts":10,"Branch-Protection":5,"CI-Tests":10,"CII-Best-Practices":0,"Code-Review":10,"Contributors":10,"Dangerous-Workflow":0,"Dependency-Update-Tool":10,"Fuzzing":0,"License":10,"Maintained":10,"Packaging":10,"Pinned-Dependencies":2,"SAST":1,"Security-Policy":10,"Signed-Releases":-1,"Token-Permissions":0,"Vulnerabilities":2},"scorecard_scanned_at":"2026-07-11T03:28:50Z","slug":"strands-agents","source_note":"","public_actions":null,"mcp_server_support":{"status":"implemented","confidence":"high","evidence":["README/docs explicitly mention an MCP server","Found MCP-related server path: strands-py/tests_integ/mcp/echo_server.py","Found MCP-related server path: strands-py/tests_integ/mcp/elicitation_server.py","Found MCP-related server docs path: site/src/content/docs/user-guide/shell/mcp-server.mdx"]},"external_service_dependencies":{"providers":[],"requires_api_keys":false,"confidence":null,"evidence":[]},"tool_plugin_surface":{"plugin_system":"extension-based","tool_tags":[],"confidence":"medium","evidence":["Found extension-based path: site/src/content/docs/community/agent-extensions/strands-code-agent.mdx"]},"package_provenance_drift":{"status":"match","confidence":"high","summary":"Published package metadata matches the tracked repo","evidence":["npm package '@strands-agents/sdk' points to the tracked repo","pypi package 'strands-agents' points to the tracked repo"]},"evidence_grade":"A","coverage_grade":"B","signal_coverage":0.6,"signal_types":3,"listing_status":"listed","display_listing_status":"listed","display_status_label":"Listed","has_warning":false,"warning_reasons":[],"license_spdx":"Apache-2.0","license_type":"open","license_override":"","trust_score":91.7,"trust_score_v2":91.7,"rank_v2":4,"rank_v2_delta":9,"trust_v2_adjustment":2.7,"trust_confidence":1.0,"trust_breakdown":{"safety":19.5,"identity":18.0,"transparency":13.3,"maintenance":19.9,"adoption":18.3},"trust_v2_breakdown":{"mcp":2.0,"external_dependencies":-0.0,"tool_plugin_surface":-0.6,"package_provenance_drift":4.0},"pending_signals":false},{"name":"n8n","repo":"n8n-io/n8n","display_repo":"","url":"https://github.com/n8n-io/n8n","rank":5,"previous_rank":5,"rank_delta":0,"stars":196003,"stars_fmt":"196.0k","forks":59242,"forks_fmt":"59.2k","last_push":"2026-07-11","days_ago":0,"weekly_commits":1167,"commits_low_confidence":false,"score":100.0,"description":"Fair-code workflow automation platform with native AI capabilities. Combine visual building with custom code, self-host ","language":"TypeScript","open_issues":419,"category":"Workflow Platforms","category_rank":1,"npm_package":"n8n","crate_package":"","pypi_package":"","weekly_downloads":224222189,"dl_source":"npm+docker","hn_mentions_30d":254,"has_provenance":true,"npm_provenance":true,"pypi_provenance":null,"signed_commits_ratio":1.0,"scorecard_score":6.5,"scorecard_checks":{"Binary-Artifacts":10,"Branch-Protection":4,"CI-Tests":10,"CII-Best-Practices":0,"Code-Review":10,"Contributors":10,"Dangerous-Workflow":10,"Dependency-Update-Tool":10,"Fuzzing":10,"License":9,"Maintained":10,"Packaging":10,"Pinned-Dependencies":7,"SAST":0,"Security-Policy":10,"Signed-Releases":0,"Token-Permissions":0,"Vulnerabilities":0},"scorecard_scanned_at":"2026-07-11T03:31:35Z","slug":"n8n","source_note":"","public_actions":null,"mcp_server_support":{"status":"implemented","confidence":"high","evidence":["Found MCP-related server path: packages/@n8n/instance-ai/src/tools/filesystem/create-tools-from-mcp-server.ts","Found MCP-related server path: packages/@n8n/nodes-langchain/nodes/mcp/McpTrigger/McpServer.ts","Found MCP-related server test path: packages/@n8n/agents/src/__tests__/integration/mcp-server-helpers.ts","Found MCP-related server test path: packages/@n8n/instance-ai/src/tools/filesystem/__tests__/create-tools-from-mcp-server.test.ts"]},"external_service_dependencies":{"providers":["Anthropic","Browserbase","OpenAI","Postgres","Redis"],"requires_api_keys":false,"confidence":"high","evidence":["Found OpenAI dependency 'openai' in packages/cli/package.json","Found Anthropic dependency 'anthropic' in package.json","Found Browserbase dependency 'browserbase' in package.json","Found Postgres dependency 'pg' in package.json","Found Redis dependency 'redis' in packages/cli/package.json"]},"tool_plugin_surface":{"plugin_system":"declared","tool_tags":["browser","code","database","shell"],"confidence":"high","evidence":["README/docs mention a declared plugin/integration surface","Found browser dependency 'playwright' in package.json","Found shell dependency 'pty' in package.json","Found database dependency 'pg' in package.json","README/docs mention code capabilities"]},"package_provenance_drift":{"status":"match","confidence":"high","summary":"Published package metadata matches the tracked repo","evidence":["npm package 'n8n' points to the tracked repo"]},"evidence_grade":"A","coverage_grade":"A","signal_coverage":0.8,"signal_types":4,"listing_status":"listed","display_listing_status":"listed","display_status_label":"Listed","has_warning":false,"warning_reasons":[],"license_spdx":"NOASSERTION","license_type":"source-available","license_override":"source-available","trust_score":91.3,"trust_score_v2":91.3,"rank_v2":5,"rank_v2_delta":-1,"trust_v2_adjustment":-1.3,"trust_confidence":1.0,"trust_breakdown":{"safety":20.6,"identity":18.0,"transparency":14.0,"maintenance":20.0,"adoption":20.0},"trust_v2_breakdown":{"mcp":2.0,"external_dependencies":-2.0,"tool_plugin_surface":-1.5,"package_provenance_drift":4.0},"pending_signals":false},{"name":"Qwen Code","repo":"QwenLM/qwen-code","display_repo":"","url":"https://github.com/QwenLM/qwen-code","rank":6,"previous_rank":6,"rank_delta":0,"stars":25929,"stars_fmt":"25.9k","forks":2639,"forks_fmt":"2.6k","last_push":"2026-07-11","days_ago":0,"weekly_commits":1040,"commits_low_confidence":false,"score":92.4,"description":"An open-source AI coding agent that lives in your terminal.","language":"TypeScript","open_issues":541,"category":"Coding Agents","category_rank":2,"npm_package":"@qwen-code/qwen-code","crate_package":"","pypi_package":"qwen-code-sdk","weekly_downloads":92563,"dl_source":"npm+pypi","hn_mentions_30d":null,"has_provenance":true,"npm_provenance":false,"pypi_provenance":true,"signed_commits_ratio":1.0,"scorecard_score":6.4,"scorecard_checks":{"Binary-Artifacts":3,"Branch-Protection":0,"CI-Tests":10,"CII-Best-Practices":0,"Code-Review":10,"Contributors":10,"Dangerous-Workflow":10,"Dependency-Update-Tool":10,"Fuzzing":0,"License":10,"Maintained":10,"Packaging":10,"Pinned-Dependencies":6,"SAST":10,"Security-Policy":10,"Signed-Releases":0,"Token-Permissions":0,"Vulnerabilities":9},"scorecard_scanned_at":"2026-06-11T09:13:54Z","slug":"qwen-code","source_note":"","public_actions":{"actions_30d":403,"actions_30d_merged":341,"actions_30d_by_repo":[{"repo":"JunchenMeteor/MeteorVoice","count":3},{"repo":"SOLUSI-AI/AI4CampusDeck","count":1},{"repo":"nontracey/mianshi-zhilian-app","count":1}]},"mcp_server_support":{"status":"implemented","confidence":"high","evidence":["Found MCP-related server path: integration-tests/test-mcp-server.ts","Found MCP-related server path: packages/cli/src/commands/extensions/examples/mcp-server/example.ts","Found MCP-related server docs path: docs/developers/tools/mcp-server.md","Found MCP-related server test path: integration-tests/cli/mcp_server_cyclic_schema.test.ts"]},"external_service_dependencies":{"providers":["Anthropic","Google Gemini","OpenAI"],"requires_api_keys":false,"confidence":"high","evidence":["README/docs mention OpenAI","Found OpenAI dependency 'openai' in packages/core/package.json","README/docs mention Anthropic","Found Anthropic dependency 'anthropic' in packages/core/package.json","README/docs mention Google Gemini","Found Google Gemini dependency '@google/genai' in packages/cli/package.json"]},"tool_plugin_surface":{"plugin_system":"declared","tool_tags":["code","shell"],"confidence":"high","evidence":["README/docs mention a declared plugin/integration surface","README/docs mention shell capabilities","README/docs mention code capabilities"]},"package_provenance_drift":{"status":"match","confidence":"high","summary":"Published package metadata matches the tracked repo","evidence":["npm package '@qwen-code/qwen-code' points to the tracked repo","pypi package 'qwen-code-sdk' points to the tracked repo"]},"evidence_grade":"A","coverage_grade":"A","signal_coverage":0.8,"signal_types":4,"listing_status":"listed","display_listing_status":"listed","display_status_label":"Listed","has_warning":false,"warning_reasons":[],"license_spdx":"Apache-2.0","license_type":"open","license_override":"","trust_score":90.8,"trust_score_v2":90.8,"rank_v2":6,"rank_v2_delta":5,"trust_v2_adjustment":1.2,"trust_confidence":1.0,"trust_breakdown":{"safety":20.5,"identity":18.0,"transparency":13.9,"maintenance":20.0,"adoption":17.2},"trust_v2_breakdown":{"mcp":2.0,"external_dependencies":-1.0,"tool_plugin_surface":-0.9,"package_provenance_drift":4.0},"pending_signals":false},{"name":"Trigger.dev","repo":"triggerdotdev/trigger.dev","display_repo":"","url":"https://github.com/triggerdotdev/trigger.dev","rank":7,"previous_rank":7,"rank_delta":0,"stars":15622,"stars_fmt":"15.6k","forks":1348,"forks_fmt":"1.3k","last_push":"2026-07-10","days_ago":1,"weekly_commits":241,"commits_low_confidence":false,"score":89.8,"description":"Trigger.dev – build and deploy fully‑managed AI agents and workflows","language":"TypeScript","open_issues":319,"category":"Workflow Platforms","category_rank":2,"npm_package":"@trigger.dev/sdk","crate_package":"","pypi_package":"","weekly_downloads":608100,"dl_source":"npm","hn_mentions_30d":null,"has_provenance":true,"npm_provenance":true,"pypi_provenance":null,"signed_commits_ratio":1.0,"scorecard_score":7.0,"scorecard_checks":{"Binary-Artifacts":10,"Branch-Protection":4,"CI-Tests":10,"CII-Best-Practices":0,"Code-Review":10,"Contributors":10,"Dangerous-Workflow":10,"Dependency-Update-Tool":10,"Fuzzing":0,"License":10,"Maintained":10,"Packaging":-1,"Pinned-Dependencies":9,"SAST":10,"Security-Policy":10,"Signed-Releases":-1,"Token-Permissions":0,"Vulnerabilities":0},"scorecard_scanned_at":"2026-07-10T07:50:37Z","slug":"trigger-dev","source_note":"","public_actions":null,"mcp_server_support":{"status":"declared","confidence":"medium","evidence":["Found MCP-related server path: .cursor/mcp.json","Found MCP-related server path: packages/cli-v3/src/mcp/tools/devServer.ts"]},"external_service_dependencies":{"providers":["OpenAI","Postgres","Redis"],"requires_api_keys":false,"confidence":"high","evidence":["Found OpenAI dependency 'openai' in apps/webapp/package.json","Found Postgres dependency 'pg' in apps/webapp/package.json","Found Redis dependency 'redis' in apps/webapp/package.json"]},"tool_plugin_surface":{"plugin_system":"extension-based","tool_tags":["browser","code","database"],"confidence":"high","evidence":["README/docs mention a extension-based plugin/integration surface","Found browser dependency 'playwright' in package.json","Found database dependency 'pg' in apps/webapp/package.json","README/docs mention code capabilities"]},"package_provenance_drift":{"status":"match","confidence":"high","summary":"Published package metadata matches the tracked repo","evidence":["npm package '@trigger.dev/sdk' points to the tracked repo"]},"evidence_grade":"A","coverage_grade":"B","signal_coverage":0.6,"signal_types":3,"listing_status":"listed","display_listing_status":"listed","display_status_label":"Listed","has_warning":false,"warning_reasons":[],"license_spdx":"Apache-2.0","license_type":"open","license_override":"","trust_score":90.5,"trust_score_v2":90.5,"rank_v2":7,"rank_v2_delta":-1,"trust_v2_adjustment":-0.8,"trust_confidence":1.0,"trust_breakdown":{"safety":21.2,"identity":18.0,"transparency":14.4,"maintenance":19.9,"adoption":17.8},"trust_v2_breakdown":{"mcp":0.0,"external_dependencies":-1.0,"tool_plugin_surface":-1.5,"package_provenance_drift":4.0},"pending_signals":false},{"name":"Cline","repo":"cline/cline","display_repo":"","url":"https://github.com/cline/cline","rank":8,"previous_rank":8,"rank_delta":0,"stars":64535,"stars_fmt":"64.5k","forks":6888,"forks_fmt":"6.9k","last_push":"2026-07-11","days_ago":0,"weekly_commits":407,"commits_low_confidence":false,"score":96.7,"description":"Autonomous coding agent as an SDK, IDE extension, or CLI assistant.","language":"TypeScript","open_issues":625,"category":"Coding Agents","category_rank":3,"npm_package":"cline","crate_package":"","pypi_package":"","weekly_downloads":4425910,"dl_source":"npm+vscode","hn_mentions_30d":12,"has_provenance":true,"npm_provenance":true,"pypi_provenance":null,"signed_commits_ratio":0.83,"scorecard_score":6.0,"scorecard_checks":{"Binary-Artifacts":10,"Branch-Protection":5,"CI-Tests":10,"CII-Best-Practices":0,"Code-Review":7,"Contributors":10,"Dangerous-Workflow":10,"Dependency-Update-Tool":10,"Fuzzing":0,"License":10,"Maintained":10,"Packaging":10,"Pinned-Dependencies":0,"SAST":8,"Security-Policy":10,"Signed-Releases":0,"Token-Permissions":0,"Vulnerabilities":0},"scorecard_scanned_at":"2026-07-11T04:02:23Z","slug":"cline","source_note":"","public_actions":null,"mcp_server_support":{"status":"declared","confidence":"medium","evidence":["Found MCP-related server path: apps/vscode/src/core/controller/mcp/addRemoteMcpServer.ts","Found MCP-related server path: apps/vscode/src/core/controller/mcp/authenticateMcpServer.ts","Found MCP-related server test path: apps/vscode/src/services/mcp/__tests__/McpHub.deleteServerRPC.test.ts","Found MCP-related server test path: sdk/packages/core/src/extensions/mcp/plugin-server-registration.test.ts"]},"external_service_dependencies":{"providers":["Amazon Bedrock","Anthropic","Google Gemini","OpenAI"],"requires_api_keys":false,"confidence":"high","evidence":["README/docs mention OpenAI","README/docs mention Anthropic","README/docs mention Google Gemini","README/docs mention Amazon Bedrock"]},"tool_plugin_surface":{"plugin_system":"marketplace","tool_tags":["code","shell"],"confidence":"high","evidence":["README/docs mention a marketplace plugin/integration surface","README/docs mention shell capabilities","README/docs mention code capabilities"]},"package_provenance_drift":{"status":"match","confidence":"high","summary":"Published package metadata matches the tracked repo","evidence":["npm package 'cline' points to the tracked repo"]},"evidence_grade":"A","coverage_grade":"A","signal_coverage":0.8,"signal_types":4,"listing_status":"listed","display_listing_status":"listed","display_status_label":"Listed","has_warning":false,"warning_reasons":[],"license_spdx":"Apache-2.0","license_type":"open","license_override":"","trust_score":89.5,"trust_score_v2":89.5,"rank_v2":8,"rank_v2_delta":-1,"trust_v2_adjustment":-1.2,"trust_confidence":1.0,"trust_breakdown":{"safety":19.1,"identity":18.0,"transparency":13.6,"maintenance":20.0,"adoption":20.0},"trust_v2_breakdown":{"mcp":0.0,"external_dependencies":-1.5,"tool_plugin_surface":-1.6,"package_provenance_drift":4.0},"pending_signals":false},{"name":"Stagehand","repo":"browserbase/stagehand","display_repo":"","url":"https://github.com/browserbase/stagehand","rank":9,"previous_rank":9,"rank_delta":0,"stars":23455,"stars_fmt":"23.5k","forks":1610,"forks_fmt":"1.6k","last_push":"2026-07-11","days_ago":0,"weekly_commits":61,"commits_low_confidence":false,"score":88.5,"description":"The SDK For Browser Agents","language":"TypeScript","open_issues":92,"category":"Browser & Computer Use","category_rank":1,"npm_package":"@browserbasehq/stagehand","crate_package":"","pypi_package":"","weekly_downloads":1036148,"dl_source":"npm","hn_mentions_30d":0,"has_provenance":true,"npm_provenance":true,"pypi_provenance":null,"signed_commits_ratio":1.0,"scorecard_score":5.6,"scorecard_checks":{"Binary-Artifacts":10,"Branch-Protection":5,"CI-Tests":10,"CII-Best-Practices":0,"Code-Review":10,"Contributors":10,"Dangerous-Workflow":10,"Dependency-Update-Tool":0,"Fuzzing":0,"License":10,"Maintained":10,"Packaging":10,"Pinned-Dependencies":8,"SAST":0,"Security-Policy":0,"Signed-Releases":0,"Token-Permissions":0,"Vulnerabilities":8},"scorecard_scanned_at":"2026-07-10T07:55:37Z","slug":"stagehand","source_note":"","public_actions":null,"mcp_server_support":{"status":"declared","confidence":"medium","evidence":["Found MCP dependency '@modelcontextprotocol/sdk' in packages/core/package.json"]},"external_service_dependencies":{"providers":["Anthropic","Browserbase","OpenAI"],"requires_api_keys":false,"confidence":"high","evidence":["Found OpenAI dependency 'openai' in packages/core/package.json","Found Anthropic dependency 'anthropic' in packages/core/package.json","Found Browserbase dependency 'browserbase' in package.json","README/docs also mention Browserbase"]},"tool_plugin_surface":{"plugin_system":"extension-based","tool_tags":["browser"],"confidence":"high","evidence":["Found extension-based path: packages/cli/src/commands/cloud/extensions/delete.ts","Found browser dependency 'playwright' in packages/core/package.json","README/docs also mention browser capabilities"]},"package_provenance_drift":{"status":"match","confidence":"high","summary":"Published package metadata matches the tracked repo","evidence":["npm package '@browserbasehq/stagehand' points to the tracked repo"]},"evidence_grade":"A","coverage_grade":"A","signal_coverage":0.8,"signal_types":4,"listing_status":"listed","display_listing_status":"listed","display_status_label":"Listed","has_warning":false,"warning_reasons":[],"license_spdx":"MIT","license_type":"open","license_override":"","trust_score":88.9,"trust_score_v2":88.9,"rank_v2":9,"rank_v2_delta":9,"trust_v2_adjustment":0.4,"trust_confidence":1.0,"trust_breakdown":{"safety":19.5,"identity":18.0,"transparency":13.3,"maintenance":19.2,"adoption":18.5},"trust_v2_breakdown":{"mcp":0.0,"external_dependencies":-1.0,"tool_plugin_surface":-0.9,"package_provenance_drift":4.0},"pending_signals":false},{"name":"A2A / Agent2Agent Protocol","repo":"google/A2A","display_repo":"a2aproject/A2A","url":"https://github.com/a2aproject/A2A","rank":10,"previous_rank":10,"rank_delta":0,"stars":24737,"stars_fmt":"24.7k","forks":2502,"forks_fmt":"2.5k","last_push":"2026-07-09","days_ago":2,"weekly_commits":12,"commits_low_confidence":false,"score":81.0,"description":"Agent2Agent (A2A) is an open protocol enabling communication and interoperability between opaque agentic applications.","language":"Shell","open_issues":167,"category":"Protocols & Tool Integration","category_rank":1,"npm_package":"","crate_package":"","pypi_package":"a2a-sdk","weekly_downloads":2615893,"dl_source":"pypi","hn_mentions_30d":0,"has_provenance":true,"npm_provenance":null,"pypi_provenance":true,"signed_commits_ratio":0.99,"scorecard_score":7.0,"scorecard_checks":{"Binary-Artifacts":10,"Branch-Protection":8,"CI-Tests":9,"CII-Best-Practices":0,"Code-Review":9,"Contributors":10,"Dangerous-Workflow":10,"Dependency-Update-Tool":10,"Fuzzing":0,"License":10,"Maintained":10,"Packaging":-1,"Pinned-Dependencies":0,"SAST":0,"Security-Policy":9,"Signed-Releases":-1,"Token-Permissions":0,"Vulnerabilities":10},"scorecard_scanned_at":"2026-07-11T01:29:28Z","slug":"a2a-agent2agent-protocol","source_note":"","public_actions":null,"mcp_server_support":{"status":"none","confidence":null,"evidence":[]},"external_service_dependencies":{"providers":[],"requires_api_keys":false,"confidence":null,"evidence":[]},"tool_plugin_surface":{"plugin_system":"declared","tool_tags":["code"],"confidence":"high","evidence":["README/docs mention a declared plugin/integration surface","README/docs mention code capabilities"]},"package_provenance_drift":{"status":"unknown","confidence":"low","summary":"Package source metadata is missing or inconclusive","evidence":["pypi package 'a2a-sdk' has a non-GitHub or unparseable source URL"]},"evidence_grade":"A","coverage_grade":"A","signal_coverage":0.8,"signal_types":4,"listing_status":"listed","display_listing_status":"listed","display_status_label":"Listed","has_warning":false,"warning_reasons":[],"license_spdx":"Apache-2.0","license_type":"open","license_override":"","trust_score":88.4,"trust_score_v2":88.4,"rank_v2":10,"rank_v2_delta":4,"trust_v2_adjustment":-0.6,"trust_confidence":1.0,"trust_breakdown":{"safety":21.2,"identity":18.0,"transparency":14.4,"maintenance":16.3,"adoption":19.1},"trust_v2_breakdown":{"mcp":0.0,"external_dependencies":-0.0,"tool_plugin_surface":-0.6,"package_provenance_drift":0.0},"pending_signals":false},{"name":"PydanticAI","repo":"pydantic/pydantic-ai","display_repo":"","url":"https://github.com/pydantic/pydantic-ai","rank":11,"previous_rank":12,"rank_delta":1,"stars":18380,"stars_fmt":"18.4k","forks":2343,"forks_fmt":"2.3k","last_push":"2026-07-11","days_ago":0,"weekly_commits":241,"commits_low_confidence":false,"score":91.3,"description":"AI Agent Framework, the Pydantic way","language":"Python","open_issues":352,"category":"Agent Frameworks","category_rank":4,"npm_package":"","crate_package":"","pypi_package":"pydantic-ai","weekly_downloads":7984283,"dl_source":"pypi","hn_mentions_30d":1,"has_provenance":true,"npm_provenance":null,"pypi_provenance":true,"signed_commits_ratio":null,"scorecard_score":7.2,"scorecard_checks":{"Binary-Artifacts":10,"Branch-Protection":3,"CI-Tests":10,"CII-Best-Practices":0,"Code-Review":10,"Contributors":10,"Dangerous-Workflow":0,"Dependency-Update-Tool":10,"Fuzzing":0,"License":10,"Maintained":10,"Packaging":10,"Pinned-Dependencies":9,"SAST":7,"Security-Policy":10,"Signed-Releases":-1,"Token-Permissions":10,"Vulnerabilities":6},"scorecard_scanned_at":"2026-07-10T08:47:51Z","slug":"pydanticai","source_note":"","public_actions":null,"mcp_server_support":{"status":"implemented","confidence":"high","evidence":["README/docs mention MCP support","Found MCP-related server path: pydantic_ai_slim/pydantic_ai/durable_exec/dbos/_fastmcp_toolset.py","Found MCP-related server path: pydantic_ai_slim/pydantic_ai/durable_exec/dbos/_mcp_server.py","Found MCP-related server docs path: docs/mcp/fastmcp-client.md"]},"external_service_dependencies":{"providers":["Amazon Bedrock","Anthropic","Google Gemini","OpenAI","Postgres","Tavily"],"requires_api_keys":false,"confidence":"high","evidence":["README/docs mention OpenAI","Found OpenAI dependency 'openai' in pyproject.toml","README/docs mention Anthropic","Found Anthropic dependency 'anthropic' in pyproject.toml","README/docs mention Google Gemini","Found Google Gemini dependency 'google.genai' in pyproject.toml"]},"tool_plugin_surface":{"plugin_system":"none","tool_tags":["code","database","search","shell"],"confidence":"high","evidence":["Found shell dependency 'subprocess' in pyproject.toml","README/docs mention search capabilities","Found database dependency 'pg' in examples/pyproject.toml","README/docs mention code capabilities"]},"package_provenance_drift":{"status":"match","confidence":"high","summary":"Published package metadata matches the tracked repo","evidence":["pypi package 'pydantic-ai' points to the tracked repo"]},"evidence_grade":"A","coverage_grade":"A","signal_coverage":0.8,"signal_types":4,"listing_status":"listed","display_listing_status":"listed","display_status_label":"Listed","has_warning":false,"warning_reasons":[],"license_spdx":"MIT","license_type":"open","license_override":"","trust_score":88.2,"trust_score_v2":88.2,"rank_v2":11,"rank_v2_delta":6,"trust_v2_adjustment":-0.3,"trust_confidence":1.0,"trust_breakdown":{"safety":16.5,"identity":18.0,"transparency":14.6,"maintenance":20.0,"adoption":19.4},"trust_v2_breakdown":{"mcp":2.0,"external_dependencies":-2.5,"tool_plugin_surface":-1.2,"package_provenance_drift":4.0},"pending_signals":false},{"name":"LeRobot","repo":"huggingface/lerobot","display_repo":"","url":"https://github.com/huggingface/lerobot","rank":12,"previous_rank":13,"rank_delta":1,"stars":25692,"stars_fmt":"25.7k","forks":5052,"forks_fmt":"5.1k","last_push":"2026-07-11","days_ago":0,"weekly_commits":59,"commits_low_confidence":false,"score":90.9,"description":"🤗 LeRobot: Making AI for Robotics more accessible with end-to-end learning","language":"Python","open_issues":403,"category":"Robotics & Embodied","category_rank":1,"npm_package":"","crate_package":"","pypi_package":"lerobot","weekly_downloads":52836,"dl_source":"pypi","hn_mentions_30d":1,"has_provenance":true,"npm_provenance":null,"pypi_provenance":true,"signed_commits_ratio":1.0,"scorecard_score":7.0,"scorecard_checks":{"Binary-Artifacts":10,"Branch-Protection":5,"CI-Tests":10,"CII-Best-Practices":0,"Code-Review":7,"Contributors":10,"Dangerous-Workflow":10,"Dependency-Update-Tool":10,"Fuzzing":0,"License":10,"Maintained":10,"Packaging":10,"Pinned-Dependencies":2,"SAST":9,"Security-Policy":10,"Signed-Releases":0,"Token-Permissions":8,"Vulnerabilities":4},"scorecard_scanned_at":"2026-07-11T03:33:56Z","slug":"lerobot","source_note":"","public_actions":null,"mcp_server_support":{"status":"none","confidence":null,"evidence":[]},"external_service_dependencies":{"providers":["OpenAI","Postgres"],"requires_api_keys":false,"confidence":"high","evidence":["Found OpenAI dependency 'openai' in pyproject.toml","Found Postgres dependency 'pg' in pyproject.toml"]},"tool_plugin_surface":{"plugin_system":"declared","tool_tags":["code","database"],"confidence":"high","evidence":["README/docs mention a declared plugin/integration surface","Found database dependency 'pg' in pyproject.toml","README/docs mention code capabilities"]},"package_provenance_drift":{"status":"unknown","confidence":"low","summary":"Package source metadata is missing or inconclusive","evidence":["pypi package 'lerobot' has a non-GitHub or unparseable source URL"]},"evidence_grade":"A","coverage_grade":"A","signal_coverage":0.8,"signal_types":4,"listing_status":"listed","display_listing_status":"listed","display_status_label":"Listed","has_warning":false,"warning_reasons":[],"license_spdx":"Apache-2.0","license_type":"open","license_override":"","trust_score":88.2,"trust_score_v2":88.2,"rank_v2":12,"rank_v2_delta":0,"trust_v2_adjustment":-1.4,"trust_confidence":1.0,"trust_breakdown":{"safety":21.2,"identity":18.0,"transparency":14.4,"maintenance":19.1,"adoption":16.9},"trust_v2_breakdown":{"mcp":0.0,"external_dependencies":-0.5,"tool_plugin_surface":-0.9,"package_provenance_drift":0.0},"pending_signals":false},{"name":"MLflow","repo":"mlflow/mlflow","display_repo":"","url":"https://github.com/mlflow/mlflow","rank":13,"previous_rank":11,"rank_delta":-2,"stars":26972,"stars_fmt":"27.0k","forks":5981,"forks_fmt":"6.0k","last_push":"2026-07-10","days_ago":1,"weekly_commits":199,"commits_low_confidence":false,"score":94.2,"description":"The open source AI engineering platform for agents, LLMs, and ML models. MLflow enables teams of all sizes to debug, eva","language":"Python","open_issues":1449,"category":"Observability & Evaluation","category_rank":1,"npm_package":"","crate_package":"","pypi_package":"mlflow","weekly_downloads":8847787,"dl_source":"pypi","hn_mentions_30d":1,"has_provenance":true,"npm_provenance":null,"pypi_provenance":true,"signed_commits_ratio":1.0,"scorecard_score":5.5,"scorecard_checks":{"Code-Review":9,"Maintained":10,"CII-Best-Practices":0,"Security-Policy":10,"License":10,"Dangerous-Workflow":0,"Pinned-Dependencies":-1,"Signed-Releases":0,"Token-Permissions":10,"Branch-Protection":3,"Packaging":10,"Binary-Artifacts":10,"SAST":0,"Fuzzing":0},"scorecard_scanned_at":"2026-06-20T18:02:33Z","slug":"mlflow","source_note":"","public_actions":null,"mcp_server_support":{"status":"implemented","confidence":"high","evidence":["Found MCP-related server path: mlflow/mcp/server.py","Found MCP dependency 'fastmcp' in pyproject.toml"]},"external_service_dependencies":{"providers":["Amazon Bedrock","Anthropic","Google Gemini","OpenAI","Postgres"],"requires_api_keys":false,"confidence":"high","evidence":["README/docs mention OpenAI","Found OpenAI dependency 'openai' in pyproject.toml","README/docs mention Anthropic","README/docs mention Google Gemini","README/docs mention Amazon Bedrock","Found Amazon Bedrock dependency 'boto3' in pyproject.toml"]},"tool_plugin_surface":{"plugin_system":"declared","tool_tags":["code","database","shell"],"confidence":"high","evidence":["README/docs mention a declared plugin/integration surface","Found shell dependency 'subprocess' in pyproject.toml","Found database dependency 'pg' in pyproject.toml","README/docs mention code capabilities"]},"package_provenance_drift":{"status":"unknown","confidence":"low","summary":"Package source metadata is missing or inconclusive","evidence":["pypi package 'mlflow' has a non-GitHub or unparseable source URL"]},"evidence_grade":"A","coverage_grade":"A","signal_coverage":0.8,"signal_types":4,"listing_status":"listed","display_listing_status":"listed","display_status_label":"Listed","has_warning":false,"warning_reasons":[],"license_spdx":"Apache-2.0","license_type":"open","license_override":"","trust_score":88.2,"trust_score_v2":88.2,"rank_v2":13,"rank_v2_delta":-5,"trust_v2_adjustment":-2.2,"trust_confidence":1.0,"trust_breakdown":{"safety":19.4,"identity":18.0,"transparency":13.2,"maintenance":19.9,"adoption":19.9},"trust_v2_breakdown":{"mcp":2.0,"external_dependencies":-2.0,"tool_plugin_surface":-1.2,"package_provenance_drift":0.0},"pending_signals":false},{"name":"LiveKit Agents","repo":"livekit/agents","display_repo":"","url":"https://github.com/livekit/agents","rank":14,"previous_rank":14,"rank_delta":0,"stars":11313,"stars_fmt":"11.3k","forks":3311,"forks_fmt":"3.3k","last_push":"2026-07-11","days_ago":0,"weekly_commits":155,"commits_low_confidence":false,"score":90.7,"description":"A framework for building realtime voice AI agents 🤖🎙️📹 ","language":"Python","open_issues":224,"category":"Voice & Conversational","category_rank":1,"npm_package":"","crate_package":"","pypi_package":"livekit-agents","weekly_downloads":935796,"dl_source":"pypi","hn_mentions_30d":null,"has_provenance":true,"npm_provenance":null,"pypi_provenance":true,"signed_commits_ratio":1.0,"scorecard_score":6.2,"scorecard_checks":{"Binary-Artifacts":10,"Branch-Protection":4,"CI-Tests":10,"CII-Best-Practices":0,"Code-Review":10,"Contributors":10,"Dangerous-Workflow":10,"Dependency-Update-Tool":10,"Fuzzing":0,"License":10,"Maintained":10,"Packaging":10,"Pinned-Dependencies":3,"SAST":6,"Security-Policy":0,"Signed-Releases":-1,"Token-Permissions":0,"Vulnerabilities":0},"scorecard_scanned_at":"2026-07-08T08:27:28Z","slug":"livekit-agents","source_note":"","public_actions":null,"mcp_server_support":{"status":"implemented","confidence":"high","evidence":["README/docs explicitly mention an MCP server","Found MCP-related server path: examples/voice_agents/mcp/server.py"]},"external_service_dependencies":{"providers":["Amazon Bedrock","Anthropic","Google Gemini","OpenAI","Postgres"],"requires_api_keys":true,"confidence":"high","evidence":["README/docs mention OpenAI","Found OpenAI dependency 'openai' in pyproject.toml","Found Anthropic dependency 'anthropic' in pyproject.toml","README/docs mention Google Gemini","Found Google Gemini dependency 'google.genai' in pyproject.toml","Found Amazon Bedrock dependency 'bedrock' in pyproject.toml"]},"tool_plugin_surface":{"plugin_system":"declared","tool_tags":["browser","code","database","search","shell"],"confidence":"high","evidence":["README/docs mention a declared plugin/integration surface","Found browser dependency 'playwright' in pyproject.toml","README/docs mention shell capabilities","README/docs mention search capabilities","Found database dependency 'pg' in pyproject.toml","README/docs mention code capabilities"]},"package_provenance_drift":{"status":"match","confidence":"high","summary":"Published package metadata matches the tracked repo","evidence":["pypi package 'livekit-agents' points to the tracked repo"]},"evidence_grade":"A","coverage_grade":"B","signal_coverage":0.6,"signal_types":3,"listing_status":"listed","display_listing_status":"listed","display_status_label":"Listed","has_warning":false,"warning_reasons":[],"license_spdx":"Apache-2.0","license_type":"open","license_override":"","trust_score":88.0,"trust_score_v2":88.0,"rank_v2":14,"rank_v2_delta":-4,"trust_v2_adjustment":-1.7,"trust_confidence":1.0,"trust_breakdown":{"safety":20.2,"identity":18.0,"transparency":13.8,"maintenance":20.0,"adoption":17.7},"trust_v2_breakdown":{"mcp":2.0,"external_dependencies":-3.0,"tool_plugin_surface":-1.8,"package_provenance_drift":4.0},"pending_signals":false},{"name":"Docling","repo":"docling-project/docling","display_repo":"","url":"https://github.com/docling-project/docling","rank":15,"previous_rank":17,"rank_delta":2,"stars":62985,"stars_fmt":"63.0k","forks":4439,"forks_fmt":"4.4k","last_push":"2026-07-11","days_ago":0,"weekly_commits":114,"commits_low_confidence":false,"score":95.8,"description":"Get your documents ready for gen AI","language":"Python","open_issues":872,"category":"Research & Data","category_rank":1,"npm_package":"","crate_package":"","pypi_package":"docling","weekly_downloads":4050648,"dl_source":"pypi","hn_mentions_30d":44,"has_provenance":true,"npm_provenance":null,"pypi_provenance":true,"signed_commits_ratio":0.86,"scorecard_score":4.9,"scorecard_checks":{"Binary-Artifacts":10,"Branch-Protection":4,"CI-Tests":10,"CII-Best-Practices":7,"Code-Review":9,"Contributors":10,"Dangerous-Workflow":0,"Dependency-Update-Tool":0,"Fuzzing":0,"License":10,"Maintained":10,"Packaging":10,"Pinned-Dependencies":5,"SAST":0,"Security-Policy":10,"Signed-Releases":-1,"Token-Permissions":0,"Vulnerabilities":2},"scorecard_scanned_at":"2026-07-10T08:04:45Z","slug":"docling","source_note":"","public_actions":null,"mcp_server_support":{"status":"implemented","confidence":"medium","evidence":["README/docs explicitly mention an MCP server"]},"external_service_dependencies":{"providers":["Amazon Bedrock","OpenAI","Postgres"],"requires_api_keys":false,"confidence":"high","evidence":["Found OpenAI dependency 'openai' in pyproject.toml","Found Amazon Bedrock dependency 'boto3' in pyproject.toml","Found Postgres dependency 'pg' in pyproject.toml"]},"tool_plugin_surface":{"plugin_system":"extension-based","tool_tags":["browser","code","database","search"],"confidence":"high","evidence":["README/docs mention a extension-based plugin/integration surface","Found browser dependency 'playwright' in pyproject.toml","README/docs mention search capabilities","Found database dependency 'pg' in pyproject.toml","README/docs mention code capabilities"]},"package_provenance_drift":{"status":"unknown","confidence":"low","summary":"Package source metadata is missing or inconclusive","evidence":["pypi package 'docling' has a non-GitHub or unparseable source URL"]},"evidence_grade":"A","coverage_grade":"A","signal_coverage":0.8,"signal_types":4,"listing_status":"listed","display_listing_status":"listed","display_status_label":"Listed","has_warning":false,"warning_reasons":[],"license_spdx":"MIT","license_type":"open","license_override":"","trust_score":86.9,"trust_score_v2":86.9,"rank_v2":15,"rank_v2_delta":1,"trust_v2_adjustment":-1.7,"trust_confidence":1.0,"trust_breakdown":{"safety":17.9,"identity":18.0,"transparency":12.7,"maintenance":20.0,"adoption":20.0},"trust_v2_breakdown":{"mcp":2.0,"external_dependencies":-1.0,"tool_plugin_surface":-1.8,"package_provenance_drift":0.0},"pending_signals":false},{"name":"LanceDB","repo":"lancedb/lancedb","display_repo":"","url":"https://github.com/lancedb/lancedb","rank":16,"previous_rank":16,"rank_delta":0,"stars":10860,"stars_fmt":"10.9k","forks":946,"forks_fmt":"946","last_push":"2026-07-10","days_ago":1,"weekly_commits":88,"commits_low_confidence":false,"score":87.3,"description":"Developer-friendly OSS embedded retrieval library for multimodal AI. Search More; Manage Less.","language":"HTML","open_issues":540,"category":"Memory & Knowledge","category_rank":1,"npm_package":"","crate_package":"","pypi_package":"lancedb","weekly_downloads":1604486,"dl_source":"pypi","hn_mentions_30d":20,"has_provenance":true,"npm_provenance":null,"pypi_provenance":true,"signed_commits_ratio":0.86,"scorecard_score":5.8,"scorecard_checks":{"Binary-Artifacts":10,"Branch-Protection":6,"CI-Tests":10,"CII-Best-Practices":0,"Code-Review":7,"Contributors":10,"Dangerous-Workflow":10,"Dependency-Update-Tool":10,"Fuzzing":0,"License":10,"Maintained":10,"Packaging":10,"Pinned-Dependencies":0,"SAST":3,"Security-Policy":0,"Signed-Releases":-1,"Token-Permissions":0,"Vulnerabilities":0},"scorecard_scanned_at":"2026-07-08T08:34:09Z","slug":"lancedb","source_note":"","public_actions":null,"mcp_server_support":{"status":"none","confidence":null,"evidence":[]},"external_service_dependencies":{"providers":["Amazon Bedrock","OpenAI"],"requires_api_keys":false,"confidence":"high","evidence":["Found OpenAI dependency 'openai' in nodejs/package.json","Found Amazon Bedrock dependency 'boto3' in python/pyproject.toml"]},"tool_plugin_surface":{"plugin_system":"declared","tool_tags":["code","search"],"confidence":"high","evidence":["README/docs mention a declared plugin/integration surface","README/docs mention search capabilities","README/docs mention code capabilities"]},"package_provenance_drift":{"status":"unknown","confidence":"low","summary":"Package source metadata is missing or inconclusive","evidence":["pypi package 'lancedb' has a non-GitHub or unparseable source URL"]},"evidence_grade":"A","coverage_grade":"A","signal_coverage":0.8,"signal_types":4,"listing_status":"listed","display_listing_status":"listed","display_status_label":"Listed","has_warning":false,"warning_reasons":[],"license_spdx":"Apache-2.0","license_type":"open","license_override":"","trust_score":86.8,"trust_score_v2":86.8,"rank_v2":16,"rank_v2_delta":4,"trust_v2_adjustment":-1.4,"trust_confidence":1.0,"trust_breakdown":{"safety":19.1,"identity":18.0,"transparency":13.4,"maintenance":19.7,"adoption":18.0},"trust_v2_breakdown":{"mcp":0.0,"external_dependencies":-0.5,"tool_plugin_surface":-0.9,"package_provenance_drift":0.0},"pending_signals":false},{"name":"Headroom","repo":"chopratejas/headroom","display_repo":"","url":"https://github.com/headroomlabs-ai/headroom","rank":17,"previous_rank":15,"rank_delta":-2,"stars":58441,"stars_fmt":"58.4k","forks":4314,"forks_fmt":"4.3k","last_push":"2026-07-11","days_ago":0,"weekly_commits":477,"commits_low_confidence":false,"score":95.5,"description":"Compress tool outputs, logs, files, and RAG chunks before they reach the LLM. 60-95% fewer tokens, same answers. Library","language":"Python","open_issues":262,"category":"LLM Gateways & Infra","category_rank":1,"npm_package":"headroom-ai","crate_package":"","pypi_package":"headroom-ai","weekly_downloads":231019,"dl_source":"npm+pypi","hn_mentions_30d":null,"has_provenance":true,"npm_provenance":false,"pypi_provenance":true,"signed_commits_ratio":0.97,"scorecard_score":4.6,"scorecard_checks":{"Binary-Artifacts":10,"Branch-Protection":0,"CI-Tests":10,"CII-Best-Practices":0,"Code-Review":5,"Contributors":10,"Dangerous-Workflow":0,"Dependency-Update-Tool":10,"Fuzzing":0,"License":10,"Maintained":10,"Packaging":10,"Pinned-Dependencies":0,"SAST":9,"Security-Policy":10,"Signed-Releases":0,"Token-Permissions":0,"Vulnerabilities":0},"scorecard_scanned_at":"2026-07-11T03:36:26Z","slug":"headroom","source_note":"","public_actions":null,"mcp_server_support":{"status":"implemented","confidence":"high","evidence":["README/docs explicitly mention an MCP server","Found MCP-related server path: examples/mcp_demo/mock_mcp_servers.py","Found MCP-related server path: headroom/ccr/mcp_server.py","Found MCP-related server test path: tests/test_ccr_mcp_server.py"]},"external_service_dependencies":{"providers":["Amazon Bedrock","Anthropic","OpenAI","Qdrant"],"requires_api_keys":false,"confidence":"high","evidence":["Found OpenAI dependency 'openai' in pyproject.toml","README/docs also mention OpenAI","Found Anthropic dependency 'anthropic' in pyproject.toml","README/docs also mention Anthropic","Found Amazon Bedrock dependency 'bedrock' in pyproject.toml","README/docs also mention Amazon Bedrock"]},"tool_plugin_surface":{"plugin_system":"extension-based","tool_tags":["code","database","shell"],"confidence":"high","evidence":["README/docs mention a extension-based plugin/integration surface","Found shell dependency 'subprocess' in pyproject.toml","Found database dependency 'qdrant' in pyproject.toml","README/docs also mention database capabilities","Found code dependency 'gitpython' in pyproject.toml","README/docs also mention code capabilities"]},"package_provenance_drift":{"status":"partial","confidence":"medium","summary":"Some package metadata matches; some source metadata is missing","evidence":["npm package 'headroom-ai' does not expose a source repo URL","pypi package 'headroom-ai' points to the tracked repo"]},"evidence_grade":"A","coverage_grade":"B","signal_coverage":0.6,"signal_types":3,"listing_status":"listed","display_listing_status":"listed","display_status_label":"Listed","has_warning":false,"warning_reasons":[],"license_spdx":"Apache-2.0","license_type":"open","license_override":"","trust_score":86.7,"trust_score_v2":86.7,"rank_v2":17,"rank_v2_delta":6,"trust_v2_adjustment":-0.4,"trust_confidence":1.0,"trust_breakdown":{"safety":18.1,"identity":18.0,"transparency":12.4,"maintenance":20.0,"adoption":18.6},"trust_v2_breakdown":{"mcp":2.0,"external_dependencies":-1.5,"tool_plugin_surface":-1.5,"package_provenance_drift":2.0},"pending_signals":false},{"name":"Weights & Biases Weave","repo":"wandb/weave","display_repo":"","url":"https://github.com/wandb/weave","rank":18,"previous_rank":19,"rank_delta":1,"stars":1104,"stars_fmt":"1.1k","forks":157,"forks_fmt":"157","last_push":"2026-07-11","days_ago":0,"weekly_commits":276,"commits_low_confidence":false,"score":78.5,"description":"Weave is a toolkit for developing AI-powered applications, built by Weights & Biases.","language":"Python","open_issues":78,"category":"Observability & Evaluation","category_rank":2,"npm_package":"weave","crate_package":"","pypi_package":"weave","weekly_downloads":611935,"dl_source":"npm+pypi","hn_mentions_30d":0,"has_provenance":true,"npm_provenance":true,"pypi_provenance":true,"signed_commits_ratio":0.98,"scorecard_score":6.5,"scorecard_checks":{"Binary-Artifacts":10,"Branch-Protection":4,"CI-Tests":10,"CII-Best-Practices":0,"Code-Review":10,"Contributors":10,"Dangerous-Workflow":10,"Dependency-Update-Tool":10,"Fuzzing":0,"License":10,"Maintained":10,"Packaging":10,"Pinned-Dependencies":5,"SAST":0,"Security-Policy":10,"Signed-Releases":-1,"Token-Permissions":0,"Vulnerabilities":0},"scorecard_scanned_at":"2026-07-11T03:33:23Z","slug":"weights-biases-weave","source_note":"","public_actions":null,"mcp_server_support":{"status":"implemented","confidence":"high","evidence":["Found MCP-related server path: weave/integrations/fastmcp/__init__.py","Found MCP-related server path: weave/integrations/fastmcp/fastmcp_client.py","Found MCP-related server test path: tests/integrations/fastmcp/cassettes/fastmcp_test/test_fastmcp_client.yaml","Found MCP-related server test path: tests/integrations/fastmcp/cassettes/fastmcp_test/test_fastmcp_server.yaml"]},"external_service_dependencies":{"providers":["Amazon Bedrock","Anthropic","E2B","OpenAI","Postgres","Redis"],"requires_api_keys":false,"confidence":"high","evidence":["README/docs mention OpenAI","Found OpenAI dependency 'openai' in pyproject.toml","README/docs mention Anthropic","Found Anthropic dependency 'anthropic' in pyproject.toml","Found Amazon Bedrock dependency 'bedrock' in pyproject.toml","Found E2B dependency 'e2b' in sdks/node/package.json"]},"tool_plugin_surface":{"plugin_system":"none","tool_tags":["code","database","shell"],"confidence":"high","evidence":["Found shell dependency 'pty' in pyproject.toml","Found database dependency 'pg' in pyproject.toml","README/docs mention code capabilities"]},"package_provenance_drift":{"status":"partial","confidence":"medium","summary":"Some package metadata matches; some source metadata is missing","evidence":["npm package 'weave' points to the tracked repo","pypi package 'weave' has a non-GitHub or unparseable source URL"]},"evidence_grade":"A","coverage_grade":"A","signal_coverage":0.8,"signal_types":4,"listing_status":"listed","display_listing_status":"listed","display_status_label":"Listed","has_warning":false,"warning_reasons":[],"license_spdx":"Apache-2.0","license_type":"open","license_override":"","trust_score":86.6,"trust_score_v2":86.6,"rank_v2":18,"rank_v2_delta":3,"trust_v2_adjustment":-0.9,"trust_confidence":1.0,"trust_breakdown":{"safety":20.5,"identity":18.0,"transparency":14.0,"maintenance":20.0,"adoption":15.0},"trust_v2_breakdown":{"mcp":2.0,"external_dependencies":-2.5,"tool_plugin_surface":-0.9,"package_provenance_drift":2.0},"pending_signals":false},{"name":"LangGraph","repo":"langchain-ai/langgraph","display_repo":"","url":"https://github.com/langchain-ai/langgraph","rank":19,"previous_rank":18,"rank_delta":-1,"stars":37001,"stars_fmt":"37.0k","forks":6212,"forks_fmt":"6.2k","last_push":"2026-07-10","days_ago":1,"weekly_commits":57,"commits_low_confidence":false,"score":92.0,"description":"Build resilient agents.","language":"Python","open_issues":384,"category":"Agent Frameworks","category_rank":5,"npm_package":"@langchain/langgraph","crate_package":"","pypi_package":"langgraph","weekly_downloads":17526330,"dl_source":"npm+pypi","hn_mentions_30d":16,"has_provenance":true,"npm_provenance":true,"pypi_provenance":false,"signed_commits_ratio":1.0,"scorecard_score":7.1,"scorecard_checks":{"Binary-Artifacts":10,"Branch-Protection":4,"CI-Tests":10,"CII-Best-Practices":0,"Code-Review":10,"Contributors":10,"Dangerous-Workflow":10,"Dependency-Update-Tool":10,"Fuzzing":0,"License":10,"Maintained":10,"Packaging":10,"Pinned-Dependencies":8,"SAST":10,"Security-Policy":10,"Signed-Releases":-1,"Token-Permissions":0,"Vulnerabilities":0},"scorecard_scanned_at":"2026-07-11T03:25:31Z","slug":"langgraph","source_note":"","public_actions":null,"mcp_server_support":{"status":"none","confidence":null,"evidence":[]},"external_service_dependencies":{"providers":["Postgres","Redis"],"requires_api_keys":false,"confidence":"high","evidence":["Found Postgres dependency 'pg' in libs/cli/pyproject.toml","Found Redis dependency 'redis' in libs/langgraph/pyproject.toml"]},"tool_plugin_surface":{"plugin_system":"declared","tool_tags":["code","database"],"confidence":"high","evidence":["README/docs mention a declared plugin/integration surface","Found database dependency 'pg' in libs/cli/pyproject.toml","README/docs mention code capabilities"]},"package_provenance_drift":{"status":"warning","confidence":"high","summary":"1 package source mismatch detected","evidence":["npm package '@langchain/langgraph' points to langchain-ai/langgraphjs, not langchain-ai/langgraph","pypi package 'langgraph' points to the tracked repo"]},"evidence_grade":"A","coverage_grade":"A","signal_coverage":0.8,"signal_types":4,"listing_status":"listed","display_listing_status":"listed","display_status_label":"Listed","has_warning":false,"warning_reasons":[],"license_spdx":"MIT","license_type":"open","license_override":"","trust_score":86.5,"trust_score_v2":86.5,"rank_v2":19,"rank_v2_delta":-16,"trust_v2_adjustment":-6.4,"trust_confidence":1.0,"trust_breakdown":{"safety":21.4,"identity":18.0,"transparency":14.5,"maintenance":19.0,"adoption":20.0},"trust_v2_breakdown":{"mcp":0.0,"external_dependencies":-0.5,"tool_plugin_surface":-0.9,"package_provenance_drift":-5.0},"pending_signals":false},{"name":"Agno","repo":"agno-agi/agno","display_repo":"","url":"https://github.com/agno-agi/agno","rank":20,"previous_rank":20,"rank_delta":0,"stars":41091,"stars_fmt":"41.1k","forks":5626,"forks_fmt":"5.6k","last_push":"2026-07-11","days_ago":0,"weekly_commits":132,"commits_low_confidence":false,"score":95.1,"description":"Build, run, and manage your own agent platform.","language":"Python","open_issues":502,"category":"Agent Frameworks","category_rank":6,"npm_package":"","crate_package":"","pypi_package":"agno","weekly_downloads":505321,"dl_source":"pypi","hn_mentions_30d":217,"has_provenance":true,"npm_provenance":null,"pypi_provenance":true,"signed_commits_ratio":0.93,"scorecard_score":4.7,"scorecard_checks":{"Binary-Artifacts":10,"Branch-Protection":5,"CI-Tests":10,"CII-Best-Practices":0,"Code-Review":6,"Contributors":10,"Dangerous-Workflow":10,"Dependency-Update-Tool":0,"Fuzzing":0,"License":10,"Maintained":10,"Packaging":10,"Pinned-Dependencies":0,"SAST":0,"Security-Policy":0,"Signed-Releases":-1,"Token-Permissions":0,"Vulnerabilities":0},"scorecard_scanned_at":"2026-07-11T01:23:56Z","slug":"agno","source_note":"","public_actions":null,"mcp_server_support":{"status":"implemented","confidence":"high","evidence":["README/docs explicitly mention an MCP server","Found MCP-related server path: cookbook/05_agent_os/mcp_demo/mcp_server_example.py","Found MCP-related server path: cookbook/12_context/06_mcp_server.py","Found MCP-related server test path: libs/agno/tests/unit/os/test_mcp_server.py"]},"external_service_dependencies":{"providers":["Amazon Bedrock","Anthropic","Brave Search","Browserbase","E2B","Firecrawl","OpenAI","Pinecone","Postgres","Qdrant","Redis","SerpAPI","Tavily","Weaviate"],"requires_api_keys":false,"confidence":"high","evidence":["Found OpenAI dependency 'openai' in libs/agno/pyproject.toml","Found Anthropic dependency 'anthropic' in libs/agno/pyproject.toml","Found Amazon Bedrock dependency 'boto3' in libs/agno/pyproject.toml","Found Pinecone dependency 'pinecone' in libs/agno/pyproject.toml","Found Qdrant dependency 'qdrant' in libs/agno/pyproject.toml","Found Weaviate dependency 'weaviate' in libs/agno/pyproject.toml"]},"tool_plugin_surface":{"plugin_system":"declared","tool_tags":["browser","code","database","search"],"confidence":"high","evidence":["README/docs mention a declared plugin/integration surface","Found browser dependency 'playwright' in libs/agno/pyproject.toml","Found search dependency 'tavily' in libs/agno/pyproject.toml","Found database dependency 'postgres' in libs/agno/pyproject.toml","Found code dependency 'gitpython' in libs/agno_infra/pyproject.toml","README/docs also mention code capabilities"]},"package_provenance_drift":{"status":"match","confidence":"high","summary":"Published package metadata matches the tracked repo","evidence":["pypi package 'agno' points to the tracked repo"]},"evidence_grade":"A","coverage_grade":"A","signal_coverage":0.8,"signal_types":4,"listing_status":"listed","display_listing_status":"listed","display_status_label":"Listed","has_warning":false,"warning_reasons":[],"license_spdx":"Apache-2.0","license_type":"open","license_override":"","trust_score":86.5,"trust_score_v2":86.5,"rank_v2":20,"rank_v2_delta":2,"trust_v2_adjustment":-0.7,"trust_confidence":1.0,"trust_breakdown":{"safety":18.0,"identity":18.0,"transparency":12.5,"maintenance":20.0,"adoption":18.7},"trust_v2_breakdown":{"mcp":2.0,"external_dependencies":-3.0,"tool_plugin_surface":-1.5,"package_provenance_drift":4.0},"pending_signals":false},{"name":"Botpress","repo":"botpress/botpress","display_repo":"","url":"https://github.com/botpress/botpress","rank":21,"previous_rank":21,"rank_delta":0,"stars":14778,"stars_fmt":"14.8k","forks":2273,"forks_fmt":"2.3k","last_push":"2026-07-10","days_ago":1,"weekly_commits":34,"commits_low_confidence":false,"score":84.9,"description":"The open-source hub to build & deploy GPT/LLM Agents ⚡️","language":"TypeScript","open_issues":3,"category":"Workflow Platforms","category_rank":3,"npm_package":"@botpress/client","crate_package":"","pypi_package":"","weekly_downloads":15084,"dl_source":"npm","hn_mentions_30d":2,"has_provenance":true,"npm_provenance":true,"pypi_provenance":null,"signed_commits_ratio":0.92,"scorecard_score":5.8,"scorecard_checks":{"Binary-Artifacts":10,"Branch-Protection":5,"CI-Tests":10,"CII-Best-Practices":0,"Code-Review":6,"Contributors":10,"Dangerous-Workflow":10,"Dependency-Update-Tool":10,"Fuzzing":0,"License":10,"Maintained":10,"Packaging":-1,"Pinned-Dependencies":0,"SAST":0,"Security-Policy":10,"Signed-Releases":-1,"Token-Permissions":0,"Vulnerabilities":0},"scorecard_scanned_at":"2026-07-11T04:08:06Z","slug":"botpress","source_note":"","public_actions":null,"mcp_server_support":{"status":"none","confidence":null,"evidence":[]},"external_service_dependencies":{"providers":["OpenAI"],"requires_api_keys":true,"confidence":"high","evidence":["Found OpenAI dependency 'openai' in package.json","README/docs also mention OpenAI"]},"tool_plugin_surface":{"plugin_system":"declared","tool_tags":[],"confidence":"medium","evidence":["README/docs mention a declared plugin/integration surface"]},"package_provenance_drift":{"status":"match","confidence":"high","summary":"Published package metadata matches the tracked repo","evidence":["npm package '@botpress/client' points to the tracked repo"]},"evidence_grade":"A","coverage_grade":"A","signal_coverage":0.8,"signal_types":4,"listing_status":"listed","display_listing_status":"listed","display_status_label":"Listed","has_warning":false,"warning_reasons":[],"license_spdx":"MIT","license_type":"open","license_override":"","trust_score":86.3,"trust_score_v2":86.3,"rank_v2":21,"rank_v2_delta":11,"trust_v2_adjustment":1.8,"trust_confidence":1.0,"trust_breakdown":{"safety":19.4,"identity":18.0,"transparency":13.4,"maintenance":18.1,"adoption":15.6},"trust_v2_breakdown":{"mcp":0.0,"external_dependencies":-1.0,"tool_plugin_surface":-0.3,"package_provenance_drift":4.0},"pending_signals":false},{"name":"Neo","repo":"neomjs/neo","display_repo":"","url":"https://github.com/neomjs/neo","rank":22,"previous_rank":23,"rank_delta":1,"stars":3229,"stars_fmt":"3.2k","forks":214,"forks_fmt":"214","last_push":"2026-07-11","days_ago":0,"weekly_commits":1306,"commits_low_confidence":false,"score":81.9,"description":"Neo.mjs is a self-evolving software organism: a professional end-to-end AI engineering team whose cross-model swarm inha","language":"JavaScript","open_issues":219,"category":"UI & App Builders","category_rank":1,"npm_package":"neo.mjs","crate_package":"","pypi_package":"","weekly_downloads":4945,"dl_source":"npm","hn_mentions_30d":null,"has_provenance":true,"npm_provenance":true,"pypi_provenance":null,"signed_commits_ratio":0.78,"scorecard_score":6.2,"scorecard_checks":{"Binary-Artifacts":10,"Branch-Protection":3,"CI-Tests":10,"CII-Best-Practices":0,"Code-Review":7,"Contributors":10,"Dangerous-Workflow":10,"Dependency-Update-Tool":10,"Fuzzing":0,"License":10,"Maintained":10,"Packaging":10,"Pinned-Dependencies":1,"SAST":10,"Security-Policy":0,"Signed-Releases":0,"Token-Permissions":0,"Vulnerabilities":9},"scorecard_scanned_at":"2026-07-10T17:21:15Z","slug":"neo","source_note":"","public_actions":null,"mcp_server_support":{"status":"implemented","confidence":"high","evidence":["README/docs explicitly mention an MCP server","Found MCP-related server path: ai/mcp/server/BaseServer.mjs","Found MCP-related server path: ai/mcp/server/file-system/Server.mjs","Found MCP-related server test path: test/playwright/unit/ai/mcp/client/McpServersHealth.spec.mjs"]},"external_service_dependencies":{"providers":["Anthropic","Google Gemini","OpenAI"],"requires_api_keys":false,"confidence":"high","evidence":["README/docs mention OpenAI","README/docs mention Anthropic","README/docs mention Google Gemini"]},"tool_plugin_surface":{"plugin_system":"declared","tool_tags":["browser","code","filesystem","search","shell"],"confidence":"high","evidence":["Found declared path: resources/scss/src/grid/plugin/AnimateRows.scss","Found browser dependency 'playwright' in package.json","README/docs mention shell capabilities","README/docs mention filesystem capabilities","README/docs mention search capabilities","README/docs mention code capabilities"]},"package_provenance_drift":{"status":"match","confidence":"high","summary":"Published package metadata matches the tracked repo","evidence":["npm package 'neo.mjs' points to the tracked repo"]},"evidence_grade":"A","coverage_grade":"B","signal_coverage":0.6,"signal_types":3,"listing_status":"listed","display_listing_status":"listed","display_status_label":"Listed","has_warning":false,"warning_reasons":[],"license_spdx":"MIT","license_type":"open","license_override":"","trust_score":86.1,"trust_score_v2":86.1,"rank_v2":22,"rank_v2_delta":11,"trust_v2_adjustment":1.9,"trust_confidence":1.0,"trust_breakdown":{"safety":19.1,"identity":18.0,"transparency":13.8,"maintenance":20.0,"adoption":13.3},"trust_v2_breakdown":{"mcp":2.0,"external_dependencies":-1.0,"tool_plugin_surface":-1.8,"package_provenance_drift":4.0},"pending_signals":false},{"name":"Mem0","repo":"mem0ai/mem0","display_repo":"","url":"https://github.com/mem0ai/mem0","rank":23,"previous_rank":22,"rank_delta":-1,"stars":60585,"stars_fmt":"60.6k","forks":7044,"forks_fmt":"7.0k","last_push":"2026-07-10","days_ago":1,"weekly_commits":227,"commits_low_confidence":false,"score":96.6,"description":"Universal memory layer for AI Agents","language":"Python","open_issues":156,"category":"Memory & Knowledge","category_rank":2,"npm_package":"mem0ai","crate_package":"","pypi_package":"mem0ai","weekly_downloads":812269,"dl_source":"npm+pypi","hn_mentions_30d":553,"has_provenance":true,"npm_provenance":true,"pypi_provenance":true,"signed_commits_ratio":1.0,"scorecard_score":5.5,"scorecard_checks":{"Binary-Artifacts":10,"Branch-Protection":5,"CI-Tests":10,"CII-Best-Practices":0,"Code-Review":10,"Contributors":10,"Dangerous-Workflow":10,"Dependency-Update-Tool":0,"Fuzzing":0,"License":10,"Maintained":10,"Packaging":10,"Pinned-Dependencies":0,"SAST":0,"Security-Policy":10,"Signed-Releases":-1,"Token-Permissions":0,"Vulnerabilities":0},"scorecard_scanned_at":"2026-07-03T08:22:09Z","slug":"mem0","source_note":"","public_actions":null,"mcp_server_support":{"status":"implemented","confidence":"high","evidence":["Found MCP-related server path: openmemory/api/app/mcp_server.py","Found MCP-related server test path: openmemory/api/tests/test_mcp_server.py","Found MCP dependency '@modelcontextprotocol/sdk' in mem0-ts/package.json"]},"external_service_dependencies":{"providers":["Amazon Bedrock","Anthropic","Google Gemini","OpenAI","Pinecone","Postgres","Qdrant","Redis","Supabase","Weaviate"],"requires_api_keys":true,"confidence":"high","evidence":["README/docs mention OpenAI","Found OpenAI dependency 'openai' in pyproject.toml","Found Anthropic dependency 'anthropic' in mem0-ts/package.json","Found Google Gemini dependency 'google-generativeai' in pyproject.toml","Found Amazon Bedrock dependency 'boto3' in pyproject.toml","Found Pinecone dependency 'pinecone' in pyproject.toml"]},"tool_plugin_surface":{"plugin_system":"extension-based","tool_tags":["code","database","search","shell"],"confidence":"high","evidence":["README/docs mention a extension-based plugin/integration surface","README/docs mention shell capabilities","README/docs mention search capabilities","README/docs mention database capabilities","README/docs mention code capabilities"]},"package_provenance_drift":{"status":"partial","confidence":"medium","summary":"Some package metadata matches; some source metadata is missing","evidence":["npm package 'mem0ai' points to the tracked repo","pypi package 'mem0ai' has a non-GitHub or unparseable source URL"]},"evidence_grade":"A","coverage_grade":"A","signal_coverage":0.8,"signal_types":4,"listing_status":"listed","display_listing_status":"listed","display_status_label":"Listed","has_warning":false,"warning_reasons":[],"license_spdx":"Apache-2.0","license_type":"open","license_override":"","trust_score":86.1,"trust_score_v2":86.1,"rank_v2":23,"rank_v2_delta":-14,"trust_v2_adjustment":-3.8,"trust_confidence":1.0,"trust_breakdown":{"safety":19.4,"identity":18.0,"transparency":13.2,"maintenance":19.9,"adoption":19.4},"trust_v2_breakdown":{"mcp":2.0,"external_dependencies":-4.0,"tool_plugin_surface":-1.8,"package_provenance_drift":2.0},"pending_signals":false},{"name":"WrenAI","repo":"Canner/WrenAI","display_repo":"","url":"https://github.com/Canner/WrenAI","rank":24,"previous_rank":24,"rank_delta":0,"stars":15782,"stars_fmt":"15.8k","forks":1807,"forks_fmt":"1.8k","last_push":"2026-07-11","days_ago":0,"weekly_commits":57,"commits_low_confidence":false,"score":87.3,"description":"GenBI (Generative BI) for AI agents, an open-source, governed text-to-SQL through an open context layer that turns natur","language":"Python","open_issues":271,"category":"Research & Data","category_rank":2,"npm_package":"@wrenai/wren-core-wasm","crate_package":"","pypi_package":"wren-pydantic","weekly_downloads":181,"dl_source":"npm+pypi","hn_mentions_30d":null,"has_provenance":true,"npm_provenance":true,"pypi_provenance":false,"signed_commits_ratio":1.0,"scorecard_score":6.0,"scorecard_checks":{"Binary-Artifacts":10,"Branch-Protection":5,"CI-Tests":9,"CII-Best-Practices":0,"Code-Review":10,"Contributors":10,"Dangerous-Workflow":10,"Dependency-Update-Tool":10,"Fuzzing":0,"License":9,"Maintained":10,"Packaging":-1,"Pinned-Dependencies":0,"SAST":0,"Security-Policy":10,"Signed-Releases":-1,"Token-Permissions":0,"Vulnerabilities":0},"scorecard_scanned_at":"2026-07-11T02:11:31Z","slug":"wrenai","source_note":"","public_actions":null,"mcp_server_support":{"status":"none","confidence":null,"evidence":[]},"external_service_dependencies":{"providers":["Amazon Bedrock","Postgres"],"requires_api_keys":false,"confidence":"high","evidence":["Found Amazon Bedrock dependency 'boto3' in core/wren/pyproject.toml","Found Postgres dependency 'psycopg' in core/wren/pyproject.toml","README/docs also mention Postgres"]},"tool_plugin_surface":{"plugin_system":"declared","tool_tags":["database"],"confidence":"high","evidence":["README/docs mention a declared plugin/integration surface","Found database dependency 'postgres' in core/wren/pyproject.toml","README/docs also mention database capabilities"]},"package_provenance_drift":{"status":"match","confidence":"high","summary":"Published package metadata matches the tracked repo","evidence":["npm package '@wrenai/wren-core-wasm' points to the tracked repo","pypi package 'wren-pydantic' points to the tracked repo"]},"evidence_grade":"A","coverage_grade":"B","signal_coverage":0.6,"signal_types":3,"listing_status":"listed","display_listing_status":"listed","display_status_label":"Listed","has_warning":false,"warning_reasons":[],"license_spdx":"NOASSERTION","license_type":"open","license_override":"","trust_score":85.9,"trust_score_v2":85.9,"rank_v2":24,"rank_v2_delta":11,"trust_v2_adjustment":2.2,"trust_confidence":1.0,"trust_breakdown":{"safety":20.0,"identity":18.0,"transparency":13.6,"maintenance":19.0,"adoption":13.1},"trust_v2_breakdown":{"mcp":0.0,"external_dependencies":-0.5,"tool_plugin_surface":-0.6,"package_provenance_drift":4.0},"pending_signals":false},{"name":"Vespa","repo":"vespa-engine/vespa","display_repo":"","url":"https://github.com/vespa-engine/vespa","rank":25,"previous_rank":25,"rank_delta":0,"stars":7015,"stars_fmt":"7.0k","forks":725,"forks_fmt":"725","last_push":"2026-07-11","days_ago":0,"weekly_commits":494,"commits_low_confidence":false,"score":86.4,"description":"The AI search platform","language":"Java","open_issues":220,"category":"Memory & Knowledge","category_rank":3,"npm_package":"","crate_package":"","pypi_package":"pyvespa","weekly_downloads":2314073,"dl_source":"pypi","hn_mentions_30d":0,"has_provenance":true,"npm_provenance":null,"pypi_provenance":true,"signed_commits_ratio":0.56,"scorecard_score":5.8,"scorecard_checks":{"Binary-Artifacts":9,"Branch-Protection":5,"CI-Tests":9,"CII-Best-Practices":0,"Code-Review":10,"Contributors":10,"Dangerous-Workflow":10,"Dependency-Update-Tool":10,"Fuzzing":0,"License":10,"Maintained":10,"Packaging":10,"Pinned-Dependencies":1,"SAST":0,"Security-Policy":10,"Signed-Releases":0,"Token-Permissions":0,"Vulnerabilities":0},"scorecard_scanned_at":"2026-07-11T03:33:02Z","slug":"vespa","source_note":"","public_actions":null,"mcp_server_support":{"status":"none","confidence":null,"evidence":[]},"external_service_dependencies":{"providers":[],"requires_api_keys":false,"confidence":null,"evidence":[]},"tool_plugin_surface":{"plugin_system":"declared","tool_tags":["code","search"],"confidence":"high","evidence":["README/docs mention a declared plugin/integration surface","README/docs mention search capabilities","README/docs mention code capabilities"]},"package_provenance_drift":{"status":"unknown","confidence":"low","summary":"Package source metadata is missing or inconclusive","evidence":["pypi package 'pyvespa' has a non-GitHub or unparseable source URL"]},"evidence_grade":"A","coverage_grade":"A","signal_coverage":0.8,"signal_types":4,"listing_status":"listed","display_listing_status":"listed","display_status_label":"Listed","has_warning":false,"warning_reasons":[],"license_spdx":"Apache-2.0","license_type":"open","license_override":"","trust_score":85.7,"trust_score_v2":85.7,"rank_v2":25,"rank_v2_delta":-1,"trust_v2_adjustment":-0.9,"trust_confidence":1.0,"trust_breakdown":{"safety":17.5,"identity":18.0,"transparency":13.4,"maintenance":20.0,"adoption":17.7},"trust_v2_breakdown":{"mcp":0.0,"external_dependencies":-0.0,"tool_plugin_surface":-0.9,"package_provenance_drift":0.0},"pending_signals":false},{"name":"OpenUI","repo":"thesysdev/openui","display_repo":"","url":"https://github.com/thesysdev/openui","rank":26,"previous_rank":26,"rank_delta":0,"stars":7945,"stars_fmt":"7.9k","forks":580,"forks_fmt":"580","last_push":"2026-07-10","days_ago":1,"weekly_commits":56,"commits_low_confidence":false,"score":83.2,"description":"The Open Standard for Generative UI","language":"TypeScript","open_issues":49,"category":"UI & App Builders","category_rank":2,"npm_package":"@openuidev/react-ui","crate_package":"","pypi_package":"","weekly_downloads":11350,"dl_source":"npm","hn_mentions_30d":null,"has_provenance":true,"npm_provenance":true,"pypi_provenance":null,"signed_commits_ratio":1.0,"scorecard_score":5.2,"scorecard_checks":{"Binary-Artifacts":10,"Branch-Protection":5,"CI-Tests":10,"CII-Best-Practices":0,"Code-Review":10,"Contributors":10,"Dangerous-Workflow":10,"Dependency-Update-Tool":0,"Fuzzing":0,"License":10,"Maintained":10,"Packaging":10,"Pinned-Dependencies":0,"SAST":0,"Security-Policy":4,"Signed-Releases":-1,"Token-Permissions":0,"Vulnerabilities":0},"scorecard_scanned_at":"2026-07-10T08:31:50Z","slug":"openui","source_note":"","public_actions":null,"mcp_server_support":{"status":"none","confidence":null,"evidence":[]},"external_service_dependencies":{"providers":["OpenAI"],"requires_api_keys":true,"confidence":"high","evidence":["README/docs mention OpenAI","Found OpenAI dependency 'openai' in docs/package.json","Found OpenAI credential/config marker 'OPENAI_API_KEY'"]},"tool_plugin_surface":{"plugin_system":"declared","tool_tags":["code"],"confidence":"high","evidence":["README/docs mention a declared plugin/integration surface","README/docs mention code capabilities"]},"package_provenance_drift":{"status":"match","confidence":"high","summary":"Published package metadata matches the tracked repo","evidence":["npm package '@openuidev/react-ui' points to the tracked repo"]},"evidence_grade":"A","coverage_grade":"B","signal_coverage":0.6,"signal_types":3,"listing_status":"listed","display_listing_status":"listed","display_status_label":"Listed","has_warning":false,"warning_reasons":[],"license_spdx":"MIT","license_type":"open","license_override":"","trust_score":85.3,"trust_score_v2":85.3,"rank_v2":26,"rank_v2_delta":10,"trust_v2_adjustment":1.7,"trust_confidence":1.0,"trust_breakdown":{"safety":19.0,"identity":18.0,"transparency":12.9,"maintenance":18.9,"adoption":14.8},"trust_v2_breakdown":{"mcp":0.0,"external_dependencies":-1.0,"tool_plugin_surface":-0.6,"package_provenance_drift":4.0},"pending_signals":false},{"name":"Mistral Vibe","repo":"mistralai/mistral-vibe","display_repo":"","url":"https://github.com/mistralai/mistral-vibe","rank":27,"previous_rank":27,"rank_delta":0,"stars":4660,"stars_fmt":"4.7k","forks":585,"forks_fmt":"585","last_push":"2026-07-10","days_ago":1,"weekly_commits":12,"commits_low_confidence":false,"score":73.8,"description":"Minimal CLI coding agent by Mistral","language":"Python","open_issues":178,"category":"Coding Agents","category_rank":4,"npm_package":"","crate_package":"","pypi_package":"mistral-vibe","weekly_downloads":182262,"dl_source":"pypi","hn_mentions_30d":null,"has_provenance":true,"npm_provenance":null,"pypi_provenance":true,"signed_commits_ratio":0.671,"scorecard_score":5.7,"scorecard_checks":{"Binary-Artifacts":10,"Branch-Protection":1,"CI-Tests":10,"CII-Best-Practices":0,"Code-Review":10,"Contributors":3,"Dangerous-Workflow":10,"Dependency-Update-Tool":0,"Fuzzing":0,"License":10,"Maintained":10,"Packaging":10,"Pinned-Dependencies":10,"SAST":0,"Security-Policy":0,"Signed-Releases":0,"Token-Permissions":8,"Vulnerabilities":7},"scorecard_scanned_at":"2026-07-10T08:44:53Z","slug":"mistral-vibe","source_note":"","public_actions":null,"mcp_server_support":{"status":"implemented","confidence":"high","evidence":["README/docs explicitly mention an MCP server","Found MCP-related server test path: tests/snapshots/__snapshots__/test_ui_snapshot_mcp_command/test_snapshot_mcp_server_arg.svg"]},"external_service_dependencies":{"providers":[],"requires_api_keys":true,"confidence":"low","evidence":[]},"tool_plugin_surface":{"plugin_system":"extension-based","tool_tags":["code","shell"],"confidence":"high","evidence":["README/docs mention a extension-based plugin/integration surface","Found shell dependency 'pty' in pyproject.toml","README/docs also mention shell capabilities","Found code dependency 'gitpython' in pyproject.toml","README/docs also mention code capabilities"]},"package_provenance_drift":{"status":"match","confidence":"high","summary":"Published package metadata matches the tracked repo","evidence":["pypi package 'mistral-vibe' points to the tracked repo"]},"evidence_grade":"A","coverage_grade":"B","signal_coverage":0.6,"signal_types":3,"listing_status":"listed","display_listing_status":"listed","display_status_label":"Listed","has_warning":false,"warning_reasons":[],"license_spdx":"Apache-2.0","license_type":"open","license_override":"","trust_score":84.9,"trust_score_v2":84.9,"rank_v2":27,"rank_v2_delta":13,"trust_v2_adjustment":3.4,"trust_confidence":1.0,"trust_breakdown":{"safety":18.0,"identity":18.0,"transparency":13.3,"maintenance":16.4,"adoption":15.8},"trust_v2_breakdown":{"mcp":2.0,"external_dependencies":-1.0,"tool_plugin_surface":-1.2,"package_provenance_drift":4.0},"pending_signals":false},{"name":"Unstructured","repo":"Unstructured-IO/unstructured","display_repo":"","url":"https://github.com/Unstructured-IO/unstructured","rank":28,"previous_rank":29,"rank_delta":1,"stars":15101,"stars_fmt":"15.1k","forks":1267,"forks_fmt":"1.3k","last_push":"2026-07-11","days_ago":0,"weekly_commits":4,"commits_low_confidence":true,"score":73.2,"description":"Convert documents to structured data effortlessly. Unstructured is open-source ETL solution for transforming complex doc","language":"HTML","open_issues":184,"category":"Research & Data","category_rank":3,"npm_package":"","crate_package":"","pypi_package":"unstructured","weekly_downloads":1154050,"dl_source":"pypi","hn_mentions_30d":18,"has_provenance":true,"npm_provenance":null,"pypi_provenance":true,"signed_commits_ratio":1.0,"scorecard_score":6.7,"scorecard_checks":{"Binary-Artifacts":10,"Branch-Protection":4,"CI-Tests":10,"CII-Best-Practices":0,"Code-Review":10,"Contributors":10,"Dangerous-Workflow":10,"Dependency-Update-Tool":10,"Fuzzing":0,"License":10,"Maintained":10,"Packaging":10,"Pinned-Dependencies":0,"SAST":10,"Security-Policy":10,"Signed-Releases":-1,"Token-Permissions":0,"Vulnerabilities":0},"scorecard_scanned_at":"2026-07-11T01:32:38Z","slug":"unstructured","source_note":"","public_actions":null,"mcp_server_support":{"status":"none","confidence":null,"evidence":[]},"external_service_dependencies":{"providers":["Amazon Bedrock","OpenAI","Pinecone","Postgres","Qdrant","Weaviate"],"requires_api_keys":false,"confidence":"high","evidence":["Found OpenAI dependency 'openai' in pyproject.toml","Found Amazon Bedrock dependency 'bedrock' in pyproject.toml","Found Pinecone dependency 'pinecone' in pyproject.toml","Found Qdrant dependency 'qdrant' in pyproject.toml","Found Weaviate dependency 'weaviate' in pyproject.toml","Found Postgres dependency 'postgres' in pyproject.toml"]},"tool_plugin_surface":{"plugin_system":"declared","tool_tags":["code","database","shell"],"confidence":"high","evidence":["README/docs mention a declared plugin/integration surface","Found shell dependency 'pty' in pyproject.toml","Found database dependency 'postgres' in pyproject.toml","README/docs mention code capabilities"]},"package_provenance_drift":{"status":"match","confidence":"high","summary":"Published package metadata matches the tracked repo","evidence":["pypi package 'unstructured' points to the tracked repo"]},"evidence_grade":"A","coverage_grade":"A","signal_coverage":0.8,"signal_types":4,"listing_status":"listed","display_listing_status":"listed","display_status_label":"Listed","has_warning":false,"warning_reasons":[],"license_spdx":"Apache-2.0","license_type":"open","license_override":"","trust_score":84.0,"trust_score_v2":84.0,"rank_v2":28,"rank_v2_delta":2,"trust_v2_adjustment":-0.6,"trust_confidence":1.0,"trust_breakdown":{"safety":20.9,"identity":18.0,"transparency":14.2,"maintenance":13.4,"adoption":18.1},"trust_v2_breakdown":{"mcp":0.0,"external_dependencies":-2.5,"tool_plugin_surface":-1.2,"package_provenance_drift":4.0},"pending_signals":false},{"name":"Guardrails AI","repo":"guardrails-ai/guardrails","display_repo":"","url":"https://github.com/guardrails-ai/guardrails","rank":29,"previous_rank":30,"rank_delta":1,"stars":7124,"stars_fmt":"7.1k","forks":647,"forks_fmt":"647","last_push":"2026-07-10","days_ago":1,"weekly_commits":27,"commits_low_confidence":false,"score":79.3,"description":"Adding guardrails to large language models.","language":"Python","open_issues":28,"category":"Security & Guardrails","category_rank":1,"npm_package":"","crate_package":"","pypi_package":"guardrails-ai","weekly_downloads":41090,"dl_source":"pypi","hn_mentions_30d":34,"has_provenance":true,"npm_provenance":null,"pypi_provenance":true,"signed_commits_ratio":1.0,"scorecard_score":6.5,"scorecard_checks":{"Binary-Artifacts":10,"Branch-Protection":5,"CI-Tests":10,"CII-Best-Practices":0,"Code-Review":10,"Contributors":10,"Dangerous-Workflow":10,"Dependency-Update-Tool":10,"Fuzzing":0,"License":10,"Maintained":10,"Packaging":10,"Pinned-Dependencies":4,"SAST":0,"Security-Policy":0,"Signed-Releases":-1,"Token-Permissions":0,"Vulnerabilities":7},"scorecard_scanned_at":"2026-07-08T08:44:41Z","slug":"guardrails-ai","source_note":"","public_actions":null,"mcp_server_support":{"status":"none","confidence":null,"evidence":[]},"external_service_dependencies":{"providers":["Anthropic","OpenAI"],"requires_api_keys":true,"confidence":"high","evidence":["README/docs mention OpenAI","Found OpenAI dependency 'openai' in pyproject.toml","Found OpenAI credential/config marker 'OPENAI_API_KEY'","Found Anthropic dependency 'anthropic' in pyproject.toml"]},"tool_plugin_surface":{"plugin_system":"none","tool_tags":["code"],"confidence":"medium","evidence":["README/docs mention code capabilities"]},"package_provenance_drift":{"status":"unknown","confidence":"low","summary":"Package source metadata is missing or inconclusive","evidence":["pypi package 'guardrails-ai' has a non-GitHub or unparseable source URL"]},"evidence_grade":"A","coverage_grade":"A","signal_coverage":0.8,"signal_types":4,"listing_status":"listed","display_listing_status":"listed","display_status_label":"Listed","has_warning":false,"warning_reasons":[],"license_spdx":"Apache-2.0","license_type":"open","license_override":"","trust_score":83.9,"trust_score_v2":83.9,"rank_v2":29,"rank_v2_delta":-2,"trust_v2_adjustment":-1.8,"trust_confidence":1.0,"trust_breakdown":{"safety":20.6,"identity":18.0,"transparency":14.0,"maintenance":17.7,"adoption":15.4},"trust_v2_breakdown":{"mcp":0.0,"external_dependencies":-1.5,"tool_plugin_surface":-0.3,"package_provenance_drift":0.0},"pending_signals":false},{"name":"Threadplane","repo":"cacheplane/angular-agent-framework","display_repo":"","url":"https://github.com/cacheplane/angular-agent-framework","rank":30,"previous_rank":31,"rank_delta":1,"stars":102,"stars_fmt":"102","forks":11,"forks_fmt":"11","last_push":"2026-07-09","days_ago":2,"weekly_commits":183,"commits_low_confidence":false,"score":67.0,"description":"Angular SDK for Building Agentic Apps + Generative UI","language":"TypeScript","open_issues":0,"category":"Agent Frameworks","category_rank":7,"npm_package":"@threadplane/chat","crate_package":"","pypi_package":"threadplane-middleware","weekly_downloads":667,"dl_source":"npm+pypi","hn_mentions_30d":null,"has_provenance":true,"npm_provenance":true,"pypi_provenance":false,"signed_commits_ratio":0.99,"scorecard_score":7.8,"scorecard_checks":{"Binary-Artifacts":10,"Branch-Protection":3,"CI-Tests":10,"CII-Best-Practices":5,"Code-Review":9,"Contributors":3,"Dangerous-Workflow":10,"Dependency-Update-Tool":10,"Fuzzing":0,"License":10,"Maintained":10,"Packaging":10,"Pinned-Dependencies":7,"SAST":10,"Security-Policy":10,"Signed-Releases":10,"Token-Permissions":10,"Vulnerabilities":0},"scorecard_scanned_at":"2026-07-10T07:41:33Z","slug":"threadplane","source_note":"","public_actions":null,"mcp_server_support":{"status":"none","confidence":null,"evidence":[]},"external_service_dependencies":{"providers":["Anthropic","Postgres","Redis"],"requires_api_keys":false,"confidence":"high","evidence":["Found Anthropic dependency 'anthropic' in package.json","Found Postgres dependency 'postgres' in package.json","Found Redis dependency 'redis' in package.json"]},"tool_plugin_surface":{"plugin_system":"none","tool_tags":["browser","database"],"confidence":"high","evidence":["Found browser dependency 'playwright' in package.json","Found database dependency 'postgres' in package.json"]},"package_provenance_drift":{"status":"partial","confidence":"medium","summary":"Some package metadata matches; some source metadata is missing","evidence":["npm package '@threadplane/chat' points to the tracked repo","pypi package 'threadplane-middleware' has a non-GitHub or unparseable source URL"]},"evidence_grade":"A","coverage_grade":"B","signal_coverage":0.6,"signal_types":3,"listing_status":"listed","display_listing_status":"listed","display_status_label":"Listed","has_warning":false,"warning_reasons":[],"license_spdx":"MIT","license_type":"open","license_override":"","trust_score":83.8,"trust_score_v2":83.8,"rank_v2":30,"rank_v2_delta":4,"trust_v2_adjustment":0.0,"trust_confidence":1.0,"trust_breakdown":{"safety":22.2,"identity":18.0,"transparency":15.1,"maintenance":19.9,"adoption":8.6},"trust_v2_breakdown":{"mcp":0.0,"external_dependencies":-1.0,"tool_plugin_surface":-0.6,"package_provenance_drift":2.0},"pending_signals":false},{"name":"OpenAI Agents SDK","repo":"openai/openai-agents-python","display_repo":"","url":"https://github.com/openai/openai-agents-python","rank":31,"previous_rank":28,"rank_delta":-3,"stars":27802,"stars_fmt":"27.8k","forks":4294,"forks_fmt":"4.3k","last_push":"2026-07-11","days_ago":0,"weekly_commits":113,"commits_low_confidence":false,"score":93.6,"description":"A lightweight, powerful framework for multi-agent workflows","language":"Python","open_issues":27,"category":"Agent Frameworks","category_rank":8,"npm_package":"","crate_package":"","pypi_package":"openai-agents","weekly_downloads":7303875,"dl_source":"pypi","hn_mentions_30d":52,"has_provenance":true,"npm_provenance":null,"pypi_provenance":true,"signed_commits_ratio":null,"scorecard_score":5.7,"scorecard_checks":{"Binary-Artifacts":10,"Branch-Protection":3,"CI-Tests":10,"CII-Best-Practices":0,"Code-Review":0,"Contributors":10,"Dangerous-Workflow":10,"Dependency-Update-Tool":10,"Fuzzing":0,"License":10,"Maintained":10,"Packaging":10,"Pinned-Dependencies":7,"SAST":0,"Security-Policy":10,"Signed-Releases":-1,"Token-Permissions":0,"Vulnerabilities":0},"scorecard_scanned_at":"2026-07-11T01:26:05Z","slug":"openai-agents-sdk","source_note":"","public_actions":null,"mcp_server_support":{"status":"declared","confidence":"medium","evidence":["Found MCP-related server path: examples/mcp/manager_example/mcp_server.py","Found MCP-related server path: examples/mcp/prompt_server/server.py","Found MCP-related server docs path: docs/ref/mcp/server.md","Found MCP-related server test path: tests/mcp/test_mcp_server_manager.py"]},"external_service_dependencies":{"providers":["Amazon Bedrock","E2B","OpenAI","Postgres","Redis"],"requires_api_keys":true,"confidence":"high","evidence":["README/docs mention OpenAI","Found OpenAI dependency 'openai' in pyproject.toml","Found OpenAI credential/config marker 'OPENAI_API_KEY'","Found Amazon Bedrock dependency 'boto3' in pyproject.toml","Found E2B dependency 'e2b' in pyproject.toml","Found Postgres dependency 'pg' in pyproject.toml"]},"tool_plugin_surface":{"plugin_system":"extension-based","tool_tags":["browser","code","database","filesystem"],"confidence":"high","evidence":["Found extension-based path: docs/ref/extensions/experimental/codex/codex.md","Found browser dependency 'playwright' in pyproject.toml","README/docs mention filesystem capabilities","README/docs mention database capabilities","README/docs mention code capabilities"]},"package_provenance_drift":{"status":"match","confidence":"high","summary":"Published package metadata matches the tracked repo","evidence":["pypi package 'openai-agents' points to the tracked repo"]},"evidence_grade":"A","coverage_grade":"A","signal_coverage":0.8,"signal_types":4,"listing_status":"listed","display_listing_status":"listed","display_status_label":"Listed","has_warning":false,"warning_reasons":[],"license_spdx":"MIT","license_type":"open","license_override":"","trust_score":83.8,"trust_score_v2":83.8,"rank_v2":31,"rank_v2_delta":-5,"trust_v2_adjustment":-1.9,"trust_confidence":1.0,"trust_breakdown":{"safety":14.6,"identity":18.0,"transparency":13.3,"maintenance":20.0,"adoption":19.8},"trust_v2_breakdown":{"mcp":0.0,"external_dependencies":-3.0,"tool_plugin_surface":-1.8,"package_provenance_drift":4.0},"pending_signals":false},{"name":"Pipecat","repo":"pipecat-ai/pipecat","display_repo":"","url":"https://github.com/pipecat-ai/pipecat","rank":32,"previous_rank":32,"rank_delta":0,"stars":13340,"stars_fmt":"13.3k","forks":2293,"forks_fmt":"2.3k","last_push":"2026-07-11","days_ago":0,"weekly_commits":585,"commits_low_confidence":false,"score":90.4,"description":"Open Source framework for voice and multimodal conversational AI","language":"Python","open_issues":90,"category":"Voice & Conversational","category_rank":2,"npm_package":"","crate_package":"","pypi_package":"pipecat-ai","weekly_downloads":265856,"dl_source":"pypi","hn_mentions_30d":9,"has_provenance":true,"npm_provenance":null,"pypi_provenance":true,"signed_commits_ratio":null,"scorecard_score":6.4,"scorecard_checks":{"Binary-Artifacts":10,"Branch-Protection":6,"CI-Tests":10,"CII-Best-Practices":0,"Code-Review":10,"Contributors":10,"Dangerous-Workflow":10,"Dependency-Update-Tool":0,"Fuzzing":0,"License":10,"Maintained":10,"Packaging":10,"Pinned-Dependencies":0,"SAST":0,"Security-Policy":10,"Signed-Releases":-1,"Token-Permissions":0,"Vulnerabilities":10},"scorecard_scanned_at":"2026-07-10T08:04:26Z","slug":"pipecat","source_note":"","public_actions":null,"mcp_server_support":{"status":"none","confidence":null,"evidence":[]},"external_service_dependencies":{"providers":["Amazon Bedrock","Anthropic","Google Gemini","OpenAI","Postgres","Redis"],"requires_api_keys":false,"confidence":"high","evidence":["README/docs mention OpenAI","Found OpenAI dependency 'openai' in pyproject.toml","README/docs mention Anthropic","Found Anthropic dependency 'anthropic' in pyproject.toml","README/docs mention Google Gemini","Found Amazon Bedrock dependency 'bedrock' in pyproject.toml"]},"tool_plugin_surface":{"plugin_system":"marketplace","tool_tags":["code","database","shell"],"confidence":"high","evidence":["README/docs mention a marketplace plugin/integration surface","README/docs mention shell capabilities","Found database dependency 'pg' in pyproject.toml","README/docs mention code capabilities"]},"package_provenance_drift":{"status":"match","confidence":"high","summary":"Published package metadata matches the tracked repo","evidence":["pypi package 'pipecat-ai' points to the tracked repo"]},"evidence_grade":"A","coverage_grade":"A","signal_coverage":0.8,"signal_types":4,"listing_status":"listed","display_listing_status":"listed","display_status_label":"Listed","has_warning":false,"warning_reasons":[],"license_spdx":"BSD-2-Clause","license_type":"open","license_override":"","trust_score":83.2,"trust_score_v2":83.2,"rank_v2":32,"rank_v2_delta":-1,"trust_v2_adjustment":-1.3,"trust_confidence":1.0,"trust_breakdown":{"safety":15.5,"identity":18.0,"transparency":13.9,"maintenance":20.0,"adoption":17.1},"trust_v2_breakdown":{"mcp":0.0,"external_dependencies":-2.5,"tool_plugin_surface":-1.9,"package_provenance_drift":4.0},"pending_signals":false},{"name":"Graphiti","repo":"getzep/graphiti","display_repo":"","url":"https://github.com/getzep/graphiti","rank":33,"previous_rank":34,"rank_delta":1,"stars":28593,"stars_fmt":"28.6k","forks":2881,"forks_fmt":"2.9k","last_push":"2026-07-09","days_ago":2,"weekly_commits":16,"commits_low_confidence":false,"score":83.0,"description":"Build Real-Time Knowledge Graphs for AI Agents","language":"Python","open_issues":256,"category":"Memory & Knowledge","category_rank":4,"npm_package":"","crate_package":"","pypi_package":"graphiti-core","weekly_downloads":298963,"dl_source":"pypi","hn_mentions_30d":null,"has_provenance":true,"npm_provenance":null,"pypi_provenance":true,"signed_commits_ratio":0.81,"scorecard_score":5.1,"scorecard_checks":{"Binary-Artifacts":10,"Branch-Protection":5,"CI-Tests":10,"CII-Best-Practices":0,"Code-Review":0,"Contributors":3,"Dangerous-Workflow":0,"Dependency-Update-Tool":10,"Fuzzing":0,"License":10,"Maintained":10,"Packaging":10,"Pinned-Dependencies":8,"SAST":10,"Security-Policy":4,"Signed-Releases":-1,"Token-Permissions":0,"Vulnerabilities":2},"scorecard_scanned_at":"2026-07-10T08:54:19Z","slug":"graphiti","source_note":"","public_actions":null,"mcp_server_support":{"status":"implemented","confidence":"high","evidence":["README/docs explicitly mention an MCP server","Found MCP-related server path: .github/workflows/mcp-server-tests.yml","Found MCP-related server path: .github/workflows/release-mcp-server.yml","Found MCP-related server docs path: mcp_server/docs/cursor_rules.md"]},"external_service_dependencies":{"providers":["Amazon Bedrock","Anthropic","Azure OpenAI","Google Gemini","OpenAI","Postgres","Redis"],"requires_api_keys":true,"confidence":"high","evidence":["README/docs mention OpenAI","Found OpenAI dependency 'openai' in pyproject.toml","Found OpenAI credential/config marker 'OPENAI_API_KEY'","README/docs mention Anthropic","Found Anthropic dependency 'anthropic' in pyproject.toml","README/docs mention Google Gemini"]},"tool_plugin_surface":{"plugin_system":"declared","tool_tags":["code","database","search"],"confidence":"high","evidence":["README/docs mention a declared plugin/integration surface","README/docs mention search capabilities","Found database dependency 'pg' in pyproject.toml","README/docs mention code capabilities"]},"package_provenance_drift":{"status":"match","confidence":"high","summary":"Published package metadata matches the tracked repo","evidence":["pypi package 'graphiti-core' points to the tracked repo"]},"evidence_grade":"A","coverage_grade":"B","signal_coverage":0.6,"signal_types":3,"listing_status":"listed","display_listing_status":"listed","display_status_label":"Listed","has_warning":false,"warning_reasons":[],"license_spdx":"Apache-2.0","license_type":"open","license_override":"","trust_score":83.2,"trust_score_v2":83.2,"rank_v2":33,"rank_v2_delta":4,"trust_v2_adjustment":-0.3,"trust_confidence":1.0,"trust_breakdown":{"safety":17.9,"identity":18.0,"transparency":12.8,"maintenance":16.8,"adoption":18.0},"trust_v2_breakdown":{"mcp":2.0,"external_dependencies":-4.0,"tool_plugin_surface":-1.2,"package_provenance_drift":4.0},"pending_signals":false},{"name":"Open WebUI","repo":"open-webui/open-webui","display_repo":"","url":"https://github.com/open-webui/open-webui","rank":34,"previous_rank":33,"rank_delta":-1,"stars":145013,"stars_fmt":"145.0k","forks":20998,"forks_fmt":"21.0k","last_push":"2026-07-10","days_ago":1,"weekly_commits":390,"commits_low_confidence":false,"score":100.0,"description":"User-friendly AI Interface (Supports Ollama, OpenAI API, ...)","language":"Python","open_issues":235,"category":"UI & App Builders","category_rank":3,"npm_package":"open-webui","crate_package":"","pypi_package":"open-webui","weekly_downloads":349921,"dl_source":"npm+pypi","hn_mentions_30d":0,"has_provenance":true,"npm_provenance":false,"pypi_provenance":true,"signed_commits_ratio":0.48,"scorecard_score":6.1,"scorecard_checks":{"Binary-Artifacts":9,"Branch-Protection":3,"CI-Tests":3,"CII-Best-Practices":0,"Code-Review":8,"Contributors":10,"Dangerous-Workflow":10,"Dependency-Update-Tool":10,"Fuzzing":0,"License":9,"Maintained":10,"Packaging":10,"Pinned-Dependencies":0,"SAST":8,"Security-Policy":10,"Signed-Releases":-1,"Token-Permissions":0,"Vulnerabilities":0},"scorecard_scanned_at":"2026-07-11T04:08:33Z","slug":"open-webui","source_note":"","public_actions":null,"mcp_server_support":{"status":"none","confidence":null,"evidence":[]},"external_service_dependencies":{"providers":["Amazon Bedrock","Anthropic","Brave Search","Google Gemini","OpenAI","Pinecone","Postgres","Qdrant","Redis","SerpAPI","Tavily","Weaviate"],"requires_api_keys":true,"confidence":"high","evidence":["README/docs mention OpenAI","Found OpenAI dependency 'openai' in pyproject.toml","Found OpenAI credential/config marker 'OPENAI_API_KEY'","Found Anthropic dependency 'anthropic' in pyproject.toml","README/docs mention Google Gemini","Found Amazon Bedrock dependency 'boto3' in pyproject.toml"]},"tool_plugin_surface":{"plugin_system":"declared","tool_tags":["browser","code","database","search","shell"],"confidence":"high","evidence":["README/docs mention a declared plugin/integration surface","Found browser dependency 'playwright' in pyproject.toml","README/docs mention shell capabilities","README/docs mention search capabilities","README/docs mention database capabilities","README/docs mention code capabilities"]},"package_provenance_drift":{"status":"unknown","confidence":"low","summary":"Package source metadata is missing or inconclusive","evidence":["npm package 'open-webui' does not expose a source repo URL","pypi package 'open-webui' has a non-GitHub or unparseable source URL"]},"evidence_grade":"A","coverage_grade":"A","signal_coverage":0.8,"signal_types":4,"listing_status":"listed","display_listing_status":"listed","display_status_label":"Listed","has_warning":false,"warning_reasons":[],"license_spdx":"NOASSERTION","license_type":"open","license_override":"open","trust_score":83.1,"trust_score_v2":83.1,"rank_v2":34,"rank_v2_delta":-19,"trust_v2_adjustment":-5.8,"trust_confidence":1.0,"trust_breakdown":{"safety":17.5,"identity":18.0,"transparency":13.7,"maintenance":19.9,"adoption":19.8},"trust_v2_breakdown":{"mcp":0.0,"external_dependencies":-4.0,"tool_plugin_surface":-1.8,"package_provenance_drift":0.0},"pending_signals":false},{"name":"LightRAG","repo":"HKUDS/LightRAG","display_repo":"","url":"https://github.com/HKUDS/LightRAG","rank":35,"previous_rank":35,"rank_delta":0,"stars":37547,"stars_fmt":"37.5k","forks":5292,"forks_fmt":"5.3k","last_push":"2026-07-10","days_ago":1,"weekly_commits":298,"commits_low_confidence":false,"score":94.7,"description":"[EMNLP2025] \"LightRAG: Simple and Fast Retrieval-Augmented Generation\"","language":"Python","open_issues":199,"category":"Memory & Knowledge","category_rank":5,"npm_package":"","crate_package":"","pypi_package":"lightrag-hku","weekly_downloads":63446,"dl_source":"pypi","hn_mentions_30d":8,"has_provenance":true,"npm_provenance":null,"pypi_provenance":true,"signed_commits_ratio":0.32,"scorecard_score":5.7,"scorecard_checks":{"Binary-Artifacts":10,"Branch-Protection":3,"CI-Tests":10,"CII-Best-Practices":0,"Code-Review":4,"Contributors":10,"Dangerous-Workflow":10,"Dependency-Update-Tool":10,"Fuzzing":0,"License":10,"Maintained":10,"Packaging":10,"Pinned-Dependencies":0,"SAST":0,"Security-Policy":10,"Signed-Releases":-1,"Token-Permissions":0,"Vulnerabilities":0},"scorecard_scanned_at":"2026-07-11T01:32:13Z","slug":"lightrag","source_note":"","public_actions":null,"mcp_server_support":{"status":"none","confidence":null,"evidence":[]},"external_service_dependencies":{"providers":["Amazon Bedrock","Anthropic","OpenAI","Postgres","Qdrant","Redis"],"requires_api_keys":true,"confidence":"high","evidence":["README/docs mention OpenAI","Found OpenAI dependency 'openai' in pyproject.toml","Found OpenAI credential/config marker 'OPENAI_API_KEY'","Found Anthropic dependency 'anthropic' in pyproject.toml","Found Amazon Bedrock dependency 'boto3' in pyproject.toml","README/docs mention Qdrant"]},"tool_plugin_surface":{"plugin_system":"extension-based","tool_tags":["code","database","search"],"confidence":"high","evidence":["README/docs mention a extension-based plugin/integration surface","README/docs mention search capabilities","README/docs mention database capabilities","README/docs mention code capabilities"]},"package_provenance_drift":{"status":"match","confidence":"high","summary":"Published package metadata matches the tracked repo","evidence":["pypi package 'lightrag-hku' points to the tracked repo"]},"evidence_grade":"A","coverage_grade":"A","signal_coverage":0.8,"signal_types":4,"listing_status":"listed","display_listing_status":"listed","display_status_label":"Listed","has_warning":false,"warning_reasons":[],"license_spdx":"MIT","license_type":"open","license_override":"","trust_score":82.8,"trust_score_v2":82.8,"rank_v2":35,"rank_v2_delta":-6,"trust_v2_adjustment":-2.0,"trust_confidence":1.0,"trust_breakdown":{"safety":16.2,"identity":18.0,"transparency":13.3,"maintenance":19.9,"adoption":17.4},"trust_v2_breakdown":{"mcp":0.0,"external_dependencies":-3.5,"tool_plugin_surface":-1.5,"package_provenance_drift":4.0},"pending_signals":false},{"name":"Hindsight","repo":"vectorize-io/hindsight","display_repo":"","url":"https://github.com/vectorize-io/hindsight","rank":36,"previous_rank":36,"rank_delta":0,"stars":18224,"stars_fmt":"18.2k","forks":1114,"forks_fmt":"1.1k","last_push":"2026-07-11","days_ago":0,"weekly_commits":316,"commits_low_confidence":false,"score":89.8,"description":"Hindsight: Agent Memory That  Learns","language":"Python","open_issues":63,"category":"Memory & Knowledge","category_rank":6,"npm_package":"","crate_package":"","pypi_package":"hindsight-api-slim","weekly_downloads":16939,"dl_source":"pypi","hn_mentions_30d":1,"has_provenance":true,"npm_provenance":null,"pypi_provenance":true,"signed_commits_ratio":0.92,"scorecard_score":5.3,"scorecard_checks":{"Binary-Artifacts":9,"Branch-Protection":3,"CI-Tests":8,"CII-Best-Practices":0,"Code-Review":5,"Contributors":10,"Dangerous-Workflow":10,"Dependency-Update-Tool":10,"Fuzzing":0,"License":10,"Maintained":10,"Packaging":10,"Pinned-Dependencies":1,"SAST":0,"Security-Policy":10,"Signed-Releases":0,"Token-Permissions":0,"Vulnerabilities":0},"scorecard_scanned_at":"2026-07-10T16:19:15Z","slug":"hindsight","source_note":"","public_actions":null,"mcp_server_support":{"status":"declared","confidence":"medium","evidence":["Found MCP-related server path: hindsight-docs/guides/2026-04-16-guide-run-hindsight-as-a-local-mcp-server.md","Found MCP-related server path: hindsight-docs/static/img/blog/guide-run-hindsight-as-a-local-mcp-server.png","Found MCP-related server test path: hindsight-api-slim/tests/test_mcp_server_version.py","Found MCP-related server docs path: hindsight-docs/docs/developer/mcp-server.md"]},"external_service_dependencies":{"providers":["Anthropic","Google Gemini","OpenAI","Postgres"],"requires_api_keys":true,"confidence":"high","evidence":["README/docs mention OpenAI","Found OpenAI credential/config marker 'OPENAI_API_KEY'","README/docs mention Anthropic","README/docs mention Google Gemini","README/docs mention Postgres"]},"tool_plugin_surface":{"plugin_system":"declared","tool_tags":["code","search"],"confidence":"high","evidence":["Found declared path: .claude-plugin/marketplace.json","README/docs mention search capabilities","README/docs mention code capabilities"]},"package_provenance_drift":{"status":"unknown","confidence":"low","summary":"Package source metadata is missing or inconclusive","evidence":["pypi package 'hindsight-api-slim' has a non-GitHub or unparseable source URL"]},"evidence_grade":"A","coverage_grade":"A","signal_coverage":0.8,"signal_types":4,"listing_status":"listed","display_listing_status":"listed","display_status_label":"Listed","has_warning":false,"warning_reasons":[],"license_spdx":"MIT","license_type":"open","license_override":"","trust_score":82.2,"trust_score_v2":82.2,"rank_v2":36,"rank_v2_delta":-8,"trust_v2_adjustment":-3.4,"trust_confidence":1.0,"trust_breakdown":{"safety":18.7,"identity":18.0,"transparency":13.0,"maintenance":20.0,"adoption":15.9},"trust_v2_breakdown":{"mcp":0.0,"external_dependencies":-2.5,"tool_plugin_surface":-0.9,"package_provenance_drift":0.0},"pending_signals":false},{"name":"AIPass","repo":"AIOSAI/AIPass","display_repo":"","url":"https://github.com/AIOSAI/AIPass","rank":37,"previous_rank":37,"rank_delta":0,"stars":237,"stars_fmt":"237","forks":33,"forks_fmt":"33","last_push":"2026-07-11","days_ago":0,"weekly_commits":173,"commits_low_confidence":false,"score":71.4,"description":"Persistent Agent Workspace — AI agents that remember, collaborate, and never start from zero.","language":"Python","open_issues":6,"category":"Multi-Agent Systems","category_rank":1,"npm_package":"","crate_package":"","pypi_package":"aipass","weekly_downloads":154,"dl_source":"pypi","hn_mentions_30d":null,"has_provenance":true,"npm_provenance":null,"pypi_provenance":true,"signed_commits_ratio":0.14,"scorecard_score":7.2,"scorecard_checks":{"Binary-Artifacts":10,"Branch-Protection":3,"CI-Tests":10,"CII-Best-Practices":5,"Code-Review":0,"Contributors":0,"Dangerous-Workflow":10,"Dependency-Update-Tool":10,"Fuzzing":0,"License":10,"Maintained":10,"Packaging":10,"Pinned-Dependencies":3,"SAST":10,"Security-Policy":10,"Signed-Releases":6,"Token-Permissions":10,"Vulnerabilities":8},"scorecard_scanned_at":"2026-07-11T04:09:49Z","slug":"aipass","source_note":"","public_actions":null,"mcp_server_support":{"status":"none","confidence":null,"evidence":[]},"external_service_dependencies":{"providers":["OpenAI"],"requires_api_keys":false,"confidence":"high","evidence":["Found OpenAI dependency 'openai' in pyproject.toml","README/docs also mention OpenAI"]},"tool_plugin_surface":{"plugin_system":"extension-based","tool_tags":[],"confidence":"medium","evidence":["Found extension-based path: src/aipass/ai_mail/apps/extensions/__init__.py"]},"package_provenance_drift":{"status":"match","confidence":"high","summary":"Published package metadata matches the tracked repo","evidence":["pypi package 'aipass' points to the tracked repo"]},"evidence_grade":"A","coverage_grade":"B","signal_coverage":0.6,"signal_types":3,"listing_status":"listed","display_listing_status":"listed","display_status_label":"Listed","has_warning":false,"warning_reasons":[],"license_spdx":"MIT","license_type":"open","license_override":"","trust_score":81.8,"trust_score_v2":81.8,"rank_v2":37,"rank_v2_delta":7,"trust_v2_adjustment":3.4,"trust_confidence":1.0,"trust_breakdown":{"safety":17.2,"identity":18.0,"transparency":14.6,"maintenance":20.0,"adoption":8.6},"trust_v2_breakdown":{"mcp":0.0,"external_dependencies":-0.0,"tool_plugin_surface":-0.6,"package_provenance_drift":4.0},"pending_signals":false},{"name":"oh-my-pi","repo":"can1357/oh-my-pi","display_repo":"","url":"https://github.com/can1357/oh-my-pi","rank":38,"previous_rank":38,"rank_delta":0,"stars":17206,"stars_fmt":"17.2k","forks":1544,"forks_fmt":"1.5k","last_push":"2026-07-11","days_ago":0,"weekly_commits":4551,"commits_low_confidence":false,"score":90.2,"description":"⌥  AI Coding agent for the terminal — hash-anchored edits, optimized tool harness, LSP, Python, browser, subagents, and ","language":"TypeScript","open_issues":492,"category":"Coding Agents","category_rank":5,"npm_package":"@oh-my-pi/pi-coding-agent","crate_package":"","pypi_package":"","weekly_downloads":62496,"dl_source":"npm","hn_mentions_30d":null,"has_provenance":true,"npm_provenance":true,"pypi_provenance":null,"signed_commits_ratio":0.58,"scorecard_score":4.0,"scorecard_checks":{"Binary-Artifacts":10,"Branch-Protection":0,"CI-Tests":8,"CII-Best-Practices":0,"Code-Review":4,"Contributors":10,"Dangerous-Workflow":10,"Dependency-Update-Tool":0,"Fuzzing":0,"License":10,"Maintained":10,"Packaging":-1,"Pinned-Dependencies":1,"SAST":0,"Security-Policy":10,"Signed-Releases":0,"Token-Permissions":0,"Vulnerabilities":0},"scorecard_scanned_at":"2026-07-10T18:36:34Z","slug":"oh-my-pi","source_note":"","public_actions":null,"mcp_server_support":{"status":"declared","confidence":"medium","evidence":["Found MCP-related server path: packages/mnemopi/src/mcp-server.ts","Found MCP-related server docs path: docs/mcp-server-tool-authoring.md","Found MCP-related server test path: packages/mnemopi/test/mcp-server.test.ts"]},"external_service_dependencies":{"providers":["Anthropic","Firecrawl","OpenAI","Tavily"],"requires_api_keys":true,"confidence":"high","evidence":["Found OpenAI dependency 'openai' in packages/ai/package.json","README/docs also mention OpenAI","Found Anthropic dependency 'anthropic' in packages/ai/package.json","README/docs also mention Anthropic","Found Tavily credential/config marker 'TAVILY_API_KEY'","README/docs also mention Tavily"]},"tool_plugin_surface":{"plugin_system":"marketplace","tool_tags":["browser"],"confidence":"high","evidence":["README/docs mention a marketplace plugin/integration surface","Found browser dependency 'puppeteer' in package.json","README/docs also mention browser capabilities"]},"package_provenance_drift":{"status":"match","confidence":"high","summary":"Published package metadata matches the tracked repo","evidence":["npm package '@oh-my-pi/pi-coding-agent' points to the tracked repo"]},"evidence_grade":"A","coverage_grade":"B","signal_coverage":0.6,"signal_types":3,"listing_status":"listed","display_listing_status":"listed","display_status_label":"Listed","has_warning":false,"warning_reasons":[],"license_spdx":"MIT","license_type":"open","license_override":"","trust_score":81.7,"trust_score_v2":81.7,"rank_v2":38,"rank_v2_delta":1,"trust_v2_adjustment":-0.2,"trust_confidence":1.0,"trust_breakdown":{"safety":15.4,"identity":18.0,"transparency":11.9,"maintenance":20.0,"adoption":16.6},"trust_v2_breakdown":{"mcp":0.0,"external_dependencies":-2.5,"tool_plugin_surface":-1.3,"package_provenance_drift":4.0},"pending_signals":false},{"name":"CrewAI","repo":"CrewAIInc/crewAI","display_repo":"","url":"https://github.com/crewAIInc/crewAI","rank":39,"previous_rank":39,"rank_delta":0,"stars":55325,"stars_fmt":"55.3k","forks":7794,"forks_fmt":"7.8k","last_push":"2026-07-11","days_ago":0,"weekly_commits":124,"commits_low_confidence":false,"score":96.6,"description":"Framework for orchestrating role-playing, autonomous AI agents. By fostering collaborative intelligence, CrewAI empowers","language":"Python","open_issues":86,"category":"Agent Frameworks","category_rank":9,"npm_package":"","crate_package":"","pypi_package":"crewai","weekly_downloads":2371417,"dl_source":"pypi","hn_mentions_30d":4,"has_provenance":false,"npm_provenance":null,"pypi_provenance":false,"signed_commits_ratio":1.0,"scorecard_score":7.8,"scorecard_checks":{"Binary-Artifacts":10,"Branch-Protection":8,"CI-Tests":10,"CII-Best-Practices":0,"Code-Review":10,"Contributors":10,"Dangerous-Workflow":10,"Dependency-Update-Tool":10,"Fuzzing":0,"License":10,"Maintained":10,"Packaging":-1,"Pinned-Dependencies":9,"SAST":10,"Security-Policy":10,"Signed-Releases":-1,"Token-Permissions":0,"Vulnerabilities":5},"scorecard_scanned_at":"2026-07-11T03:08:36Z","slug":"crewai","source_note":"","public_actions":null,"mcp_server_support":{"status":"implemented","confidence":"high","evidence":["README/docs explicitly mention an MCP server","Found MCP-related server docs path: docs/edge/ar/enterprise/guides/custom-mcp-server.mdx","Found MCP-related server docs path: docs/edge/ar/mcp/multiple-servers.mdx"]},"external_service_dependencies":{"providers":["Amazon Bedrock","Anthropic","OpenAI","Postgres","Qdrant","Redis"],"requires_api_keys":true,"confidence":"high","evidence":["README/docs mention OpenAI","Found OpenAI dependency 'openai' in pyproject.toml","Found OpenAI credential/config marker 'OPENAI_API_KEY'","Found Anthropic dependency 'anthropic' in lib/crewai/pyproject.toml","Found Amazon Bedrock dependency 'bedrock' in pyproject.toml","Found Qdrant dependency 'qdrant' in pyproject.toml"]},"tool_plugin_surface":{"plugin_system":"marketplace","tool_tags":["code","database","shell"],"confidence":"high","evidence":["README/docs mention a marketplace plugin/integration surface","Found shell dependency 'subprocess' in pyproject.toml","Found database dependency 'pg' in pyproject.toml","README/docs mention code capabilities"]},"package_provenance_drift":{"status":"match","confidence":"high","summary":"Published package metadata matches the tracked repo","evidence":["pypi package 'crewai' points to the tracked repo"]},"evidence_grade":"A","coverage_grade":"A","signal_coverage":0.8,"signal_types":4,"listing_status":"listed","display_listing_status":"listed","display_status_label":"Listed","has_warning":false,"warning_reasons":[],"license_spdx":"MIT","license_type":"open","license_override":"","trust_score":81.0,"trust_score_v2":81.0,"rank_v2":39,"rank_v2_delta":2,"trust_v2_adjustment":0.4,"trust_confidence":1.0,"trust_breakdown":{"safety":14.8,"identity":10.8,"transparency":15.1,"maintenance":20.0,"adoption":19.9},"trust_v2_breakdown":{"mcp":2.0,"external_dependencies":-3.5,"tool_plugin_surface":-1.9,"package_provenance_drift":4.0},"pending_signals":false},{"name":"Hermes Agent","repo":"nousresearch/hermes-agent","display_repo":"","url":"https://github.com/NousResearch/hermes-agent","rank":40,"previous_rank":40,"rank_delta":0,"stars":212857,"stars_fmt":"212.9k","forks":39317,"forks_fmt":"39.3k","last_push":"2026-07-11","days_ago":0,"weekly_commits":3810,"commits_low_confidence":false,"score":100.0,"description":"The agent that grows with you","language":"Python","open_issues":9170,"category":"Coding Agents","category_rank":6,"npm_package":"hermes-agent","crate_package":"","pypi_package":"hermes-agent","weekly_downloads":78325,"dl_source":"npm+pypi","hn_mentions_30d":null,"has_provenance":true,"npm_provenance":true,"pypi_provenance":true,"signed_commits_ratio":0.28,"scorecard_score":6.5,"scorecard_checks":{"Binary-Artifacts":10,"Branch-Protection":3,"CI-Tests":9,"CII-Best-Practices":0,"Code-Review":3,"Contributors":10,"Dangerous-Workflow":10,"Dependency-Update-Tool":10,"Fuzzing":0,"License":10,"Maintained":10,"Packaging":10,"Pinned-Dependencies":6,"SAST":10,"Security-Policy":10,"Signed-Releases":8,"Token-Permissions":0,"Vulnerabilities":0},"scorecard_scanned_at":"2026-07-11T01:33:01Z","slug":"hermes-agent","source_note":"","public_actions":null,"mcp_server_support":{"status":"implemented","confidence":"high","evidence":["README/docs explicitly mention an MCP server","Found MCP-related server path: agent/transports/hermes_tools_mcp_server.py","Found MCP-related server path: optional-skills/mcp/fastmcp/SKILL.md","Found MCP-related server test path: tests/agent/transports/test_hermes_tools_mcp_server.py"]},"external_service_dependencies":{"providers":["Amazon Bedrock","Anthropic","Firecrawl","OpenAI","Postgres"],"requires_api_keys":false,"confidence":"high","evidence":["README/docs mention OpenAI","Found OpenAI dependency 'openai' in pyproject.toml","README/docs mention Anthropic","Found Anthropic dependency 'anthropic' in pyproject.toml","Found Amazon Bedrock dependency 'bedrock' in pyproject.toml","README/docs mention Firecrawl"]},"tool_plugin_surface":{"plugin_system":"declared","tool_tags":["code","database","search","shell"],"confidence":"high","evidence":["README/docs mention a declared plugin/integration surface","README/docs mention shell capabilities","README/docs mention search capabilities","Found database dependency 'pg' in pyproject.toml","README/docs mention code capabilities"]},"package_provenance_drift":{"status":"warning","confidence":"high","summary":"1 package source mismatch detected","evidence":["npm package 'hermes-agent' points to wyrtensi/hermes-agent-npm, not nousresearch/hermes-agent","pypi package 'hermes-agent' has a non-GitHub or unparseable source URL"]},"evidence_grade":"A","coverage_grade":"B","signal_coverage":0.6,"signal_types":3,"listing_status":"listed","display_listing_status":"listed","display_status_label":"Listed","has_warning":false,"warning_reasons":[],"license_spdx":"MIT","license_type":"open","license_override":"","trust_score":81.0,"trust_score_v2":81.0,"rank_v2":40,"rank_v2_delta":-21,"trust_v2_adjustment":-7.3,"trust_confidence":1.0,"trust_breakdown":{"safety":17.0,"identity":18.0,"transparency":14.0,"maintenance":20.0,"adoption":19.3},"trust_v2_breakdown":{"mcp":2.0,"external_dependencies":-2.0,"tool_plugin_surface":-1.5,"package_provenance_drift":-5.0},"pending_signals":false},{"name":"CLI-Anything","repo":"HKUDS/CLI-Anything","display_repo":"","url":"https://github.com/HKUDS/CLI-Anything","rank":41,"previous_rank":41,"rank_delta":0,"stars":45107,"stars_fmt":"45.1k","forks":4216,"forks_fmt":"4.2k","last_push":"2026-07-09","days_ago":2,"weekly_commits":32,"commits_low_confidence":false,"score":88.6,"description":"\"CLI-Anything: Making ALL Software Agent-Native\" -- CLI-Hub: https://clianything.cc/","language":"Python","open_issues":43,"category":"Protocols & Tool Integration","category_rank":2,"npm_package":"","crate_package":"","pypi_package":"cli-anything-hub","weekly_downloads":2490,"dl_source":"pypi","hn_mentions_30d":null,"has_provenance":true,"npm_provenance":null,"pypi_provenance":true,"signed_commits_ratio":0.35,"scorecard_score":4.3,"scorecard_checks":{"Binary-Artifacts":9,"Branch-Protection":6,"CI-Tests":10,"CII-Best-Practices":0,"Code-Review":7,"Contributors":10,"Dangerous-Workflow":0,"Dependency-Update-Tool":0,"Fuzzing":0,"License":10,"Maintained":10,"Packaging":10,"Pinned-Dependencies":0,"SAST":0,"Security-Policy":4,"Signed-Releases":-1,"Token-Permissions":0,"Vulnerabilities":5},"scorecard_scanned_at":"2026-07-10T17:24:25Z","slug":"cli-anything","source_note":"","public_actions":null,"mcp_server_support":{"status":"none","confidence":null,"evidence":[]},"external_service_dependencies":{"providers":["OpenAI"],"requires_api_keys":false,"confidence":"medium","evidence":["README/docs mention OpenAI"]},"tool_plugin_surface":{"plugin_system":"marketplace","tool_tags":["browser","code","search","shell"],"confidence":"high","evidence":["README/docs mention a marketplace plugin/integration surface","README/docs mention browser capabilities","README/docs mention shell capabilities","README/docs mention search capabilities","README/docs mention code capabilities"]},"package_provenance_drift":{"status":"match","confidence":"high","summary":"Published package metadata matches the tracked repo","evidence":["pypi package 'cli-anything-hub' points to the tracked repo"]},"evidence_grade":"A","coverage_grade":"B","signal_coverage":0.6,"signal_types":3,"listing_status":"listed","display_listing_status":"listed","display_status_label":"Listed","has_warning":false,"warning_reasons":[],"license_spdx":"Apache-2.0","license_type":"open","license_override":"","trust_score":80.2,"trust_score_v2":80.2,"rank_v2":41,"rank_v2_delta":2,"trust_v2_adjustment":1.8,"trust_confidence":1.0,"trust_breakdown":{"safety":14.6,"identity":18.0,"transparency":12.2,"maintenance":17.9,"adoption":15.7},"trust_v2_breakdown":{"mcp":0.0,"external_dependencies":-0.0,"tool_plugin_surface":-2.2,"package_provenance_drift":4.0},"pending_signals":false},{"name":"vLLM","repo":"vllm-project/vllm","display_repo":"","url":"https://github.com/vllm-project/vllm","rank":42,"previous_rank":42,"rank_delta":0,"stars":85941,"stars_fmt":"85.9k","forks":19256,"forks_fmt":"19.3k","last_push":"2026-07-11","days_ago":0,"weekly_commits":1156,"commits_low_confidence":false,"score":99.5,"description":"A high-throughput and memory-efficient inference and serving engine for LLMs","language":"Python","open_issues":1961,"category":"LLM Gateways & Infra","category_rank":2,"npm_package":"","crate_package":"","pypi_package":"vllm","weekly_downloads":1159177,"dl_source":"pypi","hn_mentions_30d":1001,"has_provenance":false,"npm_provenance":null,"pypi_provenance":false,"signed_commits_ratio":1.0,"scorecard_score":6.7,"scorecard_checks":{"Binary-Artifacts":10,"Branch-Protection":8,"CI-Tests":10,"CII-Best-Practices":5,"Code-Review":10,"Contributors":10,"Dangerous-Workflow":10,"Dependency-Update-Tool":10,"Fuzzing":0,"License":10,"Maintained":10,"Packaging":-1,"Pinned-Dependencies":0,"SAST":1,"Security-Policy":10,"Signed-Releases":0,"Token-Permissions":9,"Vulnerabilities":0},"scorecard_scanned_at":"2026-07-10T17:22:37Z","slug":"vllm","source_note":"","public_actions":null,"mcp_server_support":{"status":"declared","confidence":"medium","evidence":["Found MCP-related server path: vllm/entrypoints/mcp/tool_server.py"]},"external_service_dependencies":{"providers":["Anthropic","OpenAI","Postgres"],"requires_api_keys":false,"confidence":"high","evidence":["README/docs mention OpenAI","README/docs mention Anthropic","Found Postgres dependency 'pg' in setup.py"]},"tool_plugin_surface":{"plugin_system":"declared","tool_tags":["code","database","search","shell"],"confidence":"high","evidence":["README/docs mention a declared plugin/integration surface","Found shell dependency 'pty' in setup.py","README/docs mention search capabilities","Found database dependency 'pg' in setup.py","README/docs mention code capabilities"]},"package_provenance_drift":{"status":"match","confidence":"high","summary":"Published package metadata matches the tracked repo","evidence":["pypi package 'vllm' points to the tracked repo"]},"evidence_grade":"B","coverage_grade":"A","signal_coverage":0.8,"signal_types":4,"listing_status":"listed","display_listing_status":"listed","display_status_label":"Listed","has_warning":false,"warning_reasons":[],"license_spdx":"Apache-2.0","license_type":"open","license_override":"","trust_score":79.8,"trust_score_v2":79.8,"rank_v2":42,"rank_v2_delta":3,"trust_v2_adjustment":1.5,"trust_confidence":1.0,"trust_breakdown":{"safety":13.4,"identity":10.8,"transparency":14.2,"maintenance":20.0,"adoption":19.9},"trust_v2_breakdown":{"mcp":0.0,"external_dependencies":-1.0,"tool_plugin_surface":-1.5,"package_provenance_drift":4.0},"pending_signals":false},{"name":"Skyvern","repo":"Skyvern-AI/skyvern","display_repo":"","url":"https://github.com/Skyvern-AI/skyvern","rank":43,"previous_rank":43,"rank_delta":0,"stars":22186,"stars_fmt":"22.2k","forks":2079,"forks_fmt":"2.1k","last_push":"2026-07-11","days_ago":0,"weekly_commits":630,"commits_low_confidence":false,"score":91.5,"description":"Automate browser based workflows with AI","language":"Python","open_issues":36,"category":"Browser & Computer Use","category_rank":2,"npm_package":"","crate_package":"","pypi_package":"skyvern","weekly_downloads":1326,"dl_source":"pypi","hn_mentions_30d":2,"has_provenance":true,"npm_provenance":null,"pypi_provenance":true,"signed_commits_ratio":null,"scorecard_score":7.0,"scorecard_checks":{"Binary-Artifacts":10,"Branch-Protection":8,"CI-Tests":10,"CII-Best-Practices":0,"Code-Review":0,"Contributors":10,"Dangerous-Workflow":10,"Dependency-Update-Tool":10,"Fuzzing":10,"License":10,"Maintained":10,"Packaging":10,"Pinned-Dependencies":4,"SAST":10,"Security-Policy":10,"Signed-Releases":-1,"Token-Permissions":0,"Vulnerabilities":0},"scorecard_scanned_at":"2026-07-08T08:30:32Z","slug":"skyvern","source_note":"","public_actions":null,"mcp_server_support":{"status":"implemented","confidence":"high","evidence":["README/docs explicitly mention an MCP server","Found MCP dependency 'fastmcp' in pyproject.toml"]},"external_service_dependencies":{"providers":["Amazon Bedrock","Anthropic","Azure OpenAI","Google Gemini","OpenAI","Postgres","Redis"],"requires_api_keys":true,"confidence":"high","evidence":["README/docs mention OpenAI","Found OpenAI dependency 'openai' in pyproject.toml","README/docs mention Anthropic","Found Anthropic dependency 'anthropic' in pyproject.toml","README/docs mention Google Gemini","README/docs mention Azure OpenAI"]},"tool_plugin_surface":{"plugin_system":"extension-based","tool_tags":["browser","code","database"],"confidence":"high","evidence":["README/docs mention a extension-based plugin/integration surface","README/docs mention browser capabilities","README/docs mention database capabilities","README/docs mention code capabilities"]},"package_provenance_drift":{"status":"unknown","confidence":"low","summary":"Package source metadata is missing or inconclusive","evidence":["pypi package 'skyvern' has a non-GitHub or unparseable source URL"]},"evidence_grade":"B","coverage_grade":"A","signal_coverage":0.8,"signal_types":4,"listing_status":"listed","display_listing_status":"listed","display_status_label":"Listed","has_warning":false,"warning_reasons":[],"license_spdx":"AGPL-3.0","license_type":"open","license_override":"","trust_score":79.4,"trust_score_v2":79.4,"rank_v2":43,"rank_v2_delta":-5,"trust_v2_adjustment":-3.8,"trust_confidence":1.0,"trust_breakdown":{"safety":16.2,"identity":18.0,"transparency":14.4,"maintenance":20.0,"adoption":14.6},"trust_v2_breakdown":{"mcp":2.0,"external_dependencies":-4.0,"tool_plugin_surface":-1.5,"package_provenance_drift":0.0},"pending_signals":false},{"name":"Bernstein","repo":"sipyourdrink-ltd/bernstein","display_repo":"","url":"https://github.com/sipyourdrink-ltd/bernstein","rank":44,"previous_rank":44,"rank_delta":0,"stars":654,"stars_fmt":"654","forks":60,"forks_fmt":"60","last_push":"2026-07-10","days_ago":1,"weekly_commits":345,"commits_low_confidence":false,"score":75.2,"description":"Audit-grade multi-agent orchestration for CLI coding agents (Claude Code, Codex, Gemini CLI, +40 more). HMAC-chained aud","language":"Python","open_issues":18,"category":"Coding Agents","category_rank":7,"npm_package":"","crate_package":"","pypi_package":"bernstein","weekly_downloads":36405,"dl_source":"pypi","hn_mentions_30d":null,"has_provenance":true,"npm_provenance":null,"pypi_provenance":true,"signed_commits_ratio":null,"scorecard_score":5.8,"scorecard_checks":{"Binary-Artifacts":10,"Branch-Protection":1,"CI-Tests":10,"CII-Best-Practices":2,"Code-Review":0,"Contributors":6,"Dangerous-Workflow":0,"Dependency-Update-Tool":10,"Fuzzing":10,"License":10,"Maintained":10,"Packaging":10,"Pinned-Dependencies":9,"SAST":9,"Security-Policy":10,"Signed-Releases":0,"Token-Permissions":0,"Vulnerabilities":9},"scorecard_scanned_at":"2026-07-10T08:02:17Z","slug":"bernstein","source_note":"","public_actions":null,"mcp_server_support":{"status":"implemented","confidence":"high","evidence":["README/docs explicitly mention an MCP server","Found MCP-related server path: src/bernstein/core/cost/mcp_server_cost.py","Found MCP-related server path: src/bernstein/core/protocols/mcp/mcp_server.py","Found MCP-related server docs path: docs/integrations/mcp-server-injection.md"]},"external_service_dependencies":{"providers":["Amazon Bedrock","Anthropic","E2B","Google Gemini","OpenAI","Postgres"],"requires_api_keys":true,"confidence":"high","evidence":["README/docs mention OpenAI","Found OpenAI dependency 'openai' in pyproject.toml","README/docs mention Anthropic","Found Anthropic credential/config marker 'ANTHROPIC_API_KEY'","README/docs mention Google Gemini","Found Amazon Bedrock dependency 'boto3' in pyproject.toml"]},"tool_plugin_surface":{"plugin_system":"marketplace","tool_tags":["code","database","search","shell"],"confidence":"high","evidence":["README/docs mention a marketplace plugin/integration surface","README/docs mention shell capabilities","README/docs mention search capabilities","README/docs mention database capabilities","README/docs mention code capabilities"]},"package_provenance_drift":{"status":"match","confidence":"high","summary":"Published package metadata matches the tracked repo","evidence":["pypi package 'bernstein' points to the tracked repo"]},"evidence_grade":"B","coverage_grade":"B","signal_coverage":0.6,"signal_types":3,"listing_status":"listed","display_listing_status":"listed","display_status_label":"Listed","has_warning":false,"warning_reasons":[],"license_spdx":"Apache-2.0","license_type":"open","license_override":"","trust_score":79.2,"trust_score_v2":79.2,"rank_v2":44,"rank_v2_delta":-2,"trust_v2_adjustment":0.3,"trust_confidence":1.0,"trust_breakdown":{"safety":14.8,"identity":18.0,"transparency":13.4,"maintenance":19.9,"adoption":12.8},"trust_v2_breakdown":{"mcp":2.0,"external_dependencies":-3.5,"tool_plugin_surface":-2.2,"package_provenance_drift":4.0},"pending_signals":false},{"name":"Deep Agents","repo":"langchain-ai/deepagents","display_repo":"","url":"https://github.com/langchain-ai/deepagents","rank":45,"previous_rank":45,"rank_delta":0,"stars":26071,"stars_fmt":"26.1k","forks":3652,"forks_fmt":"3.7k","last_push":"2026-07-11","days_ago":0,"weekly_commits":525,"commits_low_confidence":false,"score":93.1,"description":"The batteries-included agent harness.","language":"Python","open_issues":120,"category":"Agent Frameworks","category_rank":10,"npm_package":"","crate_package":"","pypi_package":"deepagents","weekly_downloads":1438800,"dl_source":"pypi","hn_mentions_30d":null,"has_provenance":false,"npm_provenance":null,"pypi_provenance":false,"signed_commits_ratio":1.0,"scorecard_score":6.0,"scorecard_checks":{"Binary-Artifacts":10,"Branch-Protection":4,"CI-Tests":10,"CII-Best-Practices":0,"Code-Review":2,"Contributors":10,"Dangerous-Workflow":10,"Dependency-Update-Tool":10,"Fuzzing":0,"License":10,"Maintained":10,"Packaging":10,"Pinned-Dependencies":8,"SAST":9,"Security-Policy":10,"Signed-Releases":0,"Token-Permissions":0,"Vulnerabilities":0},"scorecard_scanned_at":"2026-07-10T10:00:20Z","slug":"deep-agents","source_note":"","public_actions":null,"mcp_server_support":{"status":"implemented","confidence":"high","evidence":["README/docs explicitly mention an MCP server","Found MCP-related server test path: libs/cli/tests/unit_tests/deploy/test_mcp_servers_command.py"]},"external_service_dependencies":{"providers":["Amazon Bedrock","Anthropic","E2B","OpenAI","Tavily"],"requires_api_keys":false,"confidence":"high","evidence":["README/docs mention OpenAI","Found OpenAI dependency 'openai' in libs/acp/pyproject.toml","README/docs mention Anthropic","Found Anthropic dependency 'anthropic' in libs/code/pyproject.toml","Found Amazon Bedrock dependency 'bedrock' in libs/code/pyproject.toml","Found Tavily dependency 'tavily' in libs/code/pyproject.toml"]},"tool_plugin_surface":{"plugin_system":"none","tool_tags":["code","filesystem","search","shell"],"confidence":"high","evidence":["README/docs mention shell capabilities","README/docs mention filesystem capabilities","README/docs mention search capabilities","README/docs mention code capabilities"]},"package_provenance_drift":{"status":"match","confidence":"high","summary":"Published package metadata matches the tracked repo","evidence":["pypi package 'deepagents' points to the tracked repo"]},"evidence_grade":"B","coverage_grade":"B","signal_coverage":0.6,"signal_types":3,"listing_status":"listed","display_listing_status":"listed","display_status_label":"Listed","has_warning":false,"warning_reasons":[],"license_spdx":"MIT","license_type":"open","license_override":"","trust_score":78.5,"trust_score_v2":78.5,"rank_v2":45,"rank_v2_delta":8,"trust_v2_adjustment":2.8,"trust_confidence":1.0,"trust_breakdown":{"safety":12.5,"identity":10.8,"transparency":13.6,"maintenance":20.0,"adoption":18.8},"trust_v2_breakdown":{"mcp":2.0,"external_dependencies":-2.0,"tool_plugin_surface":-1.2,"package_provenance_drift":4.0},"pending_signals":false},{"name":"Solace Agent Mesh","repo":"SolaceLabs/solace-agent-mesh","display_repo":"","url":"https://github.com/SolaceLabs/solace-agent-mesh","rank":46,"previous_rank":46,"rank_delta":0,"stars":4961,"stars_fmt":"5.0k","forks":268,"forks_fmt":"268","last_push":"2026-06-29","days_ago":12,"weekly_commits":9,"commits_low_confidence":false,"score":69.5,"description":"An event-driven framework designed to build and orchestrate multi-agent AI systems. It enables seamless integration of A","language":"Python","open_issues":18,"category":"Multi-Agent Systems","category_rank":2,"npm_package":"","crate_package":"","pypi_package":"solace-agent-mesh","weekly_downloads":11564,"dl_source":"pypi","hn_mentions_30d":null,"has_provenance":true,"npm_provenance":null,"pypi_provenance":true,"signed_commits_ratio":0.81,"scorecard_score":4.6,"scorecard_checks":{"Binary-Artifacts":10,"Branch-Protection":4,"CI-Tests":8,"CII-Best-Practices":0,"Code-Review":7,"Contributors":10,"Dangerous-Workflow":10,"Dependency-Update-Tool":0,"Fuzzing":0,"License":10,"Maintained":10,"Packaging":10,"Pinned-Dependencies":6,"SAST":0,"Security-Policy":0,"Signed-Releases":0,"Token-Permissions":0,"Vulnerabilities":0},"scorecard_scanned_at":"2026-07-11T04:03:17Z","slug":"solace-agent-mesh","source_note":"","public_actions":null,"mcp_server_support":{"status":"declared","confidence":"medium","evidence":["README/docs mention MCP support","Found MCP-related server test path: tests/sam-test-infrastructure/src/sam_test_infrastructure/mcp_server/__init__.py","Found MCP-related server test path: tests/sam-test-infrastructure/src/sam_test_infrastructure/mcp_server/server.py","Found MCP dependency 'fastmcp' in pyproject.toml"]},"external_service_dependencies":{"providers":["Amazon Bedrock","OpenAI","Postgres","Tavily"],"requires_api_keys":false,"confidence":"high","evidence":["Found OpenAI dependency 'openai' in pyproject.toml","Found Amazon Bedrock dependency 'boto3' in pyproject.toml","Found Tavily dependency 'tavily' in pyproject.toml","Found Postgres dependency 'psycopg' in pyproject.toml"]},"tool_plugin_surface":{"plugin_system":"declared","tool_tags":["browser","code","database","search"],"confidence":"high","evidence":["README/docs mention a declared plugin/integration surface","Found browser dependency 'playwright' in pyproject.toml","Found search dependency 'tavily' in pyproject.toml","Found database dependency 'postgres' in pyproject.toml","Found code dependency 'gitpython' in pyproject.toml","README/docs also mention code capabilities"]},"package_provenance_drift":{"status":"match","confidence":"high","summary":"Published package metadata matches the tracked repo","evidence":["pypi package 'solace-agent-mesh' points to the tracked repo"]},"evidence_grade":"B","coverage_grade":"B","signal_coverage":0.6,"signal_types":3,"listing_status":"listed","display_listing_status":"listed","display_status_label":"Listed","has_warning":false,"warning_reasons":[],"license_spdx":"Apache-2.0","license_type":"open","license_override":"","trust_score":78.2,"trust_score_v2":78.2,"rank_v2":46,"rank_v2_delta":1,"trust_v2_adjustment":1.0,"trust_confidence":1.0,"trust_breakdown":{"safety":17.3,"identity":18.0,"transparency":12.4,"maintenance":15.2,"adoption":14.3},"trust_v2_breakdown":{"mcp":0.0,"external_dependencies":-1.5,"tool_plugin_surface":-1.5,"package_provenance_drift":4.0},"pending_signals":false},{"name":"OpenClaw","repo":"openclaw/openclaw","display_repo":"","url":"https://github.com/openclaw/openclaw","rank":47,"previous_rank":49,"rank_delta":2,"stars":382530,"stars_fmt":"382.5k","forks":80296,"forks_fmt":"80.3k","last_push":"2026-07-11","days_ago":0,"weekly_commits":7622,"commits_low_confidence":false,"score":100.0,"description":"Your own personal AI assistant. Any OS. Any Platform. The lobster way. 🦞 ","language":"TypeScript","open_issues":3618,"category":"Browser & Computer Use","category_rank":3,"npm_package":"openclaw","crate_package":"","pypi_package":"openclaw","weekly_downloads":3396211,"dl_source":"npm+pypi","hn_mentions_30d":78,"has_provenance":true,"npm_provenance":true,"pypi_provenance":false,"signed_commits_ratio":null,"scorecard_score":5.7,"scorecard_checks":{"Binary-Artifacts":9,"Branch-Protection":3,"CI-Tests":10,"CII-Best-Practices":0,"Code-Review":4,"Contributors":10,"Dangerous-Workflow":0,"Dependency-Update-Tool":10,"Fuzzing":0,"License":9,"Maintained":10,"Packaging":10,"Pinned-Dependencies":8,"SAST":8,"Security-Policy":10,"Signed-Releases":0,"Token-Permissions":0,"Vulnerabilities":10},"scorecard_scanned_at":"2026-07-11T04:07:45Z","slug":"openclaw","source_note":"","public_actions":null,"mcp_server_support":{"status":"implemented","confidence":"high","evidence":["Found MCP-related server path: extensions/codex-supervisor/src/mcp-server.ts","Found MCP-related server path: src/mcp/channel-server.ts","Found MCP-related server test path: extensions/codex/src/app-server/thread-lifecycle.user-mcp-servers.test.ts","Found MCP-related server test path: src/mcp/channel-server.shutdown-unhandled-rejection.test.ts"]},"external_service_dependencies":{"providers":["Amazon Bedrock","Anthropic","Firecrawl","Google Gemini","OpenAI","Postgres"],"requires_api_keys":false,"confidence":"high","evidence":["README/docs mention OpenAI","Found OpenAI dependency 'openai' in package.json","Found Anthropic dependency 'anthropic' in package.json","Found Google Gemini dependency '@google/genai' in package.json","Found Amazon Bedrock dependency 'bedrock' in package.json","Found Firecrawl dependency 'firecrawl' in package.json"]},"tool_plugin_surface":{"plugin_system":"extension-based","tool_tags":["browser","code","database","shell"],"confidence":"high","evidence":["README/docs mention a extension-based plugin/integration surface","Found browser dependency 'playwright' in package.json","README/docs mention shell capabilities","Found database dependency 'pg' in package.json","README/docs mention code capabilities"]},"package_provenance_drift":{"status":"warning","confidence":"high","summary":"1 package source mismatch detected","evidence":["npm package 'openclaw' points to the tracked repo","pypi package 'openclaw' points to commandoperator/cmdop-sdk, not openclaw/openclaw"]},"evidence_grade":"B","coverage_grade":"A","signal_coverage":0.8,"signal_types":4,"listing_status":"listed","display_listing_status":"listed","display_status_label":"Listed","has_warning":false,"warning_reasons":[],"license_spdx":"NOASSERTION","license_type":"open","license_override":"","trust_score":78.0,"trust_score_v2":78.0,"rank_v2":47,"rank_v2_delta":-22,"trust_v2_adjustment":-7.9,"trust_confidence":1.0,"trust_breakdown":{"safety":14.6,"identity":18.0,"transparency":13.3,"maintenance":20.0,"adoption":20.0},"trust_v2_breakdown":{"mcp":2.0,"external_dependencies":-2.5,"tool_plugin_surface":-1.8,"package_provenance_drift":-5.0},"pending_signals":false},{"name":"LangChain","repo":"langchain-ai/langchain","display_repo":"","url":"https://github.com/langchain-ai/langchain","rank":48,"previous_rank":48,"rank_delta":0,"stars":141489,"stars_fmt":"141.5k","forks":23513,"forks_fmt":"23.5k","last_push":"2026-07-10","days_ago":1,"weekly_commits":240,"commits_low_confidence":false,"score":100.0,"description":"The agent engineering platform.","language":"Python","open_issues":354,"category":"Agent Frameworks","category_rank":11,"npm_package":"","crate_package":"","pypi_package":"langchain","weekly_downloads":78314260,"dl_source":"pypi","hn_mentions_30d":9,"has_provenance":false,"npm_provenance":null,"pypi_provenance":false,"signed_commits_ratio":1.0,"scorecard_score":5.9,"scorecard_checks":{"Binary-Artifacts":10,"Branch-Protection":3,"CI-Tests":10,"CII-Best-Practices":0,"Code-Review":4,"Contributors":10,"Dangerous-Workflow":10,"Dependency-Update-Tool":10,"Fuzzing":0,"License":10,"Maintained":10,"Packaging":10,"Pinned-Dependencies":8,"SAST":6,"Security-Policy":10,"Signed-Releases":0,"Token-Permissions":0,"Vulnerabilities":0},"scorecard_scanned_at":"2026-07-11T03:29:40Z","slug":"langchain","source_note":"","public_actions":null,"mcp_server_support":{"status":"none","confidence":null,"evidence":[]},"external_service_dependencies":{"providers":["Anthropic","OpenAI","Postgres","Redis"],"requires_api_keys":false,"confidence":"high","evidence":["README/docs mention OpenAI","Found OpenAI dependency 'openai' in libs/langchain/pyproject.toml","Found Anthropic dependency 'anthropic' in libs/langchain/pyproject.toml","Found Postgres dependency 'pg' in libs/langchain/pyproject.toml","Found Redis dependency 'redis' in libs/langchain/pyproject.toml"]},"tool_plugin_surface":{"plugin_system":"declared","tool_tags":["browser","code","database","filesystem"],"confidence":"high","evidence":["README/docs mention a declared plugin/integration surface","Found browser dependency 'playwright' in libs/langchain/pyproject.toml","README/docs mention filesystem capabilities","Found database dependency 'pg' in libs/langchain/pyproject.toml","README/docs mention code capabilities"]},"package_provenance_drift":{"status":"match","confidence":"high","summary":"Published package metadata matches the tracked repo","evidence":["pypi package 'langchain' points to the tracked repo"]},"evidence_grade":"B","coverage_grade":"A","signal_coverage":0.8,"signal_types":4,"listing_status":"listed","display_listing_status":"listed","display_status_label":"Listed","has_warning":false,"warning_reasons":[],"license_spdx":"MIT","license_type":"open","license_override":"","trust_score":77.6,"trust_score_v2":77.6,"rank_v2":48,"rank_v2_delta":1,"trust_v2_adjustment":1.0,"trust_confidence":1.0,"trust_breakdown":{"safety":12.4,"identity":10.8,"transparency":13.5,"maintenance":19.9,"adoption":20.0},"trust_v2_breakdown":{"mcp":0.0,"external_dependencies":-1.5,"tool_plugin_surface":-1.5,"package_provenance_drift":4.0},"pending_signals":false},{"name":"Arize Phoenix","repo":"Arize-AI/phoenix","display_repo":"","url":"https://github.com/Arize-ai/phoenix","rank":49,"previous_rank":50,"rank_delta":1,"stars":10503,"stars_fmt":"10.5k","forks":977,"forks_fmt":"977","last_push":"2026-07-11","days_ago":0,"weekly_commits":302,"commits_low_confidence":false,"score":88.0,"description":"AI Observability & Evaluation","language":"Python","open_issues":617,"category":"Observability & Evaluation","category_rank":3,"npm_package":"phoenix-js","crate_package":"","pypi_package":"arize-phoenix","weekly_downloads":468832,"dl_source":"npm+pypi","hn_mentions_30d":0,"has_provenance":true,"npm_provenance":false,"pypi_provenance":true,"signed_commits_ratio":1.0,"scorecard_score":null,"scorecard_checks":{},"scorecard_scanned_at":null,"slug":"arize-phoenix","source_note":"","public_actions":null,"mcp_server_support":{"status":"implemented","confidence":"high","evidence":["README/docs explicitly mention an MCP server","Found MCP-related server path: tutorials/mcp/tracing_between_mcp_client_and_server/server.py","Found MCP-related server docs path: docs/phoenix/integrations/phoenix-mcp-server.mdx","Found MCP-related server docs path: docs/phoenix/sdk-api-reference/typescript/mcp-server.mdx"]},"external_service_dependencies":{"providers":["Amazon Bedrock","Anthropic","E2B","OpenAI","Postgres"],"requires_api_keys":false,"confidence":"high","evidence":["Found OpenAI dependency 'openai' in pyproject.toml","README/docs also mention OpenAI","Found Anthropic dependency 'anthropic' in pyproject.toml","README/docs also mention Anthropic","Found Amazon Bedrock dependency 'bedrock' in pyproject.toml","README/docs also mention Amazon Bedrock"]},"tool_plugin_surface":{"plugin_system":"declared","tool_tags":["browser","database"],"confidence":"high","evidence":["README/docs mention a declared plugin/integration surface","Found browser dependency 'playwright' in app/package.json","Found database dependency 'pg' in pyproject.toml"]},"package_provenance_drift":{"status":"partial","confidence":"medium","summary":"Some package metadata matches; some source metadata is missing","evidence":["npm package 'phoenix-js' does not expose a source repo URL","pypi package 'arize-phoenix' points to the tracked repo"]},"evidence_grade":"B","coverage_grade":"A","signal_coverage":0.8,"signal_types":4,"listing_status":"listed","display_listing_status":"listed","display_status_label":"Listed","has_warning":false,"warning_reasons":[],"license_spdx":"NOASSERTION","license_type":"source-available","license_override":"","trust_score":77.3,"trust_score_v2":77.3,"rank_v2":49,"rank_v2_delta":1,"trust_v2_adjustment":1.1,"trust_confidence":1.0,"trust_breakdown":{"safety":12.5,"identity":18.0,"transparency":8.5,"maintenance":20.0,"adoption":17.2},"trust_v2_breakdown":{"mcp":2.0,"external_dependencies":-2.0,"tool_plugin_surface":-0.9,"package_provenance_drift":2.0},"pending_signals":false},{"name":"LiteLLM","repo":"BerriAI/litellm","display_repo":"","url":"https://github.com/BerriAI/litellm","rank":50,"previous_rank":47,"rank_delta":-3,"stars":53236,"stars_fmt":"53.2k","forks":9660,"forks_fmt":"9.7k","last_push":"2026-07-11","days_ago":0,"weekly_commits":867,"commits_low_confidence":false,"score":96.9,"description":"Python SDK, Proxy Server (AI Gateway) to call 100+ LLM APIs in OpenAI (or native) format, with cost tracking, guardrails","language":"Python","open_issues":1418,"category":"LLM Gateways & Infra","category_rank":3,"npm_package":"","crate_package":"","pypi_package":"litellm","weekly_downloads":146644474,"dl_source":"pypi","hn_mentions_30d":9,"has_provenance":false,"npm_provenance":null,"pypi_provenance":false,"signed_commits_ratio":0.6,"scorecard_score":6.1,"scorecard_checks":{"Binary-Artifacts":0,"Branch-Protection":4,"CI-Tests":10,"CII-Best-Practices":0,"Code-Review":10,"Contributors":10,"Dangerous-Workflow":10,"Dependency-Update-Tool":10,"Fuzzing":0,"License":9,"Maintained":10,"Packaging":10,"Pinned-Dependencies":6,"SAST":7,"Security-Policy":10,"Signed-Releases":-1,"Token-Permissions":0,"Vulnerabilities":0},"scorecard_scanned_at":"2026-07-11T04:04:42Z","slug":"litellm","source_note":"","public_actions":null,"mcp_server_support":{"status":"implemented","confidence":"high","evidence":["README/docs explicitly mention an MCP server","Found MCP-related server path: litellm-proxy-extras/litellm_proxy_extras/migrations/20250507161527_add_health_check_fields_to_mcp_servers/migration.sql","Found MCP-related server path: litellm-proxy-extras/litellm_proxy_extras/migrations/20250707212517_add_mcp_info_column_mcp_servers/migration.sql","Found MCP-related server docs path: terraform/provider/docs/resources/mcp_server.md"]},"external_service_dependencies":{"providers":["Amazon Bedrock","Anthropic","Google Gemini","OpenAI","Postgres","Redis"],"requires_api_keys":true,"confidence":"high","evidence":["Found OpenAI dependency 'openai' in pyproject.toml","Found OpenAI credential/config marker 'OPENAI_API_KEY'","README/docs also mention OpenAI","Found Anthropic dependency 'anthropic' in pyproject.toml","Found Anthropic credential/config marker 'ANTHROPIC_API_KEY'","README/docs also mention Anthropic"]},"tool_plugin_surface":{"plugin_system":"declared","tool_tags":["database"],"confidence":"high","evidence":["README/docs mention a declared plugin/integration surface","Found database dependency 'redis' in pyproject.toml","README/docs also mention database capabilities"]},"package_provenance_drift":{"status":"match","confidence":"high","summary":"Published package metadata matches the tracked repo","evidence":["pypi package 'litellm' points to the tracked repo"]},"evidence_grade":"B","coverage_grade":"A","signal_coverage":0.8,"signal_types":4,"listing_status":"listed","display_listing_status":"listed","display_status_label":"Listed","has_warning":false,"warning_reasons":[],"license_spdx":"NOASSERTION","license_type":"open","license_override":"","trust_score":77.0,"trust_score_v2":77.0,"rank_v2":50,"rank_v2_delta":5,"trust_v2_adjustment":1.9,"trust_confidence":1.0,"trust_breakdown":{"safety":10.6,"identity":10.8,"transparency":13.7,"maintenance":20.0,"adoption":20.0},"trust_v2_breakdown":{"mcp":2.0,"external_dependencies":-3.5,"tool_plugin_surface":-0.6,"package_provenance_drift":4.0},"pending_signals":false},{"name":"Chroma","repo":"chroma-core/chroma","display_repo":"","url":"https://github.com/chroma-core/chroma","rank":51,"previous_rank":52,"rank_delta":1,"stars":28759,"stars_fmt":"28.8k","forks":2376,"forks_fmt":"2.4k","last_push":"2026-07-10","days_ago":1,"weekly_commits":90,"commits_low_confidence":false,"score":91.9,"description":"Search infrastructure for AI","language":"Rust","open_issues":321,"category":"Memory & Knowledge","category_rank":7,"npm_package":"","crate_package":"","pypi_package":"chromadb","weekly_downloads":2853173,"dl_source":"pypi","hn_mentions_30d":2,"has_provenance":false,"npm_provenance":null,"pypi_provenance":false,"signed_commits_ratio":1.0,"scorecard_score":4.5,"scorecard_checks":{"Binary-Artifacts":10,"Branch-Protection":3,"CI-Tests":10,"CII-Best-Practices":0,"Code-Review":10,"Contributors":10,"Dangerous-Workflow":10,"Dependency-Update-Tool":0,"Fuzzing":0,"License":10,"Maintained":10,"Packaging":10,"Pinned-Dependencies":0,"SAST":0,"Security-Policy":0,"Signed-Releases":0,"Token-Permissions":0,"Vulnerabilities":0},"scorecard_scanned_at":"2026-07-10T09:32:08Z","slug":"chroma","source_note":"","public_actions":null,"mcp_server_support":{"status":"declared","confidence":"medium","evidence":["Found MCP-related server path: rust/foundation-api/src/routes/mcp/server.rs"]},"external_service_dependencies":{"providers":["OpenAI"],"requires_api_keys":false,"confidence":"medium","evidence":["Found OpenAI dependency 'openai' in clients/js/package.json"]},"tool_plugin_surface":{"plugin_system":"none","tool_tags":[],"confidence":null,"evidence":[]},"package_provenance_drift":{"status":"match","confidence":"high","summary":"Published package metadata matches the tracked repo","evidence":["pypi package 'chromadb' points to the tracked repo"]},"evidence_grade":"B","coverage_grade":"A","signal_coverage":0.8,"signal_types":4,"listing_status":"listed","display_listing_status":"listed","display_status_label":"Listed","has_warning":false,"warning_reasons":[],"license_spdx":"Apache-2.0","license_type":"open","license_override":"","trust_score":76.8,"trust_score_v2":76.8,"rank_v2":51,"rank_v2_delta":18,"trust_v2_adjustment":4.0,"trust_confidence":1.0,"trust_breakdown":{"safety":10.6,"identity":10.8,"transparency":12.3,"maintenance":19.8,"adoption":19.3},"trust_v2_breakdown":{"mcp":0.0,"external_dependencies":-0.0,"tool_plugin_surface":-0.0,"package_provenance_drift":4.0},"pending_signals":false},{"name":"E2B","repo":"e2b-dev/e2b","display_repo":"","url":"https://github.com/e2b-dev/E2B","rank":52,"previous_rank":51,"rank_delta":-1,"stars":12928,"stars_fmt":"12.9k","forks":964,"forks_fmt":"964","last_push":"2026-07-10","days_ago":1,"weekly_commits":84,"commits_low_confidence":false,"score":87.7,"description":"Open-source, secure environment with real-world tools for enterprise-grade agents.","language":"Python","open_issues":25,"category":"Sandboxes & Runtimes","category_rank":1,"npm_package":"@e2b/sdk","crate_package":"","pypi_package":"e2b","weekly_downloads":981689,"dl_source":"npm+pypi","hn_mentions_30d":1,"has_provenance":false,"npm_provenance":false,"pypi_provenance":false,"signed_commits_ratio":0.84,"scorecard_score":6.3,"scorecard_checks":{"Binary-Artifacts":10,"Branch-Protection":4,"CI-Tests":10,"CII-Best-Practices":0,"Code-Review":8,"Contributors":10,"Dangerous-Workflow":10,"Dependency-Update-Tool":10,"Fuzzing":0,"License":10,"Maintained":10,"Packaging":10,"Pinned-Dependencies":0,"SAST":10,"Security-Policy":0,"Signed-Releases":-1,"Token-Permissions":0,"Vulnerabilities":3},"scorecard_scanned_at":"2026-07-11T03:25:49Z","slug":"e2b","source_note":"","public_actions":null,"mcp_server_support":{"status":"declared","confidence":"medium","evidence":["Found MCP-related server test path: spec/mcp-server.json"]},"external_service_dependencies":{"providers":["E2B"],"requires_api_keys":true,"confidence":"high","evidence":["README/docs mention E2B","Found E2B dependency 'e2b' in package.json","Found E2B credential/config marker 'E2B_API_KEY'"]},"tool_plugin_surface":{"plugin_system":"none","tool_tags":["browser","code"],"confidence":"high","evidence":["Found browser dependency 'playwright' in packages/js-sdk/package.json","README/docs mention code capabilities"]},"package_provenance_drift":{"status":"match","confidence":"high","summary":"Published package metadata matches the tracked repo","evidence":["npm package '@e2b/sdk' points to the tracked repo","pypi package 'e2b' points to the tracked repo"]},"evidence_grade":"B","coverage_grade":"A","signal_coverage":0.8,"signal_types":4,"listing_status":"listed","display_listing_status":"listed","display_status_label":"Listed","has_warning":false,"warning_reasons":[],"license_spdx":"Apache-2.0","license_type":"open","license_override":"","trust_score":76.7,"trust_score_v2":76.7,"rank_v2":52,"rank_v2_delta":10,"trust_v2_adjustment":2.4,"trust_confidence":1.0,"trust_breakdown":{"safety":12.1,"identity":10.8,"transparency":13.9,"maintenance":19.6,"adoption":17.9},"trust_v2_breakdown":{"mcp":0.0,"external_dependencies":-1.0,"tool_plugin_surface":-0.6,"package_provenance_drift":4.0},"pending_signals":false},{"name":"Dify","repo":"langgenius/dify","display_repo":"","url":"https://github.com/langgenius/dify","rank":53,"previous_rank":54,"rank_delta":1,"stars":148455,"stars_fmt":"148.5k","forks":23401,"forks_fmt":"23.4k","last_push":"2026-07-10","days_ago":1,"weekly_commits":555,"commits_low_confidence":false,"score":100.0,"description":"Production-ready platform for agentic workflow development.","language":"TypeScript","open_issues":274,"category":"Workflow Platforms","category_rank":4,"npm_package":"dify","crate_package":"","pypi_package":"dify-client","weekly_downloads":19857567,"dl_source":"npm+docker+pypi","hn_mentions_30d":479,"has_provenance":false,"npm_provenance":false,"pypi_provenance":false,"signed_commits_ratio":1.0,"scorecard_score":6.1,"scorecard_checks":{"Binary-Artifacts":10,"Branch-Protection":1,"CI-Tests":10,"CII-Best-Practices":0,"Code-Review":10,"Contributors":10,"Dangerous-Workflow":10,"Dependency-Update-Tool":10,"Fuzzing":0,"License":9,"Maintained":10,"Packaging":10,"Pinned-Dependencies":6,"SAST":6,"Security-Policy":10,"Signed-Releases":0,"Token-Permissions":0,"Vulnerabilities":0},"scorecard_scanned_at":"2026-07-11T02:08:39Z","slug":"dify","source_note":"","public_actions":null,"mcp_server_support":{"status":"declared","confidence":"medium","evidence":["Found MCP-related server path: api/controllers/console/app/mcp_server.py","Found MCP-related server path: api/migrations/versions/2025_06_25_0936-58eb7bdb93fe_add_mcp_server_tool_and_app_server.py","Found MCP-related server test path: api/tests/unit_tests/controllers/console/app/test_mcp_server_response.py","Found MCP-related server test path: web/app/components/tools/mcp/__tests__/mcp-server-modal.spec.tsx"]},"external_service_dependencies":{"providers":["OpenAI","Postgres"],"requires_api_keys":false,"confidence":"high","evidence":["README/docs mention OpenAI","README/docs mention Postgres"]},"tool_plugin_surface":{"plugin_system":"marketplace","tool_tags":["browser","code","search"],"confidence":"high","evidence":["README/docs mention a marketplace plugin/integration surface","Found browser dependency 'playwright' in e2e/package.json","README/docs mention search capabilities","README/docs mention code capabilities"]},"package_provenance_drift":{"status":"partial","confidence":"medium","summary":"Some package metadata matches; some source metadata is missing","evidence":["npm package 'dify' has a non-GitHub or unparseable source URL","pypi package 'dify-client' points to the tracked repo"]},"evidence_grade":"B","coverage_grade":"A","signal_coverage":0.8,"signal_types":4,"listing_status":"listed","display_listing_status":"listed","display_status_label":"Listed","has_warning":false,"warning_reasons":[],"license_spdx":"NOASSERTION","license_type":"source-available","license_override":"source-available","trust_score":76.6,"trust_score_v2":76.6,"rank_v2":53,"rank_v2_delta":-5,"trust_v2_adjustment":-0.4,"trust_confidence":1.0,"trust_breakdown":{"safety":12.6,"identity":10.8,"transparency":13.7,"maintenance":19.9,"adoption":20.0},"trust_v2_breakdown":{"mcp":0.0,"external_dependencies":-0.5,"tool_plugin_surface":-1.9,"package_provenance_drift":2.0},"pending_signals":false},{"name":"ECC","repo":"affaan-m/ECC","display_repo":"","url":"https://github.com/affaan-m/ECC","rank":54,"previous_rank":53,"rank_delta":-1,"stars":228313,"stars_fmt":"228.3k","forks":35017,"forks_fmt":"35.0k","last_push":"2026-07-09","days_ago":2,"weekly_commits":177,"commits_low_confidence":false,"score":99.9,"description":"The agent harness performance optimization system. Skills, instincts, memory, security, and research-first development f","language":"JavaScript","open_issues":24,"category":"Coding Agents","category_rank":8,"npm_package":"ecc-universal","crate_package":"","pypi_package":"","weekly_downloads":3744,"dl_source":"npm","hn_mentions_30d":null,"has_provenance":false,"npm_provenance":false,"pypi_provenance":null,"signed_commits_ratio":0.76,"scorecard_score":6.1,"scorecard_checks":{"Binary-Artifacts":10,"Branch-Protection":0,"CI-Tests":4,"CII-Best-Practices":0,"Code-Review":8,"Contributors":10,"Dangerous-Workflow":10,"Dependency-Update-Tool":10,"Fuzzing":0,"License":10,"Maintained":10,"Packaging":10,"Pinned-Dependencies":8,"SAST":2,"Security-Policy":4,"Signed-Releases":0,"Token-Permissions":0,"Vulnerabilities":10},"scorecard_scanned_at":"2026-07-08T09:03:54Z","slug":"ecc","source_note":"","public_actions":null,"mcp_server_support":{"status":"implemented","confidence":"high","evidence":["README/docs explicitly mention an MCP server","Found MCP-related server path: .agents/skills/mcp-server-patterns/SKILL.md","Found MCP-related server path: .agents/skills/mcp-server-patterns/agents/openai.yaml","Found MCP-related server docs path: docs/ja-JP/skills/mcp-server-patterns/SKILL.md"]},"external_service_dependencies":{"providers":["Anthropic","OpenAI","Postgres","Redis"],"requires_api_keys":false,"confidence":"high","evidence":["Found OpenAI dependency 'openai' in pyproject.toml","README/docs also mention OpenAI","Found Anthropic dependency 'anthropic' in pyproject.toml","README/docs also mention Anthropic","Found Postgres dependency 'postgres' in package.json","README/docs also mention Postgres"]},"tool_plugin_surface":{"plugin_system":"marketplace","tool_tags":["database"],"confidence":"high","evidence":["README/docs mention a marketplace plugin/integration surface","Found database dependency 'postgres' in package.json","README/docs also mention database capabilities"]},"package_provenance_drift":{"status":"match","confidence":"high","summary":"Published package metadata matches the tracked repo","evidence":["npm package 'ecc-universal' points to the tracked repo"]},"evidence_grade":"B","coverage_grade":"B","signal_coverage":0.6,"signal_types":3,"listing_status":"listed","display_listing_status":"listed","display_status_label":"Listed","has_warning":false,"warning_reasons":[],"license_spdx":"MIT","license_type":"open","license_override":"","trust_score":76.6,"trust_score_v2":76.6,"rank_v2":54,"rank_v2_delta":11,"trust_v2_adjustment":3.2,"trust_confidence":1.0,"trust_breakdown":{"safety":11.4,"identity":10.8,"transparency":13.7,"maintenance":19.9,"adoption":17.6},"trust_v2_breakdown":{"mcp":2.0,"external_dependencies":-1.5,"tool_plugin_surface":-1.3,"package_provenance_drift":4.0},"pending_signals":false},{"name":"Langflow","repo":"langflow-ai/langflow","display_repo":"","url":"https://github.com/langflow-ai/langflow","rank":55,"previous_rank":55,"rank_delta":0,"stars":151602,"stars_fmt":"151.6k","forks":9643,"forks_fmt":"9.6k","last_push":"2026-07-11","days_ago":0,"weekly_commits":90,"commits_low_confidence":false,"score":97.9,"description":"Langflow is a powerful tool for building and deploying AI-powered agents and workflows.","language":"Python","open_issues":225,"category":"Workflow Platforms","category_rank":5,"npm_package":"","crate_package":"","pypi_package":"langflow","weekly_downloads":20979,"dl_source":"pypi","hn_mentions_30d":0,"has_provenance":false,"npm_provenance":null,"pypi_provenance":false,"signed_commits_ratio":0.98,"scorecard_score":5.5,"scorecard_checks":{"Binary-Artifacts":10,"Branch-Protection":1,"CI-Tests":10,"CII-Best-Practices":0,"Code-Review":4,"Contributors":10,"Dangerous-Workflow":10,"Dependency-Update-Tool":10,"Fuzzing":0,"License":10,"Maintained":10,"Packaging":10,"Pinned-Dependencies":0,"SAST":7,"Security-Policy":10,"Signed-Releases":0,"Token-Permissions":0,"Vulnerabilities":0},"scorecard_scanned_at":"2026-07-11T03:03:33Z","slug":"langflow","source_note":"","public_actions":null,"mcp_server_support":{"status":"implemented","confidence":"high","evidence":["README/docs explicitly mention an MCP server","Found MCP-related server path: src/backend/base/langflow/agentic/mcp/server.py","Found MCP-related server path: src/frontend/src/components/core/folderSidebarComponent/components/sideBarFolderButtons/components/mcp-server-notice.tsx","Found MCP-related server docs path: docs/docs/Agents/mcp-server.mdx"]},"external_service_dependencies":{"providers":["OpenAI","Postgres","Qdrant","Redis","Weaviate"],"requires_api_keys":false,"confidence":"high","evidence":["Found OpenAI dependency 'openai' in pyproject.toml","Found Qdrant dependency 'qdrant' in src/lfx/pyproject.toml","Found Weaviate dependency 'weaviate' in src/lfx/pyproject.toml","Found Postgres dependency 'psycopg' in pyproject.toml","Found Redis dependency 'redis' in pyproject.toml"]},"tool_plugin_surface":{"plugin_system":"declared","tool_tags":["browser","code","database","search","shell"],"confidence":"high","evidence":["README/docs mention a declared plugin/integration surface","Found browser dependency 'playwright' in pyproject.toml","Found shell dependency 'pty' in pyproject.toml","README/docs mention search capabilities","Found database dependency 'postgres' in pyproject.toml","README/docs mention code capabilities"]},"package_provenance_drift":{"status":"match","confidence":"high","summary":"Published package metadata matches the tracked repo","evidence":["pypi package 'langflow' points to the tracked repo"]},"evidence_grade":"B","coverage_grade":"A","signal_coverage":0.8,"signal_types":4,"listing_status":"listed","display_listing_status":"listed","display_status_label":"Listed","has_warning":false,"warning_reasons":[],"license_spdx":"MIT","license_type":"open","license_override":"","trust_score":76.0,"trust_score_v2":76.0,"rank_v2":55,"rank_v2_delta":8,"trust_v2_adjustment":2.2,"trust_confidence":1.0,"trust_breakdown":{"safety":11.8,"identity":10.8,"transparency":13.2,"maintenance":19.8,"adoption":18.2},"trust_v2_breakdown":{"mcp":2.0,"external_dependencies":-2.0,"tool_plugin_surface":-1.8,"package_provenance_drift":4.0},"pending_signals":false},{"name":"Gemini CLI","repo":"google-gemini/gemini-cli","display_repo":"","url":"https://github.com/google-gemini/gemini-cli","rank":56,"previous_rank":56,"rank_delta":0,"stars":105902,"stars_fmt":"105.9k","forks":14239,"forks_fmt":"14.2k","last_push":"2026-07-11","days_ago":0,"weekly_commits":48,"commits_low_confidence":false,"score":95.4,"description":"An open-source AI agent that brings the power of Gemini directly into your terminal.","language":"TypeScript","open_issues":1166,"category":"Coding Agents","category_rank":9,"npm_package":"@google/gemini-cli","crate_package":"","pypi_package":"","weekly_downloads":594518,"dl_source":"npm","hn_mentions_30d":null,"has_provenance":false,"npm_provenance":false,"pypi_provenance":null,"signed_commits_ratio":1.0,"scorecard_score":4.8,"scorecard_checks":{"Binary-Artifacts":5,"Branch-Protection":0,"CI-Tests":10,"CII-Best-Practices":0,"Code-Review":10,"Contributors":10,"Dangerous-Workflow":0,"Dependency-Update-Tool":10,"Fuzzing":0,"License":10,"Maintained":10,"Packaging":-1,"Pinned-Dependencies":8,"SAST":10,"Security-Policy":10,"Signed-Releases":0,"Token-Permissions":0,"Vulnerabilities":0},"scorecard_scanned_at":"2026-07-10T08:51:27Z","slug":"gemini-cli","source_note":"","public_actions":{"actions_30d":112,"actions_30d_merged":104,"actions_30d_by_repo":[{"repo":"nangchang/DevIsland","count":4},{"repo":"sayyiditow/shard-db","count":1}]},"mcp_server_support":{"status":"implemented","confidence":"high","evidence":["README/docs explicitly mention an MCP server","Found MCP-related server path: integration-tests/test-mcp-server.ts","Found MCP-related server path: packages/cli/src/commands/extensions/examples/mcp-server/.gitignore","Found MCP-related server docs path: docs/tools/mcp-server.md"]},"external_service_dependencies":{"providers":["Google Gemini"],"requires_api_keys":true,"confidence":"high","evidence":["README/docs mention Google Gemini","Found Google Gemini dependency '@google/genai' in packages/cli/package.json","Found Google Gemini credential/config marker 'GOOGLE_API_KEY'"]},"tool_plugin_surface":{"plugin_system":"extension-based","tool_tags":["browser","code","filesystem","search","shell"],"confidence":"high","evidence":["README/docs mention a extension-based plugin/integration surface","Found browser dependency 'puppeteer' in packages/core/package.json","README/docs mention shell capabilities","README/docs mention filesystem capabilities","README/docs mention search capabilities","README/docs mention code capabilities"]},"package_provenance_drift":{"status":"match","confidence":"high","summary":"Published package metadata matches the tracked repo","evidence":["npm package '@google/gemini-cli' points to the tracked repo"]},"evidence_grade":"B","coverage_grade":"A","signal_coverage":0.8,"signal_types":4,"listing_status":"listed","display_listing_status":"listed","display_status_label":"Listed","has_warning":false,"warning_reasons":[],"license_spdx":"Apache-2.0","license_type":"open","license_override":"","trust_score":75.8,"trust_score_v2":75.8,"rank_v2":56,"rank_v2_delta":12,"trust_v2_adjustment":2.9,"trust_confidence":1.0,"trust_breakdown":{"safety":11.0,"identity":10.8,"transparency":12.6,"maintenance":18.7,"adoption":19.8},"trust_v2_breakdown":{"mcp":2.0,"external_dependencies":-1.0,"tool_plugin_surface":-2.1,"package_provenance_drift":4.0},"pending_signals":false},{"name":"Agent Governance Toolkit","repo":"microsoft/agent-governance-toolkit","display_repo":"","url":"https://github.com/microsoft/agent-governance-toolkit","rank":57,"previous_rank":57,"rank_delta":0,"stars":4805,"stars_fmt":"4.8k","forks":841,"forks_fmt":"841","last_push":"2026-07-10","days_ago":1,"weekly_commits":253,"commits_low_confidence":false,"score":85.7,"description":"AI Agent Governance Toolkit — Policy enforcement, zero-trust identity, execution sandboxing, and reliability engineering","language":"Python","open_issues":31,"category":"Agent Frameworks","category_rank":12,"npm_package":"@microsoft/agent-governance-opencode","crate_package":"","pypi_package":"","weekly_downloads":11,"dl_source":"npm","hn_mentions_30d":null,"has_provenance":false,"npm_provenance":false,"pypi_provenance":null,"signed_commits_ratio":0.92,"scorecard_score":7.9,"scorecard_checks":{"Binary-Artifacts":10,"Branch-Protection":5,"CI-Tests":10,"CII-Best-Practices":5,"Code-Review":10,"Contributors":10,"Dangerous-Workflow":10,"Dependency-Update-Tool":10,"Fuzzing":10,"License":10,"Maintained":10,"Packaging":10,"Pinned-Dependencies":6,"SAST":9,"Security-Policy":10,"Signed-Releases":0,"Token-Permissions":10,"Vulnerabilities":0},"scorecard_scanned_at":"2026-07-11T03:00:14Z","slug":"agent-governance-toolkit","source_note":"","public_actions":null,"mcp_server_support":{"status":"implemented","confidence":"high","evidence":["README/docs explicitly mention an MCP server","Found MCP-related server path: agent-governance-antigravity-cli/assets/extensions/agt-global-policy/mcp/server.mjs","Found MCP-related server path: agent-governance-python/agent-mesh/examples/demo_mcp_server.py","Found MCP-related server test path: agent-governance-antigravity-cli/test/mcp-server.test.mjs"]},"external_service_dependencies":{"providers":["OpenAI"],"requires_api_keys":false,"confidence":"medium","evidence":["README/docs mention OpenAI"]},"tool_plugin_surface":{"plugin_system":"marketplace","tool_tags":["code"],"confidence":"high","evidence":["README/docs mention a marketplace plugin/integration surface","README/docs mention code capabilities"]},"package_provenance_drift":{"status":"match","confidence":"high","summary":"Published package metadata matches the tracked repo","evidence":["npm package '@microsoft/agent-governance-opencode' points to the tracked repo"]},"evidence_grade":"B","coverage_grade":"B","signal_coverage":0.6,"signal_types":3,"listing_status":"listed","display_listing_status":"listed","display_status_label":"Listed","has_warning":false,"warning_reasons":[],"license_spdx":"MIT","license_type":"open","license_override":"","trust_score":75.4,"trust_score_v2":75.4,"rank_v2":57,"rank_v2_delta":30,"trust_v2_adjustment":4.7,"trust_confidence":1.0,"trust_breakdown":{"safety":14.5,"identity":10.8,"transparency":15.2,"maintenance":19.9,"adoption":10.3},"trust_v2_breakdown":{"mcp":2.0,"external_dependencies":-0.0,"tool_plugin_surface":-1.3,"package_provenance_drift":4.0},"pending_signals":false},{"name":"mini-SWE-agent","repo":"SWE-agent/mini-swe-agent","display_repo":"","url":"https://github.com/SWE-agent/mini-swe-agent","rank":58,"previous_rank":58,"rank_delta":0,"stars":5696,"stars_fmt":"5.7k","forks":793,"forks_fmt":"793","last_push":"2026-07-06","days_ago":5,"weekly_commits":19,"commits_low_confidence":false,"score":76.6,"description":"The 100 line AI agent that solves GitHub issues or helps you in your command line. Radically simple, no huge configs, no","language":"Python","open_issues":13,"category":"Coding Agents","category_rank":10,"npm_package":"","crate_package":"","pypi_package":"mini-swe-agent","weekly_downloads":4166099,"dl_source":"pypi","hn_mentions_30d":null,"has_provenance":false,"npm_provenance":null,"pypi_provenance":false,"signed_commits_ratio":1.0,"scorecard_score":6.1,"scorecard_checks":{"Binary-Artifacts":10,"Branch-Protection":0,"CI-Tests":10,"CII-Best-Practices":0,"Code-Review":3,"Contributors":10,"Dangerous-Workflow":10,"Dependency-Update-Tool":10,"Fuzzing":0,"License":10,"Maintained":10,"Packaging":10,"Pinned-Dependencies":0,"SAST":0,"Security-Policy":10,"Signed-Releases":-1,"Token-Permissions":0,"Vulnerabilities":10},"scorecard_scanned_at":"2026-07-11T02:08:55Z","slug":"mini-swe-agent","source_note":"","public_actions":null,"mcp_server_support":{"status":"none","confidence":null,"evidence":[]},"external_service_dependencies":{"providers":["Amazon Bedrock","OpenAI"],"requires_api_keys":false,"confidence":"high","evidence":["Found OpenAI dependency 'openai' in pyproject.toml","Found Amazon Bedrock dependency 'boto3' in pyproject.toml"]},"tool_plugin_surface":{"plugin_system":"none","tool_tags":[],"confidence":null,"evidence":[]},"package_provenance_drift":{"status":"match","confidence":"high","summary":"Published package metadata matches the tracked repo","evidence":["pypi package 'mini-swe-agent' points to the tracked repo"]},"evidence_grade":"B","coverage_grade":"B","signal_coverage":0.6,"signal_types":3,"listing_status":"listed","display_listing_status":"listed","display_status_label":"Listed","has_warning":false,"warning_reasons":[],"license_spdx":"MIT","license_type":"open","license_override":"","trust_score":75.3,"trust_score_v2":75.3,"rank_v2":58,"rank_v2_delta":19,"trust_v2_adjustment":3.5,"trust_confidence":1.0,"trust_breakdown":{"safety":12.6,"identity":10.8,"transparency":13.7,"maintenance":16.9,"adoption":17.8},"trust_v2_breakdown":{"mcp":0.0,"external_dependencies":-0.5,"tool_plugin_surface":-0.0,"package_provenance_drift":4.0},"pending_signals":false},{"name":"Composio","repo":"composiohq/composio","display_repo":"","url":"https://github.com/ComposioHQ/composio","rank":59,"previous_rank":59,"rank_delta":0,"stars":29169,"stars_fmt":"29.2k","forks":4653,"forks_fmt":"4.7k","last_push":"2026-07-10","days_ago":1,"weekly_commits":165,"commits_low_confidence":false,"score":93.9,"description":"Composio powers 1000+ toolkits, tool search, context management, authentication, and a sandboxed workbench to help you b","language":"TypeScript","open_issues":30,"category":"Protocols & Tool Integration","category_rank":3,"npm_package":"composio-core","crate_package":"","pypi_package":"composio-core","weekly_downloads":103423,"dl_source":"npm+pypi","hn_mentions_30d":114,"has_provenance":false,"npm_provenance":false,"pypi_provenance":false,"signed_commits_ratio":0.87,"scorecard_score":6.7,"scorecard_checks":{"Binary-Artifacts":10,"Branch-Protection":5,"CI-Tests":9,"CII-Best-Practices":0,"Code-Review":3,"Contributors":10,"Dangerous-Workflow":10,"Dependency-Update-Tool":10,"Fuzzing":0,"License":10,"Maintained":10,"Packaging":10,"Pinned-Dependencies":7,"SAST":8,"Security-Policy":10,"Signed-Releases":0,"Token-Permissions":10,"Vulnerabilities":0},"scorecard_scanned_at":"2026-07-11T03:26:11Z","slug":"composio","source_note":"","public_actions":null,"mcp_server_support":{"status":"declared","confidence":"medium","evidence":["README/docs mention MCP support","Found MCP-related server docs path: docs/content/docs/migration-guide/mcp-servers-to-sessions.mdx","Found MCP-related server docs path: docs/public/images/troubleshooting/troubleshooting-mcp-server-url.png"]},"external_service_dependencies":{"providers":["Anthropic","Google Gemini","OpenAI"],"requires_api_keys":false,"confidence":"high","evidence":["README/docs mention OpenAI","Found OpenAI dependency 'openai' in package.json","README/docs mention Anthropic","Found Anthropic dependency 'anthropic' in package.json","README/docs mention Google Gemini","Found Google Gemini dependency '@google/genai' in docs/package.json"]},"tool_plugin_surface":{"plugin_system":"declared","tool_tags":["code","search"],"confidence":"high","evidence":["README/docs mention a declared plugin/integration surface","README/docs mention search capabilities","README/docs mention code capabilities"]},"package_provenance_drift":{"status":"partial","confidence":"medium","summary":"Some package metadata matches; some source metadata is missing","evidence":["npm package 'composio-core' does not expose a source repo URL","pypi package 'composio-core' points to the tracked repo"]},"evidence_grade":"B","coverage_grade":"A","signal_coverage":0.8,"signal_types":4,"listing_status":"listed","display_listing_status":"listed","display_status_label":"Listed","has_warning":false,"warning_reasons":[],"license_spdx":"MIT","license_type":"open","license_override":"","trust_score":75.1,"trust_score_v2":75.1,"rank_v2":59,"rank_v2_delta":-3,"trust_v2_adjustment":0.1,"trust_confidence":1.0,"trust_breakdown":{"safety":12.7,"identity":10.8,"transparency":14.2,"maintenance":19.9,"adoption":17.4},"trust_v2_breakdown":{"mcp":0.0,"external_dependencies":-1.0,"tool_plugin_surface":-0.9,"package_provenance_drift":2.0},"pending_signals":false},{"name":"AutoGen","repo":"microsoft/autogen","display_repo":"","url":"https://github.com/microsoft/autogen","rank":60,"previous_rank":60,"rank_delta":0,"stars":59647,"stars_fmt":"59.6k","forks":8979,"forks_fmt":"9.0k","last_push":"2026-04-15","days_ago":87,"weekly_commits":0,"commits_low_confidence":false,"score":60.2,"description":"A programming framework for agentic AI","language":"Python","open_issues":555,"category":"Agent Frameworks","category_rank":13,"npm_package":"","crate_package":"","pypi_package":"autogen-agentchat","weekly_downloads":306076,"dl_source":"pypi","hn_mentions_30d":2,"has_provenance":true,"npm_provenance":null,"pypi_provenance":true,"signed_commits_ratio":1.0,"scorecard_score":5.7,"scorecard_checks":{"Binary-Artifacts":10,"Branch-Protection":5,"CI-Tests":10,"CII-Best-Practices":0,"Code-Review":6,"Contributors":10,"Dangerous-Workflow":10,"Dependency-Update-Tool":10,"Fuzzing":0,"License":10,"Maintained":0,"Packaging":10,"Pinned-Dependencies":0,"SAST":10,"Security-Policy":10,"Signed-Releases":-1,"Token-Permissions":0,"Vulnerabilities":0},"scorecard_scanned_at":"2026-07-10T16:23:08Z","slug":"autogen","source_note":"","public_actions":null,"mcp_server_support":{"status":"implemented","confidence":"high","evidence":["README/docs explicitly mention an MCP server","Found MCP-related server test path: python/packages/autogen-ext/tests/mcp_server_comprehensive.py"]},"external_service_dependencies":{"providers":["OpenAI","Redis"],"requires_api_keys":true,"confidence":"high","evidence":["README/docs mention OpenAI","Found OpenAI dependency 'openai' in python/pyproject.toml","Found OpenAI credential/config marker 'OPENAI_API_KEY'","Found Redis dependency 'redis' in python/pyproject.toml"]},"tool_plugin_surface":{"plugin_system":"extension-based","tool_tags":["browser","code","database"],"confidence":"high","evidence":["README/docs mention a extension-based plugin/integration surface","README/docs mention browser capabilities","Found database dependency 'redis' in python/pyproject.toml","README/docs mention code capabilities"]},"package_provenance_drift":{"status":"unknown","confidence":"low","summary":"Package source metadata is missing or inconclusive","evidence":["pypi package 'autogen-agentchat' has a non-GitHub or unparseable source URL"]},"evidence_grade":"B","coverage_grade":"A","signal_coverage":0.8,"signal_types":4,"listing_status":"listed","display_listing_status":"listed","display_status_label":"Listed","has_warning":false,"warning_reasons":[],"license_spdx":"CC-BY-4.0","license_type":"open","license_override":"","trust_score":74.9,"trust_score_v2":74.9,"rank_v2":60,"rank_v2_delta":-9,"trust_v2_adjustment":-1.0,"trust_confidence":1.0,"trust_breakdown":{"safety":19.6,"identity":18.0,"transparency":13.3,"maintenance":6.2,"adoption":18.8},"trust_v2_breakdown":{"mcp":2.0,"external_dependencies":-1.5,"tool_plugin_surface":-1.5,"package_provenance_drift":0.0},"pending_signals":false},{"name":"FAISS","repo":"facebookresearch/faiss","display_repo":"","url":"https://github.com/facebookresearch/faiss","rank":61,"previous_rank":61,"rank_delta":0,"stars":40493,"stars_fmt":"40.5k","forks":4448,"forks_fmt":"4.4k","last_push":"2026-07-11","days_ago":0,"weekly_commits":73,"commits_low_confidence":false,"score":92.9,"description":"A library for efficient similarity search and clustering of dense vectors.","language":"C++","open_issues":220,"category":"Memory & Knowledge","category_rank":8,"npm_package":"","crate_package":"","pypi_package":"faiss-cpu","weekly_downloads":3852879,"dl_source":"pypi","hn_mentions_30d":38,"has_provenance":false,"npm_provenance":null,"pypi_provenance":false,"signed_commits_ratio":0.0,"scorecard_score":6.1,"scorecard_checks":{"Binary-Artifacts":10,"Branch-Protection":3,"CI-Tests":-1,"CII-Best-Practices":0,"Code-Review":10,"Contributors":10,"Dangerous-Workflow":10,"Dependency-Update-Tool":0,"Fuzzing":0,"License":10,"Maintained":10,"Packaging":10,"Pinned-Dependencies":3,"SAST":0,"Security-Policy":9,"Signed-Releases":-1,"Token-Permissions":0,"Vulnerabilities":10},"scorecard_scanned_at":"2026-07-10T16:11:58Z","slug":"faiss","source_note":"","public_actions":null,"mcp_server_support":{"status":"none","confidence":null,"evidence":[]},"external_service_dependencies":{"providers":[],"requires_api_keys":false,"confidence":null,"evidence":[]},"tool_plugin_surface":{"plugin_system":"none","tool_tags":["code","search"],"confidence":"high","evidence":["README/docs mention search capabilities","README/docs mention code capabilities"]},"package_provenance_drift":{"status":"match","confidence":"high","summary":"Published package metadata matches the tracked repo","evidence":["pypi package 'faiss-cpu' points to the tracked repo"]},"evidence_grade":"B","coverage_grade":"A","signal_coverage":0.8,"signal_types":4,"listing_status":"listed","display_listing_status":"listed","display_status_label":"Listed","has_warning":false,"warning_reasons":[],"license_spdx":"MIT","license_type":"open","license_override":"","trust_score":74.8,"trust_score_v2":74.8,"rank_v2":61,"rank_v2_delta":20,"trust_v2_adjustment":3.4,"trust_confidence":1.0,"trust_breakdown":{"safety":7.6,"identity":10.8,"transparency":13.7,"maintenance":19.5,"adoption":19.8},"trust_v2_breakdown":{"mcp":0.0,"external_dependencies":-0.0,"tool_plugin_surface":-0.6,"package_provenance_drift":4.0},"pending_signals":false},{"name":"Promptfoo","repo":"promptfoo/promptfoo","display_repo":"","url":"https://github.com/promptfoo/promptfoo","rank":62,"previous_rank":62,"rank_delta":0,"stars":23138,"stars_fmt":"23.1k","forks":2068,"forks_fmt":"2.1k","last_push":"2026-07-11","days_ago":0,"weekly_commits":229,"commits_low_confidence":false,"score":91.6,"description":"Test your prompts, agents, and RAGs. Red teaming/pentesting/vulnerability scanning for AI. Compare performance of GPT, C","language":"TypeScript","open_issues":94,"category":"Observability & Evaluation","category_rank":4,"npm_package":"promptfoo","crate_package":"","pypi_package":"","weekly_downloads":384010,"dl_source":"npm","hn_mentions_30d":6,"has_provenance":true,"npm_provenance":true,"pypi_provenance":null,"signed_commits_ratio":null,"scorecard_score":null,"scorecard_checks":{},"scorecard_scanned_at":null,"slug":"promptfoo","source_note":"","public_actions":null,"mcp_server_support":{"status":"implemented","confidence":"high","evidence":["Found MCP-related server path: .cursor/mcp.json","Found MCP-related server path: examples/openai-deep-research/mcp-server-example.md","Found MCP-related server docs path: site/docs/integrations/mcp-server.md","Found MCP-related server test path: test/commands/mcp/server.test.ts"]},"external_service_dependencies":{"providers":["Amazon Bedrock","Anthropic","Google Gemini","OpenAI"],"requires_api_keys":true,"confidence":"high","evidence":["README/docs mention OpenAI","Found OpenAI dependency 'openai' in package.json","Found OpenAI credential/config marker 'OPENAI_API_KEY'","README/docs mention Anthropic","Found Anthropic dependency 'anthropic' in package.json","README/docs mention Google Gemini"]},"tool_plugin_surface":{"plugin_system":"declared","tool_tags":["browser","code","shell"],"confidence":"high","evidence":["README/docs mention a declared plugin/integration surface","Found browser dependency 'playwright' in package.json","Found shell dependency 'execa' in package.json","README/docs mention code capabilities"]},"package_provenance_drift":{"status":"match","confidence":"high","summary":"Published package metadata matches the tracked repo","evidence":["npm package 'promptfoo' points to the tracked repo"]},"evidence_grade":"B","coverage_grade":"A","signal_coverage":0.8,"signal_types":4,"listing_status":"listed","display_listing_status":"listed","display_status_label":"Listed","has_warning":false,"warning_reasons":[],"license_spdx":"MIT","license_type":"open","license_override":"","trust_score":74.2,"trust_score_v2":74.2,"rank_v2":62,"rank_v2_delta":12,"trust_v2_adjustment":2.3,"trust_confidence":1.0,"trust_breakdown":{"safety":7.5,"identity":18.0,"transparency":8.5,"maintenance":20.0,"adoption":17.9},"trust_v2_breakdown":{"mcp":2.0,"external_dependencies":-2.5,"tool_plugin_surface":-1.2,"package_provenance_drift":4.0},"pending_signals":false},{"name":"Firecrawl","repo":"firecrawl/firecrawl","display_repo":"","url":"https://github.com/firecrawl/firecrawl","rank":63,"previous_rank":63,"rank_delta":0,"stars":148988,"stars_fmt":"149.0k","forks":8523,"forks_fmt":"8.5k","last_push":"2026-07-11","days_ago":0,"weekly_commits":257,"commits_low_confidence":false,"score":98.3,"description":"The API to search, scrape, and interact with the web at scale. 🔥","language":"TypeScript","open_issues":44,"category":"Research & Data","category_rank":4,"npm_package":"@mendable/firecrawl-js","crate_package":"","pypi_package":"firecrawl-py","weekly_downloads":2171194,"dl_source":"npm+pypi","hn_mentions_30d":null,"has_provenance":false,"npm_provenance":false,"pypi_provenance":false,"signed_commits_ratio":0.65,"scorecard_score":5.6,"scorecard_checks":{"Binary-Artifacts":9,"Branch-Protection":6,"CI-Tests":10,"CII-Best-Practices":0,"Code-Review":6,"Contributors":10,"Dangerous-Workflow":10,"Dependency-Update-Tool":10,"Fuzzing":0,"License":10,"Maintained":10,"Packaging":10,"Pinned-Dependencies":3,"SAST":0,"Security-Policy":0,"Signed-Releases":-1,"Token-Permissions":0,"Vulnerabilities":0},"scorecard_scanned_at":"2026-07-11T04:06:49Z","slug":"firecrawl","source_note":"","public_actions":null,"mcp_server_support":{"status":"none","confidence":null,"evidence":[]},"external_service_dependencies":{"providers":["Anthropic","Firecrawl","OpenAI","Postgres","Redis"],"requires_api_keys":true,"confidence":"high","evidence":["Found OpenAI dependency 'openai' in apps/api/package.json","Found Anthropic dependency 'anthropic' in apps/api/package.json","README/docs mention Firecrawl","Found Firecrawl dependency 'firecrawl' in apps/api/package.json","Found Firecrawl credential/config marker 'FIRECRAWL_API_KEY'","Found Postgres dependency 'pg' in apps/api/package.json"]},"tool_plugin_surface":{"plugin_system":"declared","tool_tags":["code","database","search"],"confidence":"high","evidence":["README/docs mention a declared plugin/integration surface","README/docs mention search capabilities","Found database dependency 'pg' in apps/api/package.json","README/docs mention code capabilities"]},"package_provenance_drift":{"status":"match","confidence":"high","summary":"Published package metadata matches the tracked repo","evidence":["npm package '@mendable/firecrawl-js' points to the tracked repo","pypi package 'firecrawl-py' points to the tracked repo"]},"evidence_grade":"B","coverage_grade":"B","signal_coverage":0.6,"signal_types":3,"listing_status":"listed","display_listing_status":"listed","display_status_label":"Listed","has_warning":false,"warning_reasons":[],"license_spdx":"AGPL-3.0","license_type":"open","license_override":"","trust_score":74.1,"trust_score_v2":74.1,"rank_v2":63,"rank_v2_delta":-2,"trust_v2_adjustment":-0.2,"trust_confidence":1.0,"trust_breakdown":{"safety":10.2,"identity":10.8,"transparency":13.3,"maintenance":20.0,"adoption":20.0},"trust_v2_breakdown":{"mcp":0.0,"external_dependencies":-3.0,"tool_plugin_surface":-1.2,"package_provenance_drift":4.0},"pending_signals":false},{"name":"Flowise","repo":"FlowiseAI/Flowise","display_repo":"","url":"https://github.com/FlowiseAI/Flowise","rank":64,"previous_rank":64,"rank_delta":0,"stars":54510,"stars_fmt":"54.5k","forks":24707,"forks_fmt":"24.7k","last_push":"2026-07-06","days_ago":5,"weekly_commits":11,"commits_low_confidence":false,"score":86.2,"description":"Build AI Agents, Visually","language":"TypeScript","open_issues":684,"category":"Workflow Platforms","category_rank":6,"npm_package":"flowise","crate_package":"","pypi_package":"","weekly_downloads":6484312,"dl_source":"npm+docker","hn_mentions_30d":null,"has_provenance":false,"npm_provenance":false,"pypi_provenance":null,"signed_commits_ratio":1.0,"scorecard_score":6.8,"scorecard_checks":{"Binary-Artifacts":10,"Branch-Protection":6,"CI-Tests":9,"CII-Best-Practices":0,"Code-Review":10,"Contributors":10,"Dangerous-Workflow":10,"Dependency-Update-Tool":10,"Fuzzing":0,"License":9,"Maintained":10,"Packaging":10,"Pinned-Dependencies":0,"SAST":9,"Security-Policy":10,"Signed-Releases":-1,"Token-Permissions":0,"Vulnerabilities":0},"scorecard_scanned_at":"2026-07-11T01:25:02Z","slug":"flowise","source_note":"","public_actions":null,"mcp_server_support":{"status":"implemented","confidence":"high","evidence":["Found MCP-related server path: packages/components/nodes/tools/MCP/CustomMcpServerTool/CustomMcpServerTool.ts","Found MCP-related server path: packages/server/src/controllers/custom-mcp-servers/index.ts","Found MCP-related server test path: packages/server/src/controllers/custom-mcp-servers/index.test.ts","Found MCP-related server test path: packages/server/src/services/custom-mcp-servers/index.test.ts"]},"external_service_dependencies":{"providers":["Anthropic","OpenAI","Postgres","Qdrant","Redis"],"requires_api_keys":false,"confidence":"high","evidence":["Found OpenAI dependency 'openai' in package.json","Found Anthropic dependency 'anthropic' in package.json","Found Qdrant dependency 'qdrant' in package.json","Found Postgres dependency 'pg' in packages/server/package.json","Found Redis dependency 'redis' in packages/server/package.json"]},"tool_plugin_surface":{"plugin_system":"declared","tool_tags":["code","database"],"confidence":"high","evidence":["README/docs mention a declared plugin/integration surface","Found database dependency 'qdrant' in package.json","README/docs mention code capabilities"]},"package_provenance_drift":{"status":"unknown","confidence":"low","summary":"Package source metadata is missing or inconclusive","evidence":["npm package 'flowise' has a non-GitHub or unparseable source URL"]},"evidence_grade":"B","coverage_grade":"B","signal_coverage":0.6,"signal_types":3,"listing_status":"listed","display_listing_status":"listed","display_status_label":"Listed","has_warning":false,"warning_reasons":[],"license_spdx":"NOASSERTION","license_type":"open","license_override":"","trust_score":73.7,"trust_score_v2":73.7,"rank_v2":64,"rank_v2_delta":-4,"trust_v2_adjustment":-0.9,"trust_confidence":1.0,"trust_breakdown":{"safety":13.5,"identity":10.8,"transparency":14.3,"maintenance":16.0,"adoption":20.0},"trust_v2_breakdown":{"mcp":2.0,"external_dependencies":-2.0,"tool_plugin_surface":-0.9,"package_provenance_drift":0.0},"pending_signals":false},{"name":"Open Interpreter","repo":"openinterpreter/openinterpreter","display_repo":"","url":"https://github.com/openinterpreter/openinterpreter","rank":65,"previous_rank":65,"rank_delta":0,"stars":64335,"stars_fmt":"64.3k","forks":5607,"forks_fmt":"5.6k","last_push":"2026-07-07","days_ago":4,"weekly_commits":678,"commits_low_confidence":false,"score":95.7,"description":"A lightweight coding agent for open models like Deepseek, Kimi, and Qwen","language":"Rust","open_issues":267,"category":"Coding Agents","category_rank":11,"npm_package":"","crate_package":"","pypi_package":"open-interpreter","weekly_downloads":53923,"dl_source":"pypi","hn_mentions_30d":0,"has_provenance":false,"npm_provenance":null,"pypi_provenance":false,"signed_commits_ratio":0.89,"scorecard_score":5.0,"scorecard_checks":{"Binary-Artifacts":10,"Branch-Protection":3,"CI-Tests":-1,"CII-Best-Practices":0,"Code-Review":0,"Contributors":10,"Dangerous-Workflow":10,"Dependency-Update-Tool":10,"Fuzzing":0,"License":10,"Maintained":10,"Packaging":-1,"Pinned-Dependencies":8,"SAST":0,"Security-Policy":10,"Signed-Releases":0,"Token-Permissions":0,"Vulnerabilities":0},"scorecard_scanned_at":"2026-07-11T04:03:45Z","slug":"open-interpreter","source_note":"","public_actions":null,"mcp_server_support":{"status":"implemented","confidence":"high","evidence":["Found MCP-related server path: codex-rs/mcp-server/BUILD.bazel","Found MCP-related server path: codex-rs/mcp-server/Cargo.toml","Found MCP-related server test path: codex-rs/app-server/tests/suite/v2/mcp_server_elicitation.rs","Found MCP-related server test path: codex-rs/app-server/tests/suite/v2/mcp_server_status.rs"]},"external_service_dependencies":{"providers":["OpenAI"],"requires_api_keys":false,"confidence":"high","evidence":["Found OpenAI dependency 'openai' in codex-cli/package.json","README/docs also mention OpenAI"]},"tool_plugin_surface":{"plugin_system":"declared","tool_tags":[],"confidence":"medium","evidence":["Found declared path: codex-rs/core-plugins/BUILD.bazel"]},"package_provenance_drift":{"status":"unknown","confidence":"low","summary":"Package source metadata is missing or inconclusive","evidence":["pypi package 'open-interpreter' has a non-GitHub or unparseable source URL"]},"evidence_grade":"B","coverage_grade":"A","signal_coverage":0.8,"signal_types":4,"listing_status":"listed","display_listing_status":"listed","display_status_label":"Listed","has_warning":false,"warning_reasons":[],"license_spdx":"Apache-2.0","license_type":"open","license_override":"","trust_score":73.5,"trust_score_v2":73.5,"rank_v2":65,"rank_v2_delta":10,"trust_v2_adjustment":1.7,"trust_confidence":1.0,"trust_breakdown":{"safety":10.7,"identity":10.8,"transparency":12.8,"maintenance":19.7,"adoption":17.8},"trust_v2_breakdown":{"mcp":2.0,"external_dependencies":-0.0,"tool_plugin_surface":-0.3,"package_provenance_drift":0.0},"pending_signals":false},{"name":"OpenHands","repo":"OpenHands/OpenHands","display_repo":"","url":"https://github.com/OpenHands/OpenHands","rank":66,"previous_rank":66,"rank_delta":0,"stars":80400,"stars_fmt":"80.4k","forks":10259,"forks_fmt":"10.3k","last_push":"2026-07-10","days_ago":1,"weekly_commits":189,"commits_low_confidence":false,"score":98.1,"description":"🙌 OpenHands: AI-Driven Development","language":"Python","open_issues":139,"category":"Coding Agents","category_rank":12,"npm_package":"","crate_package":"","pypi_package":"openhands-ai","weekly_downloads":2795435,"dl_source":"pypi","hn_mentions_30d":1,"has_provenance":false,"npm_provenance":null,"pypi_provenance":false,"signed_commits_ratio":null,"scorecard_score":5.9,"scorecard_checks":{"Binary-Artifacts":10,"Branch-Protection":8,"CI-Tests":10,"CII-Best-Practices":0,"Code-Review":10,"Contributors":10,"Dangerous-Workflow":10,"Dependency-Update-Tool":10,"Fuzzing":0,"License":9,"Maintained":10,"Packaging":-1,"Pinned-Dependencies":2,"SAST":0,"Security-Policy":0,"Signed-Releases":-1,"Token-Permissions":0,"Vulnerabilities":0},"scorecard_scanned_at":"2026-07-11T02:10:12Z","slug":"openhands","source_note":"","public_actions":{"actions_30d":150,"actions_30d_merged":99,"actions_30d_by_repo":[{"repo":"IlarionDossouyovo/E-Sim","count":4},{"repo":"farinhahelder-hue/heldonica","count":1}]},"mcp_server_support":{"status":"implemented","confidence":"high","evidence":["Found MCP-related server path: frontend/src/components/features/settings/mcp-settings/mcp-server-form.tsx","Found MCP-related server path: frontend/src/components/features/settings/mcp-settings/mcp-server-list-item.tsx","Found MCP-related server test path: frontend/__tests__/components/features/settings/mcp-settings/mcp-server-form.validation.test.tsx","Found MCP-related server test path: frontend/__tests__/components/features/settings/mcp-settings/mcp-server-list.test.tsx"]},"external_service_dependencies":{"providers":["Amazon Bedrock","Anthropic","E2B","Google Gemini","OpenAI","Postgres","Redis"],"requires_api_keys":false,"confidence":"high","evidence":["Found OpenAI dependency 'openai' in pyproject.toml","Found Anthropic dependency 'anthropic' in pyproject.toml","README/docs mention Google Gemini","Found Amazon Bedrock dependency 'boto3' in pyproject.toml","Found E2B dependency 'e2b' in pyproject.toml","Found Postgres dependency 'pg' in pyproject.toml"]},"tool_plugin_surface":{"plugin_system":"none","tool_tags":["browser","code","database","filesystem","shell"],"confidence":"high","evidence":["Found browser dependency 'playwright' in pyproject.toml","README/docs mention shell capabilities","README/docs mention filesystem capabilities","Found database dependency 'pg' in pyproject.toml","README/docs mention code capabilities"]},"package_provenance_drift":{"status":"match","confidence":"high","summary":"Published package metadata matches the tracked repo","evidence":["pypi package 'openhands-ai' points to the tracked repo"]},"evidence_grade":"B","coverage_grade":"A","signal_coverage":1.0,"signal_types":5,"listing_status":"listed","display_listing_status":"listed","display_status_label":"Listed","has_warning":false,"warning_reasons":[],"license_spdx":"NOASSERTION","license_type":"open","license_override":"","trust_score":73.1,"trust_score_v2":73.1,"rank_v2":66,"rank_v2_delta":13,"trust_v2_adjustment":1.5,"trust_confidence":1.0,"trust_breakdown":{"safety":7.4,"identity":10.8,"transparency":13.5,"maintenance":19.9,"adoption":20.0},"trust_v2_breakdown":{"mcp":2.0,"external_dependencies":-3.0,"tool_plugin_surface":-1.5,"package_provenance_drift":4.0},"pending_signals":false},{"name":"LangWatch","repo":"langwatch/langwatch","display_repo":"","url":"https://github.com/langwatch/langwatch","rank":67,"previous_rank":67,"rank_delta":0,"stars":3360,"stars_fmt":"3.4k","forks":328,"forks_fmt":"328","last_push":"2026-07-11","days_ago":0,"weekly_commits":433,"commits_low_confidence":false,"score":82.9,"description":"The platform for LLM evaluations and AI agent testing","language":"TypeScript","open_issues":527,"category":"Observability & Evaluation","category_rank":5,"npm_package":"@langwatch/server","crate_package":"","pypi_package":"langwatch","weekly_downloads":88342,"dl_source":"npm+pypi","hn_mentions_30d":1,"has_provenance":true,"npm_provenance":true,"pypi_provenance":false,"signed_commits_ratio":0.89,"scorecard_score":null,"scorecard_checks":{},"scorecard_scanned_at":null,"slug":"langwatch","source_note":"","public_actions":null,"mcp_server_support":{"status":"implemented","confidence":"high","evidence":["Found MCP-related server path: assets/mcp-server/cursor-example.png","Found MCP-related server path: langwatch/scripts/build-mcp-server.sh","Found MCP-related server test path: mcp-server/src/__tests__/all-tools.integration.test.ts","Found MCP-related server test path: mcp-server/src/__tests__/config.unit.test.ts"]},"external_service_dependencies":{"providers":["Amazon Bedrock","Anthropic","OpenAI","Postgres","Redis"],"requires_api_keys":true,"confidence":"high","evidence":["README/docs mention OpenAI","Found OpenAI dependency 'openai' in skills/package.json","README/docs mention Anthropic","Found Anthropic dependency 'anthropic' in skills/package.json","Found Amazon Bedrock dependency 'bedrock' in langwatch/package.json","Found Amazon Bedrock credential/config marker 'AWS_ACCESS_KEY_ID'"]},"tool_plugin_surface":{"plugin_system":"extension-based","tool_tags":["browser","code","database","shell"],"confidence":"high","evidence":["README/docs mention a extension-based plugin/integration surface","Found browser dependency 'playwright' in langwatch/package.json","README/docs mention shell capabilities","README/docs mention database capabilities","README/docs mention code capabilities"]},"package_provenance_drift":{"status":"partial","confidence":"medium","summary":"Some package metadata matches; some source metadata is missing","evidence":["npm package '@langwatch/server' points to the tracked repo","pypi package 'langwatch' has a non-GitHub or unparseable source URL"]},"evidence_grade":"B","coverage_grade":"A","signal_coverage":0.8,"signal_types":4,"listing_status":"listed","display_listing_status":"listed","display_status_label":"Listed","has_warning":false,"warning_reasons":[],"license_spdx":"Apache-2.0","license_type":"open","license_override":"","trust_score":72.7,"trust_score_v2":72.7,"rank_v2":67,"rank_v2_delta":-3,"trust_v2_adjustment":-0.8,"trust_confidence":1.0,"trust_breakdown":{"safety":11.9,"identity":18.0,"transparency":8.5,"maintenance":20.0,"adoption":15.1},"trust_v2_breakdown":{"mcp":2.0,"external_dependencies":-3.0,"tool_plugin_surface":-1.8,"package_provenance_drift":2.0},"pending_signals":false},{"name":"DSPy","repo":"stanfordnlp/dspy","display_repo":"","url":"https://github.com/stanfordnlp/dspy","rank":68,"previous_rank":68,"rank_delta":0,"stars":36031,"stars_fmt":"36.0k","forks":3082,"forks_fmt":"3.1k","last_push":"2026-07-10","days_ago":1,"weekly_commits":14,"commits_low_confidence":false,"score":83.2,"description":"DSPy: The framework for programming—not prompting—language models","language":"Python","open_issues":297,"category":"Agent Frameworks","category_rank":14,"npm_package":"","crate_package":"","pypi_package":"dspy","weekly_downloads":1315847,"dl_source":"pypi","hn_mentions_30d":78,"has_provenance":false,"npm_provenance":null,"pypi_provenance":false,"signed_commits_ratio":0.98,"scorecard_score":7.2,"scorecard_checks":{"Binary-Artifacts":10,"Branch-Protection":0,"CI-Tests":8,"CII-Best-Practices":0,"Code-Review":8,"Contributors":10,"Dangerous-Workflow":10,"Dependency-Update-Tool":10,"Fuzzing":0,"License":10,"Maintained":10,"Packaging":10,"Pinned-Dependencies":6,"SAST":8,"Security-Policy":10,"Signed-Releases":-1,"Token-Permissions":10,"Vulnerabilities":0},"scorecard_scanned_at":"2026-07-10T17:23:06Z","slug":"dspy","source_note":"","public_actions":null,"mcp_server_support":{"status":"declared","confidence":"medium","evidence":["Found MCP-related server test path: tests/utils/resources/mcp_server.py"]},"external_service_dependencies":{"providers":["Anthropic","OpenAI","Postgres","Weaviate"],"requires_api_keys":false,"confidence":"high","evidence":["Found OpenAI dependency 'openai' in pyproject.toml","Found Anthropic dependency 'anthropic' in pyproject.toml","Found Weaviate dependency 'weaviate' in pyproject.toml","Found Postgres dependency 'pg' in pyproject.toml"]},"tool_plugin_surface":{"plugin_system":"none","tool_tags":["code","database","search","shell"],"confidence":"high","evidence":["Found shell dependency 'pty' in pyproject.toml","README/docs mention search capabilities","Found database dependency 'pg' in pyproject.toml","README/docs mention code capabilities"]},"package_provenance_drift":{"status":"unknown","confidence":"low","summary":"Package source metadata is missing or inconclusive","evidence":["pypi package 'dspy' has a non-GitHub or unparseable source URL"]},"evidence_grade":"B","coverage_grade":"A","signal_coverage":0.8,"signal_types":4,"listing_status":"listed","display_listing_status":"listed","display_status_label":"Listed","has_warning":false,"warning_reasons":[],"license_spdx":"MIT","license_type":"open","license_override":"","trust_score":72.3,"trust_score_v2":72.3,"rank_v2":68,"rank_v2_delta":-11,"trust_v2_adjustment":-2.7,"trust_confidence":1.0,"trust_breakdown":{"safety":13.9,"identity":10.8,"transparency":14.6,"maintenance":16.6,"adoption":19.1},"trust_v2_breakdown":{"mcp":0.0,"external_dependencies":-1.5,"tool_plugin_surface":-1.2,"package_provenance_drift":0.0},"pending_signals":false},{"name":"Browser Use","repo":"browser-use/browser-use","display_repo":"","url":"https://github.com/browser-use/browser-use","rank":69,"previous_rank":70,"rank_delta":1,"stars":104159,"stars_fmt":"104.2k","forks":11485,"forks_fmt":"11.5k","last_push":"2026-07-11","days_ago":0,"weekly_commits":126,"commits_low_confidence":false,"score":98.9,"description":"🌐 Make websites accessible for AI agents. Automate tasks online with ease.","language":"Python","open_issues":79,"category":"Browser & Computer Use","category_rank":4,"npm_package":"","crate_package":"","pypi_package":"browser-use","weekly_downloads":10856221,"dl_source":"pypi","hn_mentions_30d":3,"has_provenance":false,"npm_provenance":null,"pypi_provenance":false,"signed_commits_ratio":0.39,"scorecard_score":4.8,"scorecard_checks":{"Binary-Artifacts":10,"Branch-Protection":3,"CI-Tests":10,"CII-Best-Practices":0,"Code-Review":0,"Contributors":10,"Dangerous-Workflow":0,"Dependency-Update-Tool":0,"Fuzzing":0,"License":10,"Maintained":10,"Packaging":10,"Pinned-Dependencies":0,"SAST":10,"Security-Policy":10,"Signed-Releases":-1,"Token-Permissions":0,"Vulnerabilities":10},"scorecard_scanned_at":"2026-07-10T08:48:42Z","slug":"browser-use","source_note":"","public_actions":null,"mcp_server_support":{"status":"declared","confidence":"medium","evidence":["Found MCP-related server path: browser_use/mcp/server.py"]},"external_service_dependencies":{"providers":["Amazon Bedrock","Anthropic","Browserbase","Google Gemini","OpenAI"],"requires_api_keys":true,"confidence":"high","evidence":["Found OpenAI dependency 'openai' in pyproject.toml","README/docs also mention OpenAI","Found Anthropic dependency 'anthropic' in pyproject.toml","Found Anthropic credential/config marker 'ANTHROPIC_API_KEY'","README/docs also mention Anthropic","Found Google Gemini credential/config marker 'GOOGLE_API_KEY'"]},"tool_plugin_surface":{"plugin_system":"declared","tool_tags":[],"confidence":"medium","evidence":["README/docs mention a declared plugin/integration surface"]},"package_provenance_drift":{"status":"match","confidence":"high","summary":"Published package metadata matches the tracked repo","evidence":["pypi package 'browser-use' points to the tracked repo"]},"evidence_grade":"B","coverage_grade":"A","signal_coverage":0.8,"signal_types":4,"listing_status":"listed","display_listing_status":"listed","display_status_label":"Listed","has_warning":false,"warning_reasons":[],"license_spdx":"MIT","license_type":"open","license_override":"","trust_score":72.1,"trust_score_v2":72.1,"rank_v2":69,"rank_v2_delta":11,"trust_v2_adjustment":0.7,"trust_confidence":1.0,"trust_breakdown":{"safety":8.0,"identity":10.8,"transparency":12.6,"maintenance":20.0,"adoption":20.0},"trust_v2_breakdown":{"mcp":0.0,"external_dependencies":-3.0,"tool_plugin_surface":-0.3,"package_provenance_drift":4.0},"pending_signals":false},{"name":"Evidently","repo":"evidentlyai/evidently","display_repo":"","url":"https://github.com/evidentlyai/evidently","rank":70,"previous_rank":69,"rank_delta":-1,"stars":7680,"stars_fmt":"7.7k","forks":875,"forks_fmt":"875","last_push":"2026-05-02","days_ago":70,"weekly_commits":0,"commits_low_confidence":false,"score":52.4,"description":"Evidently is ​​an open-source ML and LLM observability framework. Evaluate, test, and monitor any AI-powered system or d","language":"Jupyter Notebook","open_issues":234,"category":"Observability & Evaluation","category_rank":6,"npm_package":"","crate_package":"","pypi_package":"evidently","weekly_downloads":296228,"dl_source":"pypi","hn_mentions_30d":6,"has_provenance":true,"npm_provenance":null,"pypi_provenance":true,"signed_commits_ratio":0.9,"scorecard_score":3.5,"scorecard_checks":{"Binary-Artifacts":10,"Branch-Protection":3,"CI-Tests":9,"CII-Best-Practices":0,"Code-Review":3,"Contributors":10,"Dangerous-Workflow":10,"Dependency-Update-Tool":0,"Fuzzing":0,"License":10,"Maintained":4,"Packaging":10,"Pinned-Dependencies":0,"SAST":0,"Security-Policy":0,"Signed-Releases":0,"Token-Permissions":0,"Vulnerabilities":0},"scorecard_scanned_at":"2026-07-10T09:58:51Z","slug":"evidently","source_note":"","public_actions":null,"mcp_server_support":{"status":"none","confidence":null,"evidence":[]},"external_service_dependencies":{"providers":["OpenAI","Postgres"],"requires_api_keys":false,"confidence":"high","evidence":["Found OpenAI dependency 'openai' in pyproject.toml","Found Postgres dependency 'psycopg' in pyproject.toml"]},"tool_plugin_surface":{"plugin_system":"none","tool_tags":["browser","code","database","search"],"confidence":"high","evidence":["Found browser dependency 'playwright' in ui/service/package.json","README/docs mention search capabilities","Found database dependency 'pg' in pyproject.toml","README/docs mention code capabilities"]},"package_provenance_drift":{"status":"match","confidence":"high","summary":"Published package metadata matches the tracked repo","evidence":["pypi package 'evidently' points to the tracked repo"]},"evidence_grade":"B","coverage_grade":"A","signal_coverage":0.8,"signal_types":4,"listing_status":"listed","display_listing_status":"listed","display_status_label":"Listed","has_warning":false,"warning_reasons":[],"license_spdx":"Apache-2.0","license_type":"open","license_override":"","trust_score":72.1,"trust_score_v2":72.1,"rank_v2":70,"rank_v2_delta":21,"trust_v2_adjustment":2.3,"trust_confidence":1.0,"trust_breakdown":{"safety":16.4,"identity":18.0,"transparency":11.5,"maintenance":7.3,"adoption":16.6},"trust_v2_breakdown":{"mcp":0.0,"external_dependencies":-0.5,"tool_plugin_surface":-1.2,"package_provenance_drift":4.0},"pending_signals":false},{"name":"Chrome DevTools MCP","repo":"ChromeDevTools/chrome-devtools-mcp","display_repo":"","url":"https://github.com/ChromeDevTools/chrome-devtools-mcp","rank":71,"previous_rank":71,"rank_delta":0,"stars":46644,"stars_fmt":"46.6k","forks":3181,"forks_fmt":"3.2k","last_push":"2026-07-10","days_ago":1,"weekly_commits":71,"commits_low_confidence":false,"score":92.5,"description":"Chrome DevTools for coding agents","language":"TypeScript","open_issues":67,"category":"Protocols & Tool Integration","category_rank":4,"npm_package":"","crate_package":"","pypi_package":"","weekly_downloads":null,"dl_source":"","hn_mentions_30d":null,"has_provenance":false,"npm_provenance":null,"pypi_provenance":null,"signed_commits_ratio":1.0,"scorecard_score":8.3,"scorecard_checks":{"Binary-Artifacts":10,"Branch-Protection":5,"CI-Tests":10,"CII-Best-Practices":0,"Code-Review":10,"Contributors":10,"Dangerous-Workflow":10,"Dependency-Update-Tool":10,"Fuzzing":0,"License":10,"Maintained":10,"Packaging":10,"Pinned-Dependencies":7,"SAST":6,"Security-Policy":10,"Signed-Releases":-1,"Token-Permissions":9,"Vulnerabilities":9},"scorecard_scanned_at":"2026-07-10T17:26:38Z","slug":"chrome-devtools-mcp","source_note":"","public_actions":null,"mcp_server_support":{"status":"implemented","confidence":"high","evidence":["README/docs explicitly mention an MCP server","Found MCP dependency '@modelcontextprotocol/sdk' in package.json"]},"external_service_dependencies":{"providers":["Google Gemini","OpenAI"],"requires_api_keys":false,"confidence":"high","evidence":["README/docs mention OpenAI","README/docs mention Google Gemini","Found Google Gemini dependency '@google/genai' in package.json"]},"tool_plugin_surface":{"plugin_system":"marketplace","tool_tags":["browser","code","search"],"confidence":"high","evidence":["README/docs mention a marketplace plugin/integration surface","README/docs mention browser capabilities","README/docs mention search capabilities","README/docs mention code capabilities"]},"package_provenance_drift":{"status":"not_applicable","confidence":null,"summary":"No package source configured","evidence":[]},"evidence_grade":"B","coverage_grade":"C","signal_coverage":0.4,"signal_types":2,"listing_status":"listed","display_listing_status":"listed","display_status_label":"Listed","has_warning":false,"warning_reasons":[],"license_spdx":"Apache-2.0","license_type":"open","license_override":"","trust_score":71.9,"trust_score_v2":71.9,"rank_v2":71,"rank_v2_delta":0,"trust_v2_adjustment":-0.4,"trust_confidence":1.0,"trust_breakdown":{"safety":15.4,"identity":10.8,"transparency":15.6,"maintenance":19.3,"adoption":11.2},"trust_v2_breakdown":{"mcp":2.0,"external_dependencies":-0.5,"tool_plugin_surface":-1.9,"package_provenance_drift":0.0},"pending_signals":false},{"name":"GPT Researcher","repo":"assafelovic/gpt-researcher","display_repo":"","url":"https://github.com/assafelovic/gpt-researcher","rank":72,"previous_rank":72,"rank_delta":0,"stars":28245,"stars_fmt":"28.2k","forks":3817,"forks_fmt":"3.8k","last_push":"2026-07-05","days_ago":6,"weekly_commits":19,"commits_low_confidence":false,"score":83.9,"description":"An autonomous agent that conducts deep research on any data using any LLM providers","language":"Python","open_issues":137,"category":"Research & Data","category_rank":5,"npm_package":"","crate_package":"","pypi_package":"gpt-researcher","weekly_downloads":20699,"dl_source":"pypi","hn_mentions_30d":0,"has_provenance":false,"npm_provenance":null,"pypi_provenance":false,"signed_commits_ratio":0.57,"scorecard_score":6.6,"scorecard_checks":{"Binary-Artifacts":10,"Branch-Protection":6,"CI-Tests":1,"CII-Best-Practices":0,"Code-Review":8,"Contributors":10,"Dangerous-Workflow":10,"Dependency-Update-Tool":10,"Fuzzing":0,"License":10,"Maintained":10,"Packaging":-1,"Pinned-Dependencies":0,"SAST":0,"Security-Policy":10,"Signed-Releases":-1,"Token-Permissions":0,"Vulnerabilities":10},"scorecard_scanned_at":"2026-07-11T02:10:50Z","slug":"gpt-researcher","source_note":"","public_actions":null,"mcp_server_support":{"status":"implemented","confidence":"high","evidence":["README/docs explicitly mention an MCP server","Found MCP-related server path: mcp-server/README.md","Found MCP-related server docs path: docs/docs/gpt-researcher/mcp-server/advanced-usage.md","Found MCP-related server docs path: docs/docs/gpt-researcher/mcp-server/claude-integration.md"]},"external_service_dependencies":{"providers":["Firecrawl","Google Gemini","OpenAI","Tavily"],"requires_api_keys":true,"confidence":"high","evidence":["Found OpenAI dependency 'openai' in pyproject.toml","Found OpenAI credential/config marker 'OPENAI_API_KEY'","README/docs also mention OpenAI","Found Google Gemini credential/config marker 'GOOGLE_API_KEY'","README/docs also mention Google Gemini","Found Tavily dependency 'tavily' in requirements.txt"]},"tool_plugin_surface":{"plugin_system":"declared","tool_tags":["browser","search"],"confidence":"high","evidence":["README/docs mention a declared plugin/integration surface","Found browser dependency 'selenium' in setup.py","Found search dependency 'tavily' in requirements.txt","README/docs also mention search capabilities"]},"package_provenance_drift":{"status":"match","confidence":"high","summary":"Published package metadata matches the tracked repo","evidence":["pypi package 'gpt-researcher' points to the tracked repo"]},"evidence_grade":"B","coverage_grade":"A","signal_coverage":0.8,"signal_types":4,"listing_status":"listed","display_listing_status":"listed","display_status_label":"Listed","has_warning":false,"warning_reasons":[],"license_spdx":"Apache-2.0","license_type":"open","license_override":"","trust_score":71.8,"trust_score_v2":71.8,"rank_v2":72,"rank_v2_delta":23,"trust_v2_adjustment":2.6,"trust_confidence":1.0,"trust_breakdown":{"safety":11.1,"identity":10.8,"transparency":14.1,"maintenance":16.8,"adoption":16.4},"trust_v2_breakdown":{"mcp":2.0,"external_dependencies":-2.5,"tool_plugin_surface":-0.9,"package_provenance_drift":4.0},"pending_signals":false},{"name":"Milvus","repo":"milvus-io/milvus","display_repo":"","url":"https://github.com/milvus-io/milvus","rank":73,"previous_rank":73,"rank_delta":0,"stars":45178,"stars_fmt":"45.2k","forks":4115,"forks_fmt":"4.1k","last_push":"2026-07-11","days_ago":0,"weekly_commits":245,"commits_low_confidence":false,"score":94.7,"description":"Milvus is a high-performance, cloud-native vector database built for scalable vector ANN search","language":"Go","open_issues":764,"category":"Memory & Knowledge","category_rank":9,"npm_package":"","crate_package":"","pypi_package":"pymilvus","weekly_downloads":1313319,"dl_source":"pypi","hn_mentions_30d":1,"has_provenance":false,"npm_provenance":null,"pypi_provenance":false,"signed_commits_ratio":1.0,"scorecard_score":4.3,"scorecard_checks":{"Binary-Artifacts":9,"Branch-Protection":3,"CI-Tests":10,"CII-Best-Practices":5,"Code-Review":10,"Contributors":10,"Dangerous-Workflow":0,"Dependency-Update-Tool":10,"Fuzzing":0,"License":10,"Maintained":10,"Packaging":10,"Pinned-Dependencies":0,"SAST":0,"Security-Policy":0,"Signed-Releases":0,"Token-Permissions":0,"Vulnerabilities":0},"scorecard_scanned_at":"2026-07-11T01:28:34Z","slug":"milvus","source_note":"","public_actions":null,"mcp_server_support":{"status":"none","confidence":null,"evidence":[]},"external_service_dependencies":{"providers":["OpenAI"],"requires_api_keys":false,"confidence":"medium","evidence":["README/docs mention OpenAI"]},"tool_plugin_surface":{"plugin_system":"declared","tool_tags":["code","search"],"confidence":"high","evidence":["README/docs mention a declared plugin/integration surface","README/docs mention search capabilities","README/docs mention code capabilities"]},"package_provenance_drift":{"status":"unknown","confidence":"low","summary":"Package source metadata is missing or inconclusive","evidence":["pypi package 'pymilvus' has a non-GitHub or unparseable source URL"]},"evidence_grade":"B","coverage_grade":"A","signal_coverage":0.8,"signal_types":4,"listing_status":"listed","display_listing_status":"listed","display_status_label":"Listed","has_warning":false,"warning_reasons":[],"license_spdx":"Apache-2.0","license_type":"open","license_override":"","trust_score":71.8,"trust_score_v2":71.8,"rank_v2":73,"rank_v2_delta":-3,"trust_v2_adjustment":-0.9,"trust_confidence":1.0,"trust_breakdown":{"safety":10.4,"identity":10.8,"transparency":12.2,"maintenance":20.0,"adoption":19.3},"trust_v2_breakdown":{"mcp":0.0,"external_dependencies":-0.0,"tool_plugin_surface":-0.9,"package_provenance_drift":0.0},"pending_signals":false},{"name":"Daytona","repo":"daytonaio/daytona","display_repo":"","url":"https://github.com/daytonaio/daytona","rank":74,"previous_rank":74,"rank_delta":0,"stars":72236,"stars_fmt":"72.2k","forks":5662,"forks_fmt":"5.7k","last_push":"2026-07-09","days_ago":2,"weekly_commits":66,"commits_low_confidence":false,"score":94.4,"description":"Daytona is a Secure and Elastic Infrastructure for Running AI-Generated Code","language":"TypeScript","open_issues":309,"category":"Sandboxes & Runtimes","category_rank":2,"npm_package":"","crate_package":"","pypi_package":"daytona-sdk","weekly_downloads":131957,"dl_source":"pypi","hn_mentions_30d":6,"has_provenance":false,"npm_provenance":null,"pypi_provenance":false,"signed_commits_ratio":1.0,"scorecard_score":5.3,"scorecard_checks":{"Binary-Artifacts":10,"Branch-Protection":1,"CI-Tests":8,"CII-Best-Practices":0,"Code-Review":8,"Contributors":10,"Dangerous-Workflow":-1,"Dependency-Update-Tool":10,"Fuzzing":0,"License":0,"Maintained":10,"Packaging":-1,"Pinned-Dependencies":-1,"SAST":0,"Security-Policy":0,"Signed-Releases":0,"Token-Permissions":-1,"Vulnerabilities":10},"scorecard_scanned_at":"2026-07-08T08:46:12Z","slug":"daytona","source_note":"","public_actions":null,"mcp_server_support":{"status":"implemented","confidence":"high","evidence":["README/docs explicitly mention an MCP server","Found MCP-related server path: apps/cli/mcp/server.go"]},"external_service_dependencies":{"providers":["OpenAI","Postgres","Redis"],"requires_api_keys":true,"confidence":"high","evidence":["Found OpenAI dependency 'openai' in pyproject.toml","README/docs mention Postgres","Found Postgres dependency 'pg' in package.json","README/docs mention Redis","Found Redis dependency 'redis' in package.json"]},"tool_plugin_surface":{"plugin_system":"declared","tool_tags":["code","database","filesystem","shell"],"confidence":"high","evidence":["README/docs mention a declared plugin/integration surface","README/docs mention shell capabilities","README/docs mention filesystem capabilities","README/docs mention database capabilities","README/docs mention code capabilities"]},"package_provenance_drift":{"status":"unknown","confidence":"low","summary":"Package source metadata is missing or inconclusive","evidence":["pypi package 'daytona-sdk' has a non-GitHub or unparseable source URL"]},"evidence_grade":"B","coverage_grade":"A","signal_coverage":0.8,"signal_types":4,"listing_status":"listed","display_listing_status":"listed","display_status_label":"Listed","has_warning":false,"warning_reasons":[],"license_spdx":"AGPL-3.0","license_type":"open","license_override":"","trust_score":71.6,"trust_score_v2":71.6,"rank_v2":74,"rank_v2_delta":-7,"trust_v2_adjustment":-1.5,"trust_confidence":1.0,"trust_breakdown":{"safety":11.6,"identity":10.8,"transparency":13.0,"maintenance":19.2,"adoption":18.5},"trust_v2_breakdown":{"mcp":2.0,"external_dependencies":-2.0,"tool_plugin_surface":-1.5,"package_provenance_drift":0.0},"pending_signals":false},{"name":"Microsoft Agent Framework","repo":"microsoft/agent-framework","display_repo":"","url":"https://github.com/microsoft/agent-framework","rank":75,"previous_rank":85,"rank_delta":10,"stars":12021,"stars_fmt":"12.0k","forks":2021,"forks_fmt":"2.0k","last_push":"2026-07-11","days_ago":0,"weekly_commits":270,"commits_low_confidence":false,"score":89.9,"description":"A framework for building, orchestrating and deploying AI agents and multi-agent workflows with support for Python and .N","language":"Python","open_issues":506,"category":"Agent Frameworks","category_rank":15,"npm_package":"","crate_package":"","pypi_package":"agent-framework","weekly_downloads":346263,"dl_source":"pypi","hn_mentions_30d":null,"has_provenance":false,"npm_provenance":null,"pypi_provenance":false,"signed_commits_ratio":1.0,"scorecard_score":6.4,"scorecard_checks":{"Binary-Artifacts":10,"Branch-Protection":8,"CI-Tests":10,"CII-Best-Practices":0,"Code-Review":9,"Contributors":10,"Dangerous-Workflow":0,"Dependency-Update-Tool":10,"Fuzzing":0,"License":10,"Maintained":10,"Packaging":-1,"Pinned-Dependencies":3,"SAST":7,"Security-Policy":10,"Signed-Releases":-1,"Token-Permissions":0,"Vulnerabilities":8},"scorecard_scanned_at":"2026-07-11T03:10:00Z","slug":"microsoft-agent-framework","source_note":"","public_actions":null,"mcp_server_support":{"status":"declared","confidence":"medium","evidence":["Found MCP-related server path: .github/actions/setup-local-mcp-server/action.yml","Found MCP-related server path: dotnet/samples/02-agents/ModelContextProtocol/Agent_MCP_Server/Agent_MCP_Server.csproj"]},"external_service_dependencies":{"providers":["Amazon Bedrock","Anthropic","Azure OpenAI","OpenAI","Postgres","Redis"],"requires_api_keys":false,"confidence":"high","evidence":["README/docs mention OpenAI","Found OpenAI dependency 'openai' in python/pyproject.toml","Found Anthropic dependency 'anthropic' in python/pyproject.toml","README/docs mention Azure OpenAI","Found Amazon Bedrock dependency 'bedrock' in python/pyproject.toml","Found Postgres dependency 'pg' in python/pyproject.toml"]},"tool_plugin_surface":{"plugin_system":"declared","tool_tags":["code","database","shell"],"confidence":"high","evidence":["README/docs mention a declared plugin/integration surface","Found shell dependency 'pty' in python/pyproject.toml","Found database dependency 'pg' in python/pyproject.toml","README/docs mention code capabilities"]},"package_provenance_drift":{"status":"unknown","confidence":"low","summary":"Package source metadata is missing or inconclusive","evidence":["pypi package 'agent-framework' has a non-GitHub or unparseable source URL"]},"evidence_grade":"B","coverage_grade":"B","signal_coverage":0.6,"signal_types":3,"listing_status":"listed","display_listing_status":"listed","display_status_label":"Listed","has_warning":false,"warning_reasons":[],"license_spdx":"MIT","license_type":"open","license_override":"","trust_score":71.2,"trust_score_v2":71.2,"rank_v2":75,"rank_v2_delta":-17,"trust_v2_adjustment":-3.7,"trust_confidence":1.0,"trust_breakdown":{"safety":13.0,"identity":10.8,"transparency":13.9,"maintenance":20.0,"adoption":17.2},"trust_v2_breakdown":{"mcp":0.0,"external_dependencies":-2.5,"tool_plugin_surface":-1.2,"package_provenance_drift":0.0},"pending_signals":false},{"name":"LibreChat","repo":"danny-avila/LibreChat","display_repo":"","url":"https://github.com/danny-avila/LibreChat","rank":76,"previous_rank":75,"rank_delta":-1,"stars":40564,"stars_fmt":"40.6k","forks":8329,"forks_fmt":"8.3k","last_push":"2026-07-10","days_ago":1,"weekly_commits":192,"commits_low_confidence":false,"score":95.8,"description":"Enhanced ChatGPT Clone: Features Agents, MCP, Skills, DeepSeek, Anthropic, AWS, OpenAI, Responses API, Azure, Groq, o1, ","language":"TypeScript","open_issues":313,"category":"UI & App Builders","category_rank":4,"npm_package":"","crate_package":"","pypi_package":"","weekly_downloads":181893,"dl_source":"docker","hn_mentions_30d":0,"has_provenance":false,"npm_provenance":null,"pypi_provenance":null,"signed_commits_ratio":1.0,"scorecard_score":5.9,"scorecard_checks":{"Binary-Artifacts":10,"Branch-Protection":6,"CI-Tests":10,"CII-Best-Practices":0,"Code-Review":3,"Contributors":10,"Dangerous-Workflow":10,"Dependency-Update-Tool":10,"Fuzzing":0,"License":10,"Maintained":10,"Packaging":10,"Pinned-Dependencies":1,"SAST":0,"Security-Policy":10,"Signed-Releases":-1,"Token-Permissions":0,"Vulnerabilities":0},"scorecard_scanned_at":"2026-07-11T01:28:04Z","slug":"librechat","source_note":"","public_actions":null,"mcp_server_support":{"status":"implemented","confidence":"high","evidence":["README/docs explicitly mention an MCP server","Found MCP-related server path: client/src/components/MCP/MCPServerMenuItem.tsx","Found MCP-related server path: client/src/components/MCP/MCPServerStatusIcon.tsx","Found MCP-related server test path: packages/api/src/mcp/__tests__/helpers/oauthTestServer.ts"]},"external_service_dependencies":{"providers":["Amazon Bedrock","Anthropic","Azure OpenAI","Google Gemini","OpenAI","Postgres","Redis"],"requires_api_keys":false,"confidence":"high","evidence":["README/docs mention OpenAI","Found OpenAI dependency 'openai' in api/package.json","README/docs mention Anthropic","Found Anthropic dependency 'anthropic' in package.json","README/docs mention Google Gemini","Found Google Gemini dependency '@google/genai' in api/package.json"]},"tool_plugin_surface":{"plugin_system":"marketplace","tool_tags":["browser","code","database","filesystem","search"],"confidence":"high","evidence":["README/docs mention a marketplace plugin/integration surface","Found browser dependency 'playwright' in package.json","Found filesystem dependency 'fs-extra' in client/package.json","README/docs mention search capabilities","README/docs mention database capabilities","README/docs mention code capabilities"]},"package_provenance_drift":{"status":"not_applicable","confidence":null,"summary":"No package source configured","evidence":[]},"evidence_grade":"B","coverage_grade":"A","signal_coverage":0.8,"signal_types":4,"listing_status":"listed","display_listing_status":"listed","display_status_label":"Listed","has_warning":false,"warning_reasons":[],"license_spdx":"MIT","license_type":"open","license_override":"","trust_score":71.2,"trust_score_v2":71.2,"rank_v2":76,"rank_v2_delta":-17,"trust_v2_adjustment":-3.5,"trust_confidence":1.0,"trust_breakdown":{"safety":12.4,"identity":10.8,"transparency":13.5,"maintenance":19.9,"adoption":18.1},"trust_v2_breakdown":{"mcp":2.0,"external_dependencies":-3.0,"tool_plugin_surface":-2.5,"package_provenance_drift":0.0},"pending_signals":false},{"name":"NeMo Guardrails","repo":"NVIDIA/NeMo-Guardrails","display_repo":"","url":"https://github.com/NVIDIA-NeMo/Guardrails","rank":77,"previous_rank":76,"rank_delta":-1,"stars":6660,"stars_fmt":"6.7k","forks":761,"forks_fmt":"761","last_push":"2026-07-10","days_ago":1,"weekly_commits":88,"commits_low_confidence":false,"score":85.6,"description":"NeMo Guardrails is an open-source toolkit for easily adding programmable guardrails to LLM-based conversational systems.","language":"Python","open_issues":105,"category":"Security & Guardrails","category_rank":2,"npm_package":"","crate_package":"","pypi_package":"nemoguardrails","weekly_downloads":79331,"dl_source":"pypi","hn_mentions_30d":0,"has_provenance":false,"npm_provenance":null,"pypi_provenance":false,"signed_commits_ratio":1.0,"scorecard_score":5.9,"scorecard_checks":{"Binary-Artifacts":10,"Branch-Protection":2,"CI-Tests":10,"CII-Best-Practices":0,"Code-Review":3,"Contributors":10,"Dangerous-Workflow":10,"Dependency-Update-Tool":10,"Fuzzing":0,"License":9,"Maintained":10,"Packaging":10,"Pinned-Dependencies":2,"SAST":7,"Security-Policy":10,"Signed-Releases":-1,"Token-Permissions":0,"Vulnerabilities":0},"scorecard_scanned_at":"2026-07-11T01:29:09Z","slug":"nemo-guardrails","source_note":"","public_actions":null,"mcp_server_support":{"status":"none","confidence":null,"evidence":[]},"external_service_dependencies":{"providers":["OpenAI"],"requires_api_keys":false,"confidence":"high","evidence":["README/docs mention OpenAI","Found OpenAI dependency 'openai' in pyproject.toml"]},"tool_plugin_surface":{"plugin_system":"declared","tool_tags":["code","search"],"confidence":"high","evidence":["README/docs mention a declared plugin/integration surface","README/docs mention search capabilities","README/docs mention code capabilities"]},"package_provenance_drift":{"status":"unknown","confidence":"low","summary":"Package source metadata is missing or inconclusive","evidence":["pypi package 'nemoguardrails' has a non-GitHub or unparseable source URL"]},"evidence_grade":"B","coverage_grade":"A","signal_coverage":0.8,"signal_types":4,"listing_status":"listed","display_listing_status":"listed","display_status_label":"Listed","has_warning":false,"warning_reasons":[],"license_spdx":"NOASSERTION","license_type":"open","license_override":"","trust_score":71.2,"trust_score_v2":71.2,"rank_v2":77,"rank_v2_delta":-4,"trust_v2_adjustment":-0.9,"trust_confidence":1.0,"trust_breakdown":{"safety":12.4,"identity":10.8,"transparency":13.5,"maintenance":19.7,"adoption":15.7},"trust_v2_breakdown":{"mcp":0.0,"external_dependencies":-0.0,"tool_plugin_surface":-0.9,"package_provenance_drift":0.0},"pending_signals":false},{"name":"CodeWhale","repo":"Hmbown/CodeWhale","display_repo":"","url":"https://github.com/Hmbown/CodeWhale","rank":78,"previous_rank":77,"rank_delta":-1,"stars":39680,"stars_fmt":"39.7k","forks":3418,"forks_fmt":"3.4k","last_push":"2026-07-10","days_ago":1,"weekly_commits":2004,"commits_low_confidence":false,"score":94.0,"description":"Open-source, community-driven agent harness","language":"Rust","open_issues":287,"category":"Coding Agents","category_rank":13,"npm_package":"codewhale","crate_package":"","pypi_package":"","weekly_downloads":5449,"dl_source":"npm","hn_mentions_30d":null,"has_provenance":false,"npm_provenance":false,"pypi_provenance":null,"signed_commits_ratio":0.06,"scorecard_score":5.9,"scorecard_checks":{"Binary-Artifacts":10,"Branch-Protection":3,"CI-Tests":10,"CII-Best-Practices":0,"Code-Review":2,"Contributors":10,"Dangerous-Workflow":10,"Dependency-Update-Tool":10,"Fuzzing":0,"License":10,"Maintained":10,"Packaging":10,"Pinned-Dependencies":0,"SAST":8,"Security-Policy":10,"Signed-Releases":0,"Token-Permissions":0,"Vulnerabilities":6},"scorecard_scanned_at":"2026-07-11T03:36:42Z","slug":"codewhale","source_note":"","public_actions":null,"mcp_server_support":{"status":"implemented","confidence":"high","evidence":["README/docs explicitly mention an MCP server","Found MCP-related server path: crates/tui/src/mcp_server.rs"]},"external_service_dependencies":{"providers":["Anthropic","OpenAI"],"requires_api_keys":true,"confidence":"high","evidence":["README/docs mention OpenAI","README/docs mention Anthropic","Found Anthropic credential/config marker 'ANTHROPIC_API_KEY'"]},"tool_plugin_surface":{"plugin_system":"extension-based","tool_tags":["code","shell"],"confidence":"high","evidence":["README/docs mention a extension-based plugin/integration surface","README/docs mention shell capabilities","README/docs mention code capabilities"]},"package_provenance_drift":{"status":"match","confidence":"high","summary":"Published package metadata matches the tracked repo","evidence":["npm package 'codewhale' points to the tracked repo"]},"evidence_grade":"B","coverage_grade":"B","signal_coverage":0.6,"signal_types":3,"listing_status":"listed","display_listing_status":"listed","display_status_label":"Listed","has_warning":false,"warning_reasons":[],"license_spdx":"MIT","license_type":"open","license_override":"","trust_score":71.2,"trust_score_v2":71.2,"rank_v2":78,"rank_v2_delta":25,"trust_v2_adjustment":3.3,"trust_confidence":1.0,"trust_breakdown":{"safety":7.7,"identity":10.8,"transparency":13.5,"maintenance":19.9,"adoption":16.0},"trust_v2_breakdown":{"mcp":2.0,"external_dependencies":-1.5,"tool_plugin_surface":-1.2,"package_provenance_drift":4.0},"pending_signals":false},{"name":"Tidb","repo":"pingcap/tidb","display_repo":"","url":"https://github.com/pingcap/tidb","rank":79,"previous_rank":78,"rank_delta":-1,"stars":40272,"stars_fmt":"40.3k","forks":6225,"forks_fmt":"6.2k","last_push":"2026-07-10","days_ago":1,"weekly_commits":132,"commits_low_confidence":false,"score":95.2,"description":"TiDB is built for agentic workloads that grow unpredictably, with ACID guarantees and native support for transactions, a","language":"Go","open_issues":4943,"category":"Memory & Knowledge","category_rank":10,"npm_package":"","crate_package":"","pypi_package":"","weekly_downloads":null,"dl_source":"","hn_mentions_30d":null,"has_provenance":false,"npm_provenance":null,"pypi_provenance":null,"signed_commits_ratio":1.0,"scorecard_score":7.8,"scorecard_checks":{"Binary-Artifacts":10,"Branch-Protection":3,"CI-Tests":10,"CII-Best-Practices":0,"Code-Review":10,"Contributors":10,"Dangerous-Workflow":10,"Dependency-Update-Tool":10,"Fuzzing":10,"License":10,"Maintained":10,"Packaging":-1,"Pinned-Dependencies":10,"SAST":0,"Security-Policy":10,"Signed-Releases":-1,"Token-Permissions":10,"Vulnerabilities":0},"scorecard_scanned_at":"2026-07-11T03:35:05Z","slug":"tidb","source_note":"","public_actions":null,"mcp_server_support":{"status":"none","confidence":null,"evidence":[]},"external_service_dependencies":{"providers":[],"requires_api_keys":false,"confidence":null,"evidence":[]},"tool_plugin_surface":{"plugin_system":"declared","tool_tags":["code","search"],"confidence":"high","evidence":["Found declared path: pkg/plugin/BUILD.bazel","README/docs mention search capabilities","README/docs mention code capabilities"]},"package_provenance_drift":{"status":"not_applicable","confidence":null,"summary":"No package source configured","evidence":[]},"evidence_grade":"B","coverage_grade":"C","signal_coverage":0.4,"signal_types":2,"listing_status":"listed","display_listing_status":"listed","display_status_label":"Listed","has_warning":false,"warning_reasons":[],"license_spdx":"Apache-2.0","license_type":"open","license_override":"","trust_score":70.8,"trust_score_v2":70.8,"rank_v2":79,"rank_v2_delta":-1,"trust_v2_adjustment":-0.9,"trust_confidence":1.0,"trust_breakdown":{"safety":14.8,"identity":10.8,"transparency":15.1,"maintenance":19.9,"adoption":11.1},"trust_v2_breakdown":{"mcp":0.0,"external_dependencies":-0.0,"tool_plugin_surface":-0.9,"package_provenance_drift":0.0},"pending_signals":false},{"name":"Langfuse","repo":"langfuse/langfuse","display_repo":"","url":"https://github.com/langfuse/langfuse","rank":80,"previous_rank":80,"rank_delta":0,"stars":30904,"stars_fmt":"30.9k","forks":3255,"forks_fmt":"3.3k","last_push":"2026-07-11","days_ago":0,"weekly_commits":580,"commits_low_confidence":false,"score":93.2,"description":"🪢 Open source AI engineering platform: LLM evals, observability, metrics, prompt management, playground, datasets. Integ","language":"TypeScript","open_issues":302,"category":"Observability & Evaluation","category_rank":7,"npm_package":"langfuse","crate_package":"","pypi_package":"langfuse","weekly_downloads":6935809,"dl_source":"npm+pypi","hn_mentions_30d":6,"has_provenance":false,"npm_provenance":false,"pypi_provenance":false,"signed_commits_ratio":0.91,"scorecard_score":6.7,"scorecard_checks":{"Binary-Artifacts":10,"Branch-Protection":3,"CI-Tests":10,"CII-Best-Practices":0,"Code-Review":1,"Contributors":10,"Dangerous-Workflow":10,"Dependency-Update-Tool":10,"Fuzzing":0,"License":9,"Maintained":10,"Packaging":10,"Pinned-Dependencies":7,"SAST":10,"Security-Policy":9,"Signed-Releases":-1,"Token-Permissions":5,"Vulnerabilities":1},"scorecard_scanned_at":"2026-07-11T04:09:05Z","slug":"langfuse","source_note":"","public_actions":null,"mcp_server_support":{"status":"implemented","confidence":"high","evidence":["Found MCP-related server path: web/src/features/mcp/server/mcpServer.ts","Found MCP dependency '@modelcontextprotocol/sdk' in web/package.json"]},"external_service_dependencies":{"providers":["Amazon Bedrock","Anthropic","Firecrawl","OpenAI","Postgres","Redis"],"requires_api_keys":false,"confidence":"high","evidence":["README/docs mention OpenAI","README/docs mention Anthropic","Found Anthropic dependency 'anthropic' in web/package.json","README/docs mention Amazon Bedrock","Found Amazon Bedrock dependency 'bedrock' in web/package.json","README/docs mention Firecrawl"]},"tool_plugin_surface":{"plugin_system":"declared","tool_tags":["browser","code","database","search"],"confidence":"high","evidence":["README/docs mention a declared plugin/integration surface","Found browser dependency 'playwright' in package.json","README/docs mention search capabilities","Found database dependency 'redis' in web/package.json","README/docs mention code capabilities"]},"package_provenance_drift":{"status":"warning","confidence":"high","summary":"1 package source mismatch detected","evidence":["npm package 'langfuse' points to langfuse/langfuse-js, not langfuse/langfuse","pypi package 'langfuse' has a non-GitHub or unparseable source URL"]},"evidence_grade":"B","coverage_grade":"A","signal_coverage":0.8,"signal_types":4,"listing_status":"listed","display_listing_status":"listed","display_status_label":"Listed","has_warning":false,"warning_reasons":[],"license_spdx":"NOASSERTION","license_type":"open","license_override":"","trust_score":70.8,"trust_score_v2":70.8,"rank_v2":80,"rank_v2_delta":-34,"trust_v2_adjustment":-7.0,"trust_confidence":1.0,"trust_breakdown":{"safety":12.9,"identity":10.8,"transparency":14.2,"maintenance":20.0,"adoption":19.9},"trust_v2_breakdown":{"mcp":2.0,"external_dependencies":-2.5,"tool_plugin_surface":-1.5,"package_provenance_drift":-5.0},"pending_signals":false},{"name":"MCP Python SDK","repo":"modelcontextprotocol/python-sdk","display_repo":"","url":"https://github.com/modelcontextprotocol/python-sdk","rank":81,"previous_rank":79,"rank_delta":-2,"stars":23579,"stars_fmt":"23.6k","forks":3629,"forks_fmt":"3.6k","last_push":"2026-07-10","days_ago":1,"weekly_commits":104,"commits_low_confidence":false,"score":92.8,"description":"The official Python SDK for Model Context Protocol servers and clients","language":"Python","open_issues":249,"category":"Protocols & Tool Integration","category_rank":5,"npm_package":"","crate_package":"","pypi_package":"","weekly_downloads":null,"dl_source":"","hn_mentions_30d":null,"has_provenance":false,"npm_provenance":null,"pypi_provenance":null,"signed_commits_ratio":1.0,"scorecard_score":7.6,"scorecard_checks":{"Binary-Artifacts":10,"Branch-Protection":2,"CI-Tests":10,"CII-Best-Practices":0,"Code-Review":8,"Contributors":10,"Dangerous-Workflow":10,"Dependency-Update-Tool":10,"Fuzzing":0,"License":10,"Maintained":10,"Packaging":10,"Pinned-Dependencies":10,"SAST":10,"Security-Policy":10,"Signed-Releases":-1,"Token-Permissions":9,"Vulnerabilities":0},"scorecard_scanned_at":"2026-07-11T03:38:06Z","slug":"mcp-python-sdk","source_note":"","public_actions":null,"mcp_server_support":{"status":"implemented","confidence":"high","evidence":["README/docs explicitly mention an MCP server","Found MCP-related server path: src/mcp/server/lowlevel/server.py","Found MCP-related server path: src/mcp/server/mcpserver/server.py","Found MCP dependency 'modelcontextprotocol' in pyproject.toml"]},"external_service_dependencies":{"providers":["Anthropic","Postgres"],"requires_api_keys":false,"confidence":"high","evidence":["Found Anthropic dependency 'anthropic' in pyproject.toml","README/docs mention Postgres","Found Postgres dependency 'pg' in pyproject.toml"]},"tool_plugin_surface":{"plugin_system":"declared","tool_tags":["code","database","search","shell"],"confidence":"high","evidence":["README/docs mention a declared plugin/integration surface","README/docs mention shell capabilities","README/docs mention search capabilities","README/docs mention database capabilities","README/docs mention code capabilities"]},"package_provenance_drift":{"status":"not_applicable","confidence":null,"summary":"No package source configured","evidence":[]},"evidence_grade":"B","coverage_grade":"C","signal_coverage":0.4,"signal_types":2,"listing_status":"listed","display_listing_status":"listed","display_status_label":"Listed","has_warning":false,"warning_reasons":[],"license_spdx":"MIT","license_type":"open","license_override":"","trust_score":70.7,"trust_score_v2":70.7,"rank_v2":81,"rank_v2_delta":5,"trust_v2_adjustment":0.0,"trust_confidence":1.0,"trust_breakdown":{"safety":14.5,"identity":10.8,"transparency":15.0,"maintenance":19.9,"adoption":10.5},"trust_v2_breakdown":{"mcp":2.0,"external_dependencies":-0.5,"tool_plugin_surface":-1.5,"package_provenance_drift":0.0},"pending_signals":false},{"name":"Astrid","repo":"unicity-astrid/astrid","display_repo":"","url":"https://github.com/unicity-astrid/astrid","rank":82,"previous_rank":81,"rank_delta":-1,"stars":10322,"stars_fmt":"10.3k","forks":130,"forks_fmt":"130","last_push":"2026-07-10","days_ago":1,"weekly_commits":121,"commits_low_confidence":false,"score":83.9,"description":"An operating system for AI agents.","language":"Rust","open_issues":244,"category":"Agent Frameworks","category_rank":16,"npm_package":"","crate_package":"","pypi_package":"","weekly_downloads":null,"dl_source":"","hn_mentions_30d":null,"has_provenance":false,"npm_provenance":null,"pypi_provenance":null,"signed_commits_ratio":1.0,"scorecard_score":8.1,"scorecard_checks":{"Binary-Artifacts":10,"Branch-Protection":3,"CI-Tests":10,"CII-Best-Practices":0,"Code-Review":0,"Contributors":10,"Dangerous-Workflow":10,"Dependency-Update-Tool":10,"Fuzzing":10,"License":10,"Maintained":10,"Packaging":-1,"Pinned-Dependencies":10,"SAST":9,"Security-Policy":10,"Signed-Releases":8,"Token-Permissions":10,"Vulnerabilities":7},"scorecard_scanned_at":"2026-07-10T08:50:59Z","slug":"astrid","source_note":"","public_actions":null,"mcp_server_support":{"status":"implemented","confidence":"high","evidence":["README/docs explicitly mention an MCP server","Found MCP-related server path: crates/astrid-cli/src/commands/mcp/server.rs"]},"external_service_dependencies":{"providers":["Anthropic"],"requires_api_keys":true,"confidence":"high","evidence":["README/docs mention Anthropic","Found Anthropic credential/config marker 'ANTHROPIC_API_KEY'"]},"tool_plugin_surface":{"plugin_system":"declared","tool_tags":["code","filesystem","search","shell"],"confidence":"high","evidence":["README/docs mention a declared plugin/integration surface","README/docs mention shell capabilities","README/docs mention filesystem capabilities","README/docs mention search capabilities","README/docs mention code capabilities"]},"package_provenance_drift":{"status":"not_applicable","confidence":null,"summary":"No package source configured","evidence":[]},"evidence_grade":"B","coverage_grade":"C","signal_coverage":0.4,"signal_types":2,"listing_status":"listed","display_listing_status":"listed","display_status_label":"Listed","has_warning":false,"warning_reasons":[],"license_spdx":"Apache-2.0","license_type":"open","license_override":"","trust_score":70.3,"trust_score_v2":70.3,"rank_v2":82,"rank_v2_delta":2,"trust_v2_adjustment":-0.5,"trust_confidence":1.0,"trust_breakdown":{"safety":15.1,"identity":10.8,"transparency":15.4,"maintenance":19.9,"adoption":9.6},"trust_v2_breakdown":{"mcp":2.0,"external_dependencies":-1.0,"tool_plugin_surface":-1.5,"package_provenance_drift":0.0},"pending_signals":false},{"name":"GPTMe","repo":"gptme/gptme","display_repo":"","url":"https://github.com/gptme/gptme","rank":83,"previous_rank":87,"rank_delta":4,"stars":4353,"stars_fmt":"4.4k","forks":395,"forks_fmt":"395","last_push":"2026-07-10","days_ago":1,"weekly_commits":303,"commits_low_confidence":false,"score":83.9,"description":"Your agent in your terminal, equipped with local tools: writes code, uses the terminal, browses the web. Make your own p","language":"Python","open_issues":5,"category":"Coding Agents","category_rank":14,"npm_package":"","crate_package":"","pypi_package":"gptme","weekly_downloads":7302,"dl_source":"pypi","hn_mentions_30d":5,"has_provenance":false,"npm_provenance":null,"pypi_provenance":false,"signed_commits_ratio":1.0,"scorecard_score":5.3,"scorecard_checks":{"Binary-Artifacts":9,"Branch-Protection":3,"CI-Tests":10,"CII-Best-Practices":0,"Code-Review":6,"Contributors":10,"Dangerous-Workflow":10,"Dependency-Update-Tool":10,"Fuzzing":0,"License":10,"Maintained":10,"Packaging":10,"Pinned-Dependencies":0,"SAST":0,"Security-Policy":10,"Signed-Releases":0,"Token-Permissions":0,"Vulnerabilities":0},"scorecard_scanned_at":"2026-07-11T03:09:02Z","slug":"gptme","source_note":"","public_actions":null,"mcp_server_support":{"status":"implemented","confidence":"medium","evidence":["README/docs explicitly mention an MCP server"]},"external_service_dependencies":{"providers":["Amazon Bedrock","Anthropic","Google Gemini","OpenAI","Postgres"],"requires_api_keys":true,"confidence":"high","evidence":["README/docs mention OpenAI","Found OpenAI dependency 'openai' in pyproject.toml","Found OpenAI credential/config marker 'OPENAI_API_KEY'","README/docs mention Anthropic","Found Anthropic dependency 'anthropic' in pyproject.toml","Found Anthropic credential/config marker 'ANTHROPIC_API_KEY'"]},"tool_plugin_surface":{"plugin_system":"extension-based","tool_tags":["browser","code","database","filesystem","search","shell"],"confidence":"high","evidence":["README/docs mention a extension-based plugin/integration surface","README/docs mention browser capabilities","README/docs mention shell capabilities","README/docs mention filesystem capabilities","README/docs mention search capabilities","Found database dependency 'pg' in pyproject.toml"]},"package_provenance_drift":{"status":"match","confidence":"high","summary":"Published package metadata matches the tracked repo","evidence":["pypi package 'gptme' points to the tracked repo"]},"evidence_grade":"B","coverage_grade":"A","signal_coverage":0.8,"signal_types":4,"listing_status":"listed","display_listing_status":"listed","display_status_label":"Listed","has_warning":false,"warning_reasons":[],"license_spdx":"MIT","license_type":"open","license_override":"","trust_score":70.1,"trust_score_v2":70.1,"rank_v2":83,"rank_v2_delta":13,"trust_v2_adjustment":0.9,"trust_confidence":1.0,"trust_breakdown":{"safety":11.6,"identity":10.8,"transparency":13.0,"maintenance":19.9,"adoption":13.9},"trust_v2_breakdown":{"mcp":2.0,"external_dependencies":-3.0,"tool_plugin_surface":-2.1,"package_provenance_drift":4.0},"pending_signals":false},{"name":"AgentScope","repo":"agentscope-ai/agentscope","display_repo":"","url":"https://github.com/agentscope-ai/agentscope","rank":84,"previous_rank":82,"rank_delta":-2,"stars":27745,"stars_fmt":"27.7k","forks":3168,"forks_fmt":"3.2k","last_push":"2026-07-10","days_ago":1,"weekly_commits":70,"commits_low_confidence":false,"score":91.1,"description":"Build and run agents you can see, understand and trust.","language":"Python","open_issues":204,"category":"Agent Frameworks","category_rank":17,"npm_package":"","crate_package":"","pypi_package":"agentscope","weekly_downloads":44791,"dl_source":"pypi","hn_mentions_30d":null,"has_provenance":false,"npm_provenance":null,"pypi_provenance":false,"signed_commits_ratio":1.0,"scorecard_score":4.5,"scorecard_checks":{"Binary-Artifacts":10,"Branch-Protection":1,"CI-Tests":10,"CII-Best-Practices":0,"Code-Review":8,"Contributors":10,"Dangerous-Workflow":10,"Dependency-Update-Tool":0,"Fuzzing":0,"License":10,"Maintained":10,"Packaging":10,"Pinned-Dependencies":0,"SAST":0,"Security-Policy":0,"Signed-Releases":-1,"Token-Permissions":0,"Vulnerabilities":0},"scorecard_scanned_at":"2026-07-11T01:24:42Z","slug":"agentscope","source_note":"","public_actions":null,"mcp_server_support":{"status":"none","confidence":null,"evidence":[]},"external_service_dependencies":{"providers":["Amazon Bedrock","Anthropic","E2B","OpenAI","Qdrant","Redis"],"requires_api_keys":true,"confidence":"high","evidence":["Found OpenAI dependency 'openai' in pyproject.toml","Found Anthropic dependency 'anthropic' in pyproject.toml","Found Amazon Bedrock dependency 'boto3' in pyproject.toml","Found Qdrant dependency 'qdrant' in pyproject.toml","Found E2B dependency 'e2b' in pyproject.toml","README/docs also mention E2B"]},"tool_plugin_surface":{"plugin_system":"none","tool_tags":["database"],"confidence":"medium","evidence":["Found database dependency 'redis' in pyproject.toml"]},"package_provenance_drift":{"status":"match","confidence":"high","summary":"Published package metadata matches the tracked repo","evidence":["pypi package 'agentscope' points to the tracked repo"]},"evidence_grade":"B","coverage_grade":"B","signal_coverage":0.6,"signal_types":3,"listing_status":"listed","display_listing_status":"listed","display_status_label":"Listed","has_warning":false,"warning_reasons":[],"license_spdx":"Apache-2.0","license_type":"open","license_override":"","trust_score":70.1,"trust_score_v2":70.1,"rank_v2":84,"rank_v2_delta":6,"trust_v2_adjustment":0.2,"trust_confidence":1.0,"trust_breakdown":{"safety":10.6,"identity":10.8,"transparency":12.3,"maintenance":19.3,"adoption":16.9},"trust_v2_breakdown":{"mcp":0.0,"external_dependencies":-3.5,"tool_plugin_surface":-0.3,"package_provenance_drift":4.0},"pending_signals":false},{"name":"Giskard","repo":"Giskard-AI/giskard-oss","display_repo":"","url":"https://github.com/Giskard-AI/giskard-oss","rank":85,"previous_rank":84,"rank_delta":-1,"stars":5504,"stars_fmt":"5.5k","forks":485,"forks_fmt":"485","last_push":"2026-07-10","days_ago":1,"weekly_commits":42,"commits_low_confidence":false,"score":80.3,"description":"🐢 Open-Source Evaluation & Testing library for LLM Agents","language":"Python","open_issues":28,"category":"Observability & Evaluation","category_rank":8,"npm_package":"","crate_package":"","pypi_package":"giskard","weekly_downloads":6541,"dl_source":"pypi","hn_mentions_30d":1,"has_provenance":false,"npm_provenance":null,"pypi_provenance":false,"signed_commits_ratio":0.84,"scorecard_score":7.0,"scorecard_checks":{"Binary-Artifacts":10,"Branch-Protection":8,"CI-Tests":10,"CII-Best-Practices":0,"Code-Review":8,"Contributors":10,"Dangerous-Workflow":0,"Dependency-Update-Tool":10,"Fuzzing":0,"License":10,"Maintained":10,"Packaging":-1,"Pinned-Dependencies":10,"SAST":10,"Security-Policy":10,"Signed-Releases":0,"Token-Permissions":10,"Vulnerabilities":8},"scorecard_scanned_at":"2026-07-10T08:03:19Z","slug":"giskard","source_note":"","public_actions":null,"mcp_server_support":{"status":"none","confidence":null,"evidence":[]},"external_service_dependencies":{"providers":["Anthropic","OpenAI"],"requires_api_keys":false,"confidence":"high","evidence":["README/docs mention OpenAI","Found OpenAI dependency 'openai' in pyproject.toml","Found Anthropic dependency 'anthropic' in pyproject.toml"]},"tool_plugin_surface":{"plugin_system":"none","tool_tags":["code"],"confidence":"medium","evidence":["README/docs mention code capabilities"]},"package_provenance_drift":{"status":"unknown","confidence":"low","summary":"Package source metadata is missing or inconclusive","evidence":["pypi package 'giskard' has a non-GitHub or unparseable source URL"]},"evidence_grade":"B","coverage_grade":"A","signal_coverage":0.8,"signal_types":4,"listing_status":"listed","display_listing_status":"listed","display_status_label":"Listed","has_warning":false,"warning_reasons":[],"license_spdx":"Apache-2.0","license_type":"open","license_override":"","trust_score":70.0,"trust_score_v2":70.0,"rank_v2":85,"rank_v2_delta":0,"trust_v2_adjustment":-0.8,"trust_confidence":1.0,"trust_breakdown":{"safety":13.0,"identity":10.8,"transparency":14.4,"maintenance":18.5,"adoption":14.1},"trust_v2_breakdown":{"mcp":0.0,"external_dependencies":-0.5,"tool_plugin_surface":-0.3,"package_provenance_drift":0.0},"pending_signals":false},{"name":"Khoj","repo":"khoj-ai/khoj","display_repo":"","url":"https://github.com/khoj-ai/khoj","rank":86,"previous_rank":83,"rank_delta":-3,"stars":35633,"stars_fmt":"35.6k","forks":2299,"forks_fmt":"2.3k","last_push":"2026-06-24","days_ago":17,"weekly_commits":10,"commits_low_confidence":false,"score":78.7,"description":"Your AI second brain. Self-hostable. Get answers from the web or your docs. Build custom agents, schedule automations, d","language":"Python","open_issues":96,"category":"Memory & Knowledge","category_rank":11,"npm_package":"","crate_package":"","pypi_package":"khoj","weekly_downloads":5365,"dl_source":"pypi","hn_mentions_30d":14,"has_provenance":true,"npm_provenance":null,"pypi_provenance":true,"signed_commits_ratio":0.16,"scorecard_score":3.7,"scorecard_checks":{"Binary-Artifacts":9,"Branch-Protection":0,"CI-Tests":8,"CII-Best-Practices":0,"Code-Review":3,"Contributors":10,"Dangerous-Workflow":10,"Dependency-Update-Tool":0,"Fuzzing":0,"License":10,"Maintained":10,"Packaging":10,"Pinned-Dependencies":0,"SAST":1,"Security-Policy":0,"Signed-Releases":0,"Token-Permissions":0,"Vulnerabilities":0},"scorecard_scanned_at":"2026-07-11T03:27:03Z","slug":"khoj","source_note":"","public_actions":null,"mcp_server_support":{"status":"none","confidence":null,"evidence":[]},"external_service_dependencies":{"providers":["Amazon Bedrock","Anthropic","E2B","Google Gemini","OpenAI","Postgres"],"requires_api_keys":false,"confidence":"high","evidence":["Found OpenAI dependency 'openai' in pyproject.toml","Found Anthropic dependency 'anthropic' in pyproject.toml","README/docs mention Google Gemini","Found Amazon Bedrock dependency 'boto3' in pyproject.toml","Found E2B dependency 'e2b' in pyproject.toml","Found Postgres dependency 'psycopg' in pyproject.toml"]},"tool_plugin_surface":{"plugin_system":"none","tool_tags":["code","database","search"],"confidence":"high","evidence":["README/docs mention search capabilities","Found database dependency 'pg' in pyproject.toml","README/docs mention code capabilities"]},"package_provenance_drift":{"status":"unknown","confidence":"low","summary":"Package source metadata is missing or inconclusive","evidence":["pypi package 'khoj' has a non-GitHub or unparseable source URL"]},"evidence_grade":"B","coverage_grade":"A","signal_coverage":0.8,"signal_types":4,"listing_status":"listed","display_listing_status":"listed","display_status_label":"Listed","has_warning":false,"warning_reasons":[],"license_spdx":"AGPL-3.0","license_type":"open","license_override":"","trust_score":70.0,"trust_score_v2":70.0,"rank_v2":86,"rank_v2_delta":-20,"trust_v2_adjustment":-3.4,"trust_confidence":1.0,"trust_breakdown":{"safety":12.9,"identity":18.0,"transparency":11.6,"maintenance":15.0,"adoption":15.9},"trust_v2_breakdown":{"mcp":0.0,"external_dependencies":-2.5,"tool_plugin_surface":-0.9,"package_provenance_drift":0.0},"pending_signals":false},{"name":"BeeAI Framework","repo":"i-am-bee/beeai-framework","display_repo":"","url":"https://github.com/i-am-bee/beeai-framework","rank":87,"previous_rank":86,"rank_delta":-1,"stars":3313,"stars_fmt":"3.3k","forks":461,"forks_fmt":"461","last_push":"2026-07-08","days_ago":3,"weekly_commits":35,"commits_low_confidence":false,"score":77.6,"description":"Build production-ready AI agents in both Python and Typescript.","language":"Python","open_issues":10,"category":"Agent Frameworks","category_rank":18,"npm_package":"","crate_package":"","pypi_package":"beeai-framework","weekly_downloads":16645,"dl_source":"pypi","hn_mentions_30d":null,"has_provenance":false,"npm_provenance":null,"pypi_provenance":false,"signed_commits_ratio":0.58,"scorecard_score":5.9,"scorecard_checks":{"Binary-Artifacts":10,"Branch-Protection":3,"CI-Tests":10,"CII-Best-Practices":0,"Code-Review":8,"Contributors":10,"Dangerous-Workflow":10,"Dependency-Update-Tool":10,"Fuzzing":0,"License":10,"Maintained":10,"Packaging":-1,"Pinned-Dependencies":1,"SAST":2,"Security-Policy":10,"Signed-Releases":-1,"Token-Permissions":0,"Vulnerabilities":0},"scorecard_scanned_at":"2026-07-11T03:37:04Z","slug":"beeai-framework","source_note":"","public_actions":null,"mcp_server_support":{"status":"implemented","confidence":"high","evidence":["README/docs mention MCP support","Found MCP-related server path: python/beeai_framework/adapters/mcp/serve/server.py","Found MCP-related server path: python/examples/serve/extend_mcp_server.py","Found MCP dependency '@modelcontextprotocol/sdk' in typescript/package.json"]},"external_service_dependencies":{"providers":["Amazon Bedrock","Anthropic","OpenAI","Postgres","Qdrant"],"requires_api_keys":false,"confidence":"high","evidence":["Found OpenAI dependency 'openai' in typescript/package.json","Found Anthropic dependency 'anthropic' in typescript/package.json","Found Amazon Bedrock dependency 'bedrock' in python/pyproject.toml","Found Qdrant dependency 'qdrant' in typescript/package.json","Found Postgres dependency 'pg' in python/pyproject.toml"]},"tool_plugin_surface":{"plugin_system":"declared","tool_tags":["code","database","search"],"confidence":"high","evidence":["README/docs mention a declared plugin/integration surface","README/docs mention search capabilities","Found database dependency 'pg' in python/pyproject.toml","README/docs mention code capabilities"]},"package_provenance_drift":{"status":"match","confidence":"high","summary":"Published package metadata matches the tracked repo","evidence":["pypi package 'beeai-framework' points to the tracked repo"]},"evidence_grade":"B","coverage_grade":"B","signal_coverage":0.6,"signal_types":3,"listing_status":"listed","display_listing_status":"listed","display_status_label":"Listed","has_warning":false,"warning_reasons":[],"license_spdx":"Apache-2.0","license_type":"open","license_override":"","trust_score":69.5,"trust_score_v2":69.5,"rank_v2":87,"rank_v2_delta":33,"trust_v2_adjustment":2.8,"trust_confidence":1.0,"trust_breakdown":{"safety":10.3,"identity":10.8,"transparency":13.5,"maintenance":18.0,"adoption":14.1},"trust_v2_breakdown":{"mcp":2.0,"external_dependencies":-2.0,"tool_plugin_surface":-1.2,"package_provenance_drift":4.0},"pending_signals":false},{"name":"DeepEval","repo":"confident-ai/deepeval","display_repo":"","url":"https://github.com/confident-ai/deepeval","rank":88,"previous_rank":88,"rank_delta":0,"stars":16763,"stars_fmt":"16.8k","forks":1640,"forks_fmt":"1.6k","last_push":"2026-07-10","days_ago":1,"weekly_commits":148,"commits_low_confidence":false,"score":90.3,"description":"The LLM Evaluation Framework","language":"Python","open_issues":209,"category":"Observability & Evaluation","category_rank":9,"npm_package":"","crate_package":"","pypi_package":"deepeval","weekly_downloads":2166901,"dl_source":"pypi","hn_mentions_30d":1,"has_provenance":false,"npm_provenance":null,"pypi_provenance":false,"signed_commits_ratio":0.22,"scorecard_score":3.8,"scorecard_checks":{"Binary-Artifacts":10,"Branch-Protection":0,"CI-Tests":10,"CII-Best-Practices":0,"Code-Review":3,"Contributors":10,"Dangerous-Workflow":10,"Dependency-Update-Tool":0,"Fuzzing":0,"License":10,"Maintained":10,"Packaging":-1,"Pinned-Dependencies":0,"SAST":0,"Security-Policy":0,"Signed-Releases":-1,"Token-Permissions":0,"Vulnerabilities":0},"scorecard_scanned_at":"2026-07-11T01:28:49Z","slug":"deepeval","source_note":"","public_actions":null,"mcp_server_support":{"status":"implemented","confidence":"medium","evidence":["README/docs explicitly mention an MCP server"]},"external_service_dependencies":{"providers":["Amazon Bedrock","Anthropic","Google Gemini","OpenAI"],"requires_api_keys":true,"confidence":"high","evidence":["README/docs mention OpenAI","Found OpenAI dependency 'openai' in pyproject.toml","Found OpenAI credential/config marker 'OPENAI_API_KEY'","README/docs mention Anthropic","Found Anthropic dependency 'anthropic' in pyproject.toml","Found Google Gemini dependency '@google/genai' in typescript/package.json"]},"tool_plugin_surface":{"plugin_system":"declared","tool_tags":["code","search"],"confidence":"high","evidence":["README/docs mention a declared plugin/integration surface","README/docs mention search capabilities","README/docs mention code capabilities"]},"package_provenance_drift":{"status":"match","confidence":"high","summary":"Published package metadata matches the tracked repo","evidence":["pypi package 'deepeval' points to the tracked repo"]},"evidence_grade":"B","coverage_grade":"A","signal_coverage":0.8,"signal_types":4,"listing_status":"listed","display_listing_status":"listed","display_status_label":"Listed","has_warning":false,"warning_reasons":[],"license_spdx":"Apache-2.0","license_type":"open","license_override":"","trust_score":69.5,"trust_score_v2":69.5,"rank_v2":88,"rank_v2_delta":30,"trust_v2_adjustment":2.6,"trust_confidence":1.0,"trust_breakdown":{"safety":5.9,"identity":10.8,"transparency":11.7,"maintenance":19.9,"adoption":18.6},"trust_v2_breakdown":{"mcp":2.0,"external_dependencies":-2.5,"tool_plugin_surface":-0.9,"package_provenance_drift":4.0},"pending_signals":false},{"name":"Goose","repo":"aaif-goose/goose","display_repo":"","url":"https://github.com/aaif-goose/goose","rank":89,"previous_rank":90,"rank_delta":1,"stars":51053,"stars_fmt":"51.1k","forks":5652,"forks_fmt":"5.7k","last_push":"2026-07-11","days_ago":0,"weekly_commits":326,"commits_low_confidence":false,"score":95.6,"description":"an open source, extensible AI agent that goes beyond code suggestions - install, execute, edit, and test with any LLM","language":"Rust","open_issues":190,"category":"Coding Agents","category_rank":15,"npm_package":"","crate_package":"","pypi_package":"","weekly_downloads":null,"dl_source":"","hn_mentions_30d":0,"has_provenance":false,"npm_provenance":null,"pypi_provenance":null,"signed_commits_ratio":1.0,"scorecard_score":5.9,"scorecard_checks":{"Binary-Artifacts":10,"Branch-Protection":8,"CI-Tests":10,"CII-Best-Practices":0,"Code-Review":10,"Contributors":10,"Dangerous-Workflow":0,"Dependency-Update-Tool":10,"Fuzzing":0,"License":10,"Maintained":10,"Packaging":10,"Pinned-Dependencies":7,"SAST":9,"Security-Policy":10,"Signed-Releases":0,"Token-Permissions":0,"Vulnerabilities":0},"scorecard_scanned_at":"2026-07-11T01:27:14Z","slug":"goose","source_note":"","public_actions":null,"mcp_server_support":{"status":"implemented","confidence":"high","evidence":["README/docs mention MCP support","Found MCP-related server path: crates/goose-mcp/src/mcp_server_runner.rs","Found MCP-related server path: crates/goose/src/plugins/mcp_servers.rs","Found MCP-related server test path: crates/goose/tests/fastmcp_test_server.py"]},"external_service_dependencies":{"providers":[],"requires_api_keys":false,"confidence":null,"evidence":[]},"tool_plugin_surface":{"plugin_system":"extension-based","tool_tags":[],"confidence":"medium","evidence":["README/docs mention a extension-based plugin/integration surface"]},"package_provenance_drift":{"status":"not_applicable","confidence":null,"summary":"No package source configured","evidence":[]},"evidence_grade":"B","coverage_grade":"B","signal_coverage":0.6,"signal_types":3,"listing_status":"listed","display_listing_status":"listed","display_status_label":"Listed","has_warning":false,"warning_reasons":[],"license_spdx":"Apache-2.0","license_type":"open","license_override":"","trust_score":69.4,"trust_score_v2":69.4,"rank_v2":89,"rank_v2_delta":13,"trust_v2_adjustment":1.4,"trust_confidence":1.0,"trust_breakdown":{"safety":12.4,"identity":10.8,"transparency":13.5,"maintenance":20.0,"adoption":11.3},"trust_v2_breakdown":{"mcp":2.0,"external_dependencies":-0.0,"tool_plugin_surface":-0.6,"package_provenance_drift":0.0},"pending_signals":false},{"name":"Zeroclaw","repo":"zeroclaw-labs/zeroclaw","display_repo":"","url":"https://github.com/zeroclaw-labs/zeroclaw","rank":90,"previous_rank":89,"rank_delta":-1,"stars":32224,"stars_fmt":"32.2k","forks":4805,"forks_fmt":"4.8k","last_push":"2026-07-11","days_ago":0,"weekly_commits":761,"commits_low_confidence":false,"score":94.1,"description":"Fast, small, and fully autonomous AI personal assistant infrastructure, any OS, any platform — deploy anywhere, swap any","language":"Rust","open_issues":312,"category":"Agent Frameworks","category_rank":19,"npm_package":"","crate_package":"","pypi_package":"","weekly_downloads":null,"dl_source":"","hn_mentions_30d":null,"has_provenance":false,"npm_provenance":null,"pypi_provenance":null,"signed_commits_ratio":1.0,"scorecard_score":7.2,"scorecard_checks":{"Binary-Artifacts":9,"Branch-Protection":8,"CI-Tests":10,"CII-Best-Practices":0,"Code-Review":10,"Contributors":10,"Dangerous-Workflow":10,"Dependency-Update-Tool":10,"Fuzzing":10,"License":10,"Maintained":10,"Packaging":10,"Pinned-Dependencies":9,"SAST":7,"Security-Policy":10,"Signed-Releases":0,"Token-Permissions":0,"Vulnerabilities":0},"scorecard_scanned_at":"2026-07-10T16:23:27Z","slug":"zeroclaw","source_note":"","public_actions":null,"mcp_server_support":{"status":"none","confidence":null,"evidence":[]},"external_service_dependencies":{"providers":["Anthropic","OpenAI"],"requires_api_keys":false,"confidence":"high","evidence":["README/docs mention OpenAI","README/docs mention Anthropic"]},"tool_plugin_surface":{"plugin_system":"declared","tool_tags":["code"],"confidence":"high","evidence":["README/docs mention a declared plugin/integration surface","README/docs mention code capabilities"]},"package_provenance_drift":{"status":"not_applicable","confidence":null,"summary":"No package source configured","evidence":[]},"evidence_grade":"B","coverage_grade":"C","signal_coverage":0.4,"signal_types":2,"listing_status":"listed","display_listing_status":"listed","display_status_label":"Listed","has_warning":false,"warning_reasons":[],"license_spdx":"Apache-2.0","license_type":"open","license_override":"","trust_score":69.1,"trust_score_v2":69.1,"rank_v2":90,"rank_v2_delta":-2,"trust_v2_adjustment":-1.1,"trust_confidence":1.0,"trust_breakdown":{"safety":14.0,"identity":10.8,"transparency":14.6,"maintenance":20.0,"adoption":10.8},"trust_v2_breakdown":{"mcp":0.0,"external_dependencies":-0.5,"tool_plugin_surface":-0.6,"package_provenance_drift":0.0},"pending_signals":false},{"name":"CAMEL","repo":"camel-ai/camel","display_repo":"","url":"https://github.com/camel-ai/camel","rank":91,"previous_rank":91,"rank_delta":0,"stars":17361,"stars_fmt":"17.4k","forks":1992,"forks_fmt":"2.0k","last_push":"2026-07-10","days_ago":1,"weekly_commits":28,"commits_low_confidence":false,"score":83.9,"description":"🐫 CAMEL: The first and the best multi-agent framework. Finding the Scaling Law of Agents. https://www.camel-ai.org","language":"Python","open_issues":215,"category":"Multi-Agent Systems","category_rank":3,"npm_package":"","crate_package":"","pypi_package":"camel-ai","weekly_downloads":14686,"dl_source":"pypi","hn_mentions_30d":0,"has_provenance":false,"npm_provenance":null,"pypi_provenance":false,"signed_commits_ratio":0.57,"scorecard_score":6.9,"scorecard_checks":{"Binary-Artifacts":10,"Branch-Protection":6,"CI-Tests":10,"CII-Best-Practices":0,"Code-Review":5,"Contributors":10,"Dangerous-Workflow":10,"Dependency-Update-Tool":10,"Fuzzing":0,"License":10,"Maintained":10,"Packaging":10,"Pinned-Dependencies":5,"SAST":10,"Security-Policy":10,"Signed-Releases":0,"Token-Permissions":9,"Vulnerabilities":0},"scorecard_scanned_at":"2026-07-11T02:00:45Z","slug":"camel","source_note":"","public_actions":null,"mcp_server_support":{"status":"declared","confidence":"medium","evidence":["Found MCP-related server path: examples/agents/mcp_agent/mcp_servers_config.json","Found MCP-related server path: examples/toolkits/mcp/mcp_arxiv_toolkit/arxiv_toolkit_server.py","Found MCP-related server docs path: docs/mcp/camel_toolkits_as_an_mcp_server.md","Found MCP-related server docs path: docs/mcp/export_camel_agent_as_mcp_server.md"]},"external_service_dependencies":{"providers":["Amazon Bedrock","Anthropic","E2B","Firecrawl","OpenAI","Postgres","Qdrant","Redis","SerpAPI","Tavily","Weaviate"],"requires_api_keys":true,"confidence":"high","evidence":["Found OpenAI dependency 'openai' in pyproject.toml","Found OpenAI credential/config marker 'OPENAI_API_KEY'","README/docs also mention OpenAI","Found Anthropic dependency 'anthropic' in pyproject.toml","Found Amazon Bedrock dependency 'boto3' in pyproject.toml","Found Qdrant dependency 'qdrant' in pyproject.toml"]},"tool_plugin_surface":{"plugin_system":"declared","tool_tags":["browser","database","search"],"confidence":"high","evidence":["README/docs mention a declared plugin/integration surface","Found browser dependency 'playwright' in pyproject.toml","Found search dependency 'tavily' in pyproject.toml","README/docs also mention search capabilities","Found database dependency 'pg' in pyproject.toml"]},"package_provenance_drift":{"status":"match","confidence":"high","summary":"Published package metadata matches the tracked repo","evidence":["pypi package 'camel-ai' points to the tracked repo"]},"evidence_grade":"B","coverage_grade":"A","signal_coverage":0.8,"signal_types":4,"listing_status":"listed","display_listing_status":"listed","display_status_label":"Listed","has_warning":false,"warning_reasons":[],"license_spdx":"Apache-2.0","license_type":"open","license_override":"","trust_score":69.0,"trust_score_v2":69.0,"rank_v2":91,"rank_v2_delta":-2,"trust_v2_adjustment":-1.2,"trust_confidence":1.0,"trust_breakdown":{"safety":11.5,"identity":10.8,"transparency":14.4,"maintenance":17.8,"adoption":15.7},"trust_v2_breakdown":{"mcp":0.0,"external_dependencies":-4.0,"tool_plugin_surface":-1.2,"package_provenance_drift":4.0},"pending_signals":false},{"name":"Crawl4AI","repo":"unclecode/crawl4ai","display_repo":"","url":"https://github.com/unclecode/crawl4ai","rank":92,"previous_rank":92,"rank_delta":0,"stars":72270,"stars_fmt":"72.3k","forks":7405,"forks_fmt":"7.4k","last_push":"2026-07-09","days_ago":2,"weekly_commits":32,"commits_low_confidence":false,"score":91.0,"description":"🚀🤖 Crawl4AI: Open-source LLM Friendly Web Crawler & Scraper. Don't be shy, join here: https://discord.gg/jP8KfhDhyN","language":"Python","open_issues":21,"category":"Research & Data","category_rank":6,"npm_package":"","crate_package":"","pypi_package":"crawl4ai","weekly_downloads":437498,"dl_source":"pypi","hn_mentions_30d":3,"has_provenance":false,"npm_provenance":null,"pypi_provenance":false,"signed_commits_ratio":0.25,"scorecard_score":5.3,"scorecard_checks":{"Binary-Artifacts":10,"Branch-Protection":5,"CI-Tests":3,"CII-Best-Practices":0,"Code-Review":9,"Contributors":10,"Dangerous-Workflow":10,"Dependency-Update-Tool":0,"Fuzzing":0,"License":10,"Maintained":10,"Packaging":10,"Pinned-Dependencies":0,"SAST":0,"Security-Policy":10,"Signed-Releases":-1,"Token-Permissions":0,"Vulnerabilities":0},"scorecard_scanned_at":"2026-07-10T07:56:41Z","slug":"crawl4ai","source_note":"","public_actions":null,"mcp_server_support":{"status":"declared","confidence":"low","evidence":["README/docs mention MCP support"]},"external_service_dependencies":{"providers":["OpenAI","Redis"],"requires_api_keys":true,"confidence":"high","evidence":["README/docs mention OpenAI","Found OpenAI credential/config marker 'OPENAI_API_KEY'","README/docs mention Redis"]},"tool_plugin_surface":{"plugin_system":"marketplace","tool_tags":["browser","code","database","filesystem","search"],"confidence":"high","evidence":["README/docs mention a marketplace plugin/integration surface","README/docs mention browser capabilities","README/docs mention filesystem capabilities","README/docs mention search capabilities","README/docs mention database capabilities","README/docs mention code capabilities"]},"package_provenance_drift":{"status":"match","confidence":"high","summary":"Published package metadata matches the tracked repo","evidence":["pypi package 'crawl4ai' points to the tracked repo"]},"evidence_grade":"B","coverage_grade":"A","signal_coverage":0.8,"signal_types":4,"listing_status":"listed","display_listing_status":"listed","display_status_label":"Listed","has_warning":false,"warning_reasons":[],"license_spdx":"Apache-2.0","license_type":"open","license_override":"","trust_score":68.8,"trust_score_v2":68.8,"rank_v2":92,"rank_v2_delta":6,"trust_v2_adjustment":0.0,"trust_confidence":1.0,"trust_breakdown":{"safety":7.9,"identity":10.8,"transparency":13.0,"maintenance":17.9,"adoption":19.2},"trust_v2_breakdown":{"mcp":0.0,"external_dependencies":-1.5,"tool_plugin_surface":-2.5,"package_provenance_drift":4.0},"pending_signals":false},{"name":"Pyod","repo":"yzhao062/pyod","display_repo":"","url":"https://github.com/yzhao062/pyod","rank":93,"previous_rank":93,"rank_delta":0,"stars":9911,"stars_fmt":"9.9k","forks":1479,"forks_fmt":"1.5k","last_push":"2026-06-17","days_ago":24,"weekly_commits":7,"commits_low_confidence":false,"score":71.7,"description":"A Python library for anomaly detection across tabular, time series, graph, text, image, and audio data. 60+ detectors, b","language":"Python","open_issues":187,"category":"Agent Frameworks","category_rank":20,"npm_package":"","crate_package":"","pypi_package":"pyod","weekly_downloads":966473,"dl_source":"pypi","hn_mentions_30d":null,"has_provenance":false,"npm_provenance":null,"pypi_provenance":false,"signed_commits_ratio":0.27,"scorecard_score":5.2,"scorecard_checks":{"Binary-Artifacts":10,"Branch-Protection":0,"CI-Tests":7,"CII-Best-Practices":0,"Code-Review":4,"Contributors":10,"Dangerous-Workflow":10,"Dependency-Update-Tool":10,"Fuzzing":0,"License":10,"Maintained":10,"Packaging":-1,"Pinned-Dependencies":0,"SAST":9,"Security-Policy":0,"Signed-Releases":-1,"Token-Permissions":0,"Vulnerabilities":2},"scorecard_scanned_at":"2026-07-11T03:35:20Z","slug":"pyod","source_note":"","public_actions":null,"mcp_server_support":{"status":"implemented","confidence":"high","evidence":["README/docs explicitly mention an MCP server","Found MCP-related server path: pyod/mcp_server.py","Found MCP-related server test path: pyod/test/test_mcp_server_import.py"]},"external_service_dependencies":{"providers":["OpenAI"],"requires_api_keys":false,"confidence":"high","evidence":["README/docs mention OpenAI","Found OpenAI dependency 'openai' in pyproject.toml"]},"tool_plugin_surface":{"plugin_system":"none","tool_tags":["code"],"confidence":"medium","evidence":["README/docs mention code capabilities"]},"package_provenance_drift":{"status":"match","confidence":"high","summary":"Published package metadata matches the tracked repo","evidence":["pypi package 'pyod' points to the tracked repo"]},"evidence_grade":"B","coverage_grade":"B","signal_coverage":0.6,"signal_types":3,"listing_status":"listed","display_listing_status":"listed","display_status_label":"Listed","has_warning":false,"warning_reasons":[],"license_spdx":"BSD-2-Clause","license_type":"open","license_override":"","trust_score":68.8,"trust_score_v2":68.8,"rank_v2":93,"rank_v2_delta":59,"trust_v2_adjustment":5.7,"trust_confidence":1.0,"trust_breakdown":{"safety":7.8,"identity":10.8,"transparency":12.9,"maintenance":14.0,"adoption":17.6},"trust_v2_breakdown":{"mcp":2.0,"external_dependencies":-0.0,"tool_plugin_surface":-0.3,"package_provenance_drift":4.0},"pending_signals":false},{"name":"Cua","repo":"trycua/cua","display_repo":"","url":"https://github.com/trycua/cua","rank":94,"previous_rank":94,"rank_delta":0,"stars":19551,"stars_fmt":"19.6k","forks":1283,"forks_fmt":"1.3k","last_push":"2026-07-11","days_ago":0,"weekly_commits":223,"commits_low_confidence":false,"score":90.2,"description":"Open-source infrastructure for Computer-Use Agents. Sandboxes, SDKs, and benchmarks to train and evaluate AI agents that","language":"HTML","open_issues":184,"category":"Browser & Computer Use","category_rank":5,"npm_package":"","crate_package":"","pypi_package":"cua","weekly_downloads":11265,"dl_source":"pypi","hn_mentions_30d":null,"has_provenance":false,"npm_provenance":null,"pypi_provenance":false,"signed_commits_ratio":0.65,"scorecard_score":3.0,"scorecard_checks":{"Binary-Artifacts":9,"Branch-Protection":5,"CI-Tests":10,"CII-Best-Practices":0,"Code-Review":0,"Contributors":10,"Dangerous-Workflow":0,"Dependency-Update-Tool":0,"Fuzzing":0,"License":10,"Maintained":10,"Packaging":10,"Pinned-Dependencies":1,"SAST":0,"Security-Policy":0,"Signed-Releases":0,"Token-Permissions":0,"Vulnerabilities":0},"scorecard_scanned_at":"2026-07-11T01:25:29Z","slug":"cua","source_note":"","public_actions":null,"mcp_server_support":{"status":"implemented","confidence":"high","evidence":["README/docs explicitly mention an MCP server","Found MCP-related server path: .github/workflows/cd-py-mcp-server.yml","Found MCP-related server path: .github/workflows/ci-py-mcp-server.yml","Found MCP-related server docs path: docs/content/docs/cua/reference/mcp-server/client-integrations.mdx"]},"external_service_dependencies":{"providers":["Amazon Bedrock","Anthropic","OpenAI"],"requires_api_keys":false,"confidence":"high","evidence":["Found OpenAI dependency 'openai' in pyproject.toml","Found Anthropic dependency 'anthropic' in pyproject.toml","Found Amazon Bedrock dependency 'bedrock' in docs/package.json"]},"tool_plugin_surface":{"plugin_system":"none","tool_tags":["browser","code","shell"],"confidence":"high","evidence":["Found browser dependency 'playwright' in pyproject.toml","Found shell dependency 'pty' in libs/cuabot/package.json","README/docs mention code capabilities"]},"package_provenance_drift":{"status":"match","confidence":"high","summary":"Published package metadata matches the tracked repo","evidence":["pypi package 'cua' points to the tracked repo"]},"evidence_grade":"B","coverage_grade":"B","signal_coverage":0.6,"signal_types":3,"listing_status":"listed","display_listing_status":"listed","display_status_label":"Listed","has_warning":false,"warning_reasons":[],"license_spdx":"MIT","license_type":"open","license_override":"","trust_score":68.7,"trust_score_v2":68.7,"rank_v2":94,"rank_v2_delta":43,"trust_v2_adjustment":4.1,"trust_confidence":1.0,"trust_breakdown":{"safety":7.0,"identity":10.8,"transparency":11.1,"maintenance":20.0,"adoption":15.7},"trust_v2_breakdown":{"mcp":2.0,"external_dependencies":-1.0,"tool_plugin_surface":-0.9,"package_provenance_drift":4.0},"pending_signals":false},{"name":"MCP TypeScript SDK","repo":"modelcontextprotocol/typescript-sdk","display_repo":"","url":"https://github.com/modelcontextprotocol/typescript-sdk","rank":95,"previous_rank":96,"rank_delta":1,"stars":12823,"stars_fmt":"12.8k","forks":1968,"forks_fmt":"2.0k","last_push":"2026-07-10","days_ago":1,"weekly_commits":72,"commits_low_confidence":false,"score":88.1,"description":"The official TypeScript SDK for Model Context Protocol servers and clients","language":"TypeScript","open_issues":240,"category":"Protocols & Tool Integration","category_rank":6,"npm_package":"","crate_package":"","pypi_package":"","weekly_downloads":null,"dl_source":"","hn_mentions_30d":null,"has_provenance":false,"npm_provenance":null,"pypi_provenance":null,"signed_commits_ratio":1.0,"scorecard_score":6.4,"scorecard_checks":{"Binary-Artifacts":10,"Branch-Protection":5,"CI-Tests":10,"CII-Best-Practices":0,"Code-Review":3,"Contributors":10,"Dangerous-Workflow":10,"Dependency-Update-Tool":10,"Fuzzing":0,"License":9,"Maintained":10,"Packaging":10,"Pinned-Dependencies":5,"SAST":9,"Security-Policy":10,"Signed-Releases":-1,"Token-Permissions":0,"Vulnerabilities":0},"scorecard_scanned_at":"2026-07-10T17:27:07Z","slug":"mcp-typescript-sdk","source_note":"","public_actions":null,"mcp_server_support":{"status":"implemented","confidence":"high","evidence":["README/docs explicitly mention an MCP server","Found MCP dependency '@modelcontextprotocol/sdk' in package.json","Found MCP dependency 'modelcontextprotocol' in test/e2e/package.json"]},"external_service_dependencies":{"providers":["Anthropic"],"requires_api_keys":false,"confidence":"medium","evidence":["Found Anthropic dependency 'anthropic' in test/e2e/package.json"]},"tool_plugin_surface":{"plugin_system":"declared","tool_tags":["code"],"confidence":"high","evidence":["README/docs mention a declared plugin/integration surface","README/docs mention code capabilities"]},"package_provenance_drift":{"status":"not_applicable","confidence":null,"summary":"No package source configured","evidence":[]},"evidence_grade":"B","coverage_grade":"C","signal_coverage":0.4,"signal_types":2,"listing_status":"listed","display_listing_status":"listed","display_status_label":"Listed","has_warning":false,"warning_reasons":[],"license_spdx":"NOASSERTION","license_type":"open","license_override":"","trust_score":68.4,"trust_score_v2":68.4,"rank_v2":95,"rank_v2_delta":17,"trust_v2_adjustment":1.4,"trust_confidence":1.0,"trust_breakdown":{"safety":13.0,"identity":10.8,"transparency":13.9,"maintenance":19.4,"adoption":9.9},"trust_v2_breakdown":{"mcp":2.0,"external_dependencies":-0.0,"tool_plugin_surface":-0.6,"package_provenance_drift":0.0},"pending_signals":false},{"name":"PraisonAI","repo":"MervinPraison/PraisonAI","display_repo":"","url":"https://github.com/MervinPraison/PraisonAI","rank":96,"previous_rank":95,"rank_delta":-1,"stars":8378,"stars_fmt":"8.4k","forks":1300,"forks_fmt":"1.3k","last_push":"2026-07-10","days_ago":1,"weekly_commits":1691,"commits_low_confidence":false,"score":88.0,"description":"PraisonAI 🦞 — Hire a 24/7 AI Workforce. Stop writing boilerplate and start shipping autonomous self-improving agents tha","language":"Python","open_issues":41,"category":"Agent Frameworks","category_rank":21,"npm_package":"","crate_package":"","pypi_package":"praisonai","weekly_downloads":6413,"dl_source":"pypi","hn_mentions_30d":null,"has_provenance":false,"npm_provenance":null,"pypi_provenance":false,"signed_commits_ratio":0.63,"scorecard_score":5.4,"scorecard_checks":{"Binary-Artifacts":10,"Branch-Protection":3,"CI-Tests":10,"CII-Best-Practices":0,"Code-Review":0,"Contributors":10,"Dangerous-Workflow":10,"Dependency-Update-Tool":10,"Fuzzing":0,"License":10,"Maintained":10,"Packaging":10,"Pinned-Dependencies":0,"SAST":0,"Security-Policy":10,"Signed-Releases":-1,"Token-Permissions":0,"Vulnerabilities":0},"scorecard_scanned_at":"2026-07-10T08:52:45Z","slug":"praisonai","source_note":"","public_actions":null,"mcp_server_support":{"status":"implemented","confidence":"high","evidence":["README/docs mention MCP support","Found MCP-related server path: examples/mcp/multi_server.py","Found MCP-related server path: examples/mcp_server/README.md","Found MCP-related server test path: src/praisonai-agents/tests/simple-mcp-server.py"]},"external_service_dependencies":{"providers":["Amazon Bedrock","Anthropic","Azure OpenAI","Firecrawl","Google Gemini","OpenAI","Postgres","Redis","Tavily"],"requires_api_keys":true,"confidence":"high","evidence":["README/docs mention OpenAI","Found OpenAI dependency 'openai' in src/praisonai/pyproject.toml","Found OpenAI credential/config marker 'OPENAI_API_KEY'","README/docs mention Anthropic","Found Anthropic dependency 'anthropic' in src/praisonai-ts/package.json","README/docs mention Google Gemini"]},"tool_plugin_surface":{"plugin_system":"declared","tool_tags":["browser","code","database","search","shell"],"confidence":"high","evidence":["README/docs mention a declared plugin/integration surface","Found browser dependency 'playwright' in src/praisonai/pyproject.toml","README/docs mention shell capabilities","README/docs mention search capabilities","README/docs mention database capabilities","README/docs mention code capabilities"]},"package_provenance_drift":{"status":"match","confidence":"high","summary":"Published package metadata matches the tracked repo","evidence":["pypi package 'praisonai' points to the tracked repo"]},"evidence_grade":"B","coverage_grade":"B","signal_coverage":0.6,"signal_types":3,"listing_status":"listed","display_listing_status":"listed","display_status_label":"Listed","has_warning":false,"warning_reasons":[],"license_spdx":"MIT","license_type":"open","license_override":"","trust_score":68.4,"trust_score_v2":68.4,"rank_v2":96,"rank_v2_delta":5,"trust_v2_adjustment":0.2,"trust_confidence":1.0,"trust_breakdown":{"safety":9.9,"identity":10.8,"transparency":13.1,"maintenance":19.9,"adoption":14.5},"trust_v2_breakdown":{"mcp":2.0,"external_dependencies":-4.0,"tool_plugin_surface":-1.8,"package_provenance_drift":4.0},"pending_signals":false},{"name":"MCP Specification","repo":"modelcontextprotocol/modelcontextprotocol","display_repo":"","url":"https://github.com/modelcontextprotocol/modelcontextprotocol","rank":97,"previous_rank":97,"rank_delta":0,"stars":8568,"stars_fmt":"8.6k","forks":1650,"forks_fmt":"1.6k","last_push":"2026-07-10","days_ago":1,"weekly_commits":104,"commits_low_confidence":false,"score":88.6,"description":"Specification and documentation for the Model Context Protocol","language":"TypeScript","open_issues":114,"category":"Protocols & Tool Integration","category_rank":7,"npm_package":"","crate_package":"","pypi_package":"","weekly_downloads":null,"dl_source":"","hn_mentions_30d":null,"has_provenance":false,"npm_provenance":null,"pypi_provenance":null,"signed_commits_ratio":0.98,"scorecard_score":7.3,"scorecard_checks":{"Binary-Artifacts":10,"Branch-Protection":5,"CI-Tests":10,"CII-Best-Practices":0,"Code-Review":10,"Contributors":10,"Dangerous-Workflow":10,"Dependency-Update-Tool":10,"Fuzzing":0,"License":9,"Maintained":10,"Packaging":-1,"Pinned-Dependencies":3,"SAST":5,"Security-Policy":10,"Signed-Releases":-1,"Token-Permissions":0,"Vulnerabilities":10},"scorecard_scanned_at":"2026-07-11T03:38:26Z","slug":"mcp-specification","source_note":"","public_actions":null,"mcp_server_support":{"status":"declared","confidence":"medium","evidence":["README/docs mention MCP support","Found MCP-related server docs path: docs/images/java/java-mcp-server-architecture.jpg","Found MCP dependency 'modelcontextprotocol' in package.json","Found MCP dependency 'modelcontextprotocol' in tools/sep-automation/package.json"]},"external_service_dependencies":{"providers":[],"requires_api_keys":false,"confidence":null,"evidence":[]},"tool_plugin_surface":{"plugin_system":"declared","tool_tags":["code"],"confidence":"high","evidence":["Found declared path: .claude-plugin/marketplace.json","README/docs mention code capabilities"]},"package_provenance_drift":{"status":"not_applicable","confidence":null,"summary":"No package source configured","evidence":[]},"evidence_grade":"B","coverage_grade":"C","signal_coverage":0.4,"signal_types":2,"listing_status":"listed","display_listing_status":"listed","display_status_label":"Listed","has_warning":false,"warning_reasons":[],"license_spdx":"NOASSERTION","license_type":"open","license_override":"","trust_score":68.2,"trust_score_v2":68.2,"rank_v2":97,"rank_v2_delta":2,"trust_v2_adjustment":-0.6,"trust_confidence":1.0,"trust_breakdown":{"safety":14.0,"identity":10.8,"transparency":14.7,"maintenance":19.9,"adoption":9.4},"trust_v2_breakdown":{"mcp":0.0,"external_dependencies":-0.0,"tool_plugin_surface":-0.6,"package_provenance_drift":0.0},"pending_signals":false},{"name":"Cognee","repo":"topoteretes/cognee","display_repo":"","url":"https://github.com/topoteretes/cognee","rank":98,"previous_rank":98,"rank_delta":0,"stars":27556,"stars_fmt":"27.6k","forks":2726,"forks_fmt":"2.7k","last_push":"2026-07-11","days_ago":0,"weekly_commits":387,"commits_low_confidence":false,"score":92.6,"description":"Cognee is the open-source AI memory platform for agents. Give your AI agents persistent long-term memory across sessions","language":"Python","open_issues":241,"category":"Memory & Knowledge","category_rank":12,"npm_package":"","crate_package":"","pypi_package":"cognee","weekly_downloads":18151,"dl_source":"pypi","hn_mentions_30d":null,"has_provenance":false,"npm_provenance":null,"pypi_provenance":false,"signed_commits_ratio":0.39,"scorecard_score":5.5,"scorecard_checks":{"Binary-Artifacts":10,"Branch-Protection":6,"CI-Tests":10,"CII-Best-Practices":0,"Code-Review":6,"Contributors":10,"Dangerous-Workflow":0,"Dependency-Update-Tool":10,"Fuzzing":0,"License":10,"Maintained":10,"Packaging":10,"Pinned-Dependencies":0,"SAST":10,"Security-Policy":9,"Signed-Releases":-1,"Token-Permissions":0,"Vulnerabilities":0},"scorecard_scanned_at":"2026-07-10T07:45:30Z","slug":"cognee","source_note":"","public_actions":null,"mcp_server_support":{"status":"declared","confidence":"medium","evidence":["Found MCP-related server test path: cognee-mcp/tests/test_mcp_server_hardening.py"]},"external_service_dependencies":{"providers":["Amazon Bedrock","Anthropic","OpenAI","Postgres","Redis","Tavily"],"requires_api_keys":true,"confidence":"high","evidence":["README/docs mention OpenAI","Found OpenAI dependency 'openai' in pyproject.toml","Found OpenAI credential/config marker 'OPENAI_API_KEY'","Found Anthropic dependency 'anthropic' in pyproject.toml","Found Amazon Bedrock dependency 'boto3' in pyproject.toml","Found Tavily dependency 'tavily' in pyproject.toml"]},"tool_plugin_surface":{"plugin_system":"declared","tool_tags":["browser","code","database","search"],"confidence":"high","evidence":["README/docs mention a declared plugin/integration surface","Found browser dependency 'playwright' in pyproject.toml","README/docs mention search capabilities","README/docs mention database capabilities","README/docs mention code capabilities"]},"package_provenance_drift":{"status":"match","confidence":"high","summary":"Published package metadata matches the tracked repo","evidence":["pypi package 'cognee' points to the tracked repo"]},"evidence_grade":"B","coverage_grade":"B","signal_coverage":0.6,"signal_types":3,"listing_status":"listed","display_listing_status":"listed","display_status_label":"Listed","has_warning":false,"warning_reasons":[],"license_spdx":"Apache-2.0","license_type":"open","license_override":"","trust_score":68.1,"trust_score_v2":68.1,"rank_v2":98,"rank_v2_delta":-1,"trust_v2_adjustment":-1.0,"trust_confidence":1.0,"trust_breakdown":{"safety":8.8,"identity":10.8,"transparency":13.2,"maintenance":20.0,"adoption":16.3},"trust_v2_breakdown":{"mcp":0.0,"external_dependencies":-3.5,"tool_plugin_surface":-1.5,"package_provenance_drift":4.0},"pending_signals":false},{"name":"Weaviate","repo":"weaviate/weaviate","display_repo":"","url":"https://github.com/weaviate/weaviate","rank":99,"previous_rank":99,"rank_delta":0,"stars":16558,"stars_fmt":"16.6k","forks":1344,"forks_fmt":"1.3k","last_push":"2026-07-10","days_ago":1,"weekly_commits":816,"commits_low_confidence":false,"score":89.8,"description":"Weaviate is an open-source vector database that stores both objects and vectors, allowing for the combination of vector ","language":"Go","open_issues":389,"category":"Memory & Knowledge","category_rank":13,"npm_package":"","crate_package":"","pypi_package":"weaviate-client","weekly_downloads":49619317,"dl_source":"pypi","hn_mentions_30d":1,"has_provenance":false,"npm_provenance":null,"pypi_provenance":false,"signed_commits_ratio":0.5,"scorecard_score":6.7,"scorecard_checks":{"Binary-Artifacts":10,"Branch-Protection":5,"CI-Tests":10,"CII-Best-Practices":0,"Code-Review":10,"Contributors":10,"Dangerous-Workflow":10,"Dependency-Update-Tool":10,"Fuzzing":10,"License":10,"Maintained":10,"Packaging":10,"Pinned-Dependencies":7,"SAST":10,"Security-Policy":0,"Signed-Releases":0,"Token-Permissions":0,"Vulnerabilities":1},"scorecard_scanned_at":"2026-07-11T03:32:17Z","slug":"weaviate","source_note":"","public_actions":null,"mcp_server_support":{"status":"declared","confidence":"medium","evidence":["Found MCP-related server path: adapters/handlers/mcp/server.go"]},"external_service_dependencies":{"providers":["Firecrawl","OpenAI","Weaviate"],"requires_api_keys":false,"confidence":"high","evidence":["README/docs mention OpenAI","README/docs mention Weaviate","Found Weaviate dependency 'weaviate' in test/acceptance_with_python/requirements.txt","README/docs mention Firecrawl"]},"tool_plugin_surface":{"plugin_system":"marketplace","tool_tags":["code","database","search"],"confidence":"high","evidence":["README/docs mention a marketplace plugin/integration surface","README/docs mention search capabilities","README/docs mention database capabilities","README/docs mention code capabilities"]},"package_provenance_drift":{"status":"warning","confidence":"high","summary":"1 package source mismatch detected","evidence":["pypi package 'weaviate-client' points to weaviate/weaviate-python-client, not weaviate/weaviate"]},"evidence_grade":"B","coverage_grade":"A","signal_coverage":0.8,"signal_types":4,"listing_status":"listed","display_listing_status":"listed","display_status_label":"Listed","has_warning":false,"warning_reasons":[],"license_spdx":"BSD-3-Clause","license_type":"open","license_override":"","trust_score":67.9,"trust_score_v2":67.9,"rank_v2":99,"rank_v2_delta":-47,"trust_v2_adjustment":-7.9,"trust_confidence":1.0,"trust_breakdown":{"safety":10.9,"identity":10.8,"transparency":14.2,"maintenance":19.9,"adoption":20.0},"trust_v2_breakdown":{"mcp":0.0,"external_dependencies":-1.0,"tool_plugin_surface":-1.9,"package_provenance_drift":-5.0},"pending_signals":false},{"name":"MCP Registry","repo":"modelcontextprotocol/registry","display_repo":"","url":"https://github.com/modelcontextprotocol/registry","rank":100,"previous_rank":110,"rank_delta":10,"stars":7002,"stars_fmt":"7.0k","forks":898,"forks_fmt":"898","last_push":"2026-07-10","days_ago":1,"weekly_commits":16,"commits_low_confidence":false,"score":77.1,"description":"A community driven registry service for Model Context Protocol (MCP) servers.","language":"Go","open_issues":93,"category":"Protocols & Tool Integration","category_rank":8,"npm_package":"","crate_package":"","pypi_package":"","weekly_downloads":null,"dl_source":"","hn_mentions_30d":10,"has_provenance":false,"npm_provenance":null,"pypi_provenance":null,"signed_commits_ratio":1.0,"scorecard_score":8.1,"scorecard_checks":{"Binary-Artifacts":10,"Branch-Protection":8,"CI-Tests":9,"CII-Best-Practices":0,"Code-Review":6,"Contributors":10,"Dangerous-Workflow":10,"Dependency-Update-Tool":10,"Fuzzing":10,"License":9,"Maintained":10,"Packaging":10,"Pinned-Dependencies":7,"SAST":8,"Security-Policy":10,"Signed-Releases":8,"Token-Permissions":0,"Vulnerabilities":9},"scorecard_scanned_at":"2026-07-11T04:09:24Z","slug":"mcp-registry","source_note":"","public_actions":null,"mcp_server_support":{"status":"implemented","confidence":"medium","evidence":["README/docs explicitly mention an MCP server"]},"external_service_dependencies":{"providers":["Postgres"],"requires_api_keys":true,"confidence":"high","evidence":["README/docs mention Postgres","Found Postgres credential/config marker 'DATABASE_URL'"]},"tool_plugin_surface":{"plugin_system":"declared","tool_tags":["code"],"confidence":"high","evidence":["README/docs mention a declared plugin/integration surface","README/docs mention code capabilities"]},"package_provenance_drift":{"status":"not_applicable","confidence":null,"summary":"No package source configured","evidence":[]},"evidence_grade":"B","coverage_grade":"B","signal_coverage":0.6,"signal_types":3,"listing_status":"listed","display_listing_status":"listed","display_status_label":"Listed","has_warning":false,"warning_reasons":[],"license_spdx":"NOASSERTION","license_type":"open","license_override":"","trust_score":67.7,"trust_score_v2":67.7,"rank_v2":100,"rank_v2_delta":9,"trust_v2_adjustment":0.4,"trust_confidence":1.0,"trust_breakdown":{"safety":15.1,"identity":10.8,"transparency":15.4,"maintenance":16.8,"adoption":9.2},"trust_v2_breakdown":{"mcp":2.0,"external_dependencies":-1.0,"tool_plugin_surface":-0.6,"package_provenance_drift":0.0},"pending_signals":false},{"name":"VoltAgent","repo":"VoltAgent/voltagent","display_repo":"","url":"https://github.com/VoltAgent/voltagent","rank":101,"previous_rank":100,"rank_delta":-1,"stars":10018,"stars_fmt":"10.0k","forks":1040,"forks_fmt":"1.0k","last_push":"2026-07-10","days_ago":1,"weekly_commits":19,"commits_low_confidence":false,"score":79.2,"description":"AI Agent Engineering Platform built on an Open Source TypeScript AI Agent Framework","language":"TypeScript","open_issues":30,"category":"Agent Frameworks","category_rank":22,"npm_package":"@voltagent/core","crate_package":"","pypi_package":"","weekly_downloads":8099,"dl_source":"npm","hn_mentions_30d":null,"has_provenance":false,"npm_provenance":false,"pypi_provenance":null,"signed_commits_ratio":0.81,"scorecard_score":4.5,"scorecard_checks":{"Binary-Artifacts":10,"Branch-Protection":0,"CI-Tests":6,"CII-Best-Practices":2,"Code-Review":6,"Contributors":10,"Dangerous-Workflow":10,"Dependency-Update-Tool":0,"Fuzzing":0,"License":10,"Maintained":10,"Packaging":-1,"Pinned-Dependencies":1,"SAST":0,"Security-Policy":10,"Signed-Releases":-1,"Token-Permissions":0,"Vulnerabilities":0},"scorecard_scanned_at":"2026-07-10T07:43:54Z","slug":"voltagent","source_note":"","public_actions":null,"mcp_server_support":{"status":"implemented","confidence":"high","evidence":["README/docs explicitly mention an MCP server","Found MCP-related server path: examples/with-cerbos/src/mcp-server.ts","Found MCP-related server path: examples/with-mcp-elicitation/src/mcp-server.ts","Found MCP-related server docs path: website/docs/agents/mcp/mcp-server.md"]},"external_service_dependencies":{"providers":["Anthropic","Browserbase","Google Gemini","OpenAI"],"requires_api_keys":false,"confidence":"high","evidence":["README/docs mention OpenAI","README/docs mention Anthropic","README/docs mention Google Gemini","README/docs mention Browserbase"]},"tool_plugin_surface":{"plugin_system":"declared","tool_tags":["code","filesystem","search","shell"],"confidence":"high","evidence":["README/docs mention a declared plugin/integration surface","README/docs mention shell capabilities","Found filesystem dependency 'fs-extra' in packages/cli/package.json","README/docs mention search capabilities","README/docs mention code capabilities"]},"package_provenance_drift":{"status":"match","confidence":"high","summary":"Published package metadata matches the tracked repo","evidence":["npm package '@voltagent/core' points to the tracked repo"]},"evidence_grade":"B","coverage_grade":"B","signal_coverage":0.6,"signal_types":3,"listing_status":"listed","display_listing_status":"listed","display_status_label":"Listed","has_warning":false,"warning_reasons":[],"license_spdx":"MIT","license_type":"open","license_override":"","trust_score":67.7,"trust_score_v2":67.7,"rank_v2":101,"rank_v2_delta":34,"trust_v2_adjustment":3.0,"trust_confidence":1.0,"trust_breakdown":{"safety":9.7,"identity":10.8,"transparency":12.3,"maintenance":17.1,"adoption":14.8},"trust_v2_breakdown":{"mcp":2.0,"external_dependencies":-1.5,"tool_plugin_surface":-1.5,"package_provenance_drift":4.0},"pending_signals":false},{"name":"Nx","repo":"nrwl/nx","display_repo":"","url":"https://github.com/nrwl/nx","rank":102,"previous_rank":101,"rank_delta":-1,"stars":29149,"stars_fmt":"29.1k","forks":2919,"forks_fmt":"2.9k","last_push":"2026-07-11","days_ago":0,"weekly_commits":195,"commits_low_confidence":false,"score":92.9,"description":"The Monorepo Platform that amplifies both developers and AI agents. Nx optimizes your builds, scales your CI, and fixes ","language":"TypeScript","open_issues":341,"category":"Agent Frameworks","category_rank":23,"npm_package":"","crate_package":"","pypi_package":"","weekly_downloads":null,"dl_source":"","hn_mentions_30d":null,"has_provenance":false,"npm_provenance":null,"pypi_provenance":null,"signed_commits_ratio":1.0,"scorecard_score":6.8,"scorecard_checks":{"Binary-Artifacts":7,"Branch-Protection":8,"CI-Tests":10,"CII-Best-Practices":0,"Code-Review":10,"Contributors":10,"Dangerous-Workflow":10,"Dependency-Update-Tool":10,"Fuzzing":0,"License":10,"Maintained":10,"Packaging":-1,"Pinned-Dependencies":7,"SAST":7,"Security-Policy":10,"Signed-Releases":-1,"Token-Permissions":0,"Vulnerabilities":0},"scorecard_scanned_at":"2026-07-10T17:20:40Z","slug":"nx","source_note":"","public_actions":null,"mcp_server_support":{"status":"none","confidence":null,"evidence":[]},"external_service_dependencies":{"providers":["OpenAI","Supabase"],"requires_api_keys":false,"confidence":"high","evidence":["Found OpenAI dependency 'openai' in package.json","Found Supabase dependency 'supabase' in package.json"]},"tool_plugin_surface":{"plugin_system":"declared","tool_tags":["browser","code","filesystem"],"confidence":"high","evidence":["README/docs mention a declared plugin/integration surface","Found browser dependency 'playwright' in package.json","Found filesystem dependency 'fs-extra' in package.json","README/docs mention code capabilities"]},"package_provenance_drift":{"status":"not_applicable","confidence":null,"summary":"No package source configured","evidence":[]},"evidence_grade":"B","coverage_grade":"C","signal_coverage":0.4,"signal_types":2,"listing_status":"listed","display_listing_status":"listed","display_status_label":"Listed","has_warning":false,"warning_reasons":[],"license_spdx":"MIT","license_type":"open","license_override":"","trust_score":67.6,"trust_score_v2":67.6,"rank_v2":102,"rank_v2_delta":-8,"trust_v2_adjustment":-1.7,"trust_confidence":1.0,"trust_breakdown":{"safety":13.5,"identity":10.8,"transparency":14.3,"maintenance":20.0,"adoption":10.7},"trust_v2_breakdown":{"mcp":0.0,"external_dependencies":-0.5,"tool_plugin_surface":-1.2,"package_provenance_drift":0.0},"pending_signals":false},{"name":"Google ADK (Python)","repo":"google/adk-python","display_repo":"","url":"https://github.com/google/adk-python","rank":103,"previous_rank":102,"rank_delta":-1,"stars":20558,"stars_fmt":"20.6k","forks":3677,"forks_fmt":"3.7k","last_push":"2026-07-11","days_ago":0,"weekly_commits":429,"commits_low_confidence":false,"score":92.5,"description":"An open-source, code-first Python toolkit for building, evaluating, and deploying sophisticated AI agents with flexibili","language":"Python","open_issues":404,"category":"Agent Frameworks","category_rank":24,"npm_package":"","crate_package":"","pypi_package":"google-adk","weekly_downloads":3574900,"dl_source":"pypi","hn_mentions_30d":null,"has_provenance":false,"npm_provenance":null,"pypi_provenance":false,"signed_commits_ratio":0.0,"scorecard_score":6.0,"scorecard_checks":{"Binary-Artifacts":10,"Branch-Protection":2,"CI-Tests":-1,"CII-Best-Practices":0,"Code-Review":10,"Contributors":10,"Dangerous-Workflow":10,"Dependency-Update-Tool":10,"Fuzzing":0,"License":10,"Maintained":10,"Packaging":-1,"Pinned-Dependencies":0,"SAST":0,"Security-Policy":10,"Signed-Releases":-1,"Token-Permissions":0,"Vulnerabilities":3},"scorecard_scanned_at":"2026-07-11T03:28:30Z","slug":"google-adk-python","source_note":"","public_actions":null,"mcp_server_support":{"status":"declared","confidence":"medium","evidence":["Found MCP-related server path: contributing/samples/mcp/mcp_dynamic_header_agent/header_server.py","Found MCP-related server path: contributing/samples/mcp/mcp_progress_callback_agent/mock_progress_server.py"]},"external_service_dependencies":{"providers":["Anthropic","Browserbase","E2B","Google Gemini","OpenAI"],"requires_api_keys":false,"confidence":"high","evidence":["Found OpenAI dependency 'openai' in pyproject.toml","Found Anthropic dependency 'anthropic' in pyproject.toml","README/docs mention Google Gemini","Found Browserbase dependency 'browserbase' in contributing/samples/multimodal/computer_use/requirements.txt","Found E2B dependency 'e2b' in pyproject.toml"]},"tool_plugin_surface":{"plugin_system":"extension-based","tool_tags":["browser","code","shell"],"confidence":"high","evidence":["README/docs mention a extension-based plugin/integration surface","Found browser dependency 'playwright' in contributing/samples/multimodal/computer_use/requirements.txt","Found shell dependency 'pty' in src/google/adk/telemetry/setup.py","README/docs mention code capabilities"]},"package_provenance_drift":{"status":"unknown","confidence":"low","summary":"Package source metadata is missing or inconclusive","evidence":["pypi package 'google-adk' has a non-GitHub or unparseable source URL"]},"evidence_grade":"B","coverage_grade":"B","signal_coverage":0.6,"signal_types":3,"listing_status":"listed","display_listing_status":"listed","display_status_label":"Listed","has_warning":false,"warning_reasons":[],"license_spdx":"Apache-2.0","license_type":"open","license_override":"","trust_score":67.5,"trust_score_v2":67.5,"rank_v2":103,"rank_v2_delta":-20,"trust_v2_adjustment":-3.5,"trust_confidence":1.0,"trust_breakdown":{"safety":7.5,"identity":10.8,"transparency":13.6,"maintenance":20.0,"adoption":19.1},"trust_v2_breakdown":{"mcp":0.0,"external_dependencies":-2.0,"tool_plugin_surface":-1.5,"package_provenance_drift":0.0},"pending_signals":false},{"name":"Open SWE","repo":"langchain-ai/open-swe","display_repo":"","url":"https://github.com/langchain-ai/open-swe","rank":104,"previous_rank":103,"rank_delta":-1,"stars":10212,"stars_fmt":"10.2k","forks":1167,"forks_fmt":"1.2k","last_push":"2026-07-10","days_ago":1,"weekly_commits":209,"commits_low_confidence":false,"score":88.4,"description":"An Open-Source Asynchronous Coding Agent","language":"Python","open_issues":6,"category":"Coding Agents","category_rank":16,"npm_package":"","crate_package":"","pypi_package":"","weekly_downloads":null,"dl_source":"","hn_mentions_30d":null,"has_provenance":false,"npm_provenance":null,"pypi_provenance":null,"signed_commits_ratio":1.0,"scorecard_score":6.5,"scorecard_checks":{"Binary-Artifacts":10,"Branch-Protection":4,"CI-Tests":9,"CII-Best-Practices":0,"Code-Review":4,"Contributors":6,"Dangerous-Workflow":10,"Dependency-Update-Tool":10,"Fuzzing":0,"License":10,"Maintained":10,"Packaging":-1,"Pinned-Dependencies":5,"SAST":9,"Security-Policy":9,"Signed-Releases":-1,"Token-Permissions":0,"Vulnerabilities":5},"scorecard_scanned_at":"2026-07-08T08:24:08Z","slug":"open-swe","source_note":"","public_actions":null,"mcp_server_support":{"status":"implemented","confidence":"medium","evidence":["README/docs explicitly mention an MCP server"]},"external_service_dependencies":{"providers":["Anthropic","OpenAI","Postgres"],"requires_api_keys":false,"confidence":"high","evidence":["README/docs mention OpenAI","Found OpenAI dependency 'openai' in pyproject.toml","Found Anthropic dependency 'anthropic' in pyproject.toml","Found Postgres dependency 'pg' in pyproject.toml"]},"tool_plugin_surface":{"plugin_system":"extension-based","tool_tags":["code","database"],"confidence":"high","evidence":["README/docs mention a extension-based plugin/integration surface","Found database dependency 'pg' in pyproject.toml","README/docs mention code capabilities"]},"package_provenance_drift":{"status":"not_applicable","confidence":null,"summary":"No package source configured","evidence":[]},"evidence_grade":"B","coverage_grade":"C","signal_coverage":0.4,"signal_types":2,"listing_status":"listed","display_listing_status":"listed","display_status_label":"Listed","has_warning":false,"warning_reasons":[],"license_spdx":"MIT","license_type":"open","license_override":"","trust_score":67.2,"trust_score_v2":67.2,"rank_v2":104,"rank_v2_delta":4,"trust_v2_adjustment":-0.2,"trust_confidence":1.0,"trust_breakdown":{"safety":13.1,"identity":10.8,"transparency":14.0,"maintenance":19.9,"adoption":9.6},"trust_v2_breakdown":{"mcp":2.0,"external_dependencies":-1.0,"tool_plugin_surface":-1.2,"package_provenance_drift":0.0},"pending_signals":false},{"name":"DeerFlow","repo":"bytedance/deer-flow","display_repo":"","url":"https://github.com/bytedance/deer-flow","rank":105,"previous_rank":104,"rank_delta":-1,"stars":76743,"stars_fmt":"76.7k","forks":10421,"forks_fmt":"10.4k","last_push":"2026-07-11","days_ago":0,"weekly_commits":284,"commits_low_confidence":false,"score":98.0,"description":"An open-source long-horizon SuperAgent harness that researches, codes, and creates. With the help of sandboxes, memories","language":"Python","open_issues":577,"category":"Research & Data","category_rank":7,"npm_package":"","crate_package":"","pypi_package":"","weekly_downloads":null,"dl_source":"","hn_mentions_30d":null,"has_provenance":false,"npm_provenance":null,"pypi_provenance":null,"signed_commits_ratio":1.0,"scorecard_score":6.5,"scorecard_checks":{"Binary-Artifacts":10,"Branch-Protection":6,"CI-Tests":10,"CII-Best-Practices":0,"Code-Review":10,"Contributors":10,"Dangerous-Workflow":10,"Dependency-Update-Tool":10,"Fuzzing":0,"License":10,"Maintained":10,"Packaging":10,"Pinned-Dependencies":2,"SAST":0,"Security-Policy":10,"Signed-Releases":-1,"Token-Permissions":0,"Vulnerabilities":0},"scorecard_scanned_at":"2026-07-11T01:25:48Z","slug":"deerflow","source_note":"","public_actions":null,"mcp_server_support":{"status":"implemented","confidence":"high","evidence":["README/docs explicitly mention an MCP server","Found MCP-related server docs path: backend/docs/MCP_SERVER.md"]},"external_service_dependencies":{"providers":["E2B","Firecrawl","OpenAI","Postgres","Redis","Tavily"],"requires_api_keys":true,"confidence":"high","evidence":["Found OpenAI credential/config marker 'OPENAI_API_KEY'","README/docs also mention OpenAI","Found Tavily dependency 'tavily' in backend/packages/harness/pyproject.toml","Found Tavily credential/config marker 'TAVILY_API_KEY'","README/docs also mention Tavily","Found Firecrawl dependency 'firecrawl' in backend/packages/harness/pyproject.toml"]},"tool_plugin_surface":{"plugin_system":"declared","tool_tags":["browser","database","search"],"confidence":"high","evidence":["README/docs mention a declared plugin/integration surface","Found browser dependency 'playwright' in frontend/package.json","Found search dependency 'tavily' in backend/packages/harness/pyproject.toml","README/docs also mention search capabilities","Found database dependency 'postgres' in backend/pyproject.toml","README/docs also mention database capabilities"]},"package_provenance_drift":{"status":"not_applicable","confidence":null,"summary":"No package source configured","evidence":[]},"evidence_grade":"B","coverage_grade":"C","signal_coverage":0.4,"signal_types":2,"listing_status":"listed","display_listing_status":"listed","display_status_label":"Listed","has_warning":false,"warning_reasons":[],"license_spdx":"MIT","license_type":"open","license_override":"","trust_score":66.9,"trust_score_v2":66.9,"rank_v2":105,"rank_v2_delta":-12,"trust_v2_adjustment":-2.7,"trust_confidence":1.0,"trust_breakdown":{"safety":13.1,"identity":10.8,"transparency":14.0,"maintenance":20.0,"adoption":11.7},"trust_v2_breakdown":{"mcp":2.0,"external_dependencies":-3.5,"tool_plugin_surface":-1.2,"package_provenance_drift":0.0},"pending_signals":false},{"name":"GitHub MCP Server","repo":"github/github-mcp-server","display_repo":"","url":"https://github.com/github/github-mcp-server","rank":106,"previous_rank":106,"rank_delta":0,"stars":31351,"stars_fmt":"31.4k","forks":4550,"forks_fmt":"4.5k","last_push":"2026-07-10","days_ago":1,"weekly_commits":51,"commits_low_confidence":false,"score":90.4,"description":"GitHub's official MCP Server","language":"Go","open_issues":168,"category":"Protocols & Tool Integration","category_rank":9,"npm_package":"","crate_package":"","pypi_package":"","weekly_downloads":null,"dl_source":"","hn_mentions_30d":null,"has_provenance":false,"npm_provenance":null,"pypi_provenance":null,"signed_commits_ratio":0.5,"scorecard_score":7.3,"scorecard_checks":{"Binary-Artifacts":10,"Branch-Protection":8,"CI-Tests":10,"CII-Best-Practices":0,"Code-Review":8,"Contributors":10,"Dangerous-Workflow":10,"Dependency-Update-Tool":10,"Fuzzing":0,"License":10,"Maintained":10,"Packaging":10,"Pinned-Dependencies":5,"SAST":10,"Security-Policy":10,"Signed-Releases":0,"Token-Permissions":0,"Vulnerabilities":10},"scorecard_scanned_at":"2026-07-08T09:12:36Z","slug":"github-mcp-server","source_note":"","public_actions":null,"mcp_server_support":{"status":"implemented","confidence":"high","evidence":["README/docs explicitly mention an MCP server","Found MCP-related server path: cmd/github-mcp-server/feature_flag_docs.go","Found MCP-related server path: cmd/github-mcp-server/generate_docs.go","Found MCP dependency 'modelcontextprotocol' in ui/package.json"]},"external_service_dependencies":{"providers":["Google Gemini","OpenAI"],"requires_api_keys":false,"confidence":"high","evidence":["README/docs mention OpenAI","README/docs mention Google Gemini"]},"tool_plugin_surface":{"plugin_system":"extension-based","tool_tags":["code","search","shell"],"confidence":"high","evidence":["README/docs mention a extension-based plugin/integration surface","README/docs mention shell capabilities","README/docs mention search capabilities","README/docs mention code capabilities"]},"package_provenance_drift":{"status":"not_applicable","confidence":null,"summary":"No package source configured","evidence":[]},"evidence_grade":"B","coverage_grade":"C","signal_coverage":0.4,"signal_types":2,"listing_status":"listed","display_listing_status":"listed","display_status_label":"Listed","has_warning":false,"warning_reasons":[],"license_spdx":"MIT","license_type":"open","license_override":"","trust_score":66.7,"trust_score_v2":66.7,"rank_v2":106,"rank_v2_delta":13,"trust_v2_adjustment":0.0,"trust_confidence":1.0,"trust_breakdown":{"safety":11.6,"identity":10.8,"transparency":14.7,"maintenance":18.8,"adoption":10.8},"trust_v2_breakdown":{"mcp":2.0,"external_dependencies":-0.5,"tool_plugin_surface":-1.5,"package_provenance_drift":0.0},"pending_signals":false},{"name":"Semantic Kernel","repo":"microsoft/semantic-kernel","display_repo":"","url":"https://github.com/microsoft/semantic-kernel","rank":107,"previous_rank":105,"rank_delta":-2,"stars":28294,"stars_fmt":"28.3k","forks":4673,"forks_fmt":"4.7k","last_push":"2026-07-10","days_ago":1,"weekly_commits":41,"commits_low_confidence":false,"score":89.0,"description":"Integrate cutting-edge LLM technology quickly and easily into your apps","language":"C#","open_issues":113,"category":"Agent Frameworks","category_rank":25,"npm_package":"","crate_package":"","pypi_package":"semantic-kernel","weekly_downloads":583556,"dl_source":"pypi","hn_mentions_30d":1,"has_provenance":false,"npm_provenance":null,"pypi_provenance":false,"signed_commits_ratio":1.0,"scorecard_score":5.3,"scorecard_checks":{"Binary-Artifacts":10,"Branch-Protection":9,"CI-Tests":10,"CII-Best-Practices":2,"Code-Review":10,"Contributors":10,"Dangerous-Workflow":0,"Dependency-Update-Tool":10,"Fuzzing":0,"License":10,"Maintained":10,"Packaging":-1,"Pinned-Dependencies":0,"SAST":7,"Security-Policy":10,"Signed-Releases":0,"Token-Permissions":0,"Vulnerabilities":0},"scorecard_scanned_at":"2026-07-10T07:33:57Z","slug":"semantic-kernel","source_note":"","public_actions":null,"mcp_server_support":{"status":"declared","confidence":"medium","evidence":["README/docs mention MCP support","Found MCP-related server path: python/samples/concepts/mcp/azure_ai_agent_with_local_server.py","Found MCP-related server path: python/samples/concepts/mcp/local_agent_with_local_server.py","Found MCP-related server test path: python/tests/assets/test_plugins/TestMCPPlugin/mcp_server.py"]},"external_service_dependencies":{"providers":["Amazon Bedrock","Anthropic","Azure OpenAI","OpenAI","Pinecone","Postgres","Qdrant","Redis","Weaviate"],"requires_api_keys":true,"confidence":"high","evidence":["README/docs mention OpenAI","Found OpenAI dependency 'openai' in python/pyproject.toml","Found OpenAI credential/config marker 'OPENAI_API_KEY'","Found Anthropic dependency 'anthropic' in python/pyproject.toml","README/docs mention Azure OpenAI","Found Azure OpenAI credential/config marker 'AZURE_OPENAI_API_KEY'"]},"tool_plugin_surface":{"plugin_system":"extension-based","tool_tags":["code","database","search"],"confidence":"high","evidence":["README/docs mention a extension-based plugin/integration surface","README/docs mention search capabilities","README/docs mention database capabilities","README/docs mention code capabilities"]},"package_provenance_drift":{"status":"unknown","confidence":"low","summary":"Package source metadata is missing or inconclusive","evidence":["pypi package 'semantic-kernel' has a non-GitHub or unparseable source URL"]},"evidence_grade":"B","coverage_grade":"A","signal_coverage":0.8,"signal_types":4,"listing_status":"listed","display_listing_status":"listed","display_status_label":"Listed","has_warning":false,"warning_reasons":[],"license_spdx":"MIT","license_type":"open","license_override":"","trust_score":66.7,"trust_score_v2":66.7,"rank_v2":107,"rank_v2_delta":-35,"trust_v2_adjustment":-5.5,"trust_confidence":1.0,"trust_breakdown":{"safety":11.6,"identity":10.8,"transparency":13.0,"maintenance":18.4,"adoption":18.4},"trust_v2_breakdown":{"mcp":0.0,"external_dependencies":-4.0,"tool_plugin_surface":-1.5,"package_provenance_drift":0.0},"pending_signals":false},{"name":"Nocobase","repo":"nocobase/nocobase","display_repo":"","url":"https://github.com/nocobase/nocobase","rank":108,"previous_rank":108,"rank_delta":0,"stars":23310,"stars_fmt":"23.3k","forks":2748,"forks_fmt":"2.7k","last_push":"2026-07-11","days_ago":0,"weekly_commits":261,"commits_low_confidence":false,"score":92.2,"description":"NocoBase is an open-source AI + no-code platform for building business systems fast. Instead of generating everything fr","language":"TypeScript","open_issues":148,"category":"Workflow Platforms","category_rank":7,"npm_package":"nocobase","crate_package":"","pypi_package":"","weekly_downloads":47,"dl_source":"npm","hn_mentions_30d":null,"has_provenance":false,"npm_provenance":false,"pypi_provenance":null,"signed_commits_ratio":0.62,"scorecard_score":4.3,"scorecard_checks":{"Binary-Artifacts":10,"Branch-Protection":3,"CI-Tests":9,"CII-Best-Practices":0,"Code-Review":0,"Contributors":10,"Dangerous-Workflow":0,"Dependency-Update-Tool":10,"Fuzzing":0,"License":9,"Maintained":10,"Packaging":10,"Pinned-Dependencies":0,"SAST":0,"Security-Policy":10,"Signed-Releases":-1,"Token-Permissions":0,"Vulnerabilities":0},"scorecard_scanned_at":"2026-07-11T03:00:46Z","slug":"nocobase","source_note":"","public_actions":null,"mcp_server_support":{"status":"declared","confidence":"medium","evidence":["Found MCP-related server path: packages/plugins/@nocobase/plugin-mcp-server/.npmignore","Found MCP-related server path: packages/plugins/@nocobase/plugin-mcp-server/README.md","Found MCP-related server docs path: docs/docs/cn/plugins/@nocobase/plugin-mcp-server/index.md","Found MCP-related server docs path: docs/docs/de/plugins/@nocobase/plugin-mcp-server/index.md"]},"external_service_dependencies":{"providers":["Anthropic","E2B","OpenAI"],"requires_api_keys":false,"confidence":"high","evidence":["Found OpenAI dependency 'openai' in packages/core/ai/package.json","Found Anthropic dependency 'anthropic' in packages/core/ai/package.json","Found E2B dependency 'e2b' in package.json"]},"tool_plugin_surface":{"plugin_system":"declared","tool_tags":["code"],"confidence":"high","evidence":["README/docs mention a declared plugin/integration surface","README/docs mention code capabilities"]},"package_provenance_drift":{"status":"match","confidence":"high","summary":"Published package metadata matches the tracked repo","evidence":["npm package 'nocobase' points to the tracked repo"]},"evidence_grade":"B","coverage_grade":"B","signal_coverage":0.6,"signal_types":3,"listing_status":"listed","display_listing_status":"listed","display_status_label":"Listed","has_warning":false,"warning_reasons":[],"license_spdx":"NOASSERTION","license_type":"open","license_override":"","trust_score":66.6,"trust_score_v2":66.6,"rank_v2":108,"rank_v2_delta":33,"trust_v2_adjustment":2.4,"trust_confidence":1.0,"trust_breakdown":{"safety":8.5,"identity":10.8,"transparency":12.2,"maintenance":20.0,"adoption":12.7},"trust_v2_breakdown":{"mcp":0.0,"external_dependencies":-1.0,"tool_plugin_surface":-0.6,"package_provenance_drift":4.0},"pending_signals":false},{"name":"Airbyte","repo":"airbytehq/airbyte","display_repo":"","url":"https://github.com/airbytehq/airbyte","rank":109,"previous_rank":107,"rank_delta":-2,"stars":21605,"stars_fmt":"21.6k","forks":5250,"forks_fmt":"5.2k","last_push":"2026-07-11","days_ago":0,"weekly_commits":1354,"commits_low_confidence":false,"score":93.3,"description":"Open-source data movement for ELT pipelines and AI agents — from APIs, databases & files to warehouses, lakes, and AI ap","language":"Python","open_issues":655,"category":"Workflow Platforms","category_rank":8,"npm_package":"","crate_package":"","pypi_package":"","weekly_downloads":null,"dl_source":"","hn_mentions_30d":null,"has_provenance":false,"npm_provenance":null,"pypi_provenance":null,"signed_commits_ratio":1.0,"scorecard_score":4.8,"scorecard_checks":{"Binary-Artifacts":7,"Branch-Protection":4,"CI-Tests":10,"CII-Best-Practices":0,"Code-Review":6,"Contributors":10,"Dangerous-Workflow":0,"Dependency-Update-Tool":10,"Fuzzing":0,"License":9,"Maintained":10,"Packaging":10,"Pinned-Dependencies":6,"SAST":7,"Security-Policy":0,"Signed-Releases":-1,"Token-Permissions":0,"Vulnerabilities":0},"scorecard_scanned_at":"2026-07-11T01:31:35Z","slug":"airbyte","source_note":"","public_actions":null,"mcp_server_support":{"status":"implemented","confidence":"high","evidence":["README/docs explicitly mention an MCP server","Found MCP-related server path: docusaurus/static/img/ai-agents/fastmcp.svg","Found MCP-related server docs path: docs/ai-agents/get-started/developer-quickstart/tutorial-fastmcp.md","Found MCP-related server docs path: docs/community/mcp-servers/airbyte-knowledge-mcp.md"]},"external_service_dependencies":{"providers":[],"requires_api_keys":false,"confidence":null,"evidence":[]},"tool_plugin_surface":{"plugin_system":"declared","tool_tags":[],"confidence":"medium","evidence":["README/docs mention a declared plugin/integration surface"]},"package_provenance_drift":{"status":"not_applicable","confidence":null,"summary":"No package source configured","evidence":[]},"evidence_grade":"B","coverage_grade":"C","signal_coverage":0.4,"signal_types":2,"listing_status":"listed","display_listing_status":"listed","display_status_label":"Listed","has_warning":false,"warning_reasons":[],"license_spdx":"NOASSERTION","license_type":"source-available","license_override":"","trust_score":66.5,"trust_score_v2":66.5,"rank_v2":109,"rank_v2_delta":24,"trust_v2_adjustment":1.7,"trust_confidence":1.0,"trust_breakdown":{"safety":11.0,"identity":10.8,"transparency":12.6,"maintenance":20.0,"adoption":10.4},"trust_v2_breakdown":{"mcp":2.0,"external_dependencies":-0.0,"tool_plugin_surface":-0.3,"package_provenance_drift":0.0},"pending_signals":false},{"name":"SWE-agent","repo":"SWE-agent/SWE-agent","display_repo":"","url":"https://github.com/SWE-agent/SWE-agent","rank":110,"previous_rank":109,"rank_delta":-1,"stars":19765,"stars_fmt":"19.8k","forks":2161,"forks_fmt":"2.2k","last_push":"2026-07-07","days_ago":4,"weekly_commits":13,"commits_low_confidence":false,"score":80.2,"description":"SWE-agent takes a GitHub issue and tries to automatically fix it, using your LM of choice. It can also be employed for o","language":"Python","open_issues":21,"category":"Coding Agents","category_rank":17,"npm_package":"","crate_package":"","pypi_package":"sweagent","weekly_downloads":413,"dl_source":"pypi","hn_mentions_30d":1,"has_provenance":false,"npm_provenance":null,"pypi_provenance":false,"signed_commits_ratio":0.91,"scorecard_score":6.2,"scorecard_checks":{"Binary-Artifacts":6,"Branch-Protection":3,"CI-Tests":9,"CII-Best-Practices":0,"Code-Review":8,"Contributors":10,"Dangerous-Workflow":10,"Dependency-Update-Tool":10,"Fuzzing":0,"License":10,"Maintained":10,"Packaging":-1,"Pinned-Dependencies":0,"SAST":0,"Security-Policy":10,"Signed-Releases":-1,"Token-Permissions":0,"Vulnerabilities":10},"scorecard_scanned_at":"2026-07-10T16:22:36Z","slug":"swe-agent","source_note":"","public_actions":null,"mcp_server_support":{"status":"none","confidence":null,"evidence":[]},"external_service_dependencies":{"providers":["Postgres"],"requires_api_keys":false,"confidence":"medium","evidence":["Found Postgres dependency 'pg' in pyproject.toml"]},"tool_plugin_surface":{"plugin_system":"none","tool_tags":["code","database"],"confidence":"high","evidence":["Found database dependency 'pg' in pyproject.toml","README/docs mention code capabilities"]},"package_provenance_drift":{"status":"unknown","confidence":"low","summary":"Package source metadata is missing or inconclusive","evidence":["pypi package 'sweagent' has a non-GitHub or unparseable source URL"]},"evidence_grade":"B","coverage_grade":"A","signal_coverage":0.8,"signal_types":4,"listing_status":"listed","display_listing_status":"listed","display_status_label":"Listed","has_warning":false,"warning_reasons":[],"license_spdx":"MIT","license_type":"open","license_override":"","trust_score":66.4,"trust_score_v2":66.4,"rank_v2":110,"rank_v2_delta":4,"trust_v2_adjustment":-0.6,"trust_confidence":1.0,"trust_breakdown":{"safety":12.3,"identity":10.8,"transparency":13.8,"maintenance":16.3,"adoption":13.8},"trust_v2_breakdown":{"mcp":0.0,"external_dependencies":-0.0,"tool_plugin_surface":-0.6,"package_provenance_drift":0.0},"pending_signals":false},{"name":"Jan","repo":"janhq/jan","display_repo":"","url":"https://github.com/janhq/jan","rank":111,"previous_rank":111,"rank_delta":0,"stars":43496,"stars_fmt":"43.5k","forks":2895,"forks_fmt":"2.9k","last_push":"2026-07-10","days_ago":1,"weekly_commits":91,"commits_low_confidence":false,"score":93.3,"description":"Jan is an open source alternative to ChatGPT that runs 100% offline on your computer.","language":"TypeScript","open_issues":313,"category":"LLM Gateways & Infra","category_rank":4,"npm_package":"","crate_package":"","pypi_package":"","weekly_downloads":null,"dl_source":"","hn_mentions_30d":129,"has_provenance":false,"npm_provenance":null,"pypi_provenance":null,"signed_commits_ratio":0.99,"scorecard_score":5.9,"scorecard_checks":{"Binary-Artifacts":10,"Branch-Protection":5,"CI-Tests":9,"CII-Best-Practices":0,"Code-Review":10,"Contributors":10,"Dangerous-Workflow":10,"Dependency-Update-Tool":10,"Fuzzing":0,"License":9,"Maintained":10,"Packaging":-1,"Pinned-Dependencies":7,"SAST":0,"Security-Policy":10,"Signed-Releases":0,"Token-Permissions":0,"Vulnerabilities":0},"scorecard_scanned_at":"2026-07-11T03:36:08Z","slug":"jan","source_note":"","public_actions":null,"mcp_server_support":{"status":"declared","confidence":"medium","evidence":["README/docs mention MCP support","Found MCP-related server path: web-app/src/locales/ca/mcp-servers.json","Found MCP-related server path: web-app/src/locales/cs/mcp-servers.json","Found MCP-related server docs path: docs/src/pages/docs/desktop/_assets/mcp-server-settings.png"]},"external_service_dependencies":{"providers":["Anthropic","OpenAI"],"requires_api_keys":false,"confidence":"high","evidence":["README/docs mention OpenAI","Found OpenAI dependency 'openai' in web-app/package.json","README/docs mention Anthropic","Found Anthropic dependency 'anthropic' in web-app/package.json"]},"tool_plugin_surface":{"plugin_system":"declared","tool_tags":["code"],"confidence":"high","evidence":["README/docs mention a declared plugin/integration surface","README/docs mention code capabilities"]},"package_provenance_drift":{"status":"not_applicable","confidence":null,"summary":"No package source configured","evidence":[]},"evidence_grade":"B","coverage_grade":"B","signal_coverage":0.6,"signal_types":3,"listing_status":"listed","display_listing_status":"listed","display_status_label":"Listed","has_warning":false,"warning_reasons":[],"license_spdx":"NOASSERTION","license_type":"open","license_override":"","trust_score":66.4,"trust_score_v2":66.4,"rank_v2":111,"rank_v2_delta":-4,"trust_v2_adjustment":-1.1,"trust_confidence":1.0,"trust_breakdown":{"safety":12.3,"identity":10.8,"transparency":13.5,"maintenance":19.8,"adoption":11.1},"trust_v2_breakdown":{"mcp":0.0,"external_dependencies":-0.5,"tool_plugin_surface":-0.6,"package_provenance_drift":0.0},"pending_signals":false},{"name":"Flyte","repo":"flyteorg/flyte","display_repo":"","url":"https://github.com/flyteorg/flyte","rank":112,"previous_rank":112,"rank_delta":0,"stars":7133,"stars_fmt":"7.1k","forks":845,"forks_fmt":"845","last_push":"2026-07-11","days_ago":0,"weekly_commits":105,"commits_low_confidence":false,"score":86.7,"description":"Dynamic, resilient AI orchestration. Coordinate data, models, and compute as you build AI workflows.","language":"Go","open_issues":98,"category":"Workflow Platforms","category_rank":9,"npm_package":"","crate_package":"","pypi_package":"flytekit","weekly_downloads":98218,"dl_source":"pypi","hn_mentions_30d":null,"has_provenance":false,"npm_provenance":null,"pypi_provenance":false,"signed_commits_ratio":1.0,"scorecard_score":5.5,"scorecard_checks":{"Binary-Artifacts":10,"Branch-Protection":5,"CI-Tests":10,"CII-Best-Practices":5,"Code-Review":10,"Contributors":10,"Dangerous-Workflow":10,"Dependency-Update-Tool":10,"Fuzzing":0,"License":10,"Maintained":10,"Packaging":10,"Pinned-Dependencies":0,"SAST":0,"Security-Policy":0,"Signed-Releases":0,"Token-Permissions":0,"Vulnerabilities":0},"scorecard_scanned_at":"2026-07-11T03:29:09Z","slug":"flyte","source_note":"","public_actions":null,"mcp_server_support":{"status":"none","confidence":null,"evidence":[]},"external_service_dependencies":{"providers":[],"requires_api_keys":false,"confidence":null,"evidence":[]},"tool_plugin_surface":{"plugin_system":"declared","tool_tags":["code"],"confidence":"high","evidence":["Found declared path: docker/devbox-bundled/bootstrap/internal/transform/plugins/config/cluster_resource_templates.go","README/docs mention code capabilities"]},"package_provenance_drift":{"status":"warning","confidence":"high","summary":"1 package source mismatch detected","evidence":["pypi package 'flytekit' points to flyteorg/flytekit, not flyteorg/flyte"]},"evidence_grade":"B","coverage_grade":"B","signal_coverage":0.6,"signal_types":3,"listing_status":"listed","display_listing_status":"listed","display_status_label":"Listed","has_warning":false,"warning_reasons":[],"license_spdx":"Apache-2.0","license_type":"open","license_override":"","trust_score":66.2,"trust_score_v2":66.2,"rank_v2":112,"rank_v2_delta":-36,"trust_v2_adjustment":-5.6,"trust_confidence":1.0,"trust_breakdown":{"safety":11.9,"identity":10.8,"transparency":13.2,"maintenance":20.0,"adoption":15.9},"trust_v2_breakdown":{"mcp":0.0,"external_dependencies":-0.0,"tool_plugin_surface":-0.6,"package_provenance_drift":-5.0},"pending_signals":false},{"name":"RAGFlow","repo":"infiniflow/ragflow","display_repo":"","url":"https://github.com/infiniflow/ragflow","rank":113,"previous_rank":113,"rank_delta":0,"stars":84783,"stars_fmt":"84.8k","forks":9901,"forks_fmt":"9.9k","last_push":"2026-07-10","days_ago":1,"weekly_commits":611,"commits_low_confidence":false,"score":98.2,"description":"RAGFlow is a leading open-source Retrieval-Augmented Generation (RAG) engine that fuses cutting-edge RAG with Agent capa","language":"Go","open_issues":1968,"category":"Memory & Knowledge","category_rank":14,"npm_package":"","crate_package":"","pypi_package":"ragflow","weekly_downloads":3212562,"dl_source":"docker+pypi","hn_mentions_30d":3,"has_provenance":false,"npm_provenance":null,"pypi_provenance":false,"signed_commits_ratio":1.0,"scorecard_score":5.4,"scorecard_checks":{"Binary-Artifacts":10,"Branch-Protection":3,"CI-Tests":8,"CII-Best-Practices":0,"Code-Review":6,"Contributors":10,"Dangerous-Workflow":10,"Dependency-Update-Tool":10,"Fuzzing":0,"License":10,"Maintained":10,"Packaging":10,"Pinned-Dependencies":0,"SAST":0,"Security-Policy":10,"Signed-Releases":0,"Token-Permissions":0,"Vulnerabilities":0},"scorecard_scanned_at":"2026-07-11T03:31:58Z","slug":"ragflow","source_note":"","public_actions":null,"mcp_server_support":{"status":"declared","confidence":"medium","evidence":["Found MCP-related server path: api/db/services/mcp_server_service.py","Found MCP-related server path: web/src/interfaces/database/mcp-server.ts","Found MCP-related server docs path: docs/develop/mcp/launch_mcp_server.md","Found MCP-related server test path: test/testcases/test_web_api/test_mcp_server_app/test_mcp_server_app_unit.py"]},"external_service_dependencies":{"providers":["Amazon Bedrock","Anthropic","Google Gemini","OpenAI","Postgres","Redis","Tavily"],"requires_api_keys":false,"confidence":"high","evidence":["README/docs mention OpenAI","Found OpenAI dependency 'openai' in pyproject.toml","Found Anthropic dependency 'anthropic' in pyproject.toml","README/docs mention Google Gemini","Found Amazon Bedrock dependency 'boto3' in pyproject.toml","Found Tavily dependency 'tavily' in pyproject.toml"]},"tool_plugin_surface":{"plugin_system":"declared","tool_tags":["browser","code","database","search"],"confidence":"high","evidence":["README/docs mention a declared plugin/integration surface","Found browser dependency 'playwright' in pyproject.toml","README/docs mention search capabilities","README/docs mention database capabilities","README/docs mention code capabilities"]},"package_provenance_drift":{"status":"warning","confidence":"high","summary":"1 package source mismatch detected","evidence":["pypi package 'ragflow' points to breezedeus/ragflow, not infiniflow/ragflow"]},"evidence_grade":"B","coverage_grade":"A","signal_coverage":0.8,"signal_types":4,"listing_status":"listed","display_listing_status":"listed","display_status_label":"Listed","has_warning":false,"warning_reasons":[],"license_spdx":"Apache-2.0","license_type":"open","license_override":"","trust_score":66.1,"trust_score_v2":66.1,"rank_v2":113,"rank_v2_delta":-59,"trust_v2_adjustment":-9.5,"trust_confidence":1.0,"trust_breakdown":{"safety":11.8,"identity":10.8,"transparency":13.1,"maintenance":19.9,"adoption":20.0},"trust_v2_breakdown":{"mcp":0.0,"external_dependencies":-3.0,"tool_plugin_surface":-1.5,"package_provenance_drift":-5.0},"pending_signals":false},{"name":"Vellum Assistant","repo":"vellum-ai/vellum-assistant","display_repo":"","url":"https://github.com/vellum-ai/vellum-assistant","rank":114,"previous_rank":114,"rank_delta":0,"stars":858,"stars_fmt":"858","forks":130,"forks_fmt":"130","last_push":"2026-07-11","days_ago":0,"weekly_commits":2015,"commits_low_confidence":false,"score":77.4,"description":"An AI Assistant that’s easy to setup, does your work 24/7, knows your preferences and gets better over time.","language":"TypeScript","open_issues":31,"category":"Memory & Knowledge","category_rank":15,"npm_package":"vellum","crate_package":"","pypi_package":"","weekly_downloads":15760,"dl_source":"npm","hn_mentions_30d":0,"has_provenance":false,"npm_provenance":false,"pypi_provenance":null,"signed_commits_ratio":1.0,"scorecard_score":5.4,"scorecard_checks":{"Binary-Artifacts":10,"Branch-Protection":5,"CI-Tests":9,"CII-Best-Practices":0,"Code-Review":2,"Contributors":10,"Dangerous-Workflow":10,"Dependency-Update-Tool":0,"Fuzzing":10,"License":10,"Maintained":10,"Packaging":10,"Pinned-Dependencies":9,"SAST":0,"Security-Policy":10,"Signed-Releases":0,"Token-Permissions":0,"Vulnerabilities":0},"scorecard_scanned_at":"2026-07-07T08:07:41Z","slug":"vellum-assistant","source_note":"","public_actions":null,"mcp_server_support":{"status":"declared","confidence":"medium","evidence":["Found MCP-related server path: clients/web/src/domains/settings/mcp/mcp-add-server-modal.tsx","Found MCP-related server path: clients/web/src/domains/settings/mcp/mcp-server-card.tsx"]},"external_service_dependencies":{"providers":["Anthropic","Google Gemini","OpenAI"],"requires_api_keys":false,"confidence":"high","evidence":["README/docs mention OpenAI","README/docs mention Anthropic","README/docs mention Google Gemini"]},"tool_plugin_surface":{"plugin_system":"declared","tool_tags":["code","search","shell"],"confidence":"high","evidence":["README/docs mention a declared plugin/integration surface","README/docs mention shell capabilities","README/docs mention search capabilities","README/docs mention code capabilities"]},"package_provenance_drift":{"status":"unknown","confidence":"low","summary":"Package source metadata is missing or inconclusive","evidence":["npm package 'vellum' does not expose a source repo URL"]},"evidence_grade":"B","coverage_grade":"A","signal_coverage":0.8,"signal_types":4,"listing_status":"listed","display_listing_status":"listed","display_status_label":"Listed","has_warning":false,"warning_reasons":[],"license_spdx":"MIT","license_type":"open","license_override":"","trust_score":66.1,"trust_score_v2":66.1,"rank_v2":114,"rank_v2_delta":-14,"trust_v2_adjustment":-2.2,"trust_confidence":1.0,"trust_breakdown":{"safety":11.8,"identity":10.8,"transparency":13.1,"maintenance":20.0,"adoption":12.6},"trust_v2_breakdown":{"mcp":0.0,"external_dependencies":-1.0,"tool_plugin_surface":-1.2,"package_provenance_drift":0.0},"pending_signals":false},{"name":"Microsoft MCP Catalog","repo":"microsoft/mcp","display_repo":"","url":"https://github.com/microsoft/mcp","rank":115,"previous_rank":115,"rank_delta":0,"stars":3440,"stars_fmt":"3.4k","forks":551,"forks_fmt":"551","last_push":"2026-07-10","days_ago":1,"weekly_commits":104,"commits_low_confidence":false,"score":84.0,"description":"Catalog of official Microsoft MCP (Model Context Protocol) server implementations for AI-powered data access and tool in","language":"C#","open_issues":231,"category":"Protocols & Tool Integration","category_rank":10,"npm_package":"","crate_package":"","pypi_package":"","weekly_downloads":null,"dl_source":"","hn_mentions_30d":null,"has_provenance":false,"npm_provenance":null,"pypi_provenance":null,"signed_commits_ratio":1.0,"scorecard_score":6.8,"scorecard_checks":{"Binary-Artifacts":10,"Branch-Protection":5,"CI-Tests":10,"CII-Best-Practices":0,"Code-Review":10,"Contributors":10,"Dangerous-Workflow":10,"Dependency-Update-Tool":10,"Fuzzing":0,"License":10,"Maintained":10,"Packaging":-1,"Pinned-Dependencies":8,"SAST":0,"Security-Policy":10,"Signed-Releases":0,"Token-Permissions":10,"Vulnerabilities":0},"scorecard_scanned_at":"2026-07-11T01:35:32Z","slug":"microsoft-mcp-catalog","source_note":"","public_actions":null,"mcp_server_support":{"status":"implemented","confidence":"high","evidence":["README/docs explicitly mention an MCP server","Found MCP-related server path: .github/ISSUE_TEMPLATE/90_mcp_server_request.yml","Found MCP-related server path: servers/Azure.Mcp.Server/images/install_azure_mcp_server_extension.gif"]},"external_service_dependencies":{"providers":["Postgres","Redis"],"requires_api_keys":false,"confidence":"high","evidence":["Found Postgres dependency 'postgres' in servers/Azure.Mcp.Server/vscode/package.json","Found Redis dependency 'redis' in servers/Azure.Mcp.Server/vscode/package.json"]},"tool_plugin_surface":{"plugin_system":"marketplace","tool_tags":["browser","code","database","search","shell"],"confidence":"high","evidence":["README/docs mention a marketplace plugin/integration surface","README/docs mention browser capabilities","Found shell dependency 'pty' in servers/Azure.Mcp.Server/vscode/package.json","README/docs mention search capabilities","Found database dependency 'postgres' in servers/Azure.Mcp.Server/vscode/package.json","README/docs mention code capabilities"]},"package_provenance_drift":{"status":"not_applicable","confidence":null,"summary":"No package source configured","evidence":[]},"evidence_grade":"B","coverage_grade":"C","signal_coverage":0.4,"signal_types":2,"listing_status":"listed","display_listing_status":"listed","display_status_label":"Listed","has_warning":false,"warning_reasons":[],"license_spdx":"MIT","license_type":"open","license_override":"","trust_score":66.0,"trust_score_v2":66.0,"rank_v2":115,"rank_v2_delta":-2,"trust_v2_adjustment":-1.0,"trust_confidence":1.0,"trust_breakdown":{"safety":13.5,"identity":10.8,"transparency":14.3,"maintenance":19.9,"adoption":8.5},"trust_v2_breakdown":{"mcp":2.0,"external_dependencies":-0.5,"tool_plugin_surface":-2.5,"package_provenance_drift":0.0},"pending_signals":false},{"name":"Agency Swarm","repo":"VRSEN/agency-swarm","display_repo":"","url":"https://github.com/VRSEN/agency-swarm","rank":116,"previous_rank":116,"rank_delta":0,"stars":4478,"stars_fmt":"4.5k","forks":1056,"forks_fmt":"1.1k","last_push":"2026-07-08","days_ago":3,"weekly_commits":61,"commits_low_confidence":false,"score":83.0,"description":"Reliable Multi-Agent Orchestration Framework","language":"Python","open_issues":2,"category":"Multi-Agent Systems","category_rank":4,"npm_package":"","crate_package":"","pypi_package":"agency-swarm","weekly_downloads":10838,"dl_source":"pypi","hn_mentions_30d":0,"has_provenance":false,"npm_provenance":null,"pypi_provenance":false,"signed_commits_ratio":0.33,"scorecard_score":4.7,"scorecard_checks":{"Binary-Artifacts":10,"Branch-Protection":0,"CI-Tests":10,"CII-Best-Practices":0,"Code-Review":2,"Contributors":6,"Dangerous-Workflow":10,"Dependency-Update-Tool":10,"Fuzzing":0,"License":10,"Maintained":10,"Packaging":10,"Pinned-Dependencies":0,"SAST":0,"Security-Policy":0,"Signed-Releases":-1,"Token-Permissions":0,"Vulnerabilities":0},"scorecard_scanned_at":"2026-07-11T03:30:32Z","slug":"agency-swarm","source_note":"","public_actions":null,"mcp_server_support":{"status":"implemented","confidence":"high","evidence":["Found MCP-related server path: examples/mcp_servers.py","Found MCP-related server path: examples/utils/sse_mcp_server.py","Found MCP-related server test path: tests/integration/mcp/test_mcp_server.py","Found MCP dependency 'fastmcp' in pyproject.toml"]},"external_service_dependencies":{"providers":["Anthropic","Azure OpenAI","Google Gemini","OpenAI"],"requires_api_keys":true,"confidence":"high","evidence":["README/docs mention OpenAI","Found OpenAI dependency 'openai' in pyproject.toml","Found OpenAI credential/config marker 'OPENAI_API_KEY'","README/docs mention Anthropic","README/docs mention Google Gemini","README/docs mention Azure OpenAI"]},"tool_plugin_surface":{"plugin_system":"marketplace","tool_tags":["code","shell"],"confidence":"high","evidence":["Found marketplace path: docs/platform/marketplace/onboarding.mdx","README/docs mention shell capabilities","README/docs mention code capabilities"]},"package_provenance_drift":{"status":"match","confidence":"high","summary":"Published package metadata matches the tracked repo","evidence":["pypi package 'agency-swarm' points to the tracked repo"]},"evidence_grade":"B","coverage_grade":"A","signal_coverage":0.8,"signal_types":4,"listing_status":"listed","display_listing_status":"listed","display_status_label":"Listed","has_warning":false,"warning_reasons":[],"license_spdx":"MIT","license_type":"open","license_override":"","trust_score":65.8,"trust_score_v2":65.8,"rank_v2":116,"rank_v2_delta":28,"trust_v2_adjustment":1.9,"trust_confidence":1.0,"trust_breakdown":{"safety":7.5,"identity":10.8,"transparency":12.5,"maintenance":19.0,"adoption":14.1},"trust_v2_breakdown":{"mcp":2.0,"external_dependencies":-2.5,"tool_plugin_surface":-1.6,"package_provenance_drift":4.0},"pending_signals":false},{"name":"1Panel","repo":"1Panel-dev/1Panel","display_repo":"","url":"https://github.com/1Panel-dev/1Panel","rank":117,"previous_rank":117,"rank_delta":0,"stars":36168,"stars_fmt":"36.2k","forks":3241,"forks_fmt":"3.2k","last_push":"2026-07-10","days_ago":1,"weekly_commits":90,"commits_low_confidence":false,"score":93.0,"description":"🔥 1Panel is a modern, open-source VPS control panel — and the only one with native AI agent support. Run Ollama models, ","language":"Go","open_issues":267,"category":"Agent Frameworks","category_rank":26,"npm_package":"","crate_package":"","pypi_package":"","weekly_downloads":null,"dl_source":"","hn_mentions_30d":null,"has_provenance":false,"npm_provenance":null,"pypi_provenance":null,"signed_commits_ratio":1.0,"scorecard_score":5.4,"scorecard_checks":{"Binary-Artifacts":10,"Branch-Protection":1,"CI-Tests":10,"CII-Best-Practices":0,"Code-Review":6,"Contributors":10,"Dangerous-Workflow":10,"Dependency-Update-Tool":10,"Fuzzing":0,"License":10,"Maintained":10,"Packaging":-1,"Pinned-Dependencies":0,"SAST":0,"Security-Policy":10,"Signed-Releases":-1,"Token-Permissions":0,"Vulnerabilities":0},"scorecard_scanned_at":"2026-07-11T04:10:06Z","slug":"1panel","source_note":"","public_actions":null,"mcp_server_support":{"status":"declared","confidence":"medium","evidence":["Found MCP-related server path: agent/app/api/v2/mcp_server.go","Found MCP-related server path: agent/app/dto/request/mcp_server.go"]},"external_service_dependencies":{"providers":[],"requires_api_keys":false,"confidence":null,"evidence":[]},"tool_plugin_surface":{"plugin_system":"marketplace","tool_tags":[],"confidence":"medium","evidence":["README/docs mention a marketplace plugin/integration surface"]},"package_provenance_drift":{"status":"not_applicable","confidence":null,"summary":"No package source configured","evidence":[]},"evidence_grade":"B","coverage_grade":"C","signal_coverage":0.4,"signal_types":2,"listing_status":"listed","display_listing_status":"listed","display_status_label":"Listed","has_warning":false,"warning_reasons":[],"license_spdx":"GPL-3.0","license_type":"open","license_override":"","trust_score":65.4,"trust_score_v2":65.4,"rank_v2":117,"rank_v2_delta":6,"trust_v2_adjustment":-1.0,"trust_confidence":1.0,"trust_breakdown":{"safety":11.8,"identity":10.8,"transparency":13.1,"maintenance":19.8,"adoption":10.9},"trust_v2_breakdown":{"mcp":0.0,"external_dependencies":-0.0,"tool_plugin_surface":-1.0,"package_provenance_drift":0.0},"pending_signals":false},{"name":"Context7","repo":"upstash/context7","display_repo":"","url":"https://github.com/upstash/context7","rank":118,"previous_rank":118,"rank_delta":0,"stars":58893,"stars_fmt":"58.9k","forks":2762,"forks_fmt":"2.8k","last_push":"2026-07-10","days_ago":1,"weekly_commits":39,"commits_low_confidence":false,"score":89.6,"description":"Context7 Platform -- Up-to-date code documentation for LLMs and AI code editors","language":"TypeScript","open_issues":20,"category":"Protocols & Tool Integration","category_rank":11,"npm_package":"","crate_package":"","pypi_package":"","weekly_downloads":null,"dl_source":"","hn_mentions_30d":null,"has_provenance":false,"npm_provenance":null,"pypi_provenance":null,"signed_commits_ratio":0.99,"scorecard_score":5.9,"scorecard_checks":{"Binary-Artifacts":10,"Branch-Protection":6,"CI-Tests":1,"CII-Best-Practices":0,"Code-Review":10,"Contributors":3,"Dangerous-Workflow":10,"Dependency-Update-Tool":10,"Fuzzing":0,"License":10,"Maintained":10,"Packaging":10,"Pinned-Dependencies":0,"SAST":0,"Security-Policy":10,"Signed-Releases":-1,"Token-Permissions":0,"Vulnerabilities":0},"scorecard_scanned_at":"2026-07-11T01:34:35Z","slug":"context7","source_note":"","public_actions":null,"mcp_server_support":{"status":"implemented","confidence":"high","evidence":["README/docs explicitly mention an MCP server","Found MCP-related server path: plugins/context7-power/mcp.json","Found MCP-related server path: plugins/cursor/context7/mcp.json","Found MCP dependency 'modelcontextprotocol' in package.json"]},"external_service_dependencies":{"providers":["Redis","Supabase"],"requires_api_keys":true,"confidence":"high","evidence":["README/docs mention Supabase","Found Redis dependency 'redis' in packages/mcp/package.json"]},"tool_plugin_surface":{"plugin_system":"extension-based","tool_tags":["code","database","search"],"confidence":"high","evidence":["README/docs mention a extension-based plugin/integration surface","README/docs mention search capabilities","Found database dependency 'redis' in packages/mcp/package.json","README/docs mention code capabilities"]},"package_provenance_drift":{"status":"not_applicable","confidence":null,"summary":"No package source configured","evidence":[]},"evidence_grade":"B","coverage_grade":"C","signal_coverage":0.4,"signal_types":2,"listing_status":"listed","display_listing_status":"listed","display_status_label":"Listed","has_warning":false,"warning_reasons":[],"license_spdx":"MIT","license_type":"open","license_override":"","trust_score":65.3,"trust_score_v2":65.3,"rank_v2":118,"rank_v2_delta":7,"trust_v2_adjustment":-1.0,"trust_confidence":1.0,"trust_breakdown":{"safety":12.3,"identity":10.8,"transparency":13.5,"maintenance":18.3,"adoption":11.4},"trust_v2_breakdown":{"mcp":2.0,"external_dependencies":-1.5,"tool_plugin_surface":-1.5,"package_provenance_drift":0.0},"pending_signals":false},{"name":"Claude Code","repo":"anthropics/claude-code","display_repo":"","url":"https://github.com/anthropics/claude-code","rank":119,"previous_rank":121,"rank_delta":2,"stars":137343,"stars_fmt":"137.3k","forks":22173,"forks_fmt":"22.2k","last_push":"2026-07-11","days_ago":0,"weekly_commits":36,"commits_low_confidence":false,"score":94.6,"description":"Claude Code is an agentic coding tool that lives in your terminal, understands your codebase, and helps you code faster ","language":"Python","open_issues":10390,"category":"Coding Agents","category_rank":18,"npm_package":"@anthropic-ai/claude-code","crate_package":"","pypi_package":"","weekly_downloads":11482894,"dl_source":"npm","hn_mentions_30d":582,"has_provenance":false,"npm_provenance":false,"pypi_provenance":null,"signed_commits_ratio":0.18,"scorecard_score":5.5,"scorecard_checks":{"Binary-Artifacts":10,"Branch-Protection":5,"CI-Tests":2,"CII-Best-Practices":0,"Code-Review":1,"Contributors":10,"Dangerous-Workflow":10,"Dependency-Update-Tool":0,"Fuzzing":0,"License":9,"Maintained":10,"Packaging":-1,"Pinned-Dependencies":3,"SAST":0,"Security-Policy":10,"Signed-Releases":8,"Token-Permissions":0,"Vulnerabilities":10},"scorecard_scanned_at":"2026-07-11T01:22:06Z","slug":"claude-code","source_note":"","public_actions":{"actions_30d":81181,"actions_30d_merged":70186,"actions_30d_by_repo":[{"repo":"shaiger79/Code","count":1},{"repo":"outsharked/find-anything","count":1},{"repo":"berkmancenter/frankly","count":1},{"repo":"seanhodges/basically","count":1},{"repo":"keyorixhq/keyorix-web","count":1}]},"mcp_server_support":{"status":"none","confidence":null,"evidence":[]},"external_service_dependencies":{"providers":[],"requires_api_keys":false,"confidence":null,"evidence":[]},"tool_plugin_surface":{"plugin_system":"declared","tool_tags":[],"confidence":"medium","evidence":["README/docs mention a declared plugin/integration surface"]},"package_provenance_drift":{"status":"match","confidence":"high","summary":"Published package metadata matches the tracked repo","evidence":["npm package '@anthropic-ai/claude-code' points to the tracked repo"]},"evidence_grade":"B","coverage_grade":"A","signal_coverage":1.0,"signal_types":5,"listing_status":"warning","display_listing_status":"warning","display_status_label":"Needs review","has_warning":true,"warning_reasons":[{"repo":"anthropics/claude-code","criterion":"4.1.1","detail":"no declared license (GitHub license field is null)"}],"license_spdx":null,"license_type":"proprietary","license_override":"proprietary","trust_score":65.3,"trust_score_v2":65.3,"rank_v2":119,"rank_v2_delta":43,"trust_v2_adjustment":3.7,"trust_confidence":1.0,"trust_breakdown":{"safety":7.8,"identity":10.8,"transparency":4.7,"maintenance":18.3,"adoption":20.0},"trust_v2_breakdown":{"mcp":0.0,"external_dependencies":-0.0,"tool_plugin_surface":-0.3,"package_provenance_drift":4.0},"pending_signals":false},{"name":"Superpowers","repo":"obra/superpowers","display_repo":"","url":"https://github.com/obra/superpowers","rank":120,"previous_rank":119,"rank_delta":-1,"stars":251906,"stars_fmt":"251.9k","forks":22480,"forks_fmt":"22.5k","last_push":"2026-07-10","days_ago":1,"weekly_commits":187,"commits_low_confidence":false,"score":100.0,"description":"An agentic skills framework & software development methodology that works.","language":"Shell","open_issues":150,"category":"Coding Agents","category_rank":19,"npm_package":"superpowers","crate_package":"","pypi_package":"","weekly_downloads":799,"dl_source":"npm","hn_mentions_30d":null,"has_provenance":false,"npm_provenance":false,"pypi_provenance":null,"signed_commits_ratio":0.0,"scorecard_score":5.6,"scorecard_checks":{"Binary-Artifacts":10,"Branch-Protection":6,"CI-Tests":0,"CII-Best-Practices":0,"Code-Review":10,"Contributors":10,"Dangerous-Workflow":-1,"Dependency-Update-Tool":0,"Fuzzing":0,"License":10,"Maintained":10,"Packaging":-1,"Pinned-Dependencies":-1,"SAST":0,"Security-Policy":0,"Signed-Releases":-1,"Token-Permissions":-1,"Vulnerabilities":10},"scorecard_scanned_at":"2026-07-10T17:23:58Z","slug":"superpowers","source_note":"","public_actions":null,"mcp_server_support":{"status":"none","confidence":null,"evidence":[]},"external_service_dependencies":{"providers":["Anthropic","Google Gemini","OpenAI"],"requires_api_keys":false,"confidence":"high","evidence":["README/docs mention OpenAI","README/docs mention Anthropic","README/docs mention Google Gemini"]},"tool_plugin_surface":{"plugin_system":"marketplace","tool_tags":["code","search"],"confidence":"high","evidence":["README/docs mention a marketplace plugin/integration surface","README/docs mention search capabilities","README/docs mention code capabilities"]},"package_provenance_drift":{"status":"unknown","confidence":"low","summary":"Package source metadata is missing or inconclusive","evidence":["npm package 'superpowers' does not expose a source repo URL"]},"evidence_grade":"B","coverage_grade":"B","signal_coverage":0.6,"signal_types":3,"listing_status":"listed","display_listing_status":"listed","display_status_label":"Listed","has_warning":false,"warning_reasons":[],"license_spdx":"MIT","license_type":"open","license_override":"","trust_score":65.2,"trust_score_v2":65.2,"rank_v2":120,"rank_v2_delta":-16,"trust_v2_adjustment":-2.6,"trust_confidence":1.0,"trust_breakdown":{"safety":7.0,"identity":10.8,"transparency":13.3,"maintenance":19.9,"adoption":16.8},"trust_v2_breakdown":{"mcp":0.0,"external_dependencies":-1.0,"tool_plugin_surface":-1.6,"package_provenance_drift":0.0},"pending_signals":false},{"name":"smolagents","repo":"huggingface/smolagents","display_repo":"","url":"https://github.com/huggingface/smolagents","rank":121,"previous_rank":120,"rank_delta":-1,"stars":28285,"stars_fmt":"28.3k","forks":2757,"forks_fmt":"2.8k","last_push":"2026-07-10","days_ago":1,"weekly_commits":4,"commits_low_confidence":true,"score":76.4,"description":"🤗 smolagents: a barebones library for agents that think in code.","language":"Python","open_issues":274,"category":"Agent Frameworks","category_rank":27,"npm_package":"","crate_package":"","pypi_package":"smolagents","weekly_downloads":156307,"dl_source":"pypi","hn_mentions_30d":0,"has_provenance":false,"npm_provenance":null,"pypi_provenance":false,"signed_commits_ratio":1.0,"scorecard_score":5.8,"scorecard_checks":{"Binary-Artifacts":10,"Branch-Protection":6,"CI-Tests":8,"CII-Best-Practices":0,"Code-Review":2,"Contributors":10,"Dangerous-Workflow":10,"Dependency-Update-Tool":10,"Fuzzing":0,"License":10,"Maintained":10,"Packaging":-1,"Pinned-Dependencies":6,"SAST":0,"Security-Policy":10,"Signed-Releases":-1,"Token-Permissions":0,"Vulnerabilities":0},"scorecard_scanned_at":"2026-07-10T07:47:03Z","slug":"smolagents","source_note":"","public_actions":null,"mcp_server_support":{"status":"implemented","confidence":"medium","evidence":["README/docs explicitly mention an MCP server"]},"external_service_dependencies":{"providers":["Amazon Bedrock","Anthropic","Azure OpenAI","E2B","OpenAI"],"requires_api_keys":true,"confidence":"high","evidence":["README/docs mention OpenAI","Found OpenAI dependency 'openai' in pyproject.toml","Found OpenAI credential/config marker 'OPENAI_API_KEY'","README/docs mention Anthropic","Found Anthropic dependency 'anthropic' in examples/open_deep_research/requirements.txt","Found Anthropic credential/config marker 'ANTHROPIC_API_KEY'"]},"tool_plugin_surface":{"plugin_system":"declared","tool_tags":["browser","code","search"],"confidence":"high","evidence":["README/docs mention a declared plugin/integration surface","Found browser dependency 'selenium' in pyproject.toml","README/docs mention search capabilities","README/docs mention code capabilities"]},"package_provenance_drift":{"status":"unknown","confidence":"low","summary":"Package source metadata is missing or inconclusive","evidence":["pypi package 'smolagents' has a non-GitHub or unparseable source URL"]},"evidence_grade":"B","coverage_grade":"A","signal_coverage":0.8,"signal_types":4,"listing_status":"listed","display_listing_status":"listed","display_status_label":"Listed","has_warning":false,"warning_reasons":[],"license_spdx":"Apache-2.0","license_type":"open","license_override":"","trust_score":65.1,"trust_score_v2":65.1,"rank_v2":121,"rank_v2_delta":-11,"trust_v2_adjustment":-2.2,"trust_confidence":1.0,"trust_breakdown":{"safety":12.2,"identity":10.8,"transparency":13.4,"maintenance":13.3,"adoption":17.6},"trust_v2_breakdown":{"mcp":2.0,"external_dependencies":-3.0,"tool_plugin_surface":-1.2,"package_provenance_drift":0.0},"pending_signals":false},{"name":"AG2","repo":"ag2ai/ag2","display_repo":"","url":"https://github.com/ag2ai/ag2","rank":122,"previous_rank":122,"rank_delta":0,"stars":4755,"stars_fmt":"4.8k","forks":668,"forks_fmt":"668","last_push":"2026-07-10","days_ago":1,"weekly_commits":78,"commits_low_confidence":false,"score":83.9,"description":"AG2 (formerly AutoGen): The Open-Source AgentOS.Join us at: https://discord.gg/sNGSwQME3x","language":"Python","open_issues":7,"category":"Agent Frameworks","category_rank":28,"npm_package":"","crate_package":"","pypi_package":"","weekly_downloads":null,"dl_source":"","hn_mentions_30d":null,"has_provenance":false,"npm_provenance":null,"pypi_provenance":null,"signed_commits_ratio":0.99,"scorecard_score":7.2,"scorecard_checks":{"Binary-Artifacts":10,"Branch-Protection":5,"CI-Tests":10,"CII-Best-Practices":0,"Code-Review":5,"Contributors":10,"Dangerous-Workflow":10,"Dependency-Update-Tool":10,"Fuzzing":0,"License":10,"Maintained":10,"Packaging":-1,"Pinned-Dependencies":9,"SAST":8,"Security-Policy":10,"Signed-Releases":-1,"Token-Permissions":0,"Vulnerabilities":7},"scorecard_scanned_at":"2026-07-10T08:41:23Z","slug":"ag2","source_note":"","public_actions":null,"mcp_server_support":{"status":"declared","confidence":"medium","evidence":["Found MCP-related server path: ag2/mcp/server.py","Found MCP-related server path: ag2/tools/builtin/mcp_server.py","Found MCP-related server test path: test/config/anthropic/tools/test_mcp_server.py","Found MCP-related server test path: test/config/openai/tools/test_mcp_server.py"]},"external_service_dependencies":{"providers":["Amazon Bedrock","Anthropic","OpenAI","Redis","Tavily"],"requires_api_keys":false,"confidence":"high","evidence":["Found OpenAI dependency 'openai' in pyproject.toml","README/docs also mention OpenAI","Found Anthropic dependency 'anthropic' in pyproject.toml","Found Amazon Bedrock dependency 'bedrock' in pyproject.toml","Found Tavily dependency 'tavily' in pyproject.toml","Found Redis dependency 'redis' in pyproject.toml"]},"tool_plugin_surface":{"plugin_system":"declared","tool_tags":["database","search"],"confidence":"high","evidence":["README/docs mention a declared plugin/integration surface","Found search dependency 'tavily' in pyproject.toml","README/docs also mention search capabilities","Found database dependency 'redis' in pyproject.toml"]},"package_provenance_drift":{"status":"not_applicable","confidence":null,"summary":"No package source configured","evidence":[]},"evidence_grade":"C","coverage_grade":"C","signal_coverage":0.4,"signal_types":2,"listing_status":"listed","display_listing_status":"listed","display_status_label":"Listed","has_warning":false,"warning_reasons":[],"license_spdx":"Apache-2.0","license_type":"open","license_override":"","trust_score":64.8,"trust_score_v2":64.8,"rank_v2":122,"rank_v2_delta":-16,"trust_v2_adjustment":-2.9,"trust_confidence":1.0,"trust_breakdown":{"safety":14.0,"identity":10.8,"transparency":14.6,"maintenance":19.5,"adoption":8.8},"trust_v2_breakdown":{"mcp":0.0,"external_dependencies":-2.0,"tool_plugin_surface":-0.9,"package_provenance_drift":0.0},"pending_signals":false},{"name":"Hatchet","repo":"hatchet-dev/hatchet","display_repo":"","url":"https://github.com/hatchet-dev/hatchet","rank":123,"previous_rank":123,"rank_delta":0,"stars":7488,"stars_fmt":"7.5k","forks":447,"forks_fmt":"447","last_push":"2026-07-11","days_ago":0,"weekly_commits":164,"commits_low_confidence":false,"score":85.5,"description":"🪓 An orchestration engine for background tasks, AI agents, and durable workflows","language":"Go","open_issues":57,"category":"Workflow Platforms","category_rank":10,"npm_package":"","crate_package":"","pypi_package":"","weekly_downloads":null,"dl_source":"","hn_mentions_30d":null,"has_provenance":false,"npm_provenance":null,"pypi_provenance":null,"signed_commits_ratio":1.0,"scorecard_score":6.7,"scorecard_checks":{"Binary-Artifacts":10,"Branch-Protection":1,"CI-Tests":9,"CII-Best-Practices":0,"Code-Review":10,"Contributors":10,"Dangerous-Workflow":10,"Dependency-Update-Tool":10,"Fuzzing":0,"License":10,"Maintained":10,"Packaging":10,"Pinned-Dependencies":5,"SAST":9,"Security-Policy":10,"Signed-Releases":-1,"Token-Permissions":0,"Vulnerabilities":0},"scorecard_scanned_at":"2026-07-10T08:40:45Z","slug":"hatchet","source_note":"","public_actions":null,"mcp_server_support":{"status":"declared","confidence":"medium","evidence":["Found MCP dependency '@modelcontextprotocol/sdk' in sdks/typescript/package.json"]},"external_service_dependencies":{"providers":["Amazon Bedrock","Anthropic","OpenAI","Postgres","Redis"],"requires_api_keys":false,"confidence":"high","evidence":["Found OpenAI dependency 'openai' in sdks/python/pyproject.toml","Found Anthropic dependency 'anthropic' in sdks/typescript/package.json","Found Amazon Bedrock dependency 'boto3' in sdks/python/pyproject.toml","README/docs mention Postgres","Found Postgres dependency 'psycopg' in sdks/python/pyproject.toml","README/docs mention Redis"]},"tool_plugin_surface":{"plugin_system":"declared","tool_tags":["code","database"],"confidence":"high","evidence":["README/docs mention a declared plugin/integration surface","README/docs mention database capabilities","README/docs mention code capabilities"]},"package_provenance_drift":{"status":"not_applicable","confidence":null,"summary":"No package source configured","evidence":[]},"evidence_grade":"C","coverage_grade":"C","signal_coverage":0.4,"signal_types":2,"listing_status":"listed","display_listing_status":"listed","display_status_label":"Listed","has_warning":false,"warning_reasons":[],"license_spdx":"MIT","license_type":"open","license_override":"","trust_score":64.8,"trust_score_v2":64.8,"rank_v2":123,"rank_v2_delta":-18,"trust_v2_adjustment":-2.9,"trust_confidence":1.0,"trust_breakdown":{"safety":13.4,"identity":10.8,"transparency":14.2,"maintenance":20.0,"adoption":9.3},"trust_v2_breakdown":{"mcp":0.0,"external_dependencies":-2.0,"tool_plugin_surface":-0.9,"package_provenance_drift":0.0},"pending_signals":false},{"name":"Odysseus","repo":"pewdiepie-archdaemon/odysseus","display_repo":"","url":"https://github.com/pewdiepie-archdaemon/odysseus","rank":124,"previous_rank":125,"rank_delta":1,"stars":82171,"stars_fmt":"82.2k","forks":10800,"forks_fmt":"10.8k","last_push":"2026-07-11","days_ago":0,"weekly_commits":718,"commits_low_confidence":false,"score":98.3,"description":"Self-hosted AI workspace. ","language":"Python","open_issues":832,"category":"UI & App Builders","category_rank":5,"npm_package":"","crate_package":"","pypi_package":"","weekly_downloads":null,"dl_source":"","hn_mentions_30d":11,"has_provenance":false,"npm_provenance":null,"pypi_provenance":null,"signed_commits_ratio":null,"scorecard_score":7.5,"scorecard_checks":{"Binary-Artifacts":10,"Branch-Protection":5,"CI-Tests":10,"CII-Best-Practices":0,"Code-Review":9,"Contributors":10,"Dangerous-Workflow":10,"Dependency-Update-Tool":10,"Fuzzing":0,"License":10,"Maintained":0,"Packaging":10,"Pinned-Dependencies":6,"SAST":10,"Security-Policy":4,"Signed-Releases":-1,"Token-Permissions":10,"Vulnerabilities":10},"scorecard_scanned_at":"2026-07-11T03:35:36Z","slug":"odysseus","source_note":"","public_actions":null,"mcp_server_support":{"status":"declared","confidence":"medium","evidence":["Found MCP-related server path: mcp_servers/__init__.py","Found MCP-related server path: mcp_servers/email_server.py"]},"external_service_dependencies":{"providers":["Postgres"],"requires_api_keys":true,"confidence":"medium","evidence":["Found Postgres credential/config marker 'DATABASE_URL'"]},"tool_plugin_surface":{"plugin_system":"declared","tool_tags":["code","search","shell"],"confidence":"high","evidence":["Found declared path: integrations/codex/.codex-plugin/plugin.json","Found shell dependency 'pty' in setup.py","README/docs mention search capabilities","README/docs mention code capabilities"]},"package_provenance_drift":{"status":"not_applicable","confidence":null,"summary":"No package source configured","evidence":[]},"evidence_grade":"C","coverage_grade":"B","signal_coverage":0.6,"signal_types":3,"listing_status":"listed","display_listing_status":"listed","display_status_label":"Listed","has_warning":false,"warning_reasons":[],"license_spdx":"AGPL-3.0","license_type":"open","license_override":"","trust_score":64.7,"trust_score_v2":64.7,"rank_v2":124,"rank_v2_delta":-9,"trust_v2_adjustment":-2.2,"trust_confidence":1.0,"trust_breakdown":{"safety":9.4,"identity":10.8,"transparency":14.9,"maintenance":20.0,"adoption":11.8},"trust_v2_breakdown":{"mcp":0.0,"external_dependencies":-1.0,"tool_plugin_surface":-1.2,"package_provenance_drift":0.0},"pending_signals":false},{"name":"Ollama","repo":"ollama/ollama","display_repo":"","url":"https://github.com/ollama/ollama","rank":125,"previous_rank":124,"rank_delta":-1,"stars":175899,"stars_fmt":"175.9k","forks":16930,"forks_fmt":"16.9k","last_push":"2026-07-10","days_ago":1,"weekly_commits":67,"commits_low_confidence":false,"score":97.5,"description":"Get up and running with Kimi-K2.6, GLM-5.1, MiniMax, DeepSeek, gpt-oss, Qwen, Gemma and other models.","language":"Go","open_issues":2313,"category":"LLM Gateways & Infra","category_rank":5,"npm_package":"","crate_package":"","pypi_package":"","weekly_downloads":null,"dl_source":"","hn_mentions_30d":66,"has_provenance":false,"npm_provenance":null,"pypi_provenance":null,"signed_commits_ratio":0.9,"scorecard_score":5.4,"scorecard_checks":{"Binary-Artifacts":10,"Branch-Protection":3,"CI-Tests":9,"CII-Best-Practices":0,"Code-Review":9,"Contributors":10,"Dangerous-Workflow":10,"Dependency-Update-Tool":0,"Fuzzing":10,"License":10,"Maintained":10,"Packaging":10,"Pinned-Dependencies":0,"SAST":0,"Security-Policy":10,"Signed-Releases":0,"Token-Permissions":0,"Vulnerabilities":0},"scorecard_scanned_at":"2026-07-11T01:31:54Z","slug":"ollama","source_note":"","public_actions":null,"mcp_server_support":{"status":"none","confidence":null,"evidence":[]},"external_service_dependencies":{"providers":["OpenAI","Postgres"],"requires_api_keys":false,"confidence":"high","evidence":["README/docs mention OpenAI","README/docs mention Postgres"]},"tool_plugin_surface":{"plugin_system":"extension-based","tool_tags":["browser","code","search","shell"],"confidence":"high","evidence":["README/docs mention a extension-based plugin/integration surface","Found browser dependency 'playwright' in app/ui/app/package.json","README/docs mention shell capabilities","README/docs mention search capabilities","README/docs mention code capabilities"]},"package_provenance_drift":{"status":"not_applicable","confidence":null,"summary":"No package source configured","evidence":[]},"evidence_grade":"C","coverage_grade":"B","signal_coverage":0.6,"signal_types":3,"listing_status":"listed","display_listing_status":"listed","display_status_label":"Listed","has_warning":false,"warning_reasons":[],"license_spdx":"MIT","license_type":"open","license_override":"","trust_score":64.7,"trust_score_v2":64.7,"rank_v2":125,"rank_v2_delta":-14,"trust_v2_adjustment":-2.3,"trust_confidence":1.0,"trust_breakdown":{"safety":11.3,"identity":10.8,"transparency":13.1,"maintenance":19.2,"adoption":12.6},"trust_v2_breakdown":{"mcp":0.0,"external_dependencies":-0.5,"tool_plugin_surface":-1.8,"package_provenance_drift":0.0},"pending_signals":false},{"name":"AstrBot","repo":"AstrBotDevs/AstrBot","display_repo":"","url":"https://github.com/AstrBotDevs/AstrBot","rank":126,"previous_rank":126,"rank_delta":0,"stars":36180,"stars_fmt":"36.2k","forks":2514,"forks_fmt":"2.5k","last_push":"2026-07-09","days_ago":2,"weekly_commits":182,"commits_low_confidence":false,"score":93.1,"description":"AI Agent Assistant & development framework that integrates lots of IM platforms, LLMs, plugins and AI feature, and can b","language":"Python","open_issues":1001,"category":"Voice & Conversational","category_rank":3,"npm_package":"","crate_package":"","pypi_package":"","weekly_downloads":null,"dl_source":"","hn_mentions_30d":null,"has_provenance":false,"npm_provenance":null,"pypi_provenance":null,"signed_commits_ratio":0.89,"scorecard_score":5.4,"scorecard_checks":{"Binary-Artifacts":10,"Branch-Protection":6,"CI-Tests":9,"CII-Best-Practices":0,"Code-Review":4,"Contributors":10,"Dangerous-Workflow":10,"Dependency-Update-Tool":10,"Fuzzing":0,"License":10,"Maintained":10,"Packaging":10,"Pinned-Dependencies":0,"SAST":9,"Security-Policy":0,"Signed-Releases":0,"Token-Permissions":0,"Vulnerabilities":0},"scorecard_scanned_at":"2026-07-10T18:34:01Z","slug":"astrbot","source_note":"","public_actions":null,"mcp_server_support":{"status":"none","confidence":null,"evidence":[]},"external_service_dependencies":{"providers":["Anthropic","OpenAI"],"requires_api_keys":false,"confidence":"high","evidence":["Found OpenAI dependency 'openai' in pyproject.toml","README/docs also mention OpenAI","Found Anthropic dependency 'anthropic' in pyproject.toml","README/docs also mention Anthropic"]},"tool_plugin_surface":{"plugin_system":"marketplace","tool_tags":[],"confidence":"medium","evidence":["README/docs mention a marketplace plugin/integration surface"]},"package_provenance_drift":{"status":"not_applicable","confidence":null,"summary":"No package source configured","evidence":[]},"evidence_grade":"C","coverage_grade":"C","signal_coverage":0.4,"signal_types":2,"listing_status":"listed","display_listing_status":"listed","display_status_label":"Listed","has_warning":false,"warning_reasons":[],"license_spdx":"AGPL-3.0","license_type":"open","license_override":"","trust_score":64.4,"trust_score_v2":64.4,"rank_v2":126,"rank_v2_delta":1,"trust_v2_adjustment":-1.5,"trust_confidence":1.0,"trust_breakdown":{"safety":11.2,"identity":10.8,"transparency":13.1,"maintenance":19.9,"adoption":10.9},"trust_v2_breakdown":{"mcp":0.0,"external_dependencies":-0.5,"tool_plugin_surface":-1.0,"package_provenance_drift":0.0},"pending_signals":false},{"name":"Burr","repo":"dagworks-inc/burr","display_repo":"","url":"https://github.com/apache/burr","rank":127,"previous_rank":140,"rank_delta":13,"stars":2463,"stars_fmt":"2.5k","forks":169,"forks_fmt":"169","last_push":"2026-07-11","days_ago":0,"weekly_commits":7,"commits_low_confidence":false,"score":67.0,"description":"Build applications that make decisions (chatbots, agents, simulations, etc...). Monitor, trace, persist, and execute on ","language":"Python","open_issues":55,"category":"Agent Frameworks","category_rank":29,"npm_package":"","crate_package":"","pypi_package":"burr","weekly_downloads":5522,"dl_source":"pypi","hn_mentions_30d":0,"has_provenance":false,"npm_provenance":null,"pypi_provenance":false,"signed_commits_ratio":0.6,"scorecard_score":6.5,"scorecard_checks":{"Binary-Artifacts":10,"Branch-Protection":8,"CI-Tests":10,"CII-Best-Practices":0,"Code-Review":10,"Contributors":10,"Dangerous-Workflow":10,"Dependency-Update-Tool":10,"Fuzzing":0,"License":10,"Maintained":10,"Packaging":-1,"Pinned-Dependencies":0,"SAST":0,"Security-Policy":10,"Signed-Releases":8,"Token-Permissions":0,"Vulnerabilities":0},"scorecard_scanned_at":"2026-07-11T02:12:31Z","slug":"burr","source_note":"","public_actions":null,"mcp_server_support":{"status":"none","confidence":null,"evidence":[]},"external_service_dependencies":{"providers":["Amazon Bedrock","OpenAI","Postgres","Redis","Tavily"],"requires_api_keys":true,"confidence":"high","evidence":["README/docs mention OpenAI","Found OpenAI dependency 'openai' in pyproject.toml","Found OpenAI credential/config marker 'OPENAI_API_KEY'","Found Amazon Bedrock dependency 'bedrock' in pyproject.toml","Found Tavily dependency 'tavily' in pyproject.toml","Found Postgres dependency 'psycopg' in pyproject.toml"]},"tool_plugin_surface":{"plugin_system":"declared","tool_tags":["code","database","search","shell"],"confidence":"high","evidence":["README/docs mention a declared plugin/integration surface","README/docs mention shell capabilities","Found search dependency 'tavily' in pyproject.toml","Found database dependency 'postgres' in pyproject.toml","README/docs mention code capabilities"]},"package_provenance_drift":{"status":"match","confidence":"high","summary":"Published package metadata matches the tracked repo","evidence":["pypi package 'burr' points to the tracked repo"]},"evidence_grade":"C","coverage_grade":"A","signal_coverage":0.8,"signal_types":4,"listing_status":"listed","display_listing_status":"listed","display_status_label":"Listed","has_warning":false,"warning_reasons":[],"license_spdx":"Apache-2.0","license_type":"open","license_override":"","trust_score":64.1,"trust_score_v2":64.1,"rank_v2":127,"rank_v2_delta":12,"trust_v2_adjustment":-0.5,"trust_confidence":1.0,"trust_breakdown":{"safety":11.1,"identity":10.8,"transparency":14.0,"maintenance":15.6,"adoption":13.1},"trust_v2_breakdown":{"mcp":0.0,"external_dependencies":-3.0,"tool_plugin_surface":-1.5,"package_provenance_drift":4.0},"pending_signals":false},{"name":"Zvec","repo":"alibaba/zvec","display_repo":"","url":"https://github.com/alibaba/zvec","rank":128,"previous_rank":127,"rank_delta":-1,"stars":14720,"stars_fmt":"14.7k","forks":912,"forks_fmt":"912","last_push":"2026-07-10","days_ago":1,"weekly_commits":52,"commits_low_confidence":false,"score":85.3,"description":"A lightweight, lightning-fast, in-process vector database","language":"C++","open_issues":34,"category":"Memory & Knowledge","category_rank":16,"npm_package":"@zvec/zvec","crate_package":"","pypi_package":"zvec","weekly_downloads":13714,"dl_source":"npm+pypi","hn_mentions_30d":92,"has_provenance":false,"npm_provenance":false,"pypi_provenance":false,"signed_commits_ratio":1.0,"scorecard_score":5.3,"scorecard_checks":{"Binary-Artifacts":10,"Branch-Protection":6,"CI-Tests":10,"CII-Best-Practices":0,"Code-Review":10,"Contributors":6,"Dangerous-Workflow":0,"Dependency-Update-Tool":10,"Fuzzing":0,"License":10,"Maintained":10,"Packaging":-1,"Pinned-Dependencies":0,"SAST":1,"Security-Policy":0,"Signed-Releases":-1,"Token-Permissions":0,"Vulnerabilities":10},"scorecard_scanned_at":"2026-07-11T03:37:49Z","slug":"zvec","source_note":"","public_actions":null,"mcp_server_support":{"status":"none","confidence":null,"evidence":[]},"external_service_dependencies":{"providers":["Postgres"],"requires_api_keys":false,"confidence":"medium","evidence":["Found Postgres dependency 'pg' in pyproject.toml"]},"tool_plugin_surface":{"plugin_system":"declared","tool_tags":["database"],"confidence":"high","evidence":["Found declared path: src/core/plugin/CMakeLists.txt","Found database dependency 'pg' in pyproject.toml"]},"package_provenance_drift":{"status":"warning","confidence":"high","summary":"1 package source mismatch detected","evidence":["npm package '@zvec/zvec' points to zvec-ai/zvec-node, not alibaba/zvec","pypi package 'zvec' points to the tracked repo"]},"evidence_grade":"C","coverage_grade":"A","signal_coverage":0.8,"signal_types":4,"listing_status":"listed","display_listing_status":"listed","display_status_label":"Listed","has_warning":false,"warning_reasons":[],"license_spdx":"Apache-2.0","license_type":"open","license_override":"","trust_score":64.1,"trust_score_v2":64.1,"rank_v2":128,"rank_v2_delta":-36,"trust_v2_adjustment":-5.6,"trust_confidence":1.0,"trust_breakdown":{"safety":11.6,"identity":10.8,"transparency":13.0,"maintenance":18.8,"adoption":15.5},"trust_v2_breakdown":{"mcp":0.0,"external_dependencies":-0.0,"tool_plugin_surface":-0.6,"package_provenance_drift":-5.0},"pending_signals":false},{"name":"Google ADK (Go)","repo":"google/adk-go","display_repo":"","url":"https://github.com/google/adk-go","rank":129,"previous_rank":128,"rank_delta":-1,"stars":8523,"stars_fmt":"8.5k","forks":871,"forks_fmt":"871","last_push":"2026-07-10","days_ago":1,"weekly_commits":29,"commits_low_confidence":false,"score":80.7,"description":"An open-source, code-first Go toolkit for building, evaluating, and deploying sophisticated AI agents with flexibility a","language":"Go","open_issues":101,"category":"Agent Frameworks","category_rank":30,"npm_package":"","crate_package":"","pypi_package":"","weekly_downloads":null,"dl_source":"","hn_mentions_30d":null,"has_provenance":false,"npm_provenance":null,"pypi_provenance":null,"signed_commits_ratio":1.0,"scorecard_score":6.2,"scorecard_checks":{"Binary-Artifacts":10,"Branch-Protection":4,"CI-Tests":10,"CII-Best-Practices":0,"Code-Review":10,"Contributors":10,"Dangerous-Workflow":10,"Dependency-Update-Tool":10,"Fuzzing":0,"License":10,"Maintained":10,"Packaging":-1,"Pinned-Dependencies":4,"SAST":0,"Security-Policy":10,"Signed-Releases":-1,"Token-Permissions":0,"Vulnerabilities":0},"scorecard_scanned_at":"2026-07-11T04:05:13Z","slug":"google-adk-go","source_note":"","public_actions":null,"mcp_server_support":{"status":"none","confidence":null,"evidence":[]},"external_service_dependencies":{"providers":["Google Gemini"],"requires_api_keys":false,"confidence":"medium","evidence":["README/docs mention Google Gemini"]},"tool_plugin_surface":{"plugin_system":"declared","tool_tags":["code"],"confidence":"high","evidence":["Found declared path: internal/configurable/conformance/recordplugin/invocation_record_state.go","README/docs mention code capabilities"]},"package_provenance_drift":{"status":"not_applicable","confidence":null,"summary":"No package source configured","evidence":[]},"evidence_grade":"C","coverage_grade":"C","signal_coverage":0.4,"signal_types":2,"listing_status":"listed","display_listing_status":"listed","display_status_label":"Listed","has_warning":false,"warning_reasons":[],"license_spdx":"Apache-2.0","license_type":"open","license_override":"","trust_score":64.0,"trust_score_v2":64.0,"rank_v2":129,"rank_v2_delta":9,"trust_v2_adjustment":-0.6,"trust_confidence":1.0,"trust_breakdown":{"safety":12.8,"identity":10.8,"transparency":13.8,"maintenance":17.8,"adoption":9.4},"trust_v2_breakdown":{"mcp":0.0,"external_dependencies":-0.0,"tool_plugin_surface":-0.6,"package_provenance_drift":0.0},"pending_signals":false},{"name":"Sim","repo":"simstudioai/sim","display_repo":"","url":"https://github.com/simstudioai/sim","rank":130,"previous_rank":129,"rank_delta":-1,"stars":29028,"stars_fmt":"29.0k","forks":3696,"forks_fmt":"3.7k","last_push":"2026-07-11","days_ago":0,"weekly_commits":543,"commits_low_confidence":false,"score":93.4,"description":"Build, deploy, and orchestrate AI agents. Sim is the central intelligence layer for your AI workforce.","language":"TypeScript","open_issues":106,"category":"Workflow Platforms","category_rank":11,"npm_package":"","crate_package":"","pypi_package":"","weekly_downloads":null,"dl_source":"","hn_mentions_30d":null,"has_provenance":false,"npm_provenance":null,"pypi_provenance":null,"signed_commits_ratio":1.0,"scorecard_score":5.7,"scorecard_checks":{"Binary-Artifacts":10,"Branch-Protection":3,"CI-Tests":10,"CII-Best-Practices":0,"Code-Review":0,"Contributors":10,"Dangerous-Workflow":10,"Dependency-Update-Tool":10,"Fuzzing":0,"License":10,"Maintained":10,"Packaging":10,"Pinned-Dependencies":6,"SAST":0,"Security-Policy":10,"Signed-Releases":-1,"Token-Permissions":0,"Vulnerabilities":0},"scorecard_scanned_at":"2026-07-10T16:21:03Z","slug":"sim","source_note":"","public_actions":null,"mcp_server_support":{"status":"implemented","confidence":"high","evidence":["Found MCP-related server path: apps/sim/app/api/mcp/servers/[id]/refresh/route.ts","Found MCP-related server path: apps/sim/app/api/mcp/servers/[id]/route.ts","Found MCP-related server docs path: apps/docs/public/static/blocks/mcp-server-add-modal.png","Found MCP-related server docs path: apps/docs/public/static/blocks/mcp-server-details.png"]},"external_service_dependencies":{"providers":["Amazon Bedrock","Anthropic","Browserbase","E2B","Google Gemini","OpenAI","Postgres","Redis"],"requires_api_keys":true,"confidence":"high","evidence":["Found OpenAI dependency 'openai' in apps/sim/package.json","Found Anthropic dependency 'anthropic' in apps/sim/package.json","Found Google Gemini dependency '@google/genai' in apps/sim/package.json","Found Amazon Bedrock dependency 'bedrock' in apps/sim/package.json","Found Browserbase dependency 'browserbase' in apps/sim/package.json","README/docs mention E2B"]},"tool_plugin_surface":{"plugin_system":"declared","tool_tags":["code","database"],"confidence":"high","evidence":["README/docs mention a declared plugin/integration surface","README/docs mention database capabilities","README/docs mention code capabilities"]},"package_provenance_drift":{"status":"not_applicable","confidence":null,"summary":"No package source configured","evidence":[]},"evidence_grade":"C","coverage_grade":"C","signal_coverage":0.4,"signal_types":2,"listing_status":"listed","display_listing_status":"listed","display_status_label":"Listed","has_warning":false,"warning_reasons":[],"license_spdx":"Apache-2.0","license_type":"open","license_override":"","trust_score":64.0,"trust_score_v2":64.0,"rank_v2":130,"rank_v2_delta":-14,"trust_v2_adjustment":-2.9,"trust_confidence":1.0,"trust_breakdown":{"safety":12.1,"identity":10.8,"transparency":13.3,"maintenance":20.0,"adoption":10.7},"trust_v2_breakdown":{"mcp":2.0,"external_dependencies":-4.0,"tool_plugin_surface":-0.9,"package_provenance_drift":0.0},"pending_signals":false},{"name":"Cherry Studio","repo":"CherryHQ/cherry-studio","display_repo":"","url":"https://github.com/CherryHQ/cherry-studio","rank":131,"previous_rank":131,"rank_delta":0,"stars":48425,"stars_fmt":"48.4k","forks":4599,"forks_fmt":"4.6k","last_push":"2026-07-11","days_ago":0,"weekly_commits":482,"commits_low_confidence":false,"score":95.1,"description":"AI productivity studio with smart chat, autonomous agents, and 300+ assistants. Unified access to frontier LLMs","language":"TypeScript","open_issues":937,"category":"UI & App Builders","category_rank":6,"npm_package":"","crate_package":"","pypi_package":"","weekly_downloads":null,"dl_source":"","hn_mentions_30d":null,"has_provenance":false,"npm_provenance":null,"pypi_provenance":null,"signed_commits_ratio":1.0,"scorecard_score":4.5,"scorecard_checks":{"Binary-Artifacts":10,"Branch-Protection":5,"CI-Tests":10,"CII-Best-Practices":0,"Code-Review":9,"Contributors":10,"Dangerous-Workflow":0,"Dependency-Update-Tool":10,"Fuzzing":0,"License":10,"Maintained":10,"Packaging":-1,"Pinned-Dependencies":0,"SAST":0,"Security-Policy":10,"Signed-Releases":0,"Token-Permissions":0,"Vulnerabilities":0},"scorecard_scanned_at":"2026-07-08T09:31:00Z","slug":"cherry-studio","source_note":"","public_actions":null,"mcp_server_support":{"status":"implemented","confidence":"high","evidence":["README/docs mention MCP support","Found MCP-related server path: src/main/ai/mcp/ServerLogBuffer.ts","Found MCP-related server path: src/main/ai/mcp/servers/assistant.ts","Found MCP-related server test path: src/main/ai/mcp/__tests__/ServerLogBuffer.test.ts"]},"external_service_dependencies":{"providers":["Anthropic","OpenAI","Tavily"],"requires_api_keys":false,"confidence":"high","evidence":["Found OpenAI dependency 'openai' in package.json","README/docs also mention OpenAI","Found Anthropic dependency 'anthropic' in package.json","README/docs also mention Anthropic","Found Tavily dependency 'tavily' in package.json"]},"tool_plugin_surface":{"plugin_system":"marketplace","tool_tags":["browser","filesystem","search"],"confidence":"high","evidence":["README/docs mention a marketplace plugin/integration surface","Found browser dependency 'playwright' in package.json","Found filesystem dependency 'fs-extra' in package.json","Found search dependency 'tavily' in package.json","README/docs also mention search capabilities"]},"package_provenance_drift":{"status":"not_applicable","confidence":null,"summary":"No package source configured","evidence":[]},"evidence_grade":"C","coverage_grade":"C","signal_coverage":0.4,"signal_types":2,"listing_status":"listed","display_listing_status":"listed","display_status_label":"Listed","has_warning":false,"warning_reasons":[],"license_spdx":"AGPL-3.0","license_type":"open","license_override":"","trust_score":64.0,"trust_score_v2":64.0,"rank_v2":131,"rank_v2_delta":1,"trust_v2_adjustment":-0.9,"trust_confidence":1.0,"trust_breakdown":{"safety":10.6,"identity":10.8,"transparency":12.3,"maintenance":20.0,"adoption":11.2},"trust_v2_breakdown":{"mcp":2.0,"external_dependencies":-1.0,"tool_plugin_surface":-1.9,"package_provenance_drift":0.0},"pending_signals":false},{"name":"n8n-MCP","repo":"czlonkowski/n8n-mcp","display_repo":"","url":"https://github.com/czlonkowski/n8n-mcp","rank":132,"previous_rank":132,"rank_delta":0,"stars":22230,"stars_fmt":"22.2k","forks":3571,"forks_fmt":"3.6k","last_push":"2026-07-09","days_ago":2,"weekly_commits":120,"commits_low_confidence":false,"score":92.5,"description":"A MCP for Claude Desktop / Claude Code / Windsurf / Cursor to build n8n workflows for you ","language":"TypeScript","open_issues":19,"category":"Protocols & Tool Integration","category_rank":12,"npm_package":"","crate_package":"","pypi_package":"","weekly_downloads":null,"dl_source":"","hn_mentions_30d":null,"has_provenance":false,"npm_provenance":null,"pypi_provenance":null,"signed_commits_ratio":0.69,"scorecard_score":5.5,"scorecard_checks":{"Binary-Artifacts":10,"Branch-Protection":5,"CI-Tests":10,"CII-Best-Practices":0,"Code-Review":0,"Contributors":6,"Dangerous-Workflow":10,"Dependency-Update-Tool":10,"Fuzzing":0,"License":10,"Maintained":10,"Packaging":10,"Pinned-Dependencies":2,"SAST":9,"Security-Policy":10,"Signed-Releases":0,"Token-Permissions":0,"Vulnerabilities":0},"scorecard_scanned_at":"2026-07-10T16:19:38Z","slug":"n8n-mcp","source_note":"","public_actions":null,"mcp_server_support":{"status":"implemented","confidence":"high","evidence":["README/docs mention MCP support","Found MCP-related server path: src/mcp/server.ts","Found MCP-related server test path: tests/test-mcp-server-extraction.js","Found MCP-related server test path: tests/unit/mcp/server-node-documentation.test.ts"]},"external_service_dependencies":{"providers":["OpenAI","Supabase"],"requires_api_keys":true,"confidence":"high","evidence":["README/docs mention OpenAI","Found OpenAI dependency 'openai' in package.json","Found Supabase dependency 'supabase' in package.json"]},"tool_plugin_surface":{"plugin_system":"declared","tool_tags":["code","search","shell"],"confidence":"high","evidence":["README/docs mention a declared plugin/integration surface","Found shell dependency 'pty' in package.json","README/docs mention search capabilities","README/docs mention code capabilities"]},"package_provenance_drift":{"status":"not_applicable","confidence":null,"summary":"No package source configured","evidence":[]},"evidence_grade":"C","coverage_grade":"C","signal_coverage":0.4,"signal_types":2,"listing_status":"listed","display_listing_status":"listed","display_status_label":"Listed","has_warning":false,"warning_reasons":[],"license_spdx":"MIT","license_type":"open","license_override":"","trust_score":63.9,"trust_score_v2":63.9,"rank_v2":132,"rank_v2_delta":4,"trust_v2_adjustment":-0.7,"trust_confidence":1.0,"trust_breakdown":{"safety":10.3,"identity":10.8,"transparency":13.2,"maintenance":19.9,"adoption":10.4},"trust_v2_breakdown":{"mcp":2.0,"external_dependencies":-1.5,"tool_plugin_surface":-1.2,"package_provenance_drift":0.0},"pending_signals":false},{"name":"Budibase","repo":"Budibase/budibase","display_repo":"","url":"https://github.com/Budibase/budibase","rank":133,"previous_rank":130,"rank_delta":-3,"stars":28105,"stars_fmt":"28.1k","forks":2177,"forks_fmt":"2.2k","last_push":"2026-07-10","days_ago":1,"weekly_commits":1184,"commits_low_confidence":false,"score":92.2,"description":"AI agents, automations and apps that run your operations. Model agnostic.","language":"TypeScript","open_issues":216,"category":"Workflow Platforms","category_rank":12,"npm_package":"","crate_package":"","pypi_package":"","weekly_downloads":null,"dl_source":"","hn_mentions_30d":null,"has_provenance":false,"npm_provenance":null,"pypi_provenance":null,"signed_commits_ratio":0.51,"scorecard_score":5.5,"scorecard_checks":{"Binary-Artifacts":6,"Branch-Protection":5,"CI-Tests":10,"CII-Best-Practices":2,"Code-Review":8,"Contributors":10,"Dangerous-Workflow":10,"Dependency-Update-Tool":10,"Fuzzing":0,"License":9,"Maintained":10,"Packaging":10,"Pinned-Dependencies":2,"SAST":0,"Security-Policy":10,"Signed-Releases":0,"Token-Permissions":0,"Vulnerabilities":0},"scorecard_scanned_at":"2026-07-10T09:51:41Z","slug":"budibase","source_note":"","public_actions":null,"mcp_server_support":{"status":"none","confidence":null,"evidence":[]},"external_service_dependencies":{"providers":["OpenAI"],"requires_api_keys":false,"confidence":"medium","evidence":["Found OpenAI dependency 'openai' in packages/pro/package.json"]},"tool_plugin_surface":{"plugin_system":"declared","tool_tags":[],"confidence":"medium","evidence":["Found declared path: packages/backend-core/src/plugin/index.ts"]},"package_provenance_drift":{"status":"not_applicable","confidence":null,"summary":"No package source configured","evidence":[]},"evidence_grade":"C","coverage_grade":"C","signal_coverage":0.4,"signal_types":2,"listing_status":"listed","display_listing_status":"listed","display_status_label":"Listed","has_warning":false,"warning_reasons":[],"license_spdx":"NOASSERTION","license_type":"open","license_override":"","trust_score":63.7,"trust_score_v2":63.7,"rank_v2":133,"rank_v2_delta":10,"trust_v2_adjustment":-0.3,"trust_confidence":1.0,"trust_breakdown":{"safety":9.4,"identity":10.8,"transparency":13.2,"maintenance":19.9,"adoption":10.7},"trust_v2_breakdown":{"mcp":0.0,"external_dependencies":-0.0,"tool_plugin_surface":-0.3,"package_provenance_drift":0.0},"pending_signals":false},{"name":"Instructor","repo":"567-labs/instructor","display_repo":"","url":"https://github.com/567-labs/instructor","rank":134,"previous_rank":134,"rank_delta":0,"stars":13485,"stars_fmt":"13.5k","forks":1138,"forks_fmt":"1.1k","last_push":"2026-07-06","days_ago":5,"weekly_commits":3,"commits_low_confidence":true,"score":70.9,"description":"structured outputs for llms ","language":"Python","open_issues":17,"category":"LLM Gateways & Infra","category_rank":6,"npm_package":"","crate_package":"","pypi_package":"instructor","weekly_downloads":3876678,"dl_source":"pypi","hn_mentions_30d":0,"has_provenance":false,"npm_provenance":null,"pypi_provenance":false,"signed_commits_ratio":0.75,"scorecard_score":4.9,"scorecard_checks":{"Binary-Artifacts":10,"Branch-Protection":6,"CI-Tests":6,"CII-Best-Practices":0,"Code-Review":3,"Contributors":10,"Dangerous-Workflow":10,"Dependency-Update-Tool":10,"Fuzzing":0,"License":10,"Maintained":10,"Packaging":-1,"Pinned-Dependencies":0,"SAST":0,"Security-Policy":0,"Signed-Releases":-1,"Token-Permissions":0,"Vulnerabilities":0},"scorecard_scanned_at":"2026-07-10T17:23:34Z","slug":"instructor","source_note":"","public_actions":null,"mcp_server_support":{"status":"none","confidence":null,"evidence":[]},"external_service_dependencies":{"providers":["Amazon Bedrock","Anthropic","OpenAI","Redis"],"requires_api_keys":false,"confidence":"high","evidence":["Found OpenAI dependency 'openai' in pyproject.toml","README/docs also mention OpenAI","Found Anthropic dependency 'anthropic' in pyproject.toml","README/docs also mention Anthropic","Found Amazon Bedrock dependency 'bedrock' in pyproject.toml","Found Redis dependency 'redis' in pyproject.toml"]},"tool_plugin_surface":{"plugin_system":"none","tool_tags":["database"],"confidence":"medium","evidence":["Found database dependency 'redis' in pyproject.toml"]},"package_provenance_drift":{"status":"unknown","confidence":"low","summary":"Package source metadata is missing or inconclusive","evidence":["pypi package 'instructor' has a non-GitHub or unparseable source URL"]},"evidence_grade":"C","coverage_grade":"A","signal_coverage":0.8,"signal_types":4,"listing_status":"listed","display_listing_status":"listed","display_status_label":"Listed","has_warning":false,"warning_reasons":[],"license_spdx":"MIT","license_type":"open","license_override":"","trust_score":63.2,"trust_score_v2":63.2,"rank_v2":134,"rank_v2_delta":-3,"trust_v2_adjustment":-1.8,"trust_confidence":1.0,"trust_breakdown":{"safety":9.9,"identity":10.8,"transparency":12.7,"maintenance":12.9,"adoption":18.7},"trust_v2_breakdown":{"mcp":0.0,"external_dependencies":-1.5,"tool_plugin_surface":-0.3,"package_provenance_drift":0.0},"pending_signals":false},{"name":"txtai","repo":"neuml/txtai","display_repo":"","url":"https://github.com/neuml/txtai","rank":135,"previous_rank":135,"rank_delta":0,"stars":12715,"stars_fmt":"12.7k","forks":843,"forks_fmt":"843","last_push":"2026-07-02","days_ago":9,"weekly_commits":20,"commits_low_confidence":false,"score":78.6,"description":"💡 All-in-one AI framework for semantic search, LLM orchestration and language model workflows","language":"Python","open_issues":10,"category":"Memory & Knowledge","category_rank":17,"npm_package":"","crate_package":"","pypi_package":"txtai","weekly_downloads":8876,"dl_source":"pypi","hn_mentions_30d":0,"has_provenance":false,"npm_provenance":null,"pypi_provenance":false,"signed_commits_ratio":0.02,"scorecard_score":4.7,"scorecard_checks":{"Binary-Artifacts":10,"Branch-Protection":0,"CI-Tests":10,"CII-Best-Practices":0,"Code-Review":0,"Contributors":3,"Dangerous-Workflow":10,"Dependency-Update-Tool":0,"Fuzzing":0,"License":10,"Maintained":10,"Packaging":-1,"Pinned-Dependencies":0,"SAST":0,"Security-Policy":10,"Signed-Releases":-1,"Token-Permissions":0,"Vulnerabilities":10},"scorecard_scanned_at":"2026-07-10T07:57:32Z","slug":"txtai","source_note":"","public_actions":null,"mcp_server_support":{"status":"declared","confidence":"low","evidence":["README/docs mention MCP support"]},"external_service_dependencies":{"providers":["Amazon Bedrock","OpenAI","Postgres"],"requires_api_keys":false,"confidence":"high","evidence":["README/docs mention OpenAI","README/docs mention Amazon Bedrock","Found Postgres dependency 'pg' in setup.py"]},"tool_plugin_surface":{"plugin_system":"none","tool_tags":["code","database","search"],"confidence":"high","evidence":["README/docs mention search capabilities","Found database dependency 'pg' in setup.py","README/docs mention code capabilities"]},"package_provenance_drift":{"status":"match","confidence":"high","summary":"Published package metadata matches the tracked repo","evidence":["pypi package 'txtai' points to the tracked repo"]},"evidence_grade":"C","coverage_grade":"A","signal_coverage":0.8,"signal_types":4,"listing_status":"listed","display_listing_status":"listed","display_status_label":"Listed","has_warning":false,"warning_reasons":[],"license_spdx":"Apache-2.0","license_type":"open","license_override":"","trust_score":63.2,"trust_score_v2":63.2,"rank_v2":135,"rank_v2_delta":36,"trust_v2_adjustment":2.1,"trust_confidence":1.0,"trust_breakdown":{"safety":6.0,"identity":10.8,"transparency":12.5,"maintenance":16.7,"adoption":15.1},"trust_v2_breakdown":{"mcp":0.0,"external_dependencies":-1.0,"tool_plugin_surface":-0.9,"package_provenance_drift":4.0},"pending_signals":false},{"name":"Google Genkit","repo":"firebase/genkit","display_repo":"","url":"https://github.com/genkit-ai/genkit","rank":136,"previous_rank":133,"rank_delta":-3,"stars":6224,"stars_fmt":"6.2k","forks":786,"forks_fmt":"786","last_push":"2026-07-10","days_ago":1,"weekly_commits":79,"commits_low_confidence":false,"score":85.0,"description":"Open-source framework for building AI-powered apps in JavaScript, Go, and Python, built and used in production by Google","language":"TypeScript","open_issues":691,"category":"Agent Frameworks","category_rank":31,"npm_package":"genkit","crate_package":"","pypi_package":"","weekly_downloads":253108,"dl_source":"npm","hn_mentions_30d":2,"has_provenance":false,"npm_provenance":false,"pypi_provenance":null,"signed_commits_ratio":0.92,"scorecard_score":5.4,"scorecard_checks":{"Binary-Artifacts":10,"Branch-Protection":1,"CI-Tests":10,"CII-Best-Practices":0,"Code-Review":9,"Contributors":10,"Dangerous-Workflow":10,"Dependency-Update-Tool":10,"Fuzzing":0,"License":10,"Maintained":10,"Packaging":10,"Pinned-Dependencies":0,"SAST":0,"Security-Policy":0,"Signed-Releases":-1,"Token-Permissions":0,"Vulnerabilities":0},"scorecard_scanned_at":"2026-07-11T02:11:52Z","slug":"google-genkit","source_note":"","public_actions":null,"mcp_server_support":{"status":"declared","confidence":"medium","evidence":["Found MCP-related server path: genkit-tools/cli/src/mcp/server.ts","Found MCP-related server path: go/plugins/mcp/fixtures/basic_server/basic_server.go","Found MCP-related server test path: js/plugins/mcp/tests/server_test.ts"]},"external_service_dependencies":{"providers":["Anthropic","Google Gemini","OpenAI","Postgres"],"requires_api_keys":false,"confidence":"high","evidence":["README/docs mention OpenAI","README/docs mention Anthropic","Found Anthropic dependency 'anthropic' in py/pyproject.toml","README/docs mention Google Gemini","Found Postgres dependency 'pg' in py/pyproject.toml"]},"tool_plugin_surface":{"plugin_system":"declared","tool_tags":["browser","code","database","search"],"confidence":"high","evidence":["README/docs mention a declared plugin/integration surface","Found browser dependency 'puppeteer' in tests/package.json","README/docs mention search capabilities","Found database dependency 'pg' in py/pyproject.toml","README/docs mention code capabilities"]},"package_provenance_drift":{"status":"warning","confidence":"high","summary":"1 package source mismatch detected","evidence":["npm package 'genkit' points to genkit-ai/genkit, not firebase/genkit"]},"evidence_grade":"C","coverage_grade":"A","signal_coverage":0.8,"signal_types":4,"listing_status":"listed","display_listing_status":"listed","display_status_label":"Listed","has_warning":false,"warning_reasons":[],"license_spdx":"Apache-2.0","license_type":"open","license_override":"","trust_score":63.1,"trust_score_v2":63.1,"rank_v2":136,"rank_v2_delta":-54,"trust_v2_adjustment":-8.0,"trust_confidence":1.0,"trust_breakdown":{"safety":11.4,"identity":10.8,"transparency":13.1,"maintenance":19.5,"adoption":16.3},"trust_v2_breakdown":{"mcp":0.0,"external_dependencies":-1.5,"tool_plugin_surface":-1.5,"package_provenance_drift":-5.0},"pending_signals":false},{"name":"Griptape","repo":"griptape-ai/griptape","display_repo":"","url":"https://github.com/griptape-ai/griptape","rank":137,"previous_rank":136,"rank_delta":-1,"stars":2556,"stars_fmt":"2.6k","forks":248,"forks_fmt":"248","last_push":"2026-07-06","days_ago":5,"weekly_commits":9,"commits_low_confidence":true,"score":68.4,"description":"Modular Python framework for AI agents and workflows with chain-of-thought reasoning, tools, and memory. ","language":"Python","open_issues":61,"category":"Agent Frameworks","category_rank":32,"npm_package":"","crate_package":"","pypi_package":"griptape","weekly_downloads":5827,"dl_source":"pypi","hn_mentions_30d":2,"has_provenance":false,"npm_provenance":null,"pypi_provenance":false,"signed_commits_ratio":1.0,"scorecard_score":6.2,"scorecard_checks":{"Binary-Artifacts":10,"Branch-Protection":8,"CI-Tests":10,"CII-Best-Practices":0,"Code-Review":10,"Contributors":10,"Dangerous-Workflow":10,"Dependency-Update-Tool":10,"Fuzzing":0,"License":10,"Maintained":10,"Packaging":-1,"Pinned-Dependencies":0,"SAST":8,"Security-Policy":0,"Signed-Releases":-1,"Token-Permissions":0,"Vulnerabilities":0},"scorecard_scanned_at":"2026-07-11T04:07:06Z","slug":"griptape","source_note":"","public_actions":null,"mcp_server_support":{"status":"none","confidence":null,"evidence":[]},"external_service_dependencies":{"providers":["Amazon Bedrock","Anthropic","Azure OpenAI","OpenAI","Pinecone","Postgres","Qdrant","Redis","Tavily"],"requires_api_keys":true,"confidence":"high","evidence":["README/docs mention OpenAI","Found OpenAI dependency 'openai' in pyproject.toml","Found OpenAI credential/config marker 'OPENAI_API_KEY'","Found Anthropic dependency 'anthropic' in pyproject.toml","Found Azure OpenAI credential/config marker 'AZURE_OPENAI_API_KEY'","Found Amazon Bedrock dependency 'bedrock' in pyproject.toml"]},"tool_plugin_surface":{"plugin_system":"declared","tool_tags":["browser","code","database","search"],"confidence":"high","evidence":["Found declared path: docs/plugins/swagger_ui_plugin.py","Found browser dependency 'playwright' in pyproject.toml","README/docs mention search capabilities","Found database dependency 'pg' in pyproject.toml","README/docs mention code capabilities"]},"package_provenance_drift":{"status":"match","confidence":"high","summary":"Published package metadata matches the tracked repo","evidence":["pypi package 'griptape' points to the tracked repo"]},"evidence_grade":"C","coverage_grade":"A","signal_coverage":0.8,"signal_types":4,"listing_status":"listed","display_listing_status":"listed","display_status_label":"Listed","has_warning":false,"warning_reasons":[],"license_spdx":"Apache-2.0","license_type":"open","license_override":"","trust_score":62.8,"trust_score_v2":62.8,"rank_v2":137,"rank_v2_delta":3,"trust_v2_adjustment":-1.5,"trust_confidence":1.0,"trust_breakdown":{"safety":12.8,"identity":10.8,"transparency":13.8,"maintenance":13.7,"adoption":13.2},"trust_v2_breakdown":{"mcp":0.0,"external_dependencies":-4.0,"tool_plugin_surface":-1.5,"package_provenance_drift":4.0},"pending_signals":false},{"name":"Holmesgpt","repo":"HolmesGPT/holmesgpt","display_repo":"","url":"https://github.com/HolmesGPT/holmesgpt","rank":138,"previous_rank":138,"rank_delta":0,"stars":2824,"stars_fmt":"2.8k","forks":404,"forks_fmt":"404","last_push":"2026-07-10","days_ago":1,"weekly_commits":45,"commits_low_confidence":false,"score":78.5,"description":"SRE Agent - CNCF Sandbox Project","language":"Python","open_issues":101,"category":"Observability & Evaluation","category_rank":10,"npm_package":"","crate_package":"","pypi_package":"holmesgpt","weekly_downloads":2514,"dl_source":"pypi","hn_mentions_30d":null,"has_provenance":false,"npm_provenance":null,"pypi_provenance":false,"signed_commits_ratio":1.0,"scorecard_score":5.1,"scorecard_checks":{"Binary-Artifacts":10,"Branch-Protection":8,"CI-Tests":10,"CII-Best-Practices":2,"Code-Review":10,"Contributors":10,"Dangerous-Workflow":0,"Dependency-Update-Tool":10,"Fuzzing":0,"License":10,"Maintained":10,"Packaging":10,"Pinned-Dependencies":0,"SAST":0,"Security-Policy":10,"Signed-Releases":0,"Token-Permissions":0,"Vulnerabilities":0},"scorecard_scanned_at":"2026-07-11T04:10:37Z","slug":"holmesgpt","source_note":"","public_actions":null,"mcp_server_support":{"status":"declared","confidence":"medium","evidence":["Found MCP-related server path: helm/holmes/templates/mcp-servers/aws/_helpers.tpl","Found MCP-related server path: helm/holmes/templates/mcp-servers/aws/deployment.yaml","Found MCP-related server docs path: docs/data-sources/oauth-mcp-servers.md","Found MCP-related server docs path: docs/data-sources/remote-mcp-servers.md"]},"external_service_dependencies":{"providers":["Amazon Bedrock","Anthropic","Google Gemini","OpenAI","Postgres","Supabase"],"requires_api_keys":false,"confidence":"high","evidence":["README/docs mention OpenAI","Found OpenAI dependency 'openai' in pyproject.toml","README/docs mention Anthropic","README/docs mention Google Gemini","README/docs mention Amazon Bedrock","Found Amazon Bedrock dependency 'boto3' in pyproject.toml"]},"tool_plugin_surface":{"plugin_system":"declared","tool_tags":["code","database","search"],"confidence":"high","evidence":["README/docs mention a declared plugin/integration surface","README/docs mention search capabilities","README/docs mention database capabilities","README/docs mention code capabilities"]},"package_provenance_drift":{"status":"unknown","confidence":"low","summary":"Package source metadata is missing or inconclusive","evidence":["pypi package 'holmesgpt' has a non-GitHub or unparseable source URL"]},"evidence_grade":"C","coverage_grade":"B","signal_coverage":0.6,"signal_types":3,"listing_status":"listed","display_listing_status":"listed","display_status_label":"Listed","has_warning":false,"warning_reasons":[],"license_spdx":"Apache-2.0","license_type":"open","license_override":"","trust_score":62.7,"trust_score_v2":62.7,"rank_v2":138,"rank_v2_delta":-14,"trust_v2_adjustment":-3.7,"trust_confidence":1.0,"trust_breakdown":{"safety":11.4,"identity":10.8,"transparency":12.8,"maintenance":18.6,"adoption":12.8},"trust_v2_breakdown":{"mcp":0.0,"external_dependencies":-2.5,"tool_plugin_surface":-1.2,"package_provenance_drift":0.0},"pending_signals":false},{"name":"Multica","repo":"multica-ai/multica","display_repo":"","url":"https://github.com/multica-ai/multica","rank":139,"previous_rank":139,"rank_delta":0,"stars":39820,"stars_fmt":"39.8k","forks":4998,"forks_fmt":"5.0k","last_push":"2026-07-11","days_ago":0,"weekly_commits":455,"commits_low_confidence":false,"score":94.8,"description":"The open-source managed agents platform. Turn coding agents into real teammates — assign tasks, track progress, compound","language":"Go","open_issues":649,"category":"Multi-Agent Systems","category_rank":5,"npm_package":"","crate_package":"","pypi_package":"","weekly_downloads":null,"dl_source":"","hn_mentions_30d":null,"has_provenance":false,"npm_provenance":null,"pypi_provenance":null,"signed_commits_ratio":0.99,"scorecard_score":4.5,"scorecard_checks":{"Binary-Artifacts":10,"Branch-Protection":0,"CI-Tests":10,"CII-Best-Practices":0,"Code-Review":3,"Contributors":10,"Dangerous-Workflow":10,"Dependency-Update-Tool":10,"Fuzzing":0,"License":9,"Maintained":10,"Packaging":10,"Pinned-Dependencies":0,"SAST":0,"Security-Policy":0,"Signed-Releases":0,"Token-Permissions":0,"Vulnerabilities":0},"scorecard_scanned_at":"2026-07-10T18:34:41Z","slug":"multica","source_note":"","public_actions":null,"mcp_server_support":{"status":"none","confidence":null,"evidence":[]},"external_service_dependencies":{"providers":["Google Gemini","Postgres"],"requires_api_keys":false,"confidence":"high","evidence":["README/docs mention Google Gemini","README/docs mention Postgres","Found Postgres dependency 'pg' in package.json"]},"tool_plugin_surface":{"plugin_system":"extension-based","tool_tags":["browser","code","database"],"confidence":"high","evidence":["Found extension-based path: packages/views/editor/extensions/autolink-email-repair.test.ts","Found browser dependency 'playwright' in package.json","Found database dependency 'pg' in package.json","README/docs mention code capabilities"]},"package_provenance_drift":{"status":"not_applicable","confidence":null,"summary":"No package source configured","evidence":[]},"evidence_grade":"C","coverage_grade":"C","signal_coverage":0.4,"signal_types":2,"listing_status":"listed","display_listing_status":"listed","display_status_label":"Listed","has_warning":false,"warning_reasons":[],"license_spdx":"NOASSERTION","license_type":"source-available","license_override":"","trust_score":62.7,"trust_score_v2":62.7,"rank_v2":139,"rank_v2_delta":-5,"trust_v2_adjustment":-2.0,"trust_confidence":1.0,"trust_breakdown":{"safety":10.6,"identity":10.8,"transparency":12.3,"maintenance":20.0,"adoption":11.0},"trust_v2_breakdown":{"mcp":0.0,"external_dependencies":-0.5,"tool_plugin_surface":-1.5,"package_provenance_drift":0.0},"pending_signals":false},{"name":"Serena","repo":"oraios/serena","display_repo":"","url":"https://github.com/oraios/serena","rank":140,"previous_rank":137,"rank_delta":-3,"stars":26309,"stars_fmt":"26.3k","forks":1750,"forks_fmt":"1.8k","last_push":"2026-07-10","days_ago":1,"weekly_commits":113,"commits_low_confidence":false,"score":91.6,"description":"A powerful MCP toolkit for coding, providing semantic retrieval and editing capabilities  - the IDE for your agent","language":"Python","open_issues":79,"category":"Protocols & Tool Integration","category_rank":13,"npm_package":"","crate_package":"","pypi_package":"","weekly_downloads":null,"dl_source":"","hn_mentions_30d":null,"has_provenance":false,"npm_provenance":null,"pypi_provenance":null,"signed_commits_ratio":0.28,"scorecard_score":5.8,"scorecard_checks":{"Binary-Artifacts":10,"Branch-Protection":3,"CI-Tests":10,"CII-Best-Practices":0,"Code-Review":4,"Contributors":10,"Dangerous-Workflow":10,"Dependency-Update-Tool":10,"Fuzzing":0,"License":10,"Maintained":10,"Packaging":10,"Pinned-Dependencies":0,"SAST":10,"Security-Policy":0,"Signed-Releases":0,"Token-Permissions":8,"Vulnerabilities":0},"scorecard_scanned_at":"2026-07-10T08:40:19Z","slug":"serena","source_note":"","public_actions":null,"mcp_server_support":{"status":"implemented","confidence":"high","evidence":["README/docs explicitly mention an MCP server","Found MCP-related server path: scripts/mcp_server.py"]},"external_service_dependencies":{"providers":["Anthropic","Google Gemini"],"requires_api_keys":false,"confidence":"high","evidence":["Found Anthropic dependency 'anthropic' in pyproject.toml","README/docs mention Google Gemini"]},"tool_plugin_surface":{"plugin_system":"marketplace","tool_tags":["code","filesystem","search","shell"],"confidence":"high","evidence":["README/docs mention a marketplace plugin/integration surface","README/docs mention shell capabilities","README/docs mention filesystem capabilities","README/docs mention search capabilities","README/docs mention code capabilities"]},"package_provenance_drift":{"status":"not_applicable","confidence":null,"summary":"No package source configured","evidence":[]},"evidence_grade":"C","coverage_grade":"C","signal_coverage":0.4,"signal_types":2,"listing_status":"listed","display_listing_status":"listed","display_status_label":"Listed","has_warning":false,"warning_reasons":[],"license_spdx":"MIT","license_type":"open","license_override":"","trust_score":62.6,"trust_score_v2":62.6,"rank_v2":140,"rank_v2_delta":10,"trust_v2_adjustment":-0.7,"trust_confidence":1.0,"trust_breakdown":{"safety":8.6,"identity":10.8,"transparency":13.4,"maintenance":19.9,"adoption":10.6},"trust_v2_breakdown":{"mcp":2.0,"external_dependencies":-0.5,"tool_plugin_surface":-2.2,"package_provenance_drift":0.0},"pending_signals":false},{"name":"Model Context Protocol / MCP","repo":"modelcontextprotocol/servers","display_repo":"","url":"https://github.com/modelcontextprotocol/servers","rank":141,"previous_rank":142,"rank_delta":1,"stars":88319,"stars_fmt":"88.3k","forks":11205,"forks_fmt":"11.2k","last_push":"2026-07-10","days_ago":1,"weekly_commits":25,"commits_low_confidence":true,"score":91.0,"description":"Model Context Protocol Servers","language":"TypeScript","open_issues":379,"category":"Protocols & Tool Integration","category_rank":14,"npm_package":"","crate_package":"","pypi_package":"","weekly_downloads":null,"dl_source":"","hn_mentions_30d":2,"has_provenance":false,"npm_provenance":null,"pypi_provenance":null,"signed_commits_ratio":0.78,"scorecard_score":6.8,"scorecard_checks":{"Binary-Artifacts":10,"Branch-Protection":6,"CI-Tests":10,"CII-Best-Practices":0,"Code-Review":9,"Contributors":10,"Dangerous-Workflow":10,"Dependency-Update-Tool":10,"Fuzzing":0,"License":9,"Maintained":10,"Packaging":10,"Pinned-Dependencies":2,"SAST":5,"Security-Policy":10,"Signed-Releases":-1,"Token-Permissions":0,"Vulnerabilities":3},"scorecard_scanned_at":"2026-07-11T03:33:38Z","slug":"model-context-protocol-mcp","source_note":"","public_actions":null,"mcp_server_support":{"status":"implemented","confidence":"high","evidence":["README/docs explicitly mention an MCP server","Found MCP-related server path: src/fetch/src/mcp_server_fetch/__init__.py","Found MCP-related server path: src/fetch/src/mcp_server_fetch/__main__.py","Found MCP dependency 'modelcontextprotocol' in package.json"]},"external_service_dependencies":{"providers":["Amazon Bedrock","Anthropic","Brave Search","Postgres","Redis"],"requires_api_keys":false,"confidence":"high","evidence":["README/docs mention Anthropic","Found Anthropic dependency 'anthropic' in src/git/pyproject.toml","README/docs mention Amazon Bedrock","README/docs mention Brave Search","README/docs mention Postgres","README/docs mention Redis"]},"tool_plugin_surface":{"plugin_system":"declared","tool_tags":["browser","code","database","filesystem","search"],"confidence":"high","evidence":["README/docs mention a declared plugin/integration surface","README/docs mention browser capabilities","README/docs mention filesystem capabilities","README/docs mention search capabilities","README/docs mention database capabilities","README/docs mention code capabilities"]},"package_provenance_drift":{"status":"not_applicable","confidence":null,"summary":"No package source configured","evidence":[]},"evidence_grade":"C","coverage_grade":"B","signal_coverage":0.6,"signal_types":3,"listing_status":"listed","display_listing_status":"listed","display_status_label":"Listed","has_warning":false,"warning_reasons":[],"license_spdx":"NOASSERTION","license_type":"open","license_override":"","trust_score":62.4,"trust_score_v2":62.4,"rank_v2":141,"rank_v2_delta":1,"trust_v2_adjustment":-1.8,"trust_confidence":1.0,"trust_breakdown":{"safety":12.4,"identity":10.8,"transparency":14.3,"maintenance":14.8,"adoption":11.9},"trust_v2_breakdown":{"mcp":2.0,"external_dependencies":-2.0,"tool_plugin_surface":-1.8,"package_provenance_drift":0.0},"pending_signals":false},{"name":"Agency Agents","repo":"msitarzewski/agency-agents","display_repo":"","url":"https://github.com/msitarzewski/agency-agents","rank":142,"previous_rank":141,"rank_delta":-1,"stars":130158,"stars_fmt":"130.2k","forks":21317,"forks_fmt":"21.3k","last_push":"2026-07-09","days_ago":2,"weekly_commits":45,"commits_low_confidence":false,"score":95.6,"description":"A complete AI agency at your fingertips - From frontend wizards to Reddit community ninjas, from whimsy injectors to rea","language":"Shell","open_issues":47,"category":"Multi-Agent Systems","category_rank":6,"npm_package":"","crate_package":"","pypi_package":"","weekly_downloads":null,"dl_source":"","hn_mentions_30d":null,"has_provenance":false,"npm_provenance":null,"pypi_provenance":null,"signed_commits_ratio":0.98,"scorecard_score":4.9,"scorecard_checks":{"Binary-Artifacts":10,"Branch-Protection":0,"CI-Tests":7,"CII-Best-Practices":0,"Code-Review":5,"Contributors":10,"Dangerous-Workflow":10,"Dependency-Update-Tool":0,"Fuzzing":0,"License":10,"Maintained":10,"Packaging":-1,"Pinned-Dependencies":0,"SAST":0,"Security-Policy":4,"Signed-Releases":-1,"Token-Permissions":0,"Vulnerabilities":10},"scorecard_scanned_at":"2026-07-10T08:32:07Z","slug":"agency-agents","source_note":"","public_actions":null,"mcp_server_support":{"status":"declared","confidence":"low","evidence":["README/docs mention MCP support"]},"external_service_dependencies":{"providers":["Google Gemini","OpenAI","Postgres"],"requires_api_keys":false,"confidence":"high","evidence":["README/docs mention OpenAI","README/docs mention Google Gemini","README/docs mention Postgres"]},"tool_plugin_surface":{"plugin_system":"marketplace","tool_tags":["code","search","shell"],"confidence":"high","evidence":["README/docs mention a marketplace plugin/integration surface","README/docs mention shell capabilities","README/docs mention search capabilities","README/docs mention code capabilities"]},"package_provenance_drift":{"status":"not_applicable","confidence":null,"summary":"No package source configured","evidence":[]},"evidence_grade":"C","coverage_grade":"C","signal_coverage":0.4,"signal_types":2,"listing_status":"listed","display_listing_status":"listed","display_status_label":"Listed","has_warning":false,"warning_reasons":[],"license_spdx":"MIT","license_type":"open","license_override":"","trust_score":62.4,"trust_score_v2":62.4,"rank_v2":142,"rank_v2_delta":-13,"trust_v2_adjustment":-2.9,"trust_confidence":1.0,"trust_breakdown":{"safety":11.0,"identity":10.8,"transparency":12.7,"maintenance":18.5,"adoption":12.3},"trust_v2_breakdown":{"mcp":0.0,"external_dependencies":-1.0,"tool_plugin_surface":-1.9,"package_provenance_drift":0.0},"pending_signals":false},{"name":"DawnAI","repo":"cacheplane/dawnai","display_repo":"","url":"https://github.com/cacheplane/dawnai","rank":143,"previous_rank":143,"rank_delta":0,"stars":90,"stars_fmt":"90","forks":2,"forks_fmt":"2","last_push":"2026-07-10","days_ago":1,"weekly_commits":118,"commits_low_confidence":false,"score":64.0,"description":"Build LangGraph agents like Next.js apps.","language":"TypeScript","open_issues":0,"category":"Agent Frameworks","category_rank":33,"npm_package":"","crate_package":"","pypi_package":"","weekly_downloads":null,"dl_source":"","hn_mentions_30d":null,"has_provenance":false,"npm_provenance":null,"pypi_provenance":null,"signed_commits_ratio":0.99,"scorecard_score":7.0,"scorecard_checks":{"Binary-Artifacts":10,"Branch-Protection":3,"CI-Tests":9,"CII-Best-Practices":5,"Code-Review":10,"Contributors":3,"Dangerous-Workflow":10,"Dependency-Update-Tool":10,"Fuzzing":0,"License":10,"Maintained":0,"Packaging":-1,"Pinned-Dependencies":10,"SAST":9,"Security-Policy":10,"Signed-Releases":10,"Token-Permissions":0,"Vulnerabilities":8},"scorecard_scanned_at":"2026-07-10T16:21:36Z","slug":"dawnai","source_note":"","public_actions":null,"mcp_server_support":{"status":"none","confidence":null,"evidence":[]},"external_service_dependencies":{"providers":["OpenAI"],"requires_api_keys":true,"confidence":"high","evidence":["Found OpenAI credential/config marker 'OPENAI_API_KEY'","README/docs also mention OpenAI"]},"tool_plugin_surface":{"plugin_system":"declared","tool_tags":[],"confidence":"medium","evidence":["Found declared path: packages/vite-plugin/CHANGELOG.md"]},"package_provenance_drift":{"status":"not_applicable","confidence":null,"summary":"No package source configured","evidence":[]},"evidence_grade":"C","coverage_grade":"C","signal_coverage":0.4,"signal_types":2,"listing_status":"listed","display_listing_status":"listed","display_status_label":"Listed","has_warning":false,"warning_reasons":[],"license_spdx":"MIT","license_type":"open","license_override":"","trust_score":62.2,"trust_score_v2":62.2,"rank_v2":143,"rank_v2_delta":4,"trust_v2_adjustment":-1.3,"trust_confidence":1.0,"trust_breakdown":{"safety":13.7,"identity":10.8,"transparency":14.4,"maintenance":19.9,"adoption":4.7},"trust_v2_breakdown":{"mcp":0.0,"external_dependencies":-1.0,"tool_plugin_surface":-0.3,"package_provenance_drift":0.0},"pending_signals":false},{"name":"Eve","repo":"vercel/eve","display_repo":"","url":"https://github.com/vercel/eve","rank":144,"previous_rank":145,"rank_delta":1,"stars":3413,"stars_fmt":"3.4k","forks":286,"forks_fmt":"286","last_push":"2026-07-11","days_ago":0,"weekly_commits":306,"commits_low_confidence":false,"score":82.6,"description":"The Framework for Building Agents","language":"TypeScript","open_issues":110,"category":"Needs review","category_rank":1,"npm_package":"","crate_package":"","pypi_package":"","weekly_downloads":null,"dl_source":"","hn_mentions_30d":null,"has_provenance":false,"npm_provenance":null,"pypi_provenance":null,"signed_commits_ratio":1.0,"scorecard_score":5.1,"scorecard_checks":{"Binary-Artifacts":10,"Branch-Protection":4,"CI-Tests":10,"CII-Best-Practices":0,"Code-Review":10,"Contributors":10,"Dangerous-Workflow":10,"Dependency-Update-Tool":0,"Fuzzing":0,"License":10,"Maintained":0,"Packaging":10,"Pinned-Dependencies":9,"SAST":0,"Security-Policy":10,"Signed-Releases":-1,"Token-Permissions":0,"Vulnerabilities":0},"scorecard_scanned_at":"2026-07-10T10:07:27Z","slug":"eve","source_note":"","public_actions":null,"mcp_server_support":{"status":"none","confidence":null,"evidence":[]},"external_service_dependencies":{"providers":["Anthropic","OpenAI"],"requires_api_keys":false,"confidence":"high","evidence":["Found OpenAI dependency 'openai' in packages/eve/package.json","README/docs mention Anthropic","Found Anthropic dependency 'anthropic' in packages/eve/package.json"]},"tool_plugin_surface":{"plugin_system":"none","tool_tags":["code","filesystem","shell"],"confidence":"high","evidence":["README/docs mention shell capabilities","README/docs mention filesystem capabilities","README/docs mention code capabilities"]},"package_provenance_drift":{"status":"not_applicable","confidence":null,"summary":"No package source configured","evidence":[]},"evidence_grade":"C","coverage_grade":"C","signal_coverage":0.4,"signal_types":2,"listing_status":"listed","display_listing_status":"listed","display_status_label":"Listed","has_warning":false,"warning_reasons":[],"license_spdx":"Apache-2.0","license_type":"open","license_override":"","trust_score":62.1,"trust_score_v2":62.1,"rank_v2":144,"rank_v2_delta":2,"trust_v2_adjustment":-1.4,"trust_confidence":1.0,"trust_breakdown":{"safety":11.4,"identity":10.8,"transparency":12.8,"maintenance":20.0,"adoption":8.5},"trust_v2_breakdown":{"mcp":0.0,"external_dependencies":-0.5,"tool_plugin_surface":-0.9,"package_provenance_drift":0.0},"pending_signals":false},{"name":"Ponytail","repo":"DietrichGebert/ponytail","display_repo":"","url":"https://github.com/DietrichGebert/ponytail","rank":145,"previous_rank":144,"rank_delta":-1,"stars":80254,"stars_fmt":"80.3k","forks":4324,"forks_fmt":"4.3k","last_push":"2026-07-10","days_ago":1,"weekly_commits":205,"commits_low_confidence":false,"score":96.2,"description":"Makes your AI agent think like the laziest senior dev in the room. The best code is the code you never wrote.","language":"JavaScript","open_issues":24,"category":"Coding Agents","category_rank":20,"npm_package":"","crate_package":"","pypi_package":"","weekly_downloads":null,"dl_source":"","hn_mentions_30d":2,"has_provenance":false,"npm_provenance":null,"pypi_provenance":null,"signed_commits_ratio":0.76,"scorecard_score":4.1,"scorecard_checks":{"Binary-Artifacts":10,"Branch-Protection":3,"CI-Tests":3,"CII-Best-Practices":0,"Code-Review":9,"Contributors":3,"Dangerous-Workflow":10,"Dependency-Update-Tool":0,"Fuzzing":0,"License":10,"Maintained":0,"Packaging":-1,"Pinned-Dependencies":0,"SAST":0,"Security-Policy":0,"Signed-Releases":-1,"Token-Permissions":0,"Vulnerabilities":10},"scorecard_scanned_at":"2026-07-10T17:25:48Z","slug":"ponytail","source_note":"","public_actions":null,"mcp_server_support":{"status":"declared","confidence":"medium","evidence":["Found MCP dependency '@modelcontextprotocol/sdk' in ponytail-mcp/package.json"]},"external_service_dependencies":{"providers":["Google Gemini"],"requires_api_keys":false,"confidence":"medium","evidence":["README/docs mention Google Gemini"]},"tool_plugin_surface":{"plugin_system":"marketplace","tool_tags":["code"],"confidence":"high","evidence":["README/docs mention a marketplace plugin/integration surface","README/docs mention code capabilities"]},"package_provenance_drift":{"status":"not_applicable","confidence":null,"summary":"No package source configured","evidence":[]},"evidence_grade":"C","coverage_grade":"B","signal_coverage":0.6,"signal_types":3,"listing_status":"listed","display_listing_status":"listed","display_status_label":"Listed","has_warning":false,"warning_reasons":[],"license_spdx":"MIT","license_type":"open","license_override":"","trust_score":62.1,"trust_score_v2":62.1,"rank_v2":145,"rank_v2_delta":3,"trust_v2_adjustment":-1.3,"trust_confidence":1.0,"trust_breakdown":{"safety":8.9,"identity":10.8,"transparency":12.0,"maintenance":19.9,"adoption":11.8},"trust_v2_breakdown":{"mcp":0.0,"external_dependencies":-0.0,"tool_plugin_surface":-1.3,"package_provenance_drift":0.0},"pending_signals":false},{"name":"InsForge","repo":"InsForge/InsForge","display_repo":"","url":"https://github.com/InsForge/InsForge","rank":146,"previous_rank":146,"rank_delta":0,"stars":12176,"stars_fmt":"12.2k","forks":1055,"forks_fmt":"1.1k","last_push":"2026-07-10","days_ago":1,"weekly_commits":427,"commits_low_confidence":false,"score":88.6,"description":"The all-in-one, open-source backend platform for agentic coding. InsForge gives your coding agent database, auth, storag","language":"TypeScript","open_issues":43,"category":"Workflow Platforms","category_rank":13,"npm_package":"","crate_package":"","pypi_package":"","weekly_downloads":null,"dl_source":"","hn_mentions_30d":null,"has_provenance":false,"npm_provenance":null,"pypi_provenance":null,"signed_commits_ratio":0.3,"scorecard_score":5.3,"scorecard_checks":{"Binary-Artifacts":10,"Branch-Protection":1,"CI-Tests":10,"CII-Best-Practices":0,"Code-Review":10,"Contributors":10,"Dangerous-Workflow":10,"Dependency-Update-Tool":0,"Fuzzing":0,"License":10,"Maintained":10,"Packaging":10,"Pinned-Dependencies":2,"SAST":0,"Security-Policy":10,"Signed-Releases":-1,"Token-Permissions":0,"Vulnerabilities":0},"scorecard_scanned_at":"2026-07-11T01:33:57Z","slug":"insforge","source_note":"","public_actions":null,"mcp_server_support":{"status":"implemented","confidence":"medium","evidence":["README/docs explicitly mention an MCP server"]},"external_service_dependencies":{"providers":["OpenAI","Postgres"],"requires_api_keys":false,"confidence":"high","evidence":["README/docs mention OpenAI","Found OpenAI dependency 'openai' in backend/package.json","README/docs mention Postgres","Found Postgres dependency 'postgres' in package.json"]},"tool_plugin_surface":{"plugin_system":"declared","tool_tags":["code","database","shell"],"confidence":"high","evidence":["Found declared path: .claude-plugin/marketplace.json","README/docs mention shell capabilities","README/docs mention database capabilities","README/docs mention code capabilities"]},"package_provenance_drift":{"status":"not_applicable","confidence":null,"summary":"No package source configured","evidence":[]},"evidence_grade":"C","coverage_grade":"C","signal_coverage":0.4,"signal_types":2,"listing_status":"listed","display_listing_status":"listed","display_status_label":"Listed","has_warning":false,"warning_reasons":[],"license_spdx":"Apache-2.0","license_type":"open","license_override":"","trust_score":61.9,"trust_score_v2":61.9,"rank_v2":146,"rank_v2_delta":17,"trust_v2_adjustment":0.3,"trust_confidence":1.0,"trust_breakdown":{"safety":8.1,"identity":10.8,"transparency":13.0,"maintenance":19.9,"adoption":9.8},"trust_v2_breakdown":{"mcp":2.0,"external_dependencies":-0.5,"tool_plugin_surface":-1.2,"package_provenance_drift":0.0},"pending_signals":false},{"name":"Conductor","repo":"conductor-oss/conductor","display_repo":"","url":"https://github.com/conductor-oss/conductor","rank":147,"previous_rank":147,"rank_delta":0,"stars":31990,"stars_fmt":"32.0k","forks":953,"forks_fmt":"953","last_push":"2026-07-10","days_ago":1,"weekly_commits":156,"commits_low_confidence":false,"score":90.9,"description":"Conductor is an event driven agentic workflow engine providing durable and highly resilient execution engine for applica","language":"Java","open_issues":144,"category":"Workflow Platforms","category_rank":14,"npm_package":"","crate_package":"","pypi_package":"","weekly_downloads":null,"dl_source":"","hn_mentions_30d":null,"has_provenance":false,"npm_provenance":null,"pypi_provenance":null,"signed_commits_ratio":0.86,"scorecard_score":6.0,"scorecard_checks":{"Binary-Artifacts":10,"Branch-Protection":8,"CI-Tests":9,"CII-Best-Practices":0,"Code-Review":9,"Contributors":10,"Dangerous-Workflow":10,"Dependency-Update-Tool":10,"Fuzzing":0,"License":10,"Maintained":10,"Packaging":10,"Pinned-Dependencies":0,"SAST":0,"Security-Policy":10,"Signed-Releases":0,"Token-Permissions":0,"Vulnerabilities":0},"scorecard_scanned_at":"2026-07-10T17:39:44Z","slug":"conductor","source_note":"","public_actions":null,"mcp_server_support":{"status":"declared","confidence":"low","evidence":["README/docs mention MCP support"]},"external_service_dependencies":{"providers":["Amazon Bedrock","Anthropic","E2B","Google Gemini","OpenAI","Postgres","Redis"],"requires_api_keys":false,"confidence":"high","evidence":["README/docs mention OpenAI","README/docs mention Anthropic","README/docs mention Google Gemini","README/docs mention Amazon Bedrock","Found E2B dependency 'e2b' in ui/package.json","README/docs mention Postgres"]},"tool_plugin_surface":{"plugin_system":"marketplace","tool_tags":["browser","code","database","shell"],"confidence":"high","evidence":["README/docs mention a marketplace plugin/integration surface","Found browser dependency 'playwright' in ui/package.json","README/docs mention shell capabilities","README/docs mention database capabilities","README/docs mention code capabilities"]},"package_provenance_drift":{"status":"not_applicable","confidence":null,"summary":"No package source configured","evidence":[]},"evidence_grade":"C","coverage_grade":"C","signal_coverage":0.4,"signal_types":2,"listing_status":"listed","display_listing_status":"listed","display_status_label":"Listed","has_warning":false,"warning_reasons":[],"license_spdx":"Apache-2.0","license_type":"open","license_override":"","trust_score":61.7,"trust_score_v2":61.7,"rank_v2":147,"rank_v2_delta":-30,"trust_v2_adjustment":-5.2,"trust_confidence":1.0,"trust_breakdown":{"safety":11.8,"identity":10.8,"transparency":13.6,"maintenance":19.9,"adoption":10.8},"trust_v2_breakdown":{"mcp":0.0,"external_dependencies":-3.0,"tool_plugin_surface":-2.2,"package_provenance_drift":0.0},"pending_signals":false},{"name":"OpenBB","repo":"OpenBB-finance/OpenBB","display_repo":"","url":"https://github.com/OpenBB-finance/OpenBB","rank":148,"previous_rank":148,"rank_delta":0,"stars":70428,"stars_fmt":"70.4k","forks":7144,"forks_fmt":"7.1k","last_push":"2026-07-08","days_ago":3,"weekly_commits":8,"commits_low_confidence":true,"score":83.6,"description":"Financial data platform for analysts, quants and AI agents.","language":"Python","open_issues":39,"category":"Research & Data","category_rank":8,"npm_package":"","crate_package":"","pypi_package":"","weekly_downloads":null,"dl_source":"","hn_mentions_30d":null,"has_provenance":false,"npm_provenance":null,"pypi_provenance":null,"signed_commits_ratio":1.0,"scorecard_score":6.0,"scorecard_checks":{"Binary-Artifacts":10,"Branch-Protection":5,"CI-Tests":10,"CII-Best-Practices":0,"Code-Review":10,"Contributors":10,"Dangerous-Workflow":10,"Dependency-Update-Tool":0,"Fuzzing":0,"License":9,"Maintained":10,"Packaging":-1,"Pinned-Dependencies":3,"SAST":9,"Security-Policy":10,"Signed-Releases":5,"Token-Permissions":2,"Vulnerabilities":0},"scorecard_scanned_at":"2026-07-11T01:37:48Z","slug":"openbb","source_note":"","public_actions":null,"mcp_server_support":{"status":"declared","confidence":"medium","evidence":["Found MCP-related server path: openbb_platform/extensions/mcp_server/README.md","Found MCP-related server path: openbb_platform/extensions/mcp_server/integration/.gitkeep","Found MCP-related server test path: openbb_platform/extensions/mcp_server/tests/app/test_app.py","Found MCP-related server test path: openbb_platform/extensions/mcp_server/tests/app/test_auth.py"]},"external_service_dependencies":{"providers":[],"requires_api_keys":false,"confidence":null,"evidence":[]},"tool_plugin_surface":{"plugin_system":"declared","tool_tags":["code"],"confidence":"high","evidence":["README/docs mention a declared plugin/integration surface","README/docs mention code capabilities"]},"package_provenance_drift":{"status":"not_applicable","confidence":null,"summary":"No package source configured","evidence":[]},"evidence_grade":"C","coverage_grade":"C","signal_coverage":0.4,"signal_types":2,"listing_status":"listed","display_listing_status":"listed","display_status_label":"Listed","has_warning":false,"warning_reasons":[],"license_spdx":"NOASSERTION","license_type":"open","license_override":"","trust_score":61.6,"trust_score_v2":61.6,"rank_v2":148,"rank_v2_delta":11,"trust_v2_adjustment":-0.6,"trust_confidence":1.0,"trust_breakdown":{"safety":12.5,"identity":10.8,"transparency":13.6,"maintenance":13.7,"adoption":11.6},"trust_v2_breakdown":{"mcp":0.0,"external_dependencies":-0.0,"tool_plugin_surface":-0.6,"package_provenance_drift":0.0},"pending_signals":false},{"name":"Ruflo","repo":"ruvnet/ruflo","display_repo":"","url":"https://github.com/ruvnet/ruflo","rank":149,"previous_rank":149,"rank_delta":0,"stars":63928,"stars_fmt":"63.9k","forks":7554,"forks_fmt":"7.6k","last_push":"2026-07-10","days_ago":1,"weekly_commits":441,"commits_low_confidence":false,"score":96.8,"description":"🌊 The leading agent meta-harness for Claude. Deploy intelligent multi-agent swarms, coordinate autonomous workflows, and","language":"TypeScript","open_issues":504,"category":"Multi-Agent Systems","category_rank":7,"npm_package":"","crate_package":"","pypi_package":"","weekly_downloads":null,"dl_source":"","hn_mentions_30d":null,"has_provenance":false,"npm_provenance":null,"pypi_provenance":null,"signed_commits_ratio":0.19,"scorecard_score":5.4,"scorecard_checks":{"Binary-Artifacts":8,"Branch-Protection":0,"CI-Tests":10,"CII-Best-Practices":0,"Code-Review":0,"Contributors":6,"Dangerous-Workflow":10,"Dependency-Update-Tool":10,"Fuzzing":0,"License":10,"Maintained":10,"Packaging":10,"Pinned-Dependencies":1,"SAST":9,"Security-Policy":10,"Signed-Releases":-1,"Token-Permissions":0,"Vulnerabilities":0},"scorecard_scanned_at":"2026-07-10T17:40:59Z","slug":"ruflo","source_note":"","public_actions":null,"mcp_server_support":{"status":"implemented","confidence":"high","evidence":["README/docs explicitly mention an MCP server","Found MCP-related server path: .claude/mcp.json","Found MCP-related server path: ruflo/src/ruvocal/src/lib/components/mcp/AddServerForm.svelte","Found MCP-related server test path: tests/docker-regression/scripts/test-mcp-server.sh"]},"external_service_dependencies":{"providers":["Anthropic","Google Gemini","OpenAI","Supabase"],"requires_api_keys":false,"confidence":"high","evidence":["README/docs mention OpenAI","Found OpenAI dependency 'openai' in package.json","README/docs mention Anthropic","Found Anthropic dependency 'anthropic' in package.json","README/docs mention Google Gemini","README/docs mention Supabase"]},"tool_plugin_surface":{"plugin_system":"marketplace","tool_tags":["browser","code","search"],"confidence":"high","evidence":["README/docs mention a marketplace plugin/integration surface","README/docs mention browser capabilities","README/docs mention search capabilities","README/docs mention code capabilities"]},"package_provenance_drift":{"status":"not_applicable","confidence":null,"summary":"No package source configured","evidence":[]},"evidence_grade":"C","coverage_grade":"C","signal_coverage":0.4,"signal_types":2,"listing_status":"listed","display_listing_status":"listed","display_status_label":"Listed","has_warning":false,"warning_reasons":[],"license_spdx":"MIT","license_type":"open","license_override":"","trust_score":61.6,"trust_score_v2":61.6,"rank_v2":149,"rank_v2_delta":4,"trust_v2_adjustment":-1.4,"trust_confidence":1.0,"trust_breakdown":{"safety":7.7,"identity":10.8,"transparency":13.1,"maintenance":19.9,"adoption":11.5},"trust_v2_breakdown":{"mcp":2.0,"external_dependencies":-1.5,"tool_plugin_surface":-1.9,"package_provenance_drift":0.0},"pending_signals":false},{"name":"Helicone","repo":"Helicone/helicone","display_repo":"","url":"https://github.com/Helicone/helicone","rank":150,"previous_rank":151,"rank_delta":1,"stars":5932,"stars_fmt":"5.9k","forks":625,"forks_fmt":"625","last_push":"2026-07-05","days_ago":6,"weekly_commits":1,"commits_low_confidence":false,"score":63.7,"description":"🧊 Open source LLM observability platform. One line of code to monitor, evaluate, and experiment. YC W23 🍓","language":"TypeScript","open_issues":38,"category":"Observability & Evaluation","category_rank":11,"npm_package":"","crate_package":"","pypi_package":"helicone_async","weekly_downloads":1077,"dl_source":"pypi","hn_mentions_30d":9,"has_provenance":false,"npm_provenance":null,"pypi_provenance":false,"signed_commits_ratio":0.99,"scorecard_score":5.0,"scorecard_checks":{"Binary-Artifacts":10,"Branch-Protection":6,"CI-Tests":10,"CII-Best-Practices":0,"Code-Review":4,"Contributors":10,"Dangerous-Workflow":10,"Dependency-Update-Tool":10,"Fuzzing":0,"License":10,"Maintained":5,"Packaging":10,"Pinned-Dependencies":0,"SAST":0,"Security-Policy":0,"Signed-Releases":-1,"Token-Permissions":0,"Vulnerabilities":0},"scorecard_scanned_at":"2026-07-10T07:58:01Z","slug":"helicone","source_note":"","public_actions":null,"mcp_server_support":{"status":"implemented","confidence":"medium","evidence":["README/docs explicitly mention an MCP server"]},"external_service_dependencies":{"providers":["Amazon Bedrock","Anthropic","Azure OpenAI","Google Gemini","OpenAI","Postgres","Supabase"],"requires_api_keys":true,"confidence":"high","evidence":["README/docs mention OpenAI","Found OpenAI dependency 'openai' in web/package.json","README/docs mention Anthropic","Found Anthropic dependency 'anthropic' in web/package.json","README/docs mention Google Gemini","README/docs mention Azure OpenAI"]},"tool_plugin_surface":{"plugin_system":"declared","tool_tags":["code","database","search"],"confidence":"high","evidence":["README/docs mention a declared plugin/integration surface","README/docs mention search capabilities","Found database dependency 'pg' in web/package.json","README/docs mention code capabilities"]},"package_provenance_drift":{"status":"match","confidence":"high","summary":"Published package metadata matches the tracked repo","evidence":["pypi package 'helicone_async' points to the tracked repo"]},"evidence_grade":"C","coverage_grade":"A","signal_coverage":0.8,"signal_types":4,"listing_status":"listed","display_listing_status":"listed","display_status_label":"Listed","has_warning":false,"warning_reasons":[],"license_spdx":"Apache-2.0","license_type":"open","license_override":"","trust_score":61.5,"trust_score_v2":61.5,"rank_v2":150,"rank_v2_delta":25,"trust_v2_adjustment":0.8,"trust_confidence":1.0,"trust_breakdown":{"safety":11.2,"identity":10.8,"transparency":12.8,"maintenance":12.8,"adoption":13.1},"trust_v2_breakdown":{"mcp":2.0,"external_dependencies":-4.0,"tool_plugin_surface":-1.2,"package_provenance_drift":4.0},"pending_signals":false},{"name":"Eliza","repo":"elizaOS/eliza","display_repo":"","url":"https://github.com/elizaOS/eliza","rank":151,"previous_rank":150,"rank_delta":-1,"stars":18727,"stars_fmt":"18.7k","forks":5579,"forks_fmt":"5.6k","last_push":"2026-07-11","days_ago":0,"weekly_commits":9765,"commits_low_confidence":false,"score":93.0,"description":"Open source agentic operating system","language":"TypeScript","open_issues":177,"category":"Agent Frameworks","category_rank":34,"npm_package":"@elizaos/core","crate_package":"","pypi_package":"","weekly_downloads":18459,"dl_source":"npm","hn_mentions_30d":null,"has_provenance":false,"npm_provenance":false,"pypi_provenance":null,"signed_commits_ratio":0.16,"scorecard_score":5.0,"scorecard_checks":{"Binary-Artifacts":0,"Branch-Protection":0,"CI-Tests":10,"CII-Best-Practices":0,"Code-Review":1,"Contributors":10,"Dangerous-Workflow":10,"Dependency-Update-Tool":10,"Fuzzing":10,"License":10,"Maintained":10,"Packaging":10,"Pinned-Dependencies":2,"SAST":7,"Security-Policy":10,"Signed-Releases":0,"Token-Permissions":0,"Vulnerabilities":0},"scorecard_scanned_at":"2026-07-11T02:03:13Z","slug":"eliza","source_note":"","public_actions":null,"mcp_server_support":{"status":"declared","confidence":"medium","evidence":["Found MCP-related server path: packages/agent/src/security/mcp-server-config.ts","Found MCP-related server path: packages/app-core/src/registry/entries/plugins/mcp.json"]},"external_service_dependencies":{"providers":["Anthropic","Google Gemini","OpenAI","Postgres","Supabase"],"requires_api_keys":true,"confidence":"high","evidence":["README/docs mention OpenAI","Found OpenAI dependency 'openai' in package.json","Found OpenAI credential/config marker 'OPENAI_API_KEY'","README/docs mention Anthropic","Found Anthropic dependency 'anthropic' in package.json","README/docs mention Google Gemini"]},"tool_plugin_surface":{"plugin_system":"extension-based","tool_tags":["browser","code","database","filesystem","shell"],"confidence":"high","evidence":["README/docs mention a extension-based plugin/integration surface","README/docs mention browser capabilities","README/docs mention shell capabilities","Found filesystem dependency 'fs-extra' in packages/core/package.json","Found database dependency 'pg' in package.json","README/docs mention code capabilities"]},"package_provenance_drift":{"status":"unknown","confidence":"low","summary":"Package source metadata is missing or inconclusive","evidence":["npm package '@elizaos/core' does not expose a source repo URL"]},"evidence_grade":"C","coverage_grade":"B","signal_coverage":0.6,"signal_types":3,"listing_status":"listed","display_listing_status":"listed","display_status_label":"Listed","has_warning":false,"warning_reasons":[],"license_spdx":"MIT","license_type":"open","license_override":"","trust_score":61.5,"trust_score_v2":61.5,"rank_v2":151,"rank_v2_delta":-29,"trust_v2_adjustment":-5.1,"trust_confidence":1.0,"trust_breakdown":{"safety":7.1,"identity":10.8,"transparency":12.8,"maintenance":20.0,"adoption":15.9},"trust_v2_breakdown":{"mcp":0.0,"external_dependencies":-3.0,"tool_plugin_surface":-2.1,"package_provenance_drift":0.0},"pending_signals":false},{"name":"AgentOps","repo":"agentops-ai/agentops","display_repo":"","url":"https://github.com/AgentOps-AI/agentops","rank":152,"previous_rank":152,"rank_delta":0,"stars":5694,"stars_fmt":"5.7k","forks":604,"forks_fmt":"604","last_push":"2026-06-25","days_ago":16,"weekly_commits":1,"commits_low_confidence":false,"score":62.1,"description":"Python SDK for AI agent monitoring, LLM cost tracking, benchmarking, and more. Integrates with most LLMs and agent frame","language":"Python","open_issues":112,"category":"Observability & Evaluation","category_rank":12,"npm_package":"","crate_package":"","pypi_package":"agentops","weekly_downloads":70168,"dl_source":"pypi","hn_mentions_30d":48,"has_provenance":false,"npm_provenance":null,"pypi_provenance":false,"signed_commits_ratio":1.0,"scorecard_score":3.5,"scorecard_checks":{"Binary-Artifacts":10,"Branch-Protection":5,"CI-Tests":1,"CII-Best-Practices":0,"Code-Review":1,"Contributors":10,"Dangerous-Workflow":-1,"Dependency-Update-Tool":0,"Fuzzing":0,"License":10,"Maintained":0,"Packaging":-1,"Pinned-Dependencies":-1,"SAST":0,"Security-Policy":0,"Signed-Releases":-1,"Token-Permissions":-1,"Vulnerabilities":10},"scorecard_scanned_at":"2026-06-22T10:30:20Z","slug":"agentops","source_note":"","public_actions":null,"mcp_server_support":{"status":"declared","confidence":"medium","evidence":["Found MCP-related server docs path: docs/v2/usage/mcp-server.mdx"]},"external_service_dependencies":{"providers":["Anthropic","OpenAI"],"requires_api_keys":true,"confidence":"high","evidence":["Found OpenAI dependency 'openai' in pyproject.toml","Found OpenAI credential/config marker 'OPENAI_API_KEY'","README/docs also mention OpenAI","Found Anthropic dependency 'anthropic' in pyproject.toml","Found Anthropic credential/config marker 'ANTHROPIC_API_KEY'","README/docs also mention Anthropic"]},"tool_plugin_surface":{"plugin_system":"declared","tool_tags":[],"confidence":"medium","evidence":["README/docs mention a declared plugin/integration surface"]},"package_provenance_drift":{"status":"match","confidence":"high","summary":"Published package metadata matches the tracked repo","evidence":["pypi package 'agentops' points to the tracked repo"]},"evidence_grade":"C","coverage_grade":"A","signal_coverage":0.8,"signal_types":4,"listing_status":"listed","display_listing_status":"listed","display_status_label":"Listed","has_warning":false,"warning_reasons":[],"license_spdx":"MIT","license_type":"open","license_override":"","trust_score":61.5,"trust_score_v2":61.5,"rank_v2":152,"rank_v2_delta":34,"trust_v2_adjustment":2.2,"trust_confidence":1.0,"trust_breakdown":{"safety":9.4,"identity":10.8,"transparency":11.5,"maintenance":12.1,"adoption":15.5},"trust_v2_breakdown":{"mcp":0.0,"external_dependencies":-1.5,"tool_plugin_surface":-0.3,"package_provenance_drift":4.0},"pending_signals":false},{"name":"fast-agent","repo":"evalstate/fast-agent","display_repo":"","url":"https://github.com/evalstate/fast-agent","rank":153,"previous_rank":153,"rank_delta":0,"stars":3855,"stars_fmt":"3.9k","forks":414,"forks_fmt":"414","last_push":"2026-07-10","days_ago":1,"weekly_commits":36,"commits_low_confidence":false,"score":78.3,"description":"Code, Build and Evaluate agents - excellent Model and Skills/MCP/ACP Support","language":"Python","open_issues":17,"category":"Agent Frameworks","category_rank":35,"npm_package":"","crate_package":"","pypi_package":"","weekly_downloads":null,"dl_source":"","hn_mentions_30d":null,"has_provenance":false,"npm_provenance":null,"pypi_provenance":null,"signed_commits_ratio":0.6,"scorecard_score":5.9,"scorecard_checks":{"Binary-Artifacts":10,"Branch-Protection":3,"CI-Tests":10,"CII-Best-Practices":0,"Code-Review":2,"Contributors":10,"Dangerous-Workflow":10,"Dependency-Update-Tool":10,"Fuzzing":0,"License":10,"Maintained":10,"Packaging":-1,"Pinned-Dependencies":0,"SAST":7,"Security-Policy":0,"Signed-Releases":-1,"Token-Permissions":0,"Vulnerabilities":10},"scorecard_scanned_at":"2026-07-11T01:35:49Z","slug":"fast-agent","source_note":"","public_actions":null,"mcp_server_support":{"status":"implemented","confidence":"high","evidence":["README/docs explicitly mention an MCP server","Found MCP-related server path: examples/mcp/a3_styling_server.py","Found MCP-related server path: examples/mcp/elicitations/blocking_server.py","Found MCP-related server docs path: docs/docs/assets/social/mcp/mcp-server.png"]},"external_service_dependencies":{"providers":["Amazon Bedrock","Anthropic","OpenAI"],"requires_api_keys":false,"confidence":"high","evidence":["README/docs mention OpenAI","Found OpenAI dependency 'openai' in pyproject.toml","README/docs mention Anthropic","Found Anthropic dependency 'anthropic' in pyproject.toml","Found Amazon Bedrock dependency 'bedrock' in pyproject.toml"]},"tool_plugin_surface":{"plugin_system":"declared","tool_tags":["code","filesystem","shell"],"confidence":"high","evidence":["Found declared path: plugins/README.md","README/docs mention shell capabilities","README/docs mention filesystem capabilities","README/docs mention code capabilities"]},"package_provenance_drift":{"status":"not_applicable","confidence":null,"summary":"No package source configured","evidence":[]},"evidence_grade":"C","coverage_grade":"C","signal_coverage":0.4,"signal_types":2,"listing_status":"listed","display_listing_status":"listed","display_status_label":"Listed","has_warning":false,"warning_reasons":[],"license_spdx":"Apache-2.0","license_type":"open","license_override":"","trust_score":61.3,"trust_score_v2":61.3,"rank_v2":153,"rank_v2_delta":13,"trust_v2_adjustment":-0.2,"trust_confidence":1.0,"trust_breakdown":{"safety":10.4,"identity":10.8,"transparency":13.5,"maintenance":18.2,"adoption":8.6},"trust_v2_breakdown":{"mcp":2.0,"external_dependencies":-1.0,"tool_plugin_surface":-1.2,"package_provenance_drift":0.0},"pending_signals":false},{"name":"Agent Squad","repo":"2FastLabs/agent-squad","display_repo":"","url":"https://github.com/2FastLabs/agent-squad","rank":154,"previous_rank":154,"rank_delta":0,"stars":7690,"stars_fmt":"7.7k","forks":726,"forks_fmt":"726","last_push":"2026-07-10","days_ago":1,"weekly_commits":48,"commits_low_confidence":false,"score":82.7,"description":"Flexible and powerful framework for managing multiple AI agents and handling complex conversations","language":"Swift","open_issues":29,"category":"Multi-Agent Systems","category_rank":8,"npm_package":"","crate_package":"","pypi_package":"","weekly_downloads":null,"dl_source":"","hn_mentions_30d":null,"has_provenance":false,"npm_provenance":null,"pypi_provenance":null,"signed_commits_ratio":0.66,"scorecard_score":4.4,"scorecard_checks":{"Binary-Artifacts":10,"Branch-Protection":0,"CI-Tests":8,"CII-Best-Practices":0,"Code-Review":0,"Contributors":10,"Dangerous-Workflow":10,"Dependency-Update-Tool":10,"Fuzzing":0,"License":10,"Maintained":10,"Packaging":-1,"Pinned-Dependencies":2,"SAST":0,"Security-Policy":0,"Signed-Releases":-1,"Token-Permissions":0,"Vulnerabilities":0},"scorecard_scanned_at":"2026-07-10T16:22:07Z","slug":"agent-squad","source_note":"","public_actions":null,"mcp_server_support":{"status":"implemented","confidence":"high","evidence":["README/docs explicitly mention an MCP server","Found MCP-related server docs path: docs/src/content/docs/swift/examples/mcp-server.md"]},"external_service_dependencies":{"providers":["Anthropic","OpenAI"],"requires_api_keys":false,"confidence":"high","evidence":["Found OpenAI dependency 'openai' in typescript/package.json","README/docs also mention OpenAI","Found Anthropic dependency 'anthropic' in typescript/package.json","README/docs also mention Anthropic"]},"tool_plugin_surface":{"plugin_system":"none","tool_tags":[],"confidence":null,"evidence":[]},"package_provenance_drift":{"status":"not_applicable","confidence":null,"summary":"No package source configured","evidence":[]},"evidence_grade":"C","coverage_grade":"C","signal_coverage":0.4,"signal_types":2,"listing_status":"listed","display_listing_status":"listed","display_status_label":"Listed","has_warning":false,"warning_reasons":[],"license_spdx":"Apache-2.0","license_type":"open","license_override":"","trust_score":61.3,"trust_score_v2":61.3,"rank_v2":154,"rank_v2_delta":28,"trust_v2_adjustment":1.5,"trust_confidence":1.0,"trust_breakdown":{"safety":8.8,"identity":10.8,"transparency":12.2,"maintenance":18.7,"adoption":9.3},"trust_v2_breakdown":{"mcp":2.0,"external_dependencies":-0.5,"tool_plugin_surface":-0.0,"package_provenance_drift":0.0},"pending_signals":false},{"name":"OpenMontage","repo":"calesthio/OpenMontage","display_repo":"","url":"https://github.com/calesthio/OpenMontage","rank":155,"previous_rank":156,"rank_delta":1,"stars":36808,"stars_fmt":"36.8k","forks":4433,"forks_fmt":"4.4k","last_push":"2026-07-11","days_ago":0,"weekly_commits":172,"commits_low_confidence":false,"score":94.4,"description":"World's first open-source, agentic video production system. 12 pipelines, 52 tools, 500+ agent skills. Turn your AI codi","language":"Python","open_issues":60,"category":"Multi-Agent Systems","category_rank":9,"npm_package":"","crate_package":"","pypi_package":"","weekly_downloads":null,"dl_source":"","hn_mentions_30d":null,"has_provenance":false,"npm_provenance":null,"pypi_provenance":null,"signed_commits_ratio":0.31,"scorecard_score":5.3,"scorecard_checks":{"Binary-Artifacts":10,"Branch-Protection":4,"CI-Tests":10,"CII-Best-Practices":0,"Code-Review":8,"Contributors":10,"Dangerous-Workflow":10,"Dependency-Update-Tool":0,"Fuzzing":0,"License":10,"Maintained":10,"Packaging":-1,"Pinned-Dependencies":0,"SAST":0,"Security-Policy":0,"Signed-Releases":-1,"Token-Permissions":10,"Vulnerabilities":0},"scorecard_scanned_at":"2026-07-11T04:03:33Z","slug":"openmontage","source_note":"","public_actions":null,"mcp_server_support":{"status":"none","confidence":null,"evidence":[]},"external_service_dependencies":{"providers":["Google Gemini","OpenAI"],"requires_api_keys":true,"confidence":"high","evidence":["Found OpenAI dependency 'openai' in setup.py","Found OpenAI credential/config marker 'OPENAI_API_KEY'","README/docs also mention OpenAI","Found Google Gemini credential/config marker 'GOOGLE_API_KEY'","README/docs also mention Google Gemini"]},"tool_plugin_surface":{"plugin_system":"declared","tool_tags":[],"confidence":"medium","evidence":["README/docs mention a declared plugin/integration surface"]},"package_provenance_drift":{"status":"not_applicable","confidence":null,"summary":"No package source configured","evidence":[]},"evidence_grade":"C","coverage_grade":"C","signal_coverage":0.4,"signal_types":2,"listing_status":"listed","display_listing_status":"listed","display_status_label":"Listed","has_warning":false,"warning_reasons":[],"license_spdx":"AGPL-3.0","license_type":"open","license_override":"","trust_score":61.2,"trust_score_v2":61.2,"rank_v2":155,"rank_v2_delta":-1,"trust_v2_adjustment":-1.8,"trust_confidence":1.0,"trust_breakdown":{"safety":8.2,"identity":10.8,"transparency":13.0,"maintenance":20.0,"adoption":11.0},"trust_v2_breakdown":{"mcp":0.0,"external_dependencies":-1.5,"tool_plugin_surface":-0.3,"package_provenance_drift":0.0},"pending_signals":false},{"name":"Concordia","repo":"google-deepmind/concordia","display_repo":"","url":"https://github.com/google-deepmind/concordia","rank":156,"previous_rank":155,"rank_delta":-1,"stars":1551,"stars_fmt":"1.6k","forks":343,"forks_fmt":"343","last_push":"2026-07-10","days_ago":1,"weekly_commits":33,"commits_low_confidence":true,"score":75.0,"description":"A library for generative social simulation","language":"Python","open_issues":11,"category":"Multi-Agent Systems","category_rank":10,"npm_package":"","crate_package":"","pypi_package":"gdm-concordia","weekly_downloads":570,"dl_source":"pypi","hn_mentions_30d":null,"has_provenance":false,"npm_provenance":null,"pypi_provenance":false,"signed_commits_ratio":0.0,"scorecard_score":7.0,"scorecard_checks":{"Binary-Artifacts":10,"Branch-Protection":3,"CI-Tests":-1,"CII-Best-Practices":0,"Code-Review":3,"Contributors":10,"Dangerous-Workflow":10,"Dependency-Update-Tool":10,"Fuzzing":0,"License":10,"Maintained":10,"Packaging":10,"Pinned-Dependencies":4,"SAST":10,"Security-Policy":10,"Signed-Releases":-1,"Token-Permissions":10,"Vulnerabilities":0},"scorecard_scanned_at":"2026-07-11T01:29:43Z","slug":"concordia","source_note":"","public_actions":null,"mcp_server_support":{"status":"none","confidence":null,"evidence":[]},"external_service_dependencies":{"providers":["Amazon Bedrock","Anthropic","E2B","Google Gemini","OpenAI"],"requires_api_keys":false,"confidence":"high","evidence":["Found OpenAI dependency 'openai' in setup.py","Found Anthropic dependency 'anthropic' in requirements.txt","Found Google Gemini dependency 'google-generativeai' in requirements.txt","Found Amazon Bedrock dependency 'boto3' in setup.py","Found E2B dependency 'e2b' in requirements.txt"]},"tool_plugin_surface":{"plugin_system":"declared","tool_tags":["code","search","shell"],"confidence":"high","evidence":["README/docs mention a declared plugin/integration surface","Found shell dependency 'pty' in requirements.txt","README/docs mention search capabilities","README/docs mention code capabilities"]},"package_provenance_drift":{"status":"match","confidence":"high","summary":"Published package metadata matches the tracked repo","evidence":["pypi package 'gdm-concordia' points to the tracked repo"]},"evidence_grade":"C","coverage_grade":"B","signal_coverage":0.6,"signal_types":3,"listing_status":"listed","display_listing_status":"listed","display_status_label":"Listed","has_warning":false,"warning_reasons":[],"license_spdx":"Apache-2.0","license_type":"open","license_override":"","trust_score":61.1,"trust_score_v2":61.1,"rank_v2":156,"rank_v2_delta":24,"trust_v2_adjustment":0.8,"trust_confidence":1.0,"trust_breakdown":{"safety":8.8,"identity":10.8,"transparency":14.4,"maintenance":15.0,"adoption":11.3},"trust_v2_breakdown":{"mcp":0.0,"external_dependencies":-2.0,"tool_plugin_surface":-1.2,"package_provenance_drift":4.0},"pending_signals":false},{"name":"mcp-use","repo":"mcp-use/mcp-use","display_repo":"","url":"https://github.com/mcp-use/mcp-use","rank":157,"previous_rank":157,"rank_delta":0,"stars":10277,"stars_fmt":"10.3k","forks":1358,"forks_fmt":"1.4k","last_push":"2026-07-11","days_ago":0,"weekly_commits":22,"commits_low_confidence":false,"score":80.7,"description":"The fullstack MCP framework to develop MCP Apps for ChatGPT / Claude & MCP Servers for AI Agents.","language":"TypeScript","open_issues":36,"category":"Protocols & Tool Integration","category_rank":15,"npm_package":"","crate_package":"","pypi_package":"","weekly_downloads":null,"dl_source":"","hn_mentions_30d":null,"has_provenance":false,"npm_provenance":null,"pypi_provenance":null,"signed_commits_ratio":0.79,"scorecard_score":6.0,"scorecard_checks":{"Binary-Artifacts":10,"Branch-Protection":5,"CI-Tests":10,"CII-Best-Practices":0,"Code-Review":0,"Contributors":10,"Dangerous-Workflow":10,"Dependency-Update-Tool":10,"Fuzzing":0,"License":10,"Maintained":10,"Packaging":10,"Pinned-Dependencies":0,"SAST":9,"Security-Policy":10,"Signed-Releases":-1,"Token-Permissions":0,"Vulnerabilities":0},"scorecard_scanned_at":"2026-07-10T08:34:21Z","slug":"mcp-use","source_note":"","public_actions":null,"mcp_server_support":{"status":"implemented","confidence":"high","evidence":["README/docs explicitly mention an MCP server","Found MCP-related server path: libraries/python/mcp_use/server/__fastmcp.py","Found MCP-related server path: libraries/typescript/packages/mcp-use/examples/server/deployment/supabase/functions/mcp-server/deno.json","Found MCP-related server test path: libraries/typescript/packages/mcp-use/tests/unit/server/mcp-server-dns-rebinding.test.ts"]},"external_service_dependencies":{"providers":["Anthropic","E2B","OpenAI","Postgres","Redis","Supabase"],"requires_api_keys":false,"confidence":"high","evidence":["README/docs mention OpenAI","Found OpenAI dependency 'openai' in libraries/python/pyproject.toml","Found Anthropic dependency 'anthropic' in libraries/python/pyproject.toml","Found E2B dependency 'e2b' in libraries/python/pyproject.toml","Found Supabase dependency 'supabase' in libraries/typescript/packages/mcp-use/package.json","Found Postgres dependency 'pg' in libraries/python/pyproject.toml"]},"tool_plugin_surface":{"plugin_system":"declared","tool_tags":["code","database","filesystem","search"],"confidence":"high","evidence":["Found declared path: .claude-plugin/marketplace.json","README/docs mention filesystem capabilities","README/docs mention search capabilities","Found database dependency 'pg' in libraries/python/pyproject.toml","README/docs mention code capabilities"]},"package_provenance_drift":{"status":"not_applicable","confidence":null,"summary":"No package source configured","evidence":[]},"evidence_grade":"C","coverage_grade":"C","signal_coverage":0.4,"signal_types":2,"listing_status":"listed","display_listing_status":"listed","display_status_label":"Listed","has_warning":false,"warning_reasons":[],"license_spdx":"MIT","license_type":"open","license_override":"","trust_score":60.9,"trust_score_v2":60.9,"rank_v2":157,"rank_v2_delta":-2,"trust_v2_adjustment":-2.0,"trust_confidence":1.0,"trust_breakdown":{"safety":11.5,"identity":10.8,"transparency":13.6,"maintenance":17.4,"adoption":9.6},"trust_v2_breakdown":{"mcp":2.0,"external_dependencies":-2.5,"tool_plugin_surface":-1.5,"package_provenance_drift":0.0},"pending_signals":false},{"name":"agentmemory","repo":"rohitg00/agentmemory","display_repo":"","url":"https://github.com/rohitg00/agentmemory","rank":158,"previous_rank":158,"rank_delta":0,"stars":24964,"stars_fmt":"25.0k","forks":2063,"forks_fmt":"2.1k","last_push":"2026-07-06","days_ago":5,"weekly_commits":2,"commits_low_confidence":false,"score":72.2,"description":"#1 Persistent memory for AI coding agents based on real-world benchmarks","language":"TypeScript","open_issues":182,"category":"Memory & Knowledge","category_rank":18,"npm_package":"@agentmemory/agentmemory","crate_package":"","pypi_package":"","weekly_downloads":9741,"dl_source":"npm","hn_mentions_30d":null,"has_provenance":false,"npm_provenance":false,"pypi_provenance":null,"signed_commits_ratio":null,"scorecard_score":5.7,"scorecard_checks":{"Binary-Artifacts":10,"Branch-Protection":0,"CI-Tests":6,"CII-Best-Practices":0,"Code-Review":0,"Contributors":3,"Dangerous-Workflow":10,"Dependency-Update-Tool":10,"Fuzzing":0,"License":10,"Maintained":10,"Packaging":10,"Pinned-Dependencies":1,"SAST":0,"Security-Policy":10,"Signed-Releases":-1,"Token-Permissions":0,"Vulnerabilities":10},"scorecard_scanned_at":"2026-07-10T16:12:38Z","slug":"agentmemory","source_note":"","public_actions":null,"mcp_server_support":{"status":"implemented","confidence":"high","evidence":["README/docs explicitly mention an MCP server","Found MCP-related server path: src/mcp/server.ts"]},"external_service_dependencies":{"providers":["Anthropic","Google Gemini","OpenAI","Postgres","Qdrant","Redis"],"requires_api_keys":true,"confidence":"high","evidence":["README/docs mention OpenAI","Found OpenAI credential/config marker 'OPENAI_API_KEY'","README/docs mention Anthropic","Found Anthropic dependency 'anthropic' in package.json","Found Anthropic credential/config marker 'ANTHROPIC_API_KEY'","README/docs mention Google Gemini"]},"tool_plugin_surface":{"plugin_system":"marketplace","tool_tags":["code","database","filesystem","search","shell"],"confidence":"high","evidence":["README/docs mention a marketplace plugin/integration surface","README/docs mention shell capabilities","README/docs mention filesystem capabilities","README/docs mention search capabilities","README/docs mention database capabilities","README/docs mention code capabilities"]},"package_provenance_drift":{"status":"match","confidence":"high","summary":"Published package metadata matches the tracked repo","evidence":["npm package '@agentmemory/agentmemory' points to the tracked repo"]},"evidence_grade":"C","coverage_grade":"B","signal_coverage":0.6,"signal_types":3,"listing_status":"listed","display_listing_status":"listed","display_status_label":"Listed","has_warning":false,"warning_reasons":[],"license_spdx":"Apache-2.0","license_type":"open","license_override":"","trust_score":60.7,"trust_score_v2":60.7,"rank_v2":158,"rank_v2_delta":16,"trust_v2_adjustment":0.0,"trust_confidence":1.0,"trust_breakdown":{"safety":7.1,"identity":10.8,"transparency":13.3,"maintenance":13.6,"adoption":15.9},"trust_v2_breakdown":{"mcp":2.0,"external_dependencies":-3.5,"tool_plugin_surface":-2.5,"package_provenance_drift":4.0},"pending_signals":false},{"name":"Kilo Code","repo":"Kilo-Org/kilocode","display_repo":"","url":"https://github.com/Kilo-Org/kilocode","rank":159,"previous_rank":159,"rank_delta":0,"stars":25990,"stars_fmt":"26.0k","forks":2880,"forks_fmt":"2.9k","last_push":"2026-07-10","days_ago":1,"weekly_commits":2025,"commits_low_confidence":false,"score":92.6,"description":"Kilo is the all-in-one agentic engineering platform. Build, ship, and iterate faster with the most popular open source c","language":"TypeScript","open_issues":616,"category":"Coding Agents","category_rank":21,"npm_package":"kilocode","crate_package":"","pypi_package":"","weekly_downloads":78,"dl_source":"npm","hn_mentions_30d":6,"has_provenance":false,"npm_provenance":false,"pypi_provenance":null,"signed_commits_ratio":0.43,"scorecard_score":5.0,"scorecard_checks":{"Binary-Artifacts":9,"Branch-Protection":4,"CI-Tests":10,"CII-Best-Practices":0,"Code-Review":7,"Contributors":10,"Dangerous-Workflow":0,"Dependency-Update-Tool":10,"Fuzzing":0,"License":10,"Maintained":10,"Packaging":10,"Pinned-Dependencies":1,"SAST":10,"Security-Policy":10,"Signed-Releases":0,"Token-Permissions":0,"Vulnerabilities":0},"scorecard_scanned_at":"2026-07-10T08:31:16Z","slug":"kilo-code","source_note":"","public_actions":null,"mcp_server_support":{"status":"declared","confidence":"medium","evidence":["Found MCP-related server path: packages/kilo-docs/.kilocode/mcp.json","Found MCP-related server path: packages/kilo-docs/pages/automate/mcp/server-transports.md","Found MCP-related server docs path: packages/kilo-vscode/docs/agent-behaviour/mcp-server-creation.md"]},"external_service_dependencies":{"providers":["Amazon Bedrock","Anthropic","Google Gemini","OpenAI","Postgres"],"requires_api_keys":false,"confidence":"high","evidence":["Found OpenAI dependency 'openai' in packages/llm/package.json","Found Anthropic dependency 'anthropic' in packages/llm/package.json","README/docs mention Google Gemini","Found Amazon Bedrock dependency 'bedrock' in packages/llm/package.json","Found Postgres dependency 'pg' in package.json"]},"tool_plugin_surface":{"plugin_system":"marketplace","tool_tags":["browser","code","database","search","shell"],"confidence":"high","evidence":["README/docs mention a marketplace plugin/integration surface","Found browser dependency 'playwright' in package.json","README/docs mention shell capabilities","README/docs mention search capabilities","Found database dependency 'pg' in package.json","README/docs mention code capabilities"]},"package_provenance_drift":{"status":"unknown","confidence":"low","summary":"Package source metadata is missing or inconclusive","evidence":["npm package 'kilocode' does not expose a source repo URL"]},"evidence_grade":"C","coverage_grade":"A","signal_coverage":0.8,"signal_types":4,"listing_status":"listed","display_listing_status":"listed","display_status_label":"Listed","has_warning":false,"warning_reasons":[],"license_spdx":"MIT","license_type":"open","license_override":"","trust_score":60.5,"trust_score_v2":60.5,"rank_v2":159,"rank_v2_delta":-29,"trust_v2_adjustment":-4.5,"trust_confidence":1.0,"trust_breakdown":{"safety":8.4,"identity":10.8,"transparency":12.8,"maintenance":19.9,"adoption":13.1},"trust_v2_breakdown":{"mcp":0.0,"external_dependencies":-2.0,"tool_plugin_surface":-2.5,"package_provenance_drift":0.0},"pending_signals":false},{"name":"Open Multi-Agent","repo":"open-multi-agent/open-multi-agent","display_repo":"","url":"https://github.com/open-multi-agent/open-multi-agent","rank":160,"previous_rank":161,"rank_delta":1,"stars":6558,"stars_fmt":"6.6k","forks":2407,"forks_fmt":"2.4k","last_push":"2026-07-11","days_ago":0,"weekly_commits":54,"commits_low_confidence":false,"score":85.3,"description":"From a goal to a task DAG, automatically. TypeScript-native multi-agent orchestration.","language":"TypeScript","open_issues":10,"category":"Multi-Agent Systems","category_rank":11,"npm_package":"","crate_package":"","pypi_package":"","weekly_downloads":null,"dl_source":"","hn_mentions_30d":null,"has_provenance":false,"npm_provenance":null,"pypi_provenance":null,"signed_commits_ratio":0.97,"scorecard_score":5.4,"scorecard_checks":{"Binary-Artifacts":10,"Branch-Protection":4,"CI-Tests":10,"CII-Best-Practices":0,"Code-Review":1,"Contributors":3,"Dangerous-Workflow":10,"Dependency-Update-Tool":0,"Fuzzing":0,"License":10,"Maintained":10,"Packaging":-1,"Pinned-Dependencies":6,"SAST":0,"Security-Policy":10,"Signed-Releases":-1,"Token-Permissions":10,"Vulnerabilities":0},"scorecard_scanned_at":"2026-07-10T16:20:49Z","slug":"open-multi-agent","source_note":"","public_actions":null,"mcp_server_support":{"status":"declared","confidence":"medium","evidence":["Found MCP dependency '@modelcontextprotocol/sdk' in packages/core/package.json"]},"external_service_dependencies":{"providers":["Amazon Bedrock","Anthropic","Google Gemini","OpenAI"],"requires_api_keys":true,"confidence":"high","evidence":["README/docs mention OpenAI","Found OpenAI dependency 'openai' in packages/core/package.json","Found OpenAI credential/config marker 'OPENAI_API_KEY'","Found Anthropic dependency 'anthropic' in packages/core/package.json","Found Google Gemini dependency '@google/genai' in packages/core/package.json","Found Amazon Bedrock dependency 'bedrock' in packages/core/package.json"]},"tool_plugin_surface":{"plugin_system":"declared","tool_tags":["code","filesystem"],"confidence":"high","evidence":["README/docs mention a declared plugin/integration surface","README/docs mention filesystem capabilities","README/docs mention code capabilities"]},"package_provenance_drift":{"status":"not_applicable","confidence":null,"summary":"No package source configured","evidence":[]},"evidence_grade":"C","coverage_grade":"C","signal_coverage":0.4,"signal_types":2,"listing_status":"listed","display_listing_status":"listed","display_status_label":"Listed","has_warning":false,"warning_reasons":[],"license_spdx":"MIT","license_type":"open","license_override":"","trust_score":60.2,"trust_score_v2":60.2,"rank_v2":160,"rank_v2_delta":-15,"trust_v2_adjustment":-3.4,"trust_confidence":1.0,"trust_breakdown":{"safety":11.6,"identity":10.8,"transparency":13.1,"maintenance":18.9,"adoption":9.2},"trust_v2_breakdown":{"mcp":0.0,"external_dependencies":-2.5,"tool_plugin_surface":-0.9,"package_provenance_drift":0.0},"pending_signals":false},{"name":"Figma Context MCP","repo":"GLips/Figma-Context-MCP","display_repo":"","url":"https://github.com/GLips/Figma-Context-MCP","rank":161,"previous_rank":160,"rank_delta":-1,"stars":15367,"stars_fmt":"15.4k","forks":1211,"forks_fmt":"1.2k","last_push":"2026-07-03","days_ago":8,"weekly_commits":22,"commits_low_confidence":false,"score":80.4,"description":"MCP server to provide Figma layout information to AI coding agents like Cursor","language":"TypeScript","open_issues":6,"category":"Protocols & Tool Integration","category_rank":16,"npm_package":"","crate_package":"","pypi_package":"","weekly_downloads":null,"dl_source":"","hn_mentions_30d":null,"has_provenance":false,"npm_provenance":null,"pypi_provenance":null,"signed_commits_ratio":0.82,"scorecard_score":4.4,"scorecard_checks":{"Binary-Artifacts":10,"Branch-Protection":0,"CI-Tests":9,"CII-Best-Practices":0,"Code-Review":2,"Contributors":6,"Dangerous-Workflow":10,"Dependency-Update-Tool":0,"Fuzzing":0,"License":10,"Maintained":10,"Packaging":10,"Pinned-Dependencies":0,"SAST":0,"Security-Policy":10,"Signed-Releases":-1,"Token-Permissions":0,"Vulnerabilities":0},"scorecard_scanned_at":"2026-07-11T01:34:52Z","slug":"figma-context-mcp","source_note":"","public_actions":null,"mcp_server_support":{"status":"implemented","confidence":"high","evidence":["README/docs explicitly mention an MCP server","Found MCP-related server path: src/mcp-server.ts","Found MCP dependency '@modelcontextprotocol/sdk' in package.json"]},"external_service_dependencies":{"providers":[],"requires_api_keys":true,"confidence":"low","evidence":[]},"tool_plugin_surface":{"plugin_system":"none","tool_tags":["code"],"confidence":"medium","evidence":["README/docs mention code capabilities"]},"package_provenance_drift":{"status":"not_applicable","confidence":null,"summary":"No package source configured","evidence":[]},"evidence_grade":"C","coverage_grade":"C","signal_coverage":0.4,"signal_types":2,"listing_status":"listed","display_listing_status":"listed","display_status_label":"Listed","has_warning":false,"warning_reasons":[],"license_spdx":"MIT","license_type":"open","license_override":"","trust_score":60.2,"trust_score_v2":60.2,"rank_v2":161,"rank_v2_delta":23,"trust_v2_adjustment":0.7,"trust_confidence":1.0,"trust_breakdown":{"safety":9.6,"identity":10.8,"transparency":12.2,"maintenance":16.9,"adoption":10.0},"trust_v2_breakdown":{"mcp":2.0,"external_dependencies":-1.0,"tool_plugin_surface":-0.3,"package_provenance_drift":0.0},"pending_signals":false},{"name":"ToolJet","repo":"ToolJet/ToolJet","display_repo":"","url":"https://github.com/ToolJet/ToolJet","rank":162,"previous_rank":162,"rank_delta":0,"stars":38175,"stars_fmt":"38.2k","forks":5160,"forks_fmt":"5.2k","last_push":"2026-07-10","days_ago":1,"weekly_commits":233,"commits_low_confidence":false,"score":94.8,"description":"ToolJet is the open-source foundation of ToolJet AI - the enterprise app generation platform for building internal tools","language":"JavaScript","open_issues":517,"category":"UI & App Builders","category_rank":7,"npm_package":"","crate_package":"","pypi_package":"","weekly_downloads":null,"dl_source":"","hn_mentions_30d":null,"has_provenance":false,"npm_provenance":null,"pypi_provenance":null,"signed_commits_ratio":0.62,"scorecard_score":4.8,"scorecard_checks":{"Binary-Artifacts":0,"Branch-Protection":6,"CI-Tests":10,"CII-Best-Practices":0,"Code-Review":8,"Contributors":10,"Dangerous-Workflow":0,"Dependency-Update-Tool":10,"Fuzzing":0,"License":10,"Maintained":10,"Packaging":10,"Pinned-Dependencies":0,"SAST":7,"Security-Policy":10,"Signed-Releases":-1,"Token-Permissions":0,"Vulnerabilities":0},"scorecard_scanned_at":"2026-07-08T09:29:32Z","slug":"tooljet","source_note":"","public_actions":null,"mcp_server_support":{"status":"none","confidence":null,"evidence":[]},"external_service_dependencies":{"providers":["Anthropic","OpenAI","Postgres","Redis"],"requires_api_keys":false,"confidence":"high","evidence":["Found OpenAI dependency 'openai' in server/package.json","Found Anthropic dependency 'anthropic' in server/package.json","README/docs mention Postgres","Found Postgres dependency 'pg' in server/package.json","Found Redis dependency 'redis' in server/package.json"]},"tool_plugin_surface":{"plugin_system":"marketplace","tool_tags":["code","database","shell"],"confidence":"high","evidence":["README/docs mention a marketplace plugin/integration surface","README/docs mention shell capabilities","Found database dependency 'pg' in server/package.json","README/docs mention code capabilities"]},"package_provenance_drift":{"status":"not_applicable","confidence":null,"summary":"No package source configured","evidence":[]},"evidence_grade":"C","coverage_grade":"C","signal_coverage":0.4,"signal_types":2,"listing_status":"listed","display_listing_status":"listed","display_status_label":"Listed","has_warning":false,"warning_reasons":[],"license_spdx":"AGPL-3.0","license_type":"open","license_override":"","trust_score":60.0,"trust_score_v2":60.0,"rank_v2":162,"rank_v2_delta":-13,"trust_v2_adjustment":-3.4,"trust_confidence":1.0,"trust_breakdown":{"safety":9.1,"identity":10.8,"transparency":12.6,"maintenance":19.9,"adoption":11.0},"trust_v2_breakdown":{"mcp":0.0,"external_dependencies":-1.5,"tool_plugin_surface":-1.9,"package_provenance_drift":0.0},"pending_signals":false},{"name":"Dyad","repo":"dyad-sh/dyad","display_repo":"","url":"https://github.com/dyad-sh/dyad","rank":163,"previous_rank":163,"rank_delta":0,"stars":20892,"stars_fmt":"20.9k","forks":2518,"forks_fmt":"2.5k","last_push":"2026-07-11","days_ago":0,"weekly_commits":145,"commits_low_confidence":false,"score":91.7,"description":"Local, open-source AI app builder for power users ✨ v0 / Lovable / Replit / Bolt alternative 🌟 Star if you like it!","language":"TypeScript","open_issues":253,"category":"UI & App Builders","category_rank":8,"npm_package":"","crate_package":"","pypi_package":"","weekly_downloads":null,"dl_source":"","hn_mentions_30d":null,"has_provenance":false,"npm_provenance":null,"pypi_provenance":null,"signed_commits_ratio":1.0,"scorecard_score":3.2,"scorecard_checks":{"Binary-Artifacts":10,"Branch-Protection":5,"CI-Tests":10,"CII-Best-Practices":0,"Code-Review":0,"Contributors":3,"Dangerous-Workflow":0,"Dependency-Update-Tool":0,"Fuzzing":0,"License":9,"Maintained":10,"Packaging":-1,"Pinned-Dependencies":2,"SAST":3,"Security-Policy":10,"Signed-Releases":0,"Token-Permissions":0,"Vulnerabilities":0},"scorecard_scanned_at":"2026-07-10T18:32:30Z","slug":"dyad","source_note":"","public_actions":null,"mcp_server_support":{"status":"implemented","confidence":"high","evidence":["Found MCP-related server path: testing/fake-http-mcp-server.mjs","Found MCP-related server path: testing/fake-oauth-mcp-server.mjs","Found MCP dependency '@modelcontextprotocol/sdk' in package.json"]},"external_service_dependencies":{"providers":["Amazon Bedrock","Anthropic","OpenAI","Postgres","Supabase"],"requires_api_keys":false,"confidence":"high","evidence":["Found OpenAI dependency 'openai' in package.json","Found Anthropic dependency 'anthropic' in package.json","Found Amazon Bedrock dependency 'bedrock' in package.json","Found Supabase dependency 'supabase' in package.json","Found Postgres dependency 'pg' in package.json"]},"tool_plugin_surface":{"plugin_system":"none","tool_tags":["browser","code","database","filesystem","shell"],"confidence":"high","evidence":["Found browser dependency 'playwright' in package.json","Found shell dependency 'pty' in package.json","Found filesystem dependency 'fs-extra' in package.json","Found database dependency 'pg' in package.json","README/docs mention code capabilities"]},"package_provenance_drift":{"status":"not_applicable","confidence":null,"summary":"No package source configured","evidence":[]},"evidence_grade":"C","coverage_grade":"C","signal_coverage":0.4,"signal_types":2,"listing_status":"listed","display_listing_status":"listed","display_status_label":"Listed","has_warning":false,"warning_reasons":[],"license_spdx":"NOASSERTION","license_type":"open","license_override":"","trust_score":59.9,"trust_score_v2":59.9,"rank_v2":163,"rank_v2_delta":4,"trust_v2_adjustment":-1.5,"trust_confidence":1.0,"trust_breakdown":{"safety":9.0,"identity":10.8,"transparency":11.2,"maintenance":20.0,"adoption":10.4},"trust_v2_breakdown":{"mcp":2.0,"external_dependencies":-2.0,"tool_plugin_surface":-1.5,"package_provenance_drift":0.0},"pending_signals":false},{"name":"OpenHuman","repo":"tinyhumansai/openhuman","display_repo":"","url":"https://github.com/tinyhumansai/openhuman","rank":164,"previous_rank":165,"rank_delta":1,"stars":34620,"stars_fmt":"34.6k","forks":3375,"forks_fmt":"3.4k","last_push":"2026-07-11","days_ago":0,"weekly_commits":683,"commits_low_confidence":false,"score":93.6,"description":"Your Personal AI super intelligence. Private, Simple and extremely powerful.","language":"Rust","open_issues":140,"category":"Agent Frameworks","category_rank":36,"npm_package":"","crate_package":"openhuman","pypi_package":"","weekly_downloads":1,"dl_source":"crates.io","hn_mentions_30d":null,"has_provenance":false,"npm_provenance":null,"pypi_provenance":null,"signed_commits_ratio":0.88,"scorecard_score":5.5,"scorecard_checks":{"Binary-Artifacts":10,"Branch-Protection":5,"CI-Tests":10,"CII-Best-Practices":0,"Code-Review":8,"Contributors":10,"Dangerous-Workflow":10,"Dependency-Update-Tool":0,"Fuzzing":0,"License":10,"Maintained":10,"Packaging":10,"Pinned-Dependencies":0,"SAST":0,"Security-Policy":10,"Signed-Releases":8,"Token-Permissions":0,"Vulnerabilities":0},"scorecard_scanned_at":"2026-07-11T01:33:23Z","slug":"openhuman","source_note":"","public_actions":null,"mcp_server_support":{"status":"declared","confidence":"medium","evidence":["Found MCP-related server path: .claude/mcp.json","Found MCP-related server path: app/src/components/channels/mcp/InstalledServerDetail.tsx","Found MCP-related server test path: app/src/components/channels/mcp/InstalledServerDetail.enabledToggle.test.tsx","Found MCP-related server test path: app/src/components/channels/mcp/InstalledServerDetail.test.tsx"]},"external_service_dependencies":{"providers":["Postgres"],"requires_api_keys":false,"confidence":"medium","evidence":["Found Postgres dependency 'pg' in app/package.json"]},"tool_plugin_surface":{"plugin_system":"declared","tool_tags":["browser","code","database","filesystem","search","shell"],"confidence":"high","evidence":["README/docs mention a declared plugin/integration surface","Found browser dependency 'playwright' in app/package.json","README/docs mention shell capabilities","README/docs mention filesystem capabilities","README/docs mention search capabilities","Found database dependency 'pg' in app/package.json"]},"package_provenance_drift":{"status":"warning","confidence":"high","summary":"1 package source mismatch detected","evidence":["crates.io package 'openhuman' points to openhuman-ai/rust-openhuman, not tinyhumansai/openhuman"]},"evidence_grade":"C","coverage_grade":"B","signal_coverage":0.6,"signal_types":3,"listing_status":"listed","display_listing_status":"listed","display_status_label":"Listed","has_warning":false,"warning_reasons":[],"license_spdx":"GPL-3.0","license_type":"open","license_override":"","trust_score":59.8,"trust_score_v2":59.8,"rank_v2":164,"rank_v2_delta":-43,"trust_v2_adjustment":-6.8,"trust_confidence":1.0,"trust_breakdown":{"safety":11.3,"identity":10.8,"transparency":13.2,"maintenance":20.0,"adoption":11.3},"trust_v2_breakdown":{"mcp":0.0,"external_dependencies":-0.0,"tool_plugin_surface":-1.8,"package_provenance_drift":-5.0},"pending_signals":false},{"name":"Engram","repo":"Gentleman-Programming/engram","display_repo":"","url":"https://github.com/Gentleman-Programming/engram","rank":165,"previous_rank":166,"rank_delta":1,"stars":5008,"stars_fmt":"5.0k","forks":568,"forks_fmt":"568","last_push":"2026-07-08","days_ago":3,"weekly_commits":61,"commits_low_confidence":false,"score":82.1,"description":"Persistent memory system for AI coding agents. Agent-agnostic Go binary with SQLite + FTS5, MCP server, HTTP API, CLI, a","language":"Go","open_issues":88,"category":"Needs review","category_rank":2,"npm_package":"","crate_package":"","pypi_package":"","weekly_downloads":null,"dl_source":"","hn_mentions_30d":null,"has_provenance":false,"npm_provenance":null,"pypi_provenance":null,"signed_commits_ratio":0.69,"scorecard_score":4.7,"scorecard_checks":{"Binary-Artifacts":8,"Branch-Protection":4,"CI-Tests":10,"CII-Best-Practices":0,"Code-Review":0,"Contributors":3,"Dangerous-Workflow":10,"Dependency-Update-Tool":10,"Fuzzing":0,"License":10,"Maintained":10,"Packaging":10,"Pinned-Dependencies":0,"SAST":0,"Security-Policy":10,"Signed-Releases":0,"Token-Permissions":0,"Vulnerabilities":0},"scorecard_scanned_at":"2026-07-10T08:32:49Z","slug":"engram","source_note":"","public_actions":null,"mcp_server_support":{"status":"implemented","confidence":"medium","evidence":["README/docs explicitly mention an MCP server"]},"external_service_dependencies":{"providers":["Google Gemini","Postgres"],"requires_api_keys":false,"confidence":"high","evidence":["README/docs mention Google Gemini","README/docs mention Postgres"]},"tool_plugin_surface":{"plugin_system":"marketplace","tool_tags":["code","database","search","shell"],"confidence":"high","evidence":["README/docs mention a marketplace plugin/integration surface","README/docs mention shell capabilities","README/docs mention search capabilities","README/docs mention database capabilities","README/docs mention code capabilities"]},"package_provenance_drift":{"status":"not_applicable","confidence":null,"summary":"No package source configured","evidence":[]},"evidence_grade":"C","coverage_grade":"C","signal_coverage":0.4,"signal_types":2,"listing_status":"listed","display_listing_status":"listed","display_status_label":"Listed","has_warning":false,"warning_reasons":[],"license_spdx":"MIT","license_type":"open","license_override":"","trust_score":59.8,"trust_score_v2":59.8,"rank_v2":165,"rank_v2_delta":12,"trust_v2_adjustment":-0.7,"trust_confidence":1.0,"trust_breakdown":{"safety":9.3,"identity":10.8,"transparency":12.5,"maintenance":19.0,"adoption":8.9},"trust_v2_breakdown":{"mcp":2.0,"external_dependencies":-0.5,"tool_plugin_surface":-2.2,"package_provenance_drift":0.0},"pending_signals":false},{"name":"ASM","repo":"luongnv89/asm","display_repo":"","url":"https://github.com/luongnv89/asm","rank":166,"previous_rank":164,"rank_delta":-2,"stars":721,"stars_fmt":"721","forks":60,"forks_fmt":"60","last_push":"2026-07-10","days_ago":1,"weekly_commits":39,"commits_low_confidence":false,"score":70.5,"description":"The universal skill manager for AI coding agents.","language":"TypeScript","open_issues":30,"category":"Needs review","category_rank":3,"npm_package":"","crate_package":"","pypi_package":"","weekly_downloads":null,"dl_source":"","hn_mentions_30d":null,"has_provenance":false,"npm_provenance":null,"pypi_provenance":null,"signed_commits_ratio":0.64,"scorecard_score":6.4,"scorecard_checks":{"Binary-Artifacts":10,"Branch-Protection":0,"CI-Tests":9,"CII-Best-Practices":0,"Code-Review":1,"Contributors":3,"Dangerous-Workflow":10,"Dependency-Update-Tool":10,"Fuzzing":0,"License":10,"Maintained":10,"Packaging":-1,"Pinned-Dependencies":8,"SAST":0,"Security-Policy":10,"Signed-Releases":-1,"Token-Permissions":10,"Vulnerabilities":5},"scorecard_scanned_at":"2026-07-10T08:39:09Z","slug":"asm","source_note":"","public_actions":null,"mcp_server_support":{"status":"none","confidence":null,"evidence":[]},"external_service_dependencies":{"providers":["Anthropic","Google Gemini"],"requires_api_keys":false,"confidence":"high","evidence":["README/docs mention Anthropic","README/docs mention Google Gemini"]},"tool_plugin_surface":{"plugin_system":"none","tool_tags":["code","search","shell"],"confidence":"high","evidence":["README/docs mention shell capabilities","README/docs mention search capabilities","README/docs mention code capabilities"]},"package_provenance_drift":{"status":"not_applicable","confidence":null,"summary":"No package source configured","evidence":[]},"evidence_grade":"C","coverage_grade":"C","signal_coverage":0.4,"signal_types":2,"listing_status":"listed","display_listing_status":"listed","display_status_label":"Listed","has_warning":false,"warning_reasons":[],"license_spdx":"MIT","license_type":"open","license_override":"","trust_score":59.7,"trust_score_v2":59.7,"rank_v2":166,"rank_v2_delta":6,"trust_v2_adjustment":-1.4,"trust_confidence":1.0,"trust_breakdown":{"safety":11.2,"identity":10.8,"transparency":13.9,"maintenance":18.3,"adoption":6.9},"trust_v2_breakdown":{"mcp":0.0,"external_dependencies":-0.5,"tool_plugin_surface":-0.9,"package_provenance_drift":0.0},"pending_signals":false},{"name":"Spring AI Alibaba","repo":"alibaba/spring-ai-alibaba","display_repo":"","url":"https://github.com/alibaba/spring-ai-alibaba","rank":167,"previous_rank":167,"rank_delta":0,"stars":10281,"stars_fmt":"10.3k","forks":2276,"forks_fmt":"2.3k","last_push":"2026-07-09","days_ago":2,"weekly_commits":24,"commits_low_confidence":false,"score":82.0,"description":"Agentic AI Framework for Java Developers","language":"Java","open_issues":162,"category":"Agent Frameworks","category_rank":37,"npm_package":"","crate_package":"","pypi_package":"","weekly_downloads":null,"dl_source":"","hn_mentions_30d":null,"has_provenance":false,"npm_provenance":null,"pypi_provenance":null,"signed_commits_ratio":0.97,"scorecard_score":4.8,"scorecard_checks":{"Binary-Artifacts":9,"Branch-Protection":0,"CI-Tests":10,"CII-Best-Practices":0,"Code-Review":10,"Contributors":10,"Dangerous-Workflow":10,"Dependency-Update-Tool":0,"Fuzzing":0,"License":10,"Maintained":10,"Packaging":-1,"Pinned-Dependencies":2,"SAST":0,"Security-Policy":9,"Signed-Releases":-1,"Token-Permissions":0,"Vulnerabilities":0},"scorecard_scanned_at":"2026-07-11T04:06:00Z","slug":"spring-ai-alibaba","source_note":"","public_actions":null,"mcp_server_support":{"status":"declared","confidence":"medium","evidence":["README/docs mention MCP support","Found MCP-related server path: spring-ai-alibaba-admin/spring-ai-alibaba-admin-server-runtime/src/main/java/com/alibaba/cloud/ai/studio/runtime/domain/mcp/McpServerCallToolRequest.java","Found MCP-related server path: spring-ai-alibaba-admin/spring-ai-alibaba-admin-server-runtime/src/main/java/com/alibaba/cloud/ai/studio/runtime/domain/mcp/McpServerCallToolResponse.java"]},"external_service_dependencies":{"providers":[],"requires_api_keys":true,"confidence":"low","evidence":[]},"tool_plugin_surface":{"plugin_system":"extension-based","tool_tags":[],"confidence":"medium","evidence":["README/docs mention a extension-based plugin/integration surface"]},"package_provenance_drift":{"status":"not_applicable","confidence":null,"summary":"No package source configured","evidence":[]},"evidence_grade":"C","coverage_grade":"C","signal_coverage":0.4,"signal_types":2,"listing_status":"listed","display_listing_status":"listed","display_status_label":"Listed","has_warning":false,"warning_reasons":[],"license_spdx":"Apache-2.0","license_type":"open","license_override":"","trust_score":59.6,"trust_score_v2":59.6,"rank_v2":167,"rank_v2_delta":3,"trust_v2_adjustment":-1.6,"trust_confidence":1.0,"trust_breakdown":{"safety":10.8,"identity":10.8,"transparency":12.6,"maintenance":17.4,"adoption":9.6},"trust_v2_breakdown":{"mcp":0.0,"external_dependencies":-1.0,"tool_plugin_surface":-0.6,"package_provenance_drift":0.0},"pending_signals":false},{"name":"TEN Framework","repo":"TEN-framework/ten-framework","display_repo":"","url":"https://github.com/TEN-framework/ten-framework","rank":168,"previous_rank":168,"rank_delta":0,"stars":10875,"stars_fmt":"10.9k","forks":1318,"forks_fmt":"1.3k","last_push":"2026-07-10","days_ago":1,"weekly_commits":17,"commits_low_confidence":false,"score":79.4,"description":" Open-source framework for conversational voice AI agents","language":"Python","open_issues":159,"category":"Voice & Conversational","category_rank":4,"npm_package":"","crate_package":"","pypi_package":"","weekly_downloads":null,"dl_source":"","hn_mentions_30d":null,"has_provenance":false,"npm_provenance":null,"pypi_provenance":null,"signed_commits_ratio":0.99,"scorecard_score":5.0,"scorecard_checks":{"Binary-Artifacts":9,"Branch-Protection":5,"CI-Tests":10,"CII-Best-Practices":0,"Code-Review":9,"Contributors":10,"Dangerous-Workflow":10,"Dependency-Update-Tool":0,"Fuzzing":10,"License":9,"Maintained":10,"Packaging":-1,"Pinned-Dependencies":0,"SAST":7,"Security-Policy":0,"Signed-Releases":0,"Token-Permissions":0,"Vulnerabilities":0},"scorecard_scanned_at":"2026-07-10T07:53:19Z","slug":"ten-framework","source_note":"","public_actions":null,"mcp_server_support":{"status":"none","confidence":null,"evidence":[]},"external_service_dependencies":{"providers":["OpenAI"],"requires_api_keys":true,"confidence":"high","evidence":["README/docs mention OpenAI","Found OpenAI credential/config marker 'OPENAI_API_KEY'"]},"tool_plugin_surface":{"plugin_system":"extension-based","tool_tags":["code","search"],"confidence":"high","evidence":["README/docs mention a extension-based plugin/integration surface","README/docs mention search capabilities","README/docs mention code capabilities"]},"package_provenance_drift":{"status":"not_applicable","confidence":null,"summary":"No package source configured","evidence":[]},"evidence_grade":"C","coverage_grade":"C","signal_coverage":0.4,"signal_types":2,"listing_status":"listed","display_listing_status":"listed","display_status_label":"Listed","has_warning":false,"warning_reasons":[],"license_spdx":"NOASSERTION","license_type":"open","license_override":"","trust_score":59.2,"trust_score_v2":59.2,"rank_v2":168,"rank_v2_delta":0,"trust_v2_adjustment":-2.2,"trust_confidence":1.0,"trust_breakdown":{"safety":11.2,"identity":10.8,"transparency":12.8,"maintenance":16.9,"adoption":9.7},"trust_v2_breakdown":{"mcp":0.0,"external_dependencies":-1.0,"tool_plugin_surface":-1.2,"package_provenance_drift":0.0},"pending_signals":false},{"name":"Obsidian Second Brain","repo":"eugeniughelbur/obsidian-second-brain","display_repo":"","url":"https://github.com/eugeniughelbur/obsidian-second-brain","rank":169,"previous_rank":169,"rank_delta":0,"stars":3109,"stars_fmt":"3.1k","forks":380,"forks_fmt":"380","last_push":"2026-07-10","days_ago":1,"weekly_commits":70,"commits_low_confidence":false,"score":81.1,"description":"Cross-CLI skill for Obsidian: turn your vault into a living AI-first second brain across Claude Code, Codex, Gemini, and","language":"Python","open_issues":0,"category":"Needs review","category_rank":4,"npm_package":"","crate_package":"","pypi_package":"","weekly_downloads":null,"dl_source":"","hn_mentions_30d":null,"has_provenance":false,"npm_provenance":null,"pypi_provenance":null,"signed_commits_ratio":0.53,"scorecard_score":6.0,"scorecard_checks":{"Binary-Artifacts":10,"Branch-Protection":0,"CI-Tests":1,"CII-Best-Practices":0,"Code-Review":2,"Contributors":6,"Dangerous-Workflow":10,"Dependency-Update-Tool":10,"Fuzzing":0,"License":10,"Maintained":10,"Packaging":-1,"Pinned-Dependencies":0,"SAST":0,"Security-Policy":10,"Signed-Releases":-1,"Token-Permissions":10,"Vulnerabilities":6},"scorecard_scanned_at":"2026-07-11T01:34:06Z","slug":"obsidian-second-brain","source_note":"","public_actions":null,"mcp_server_support":{"status":"none","confidence":null,"evidence":[]},"external_service_dependencies":{"providers":["Anthropic","Google Gemini","OpenAI"],"requires_api_keys":true,"confidence":"high","evidence":["README/docs mention OpenAI","Found OpenAI dependency 'openai' in pyproject.toml","Found OpenAI credential/config marker 'OPENAI_API_KEY'","README/docs mention Anthropic","README/docs mention Google Gemini","Found Google Gemini credential/config marker 'GEMINI_API_KEY'"]},"tool_plugin_surface":{"plugin_system":"declared","tool_tags":["code","search","shell"],"confidence":"high","evidence":["README/docs mention a declared plugin/integration surface","README/docs mention shell capabilities","README/docs mention search capabilities","README/docs mention code capabilities"]},"package_provenance_drift":{"status":"not_applicable","confidence":null,"summary":"No package source configured","evidence":[]},"evidence_grade":"C","coverage_grade":"C","signal_coverage":0.4,"signal_types":2,"listing_status":"listed","display_listing_status":"listed","display_status_label":"Listed","has_warning":false,"warning_reasons":[],"license_spdx":"MIT","license_type":"open","license_override":"","trust_score":59.1,"trust_score_v2":59.1,"rank_v2":169,"rank_v2_delta":-11,"trust_v2_adjustment":-3.2,"trust_confidence":1.0,"trust_breakdown":{"safety":10.2,"identity":10.8,"transparency":13.6,"maintenance":19.3,"adoption":8.4},"trust_v2_breakdown":{"mcp":0.0,"external_dependencies":-2.0,"tool_plugin_surface":-1.2,"package_provenance_drift":0.0},"pending_signals":false},{"name":"Traceroot","repo":"traceroot-ai/traceroot","display_repo":"","url":"https://github.com/traceroot-ai/traceroot","rank":170,"previous_rank":170,"rank_delta":0,"stars":660,"stars_fmt":"660","forks":186,"forks_fmt":"186","last_push":"2026-07-10","days_ago":1,"weekly_commits":394,"commits_low_confidence":false,"score":77.5,"description":"TraceRoot - open-source observability and self-healing layer for AI agents. YC S25","language":"TypeScript","open_issues":156,"category":"Observability & Evaluation","category_rank":13,"npm_package":"","crate_package":"","pypi_package":"","weekly_downloads":null,"dl_source":"","hn_mentions_30d":null,"has_provenance":false,"npm_provenance":null,"pypi_provenance":null,"signed_commits_ratio":0.31,"scorecard_score":7.2,"scorecard_checks":{"Security-Policy":10,"Code-Review":6,"Dependency-Update-Tool":10,"Maintained":10,"Token-Permissions":10,"Dangerous-Workflow":10,"Binary-Artifacts":10,"CII-Best-Practices":0,"SAST":7,"Signed-Releases":-1,"Fuzzing":0,"License":9,"Packaging":10,"Branch-Protection":-1,"Vulnerabilities":0,"Pinned-Dependencies":0,"CI-Tests":10,"Contributors":10},"scorecard_scanned_at":"2026-06-20T22:00:54Z","slug":"traceroot","source_note":"","public_actions":null,"mcp_server_support":{"status":"none","confidence":null,"evidence":[]},"external_service_dependencies":{"providers":["Amazon Bedrock","Anthropic","Google Gemini","OpenAI","Postgres","Redis"],"requires_api_keys":false,"confidence":"high","evidence":["README/docs mention OpenAI","README/docs mention Anthropic","README/docs mention Google Gemini","Found Amazon Bedrock dependency 'boto3' in pyproject.toml","Found Postgres dependency 'psycopg' in pyproject.toml","Found Redis dependency 'redis' in pyproject.toml"]},"tool_plugin_surface":{"plugin_system":"declared","tool_tags":["code","database","search"],"confidence":"high","evidence":["README/docs mention a declared plugin/integration surface","README/docs mention search capabilities","Found database dependency 'postgres' in pyproject.toml","README/docs mention code capabilities"]},"package_provenance_drift":{"status":"not_applicable","confidence":null,"summary":"No package source configured","evidence":[]},"evidence_grade":"C","coverage_grade":"C","signal_coverage":0.4,"signal_types":2,"listing_status":"listed","display_listing_status":"listed","display_status_label":"Listed","has_warning":false,"warning_reasons":[],"license_spdx":"NOASSERTION","license_type":"open","license_override":"","trust_score":58.9,"trust_score_v2":58.9,"rank_v2":170,"rank_v2_delta":-13,"trust_v2_adjustment":-3.7,"trust_confidence":1.0,"trust_breakdown":{"safety":10.5,"identity":10.8,"transparency":14.6,"maintenance":19.9,"adoption":6.8},"trust_v2_breakdown":{"mcp":0.0,"external_dependencies":-2.5,"tool_plugin_surface":-1.2,"package_provenance_drift":0.0},"pending_signals":false},{"name":"Lagent","repo":"InternLM/lagent","display_repo":"","url":"https://github.com/InternLM/lagent","rank":171,"previous_rank":171,"rank_delta":0,"stars":2268,"stars_fmt":"2.3k","forks":236,"forks_fmt":"236","last_push":"2026-07-06","days_ago":5,"weekly_commits":0,"commits_low_confidence":false,"score":55.5,"description":"A lightweight framework for building LLM-based agents","language":"Python","open_issues":8,"category":"Agent Frameworks","category_rank":38,"npm_package":"","crate_package":"","pypi_package":"lagent","weekly_downloads":1109,"dl_source":"pypi","hn_mentions_30d":null,"has_provenance":false,"npm_provenance":null,"pypi_provenance":false,"signed_commits_ratio":1.0,"scorecard_score":3.9,"scorecard_checks":{"Binary-Artifacts":10,"Branch-Protection":1,"CI-Tests":0,"CII-Best-Practices":0,"Code-Review":7,"Contributors":10,"Dangerous-Workflow":10,"Dependency-Update-Tool":10,"Fuzzing":0,"License":10,"Maintained":0,"Packaging":-1,"Pinned-Dependencies":0,"SAST":0,"Security-Policy":0,"Signed-Releases":-1,"Token-Permissions":0,"Vulnerabilities":0},"scorecard_scanned_at":"2026-06-27T09:16:37Z","slug":"lagent","source_note":"","public_actions":null,"mcp_server_support":{"status":"none","confidence":null,"evidence":[]},"external_service_dependencies":{"providers":["OpenAI"],"requires_api_keys":true,"confidence":"high","evidence":["README/docs mention OpenAI","Found OpenAI credential/config marker 'OPENAI_API_KEY'"]},"tool_plugin_surface":{"plugin_system":"none","tool_tags":["code","search"],"confidence":"high","evidence":["README/docs mention search capabilities","README/docs mention code capabilities"]},"package_provenance_drift":{"status":"match","confidence":"high","summary":"Published package metadata matches the tracked repo","evidence":["pypi package 'lagent' points to the tracked repo"]},"evidence_grade":"C","coverage_grade":"B","signal_coverage":0.6,"signal_types":3,"listing_status":"listed","display_listing_status":"listed","display_status_label":"Listed","has_warning":false,"warning_reasons":[],"license_spdx":"Apache-2.0","license_type":"open","license_override":"","trust_score":58.7,"trust_score_v2":58.7,"rank_v2":171,"rank_v2_delta":41,"trust_v2_adjustment":2.4,"trust_confidence":1.0,"trust_breakdown":{"safety":9.9,"identity":10.8,"transparency":11.8,"maintenance":11.7,"adoption":12.1},"trust_v2_breakdown":{"mcp":0.0,"external_dependencies":-1.0,"tool_plugin_surface":-0.6,"package_provenance_drift":4.0},"pending_signals":false},{"name":"Nanobot","repo":"HKUDS/nanobot","display_repo":"","url":"https://github.com/HKUDS/nanobot","rank":172,"previous_rank":173,"rank_delta":1,"stars":45230,"stars_fmt":"45.2k","forks":7985,"forks_fmt":"8.0k","last_push":"2026-07-11","days_ago":0,"weekly_commits":557,"commits_low_confidence":false,"score":96.0,"description":"Lightweight, open-source AI agent for your tools, chats, and workflows.","language":"Python","open_issues":285,"category":"Agent Frameworks","category_rank":39,"npm_package":"","crate_package":"","pypi_package":"","weekly_downloads":null,"dl_source":"","hn_mentions_30d":null,"has_provenance":false,"npm_provenance":null,"pypi_provenance":null,"signed_commits_ratio":0.0,"scorecard_score":5.8,"scorecard_checks":{"Binary-Artifacts":10,"Branch-Protection":5,"CI-Tests":10,"CII-Best-Practices":0,"Code-Review":10,"Contributors":10,"Dangerous-Workflow":10,"Dependency-Update-Tool":0,"Fuzzing":0,"License":10,"Maintained":10,"Packaging":-1,"Pinned-Dependencies":1,"SAST":0,"Security-Policy":4,"Signed-Releases":-1,"Token-Permissions":10,"Vulnerabilities":0},"scorecard_scanned_at":"2026-07-10T08:50:01Z","slug":"nanobot","source_note":"","public_actions":null,"mcp_server_support":{"status":"declared","confidence":"low","evidence":["README/docs mention MCP support"]},"external_service_dependencies":{"providers":["Amazon Bedrock","Anthropic","Azure OpenAI","Firecrawl","Google Gemini","OpenAI"],"requires_api_keys":false,"confidence":"high","evidence":["README/docs mention OpenAI","Found OpenAI dependency 'openai' in pyproject.toml","README/docs mention Anthropic","Found Anthropic dependency 'anthropic' in pyproject.toml","README/docs mention Google Gemini","README/docs mention Azure OpenAI"]},"tool_plugin_surface":{"plugin_system":"extension-based","tool_tags":["code","search","shell"],"confidence":"high","evidence":["README/docs mention a extension-based plugin/integration surface","README/docs mention shell capabilities","README/docs mention search capabilities","README/docs mention code capabilities"]},"package_provenance_drift":{"status":"not_applicable","confidence":null,"summary":"No package source configured","evidence":[]},"evidence_grade":"C","coverage_grade":"C","signal_coverage":0.4,"signal_types":2,"listing_status":"listed","display_listing_status":"listed","display_status_label":"Listed","has_warning":false,"warning_reasons":[],"license_spdx":"MIT","license_type":"open","license_override":"","trust_score":58.6,"trust_score_v2":58.6,"rank_v2":172,"rank_v2_delta":-16,"trust_v2_adjustment":-4.0,"trust_confidence":1.0,"trust_breakdown":{"safety":7.2,"identity":10.8,"transparency":13.4,"maintenance":20.0,"adoption":11.2},"trust_v2_breakdown":{"mcp":0.0,"external_dependencies":-2.5,"tool_plugin_surface":-1.5,"package_provenance_drift":0.0},"pending_signals":false},{"name":"OpenLIT","repo":"openlit/openlit","display_repo":"","url":"https://github.com/openlit/openlit","rank":173,"previous_rank":172,"rank_delta":-1,"stars":2587,"stars_fmt":"2.6k","forks":321,"forks_fmt":"321","last_push":"2026-07-10","days_ago":1,"weekly_commits":43,"commits_low_confidence":false,"score":77.7,"description":"Open source platform for AI Engineering: OpenTelemetry-native LLM Observability, GPU Monitoring, Guardrails, Evaluations","language":"TypeScript","open_issues":20,"category":"Observability & Evaluation","category_rank":14,"npm_package":"","crate_package":"","pypi_package":"","weekly_downloads":null,"dl_source":"","hn_mentions_30d":null,"has_provenance":false,"npm_provenance":null,"pypi_provenance":null,"signed_commits_ratio":0.98,"scorecard_score":5.9,"scorecard_checks":{"Binary-Artifacts":9,"Branch-Protection":6,"CI-Tests":10,"CII-Best-Practices":0,"Code-Review":6,"Contributors":10,"Dangerous-Workflow":10,"Dependency-Update-Tool":10,"Fuzzing":0,"License":10,"Maintained":10,"Packaging":10,"Pinned-Dependencies":3,"SAST":5,"Security-Policy":10,"Signed-Releases":0,"Token-Permissions":0,"Vulnerabilities":0},"scorecard_scanned_at":"2026-07-10T16:21:33Z","slug":"openlit","source_note":"","public_actions":null,"mcp_server_support":{"status":"none","confidence":null,"evidence":[]},"external_service_dependencies":{"providers":["Amazon Bedrock","Anthropic","Firecrawl","OpenAI","Pinecone","Postgres","Qdrant"],"requires_api_keys":false,"confidence":"high","evidence":["README/docs mention OpenAI","Found OpenAI dependency 'openai' in src/client/package.json","README/docs mention Anthropic","Found Anthropic dependency 'anthropic' in src/client/package.json","README/docs mention Amazon Bedrock","Found Amazon Bedrock dependency 'boto3' in sdk/python/pyproject.toml"]},"tool_plugin_surface":{"plugin_system":"extension-based","tool_tags":["code","database","search","shell"],"confidence":"high","evidence":["README/docs mention a extension-based plugin/integration surface","README/docs mention shell capabilities","README/docs mention search capabilities","README/docs mention database capabilities","README/docs mention code capabilities"]},"package_provenance_drift":{"status":"not_applicable","confidence":null,"summary":"No package source configured","evidence":[]},"evidence_grade":"C","coverage_grade":"C","signal_coverage":0.4,"signal_types":2,"listing_status":"listed","display_listing_status":"listed","display_status_label":"Listed","has_warning":false,"warning_reasons":[],"license_spdx":"Apache-2.0","license_type":"open","license_override":"","trust_score":58.5,"trust_score_v2":58.5,"rank_v2":173,"rank_v2_delta":-22,"trust_v2_adjustment":-4.8,"trust_confidence":1.0,"trust_breakdown":{"safety":12.3,"identity":10.8,"transparency":13.5,"maintenance":18.5,"adoption":8.2},"trust_v2_breakdown":{"mcp":0.0,"external_dependencies":-3.0,"tool_plugin_surface":-1.8,"package_provenance_drift":0.0},"pending_signals":false},{"name":"DeepSeek-Reasonix","repo":"esengine/DeepSeek-Reasonix","display_repo":"","url":"https://github.com/esengine/DeepSeek-Reasonix","rank":174,"previous_rank":174,"rank_delta":0,"stars":26632,"stars_fmt":"26.6k","forks":1669,"forks_fmt":"1.7k","last_push":"2026-07-10","days_ago":1,"weekly_commits":2100,"commits_low_confidence":false,"score":91.6,"description":"DeepSeek-native AI coding agent for your terminal. Engineered around prefix-cache stability — leave it running.","language":"Go","open_issues":920,"category":"Coding Agents","category_rank":22,"npm_package":"","crate_package":"","pypi_package":"","weekly_downloads":null,"dl_source":"","hn_mentions_30d":null,"has_provenance":false,"npm_provenance":null,"pypi_provenance":null,"signed_commits_ratio":0.31,"scorecard_score":4.3,"scorecard_checks":{"Binary-Artifacts":10,"Branch-Protection":1,"CI-Tests":10,"CII-Best-Practices":0,"Code-Review":1,"Contributors":6,"Dangerous-Workflow":0,"Dependency-Update-Tool":10,"Fuzzing":0,"License":10,"Maintained":0,"Packaging":10,"Pinned-Dependencies":2,"SAST":10,"Security-Policy":4,"Signed-Releases":3,"Token-Permissions":0,"Vulnerabilities":9},"scorecard_scanned_at":"2026-07-10T10:10:14Z","slug":"deepseek-reasonix","source_note":"","public_actions":null,"mcp_server_support":{"status":"none","confidence":null,"evidence":[]},"external_service_dependencies":{"providers":["OpenAI"],"requires_api_keys":true,"confidence":"medium","evidence":["README/docs mention OpenAI"]},"tool_plugin_surface":{"plugin_system":"declared","tool_tags":["code","shell"],"confidence":"high","evidence":["README/docs mention a declared plugin/integration surface","README/docs mention shell capabilities","README/docs mention code capabilities"]},"package_provenance_drift":{"status":"not_applicable","confidence":null,"summary":"No package source configured","evidence":[]},"evidence_grade":"C","coverage_grade":"C","signal_coverage":0.4,"signal_types":2,"listing_status":"listed","display_listing_status":"listed","display_status_label":"Listed","has_warning":false,"warning_reasons":[],"license_spdx":"MIT","license_type":"open","license_override":"","trust_score":58.5,"trust_score_v2":58.5,"rank_v2":174,"rank_v2_delta":4,"trust_v2_adjustment":-1.9,"trust_confidence":1.0,"trust_breakdown":{"safety":6.9,"identity":10.8,"transparency":12.2,"maintenance":19.9,"adoption":10.6},"trust_v2_breakdown":{"mcp":0.0,"external_dependencies":-1.0,"tool_plugin_surface":-0.9,"package_provenance_drift":0.0},"pending_signals":false},{"name":"MCP Go","repo":"mark3labs/mcp-go","display_repo":"","url":"https://github.com/mark3labs/mcp-go","rank":175,"previous_rank":178,"rank_delta":3,"stars":8883,"stars_fmt":"8.9k","forks":852,"forks_fmt":"852","last_push":"2026-07-09","days_ago":2,"weekly_commits":8,"commits_low_confidence":true,"score":74.1,"description":"A Go implementation of the Model Context Protocol (MCP), enabling seamless integration between LLM applications and exte","language":"Go","open_issues":11,"category":"Protocols & Tool Integration","category_rank":17,"npm_package":"","crate_package":"","pypi_package":"","weekly_downloads":null,"dl_source":"","hn_mentions_30d":null,"has_provenance":false,"npm_provenance":null,"pypi_provenance":null,"signed_commits_ratio":1.0,"scorecard_score":4.5,"scorecard_checks":{"Binary-Artifacts":10,"Branch-Protection":0,"CI-Tests":10,"CII-Best-Practices":0,"Code-Review":6,"Contributors":10,"Dangerous-Workflow":10,"Dependency-Update-Tool":0,"Fuzzing":0,"License":10,"Maintained":10,"Packaging":-1,"Pinned-Dependencies":0,"SAST":0,"Security-Policy":10,"Signed-Releases":-1,"Token-Permissions":0,"Vulnerabilities":0},"scorecard_scanned_at":"2026-07-10T10:08:57Z","slug":"mcp-go","source_note":"","public_actions":null,"mcp_server_support":{"status":"implemented","confidence":"medium","evidence":["README/docs explicitly mention an MCP server"]},"external_service_dependencies":{"providers":[],"requires_api_keys":false,"confidence":null,"evidence":[]},"tool_plugin_surface":{"plugin_system":"declared","tool_tags":["code"],"confidence":"high","evidence":["README/docs mention a declared plugin/integration surface","README/docs mention code capabilities"]},"package_provenance_drift":{"status":"not_applicable","confidence":null,"summary":"No package source configured","evidence":[]},"evidence_grade":"C","coverage_grade":"C","signal_coverage":0.4,"signal_types":2,"listing_status":"listed","display_listing_status":"listed","display_status_label":"Listed","has_warning":false,"warning_reasons":[],"license_spdx":"MIT","license_type":"open","license_override":"","trust_score":58.4,"trust_score_v2":58.4,"rank_v2":175,"rank_v2_delta":31,"trust_v2_adjustment":1.4,"trust_confidence":1.0,"trust_breakdown":{"safety":10.6,"identity":10.8,"transparency":12.3,"maintenance":13.8,"adoption":9.5},"trust_v2_breakdown":{"mcp":2.0,"external_dependencies":-0.0,"tool_plugin_surface":-0.6,"package_provenance_drift":0.0},"pending_signals":false},{"name":"Junie","repo":"JetBrains/junie","display_repo":"","url":"https://github.com/JetBrains/junie","rank":176,"previous_rank":175,"rank_delta":-1,"stars":328,"stars_fmt":"328","forks":22,"forks_fmt":"22","last_push":"2026-07-10","days_ago":1,"weekly_commits":610,"commits_low_confidence":false,"score":71.4,"description":"An AI coding agent by JetBrains that ships code from your terminal, IDE, or CI/CD pipeline - powered by any LLM you choo","language":"Shell","open_issues":49,"category":"Coding Agents","category_rank":23,"npm_package":"@jetbrains/junie","crate_package":"","pypi_package":"","weekly_downloads":826,"dl_source":"npm","hn_mentions_30d":172,"has_provenance":false,"npm_provenance":false,"pypi_provenance":null,"signed_commits_ratio":0.01,"scorecard_score":3.2,"scorecard_checks":{"Binary-Artifacts":10,"Branch-Protection":0,"CI-Tests":-1,"CII-Best-Practices":0,"Code-Review":0,"Contributors":3,"Dangerous-Workflow":-1,"Dependency-Update-Tool":0,"Fuzzing":0,"License":9,"Maintained":10,"Packaging":-1,"Pinned-Dependencies":0,"SAST":0,"Security-Policy":0,"Signed-Releases":0,"Token-Permissions":-1,"Vulnerabilities":10},"scorecard_scanned_at":"2026-07-10T16:12:56Z","slug":"junie","source_note":"","public_actions":null,"mcp_server_support":{"status":"none","confidence":null,"evidence":[]},"external_service_dependencies":{"providers":["Anthropic","OpenAI"],"requires_api_keys":false,"confidence":"high","evidence":["README/docs mention OpenAI","README/docs mention Anthropic"]},"tool_plugin_surface":{"plugin_system":"declared","tool_tags":["code","shell"],"confidence":"high","evidence":["README/docs mention a declared plugin/integration surface","README/docs mention shell capabilities","README/docs mention code capabilities"]},"package_provenance_drift":{"status":"match","confidence":"high","summary":"Published package metadata matches the tracked repo","evidence":["npm package '@jetbrains/junie' points to the tracked repo"]},"evidence_grade":"C","coverage_grade":"A","signal_coverage":0.8,"signal_types":4,"listing_status":"listed","display_listing_status":"listed","display_status_label":"Listed","has_warning":false,"warning_reasons":[],"license_spdx":"NOASSERTION","license_type":"proprietary","license_override":"proprietary","trust_score":58.4,"trust_score_v2":58.4,"rank_v2":176,"rank_v2_delta":40,"trust_v2_adjustment":2.6,"trust_confidence":1.0,"trust_breakdown":{"safety":4.0,"identity":10.8,"transparency":11.2,"maintenance":19.9,"adoption":9.9},"trust_v2_breakdown":{"mcp":0.0,"external_dependencies":-0.5,"tool_plugin_surface":-0.9,"package_provenance_drift":4.0},"pending_signals":false},{"name":"GitHub Copilot CLI","repo":"github/copilot-cli","display_repo":"","url":"https://github.com/github/copilot-cli","rank":177,"previous_rank":176,"rank_delta":-1,"stars":10929,"stars_fmt":"10.9k","forks":1748,"forks_fmt":"1.7k","last_push":"2026-07-10","days_ago":1,"weekly_commits":9,"commits_low_confidence":false,"score":76.8,"description":"GitHub Copilot CLI brings the power of Copilot coding agent directly to your terminal. ","language":"Shell","open_issues":1836,"category":"Coding Agents","category_rank":24,"npm_package":"","crate_package":"","pypi_package":"","weekly_downloads":null,"dl_source":"","hn_mentions_30d":null,"has_provenance":false,"npm_provenance":null,"pypi_provenance":null,"signed_commits_ratio":0.19,"scorecard_score":5.4,"scorecard_checks":{"Binary-Artifacts":10,"Branch-Protection":5,"CI-Tests":-1,"CII-Best-Practices":0,"Code-Review":0,"Contributors":10,"Dangerous-Workflow":10,"Dependency-Update-Tool":0,"Fuzzing":0,"License":9,"Maintained":10,"Packaging":-1,"Pinned-Dependencies":0,"SAST":0,"Security-Policy":10,"Signed-Releases":0,"Token-Permissions":9,"Vulnerabilities":10},"scorecard_scanned_at":"2026-07-11T01:24:24Z","slug":"github-copilot-cli","source_note":"","public_actions":null,"mcp_server_support":{"status":"implemented","confidence":"medium","evidence":["README/docs explicitly mention an MCP server"]},"external_service_dependencies":{"providers":[],"requires_api_keys":false,"confidence":null,"evidence":[]},"tool_plugin_surface":{"plugin_system":"declared","tool_tags":["code","shell"],"confidence":"high","evidence":["README/docs mention a declared plugin/integration surface","README/docs mention shell capabilities","README/docs mention code capabilities"]},"package_provenance_drift":{"status":"not_applicable","confidence":null,"summary":"No package source configured","evidence":[]},"evidence_grade":"C","coverage_grade":"C","signal_coverage":0.4,"signal_types":2,"listing_status":"listed","display_listing_status":"listed","display_status_label":"Listed","has_warning":false,"warning_reasons":[],"license_spdx":"NOASSERTION","license_type":"proprietary","license_override":"proprietary","trust_score":58.3,"trust_score_v2":58.3,"rank_v2":177,"rank_v2_delta":28,"trust_v2_adjustment":1.1,"trust_confidence":1.0,"trust_breakdown":{"safety":7.7,"identity":10.8,"transparency":13.1,"maintenance":15.9,"adoption":9.7},"trust_v2_breakdown":{"mcp":2.0,"external_dependencies":-0.0,"tool_plugin_surface":-0.9,"package_provenance_drift":0.0},"pending_signals":false},{"name":"Agent Reach","repo":"Panniantong/Agent-Reach","display_repo":"","url":"https://github.com/Panniantong/Agent-Reach","rank":178,"previous_rank":177,"rank_delta":-1,"stars":54550,"stars_fmt":"54.5k","forks":4497,"forks_fmt":"4.5k","last_push":"2026-07-10","days_ago":1,"weekly_commits":36,"commits_low_confidence":false,"score":90.0,"description":"Give your AI agent eyes to see the entire internet. Read & search Twitter, Reddit, YouTube, GitHub, Bilibili, XiaoHongSh","language":"Python","open_issues":57,"category":"Protocols & Tool Integration","category_rank":18,"npm_package":"","crate_package":"","pypi_package":"","weekly_downloads":null,"dl_source":"","hn_mentions_30d":66,"has_provenance":false,"npm_provenance":null,"pypi_provenance":null,"signed_commits_ratio":null,"scorecard_score":4.9,"scorecard_checks":{"Binary-Artifacts":10,"Branch-Protection":3,"CI-Tests":10,"CII-Best-Practices":0,"Code-Review":0,"Contributors":0,"Dangerous-Workflow":10,"Dependency-Update-Tool":0,"Fuzzing":0,"License":10,"Maintained":10,"Packaging":-1,"Pinned-Dependencies":1,"SAST":0,"Security-Policy":10,"Signed-Releases":-1,"Token-Permissions":0,"Vulnerabilities":10},"scorecard_scanned_at":"2026-07-08T09:11:19Z","slug":"agent-reach","source_note":"","public_actions":null,"mcp_server_support":{"status":"declared","confidence":"medium","evidence":["Found MCP-related server path: agent_reach/integrations/mcp_server.py"]},"external_service_dependencies":{"providers":["OpenAI"],"requires_api_keys":false,"confidence":"medium","evidence":["Found OpenAI dependency 'openai' in pyproject.toml"]},"tool_plugin_surface":{"plugin_system":"none","tool_tags":["browser","code","search"],"confidence":"high","evidence":["Found browser dependency 'playwright' in pyproject.toml","README/docs mention search capabilities","README/docs mention code capabilities"]},"package_provenance_drift":{"status":"not_applicable","confidence":null,"summary":"No package source configured","evidence":[]},"evidence_grade":"C","coverage_grade":"B","signal_coverage":0.6,"signal_types":3,"listing_status":"listed","display_listing_status":"listed","display_status_label":"Listed","has_warning":false,"warning_reasons":[],"license_spdx":"MIT","license_type":"open","license_override":"","trust_score":58.3,"trust_score_v2":58.3,"rank_v2":178,"rank_v2_delta":9,"trust_v2_adjustment":-0.9,"trust_confidence":1.0,"trust_breakdown":{"safety":6.1,"identity":10.8,"transparency":12.7,"maintenance":18.2,"adoption":11.4},"trust_v2_breakdown":{"mcp":0.0,"external_dependencies":-0.0,"tool_plugin_surface":-0.9,"package_provenance_drift":0.0},"pending_signals":false},{"name":"UFO","repo":"microsoft/UFO","display_repo":"","url":"https://github.com/microsoft/UFO","rank":179,"previous_rank":179,"rank_delta":0,"stars":9279,"stars_fmt":"9.3k","forks":1038,"forks_fmt":"1.0k","last_push":"2026-07-08","days_ago":3,"weekly_commits":12,"commits_low_confidence":false,"score":76.4,"description":"UFO³: Weaving the Digital Agent Galaxy","language":"Python","open_issues":41,"category":"Browser & Computer Use","category_rank":6,"npm_package":"","crate_package":"","pypi_package":"","weekly_downloads":null,"dl_source":"","hn_mentions_30d":null,"has_provenance":false,"npm_provenance":null,"pypi_provenance":null,"signed_commits_ratio":0.35,"scorecard_score":5.6,"scorecard_checks":{"Binary-Artifacts":10,"Branch-Protection":1,"CI-Tests":0,"CII-Best-Practices":0,"Code-Review":3,"Contributors":10,"Dangerous-Workflow":10,"Dependency-Update-Tool":10,"Fuzzing":0,"License":10,"Maintained":10,"Packaging":-1,"Pinned-Dependencies":0,"SAST":0,"Security-Policy":10,"Signed-Releases":-1,"Token-Permissions":9,"Vulnerabilities":0},"scorecard_scanned_at":"2026-07-11T01:23:19Z","slug":"ufo","source_note":"","public_actions":null,"mcp_server_support":{"status":"implemented","confidence":"high","evidence":["README/docs mention MCP support","Found MCP-related server path: ufo/client/mcp/http_servers/hardware_mcp_server.py","Found MCP-related server path: ufo/client/mcp/http_servers/linux_mcp_server.py","Found MCP-related server docs path: documents/docs/mcp/local_servers.md"]},"external_service_dependencies":{"providers":["Anthropic","Azure OpenAI","Google Gemini","OpenAI"],"requires_api_keys":false,"confidence":"high","evidence":["README/docs mention OpenAI","Found OpenAI dependency 'openai' in requirements.txt","Found Anthropic dependency 'anthropic' in requirements.txt","README/docs mention Google Gemini","README/docs mention Azure OpenAI"]},"tool_plugin_surface":{"plugin_system":"extension-based","tool_tags":["code"],"confidence":"high","evidence":["README/docs mention a extension-based plugin/integration surface","README/docs mention code capabilities"]},"package_provenance_drift":{"status":"not_applicable","confidence":null,"summary":"No package source configured","evidence":[]},"evidence_grade":"C","coverage_grade":"C","signal_coverage":0.4,"signal_types":2,"listing_status":"listed","display_listing_status":"listed","display_status_label":"Listed","has_warning":false,"warning_reasons":[],"license_spdx":"MIT","license_type":"open","license_override":"","trust_score":58.2,"trust_score_v2":58.2,"rank_v2":179,"rank_v2_delta":14,"trust_v2_adjustment":-0.4,"trust_confidence":1.0,"trust_breakdown":{"safety":8.8,"identity":10.8,"transparency":13.3,"maintenance":16.2,"adoption":9.5},"trust_v2_breakdown":{"mcp":2.0,"external_dependencies":-1.5,"tool_plugin_surface":-0.9,"package_provenance_drift":0.0},"pending_signals":false},{"name":"LLM Guard","repo":"protectai/llm-guard","display_repo":"","url":"https://github.com/protectai/llm-guard","rank":180,"previous_rank":180,"rank_delta":0,"stars":3163,"stars_fmt":"3.2k","forks":418,"forks_fmt":"418","last_push":"2026-07-08","days_ago":3,"weekly_commits":1,"commits_low_confidence":false,"score":61.7,"description":"The Security Toolkit for LLM Interactions","language":"Python","open_issues":12,"category":"Security & Guardrails","category_rank":3,"npm_package":"","crate_package":"","pypi_package":"llm-guard","weekly_downloads":55564,"dl_source":"pypi","hn_mentions_30d":0,"has_provenance":false,"npm_provenance":null,"pypi_provenance":false,"signed_commits_ratio":null,"scorecard_score":5.6,"scorecard_checks":{"Binary-Artifacts":10,"Branch-Protection":1,"CI-Tests":4,"CII-Best-Practices":0,"Code-Review":8,"Contributors":0,"Dangerous-Workflow":10,"Dependency-Update-Tool":10,"Fuzzing":0,"License":10,"Maintained":0,"Packaging":-1,"Pinned-Dependencies":0,"SAST":8,"Security-Policy":10,"Signed-Releases":-1,"Token-Permissions":0,"Vulnerabilities":10},"scorecard_scanned_at":"2026-07-10T09:48:19Z","slug":"llm-guard","source_note":"","public_actions":null,"mcp_server_support":{"status":"none","confidence":null,"evidence":[]},"external_service_dependencies":{"providers":[],"requires_api_keys":false,"confidence":null,"evidence":[]},"tool_plugin_surface":{"plugin_system":"declared","tool_tags":["code"],"confidence":"high","evidence":["README/docs mention a declared plugin/integration surface","README/docs mention code capabilities"]},"package_provenance_drift":{"status":"unknown","confidence":"low","summary":"Package source metadata is missing or inconclusive","evidence":["pypi package 'llm-guard' has a non-GitHub or unparseable source URL"]},"evidence_grade":"C","coverage_grade":"A","signal_coverage":0.8,"signal_types":4,"listing_status":"warning","display_listing_status":"warning","display_status_label":"Needs review","has_warning":true,"warning_reasons":[{"repo":"protectai/llm-guard","criterion":"5.1","detail":"repository is archived"}],"license_spdx":"MIT","license_type":"open","license_override":"","trust_score":58.2,"trust_score_v2":58.2,"rank_v2":180,"rank_v2_delta":10,"trust_v2_adjustment":-0.6,"trust_confidence":1.0,"trust_breakdown":{"safety":7.0,"identity":10.8,"transparency":13.3,"maintenance":13.0,"adoption":14.7},"trust_v2_breakdown":{"mcp":0.0,"external_dependencies":-0.0,"tool_plugin_surface":-0.6,"package_provenance_drift":0.0},"pending_signals":false},{"name":"Garak","repo":"leondz/garak","display_repo":"","url":"https://github.com/NVIDIA/garak","rank":181,"previous_rank":181,"rank_delta":0,"stars":8396,"stars_fmt":"8.4k","forks":1077,"forks_fmt":"1.1k","last_push":"2026-07-10","days_ago":1,"weekly_commits":24,"commits_low_confidence":false,"score":80.0,"description":"the LLM vulnerability scanner","language":"Python","open_issues":239,"category":"Security & Guardrails","category_rank":4,"npm_package":"","crate_package":"","pypi_package":"garak","weekly_downloads":14434,"dl_source":"pypi","hn_mentions_30d":0,"has_provenance":false,"npm_provenance":null,"pypi_provenance":false,"signed_commits_ratio":0.76,"scorecard_score":4.8,"scorecard_checks":{"Binary-Artifacts":10,"Branch-Protection":3,"CI-Tests":9,"CII-Best-Practices":0,"Code-Review":6,"Contributors":10,"Dangerous-Workflow":10,"Dependency-Update-Tool":0,"Fuzzing":0,"License":10,"Maintained":10,"Packaging":-1,"Pinned-Dependencies":0,"SAST":0,"Security-Policy":10,"Signed-Releases":-1,"Token-Permissions":0,"Vulnerabilities":0},"scorecard_scanned_at":"2026-07-10T07:59:29Z","slug":"garak","source_note":"","public_actions":null,"mcp_server_support":{"status":"none","confidence":null,"evidence":[]},"external_service_dependencies":{"providers":["Amazon Bedrock","Anthropic","OpenAI"],"requires_api_keys":true,"confidence":"high","evidence":["README/docs mention OpenAI","Found OpenAI dependency 'openai' in pyproject.toml","Found OpenAI credential/config marker 'OPENAI_API_KEY'","README/docs mention Anthropic","Found Anthropic dependency 'anthropic' in pyproject.toml","README/docs mention Amazon Bedrock"]},"tool_plugin_surface":{"plugin_system":"declared","tool_tags":["code"],"confidence":"high","evidence":["README/docs mention a declared plugin/integration surface","README/docs mention code capabilities"]},"package_provenance_drift":{"status":"warning","confidence":"high","summary":"1 package source mismatch detected","evidence":["pypi package 'garak' points to nvidia/garak, not leondz/garak"]},"evidence_grade":"C","coverage_grade":"A","signal_coverage":0.8,"signal_types":4,"listing_status":"listed","display_listing_status":"listed","display_status_label":"Listed","has_warning":false,"warning_reasons":[],"license_spdx":"Apache-2.0","license_type":"open","license_override":"","trust_score":58.1,"trust_score_v2":58.1,"rank_v2":181,"rank_v2_delta":-53,"trust_v2_adjustment":-7.6,"trust_confidence":1.0,"trust_breakdown":{"safety":9.8,"identity":10.8,"transparency":12.6,"maintenance":17.5,"adoption":15.0},"trust_v2_breakdown":{"mcp":0.0,"external_dependencies":-2.0,"tool_plugin_surface":-0.6,"package_provenance_drift":-5.0},"pending_signals":false},{"name":"Hivemind","repo":"activeloopai/hivemind","display_repo":"","url":"https://github.com/activeloopai/hivemind","rank":182,"previous_rank":182,"rank_delta":0,"stars":1466,"stars_fmt":"1.5k","forks":92,"forks_fmt":"92","last_push":"2026-07-11","days_ago":0,"weekly_commits":363,"commits_low_confidence":false,"score":78.2,"description":"Hivemind turns your traces into reusable skills across agents","language":"TypeScript","open_issues":28,"category":"Needs review","category_rank":5,"npm_package":"","crate_package":"","pypi_package":"","weekly_downloads":null,"dl_source":"","hn_mentions_30d":null,"has_provenance":false,"npm_provenance":null,"pypi_provenance":null,"signed_commits_ratio":0.16,"scorecard_score":4.6,"scorecard_checks":{"Binary-Artifacts":10,"Branch-Protection":0,"CI-Tests":10,"CII-Best-Practices":0,"Code-Review":1,"Contributors":10,"Dangerous-Workflow":10,"Dependency-Update-Tool":0,"Fuzzing":0,"License":10,"Maintained":10,"Packaging":10,"Pinned-Dependencies":3,"SAST":10,"Security-Policy":0,"Signed-Releases":-1,"Token-Permissions":0,"Vulnerabilities":0},"scorecard_scanned_at":"2026-07-11T03:37:34Z","slug":"hivemind","source_note":"","public_actions":null,"mcp_server_support":{"status":"implemented","confidence":"high","evidence":["README/docs explicitly mention an MCP server","Found MCP-related server path: src/mcp/server.ts","Found MCP-related server test path: tests/claude-code/mcp-server.test.ts","Found MCP dependency '@modelcontextprotocol/sdk' in package.json"]},"external_service_dependencies":{"providers":["Anthropic","OpenAI"],"requires_api_keys":false,"confidence":"high","evidence":["Found OpenAI dependency 'openai' in harnesses/codex/package.json","Found Anthropic dependency 'anthropic' in package.json","README/docs also mention Anthropic"]},"tool_plugin_surface":{"plugin_system":"marketplace","tool_tags":[],"confidence":"medium","evidence":["README/docs mention a marketplace plugin/integration surface"]},"package_provenance_drift":{"status":"not_applicable","confidence":null,"summary":"No package source configured","evidence":[]},"evidence_grade":"C","coverage_grade":"C","signal_coverage":0.4,"signal_types":2,"listing_status":"listed","display_listing_status":"listed","display_status_label":"Listed","has_warning":false,"warning_reasons":[],"license_spdx":"Apache-2.0","license_type":"open","license_override":"","trust_score":57.9,"trust_score_v2":57.9,"rank_v2":182,"rank_v2_delta":21,"trust_v2_adjustment":0.5,"trust_confidence":1.0,"trust_breakdown":{"safety":6.6,"identity":10.8,"transparency":12.4,"maintenance":20.0,"adoption":7.6},"trust_v2_breakdown":{"mcp":2.0,"external_dependencies":-0.5,"tool_plugin_surface":-1.0,"package_provenance_drift":0.0},"pending_signals":false},{"name":"Golem","repo":"golemcloud/golem","display_repo":"","url":"https://github.com/golemcloud/golem","rank":183,"previous_rank":183,"rank_delta":0,"stars":1600,"stars_fmt":"1.6k","forks":204,"forks_fmt":"204","last_push":"2026-07-10","days_ago":1,"weekly_commits":51,"commits_low_confidence":false,"score":76.3,"description":"Golem Cloud is the agent-native platform for building AI agents and distributed applications that never lose state, neve","language":"Rust","open_issues":7,"category":"Workflow Platforms","category_rank":15,"npm_package":"","crate_package":"","pypi_package":"","weekly_downloads":null,"dl_source":"","hn_mentions_30d":null,"has_provenance":false,"npm_provenance":null,"pypi_provenance":null,"signed_commits_ratio":0.73,"scorecard_score":4.3,"scorecard_checks":{"Binary-Artifacts":3,"Branch-Protection":2,"CI-Tests":10,"CII-Best-Practices":0,"Code-Review":9,"Contributors":10,"Dangerous-Workflow":10,"Dependency-Update-Tool":0,"Fuzzing":10,"License":9,"Maintained":10,"Packaging":10,"Pinned-Dependencies":0,"SAST":0,"Security-Policy":0,"Signed-Releases":0,"Token-Permissions":0,"Vulnerabilities":0},"scorecard_scanned_at":"2026-07-10T18:33:42Z","slug":"golem","source_note":"","public_actions":null,"mcp_server_support":{"status":"declared","confidence":"medium","evidence":["Found MCP-related server path: golem-skills/skills/common/golem-configure-mcp-server/SKILL.md","Found MCP-related server path: golem-worker-service/src/mcp/agent_mcp_server.rs","Found MCP-related server docs path: docs/src/content/next/how-to-guides/common/golem-configure-mcp-server.mdx","Found MCP-related server docs path: docs/src/content/v1.5/how-to-guides/common/golem-configure-mcp-server.mdx"]},"external_service_dependencies":{"providers":[],"requires_api_keys":false,"confidence":null,"evidence":[]},"tool_plugin_surface":{"plugin_system":"declared","tool_tags":["code"],"confidence":"high","evidence":["Found declared path: .agents/skills/creating-new-builtin-plugins/SKILL.md","README/docs mention code capabilities"]},"package_provenance_drift":{"status":"not_applicable","confidence":null,"summary":"No package source configured","evidence":[]},"evidence_grade":"C","coverage_grade":"C","signal_coverage":0.4,"signal_types":2,"listing_status":"listed","display_listing_status":"listed","display_status_label":"Listed","has_warning":false,"warning_reasons":[],"license_spdx":"NOASSERTION","license_type":"source-available","license_override":"","trust_score":57.9,"trust_score_v2":57.9,"rank_v2":183,"rank_v2_delta":11,"trust_v2_adjustment":-0.6,"trust_confidence":1.0,"trust_breakdown":{"safety":9.0,"identity":10.8,"transparency":12.2,"maintenance":18.8,"adoption":7.7},"trust_v2_breakdown":{"mcp":0.0,"external_dependencies":-0.0,"tool_plugin_surface":-0.6,"package_provenance_drift":0.0},"pending_signals":false},{"name":"Aider","repo":"Aider-AI/aider","display_repo":"","url":"https://github.com/Aider-AI/aider","rank":184,"previous_rank":184,"rank_delta":0,"stars":47266,"stars_fmt":"47.3k","forks":4721,"forks_fmt":"4.7k","last_push":"2026-05-22","days_ago":50,"weekly_commits":0,"commits_low_confidence":false,"score":63.3,"description":"aider is AI pair programming in your terminal","language":"Python","open_issues":1302,"category":"Coding Agents","category_rank":25,"npm_package":"","crate_package":"","pypi_package":"aider-chat","weekly_downloads":195247,"dl_source":"pypi","hn_mentions_30d":114,"has_provenance":false,"npm_provenance":null,"pypi_provenance":false,"signed_commits_ratio":0.16,"scorecard_score":3.8,"scorecard_checks":{"Binary-Artifacts":10,"Branch-Protection":0,"CI-Tests":10,"CII-Best-Practices":0,"Code-Review":0,"Contributors":10,"Dangerous-Workflow":10,"Dependency-Update-Tool":0,"Fuzzing":0,"License":10,"Maintained":10,"Packaging":10,"Pinned-Dependencies":0,"SAST":0,"Security-Policy":0,"Signed-Releases":-1,"Token-Permissions":0,"Vulnerabilities":0},"scorecard_scanned_at":"2026-07-11T03:01:38Z","slug":"aider","source_note":"","public_actions":{"actions_30d":6241,"actions_30d_merged":null,"actions_30d_by_repo":[{"repo":"Nueramarcos/forge-ci-reliability","count":2},{"repo":"nicechester/OrientalMedDic","count":1},{"repo":"April-Sonnet/forge-ci-reliability","count":1},{"repo":"oglimmer/trivia","count":1}]},"mcp_server_support":{"status":"none","confidence":null,"evidence":[]},"external_service_dependencies":{"providers":["OpenAI"],"requires_api_keys":false,"confidence":"high","evidence":["Found OpenAI dependency 'openai' in requirements.txt","README/docs also mention OpenAI"]},"tool_plugin_surface":{"plugin_system":"declared","tool_tags":["browser","code","shell"],"confidence":"high","evidence":["README/docs mention a declared plugin/integration surface","Found browser dependency 'playwright' in pyproject.toml","Found shell dependency 'pty' in requirements.txt","README/docs also mention shell capabilities","Found code dependency 'gitpython' in requirements.txt","README/docs also mention code capabilities"]},"package_provenance_drift":{"status":"match","confidence":"high","summary":"Published package metadata matches the tracked repo","evidence":["pypi package 'aider-chat' points to the tracked repo"]},"evidence_grade":"C","coverage_grade":"A","signal_coverage":1.0,"signal_types":5,"listing_status":"listed","display_listing_status":"listed","display_status_label":"Listed","has_warning":false,"warning_reasons":[],"license_spdx":"Apache-2.0","license_type":"open","license_override":"","trust_score":57.8,"trust_score_v2":57.8,"rank_v2":184,"rank_v2_delta":35,"trust_v2_adjustment":2.8,"trust_confidence":1.0,"trust_breakdown":{"safety":5.5,"identity":10.8,"transparency":11.7,"maintenance":8.7,"adoption":18.3},"trust_v2_breakdown":{"mcp":0.0,"external_dependencies":-0.0,"tool_plugin_surface":-1.2,"package_provenance_drift":4.0},"pending_signals":false},{"name":"Omnigent","repo":"omnigent-ai/omnigent","display_repo":"","url":"https://github.com/omnigent-ai/omnigent","rank":185,"previous_rank":186,"rank_delta":1,"stars":7017,"stars_fmt":"7.0k","forks":947,"forks_fmt":"947","last_push":"2026-07-11","days_ago":0,"weekly_commits":1326,"commits_low_confidence":false,"score":86.9,"description":"Omnigent is an open-source AI agent framework and meta-harness: orchestrate Claude Code, Codex, Cursor, Pi, and custom a","language":"Python","open_issues":239,"category":"Agent Frameworks","category_rank":40,"npm_package":"","crate_package":"","pypi_package":"","weekly_downloads":null,"dl_source":"","hn_mentions_30d":null,"has_provenance":false,"npm_provenance":null,"pypi_provenance":null,"signed_commits_ratio":0.99,"scorecard_score":4.1,"scorecard_checks":{"Binary-Artifacts":9,"Branch-Protection":1,"CI-Tests":10,"CII-Best-Practices":0,"Code-Review":3,"Contributors":10,"Dangerous-Workflow":0,"Dependency-Update-Tool":10,"Fuzzing":0,"License":10,"Maintained":0,"Packaging":10,"Pinned-Dependencies":6,"SAST":6,"Security-Policy":9,"Signed-Releases":-1,"Token-Permissions":0,"Vulnerabilities":0},"scorecard_scanned_at":"2026-07-10T16:20:18Z","slug":"omnigent","source_note":"","public_actions":null,"mcp_server_support":{"status":"declared","confidence":"medium","evidence":["Found MCP-related server test path: tests/inner/fixtures/fake_google_mcp_server.py","Found MCP-related server test path: tests/resources/examples/_shared/sleep_mcp_server.py"]},"external_service_dependencies":{"providers":["Amazon Bedrock","Anthropic","E2B","OpenAI","Postgres"],"requires_api_keys":true,"confidence":"high","evidence":["README/docs mention OpenAI","Found OpenAI dependency 'openai' in pyproject.toml","Found OpenAI credential/config marker 'OPENAI_API_KEY'","README/docs mention Anthropic","Found Anthropic credential/config marker 'ANTHROPIC_API_KEY'","Found Amazon Bedrock dependency 'bedrock' in pyproject.toml"]},"tool_plugin_surface":{"plugin_system":"none","tool_tags":["browser","code","database","search","shell"],"confidence":"high","evidence":["Found browser dependency 'playwright' in pyproject.toml","README/docs mention shell capabilities","README/docs mention search capabilities","Found database dependency 'pg' in pyproject.toml","README/docs mention code capabilities"]},"package_provenance_drift":{"status":"not_applicable","confidence":null,"summary":"No package source configured","evidence":[]},"evidence_grade":"C","coverage_grade":"C","signal_coverage":0.4,"signal_types":2,"listing_status":"listed","display_listing_status":"listed","display_status_label":"Listed","has_warning":false,"warning_reasons":[],"license_spdx":"Apache-2.0","license_type":"open","license_override":"","trust_score":57.6,"trust_score_v2":57.6,"rank_v2":185,"rank_v2_delta":-25,"trust_v2_adjustment":-4.5,"trust_confidence":1.0,"trust_breakdown":{"safety":10.1,"identity":10.8,"transparency":12.0,"maintenance":20.0,"adoption":9.2},"trust_v2_breakdown":{"mcp":0.0,"external_dependencies":-3.0,"tool_plugin_surface":-1.5,"package_provenance_drift":0.0},"pending_signals":false},{"name":"Astron Agent","repo":"iflytek/astron-agent","display_repo":"","url":"https://github.com/iflytek/astron-agent","rank":186,"previous_rank":185,"rank_delta":-1,"stars":8609,"stars_fmt":"8.6k","forks":859,"forks_fmt":"859","last_push":"2026-07-10","days_ago":1,"weekly_commits":61,"commits_low_confidence":false,"score":84.5,"description":"Enterprise-grade, commercial-friendly agentic workflow platform for building next-generation SuperAgents.","language":"Java","open_issues":23,"category":"Workflow Platforms","category_rank":16,"npm_package":"","crate_package":"","pypi_package":"","weekly_downloads":null,"dl_source":"","hn_mentions_30d":null,"has_provenance":false,"npm_provenance":null,"pypi_provenance":null,"signed_commits_ratio":0.44,"scorecard_score":5.1,"scorecard_checks":{"Binary-Artifacts":10,"Branch-Protection":3,"CI-Tests":7,"CII-Best-Practices":0,"Code-Review":3,"Contributors":10,"Dangerous-Workflow":10,"Dependency-Update-Tool":0,"Fuzzing":0,"License":10,"Maintained":10,"Packaging":10,"Pinned-Dependencies":0,"SAST":8,"Security-Policy":9,"Signed-Releases":-1,"Token-Permissions":0,"Vulnerabilities":0},"scorecard_scanned_at":"2026-07-10T18:36:14Z","slug":"astron-agent","source_note":"","public_actions":null,"mcp_server_support":{"status":"declared","confidence":"medium","evidence":["Found MCP-related server path: console/backend/hub/src/main/resources/db/migration/V1.37__add_bot_mcp_server_urls.sql","Found MCP-related server path: console/backend/toolkit/src/main/resources/mcp-server/iat.json","Found MCP-related server test path: console/backend/toolkit/src/test/resources/mcp-servers/test-server-1.json"]},"external_service_dependencies":{"providers":["Amazon Bedrock","Anthropic","E2B","OpenAI","Redis"],"requires_api_keys":false,"confidence":"high","evidence":["Found OpenAI dependency 'openai' in core/agent/pyproject.toml","Found Anthropic dependency 'anthropic' in core/workflow/pyproject.toml","Found Amazon Bedrock dependency 'boto3' in core/agent/pyproject.toml","Found E2B dependency 'e2b' in core/agent/pyproject.toml","Found Redis dependency 'redis' in core/agent/pyproject.toml"]},"tool_plugin_surface":{"plugin_system":"extension-based","tool_tags":["code","database"],"confidence":"high","evidence":["README/docs mention a extension-based plugin/integration surface","Found database dependency 'redis' in core/agent/pyproject.toml","README/docs mention code capabilities"]},"package_provenance_drift":{"status":"not_applicable","confidence":null,"summary":"No package source configured","evidence":[]},"evidence_grade":"C","coverage_grade":"C","signal_coverage":0.4,"signal_types":2,"listing_status":"listed","display_listing_status":"listed","display_status_label":"Listed","has_warning":false,"warning_reasons":[],"license_spdx":"Apache-2.0","license_type":"open","license_override":"","trust_score":57.5,"trust_score_v2":57.5,"rank_v2":186,"rank_v2_delta":-13,"trust_v2_adjustment":-3.2,"trust_confidence":1.0,"trust_breakdown":{"safety":8.6,"identity":10.8,"transparency":12.8,"maintenance":19.1,"adoption":9.4},"trust_v2_breakdown":{"mcp":0.0,"external_dependencies":-2.0,"tool_plugin_surface":-1.2,"package_provenance_drift":0.0},"pending_signals":false},{"name":"Rasa","repo":"RasaHQ/rasa","display_repo":"","url":"https://github.com/RasaHQ/rasa","rank":187,"previous_rank":188,"rank_delta":1,"stars":21236,"stars_fmt":"21.2k","forks":4915,"forks_fmt":"4.9k","last_push":"2026-05-22","days_ago":50,"weekly_commits":0,"commits_low_confidence":false,"score":61.4,"description":"💬   Open source machine learning framework to automate text- and voice-based conversations: NLU, dialogue management, co","language":"Python","open_issues":8,"category":"Voice & Conversational","category_rank":5,"npm_package":"","crate_package":"","pypi_package":"rasa","weekly_downloads":77865,"dl_source":"pypi","hn_mentions_30d":254,"has_provenance":false,"npm_provenance":null,"pypi_provenance":false,"signed_commits_ratio":null,"scorecard_score":5.2,"scorecard_checks":{"Binary-Artifacts":10,"Branch-Protection":8,"CI-Tests":1,"CII-Best-Practices":0,"Code-Review":9,"Contributors":10,"Dangerous-Workflow":10,"Dependency-Update-Tool":10,"Fuzzing":0,"License":10,"Maintained":0,"Packaging":10,"Pinned-Dependencies":6,"SAST":0,"Security-Policy":0,"Signed-Releases":-1,"Token-Permissions":0,"Vulnerabilities":0},"scorecard_scanned_at":"2026-07-11T01:27:45Z","slug":"rasa","source_note":"","public_actions":null,"mcp_server_support":{"status":"none","confidence":null,"evidence":[]},"external_service_dependencies":{"providers":["Amazon Bedrock","Postgres","Redis"],"requires_api_keys":false,"confidence":"high","evidence":["Found Amazon Bedrock dependency 'boto3' in pyproject.toml","Found Postgres dependency 'psycopg' in pyproject.toml","Found Redis dependency 'redis' in pyproject.toml"]},"tool_plugin_surface":{"plugin_system":"declared","tool_tags":["code","database","filesystem","search"],"confidence":"high","evidence":["Found declared path: docs/plugins/google-tagmanager/client.js","Found filesystem dependency 'fs-extra' in docs/package.json","README/docs mention search capabilities","Found database dependency 'pg' in pyproject.toml","README/docs mention code capabilities"]},"package_provenance_drift":{"status":"match","confidence":"high","summary":"Published package metadata matches the tracked repo","evidence":["pypi package 'rasa' points to the tracked repo"]},"evidence_grade":"C","coverage_grade":"A","signal_coverage":0.8,"signal_types":4,"listing_status":"listed","display_listing_status":"listed","display_status_label":"Listed","has_warning":false,"warning_reasons":[],"license_spdx":"Apache-2.0","license_type":"open","license_override":"","trust_score":57.3,"trust_score_v2":57.3,"rank_v2":187,"rank_v2_delta":30,"trust_v2_adjustment":1.5,"trust_confidence":1.0,"trust_breakdown":{"safety":6.5,"identity":10.8,"transparency":12.9,"maintenance":8.7,"adoption":16.9},"trust_v2_breakdown":{"mcp":0.0,"external_dependencies":-1.0,"tool_plugin_surface":-1.5,"package_provenance_drift":4.0},"pending_signals":false},{"name":"Pi","repo":"earendil-works/pi","display_repo":"","url":"https://github.com/earendil-works/pi","rank":188,"previous_rank":187,"rank_delta":-1,"stars":69536,"stars_fmt":"69.5k","forks":8548,"forks_fmt":"8.5k","last_push":"2026-07-10","days_ago":1,"weekly_commits":388,"commits_low_confidence":false,"score":97.4,"description":"AI agent toolkit: unified LLM API, agent loop, TUI, coding agent CLI","language":"TypeScript","open_issues":52,"category":"Coding Agents","category_rank":26,"npm_package":"","crate_package":"","pypi_package":"","weekly_downloads":null,"dl_source":"","hn_mentions_30d":null,"has_provenance":false,"npm_provenance":null,"pypi_provenance":null,"signed_commits_ratio":0.08,"scorecard_score":4.3,"scorecard_checks":{"Binary-Artifacts":5,"Branch-Protection":3,"CI-Tests":10,"CII-Best-Practices":0,"Code-Review":1,"Contributors":10,"Dangerous-Workflow":10,"Dependency-Update-Tool":0,"Fuzzing":0,"License":10,"Maintained":10,"Packaging":-1,"Pinned-Dependencies":5,"SAST":0,"Security-Policy":10,"Signed-Releases":0,"Token-Permissions":0,"Vulnerabilities":5},"scorecard_scanned_at":"2026-07-11T01:38:00Z","slug":"pi","source_note":"","public_actions":null,"mcp_server_support":{"status":"none","confidence":null,"evidence":[]},"external_service_dependencies":{"providers":["Amazon Bedrock","Anthropic","Google Gemini","OpenAI"],"requires_api_keys":false,"confidence":"high","evidence":["README/docs mention OpenAI","Found OpenAI dependency 'openai' in packages/ai/package.json","README/docs mention Anthropic","Found Anthropic dependency 'anthropic' in package.json","Found Google Gemini dependency '@google/genai' in packages/ai/package.json","Found Amazon Bedrock dependency 'bedrock' in packages/ai/package.json"]},"tool_plugin_surface":{"plugin_system":"extension-based","tool_tags":["code","filesystem","shell"],"confidence":"high","evidence":["README/docs mention a extension-based plugin/integration surface","README/docs mention shell capabilities","README/docs mention filesystem capabilities","README/docs mention code capabilities"]},"package_provenance_drift":{"status":"not_applicable","confidence":null,"summary":"No package source configured","evidence":[]},"evidence_grade":"C","coverage_grade":"C","signal_coverage":0.4,"signal_types":2,"listing_status":"listed","display_listing_status":"listed","display_status_label":"Listed","has_warning":false,"warning_reasons":[],"license_spdx":"MIT","license_type":"open","license_override":"","trust_score":57.3,"trust_score_v2":57.3,"rank_v2":188,"rank_v2_delta":-9,"trust_v2_adjustment":-3.0,"trust_confidence":1.0,"trust_breakdown":{"safety":5.8,"identity":10.8,"transparency":12.2,"maintenance":19.9,"adoption":11.6},"trust_v2_breakdown":{"mcp":0.0,"external_dependencies":-1.5,"tool_plugin_surface":-1.5,"package_provenance_drift":0.0},"pending_signals":false},{"name":"Steel Browser","repo":"steel-dev/steel-browser","display_repo":"","url":"https://github.com/steel-dev/steel-browser","rank":189,"previous_rank":190,"rank_delta":1,"stars":7320,"stars_fmt":"7.3k","forks":948,"forks_fmt":"948","last_push":"2026-07-06","days_ago":5,"weekly_commits":4,"commits_low_confidence":false,"score":70.1,"description":"🔥 Open Source Browser API for AI Agents & Apps. Steel Browser is a batteries-included browser sandbox that lets you auto","language":"TypeScript","open_issues":25,"category":"Browser & Computer Use","category_rank":7,"npm_package":"","crate_package":"","pypi_package":"","weekly_downloads":null,"dl_source":"","hn_mentions_30d":null,"has_provenance":false,"npm_provenance":null,"pypi_provenance":null,"signed_commits_ratio":0.99,"scorecard_score":4.9,"scorecard_checks":{"Binary-Artifacts":8,"Branch-Protection":4,"CI-Tests":10,"CII-Best-Practices":0,"Code-Review":10,"Contributors":10,"Dangerous-Workflow":10,"Dependency-Update-Tool":0,"Fuzzing":0,"License":10,"Maintained":10,"Packaging":10,"Pinned-Dependencies":2,"SAST":0,"Security-Policy":0,"Signed-Releases":-1,"Token-Permissions":0,"Vulnerabilities":0},"scorecard_scanned_at":"2026-07-10T17:40:13Z","slug":"steel-browser","source_note":"","public_actions":null,"mcp_server_support":{"status":"none","confidence":null,"evidence":[]},"external_service_dependencies":{"providers":[],"requires_api_keys":false,"confidence":null,"evidence":[]},"tool_plugin_surface":{"plugin_system":"extension-based","tool_tags":["browser","code"],"confidence":"high","evidence":["README/docs mention a extension-based plugin/integration surface","README/docs mention browser capabilities","README/docs mention code capabilities"]},"package_provenance_drift":{"status":"not_applicable","confidence":null,"summary":"No package source configured","evidence":[]},"evidence_grade":"C","coverage_grade":"C","signal_coverage":0.4,"signal_types":2,"listing_status":"listed","display_listing_status":"listed","display_status_label":"Listed","has_warning":false,"warning_reasons":[],"license_spdx":"Apache-2.0","license_type":"open","license_override":"","trust_score":57.2,"trust_score_v2":57.2,"rank_v2":189,"rank_v2_delta":7,"trust_v2_adjustment":-1.2,"trust_confidence":1.0,"trust_breakdown":{"safety":11.1,"identity":10.8,"transparency":12.7,"maintenance":14.5,"adoption":9.3},"trust_v2_breakdown":{"mcp":0.0,"external_dependencies":-0.0,"tool_plugin_surface":-1.2,"package_provenance_drift":0.0},"pending_signals":false},{"name":"PrivateGPT","repo":"imartinez/privateGPT","display_repo":"","url":"https://github.com/zylon-ai/private-gpt","rank":190,"previous_rank":189,"rank_delta":-1,"stars":57331,"stars_fmt":"57.3k","forks":7597,"forks_fmt":"7.6k","last_push":"2026-07-10","days_ago":1,"weekly_commits":15,"commits_low_confidence":false,"score":86.6,"description":"Interact with your documents using the power of GPT, 100% privately, no data leaks","language":"Python","open_issues":2,"category":"Memory & Knowledge","category_rank":19,"npm_package":"","crate_package":"","pypi_package":"","weekly_downloads":null,"dl_source":"","hn_mentions_30d":2,"has_provenance":false,"npm_provenance":null,"pypi_provenance":null,"signed_commits_ratio":1.0,"scorecard_score":4.3,"scorecard_checks":{"Binary-Artifacts":10,"Branch-Protection":6,"CI-Tests":8,"CII-Best-Practices":0,"Code-Review":10,"Contributors":3,"Dangerous-Workflow":0,"Dependency-Update-Tool":10,"Fuzzing":0,"License":10,"Maintained":10,"Packaging":10,"Pinned-Dependencies":0,"SAST":0,"Security-Policy":0,"Signed-Releases":0,"Token-Permissions":0,"Vulnerabilities":0},"scorecard_scanned_at":"2026-07-10T07:55:57Z","slug":"privategpt","source_note":"","public_actions":null,"mcp_server_support":{"status":"none","confidence":null,"evidence":[]},"external_service_dependencies":{"providers":["Amazon Bedrock","Anthropic","OpenAI","Postgres","Qdrant","Redis"],"requires_api_keys":false,"confidence":"high","evidence":["README/docs mention OpenAI","Found OpenAI dependency 'openai' in pyproject.toml","README/docs mention Anthropic","Found Anthropic dependency 'anthropic' in pyproject.toml","Found Amazon Bedrock dependency 'boto3' in pyproject.toml","Found Qdrant dependency 'qdrant' in pyproject.toml"]},"tool_plugin_surface":{"plugin_system":"declared","tool_tags":["browser","code","database","search","shell"],"confidence":"high","evidence":["README/docs mention a declared plugin/integration surface","Found browser dependency 'playwright' in pyproject.toml","README/docs mention shell capabilities","README/docs mention search capabilities","Found database dependency 'postgres' in pyproject.toml","README/docs mention code capabilities"]},"package_provenance_drift":{"status":"not_applicable","confidence":null,"summary":"No package source configured","evidence":[]},"evidence_grade":"C","coverage_grade":"B","signal_coverage":0.6,"signal_types":3,"listing_status":"listed","display_listing_status":"listed","display_status_label":"Listed","has_warning":false,"warning_reasons":[],"license_spdx":"Apache-2.0","license_type":"open","license_override":"","trust_score":57.2,"trust_score_v2":57.2,"rank_v2":190,"rank_v2_delta":-25,"trust_v2_adjustment":-4.3,"trust_confidence":1.0,"trust_breakdown":{"safety":10.4,"identity":10.8,"transparency":12.2,"maintenance":16.7,"adoption":11.4},"trust_v2_breakdown":{"mcp":0.0,"external_dependencies":-2.5,"tool_plugin_surface":-1.8,"package_provenance_drift":0.0},"pending_signals":false},{"name":"CowAgent","repo":"zhayujie/CowAgent","display_repo":"","url":"https://github.com/zhayujie/CowAgent","rank":191,"previous_rank":191,"rank_delta":0,"stars":45916,"stars_fmt":"45.9k","forks":10260,"forks_fmt":"10.3k","last_push":"2026-07-09","days_ago":2,"weekly_commits":170,"commits_low_confidence":false,"score":96.6,"description":"Open-source super AI assistant & Agent Harness. Plans tasks, runs tools and skills, self-evolves with memory and knowled","language":"Python","open_issues":21,"category":"Agent Frameworks","category_rank":41,"npm_package":"","crate_package":"","pypi_package":"","weekly_downloads":null,"dl_source":"","hn_mentions_30d":null,"has_provenance":false,"npm_provenance":null,"pypi_provenance":null,"signed_commits_ratio":0.08,"scorecard_score":3.5,"scorecard_checks":{"Binary-Artifacts":10,"Branch-Protection":0,"CI-Tests":2,"CII-Best-Practices":0,"Code-Review":2,"Contributors":10,"Dangerous-Workflow":10,"Dependency-Update-Tool":0,"Fuzzing":0,"License":10,"Maintained":10,"Packaging":10,"Pinned-Dependencies":0,"SAST":0,"Security-Policy":0,"Signed-Releases":0,"Token-Permissions":0,"Vulnerabilities":0},"scorecard_scanned_at":"2026-07-10T10:28:40Z","slug":"cowagent","source_note":"","public_actions":null,"mcp_server_support":{"status":"declared","confidence":"low","evidence":["README/docs mention MCP support"]},"external_service_dependencies":{"providers":[],"requires_api_keys":false,"confidence":null,"evidence":[]},"tool_plugin_surface":{"plugin_system":"marketplace","tool_tags":[],"confidence":"medium","evidence":["README/docs mention a marketplace plugin/integration surface"]},"package_provenance_drift":{"status":"not_applicable","confidence":null,"summary":"No package source configured","evidence":[]},"evidence_grade":"C","coverage_grade":"C","signal_coverage":0.4,"signal_types":2,"listing_status":"listed","display_listing_status":"listed","display_status_label":"Listed","has_warning":false,"warning_reasons":[],"license_spdx":"MIT","license_type":"open","license_override":"","trust_score":57.2,"trust_score_v2":57.2,"rank_v2":191,"rank_v2_delta":7,"trust_v2_adjustment":-1.0,"trust_confidence":1.0,"trust_breakdown":{"safety":4.8,"identity":10.8,"transparency":11.5,"maintenance":19.9,"adoption":11.2},"trust_v2_breakdown":{"mcp":0.0,"external_dependencies":-0.0,"tool_plugin_surface":-1.0,"package_provenance_drift":0.0},"pending_signals":false},{"name":"WeKnora","repo":"Tencent/WeKnora","display_repo":"","url":"https://github.com/Tencent/WeKnora","rank":192,"previous_rank":193,"rank_delta":1,"stars":18114,"stars_fmt":"18.1k","forks":2477,"forks_fmt":"2.5k","last_push":"2026-07-11","days_ago":0,"weekly_commits":250,"commits_low_confidence":false,"score":91.3,"description":"Open-source LLM knowledge platform: turn raw documents into a queryable RAG, an autonomous reasoning agent, and a self-m","language":"Go","open_issues":242,"category":"Memory & Knowledge","category_rank":20,"npm_package":"","crate_package":"","pypi_package":"","weekly_downloads":null,"dl_source":"","hn_mentions_30d":null,"has_provenance":false,"npm_provenance":null,"pypi_provenance":null,"signed_commits_ratio":0.02,"scorecard_score":4.9,"scorecard_checks":{"Binary-Artifacts":10,"Branch-Protection":3,"CI-Tests":0,"CII-Best-Practices":0,"Code-Review":1,"Contributors":10,"Dangerous-Workflow":10,"Dependency-Update-Tool":10,"Fuzzing":0,"License":9,"Maintained":10,"Packaging":10,"Pinned-Dependencies":1,"SAST":0,"Security-Policy":4,"Signed-Releases":-1,"Token-Permissions":0,"Vulnerabilities":0},"scorecard_scanned_at":"2026-07-11T04:03:00Z","slug":"weknora","source_note":"","public_actions":null,"mcp_server_support":{"status":"implemented","confidence":"high","evidence":["README/docs explicitly mention an MCP server","Found MCP-related server path: cli/internal/mcp/server.go","Found MCP-related server path: mcp-server/.gitignore"]},"external_service_dependencies":{"providers":["Anthropic","Azure OpenAI","Google Gemini","OpenAI","Postgres","Qdrant","Tavily","Weaviate"],"requires_api_keys":false,"confidence":"high","evidence":["README/docs mention OpenAI","README/docs mention Anthropic","README/docs mention Google Gemini","README/docs mention Azure OpenAI","README/docs mention Qdrant","README/docs mention Weaviate"]},"tool_plugin_surface":{"plugin_system":"extension-based","tool_tags":["browser","code","database","search","shell"],"confidence":"high","evidence":["README/docs mention a extension-based plugin/integration surface","Found browser dependency 'playwright' in docreader/pyproject.toml","README/docs mention shell capabilities","README/docs mention search capabilities","README/docs mention database capabilities","README/docs mention code capabilities"]},"package_provenance_drift":{"status":"not_applicable","confidence":null,"summary":"No package source configured","evidence":[]},"evidence_grade":"C","coverage_grade":"C","signal_coverage":0.4,"signal_types":2,"listing_status":"listed","display_listing_status":"listed","display_status_label":"Listed","has_warning":false,"warning_reasons":[],"license_spdx":"NOASSERTION","license_type":"open","license_override":"","trust_score":56.8,"trust_score_v2":56.8,"rank_v2":192,"rank_v2_delta":-11,"trust_v2_adjustment":-3.1,"trust_confidence":1.0,"trust_breakdown":{"safety":6.2,"identity":10.8,"transparency":12.7,"maintenance":20.0,"adoption":10.2},"trust_v2_breakdown":{"mcp":2.0,"external_dependencies":-3.0,"tool_plugin_surface":-2.1,"package_provenance_drift":0.0},"pending_signals":false},{"name":"Langroid","repo":"langroid/langroid","display_repo":"","url":"https://github.com/langroid/langroid","rank":193,"previous_rank":195,"rank_delta":2,"stars":4056,"stars_fmt":"4.1k","forks":381,"forks_fmt":"381","last_push":"2026-07-07","days_ago":4,"weekly_commits":12,"commits_low_confidence":false,"score":72.1,"description":"Harness LLMs with Multi-Agent Programming","language":"Python","open_issues":52,"category":"Agent Frameworks","category_rank":42,"npm_package":"","crate_package":"","pypi_package":"langroid","weekly_downloads":9453,"dl_source":"pypi","hn_mentions_30d":14,"has_provenance":false,"npm_provenance":null,"pypi_provenance":false,"signed_commits_ratio":0.55,"scorecard_score":4.3,"scorecard_checks":{"Binary-Artifacts":10,"Branch-Protection":6,"CI-Tests":8,"CII-Best-Practices":0,"Code-Review":0,"Contributors":6,"Dangerous-Workflow":10,"Dependency-Update-Tool":0,"Fuzzing":0,"License":10,"Maintained":10,"Packaging":10,"Pinned-Dependencies":0,"SAST":0,"Security-Policy":10,"Signed-Releases":0,"Token-Permissions":0,"Vulnerabilities":0},"scorecard_scanned_at":"2026-07-10T07:54:30Z","slug":"langroid","source_note":"","public_actions":null,"mcp_server_support":{"status":"implemented","confidence":"high","evidence":["README/docs mention MCP support","Found MCP-related server path: langroid/agent/tools/mcp/fastmcp_client.py","Found MCP dependency 'fastmcp' in pyproject.toml"]},"external_service_dependencies":{"providers":["Anthropic","Azure OpenAI","Firecrawl","Google Gemini","OpenAI","Pinecone","Postgres","Qdrant","Redis","Tavily","Weaviate"],"requires_api_keys":true,"confidence":"high","evidence":["README/docs mention OpenAI","Found OpenAI dependency 'openai' in pyproject.toml","Found OpenAI credential/config marker 'OPENAI_API_KEY'","README/docs mention Anthropic","README/docs mention Google Gemini","Found Google Gemini dependency 'google-generativeai' in pyproject.toml"]},"tool_plugin_surface":{"plugin_system":"marketplace","tool_tags":["browser","code","database","search","shell"],"confidence":"high","evidence":["README/docs mention a marketplace plugin/integration surface","README/docs mention browser capabilities","README/docs mention shell capabilities","README/docs mention search capabilities","README/docs mention database capabilities","README/docs mention code capabilities"]},"package_provenance_drift":{"status":"unknown","confidence":"low","summary":"Package source metadata is missing or inconclusive","evidence":["pypi package 'langroid' has a non-GitHub or unparseable source URL"]},"evidence_grade":"C","coverage_grade":"A","signal_coverage":0.8,"signal_types":4,"listing_status":"listed","display_listing_status":"listed","display_status_label":"Listed","has_warning":false,"warning_reasons":[],"license_spdx":"MIT","license_type":"open","license_override":"","trust_score":56.8,"trust_score_v2":56.8,"rank_v2":193,"rank_v2_delta":-24,"trust_v2_adjustment":-4.5,"trust_confidence":1.0,"trust_breakdown":{"safety":8.1,"identity":10.8,"transparency":12.2,"maintenance":16.2,"adoption":14.0},"trust_v2_breakdown":{"mcp":2.0,"external_dependencies":-4.0,"tool_plugin_surface":-2.5,"package_provenance_drift":0.0},"pending_signals":false},{"name":"Kimi Code","repo":"MoonshotAI/kimi-code","display_repo":"","url":"https://github.com/MoonshotAI/kimi-code","rank":194,"previous_rank":192,"rank_delta":-2,"stars":3049,"stars_fmt":"3.0k","forks":415,"forks_fmt":"415","last_push":"2026-07-10","days_ago":1,"weekly_commits":440,"commits_low_confidence":false,"score":83.1,"description":"Kimi Code CLI  —  The Starting Point for Next-Gen Agents","language":"TypeScript","open_issues":281,"category":"Coding Agents","category_rank":27,"npm_package":"","crate_package":"","pypi_package":"","weekly_downloads":null,"dl_source":"","hn_mentions_30d":9,"has_provenance":false,"npm_provenance":null,"pypi_provenance":null,"signed_commits_ratio":1.0,"scorecard_score":2.9,"scorecard_checks":{"Binary-Artifacts":6,"Branch-Protection":3,"CI-Tests":8,"CII-Best-Practices":0,"Code-Review":0,"Contributors":10,"Dangerous-Workflow":10,"Dependency-Update-Tool":0,"Fuzzing":0,"License":10,"Maintained":0,"Packaging":-1,"Pinned-Dependencies":0,"SAST":0,"Security-Policy":10,"Signed-Releases":0,"Token-Permissions":0,"Vulnerabilities":0},"scorecard_scanned_at":"2026-07-10T17:25:22Z","slug":"kimi-code","source_note":"","public_actions":null,"mcp_server_support":{"status":"declared","confidence":"medium","evidence":["README/docs mention MCP support","Found MCP-related server path: apps/kimi-code/src/tui/utils/mcp-server-status.ts","Found MCP-related server path: packages/agent-core/src/mcp/oauth/callback-server.ts","Found MCP-related server test path: packages/agent-core/test/mcp/fixtures/crash-after-connect-stdio-server.mjs"]},"external_service_dependencies":{"providers":[],"requires_api_keys":false,"confidence":null,"evidence":[]},"tool_plugin_surface":{"plugin_system":"marketplace","tool_tags":["code","search","shell"],"confidence":"high","evidence":["README/docs mention a marketplace plugin/integration surface","README/docs mention shell capabilities","README/docs mention search capabilities","README/docs mention code capabilities"]},"package_provenance_drift":{"status":"not_applicable","confidence":null,"summary":"No package source configured","evidence":[]},"evidence_grade":"C","coverage_grade":"B","signal_coverage":0.6,"signal_types":3,"listing_status":"listed","display_listing_status":"listed","display_status_label":"Listed","has_warning":false,"warning_reasons":[],"license_spdx":"MIT","license_type":"open","license_override":"","trust_score":56.8,"trust_score_v2":56.8,"rank_v2":194,"rank_v2_delta":-3,"trust_v2_adjustment":-1.9,"trust_confidence":1.0,"trust_breakdown":{"safety":8.6,"identity":10.8,"transparency":11.0,"maintenance":19.9,"adoption":8.4},"trust_v2_breakdown":{"mcp":0.0,"external_dependencies":-0.0,"tool_plugin_surface":-1.9,"package_provenance_drift":0.0},"pending_signals":false},{"name":"UI-TARS Desktop","repo":"bytedance/UI-TARS-desktop","display_repo":"","url":"https://github.com/bytedance/UI-TARS-desktop","rank":195,"previous_rank":194,"rank_delta":-1,"stars":37909,"stars_fmt":"37.9k","forks":3811,"forks_fmt":"3.8k","last_push":"2026-07-01","days_ago":10,"weekly_commits":1,"commits_low_confidence":false,"score":71.6,"description":"The Open-Source Multimodal AI Agent Stack: Connecting Cutting-Edge AI Models and Agent Infra","language":"TypeScript","open_issues":318,"category":"Browser & Computer Use","category_rank":8,"npm_package":"","crate_package":"","pypi_package":"","weekly_downloads":null,"dl_source":"","hn_mentions_30d":null,"has_provenance":false,"npm_provenance":null,"pypi_provenance":null,"signed_commits_ratio":1.0,"scorecard_score":4.8,"scorecard_checks":{"Binary-Artifacts":10,"Branch-Protection":1,"CI-Tests":8,"CII-Best-Practices":0,"Code-Review":10,"Contributors":10,"Dangerous-Workflow":10,"Dependency-Update-Tool":0,"Fuzzing":0,"License":10,"Maintained":1,"Packaging":-1,"Pinned-Dependencies":4,"SAST":7,"Security-Policy":10,"Signed-Releases":-1,"Token-Permissions":0,"Vulnerabilities":0},"scorecard_scanned_at":"2026-07-11T04:06:19Z","slug":"ui-tars-desktop","source_note":"","public_actions":null,"mcp_server_support":{"status":"declared","confidence":"medium","evidence":["README/docs mention MCP support","Found MCP-related server path: packages/agent-infra/mcp-servers/browser/.dockerignore","Found MCP-related server path: packages/agent-infra/mcp-servers/browser/CHANGELOG.md","Found MCP-related server docs path: multimodal/websites/docs/docs/public/alpha/config-mcp-servers.mp4"]},"external_service_dependencies":{"providers":[],"requires_api_keys":false,"confidence":null,"evidence":[]},"tool_plugin_surface":{"plugin_system":"declared","tool_tags":["browser","filesystem","shell"],"confidence":"high","evidence":["README/docs mention a declared plugin/integration surface","Found browser dependency 'playwright' in package.json","Found shell dependency 'execa' in infra/pdk/package.json","README/docs also mention shell capabilities","Found filesystem dependency 'fs-extra' in infra/pdk/package.json"]},"package_provenance_drift":{"status":"not_applicable","confidence":null,"summary":"No package source configured","evidence":[]},"evidence_grade":"C","coverage_grade":"C","signal_coverage":0.4,"signal_types":2,"listing_status":"listed","display_listing_status":"listed","display_status_label":"Listed","has_warning":false,"warning_reasons":[],"license_spdx":"Apache-2.0","license_type":"open","license_override":"","trust_score":56.7,"trust_score_v2":56.7,"rank_v2":195,"rank_v2_delta":4,"trust_v2_adjustment":-1.2,"trust_confidence":1.0,"trust_breakdown":{"safety":11.0,"identity":10.8,"transparency":12.6,"maintenance":12.5,"adoption":11.0},"trust_v2_breakdown":{"mcp":0.0,"external_dependencies":-0.0,"tool_plugin_surface":-1.2,"package_provenance_drift":0.0},"pending_signals":false},{"name":"pgvector","repo":"pgvector/pgvector","display_repo":"","url":"https://github.com/pgvector/pgvector","rank":196,"previous_rank":196,"rank_delta":0,"stars":22148,"stars_fmt":"22.1k","forks":1239,"forks_fmt":"1.2k","last_push":"2026-07-11","days_ago":0,"weekly_commits":63,"commits_low_confidence":false,"score":88.0,"description":"Open-source vector similarity search for Postgres","language":"C","open_issues":8,"category":"Memory & Knowledge","category_rank":21,"npm_package":"","crate_package":"","pypi_package":"","weekly_downloads":null,"dl_source":"","hn_mentions_30d":11,"has_provenance":false,"npm_provenance":null,"pypi_provenance":null,"signed_commits_ratio":null,"scorecard_score":4.6,"scorecard_checks":{"Binary-Artifacts":10,"Branch-Protection":0,"CI-Tests":-1,"CII-Best-Practices":0,"Code-Review":0,"Contributors":10,"Dangerous-Workflow":10,"Dependency-Update-Tool":0,"Fuzzing":0,"License":9,"Maintained":10,"Packaging":-1,"Pinned-Dependencies":0,"SAST":0,"Security-Policy":9,"Signed-Releases":-1,"Token-Permissions":0,"Vulnerabilities":10},"scorecard_scanned_at":"2026-07-10T17:08:49Z","slug":"pgvector","source_note":"","public_actions":null,"mcp_server_support":{"status":"none","confidence":null,"evidence":[]},"external_service_dependencies":{"providers":["OpenAI","Postgres"],"requires_api_keys":false,"confidence":"high","evidence":["README/docs mention OpenAI","README/docs mention Postgres"]},"tool_plugin_surface":{"plugin_system":"extension-based","tool_tags":["code","database","search"],"confidence":"high","evidence":["README/docs mention a extension-based plugin/integration surface","README/docs mention search capabilities","README/docs mention database capabilities","README/docs mention code capabilities"]},"package_provenance_drift":{"status":"not_applicable","confidence":null,"summary":"No package source configured","evidence":[]},"evidence_grade":"C","coverage_grade":"B","signal_coverage":0.6,"signal_types":3,"listing_status":"listed","display_listing_status":"listed","display_status_label":"Listed","has_warning":false,"warning_reasons":[],"license_spdx":"NOASSERTION","license_type":"open","license_override":"","trust_score":56.6,"trust_score_v2":56.6,"rank_v2":196,"rank_v2_delta":-4,"trust_v2_adjustment":-2.0,"trust_confidence":1.0,"trust_breakdown":{"safety":5.8,"identity":10.8,"transparency":12.4,"maintenance":19.2,"adoption":10.4},"trust_v2_breakdown":{"mcp":0.0,"external_dependencies":-0.5,"tool_plugin_surface":-1.5,"package_provenance_drift":0.0},"pending_signals":false},{"name":"BotSharp","repo":"SciSharp/BotSharp","display_repo":"","url":"https://github.com/SciSharp/BotSharp","rank":197,"previous_rank":197,"rank_delta":0,"stars":3084,"stars_fmt":"3.1k","forks":641,"forks_fmt":"641","last_push":"2026-07-07","days_ago":4,"weekly_commits":34,"commits_low_confidence":false,"score":77.9,"description":"AI Multi-Agent Framework in .NET","language":"C#","open_issues":43,"category":"Agent Frameworks","category_rank":43,"npm_package":"","crate_package":"","pypi_package":"","weekly_downloads":null,"dl_source":"","hn_mentions_30d":null,"has_provenance":false,"npm_provenance":null,"pypi_provenance":null,"signed_commits_ratio":0.28,"scorecard_score":5.4,"scorecard_checks":{"Binary-Artifacts":10,"Branch-Protection":0,"CI-Tests":7,"CII-Best-Practices":0,"Code-Review":4,"Contributors":10,"Dangerous-Workflow":10,"Dependency-Update-Tool":10,"Fuzzing":0,"License":10,"Maintained":10,"Packaging":-1,"Pinned-Dependencies":0,"SAST":0,"Security-Policy":0,"Signed-Releases":-1,"Token-Permissions":0,"Vulnerabilities":10},"scorecard_scanned_at":"2026-07-10T18:33:07Z","slug":"botsharp","source_note":"","public_actions":null,"mcp_server_support":{"status":"declared","confidence":"medium","evidence":["README/docs mention MCP support","Found MCP-related server path: src/Infrastructure/BotSharp.Abstraction/MCP/Models/McpServerConfigModel.cs","Found MCP-related server path: src/Infrastructure/BotSharp.Abstraction/MCP/Models/McpServerOptionModel.cs"]},"external_service_dependencies":{"providers":["Google Gemini","OpenAI","Qdrant"],"requires_api_keys":false,"confidence":"high","evidence":["README/docs mention OpenAI","README/docs mention Google Gemini","README/docs mention Qdrant"]},"tool_plugin_surface":{"plugin_system":"declared","tool_tags":["code","database"],"confidence":"high","evidence":["README/docs mention a declared plugin/integration surface","README/docs mention database capabilities","README/docs mention code capabilities"]},"package_provenance_drift":{"status":"not_applicable","confidence":null,"summary":"No package source configured","evidence":[]},"evidence_grade":"C","coverage_grade":"C","signal_coverage":0.4,"signal_types":2,"listing_status":"listed","display_listing_status":"listed","display_status_label":"Listed","has_warning":false,"warning_reasons":[],"license_spdx":"Apache-2.0","license_type":"open","license_override":"","trust_score":56.5,"trust_score_v2":56.5,"rank_v2":197,"rank_v2_delta":-2,"trust_v2_adjustment":-1.9,"trust_confidence":1.0,"trust_breakdown":{"safety":8.2,"identity":10.8,"transparency":13.1,"maintenance":17.9,"adoption":8.4},"trust_v2_breakdown":{"mcp":0.0,"external_dependencies":-1.0,"tool_plugin_surface":-0.9,"package_provenance_drift":0.0},"pending_signals":false},{"name":"TinyTroupe","repo":"microsoft/TinyTroupe","display_repo":"","url":"https://github.com/microsoft/TinyTroupe","rank":198,"previous_rank":200,"rank_delta":2,"stars":7491,"stars_fmt":"7.5k","forks":667,"forks_fmt":"667","last_push":"2026-07-03","days_ago":8,"weekly_commits":0,"commits_low_confidence":false,"score":60.3,"description":"LLM-powered multiagent persona simulation for imagination enhancement and business insights.","language":"Jupyter Notebook","open_issues":10,"category":"Multi-Agent Systems","category_rank":12,"npm_package":"","crate_package":"","pypi_package":"tinytroupe","weekly_downloads":19,"dl_source":"pypi","hn_mentions_30d":0,"has_provenance":false,"npm_provenance":null,"pypi_provenance":false,"signed_commits_ratio":0.21,"scorecard_score":5.5,"scorecard_checks":{"Binary-Artifacts":10,"Branch-Protection":5,"CI-Tests":6,"CII-Best-Practices":0,"Code-Review":7,"Contributors":10,"Dangerous-Workflow":10,"Dependency-Update-Tool":0,"Fuzzing":0,"License":10,"Maintained":0,"Packaging":-1,"Pinned-Dependencies":1,"SAST":9,"Security-Policy":10,"Signed-Releases":-1,"Token-Permissions":0,"Vulnerabilities":10},"scorecard_scanned_at":"2026-07-10T09:49:38Z","slug":"tinytroupe","source_note":"","public_actions":null,"mcp_server_support":{"status":"none","confidence":null,"evidence":[]},"external_service_dependencies":{"providers":["Azure OpenAI","OpenAI"],"requires_api_keys":true,"confidence":"high","evidence":["README/docs mention OpenAI","Found OpenAI dependency 'openai' in pyproject.toml","Found OpenAI credential/config marker 'OPENAI_API_KEY'","README/docs mention Azure OpenAI","Found Azure OpenAI dependency 'azure-openai' in pyproject.toml"]},"tool_plugin_surface":{"plugin_system":"none","tool_tags":["code","search"],"confidence":"high","evidence":["README/docs mention search capabilities","README/docs mention code capabilities"]},"package_provenance_drift":{"status":"match","confidence":"high","summary":"Published package metadata matches the tracked repo","evidence":["pypi package 'tinytroupe' points to the tracked repo"]},"evidence_grade":"C","coverage_grade":"A","signal_coverage":0.8,"signal_types":4,"listing_status":"listed","display_listing_status":"listed","display_status_label":"Listed","has_warning":false,"warning_reasons":[],"license_spdx":"MIT","license_type":"open","license_override":"","trust_score":56.3,"trust_score_v2":56.3,"rank_v2":198,"rank_v2_delta":24,"trust_v2_adjustment":1.9,"trust_confidence":1.0,"trust_breakdown":{"safety":7.9,"identity":10.8,"transparency":13.2,"maintenance":11.5,"adoption":11.0},"trust_v2_breakdown":{"mcp":0.0,"external_dependencies":-1.5,"tool_plugin_surface":-0.6,"package_provenance_drift":4.0},"pending_signals":false},{"name":"DeepCode","repo":"HKUDS/DeepCode","display_repo":"","url":"https://github.com/HKUDS/DeepCode","rank":199,"previous_rank":199,"rank_delta":0,"stars":16017,"stars_fmt":"16.0k","forks":2100,"forks_fmt":"2.1k","last_push":"2026-07-10","days_ago":1,"weekly_commits":37,"commits_low_confidence":false,"score":85.3,"description":"\"DeepCode: Open Agentic Coding (Paper2Code & Text2Web & Text2Backend)\"","language":"Python","open_issues":32,"category":"Coding Agents","category_rank":28,"npm_package":"","crate_package":"","pypi_package":"","weekly_downloads":null,"dl_source":"","hn_mentions_30d":null,"has_provenance":false,"npm_provenance":null,"pypi_provenance":null,"signed_commits_ratio":0.26,"scorecard_score":4.5,"scorecard_checks":{"Binary-Artifacts":10,"Branch-Protection":0,"CI-Tests":-1,"CII-Best-Practices":0,"Code-Review":0,"Contributors":10,"Dangerous-Workflow":10,"Dependency-Update-Tool":10,"Fuzzing":0,"License":10,"Maintained":10,"Packaging":10,"Pinned-Dependencies":0,"SAST":0,"Security-Policy":0,"Signed-Releases":-1,"Token-Permissions":0,"Vulnerabilities":0},"scorecard_scanned_at":"2026-07-10T16:21:17Z","slug":"deepcode","source_note":"","public_actions":null,"mcp_server_support":{"status":"implemented","confidence":"medium","evidence":["README/docs explicitly mention an MCP server"]},"external_service_dependencies":{"providers":["Anthropic","Brave Search","Google Gemini","OpenAI"],"requires_api_keys":true,"confidence":"high","evidence":["README/docs mention OpenAI","Found OpenAI dependency 'openai' in requirements.txt","README/docs mention Anthropic","Found Anthropic dependency 'anthropic' in requirements.txt","Found Anthropic credential/config marker 'ANTHROPIC_API_KEY'","README/docs mention Google Gemini"]},"tool_plugin_surface":{"plugin_system":"declared","tool_tags":["code","filesystem","search","shell"],"confidence":"high","evidence":["README/docs mention a declared plugin/integration surface","README/docs mention shell capabilities","README/docs mention filesystem capabilities","README/docs mention search capabilities","README/docs mention code capabilities"]},"package_provenance_drift":{"status":"not_applicable","confidence":null,"summary":"No package source configured","evidence":[]},"evidence_grade":"C","coverage_grade":"C","signal_coverage":0.4,"signal_types":2,"listing_status":"listed","display_listing_status":"listed","display_status_label":"Listed","has_warning":false,"warning_reasons":[],"license_spdx":"MIT","license_type":"open","license_override":"","trust_score":56.3,"trust_score_v2":56.3,"rank_v2":199,"rank_v2_delta":-2,"trust_v2_adjustment":-2.0,"trust_confidence":1.0,"trust_breakdown":{"safety":6.9,"identity":10.8,"transparency":12.3,"maintenance":18.2,"adoption":10.1},"trust_v2_breakdown":{"mcp":2.0,"external_dependencies":-2.5,"tool_plugin_surface":-1.5,"package_provenance_drift":0.0},"pending_signals":false},{"name":"Eigent","repo":"eigent-ai/eigent","display_repo":"","url":"https://github.com/eigent-ai/eigent","rank":200,"previous_rank":198,"rank_delta":-2,"stars":14533,"stars_fmt":"14.5k","forks":1721,"forks_fmt":"1.7k","last_push":"2026-07-11","days_ago":0,"weekly_commits":7,"commits_low_confidence":true,"score":76.3,"description":"Eigent: The Open Source Cowork Desktop to Unlock Your Exceptional Productivity. Local and Free Alternative to Claude Cow","language":"TypeScript","open_issues":135,"category":"UI & App Builders","category_rank":9,"npm_package":"","crate_package":"","pypi_package":"","weekly_downloads":null,"dl_source":"","hn_mentions_30d":null,"has_provenance":false,"npm_provenance":null,"pypi_provenance":null,"signed_commits_ratio":0.89,"scorecard_score":5.7,"scorecard_checks":{"Binary-Artifacts":10,"Branch-Protection":5,"CI-Tests":10,"CII-Best-Practices":0,"Code-Review":4,"Contributors":10,"Dangerous-Workflow":10,"Dependency-Update-Tool":10,"Fuzzing":0,"License":10,"Maintained":10,"Packaging":-1,"Pinned-Dependencies":0,"SAST":10,"Security-Policy":10,"Signed-Releases":0,"Token-Permissions":0,"Vulnerabilities":0},"scorecard_scanned_at":"2026-07-11T02:09:43Z","slug":"eigent","source_note":"","public_actions":null,"mcp_server_support":{"status":"declared","confidence":"low","evidence":["README/docs mention MCP support"]},"external_service_dependencies":{"providers":["OpenAI","Postgres","Qdrant","Redis"],"requires_api_keys":false,"confidence":"high","evidence":["Found OpenAI dependency 'openai' in server/pyproject.toml","Found Qdrant dependency 'qdrant' in backend/pyproject.toml","Found Postgres dependency 'psycopg' in server/pyproject.toml","Found Redis dependency 'redis' in server/pyproject.toml"]},"tool_plugin_surface":{"plugin_system":"extension-based","tool_tags":["browser","code","database","shell"],"confidence":"high","evidence":["README/docs mention a extension-based plugin/integration surface","Found browser dependency 'playwright' in package.json","README/docs mention shell capabilities","Found database dependency 'pg' in server/pyproject.toml","README/docs mention code capabilities"]},"package_provenance_drift":{"status":"not_applicable","confidence":null,"summary":"No package source configured","evidence":[]},"evidence_grade":"C","coverage_grade":"C","signal_coverage":0.4,"signal_types":2,"listing_status":"listed","display_listing_status":"listed","display_status_label":"Listed","has_warning":false,"warning_reasons":[],"license_spdx":"Apache-2.0","license_type":"open","license_override":"","trust_score":56.2,"trust_score_v2":56.2,"rank_v2":200,"rank_v2_delta":-15,"trust_v2_adjustment":-3.3,"trust_confidence":1.0,"trust_breakdown":{"safety":11.6,"identity":10.8,"transparency":13.3,"maintenance":13.8,"adoption":10.0},"trust_v2_breakdown":{"mcp":0.0,"external_dependencies":-1.5,"tool_plugin_surface":-1.8,"package_provenance_drift":0.0},"pending_signals":false},{"name":"PentestAgent","repo":"GH05TCREW/pentestagent","display_repo":"","url":"https://github.com/GH05TCREW/pentestagent","rank":201,"previous_rank":201,"rank_delta":0,"stars":2771,"stars_fmt":"2.8k","forks":556,"forks_fmt":"556","last_push":"2026-07-07","days_ago":4,"weekly_commits":5,"commits_low_confidence":false,"score":67.8,"description":"PentestAgent is an AI agent framework for black-box security testing, supporting bug bounty, red-team, and penetration t","language":"Python","open_issues":12,"category":"Security & Guardrails","category_rank":5,"npm_package":"","crate_package":"","pypi_package":"","weekly_downloads":null,"dl_source":"","hn_mentions_30d":null,"has_provenance":false,"npm_provenance":null,"pypi_provenance":null,"signed_commits_ratio":0.41,"scorecard_score":6.2,"scorecard_checks":{"Binary-Artifacts":10,"Branch-Protection":0,"CI-Tests":8,"CII-Best-Practices":0,"Code-Review":4,"Contributors":3,"Dangerous-Workflow":10,"Dependency-Update-Tool":10,"Fuzzing":0,"License":10,"Maintained":10,"Packaging":10,"Pinned-Dependencies":0,"SAST":0,"Security-Policy":0,"Signed-Releases":-1,"Token-Permissions":9,"Vulnerabilities":10},"scorecard_scanned_at":"2026-07-08T09:25:37Z","slug":"pentestagent","source_note":"","public_actions":null,"mcp_server_support":{"status":"implemented","confidence":"high","evidence":["README/docs explicitly mention an MCP server","Found MCP-related server path: mcp_examples/sse/n8n/mcp_servers.json","Found MCP-related server path: mcp_examples/stdio/kali/mcp_servers.json","Found MCP dependency 'fastmcp' in pyproject.toml"]},"external_service_dependencies":{"providers":["Anthropic","OpenAI","Tavily"],"requires_api_keys":true,"confidence":"high","evidence":["README/docs mention OpenAI","Found OpenAI dependency 'openai' in pyproject.toml","Found OpenAI credential/config marker 'OPENAI_API_KEY'","README/docs mention Anthropic","Found Anthropic dependency 'anthropic' in pyproject.toml","Found Anthropic credential/config marker 'ANTHROPIC_API_KEY'"]},"tool_plugin_surface":{"plugin_system":"declared","tool_tags":["browser","code","search","shell"],"confidence":"high","evidence":["README/docs mention a declared plugin/integration surface","README/docs mention browser capabilities","README/docs mention shell capabilities","README/docs mention search capabilities","README/docs mention code capabilities"]},"package_provenance_drift":{"status":"not_applicable","confidence":null,"summary":"No package source configured","evidence":[]},"evidence_grade":"C","coverage_grade":"C","signal_coverage":0.4,"signal_types":2,"listing_status":"listed","display_listing_status":"listed","display_status_label":"Listed","has_warning":false,"warning_reasons":[],"license_spdx":"MIT","license_type":"open","license_override":"","trust_score":56.0,"trust_score_v2":56.0,"rank_v2":201,"rank_v2_delta":1,"trust_v2_adjustment":-1.5,"trust_confidence":1.0,"trust_breakdown":{"safety":9.8,"identity":10.8,"transparency":13.8,"maintenance":14.8,"adoption":8.3},"trust_v2_breakdown":{"mcp":2.0,"external_dependencies":-2.0,"tool_plugin_surface":-1.5,"package_provenance_drift":0.0},"pending_signals":false},{"name":"AutoGPT","repo":"Significant-Gravitas/AutoGPT","display_repo":"","url":"https://github.com/Significant-Gravitas/AutoGPT","rank":202,"previous_rank":202,"rank_delta":0,"stars":185460,"stars_fmt":"185.5k","forks":46114,"forks_fmt":"46.1k","last_push":"2026-07-11","days_ago":0,"weekly_commits":83,"commits_low_confidence":false,"score":99.0,"description":"AutoGPT is the vision of accessible AI for everyone, to use and to build on. Our mission is to provide the tools, so tha","language":"Python","open_issues":285,"category":"Agent Frameworks","category_rank":44,"npm_package":"","crate_package":"","pypi_package":"agpt","weekly_downloads":44,"dl_source":"pypi","hn_mentions_30d":347,"has_provenance":false,"npm_provenance":null,"pypi_provenance":false,"signed_commits_ratio":null,"scorecard_score":5.8,"scorecard_checks":{"Binary-Artifacts":10,"Branch-Protection":8,"CI-Tests":10,"CII-Best-Practices":0,"Code-Review":8,"Contributors":10,"Dangerous-Workflow":0,"Dependency-Update-Tool":10,"Fuzzing":0,"License":9,"Maintained":10,"Packaging":10,"Pinned-Dependencies":0,"SAST":10,"Security-Policy":10,"Signed-Releases":-1,"Token-Permissions":0,"Vulnerabilities":0},"scorecard_scanned_at":"2026-07-11T04:02:03Z","slug":"autogpt","source_note":"","public_actions":null,"mcp_server_support":{"status":"declared","confidence":"medium","evidence":["Found MCP-related server path: autogpt_platform/backend/backend/blocks/mcp/test_server.py"]},"external_service_dependencies":{"providers":["Amazon Bedrock","Anthropic","E2B","Firecrawl","OpenAI","Pinecone","Postgres","Redis","Supabase"],"requires_api_keys":false,"confidence":"high","evidence":["Found OpenAI dependency 'openai' in classic/pyproject.toml","Found Anthropic dependency 'anthropic' in classic/pyproject.toml","Found Amazon Bedrock dependency 'boto3' in classic/pyproject.toml","Found Pinecone dependency 'pinecone' in autogpt_platform/backend/pyproject.toml","Found Firecrawl dependency 'firecrawl' in autogpt_platform/backend/pyproject.toml","Found E2B dependency 'e2b' in autogpt_platform/backend/pyproject.toml"]},"tool_plugin_surface":{"plugin_system":"marketplace","tool_tags":["browser","code","database"],"confidence":"high","evidence":["README/docs mention a marketplace plugin/integration surface","Found browser dependency 'playwright' in classic/pyproject.toml","Found database dependency 'pg' in autogpt_platform/backend/pyproject.toml","README/docs mention code capabilities"]},"package_provenance_drift":{"status":"warning","confidence":"high","summary":"1 package source mismatch detected","evidence":["pypi package 'agpt' points to significant-gravitas/auto-gpt, not significant-gravitas/autogpt"]},"evidence_grade":"C","coverage_grade":"A","signal_coverage":0.8,"signal_types":4,"listing_status":"listed","display_listing_status":"listed","display_status_label":"Listed","has_warning":false,"warning_reasons":[],"license_spdx":"NOASSERTION","license_type":"open","license_override":"","trust_score":56.0,"trust_score_v2":56.0,"rank_v2":202,"rank_v2_delta":-76,"trust_v2_adjustment":-9.9,"trust_confidence":1.0,"trust_breakdown":{"safety":7.2,"identity":10.8,"transparency":13.4,"maintenance":19.7,"adoption":14.8},"trust_v2_breakdown":{"mcp":0.0,"external_dependencies":-3.0,"tool_plugin_surface":-1.9,"package_provenance_drift":-5.0},"pending_signals":false},{"name":"Jido","repo":"agentjido/jido","display_repo":"","url":"https://github.com/agentjido/jido","rank":203,"previous_rank":203,"rank_delta":0,"stars":1761,"stars_fmt":"1.8k","forks":111,"forks_fmt":"111","last_push":"2026-07-10","days_ago":1,"weekly_commits":5,"commits_low_confidence":true,"score":63.7,"description":"🤖 Autonomous agent framework for Elixir. Built for distributed, autonomous behavior and dynamic workflows.","language":"Elixir","open_issues":2,"category":"Agent Frameworks","category_rank":45,"npm_package":"","crate_package":"","pypi_package":"","weekly_downloads":null,"dl_source":"","hn_mentions_30d":null,"has_provenance":false,"npm_provenance":null,"pypi_provenance":null,"signed_commits_ratio":0.95,"scorecard_score":5.2,"scorecard_checks":{"Binary-Artifacts":10,"Branch-Protection":3,"CI-Tests":10,"CII-Best-Practices":0,"Code-Review":0,"Contributors":10,"Dangerous-Workflow":10,"Dependency-Update-Tool":10,"Fuzzing":0,"License":10,"Maintained":10,"Packaging":-1,"Pinned-Dependencies":0,"SAST":0,"Security-Policy":0,"Signed-Releases":-1,"Token-Permissions":0,"Vulnerabilities":8},"scorecard_scanned_at":"2026-07-10T08:36:16Z","slug":"jido","source_note":"","public_actions":null,"mcp_server_support":{"status":"none","confidence":null,"evidence":[]},"external_service_dependencies":{"providers":[],"requires_api_keys":false,"confidence":null,"evidence":[]},"tool_plugin_surface":{"plugin_system":"declared","tool_tags":[],"confidence":"medium","evidence":["README/docs mention a declared plugin/integration surface"]},"package_provenance_drift":{"status":"not_applicable","confidence":null,"summary":"No package source configured","evidence":[]},"evidence_grade":"C","coverage_grade":"C","signal_coverage":0.4,"signal_types":2,"listing_status":"listed","display_listing_status":"listed","display_status_label":"Listed","has_warning":false,"warning_reasons":[],"license_spdx":"Apache-2.0","license_type":"open","license_override":"","trust_score":55.9,"trust_score_v2":55.9,"rank_v2":203,"rank_v2_delta":10,"trust_v2_adjustment":-0.3,"trust_confidence":1.0,"trust_breakdown":{"safety":11.2,"identity":10.8,"transparency":12.9,"maintenance":13.5,"adoption":7.8},"trust_v2_breakdown":{"mcp":0.0,"external_dependencies":-0.0,"tool_plugin_surface":-0.3,"package_provenance_drift":0.0},"pending_signals":false},{"name":"Atomic Agents","repo":"BrainBlend-AI/atomic-agents","display_repo":"","url":"https://github.com/Eigenwise/atomic-agents","rank":204,"previous_rank":204,"rank_delta":0,"stars":6033,"stars_fmt":"6.0k","forks":512,"forks_fmt":"512","last_push":"2026-07-10","days_ago":1,"weekly_commits":18,"commits_low_confidence":false,"score":76.2,"description":"Building AI agents, atomically","language":"Python","open_issues":7,"category":"Agent Frameworks","category_rank":46,"npm_package":"","crate_package":"","pypi_package":"atomic-agents","weekly_downloads":5055,"dl_source":"pypi","hn_mentions_30d":0,"has_provenance":false,"npm_provenance":null,"pypi_provenance":false,"signed_commits_ratio":0.31,"scorecard_score":4.8,"scorecard_checks":{"Binary-Artifacts":10,"Branch-Protection":5,"CI-Tests":10,"CII-Best-Practices":0,"Code-Review":0,"Contributors":10,"Dangerous-Workflow":10,"Dependency-Update-Tool":0,"Fuzzing":0,"License":10,"Maintained":10,"Packaging":-1,"Pinned-Dependencies":0,"SAST":2,"Security-Policy":0,"Signed-Releases":-1,"Token-Permissions":10,"Vulnerabilities":0},"scorecard_scanned_at":"2026-07-11T03:30:16Z","slug":"atomic-agents","source_note":"","public_actions":null,"mcp_server_support":{"status":"declared","confidence":"medium","evidence":["Found MCP-related server path: atomic-examples/mcp-agent/example-mcp-server/README.md","Found MCP-related server path: atomic-examples/mcp-agent/example-mcp-server/demo_tools.py"]},"external_service_dependencies":{"providers":["Anthropic","OpenAI"],"requires_api_keys":false,"confidence":"high","evidence":["Found OpenAI dependency 'openai' in pyproject.toml","README/docs also mention OpenAI","Found Anthropic dependency 'anthropic' in atomic-examples/quickstart/pyproject.toml","README/docs also mention Anthropic"]},"tool_plugin_surface":{"plugin_system":"declared","tool_tags":["code"],"confidence":"high","evidence":["README/docs mention a declared plugin/integration surface","Found code dependency 'gitpython' in pyproject.toml","README/docs also mention code capabilities"]},"package_provenance_drift":{"status":"warning","confidence":"high","summary":"1 package source mismatch detected","evidence":["pypi package 'atomic-agents' points to eigenwise/atomic-agents, not brainblend-ai/atomic-agents"]},"evidence_grade":"C","coverage_grade":"A","signal_coverage":0.8,"signal_types":4,"listing_status":"listed","display_listing_status":"listed","display_status_label":"Listed","has_warning":false,"warning_reasons":[],"license_spdx":"MIT","license_type":"open","license_override":"","trust_score":55.8,"trust_score_v2":55.8,"rank_v2":204,"rank_v2_delta":-43,"trust_v2_adjustment":-6.1,"trust_confidence":1.0,"trust_breakdown":{"safety":7.5,"identity":10.8,"transparency":12.6,"maintenance":17.0,"adoption":14.0},"trust_v2_breakdown":{"mcp":0.0,"external_dependencies":-0.5,"tool_plugin_surface":-0.6,"package_provenance_drift":-5.0},"pending_signals":false},{"name":"Qdrant","repo":"qdrant/qdrant","display_repo":"","url":"https://github.com/qdrant/qdrant","rank":205,"previous_rank":205,"rank_delta":0,"stars":33138,"stars_fmt":"33.1k","forks":2484,"forks_fmt":"2.5k","last_push":"2026-07-10","days_ago":1,"weekly_commits":0,"commits_low_confidence":false,"score":67.9,"description":"Qdrant - High-performance, massive-scale Vector Database and Vector Search Engine for the next generation of AI. Also av","language":"Rust","open_issues":458,"category":"Memory & Knowledge","category_rank":22,"npm_package":"","crate_package":"qdrant","pypi_package":"qdrant-client","weekly_downloads":5790337,"dl_source":"pypi","hn_mentions_30d":2,"has_provenance":false,"npm_provenance":null,"pypi_provenance":false,"signed_commits_ratio":null,"scorecard_score":5.0,"scorecard_checks":{"Binary-Artifacts":10,"Branch-Protection":6,"CI-Tests":10,"CII-Best-Practices":0,"Code-Review":0,"Contributors":10,"Dangerous-Workflow":10,"Dependency-Update-Tool":10,"Fuzzing":0,"License":10,"Maintained":10,"Packaging":10,"Pinned-Dependencies":7,"SAST":0,"Security-Policy":0,"Signed-Releases":0,"Token-Permissions":0,"Vulnerabilities":0},"scorecard_scanned_at":"2026-07-11T04:08:46Z","slug":"qdrant","source_note":"","public_actions":null,"mcp_server_support":{"status":"none","confidence":null,"evidence":[]},"external_service_dependencies":{"providers":["Qdrant"],"requires_api_keys":false,"confidence":"high","evidence":["README/docs mention Qdrant","Found Qdrant dependency 'qdrant' in tests/pyproject.toml"]},"tool_plugin_surface":{"plugin_system":"declared","tool_tags":["code","database","search"],"confidence":"high","evidence":["README/docs mention a declared plugin/integration surface","README/docs mention search capabilities","README/docs mention database capabilities","README/docs mention code capabilities"]},"package_provenance_drift":{"status":"warning","confidence":"high","summary":"1 package source mismatch detected","evidence":["pypi package 'qdrant-client' points to qdrant/qdrant-client, not qdrant/qdrant","crates.io package 'qdrant' points to the tracked repo"]},"evidence_grade":"C","coverage_grade":"A","signal_coverage":0.8,"signal_types":4,"listing_status":"listed","display_listing_status":"listed","display_status_label":"Listed","has_warning":false,"warning_reasons":[],"license_spdx":"Apache-2.0","license_type":"open","license_override":"","trust_score":55.4,"trust_score_v2":55.4,"rank_v2":205,"rank_v2_delta":-41,"trust_v2_adjustment":-6.2,"trust_confidence":1.0,"trust_breakdown":{"safety":6.2,"identity":10.8,"transparency":12.8,"maintenance":11.9,"adoption":19.9},"trust_v2_breakdown":{"mcp":0.0,"external_dependencies":-0.0,"tool_plugin_surface":-1.2,"package_provenance_drift":-5.0},"pending_signals":false},{"name":"Letta","repo":"letta-ai/letta","display_repo":"","url":"https://github.com/letta-ai/letta","rank":206,"previous_rank":206,"rank_delta":0,"stars":23736,"stars_fmt":"23.7k","forks":2512,"forks_fmt":"2.5k","last_push":"2026-07-03","days_ago":8,"weekly_commits":3,"commits_low_confidence":false,"score":73.6,"description":"Platform for stateful agents: AI with advanced memory that can learn and self-improve over time.","language":"Python","open_issues":26,"category":"Memory & Knowledge","category_rank":23,"npm_package":"","crate_package":"","pypi_package":"letta","weekly_downloads":26840,"dl_source":"pypi","hn_mentions_30d":1,"has_provenance":false,"npm_provenance":null,"pypi_provenance":false,"signed_commits_ratio":0.03,"scorecard_score":4.3,"scorecard_checks":{"Binary-Artifacts":10,"Branch-Protection":5,"CI-Tests":10,"CII-Best-Practices":0,"Code-Review":8,"Contributors":10,"Dangerous-Workflow":0,"Dependency-Update-Tool":0,"Fuzzing":0,"License":10,"Maintained":10,"Packaging":10,"Pinned-Dependencies":0,"SAST":0,"Security-Policy":10,"Signed-Releases":-1,"Token-Permissions":0,"Vulnerabilities":0},"scorecard_scanned_at":"2026-07-11T01:22:58Z","slug":"letta","source_note":"","public_actions":null,"mcp_server_support":{"status":"implemented","confidence":"high","evidence":["Found MCP-related server path: alembic/versions/56254216524f_add_custom_headers_to_mcp_server.py","Found MCP-related server path: alembic/versions/9ecbdbaa409f_add_table_to_store_mcp_servers.py","Found MCP-related server test path: tests/mock_mcp_server.py","Found MCP-related server test path: tests/sdk/mcp_servers_test.py"]},"external_service_dependencies":{"providers":["Amazon Bedrock","Anthropic","E2B","OpenAI","Pinecone","Postgres","Redis","Tavily"],"requires_api_keys":true,"confidence":"high","evidence":["README/docs mention OpenAI","Found OpenAI dependency 'openai' in pyproject.toml","Found Anthropic dependency 'anthropic' in pyproject.toml","Found Amazon Bedrock dependency 'bedrock' in pyproject.toml","Found Pinecone dependency 'pinecone' in pyproject.toml","Found Tavily dependency 'tavily' in pyproject.toml"]},"tool_plugin_surface":{"plugin_system":"declared","tool_tags":["code","database","search","shell"],"confidence":"high","evidence":["Found declared path: letta/plugins/README.md","README/docs mention shell capabilities","Found search dependency 'tavily' in pyproject.toml","Found database dependency 'postgres' in pyproject.toml","README/docs mention code capabilities"]},"package_provenance_drift":{"status":"unknown","confidence":"low","summary":"Package source metadata is missing or inconclusive","evidence":["pypi package 'letta' has a non-GitHub or unparseable source URL"]},"evidence_grade":"C","coverage_grade":"A","signal_coverage":0.8,"signal_types":4,"listing_status":"listed","display_listing_status":"listed","display_status_label":"Listed","has_warning":false,"warning_reasons":[],"license_spdx":"Apache-2.0","license_type":"open","license_override":"","trust_score":55.3,"trust_score_v2":55.3,"rank_v2":206,"rank_v2_delta":-17,"trust_v2_adjustment":-3.5,"trust_confidence":1.0,"trust_breakdown":{"safety":5.5,"identity":10.8,"transparency":12.2,"maintenance":13.9,"adoption":16.4},"trust_v2_breakdown":{"mcp":2.0,"external_dependencies":-4.0,"tool_plugin_surface":-1.5,"package_provenance_drift":0.0},"pending_signals":false},{"name":"TencentDB Agent Memory","repo":"TencentCloud/TencentDB-Agent-Memory","display_repo":"","url":"https://github.com/TencentCloud/TencentDB-Agent-Memory","rank":207,"previous_rank":207,"rank_delta":0,"stars":8296,"stars_fmt":"8.3k","forks":762,"forks_fmt":"762","last_push":"2026-06-26","days_ago":15,"weekly_commits":14,"commits_low_confidence":false,"score":74.5,"description":"TencentDB Agent Memory delivers fully local long-term memory for AI Agents via a 4-tier progressive pipeline, with zero ","language":"TypeScript","open_issues":47,"category":"Needs review","category_rank":6,"npm_package":"","crate_package":"","pypi_package":"","weekly_downloads":null,"dl_source":"","hn_mentions_30d":null,"has_provenance":false,"npm_provenance":null,"pypi_provenance":null,"signed_commits_ratio":0.468,"scorecard_score":4.8,"scorecard_checks":{"Binary-Artifacts":10,"Branch-Protection":1,"CI-Tests":6,"CII-Best-Practices":0,"Code-Review":9,"Contributors":3,"Dangerous-Workflow":10,"Dependency-Update-Tool":0,"Fuzzing":0,"License":9,"Maintained":10,"Packaging":-1,"Pinned-Dependencies":0,"SAST":0,"Security-Policy":0,"Signed-Releases":-1,"Token-Permissions":0,"Vulnerabilities":10},"scorecard_scanned_at":"2026-07-10T17:26:10Z","slug":"tencentdb-agent-memory","source_note":"","public_actions":null,"mcp_server_support":{"status":"none","confidence":null,"evidence":[]},"external_service_dependencies":{"providers":["OpenAI"],"requires_api_keys":true,"confidence":"high","evidence":["README/docs mention OpenAI","Found OpenAI dependency 'openai' in package.json"]},"tool_plugin_surface":{"plugin_system":"declared","tool_tags":["code","search"],"confidence":"high","evidence":["README/docs mention a declared plugin/integration surface","README/docs mention search capabilities","README/docs mention code capabilities"]},"package_provenance_drift":{"status":"not_applicable","confidence":null,"summary":"No package source configured","evidence":[]},"evidence_grade":"C","coverage_grade":"C","signal_coverage":0.4,"signal_types":2,"listing_status":"listed","display_listing_status":"listed","display_status_label":"Listed","has_warning":false,"warning_reasons":[],"license_spdx":"NOASSERTION","license_type":"open","license_override":"","trust_score":54.9,"trust_score_v2":54.9,"rank_v2":207,"rank_v2_delta":1,"trust_v2_adjustment":-1.9,"trust_confidence":1.0,"trust_breakdown":{"safety":8.3,"identity":10.8,"transparency":12.6,"maintenance":15.7,"adoption":9.4},"trust_v2_breakdown":{"mcp":0.0,"external_dependencies":-1.0,"tool_plugin_surface":-0.9,"package_provenance_drift":0.0},"pending_signals":false},{"name":"Lumibot","repo":"Lumiwealth/lumibot","display_repo":"","url":"https://github.com/Lumiwealth/lumibot","rank":208,"previous_rank":208,"rank_delta":0,"stars":1803,"stars_fmt":"1.8k","forks":345,"forks_fmt":"345","last_push":"2026-07-10","days_ago":1,"weekly_commits":176,"commits_low_confidence":false,"score":81.3,"description":"Backtestable AI trading agents and Python algorithmic trading strategies for stocks, options, crypto, futures, forex, SE","language":"Python","open_issues":62,"category":"Research & Data","category_rank":9,"npm_package":"","crate_package":"","pypi_package":"","weekly_downloads":null,"dl_source":"","hn_mentions_30d":null,"has_provenance":false,"npm_provenance":null,"pypi_provenance":null,"signed_commits_ratio":0.18,"scorecard_score":5.3,"scorecard_checks":{"Binary-Artifacts":9,"Branch-Protection":8,"CI-Tests":6,"CII-Best-Practices":0,"Code-Review":0,"Contributors":10,"Dangerous-Workflow":10,"Dependency-Update-Tool":0,"Fuzzing":0,"License":10,"Maintained":10,"Packaging":10,"Pinned-Dependencies":0,"SAST":6,"Security-Policy":4,"Signed-Releases":-1,"Token-Permissions":0,"Vulnerabilities":6},"scorecard_scanned_at":"2026-07-10T08:41:51Z","slug":"lumibot","source_note":"","public_actions":null,"mcp_server_support":{"status":"none","confidence":null,"evidence":[]},"external_service_dependencies":{"providers":["Amazon Bedrock","Google Gemini","OpenAI","Postgres"],"requires_api_keys":true,"confidence":"high","evidence":["README/docs mention OpenAI","Found OpenAI dependency 'openai' in setup.py","README/docs mention Google Gemini","Found Google Gemini credential/config marker 'GEMINI_API_KEY'","Found Amazon Bedrock dependency 'boto3' in setup.py","Found Postgres dependency 'psycopg' in setup.py"]},"tool_plugin_surface":{"plugin_system":"marketplace","tool_tags":["code","database","search"],"confidence":"high","evidence":["README/docs mention a marketplace plugin/integration surface","README/docs mention search capabilities","Found database dependency 'pg' in setup.py","README/docs mention code capabilities"]},"package_provenance_drift":{"status":"not_applicable","confidence":null,"summary":"No package source configured","evidence":[]},"evidence_grade":"C","coverage_grade":"C","signal_coverage":0.4,"signal_types":2,"listing_status":"listed","display_listing_status":"listed","display_status_label":"Listed","has_warning":false,"warning_reasons":[],"license_spdx":"GPL-3.0","license_type":"open","license_override":"","trust_score":54.6,"trust_score_v2":54.6,"rank_v2":208,"rank_v2_delta":-20,"trust_v2_adjustment":-4.4,"trust_confidence":1.0,"trust_breakdown":{"safety":7.5,"identity":10.8,"transparency":13.0,"maintenance":19.9,"adoption":7.8},"trust_v2_breakdown":{"mcp":0.0,"external_dependencies":-2.5,"tool_plugin_surface":-1.9,"package_provenance_drift":0.0},"pending_signals":false},{"name":"Tabby","repo":"TabbyML/tabby","display_repo":"","url":"https://github.com/TabbyML/tabby","rank":209,"previous_rank":209,"rank_delta":0,"stars":33687,"stars_fmt":"33.7k","forks":1763,"forks_fmt":"1.8k","last_push":"2026-06-30","days_ago":11,"weekly_commits":1,"commits_low_confidence":false,"score":69.7,"description":"Self-hosted AI coding assistant","language":"Rust","open_issues":257,"category":"Coding Agents","category_rank":29,"npm_package":"","crate_package":"","pypi_package":"","weekly_downloads":null,"dl_source":"","hn_mentions_30d":0,"has_provenance":false,"npm_provenance":null,"pypi_provenance":null,"signed_commits_ratio":0.99,"scorecard_score":4.4,"scorecard_checks":{"Binary-Artifacts":9,"Branch-Protection":3,"CI-Tests":8,"CII-Best-Practices":0,"Code-Review":8,"Contributors":10,"Dangerous-Workflow":10,"Dependency-Update-Tool":10,"Fuzzing":0,"License":9,"Maintained":2,"Packaging":10,"Pinned-Dependencies":0,"SAST":0,"Security-Policy":0,"Signed-Releases":0,"Token-Permissions":0,"Vulnerabilities":0},"scorecard_scanned_at":"2026-07-11T03:30:51Z","slug":"tabby","source_note":"","public_actions":null,"mcp_server_support":{"status":"none","confidence":null,"evidence":[]},"external_service_dependencies":{"providers":["OpenAI","Redis"],"requires_api_keys":false,"confidence":"high","evidence":["Found OpenAI dependency 'openai' in ee/tabby-ui/package.json","Found Redis dependency 'redis' in clients/vscode/package.json"]},"tool_plugin_surface":{"plugin_system":"marketplace","tool_tags":["code","database","filesystem"],"confidence":"high","evidence":["README/docs mention a marketplace plugin/integration surface","Found filesystem dependency 'fs-extra' in clients/vscode/package.json","Found database dependency 'redis' in clients/vscode/package.json","README/docs mention code capabilities"]},"package_provenance_drift":{"status":"not_applicable","confidence":null,"summary":"No package source configured","evidence":[]},"evidence_grade":"C","coverage_grade":"B","signal_coverage":0.6,"signal_types":3,"listing_status":"listed","display_listing_status":"listed","display_status_label":"Listed","has_warning":false,"warning_reasons":[],"license_spdx":"NOASSERTION","license_type":"open","license_override":"","trust_score":54.5,"trust_score_v2":54.5,"rank_v2":209,"rank_v2_delta":-2,"trust_v2_adjustment":-2.4,"trust_confidence":1.0,"trust_breakdown":{"safety":10.5,"identity":10.8,"transparency":12.2,"maintenance":12.5,"adoption":10.9},"trust_v2_breakdown":{"mcp":0.0,"external_dependencies":-0.5,"tool_plugin_surface":-1.9,"package_provenance_drift":0.0},"pending_signals":false},{"name":"IntentKit","repo":"crestalnetwork/intentkit","display_repo":"","url":"https://github.com/crestalnetwork/intentkit","rank":210,"previous_rank":210,"rank_delta":0,"stars":6505,"stars_fmt":"6.5k","forks":712,"forks_fmt":"712","last_push":"2026-07-01","days_ago":10,"weekly_commits":33,"commits_low_confidence":false,"score":79.1,"description":"IntentKit is an open-source, self-hosted cloud agent cluster that manages a collaborative team of AI agents for you.","language":"Python","open_issues":57,"category":"Agent Frameworks","category_rank":47,"npm_package":"","crate_package":"","pypi_package":"","weekly_downloads":null,"dl_source":"","hn_mentions_30d":null,"has_provenance":false,"npm_provenance":null,"pypi_provenance":null,"signed_commits_ratio":0.0,"scorecard_score":5.6,"scorecard_checks":{"Binary-Artifacts":10,"Branch-Protection":3,"CI-Tests":-1,"CII-Best-Practices":0,"Code-Review":0,"Contributors":10,"Dangerous-Workflow":10,"Dependency-Update-Tool":10,"Fuzzing":0,"License":10,"Maintained":10,"Packaging":10,"Pinned-Dependencies":4,"SAST":0,"Security-Policy":0,"Signed-Releases":-1,"Token-Permissions":8,"Vulnerabilities":0},"scorecard_scanned_at":"2026-07-10T18:33:17Z","slug":"intentkit","source_note":"","public_actions":null,"mcp_server_support":{"status":"none","confidence":null,"evidence":[]},"external_service_dependencies":{"providers":["Amazon Bedrock","Anthropic","OpenAI","Postgres","Redis","Supabase"],"requires_api_keys":false,"confidence":"high","evidence":["Found OpenAI dependency 'openai' in pyproject.toml","Found Anthropic dependency 'anthropic' in pyproject.toml","Found Amazon Bedrock dependency 'boto3' in pyproject.toml","Found Supabase dependency 'supabase' in pyproject.toml","Found Postgres dependency 'psycopg' in pyproject.toml","Found Redis dependency 'redis' in pyproject.toml"]},"tool_plugin_surface":{"plugin_system":"declared","tool_tags":["code","database"],"confidence":"high","evidence":["README/docs mention a declared plugin/integration surface","Found database dependency 'postgres' in pyproject.toml","README/docs mention code capabilities"]},"package_provenance_drift":{"status":"not_applicable","confidence":null,"summary":"No package source configured","evidence":[]},"evidence_grade":"C","coverage_grade":"C","signal_coverage":0.4,"signal_types":2,"listing_status":"listed","display_listing_status":"listed","display_status_label":"Listed","has_warning":false,"warning_reasons":[],"license_spdx":"MIT","license_type":"open","license_override":"","trust_score":54.3,"trust_score_v2":54.3,"rank_v2":210,"rank_v2_delta":-10,"trust_v2_adjustment":-3.4,"trust_confidence":1.0,"trust_breakdown":{"safety":7.0,"identity":10.8,"transparency":13.3,"maintenance":17.4,"adoption":9.2},"trust_v2_breakdown":{"mcp":0.0,"external_dependencies":-2.5,"tool_plugin_surface":-0.9,"package_provenance_drift":0.0},"pending_signals":false},{"name":"ChatDev","repo":"OpenBMB/ChatDev","display_repo":"","url":"https://github.com/OpenBMB/ChatDev","rank":211,"previous_rank":211,"rank_delta":0,"stars":33702,"stars_fmt":"33.7k","forks":4198,"forks_fmt":"4.2k","last_push":"2026-06-29","days_ago":12,"weekly_commits":2,"commits_low_confidence":false,"score":73.5,"description":"ChatDev 2.0: Dev All through LLM-powered Multi-Agent Collaboration","language":"Python","open_issues":44,"category":"Multi-Agent Systems","category_rank":13,"npm_package":"","crate_package":"","pypi_package":"chatdev","weekly_downloads":22,"dl_source":"pypi","hn_mentions_30d":16,"has_provenance":false,"npm_provenance":null,"pypi_provenance":false,"signed_commits_ratio":null,"scorecard_score":4.0,"scorecard_checks":{"Binary-Artifacts":10,"Branch-Protection":6,"CI-Tests":0,"CII-Best-Practices":0,"Code-Review":6,"Contributors":10,"Dangerous-Workflow":10,"Dependency-Update-Tool":0,"Fuzzing":0,"License":10,"Maintained":10,"Packaging":-1,"Pinned-Dependencies":1,"SAST":0,"Security-Policy":0,"Signed-Releases":0,"Token-Permissions":0,"Vulnerabilities":0},"scorecard_scanned_at":"2026-07-11T03:02:05Z","slug":"chatdev","source_note":"","public_actions":null,"mcp_server_support":{"status":"implemented","confidence":"high","evidence":["Found MCP-related server path: mcp_example/mcp_server.py","Found MCP dependency 'fastmcp' in pyproject.toml","Found MCP dependency 'fastmcp' in requirements.txt"]},"external_service_dependencies":{"providers":["OpenAI"],"requires_api_keys":false,"confidence":"medium","evidence":["Found OpenAI dependency 'openai' in pyproject.toml"]},"tool_plugin_surface":{"plugin_system":"extension-based","tool_tags":["browser","code"],"confidence":"high","evidence":["README/docs mention a extension-based plugin/integration surface","README/docs mention browser capabilities","README/docs mention code capabilities"]},"package_provenance_drift":{"status":"unknown","confidence":"low","summary":"Package source metadata is missing or inconclusive","evidence":["pypi package 'chatdev' has a non-GitHub or unparseable source URL"]},"evidence_grade":"C","coverage_grade":"A","signal_coverage":0.8,"signal_types":4,"listing_status":"listed","display_listing_status":"listed","display_status_label":"Listed","has_warning":false,"warning_reasons":[],"license_spdx":"Apache-2.0","license_type":"open","license_override":"","trust_score":54.3,"trust_score_v2":54.3,"rank_v2":211,"rank_v2_delta":16,"trust_v2_adjustment":0.8,"trust_confidence":1.0,"trust_breakdown":{"safety":5.0,"identity":10.8,"transparency":11.9,"maintenance":13.1,"adoption":12.7},"trust_v2_breakdown":{"mcp":2.0,"external_dependencies":-0.0,"tool_plugin_surface":-1.2,"package_provenance_drift":0.0},"pending_signals":false},{"name":"Agently","repo":"AgentEra/Agently","display_repo":"","url":"https://github.com/AgentEra/Agently","rank":212,"previous_rank":212,"rank_delta":0,"stars":1617,"stars_fmt":"1.6k","forks":176,"forks_fmt":"176","last_push":"2026-07-10","days_ago":1,"weekly_commits":322,"commits_low_confidence":false,"score":79.8,"description":"[GenAI Application Development Framework]  🚀 Build GenAI application quick and easy 💬 Easy to interact with GenAI agent ","language":"Python","open_issues":8,"category":"Agent Frameworks","category_rank":48,"npm_package":"","crate_package":"","pypi_package":"","weekly_downloads":null,"dl_source":"","hn_mentions_30d":null,"has_provenance":false,"npm_provenance":null,"pypi_provenance":null,"signed_commits_ratio":0.05,"scorecard_score":4.1,"scorecard_checks":{"Binary-Artifacts":10,"Branch-Protection":0,"CI-Tests":0,"CII-Best-Practices":0,"Code-Review":2,"Contributors":10,"Dangerous-Workflow":10,"Dependency-Update-Tool":0,"Fuzzing":0,"License":10,"Maintained":10,"Packaging":-1,"Pinned-Dependencies":0,"SAST":0,"Security-Policy":0,"Signed-Releases":-1,"Token-Permissions":0,"Vulnerabilities":9},"scorecard_scanned_at":"2026-07-10T17:39:14Z","slug":"agently","source_note":"","public_actions":null,"mcp_server_support":{"status":"declared","confidence":"medium","evidence":["Found MCP-related server path: examples/action_runtime/_calculator_mcp_server.py","Found MCP-related server path: examples/agent_task_experiments/_mixed_business_mcp_server.py","Found MCP-related server test path: tests/test_cores/cal_mcp_server.py"]},"external_service_dependencies":{"providers":["OpenAI"],"requires_api_keys":true,"confidence":"high","evidence":["Found OpenAI credential/config marker 'OPENAI_API_KEY'","README/docs also mention OpenAI"]},"tool_plugin_surface":{"plugin_system":"extension-based","tool_tags":[],"confidence":"medium","evidence":["README/docs mention a extension-based plugin/integration surface"]},"package_provenance_drift":{"status":"not_applicable","confidence":null,"summary":"No package source configured","evidence":[]},"evidence_grade":"C","coverage_grade":"C","signal_coverage":0.4,"signal_types":2,"listing_status":"listed","display_listing_status":"listed","display_status_label":"Listed","has_warning":false,"warning_reasons":[],"license_spdx":"Apache-2.0","license_type":"open","license_override":"","trust_score":54.2,"trust_score_v2":54.2,"rank_v2":212,"rank_v2_delta":3,"trust_v2_adjustment":-1.6,"trust_confidence":1.0,"trust_breakdown":{"safety":5.4,"identity":10.8,"transparency":12.0,"maintenance":19.9,"adoption":7.7},"trust_v2_breakdown":{"mcp":0.0,"external_dependencies":-1.0,"tool_plugin_surface":-0.6,"package_provenance_drift":0.0},"pending_signals":false},{"name":"ControlFlow","repo":"PrefectHQ/ControlFlow","display_repo":"","url":"https://github.com/prefect-archive/ControlFlow","rank":213,"previous_rank":213,"rank_delta":0,"stars":1392,"stars_fmt":"1.4k","forks":114,"forks_fmt":"114","last_push":"2025-08-22","days_ago":323,"weekly_commits":0,"commits_low_confidence":false,"score":28.5,"description":"🦾 Take control of your AI agents","language":"Python","open_issues":35,"category":"Agent Frameworks","category_rank":49,"npm_package":"","crate_package":"","pypi_package":"controlflow","weekly_downloads":1703,"dl_source":"pypi","hn_mentions_30d":1,"has_provenance":true,"npm_provenance":null,"pypi_provenance":true,"signed_commits_ratio":0.29,"scorecard_score":4.1,"scorecard_checks":{"Binary-Artifacts":10,"Branch-Protection":1,"CI-Tests":1,"CII-Best-Practices":0,"Code-Review":6,"Contributors":10,"Dangerous-Workflow":10,"Dependency-Update-Tool":0,"Fuzzing":0,"License":10,"Maintained":0,"Packaging":-1,"Pinned-Dependencies":0,"SAST":7,"Security-Policy":0,"Signed-Releases":-1,"Token-Permissions":8,"Vulnerabilities":0},"scorecard_scanned_at":"2026-07-08T08:28:47Z","slug":"controlflow","source_note":"","public_actions":null,"mcp_server_support":{"status":"none","confidence":null,"evidence":[]},"external_service_dependencies":{"providers":["Anthropic","OpenAI"],"requires_api_keys":true,"confidence":"high","evidence":["README/docs mention OpenAI","Found OpenAI dependency 'openai' in pyproject.toml","Found OpenAI credential/config marker 'OPENAI_API_KEY'","Found Anthropic dependency 'anthropic' in pyproject.toml"]},"tool_plugin_surface":{"plugin_system":"declared","tool_tags":["code"],"confidence":"high","evidence":["README/docs mention a declared plugin/integration surface","README/docs mention code capabilities"]},"package_provenance_drift":{"status":"unknown","confidence":"low","summary":"Package source metadata is missing or inconclusive","evidence":["pypi package 'controlflow' has a non-GitHub or unparseable source URL"]},"evidence_grade":"C","coverage_grade":"A","signal_coverage":0.8,"signal_types":4,"listing_status":"warning","display_listing_status":"warning","display_status_label":"Needs review","has_warning":true,"warning_reasons":[{"repo":"PrefectHQ/ControlFlow","criterion":"5.1","detail":"repository is archived"}],"license_spdx":"Apache-2.0","license_type":"open","license_override":"","trust_score":53.9,"trust_score_v2":53.9,"rank_v2":213,"rank_v2_delta":1,"trust_v2_adjustment":-2.1,"trust_confidence":1.0,"trust_breakdown":{"safety":14.1,"identity":18.0,"transparency":12.0,"maintenance":0.0,"adoption":11.9},"trust_v2_breakdown":{"mcp":0.0,"external_dependencies":-1.5,"tool_plugin_surface":-0.6,"package_provenance_drift":0.0},"pending_signals":false},{"name":"Yao","repo":"YaoApp/yao","display_repo":"","url":"https://github.com/YaoApp/yao","rank":214,"previous_rank":214,"rank_delta":0,"stars":7546,"stars_fmt":"7.5k","forks":685,"forks_fmt":"685","last_push":"2026-07-10","days_ago":1,"weekly_commits":48,"commits_low_confidence":false,"score":82.6,"description":"✨ Build AI agents and web apps — with a single binary.","language":"Go","open_issues":2,"category":"UI & App Builders","category_rank":10,"npm_package":"","crate_package":"","pypi_package":"","weekly_downloads":null,"dl_source":"","hn_mentions_30d":null,"has_provenance":false,"npm_provenance":null,"pypi_provenance":null,"signed_commits_ratio":0.15,"scorecard_score":3.3,"scorecard_checks":{"Binary-Artifacts":10,"Branch-Protection":0,"CI-Tests":8,"CII-Best-Practices":0,"Code-Review":0,"Contributors":3,"Dangerous-Workflow":10,"Dependency-Update-Tool":0,"Fuzzing":0,"License":9,"Maintained":10,"Packaging":10,"Pinned-Dependencies":0,"SAST":0,"Security-Policy":0,"Signed-Releases":0,"Token-Permissions":0,"Vulnerabilities":0},"scorecard_scanned_at":"2026-07-10T08:49:09Z","slug":"yao","source_note":"","public_actions":null,"mcp_server_support":{"status":"declared","confidence":"medium","evidence":["README/docs mention MCP support","Found MCP-related server path: dsl/mcp/server.go","Found MCP-related server path: unit-test/agent/app/openapi/scopes/mcp/servers.yml"]},"external_service_dependencies":{"providers":["Anthropic","OpenAI"],"requires_api_keys":false,"confidence":"high","evidence":["README/docs mention OpenAI","README/docs mention Anthropic"]},"tool_plugin_surface":{"plugin_system":"declared","tool_tags":["search"],"confidence":"high","evidence":["Found declared path: plugin/README.md","README/docs mention search capabilities"]},"package_provenance_drift":{"status":"not_applicable","confidence":null,"summary":"No package source configured","evidence":[]},"evidence_grade":"C","coverage_grade":"C","signal_coverage":0.4,"signal_types":2,"listing_status":"listed","display_listing_status":"listed","display_status_label":"Listed","has_warning":false,"warning_reasons":[],"license_spdx":"NOASSERTION","license_type":"open","license_override":"","trust_score":53.9,"trust_score_v2":53.9,"rank_v2":214,"rank_v2_delta":4,"trust_v2_adjustment":-1.1,"trust_confidence":1.0,"trust_breakdown":{"safety":4.9,"identity":10.8,"transparency":11.3,"maintenance":18.7,"adoption":9.3},"trust_v2_breakdown":{"mcp":0.0,"external_dependencies":-0.5,"tool_plugin_surface":-0.6,"package_provenance_drift":0.0},"pending_signals":false},{"name":"Grok CLI","repo":"superagent-ai/grok-cli","display_repo":"","url":"https://github.com/superagent-ai/grok-cli","rank":215,"previous_rank":216,"rank_delta":1,"stars":3240,"stars_fmt":"3.2k","forks":396,"forks_fmt":"396","last_push":"2026-07-06","days_ago":5,"weekly_commits":0,"commits_low_confidence":false,"score":57.6,"description":"An open-source coding agent for the Grok API","language":"TypeScript","open_issues":16,"category":"Coding Agents","category_rank":30,"npm_package":"grok-dev","crate_package":"","pypi_package":"","weekly_downloads":147,"dl_source":"npm","hn_mentions_30d":null,"has_provenance":false,"npm_provenance":false,"pypi_provenance":null,"signed_commits_ratio":0.83,"scorecard_score":3.8,"scorecard_checks":{"Binary-Artifacts":10,"Branch-Protection":3,"CI-Tests":10,"CII-Best-Practices":0,"Code-Review":2,"Contributors":3,"Dangerous-Workflow":10,"Dependency-Update-Tool":0,"Fuzzing":0,"License":10,"Maintained":10,"Packaging":-1,"Pinned-Dependencies":0,"SAST":7,"Security-Policy":0,"Signed-Releases":0,"Token-Permissions":0,"Vulnerabilities":0},"scorecard_scanned_at":"2026-07-10T08:51:59Z","slug":"grok-cli","source_note":"","public_actions":null,"mcp_server_support":{"status":"declared","confidence":"medium","evidence":["README/docs mention MCP support","Found MCP dependency '@modelcontextprotocol/sdk' in package.json"]},"external_service_dependencies":{"providers":[],"requires_api_keys":true,"confidence":"low","evidence":[]},"tool_plugin_surface":{"plugin_system":"none","tool_tags":[],"confidence":null,"evidence":[]},"package_provenance_drift":{"status":"unknown","confidence":"low","summary":"Package source metadata is missing or inconclusive","evidence":["npm package 'grok-dev' does not expose a source repo URL"]},"evidence_grade":"C","coverage_grade":"B","signal_coverage":0.6,"signal_types":3,"listing_status":"listed","display_listing_status":"listed","display_status_label":"Listed","has_warning":false,"warning_reasons":[],"license_spdx":"MIT","license_type":"open","license_override":"","trust_score":53.4,"trust_score_v2":53.4,"rank_v2":215,"rank_v2_delta":8,"trust_v2_adjustment":-1.0,"trust_confidence":1.0,"trust_breakdown":{"safety":8.9,"identity":10.8,"transparency":11.7,"maintenance":11.7,"adoption":11.3},"trust_v2_breakdown":{"mcp":0.0,"external_dependencies":-1.0,"tool_plugin_surface":-0.0,"package_provenance_drift":0.0},"pending_signals":false},{"name":"Maxun","repo":"getmaxun/maxun","display_repo":"","url":"https://github.com/getmaxun/maxun","rank":216,"previous_rank":217,"rank_delta":1,"stars":16421,"stars_fmt":"16.4k","forks":1383,"forks_fmt":"1.4k","last_push":"2026-07-10","days_ago":1,"weekly_commits":80,"commits_low_confidence":false,"score":88.7,"description":"🔥 The open-source no-code platform for web scraping, crawling, search and AI data extraction • Turn websites into struct","language":"TypeScript","open_issues":84,"category":"Research & Data","category_rank":10,"npm_package":"","crate_package":"","pypi_package":"maxun","weekly_downloads":28,"dl_source":"pypi","hn_mentions_30d":7,"has_provenance":false,"npm_provenance":null,"pypi_provenance":false,"signed_commits_ratio":0.24,"scorecard_score":4.0,"scorecard_checks":{"Binary-Artifacts":10,"Branch-Protection":1,"CI-Tests":0,"CII-Best-Practices":0,"Code-Review":2,"Contributors":10,"Dangerous-Workflow":-1,"Dependency-Update-Tool":0,"Fuzzing":0,"License":10,"Maintained":10,"Packaging":-1,"Pinned-Dependencies":0,"SAST":0,"Security-Policy":0,"Signed-Releases":-1,"Token-Permissions":-1,"Vulnerabilities":10},"scorecard_scanned_at":"2026-07-11T04:04:14Z","slug":"maxun","source_note":"","public_actions":null,"mcp_server_support":{"status":"declared","confidence":"medium","evidence":["README/docs mention MCP support","Found MCP dependency '@modelcontextprotocol/sdk' in package.json"]},"external_service_dependencies":{"providers":["Anthropic","Postgres"],"requires_api_keys":false,"confidence":"high","evidence":["Found Anthropic dependency 'anthropic' in package.json","Found Postgres dependency 'pg' in package.json"]},"tool_plugin_surface":{"plugin_system":"declared","tool_tags":["browser","code","database","search","shell"],"confidence":"high","evidence":["README/docs mention a declared plugin/integration surface","Found browser dependency 'playwright' in package.json","README/docs mention shell capabilities","README/docs mention search capabilities","Found database dependency 'pg' in package.json","README/docs mention code capabilities"]},"package_provenance_drift":{"status":"warning","confidence":"high","summary":"1 package source mismatch detected","evidence":["pypi package 'maxun' points to getmaxun/python-sdk, not getmaxun/maxun"]},"evidence_grade":"C","coverage_grade":"A","signal_coverage":0.8,"signal_types":4,"listing_status":"listed","display_listing_status":"listed","display_status_label":"Listed","has_warning":false,"warning_reasons":[],"license_spdx":"AGPL-3.0","license_type":"open","license_override":"","trust_score":53.3,"trust_score_v2":53.3,"rank_v2":216,"rank_v2_delta":-40,"trust_v2_adjustment":-7.3,"trust_confidence":1.0,"trust_breakdown":{"safety":6.2,"identity":10.8,"transparency":11.9,"maintenance":19.6,"adoption":12.1},"trust_v2_breakdown":{"mcp":0.0,"external_dependencies":-0.5,"tool_plugin_surface":-1.8,"package_provenance_drift":-5.0},"pending_signals":false},{"name":"LazyLLM","repo":"LazyAGI/LazyLLM","display_repo":"","url":"https://github.com/LazyAGI/LazyLLM","rank":217,"previous_rank":215,"rank_delta":-2,"stars":3856,"stars_fmt":"3.9k","forks":396,"forks_fmt":"396","last_push":"2026-07-10","days_ago":1,"weekly_commits":33,"commits_low_confidence":false,"score":77.6,"description":"Easiest and laziest way for  building multi-agent LLMs applications.","language":"Python","open_issues":32,"category":"Agent Frameworks","category_rank":50,"npm_package":"","crate_package":"","pypi_package":"","weekly_downloads":null,"dl_source":"","hn_mentions_30d":null,"has_provenance":false,"npm_provenance":null,"pypi_provenance":null,"signed_commits_ratio":1.0,"scorecard_score":3.0,"scorecard_checks":{"Binary-Artifacts":10,"Branch-Protection":3,"CI-Tests":0,"CII-Best-Practices":0,"Code-Review":6,"Contributors":10,"Dangerous-Workflow":0,"Dependency-Update-Tool":0,"Fuzzing":0,"License":10,"Maintained":10,"Packaging":10,"Pinned-Dependencies":0,"SAST":0,"Security-Policy":0,"Signed-Releases":0,"Token-Permissions":0,"Vulnerabilities":0},"scorecard_scanned_at":"2026-07-10T10:18:52Z","slug":"lazyllm","source_note":"","public_actions":null,"mcp_server_support":{"status":"none","confidence":null,"evidence":[]},"external_service_dependencies":{"providers":["Amazon Bedrock","OpenAI","Postgres","Redis"],"requires_api_keys":true,"confidence":"high","evidence":["README/docs mention OpenAI","Found OpenAI dependency 'openai' in pyproject.toml","Found OpenAI credential/config marker 'OPENAI_API_KEY'","Found Amazon Bedrock dependency 'boto3' in pyproject.toml","Found Postgres dependency 'psycopg' in pyproject.toml","Found Redis dependency 'redis' in pyproject.toml"]},"tool_plugin_surface":{"plugin_system":"extension-based","tool_tags":["code","database","search"],"confidence":"high","evidence":["README/docs mention a extension-based plugin/integration surface","README/docs mention search capabilities","Found database dependency 'pg' in pyproject.toml","README/docs mention code capabilities"]},"package_provenance_drift":{"status":"not_applicable","confidence":null,"summary":"No package source configured","evidence":[]},"evidence_grade":"C","coverage_grade":"C","signal_coverage":0.4,"signal_types":2,"listing_status":"listed","display_listing_status":"listed","display_status_label":"Listed","has_warning":false,"warning_reasons":[],"license_spdx":"Apache-2.0","license_type":"open","license_override":"","trust_score":53.3,"trust_score_v2":53.3,"rank_v2":217,"rank_v2_delta":-13,"trust_v2_adjustment":-4.0,"trust_confidence":1.0,"trust_breakdown":{"safety":8.8,"identity":10.8,"transparency":11.1,"maintenance":18.0,"adoption":8.6},"trust_v2_breakdown":{"mcp":0.0,"external_dependencies":-2.5,"tool_plugin_surface":-1.5,"package_provenance_drift":0.0},"pending_signals":false},{"name":"agentUniverse","repo":"agentuniverse-ai/agentUniverse","display_repo":"","url":"https://github.com/agentuniverse-ai/agentUniverse","rank":218,"previous_rank":219,"rank_delta":1,"stars":2299,"stars_fmt":"2.3k","forks":407,"forks_fmt":"407","last_push":"2026-07-10","days_ago":1,"weekly_commits":25,"commits_low_confidence":false,"score":74.9,"description":"agentUniverse is a LLM multi-agent framework that allows developers to easily build multi-agent applications. ","language":"Python","open_issues":44,"category":"Agent Frameworks","category_rank":51,"npm_package":"","crate_package":"","pypi_package":"","weekly_downloads":null,"dl_source":"","hn_mentions_30d":null,"has_provenance":false,"npm_provenance":null,"pypi_provenance":null,"signed_commits_ratio":0.53,"scorecard_score":4.1,"scorecard_checks":{"Binary-Artifacts":10,"Branch-Protection":0,"CI-Tests":0,"CII-Best-Practices":0,"Code-Review":10,"Contributors":10,"Dangerous-Workflow":-1,"Dependency-Update-Tool":0,"Fuzzing":0,"License":10,"Maintained":10,"Packaging":-1,"Pinned-Dependencies":0,"SAST":0,"Security-Policy":0,"Signed-Releases":-1,"Token-Permissions":-1,"Vulnerabilities":4},"scorecard_scanned_at":"2026-07-11T01:37:01Z","slug":"agentuniverse","source_note":"","public_actions":null,"mcp_server_support":{"status":"declared","confidence":"medium","evidence":["Found MCP-related server path: agentuniverse/agent_serve/web/mcp/mcp_server_manager.py","Found MCP-related server docs path: docs/guidebook/en/How-to/Use and Publish MCP Server/How_to_Publish_MCP_Servers.md","Found MCP-related server docs path: docs/guidebook/en/How-to/Use and Publish MCP Server/How_to_Use_MCP_Servers.md"]},"external_service_dependencies":{"providers":["Anthropic","OpenAI","Postgres","Qdrant"],"requires_api_keys":true,"confidence":"high","evidence":["Found OpenAI dependency 'openai' in pyproject.toml","README/docs also mention OpenAI","Found Anthropic dependency 'anthropic' in pyproject.toml","Found Qdrant dependency 'qdrant' in pyproject.toml","Found Postgres dependency 'pg' in pyproject.toml"]},"tool_plugin_surface":{"plugin_system":"declared","tool_tags":["database"],"confidence":"high","evidence":["README/docs mention a declared plugin/integration surface","Found database dependency 'pg' in pyproject.toml"]},"package_provenance_drift":{"status":"not_applicable","confidence":null,"summary":"No package source configured","evidence":[]},"evidence_grade":"C","coverage_grade":"C","signal_coverage":0.4,"signal_types":2,"listing_status":"listed","display_listing_status":"listed","display_status_label":"Listed","has_warning":false,"warning_reasons":[],"license_spdx":"Apache-2.0","license_type":"open","license_override":"","trust_score":53.2,"trust_score_v2":53.2,"rank_v2":218,"rank_v2_delta":-7,"trust_v2_adjustment":-3.1,"trust_confidence":1.0,"trust_breakdown":{"safety":7.8,"identity":10.8,"transparency":12.0,"maintenance":17.6,"adoption":8.1},"trust_v2_breakdown":{"mcp":0.0,"external_dependencies":-2.5,"tool_plugin_surface":-0.6,"package_provenance_drift":0.0},"pending_signals":false},{"name":"ByteRover CLI","repo":"campfirein/byterover-cli","display_repo":"","url":"https://github.com/campfirein/byterover-cli","rank":219,"previous_rank":218,"rank_delta":-1,"stars":4912,"stars_fmt":"4.9k","forks":453,"forks_fmt":"453","last_push":"2026-06-25","days_ago":16,"weekly_commits":1,"commits_low_confidence":false,"score":61.2,"description":"ByteRover CLI (brv) - The portable memory layer for  autonomous coding agents (formerly Cipher)","language":"TypeScript","open_issues":8,"category":"Memory & Knowledge","category_rank":24,"npm_package":"","crate_package":"","pypi_package":"","weekly_downloads":null,"dl_source":"","hn_mentions_30d":null,"has_provenance":false,"npm_provenance":null,"pypi_provenance":null,"signed_commits_ratio":0.35,"scorecard_score":4.6,"scorecard_checks":{"Binary-Artifacts":10,"Branch-Protection":8,"CI-Tests":10,"CII-Best-Practices":0,"Code-Review":9,"Contributors":10,"Dangerous-Workflow":0,"Dependency-Update-Tool":0,"Fuzzing":0,"License":9,"Maintained":10,"Packaging":-1,"Pinned-Dependencies":1,"SAST":0,"Security-Policy":0,"Signed-Releases":-1,"Token-Permissions":10,"Vulnerabilities":0},"scorecard_scanned_at":"2026-07-11T01:36:42Z","slug":"byterover-cli","source_note":"","public_actions":null,"mcp_server_support":{"status":"implemented","confidence":"high","evidence":["README/docs explicitly mention an MCP server","Found MCP-related server path: src/server/infra/mcp/mcp-server.ts","Found MCP-related server test path: test/unit/infra/mcp/mcp-server-stop.test.ts","Found MCP dependency '@modelcontextprotocol/sdk' in package.json"]},"external_service_dependencies":{"providers":["Anthropic","OpenAI"],"requires_api_keys":false,"confidence":"high","evidence":["Found OpenAI dependency 'openai' in package.json","README/docs also mention OpenAI","Found Anthropic dependency 'anthropic' in package.json","README/docs also mention Anthropic"]},"tool_plugin_surface":{"plugin_system":"declared","tool_tags":[],"confidence":"medium","evidence":["README/docs mention a declared plugin/integration surface"]},"package_provenance_drift":{"status":"not_applicable","confidence":null,"summary":"No package source configured","evidence":[]},"evidence_grade":"C","coverage_grade":"C","signal_coverage":0.4,"signal_types":2,"listing_status":"listed","display_listing_status":"listed","display_status_label":"Listed","has_warning":false,"warning_reasons":[],"license_spdx":"NOASSERTION","license_type":"source-available","license_override":"","trust_score":52.9,"trust_score_v2":52.9,"rank_v2":219,"rank_v2_delta":14,"trust_v2_adjustment":1.2,"trust_confidence":1.0,"trust_breakdown":{"safety":7.5,"identity":10.8,"transparency":12.4,"maintenance":12.1,"adoption":8.9},"trust_v2_breakdown":{"mcp":2.0,"external_dependencies":-0.5,"tool_plugin_surface":-0.3,"package_provenance_drift":0.0},"pending_signals":false},{"name":"PentAGI","repo":"vxcontrol/pentagi","display_repo":"","url":"https://github.com/vxcontrol/pentagi","rank":220,"previous_rank":223,"rank_delta":3,"stars":19806,"stars_fmt":"19.8k","forks":2654,"forks_fmt":"2.7k","last_push":"2026-07-11","days_ago":0,"weekly_commits":0,"commits_low_confidence":false,"score":66.7,"description":"Fully autonomous AI Agents system capable of performing complex penetration testing tasks","language":"Go","open_issues":36,"category":"Security & Guardrails","category_rank":6,"npm_package":"","crate_package":"","pypi_package":"","weekly_downloads":null,"dl_source":"","hn_mentions_30d":null,"has_provenance":false,"npm_provenance":null,"pypi_provenance":null,"signed_commits_ratio":1.0,"scorecard_score":4.8,"scorecard_checks":{"Binary-Artifacts":8,"Branch-Protection":3,"CI-Tests":1,"CII-Best-Practices":0,"Code-Review":7,"Contributors":3,"Dangerous-Workflow":10,"Dependency-Update-Tool":10,"Fuzzing":0,"License":10,"Maintained":10,"Packaging":10,"Pinned-Dependencies":0,"SAST":0,"Security-Policy":0,"Signed-Releases":-1,"Token-Permissions":0,"Vulnerabilities":0},"scorecard_scanned_at":"2026-07-10T18:35:00Z","slug":"pentagi","source_note":"","public_actions":null,"mcp_server_support":{"status":"implemented","confidence":"medium","evidence":["README/docs explicitly mention an MCP server"]},"external_service_dependencies":{"providers":["Amazon Bedrock","Anthropic","Google Gemini","OpenAI","Postgres","Redis","Tavily"],"requires_api_keys":true,"confidence":"high","evidence":["README/docs mention OpenAI","Found OpenAI credential/config marker 'OPENAI_API_KEY'","README/docs mention Anthropic","Found Anthropic credential/config marker 'ANTHROPIC_API_KEY'","README/docs mention Google Gemini","Found Google Gemini credential/config marker 'GOOGLE_API_KEY'"]},"tool_plugin_surface":{"plugin_system":"extension-based","tool_tags":["code","database","filesystem","search","shell"],"confidence":"high","evidence":["README/docs mention a extension-based plugin/integration surface","README/docs mention shell capabilities","README/docs mention filesystem capabilities","README/docs mention search capabilities","README/docs mention database capabilities","README/docs mention code capabilities"]},"package_provenance_drift":{"status":"not_applicable","confidence":null,"summary":"No package source configured","evidence":[]},"evidence_grade":"C","coverage_grade":"C","signal_coverage":0.4,"signal_types":2,"listing_status":"listed","display_listing_status":"listed","display_status_label":"Listed","has_warning":false,"warning_reasons":[],"license_spdx":"MIT","license_type":"open","license_override":"","trust_score":52.6,"trust_score_v2":52.6,"rank_v2":220,"rank_v2_delta":-11,"trust_v2_adjustment":-4.1,"trust_confidence":1.0,"trust_breakdown":{"safety":11.0,"identity":10.8,"transparency":12.6,"maintenance":12.0,"adoption":10.3},"trust_v2_breakdown":{"mcp":2.0,"external_dependencies":-4.0,"tool_plugin_surface":-2.1,"package_provenance_drift":0.0},"pending_signals":false},{"name":"Mirascope","repo":"Mirascope/mirascope","display_repo":"","url":"https://github.com/Mirascope/mirascope","rank":221,"previous_rank":220,"rank_delta":-1,"stars":1514,"stars_fmt":"1.5k","forks":120,"forks_fmt":"120","last_push":"2026-07-10","days_ago":1,"weekly_commits":25,"commits_low_confidence":false,"score":71.4,"description":"The LLM Anti-Framework","language":"Python","open_issues":9,"category":"Agent Frameworks","category_rank":52,"npm_package":"","crate_package":"","pypi_package":"","weekly_downloads":null,"dl_source":"","hn_mentions_30d":null,"has_provenance":false,"npm_provenance":null,"pypi_provenance":null,"signed_commits_ratio":0.02,"scorecard_score":4.7,"scorecard_checks":{"Binary-Artifacts":10,"Branch-Protection":5,"CI-Tests":10,"CII-Best-Practices":0,"Code-Review":0,"Contributors":10,"Dangerous-Workflow":10,"Dependency-Update-Tool":10,"Fuzzing":0,"License":10,"Maintained":10,"Packaging":-1,"Pinned-Dependencies":0,"SAST":0,"Security-Policy":0,"Signed-Releases":-1,"Token-Permissions":0,"Vulnerabilities":0},"scorecard_scanned_at":"2026-07-08T09:26:53Z","slug":"mirascope","source_note":"","public_actions":null,"mcp_server_support":{"status":"declared","confidence":"medium","evidence":["Found MCP dependency 'fastmcp' in python/pyproject.toml","Found MCP dependency '@modelcontextprotocol/sdk' in typescript/package.json"]},"external_service_dependencies":{"providers":["Anthropic","Google Gemini","OpenAI"],"requires_api_keys":false,"confidence":"high","evidence":["Found OpenAI dependency 'openai' in python/pyproject.toml","README/docs mention Anthropic","Found Anthropic dependency 'anthropic' in python/pyproject.toml","Found Google Gemini dependency 'google-generativeai' in typescript/package.json"]},"tool_plugin_surface":{"plugin_system":"extension-based","tool_tags":["code"],"confidence":"high","evidence":["Found extension-based path: content/docs/v1/docs/learn/extensions/custom_provider.mdx","README/docs mention code capabilities"]},"package_provenance_drift":{"status":"not_applicable","confidence":null,"summary":"No package source configured","evidence":[]},"evidence_grade":"C","coverage_grade":"C","signal_coverage":0.4,"signal_types":2,"listing_status":"listed","display_listing_status":"listed","display_status_label":"Listed","has_warning":false,"warning_reasons":[],"license_spdx":"MIT","license_type":"open","license_override":"","trust_score":52.6,"trust_score_v2":52.6,"rank_v2":221,"rank_v2_delta":0,"trust_v2_adjustment":-1.9,"trust_confidence":1.0,"trust_breakdown":{"safety":6.0,"identity":10.8,"transparency":12.5,"maintenance":17.6,"adoption":7.6},"trust_v2_breakdown":{"mcp":0.0,"external_dependencies":-1.0,"tool_plugin_surface":-0.9,"package_provenance_drift":0.0},"pending_signals":false},{"name":"HumanLayer","repo":"humanlayer/humanlayer","display_repo":"","url":"https://github.com/humanlayer/humanlayer","rank":222,"previous_rank":221,"rank_delta":-1,"stars":11102,"stars_fmt":"11.1k","forks":923,"forks_fmt":"923","last_push":"2026-06-19","days_ago":22,"weekly_commits":1,"commits_low_confidence":true,"score":63.8,"description":"The best way to get AI coding agents to solve hard problems in complex codebases.","language":"TypeScript","open_issues":36,"category":"Coding Agents","category_rank":31,"npm_package":"","crate_package":"","pypi_package":"","weekly_downloads":null,"dl_source":"","hn_mentions_30d":null,"has_provenance":false,"npm_provenance":null,"pypi_provenance":null,"signed_commits_ratio":0.53,"scorecard_score":3.7,"scorecard_checks":{"Binary-Artifacts":10,"Branch-Protection":3,"CI-Tests":8,"CII-Best-Practices":0,"Code-Review":4,"Contributors":10,"Dangerous-Workflow":10,"Dependency-Update-Tool":10,"Fuzzing":0,"License":9,"Maintained":0,"Packaging":-1,"Pinned-Dependencies":0,"SAST":0,"Security-Policy":0,"Signed-Releases":0,"Token-Permissions":0,"Vulnerabilities":0},"scorecard_scanned_at":"2026-07-11T03:38:53Z","slug":"humanlayer","source_note":"","public_actions":null,"mcp_server_support":{"status":"implemented","confidence":"high","evidence":["Found MCP-related server path: hld/daemon/mcp_server_integration_test.go","Found MCP-related server path: hld/mcp/server.go","Found MCP dependency '@modelcontextprotocol/sdk' in hlyr/package.json"]},"external_service_dependencies":{"providers":[],"requires_api_keys":false,"confidence":null,"evidence":[]},"tool_plugin_surface":{"plugin_system":"none","tool_tags":[],"confidence":null,"evidence":[]},"package_provenance_drift":{"status":"not_applicable","confidence":null,"summary":"No package source configured","evidence":[]},"evidence_grade":"C","coverage_grade":"C","signal_coverage":0.4,"signal_types":2,"listing_status":"listed","display_listing_status":"listed","display_status_label":"Listed","has_warning":false,"warning_reasons":[],"license_spdx":"NOASSERTION","license_type":"open","license_override":"","trust_score":52.5,"trust_score_v2":52.5,"rank_v2":222,"rank_v2_delta":19,"trust_v2_adjustment":2.0,"trust_confidence":1.0,"trust_breakdown":{"safety":7.3,"identity":10.8,"transparency":11.6,"maintenance":11.1,"adoption":9.7},"trust_v2_breakdown":{"mcp":2.0,"external_dependencies":-0.0,"tool_plugin_surface":-0.0,"package_provenance_drift":0.0},"pending_signals":false},{"name":"Marvin","repo":"PrefectHQ/marvin","display_repo":"","url":"https://github.com/PrefectHQ/marvin","rank":223,"previous_rank":222,"rank_delta":-1,"stars":6179,"stars_fmt":"6.2k","forks":403,"forks_fmt":"403","last_push":"2026-05-12","days_ago":60,"weekly_commits":0,"commits_low_confidence":false,"score":51.6,"description":"an ambient intelligence library","language":"Python","open_issues":61,"category":"Agent Frameworks","category_rank":53,"npm_package":"","crate_package":"","pypi_package":"marvin","weekly_downloads":34051,"dl_source":"pypi","hn_mentions_30d":1,"has_provenance":false,"npm_provenance":null,"pypi_provenance":false,"signed_commits_ratio":null,"scorecard_score":5.3,"scorecard_checks":{"Binary-Artifacts":10,"Branch-Protection":5,"CI-Tests":10,"CII-Best-Practices":0,"Code-Review":0,"Contributors":10,"Dangerous-Workflow":10,"Dependency-Update-Tool":10,"Fuzzing":0,"License":10,"Maintained":5,"Packaging":10,"Pinned-Dependencies":0,"SAST":0,"Security-Policy":0,"Signed-Releases":-1,"Token-Permissions":9,"Vulnerabilities":0},"scorecard_scanned_at":"2026-07-11T01:26:24Z","slug":"marvin","source_note":"","public_actions":null,"mcp_server_support":{"status":"implemented","confidence":"high","evidence":["Found MCP-related server path: examples/fastmcp/hello.py","Found MCP-related server path: src/marvin/_internal/integrations/fastmcp.py","Found MCP dependency 'fastmcp' in pyproject.toml","Found MCP dependency 'fastmcp' in examples/slack_search/pyproject.toml"]},"external_service_dependencies":{"providers":["Anthropic","OpenAI","Qdrant"],"requires_api_keys":true,"confidence":"high","evidence":["README/docs mention OpenAI","Found OpenAI dependency 'openai' in pyproject.toml","Found OpenAI credential/config marker 'OPENAI_API_KEY'","README/docs mention Anthropic","Found Anthropic credential/config marker 'ANTHROPIC_API_KEY'","Found Qdrant dependency 'qdrant' in pyproject.toml"]},"tool_plugin_surface":{"plugin_system":"declared","tool_tags":["code","database","shell"],"confidence":"high","evidence":["README/docs mention a declared plugin/integration surface","README/docs mention shell capabilities","Found database dependency 'qdrant' in pyproject.toml","README/docs mention code capabilities"]},"package_provenance_drift":{"status":"unknown","confidence":"low","summary":"Package source metadata is missing or inconclusive","evidence":["pypi package 'marvin' has a non-GitHub or unparseable source URL"]},"evidence_grade":"C","coverage_grade":"A","signal_coverage":0.8,"signal_types":4,"listing_status":"listed","display_listing_status":"listed","display_status_label":"Listed","has_warning":false,"warning_reasons":[],"license_spdx":"Apache-2.0","license_type":"open","license_override":"","trust_score":52.3,"trust_score_v2":52.3,"rank_v2":223,"rank_v2_delta":5,"trust_v2_adjustment":-1.2,"trust_confidence":1.0,"trust_breakdown":{"safety":6.6,"identity":10.8,"transparency":13.0,"maintenance":8.0,"adoption":15.1},"trust_v2_breakdown":{"mcp":2.0,"external_dependencies":-2.0,"tool_plugin_surface":-1.2,"package_provenance_drift":0.0},"pending_signals":false},{"name":"Agentic Security","repo":"msoedov/agentic_security","display_repo":"","url":"https://github.com/msoedov/agentic_security","rank":224,"previous_rank":224,"rank_delta":0,"stars":1923,"stars_fmt":"1.9k","forks":267,"forks_fmt":"267","last_push":"2026-06-23","days_ago":18,"weekly_commits":10,"commits_low_confidence":false,"score":66.6,"description":"Agentic LLM Vulnerability Scanner / AI red teaming kit 🧪","language":"Python","open_issues":44,"category":"Security & Guardrails","category_rank":7,"npm_package":"","crate_package":"","pypi_package":"","weekly_downloads":null,"dl_source":"","hn_mentions_30d":null,"has_provenance":false,"npm_provenance":null,"pypi_provenance":null,"signed_commits_ratio":0.2,"scorecard_score":5.2,"scorecard_checks":{"Binary-Artifacts":10,"Branch-Protection":0,"CI-Tests":8,"CII-Best-Practices":0,"Code-Review":6,"Contributors":10,"Dangerous-Workflow":10,"Dependency-Update-Tool":10,"Fuzzing":0,"License":10,"Maintained":10,"Packaging":10,"Pinned-Dependencies":0,"SAST":0,"Security-Policy":4,"Signed-Releases":-1,"Token-Permissions":0,"Vulnerabilities":0},"scorecard_scanned_at":"2026-07-10T08:47:03Z","slug":"agentic-security","source_note":"","public_actions":null,"mcp_server_support":{"status":"none","confidence":null,"evidence":[]},"external_service_dependencies":{"providers":["Anthropic","OpenAI"],"requires_api_keys":true,"confidence":"high","evidence":["README/docs mention OpenAI","Found OpenAI dependency 'openai' in pyproject.toml","Found Anthropic dependency 'anthropic' in pyproject.toml"]},"tool_plugin_surface":{"plugin_system":"declared","tool_tags":["code"],"confidence":"high","evidence":["README/docs mention a declared plugin/integration surface","README/docs mention code capabilities"]},"package_provenance_drift":{"status":"not_applicable","confidence":null,"summary":"No package source configured","evidence":[]},"evidence_grade":"C","coverage_grade":"C","signal_coverage":0.4,"signal_types":2,"listing_status":"listed","display_listing_status":"listed","display_status_label":"Listed","has_warning":false,"warning_reasons":[],"license_spdx":"Apache-2.0","license_type":"open","license_override":"","trust_score":52.0,"trust_score_v2":52.0,"rank_v2":224,"rank_v2_delta":0,"trust_v2_adjustment":-2.1,"trust_confidence":1.0,"trust_breakdown":{"safety":7.5,"identity":10.8,"transparency":12.9,"maintenance":15.0,"adoption":7.9},"trust_v2_breakdown":{"mcp":0.0,"external_dependencies":-1.5,"tool_plugin_surface":-0.6,"package_provenance_drift":0.0},"pending_signals":false},{"name":"Symphony","repo":"openai/symphony","display_repo":"","url":"https://github.com/openai/symphony","rank":225,"previous_rank":226,"rank_delta":1,"stars":25911,"stars_fmt":"25.9k","forks":2623,"forks_fmt":"2.6k","last_push":"2026-06-09","days_ago":32,"weekly_commits":0,"commits_low_confidence":false,"score":63.1,"description":"Symphony turns project work into isolated, autonomous implementation runs, allowing teams to manage work instead of supe","language":"Elixir","open_issues":0,"category":"Coding Agents","category_rank":32,"npm_package":"","crate_package":"","pypi_package":"","weekly_downloads":null,"dl_source":"","hn_mentions_30d":null,"has_provenance":false,"npm_provenance":null,"pypi_provenance":null,"signed_commits_ratio":0.913,"scorecard_score":3.8,"scorecard_checks":{"Binary-Artifacts":10,"Branch-Protection":0,"CI-Tests":10,"CII-Best-Practices":0,"Code-Review":2,"Contributors":3,"Dangerous-Workflow":10,"Dependency-Update-Tool":0,"Fuzzing":0,"License":10,"Maintained":10,"Packaging":-1,"Pinned-Dependencies":5,"SAST":0,"Security-Policy":0,"Signed-Releases":-1,"Token-Permissions":0,"Vulnerabilities":0},"scorecard_scanned_at":"2026-07-10T08:43:01Z","slug":"symphony","source_note":"","public_actions":null,"mcp_server_support":{"status":"none","confidence":null,"evidence":[]},"external_service_dependencies":{"providers":["OpenAI"],"requires_api_keys":false,"confidence":"medium","evidence":["README/docs mention OpenAI"]},"tool_plugin_surface":{"plugin_system":"none","tool_tags":["code"],"confidence":"medium","evidence":["README/docs mention code capabilities"]},"package_provenance_drift":{"status":"not_applicable","confidence":null,"summary":"No package source configured","evidence":[]},"evidence_grade":"C","coverage_grade":"C","signal_coverage":0.4,"signal_types":2,"listing_status":"listed","display_listing_status":"listed","display_status_label":"Listed","has_warning":false,"warning_reasons":[],"license_spdx":"Apache-2.0","license_type":"open","license_override":"","trust_score":52.0,"trust_score_v2":52.0,"rank_v2":225,"rank_v2_delta":5,"trust_v2_adjustment":-0.3,"trust_confidence":1.0,"trust_breakdown":{"safety":9.3,"identity":10.8,"transparency":11.7,"maintenance":9.9,"adoption":10.6},"trust_v2_breakdown":{"mcp":0.0,"external_dependencies":-0.0,"tool_plugin_surface":-0.3,"package_provenance_drift":0.0},"pending_signals":false},{"name":"Roo Code","repo":"RooCodeInc/Roo-Code","display_repo":"","url":"https://github.com/RooCodeInc/Roo-Code","rank":226,"previous_rank":225,"rank_delta":-1,"stars":24318,"stars_fmt":"24.3k","forks":3364,"forks_fmt":"3.4k","last_push":"2026-05-15","days_ago":57,"weekly_commits":0,"commits_low_confidence":false,"score":59.9,"description":"Roo Code gives you a whole dev team of AI agents in your code editor.","language":"TypeScript","open_issues":550,"category":"Coding Agents","category_rank":33,"npm_package":"roo-cline","crate_package":"","pypi_package":"","weekly_downloads":1754034,"dl_source":"npm+vscode","hn_mentions_30d":null,"has_provenance":false,"npm_provenance":false,"pypi_provenance":null,"signed_commits_ratio":null,"scorecard_score":3.9,"scorecard_checks":{"Binary-Artifacts":10,"Branch-Protection":4,"CI-Tests":10,"CII-Best-Practices":0,"Code-Review":5,"Contributors":10,"Dangerous-Workflow":0,"Dependency-Update-Tool":10,"Fuzzing":0,"License":10,"Maintained":0,"Packaging":-1,"Pinned-Dependencies":0,"SAST":10,"Security-Policy":10,"Signed-Releases":0,"Token-Permissions":0,"Vulnerabilities":0},"scorecard_scanned_at":"2026-07-11T01:22:35Z","slug":"roo-code","source_note":"","public_actions":null,"mcp_server_support":{"status":"implemented","confidence":"high","evidence":["Found MCP-related server path: src/core/prompts/tools/native-tools/mcp_server.ts","Found MCP-related server path: src/i18n/locales/ca/mcp.json","Found MCP-related server docs path: apps/docs/docs/features/mcp/recommended-mcp-servers.md","Found MCP-related server docs path: apps/docs/docs/features/mcp/server-transports.md"]},"external_service_dependencies":{"providers":["Amazon Bedrock","Anthropic","Google Gemini","OpenAI","Postgres","Qdrant"],"requires_api_keys":false,"confidence":"high","evidence":["Found OpenAI dependency 'openai' in src/package.json","Found Anthropic dependency 'anthropic' in src/package.json","Found Google Gemini dependency '@google/genai' in src/package.json","Found Amazon Bedrock dependency 'bedrock' in src/package.json","Found Qdrant dependency 'qdrant' in src/package.json","Found Postgres dependency 'pg' in package.json"]},"tool_plugin_surface":{"plugin_system":"marketplace","tool_tags":["browser","code","database","shell"],"confidence":"high","evidence":["README/docs mention a marketplace plugin/integration surface","Found browser dependency 'puppeteer' in src/package.json","Found shell dependency 'execa' in src/package.json","Found database dependency 'pg' in package.json","README/docs mention code capabilities"]},"package_provenance_drift":{"status":"unknown","confidence":"low","summary":"Package source metadata is missing or inconclusive","evidence":["npm package 'roo-cline' does not expose a source repo URL"]},"evidence_grade":"C","coverage_grade":"B","signal_coverage":0.6,"signal_types":3,"listing_status":"warning","display_listing_status":"warning","display_status_label":"Needs review","has_warning":true,"warning_reasons":[{"repo":"RooCodeInc/Roo-Code","criterion":"5.1","detail":"repository is archived"}],"license_spdx":"Apache-2.0","license_type":"open","license_override":"","trust_score":51.9,"trust_score_v2":51.9,"rank_v2":226,"rank_v2_delta":-6,"trust_v2_adjustment":-2.7,"trust_confidence":1.0,"trust_breakdown":{"safety":4.9,"identity":10.8,"transparency":11.8,"maintenance":8.2,"adoption":18.9},"trust_v2_breakdown":{"mcp":2.0,"external_dependencies":-2.5,"tool_plugin_surface":-2.2,"package_provenance_drift":0.0},"pending_signals":false},{"name":"Llama Guard","repo":"meta-llama/PurpleLlama","display_repo":"","url":"https://github.com/meta-llama/PurpleLlama","rank":227,"previous_rank":227,"rank_delta":0,"stars":4268,"stars_fmt":"4.3k","forks":747,"forks_fmt":"747","last_push":"2026-07-01","days_ago":10,"weekly_commits":1,"commits_low_confidence":true,"score":62.8,"description":"Set of tools to assess and improve LLM security.","language":"Python","open_issues":33,"category":"Security & Guardrails","category_rank":8,"npm_package":"","crate_package":"","pypi_package":"","weekly_downloads":null,"dl_source":"","hn_mentions_30d":2,"has_provenance":false,"npm_provenance":null,"pypi_provenance":null,"signed_commits_ratio":0.01,"scorecard_score":5.9,"scorecard_checks":{"Binary-Artifacts":10,"Branch-Protection":3,"CI-Tests":-1,"CII-Best-Practices":0,"Code-Review":10,"Contributors":10,"Dangerous-Workflow":10,"Dependency-Update-Tool":10,"Fuzzing":10,"License":9,"Maintained":10,"Packaging":-1,"Pinned-Dependencies":2,"SAST":0,"Security-Policy":0,"Signed-Releases":-1,"Token-Permissions":0,"Vulnerabilities":0},"scorecard_scanned_at":"2026-07-10T17:19:17Z","slug":"llama-guard","source_note":"","public_actions":null,"mcp_server_support":{"status":"none","confidence":null,"evidence":[]},"external_service_dependencies":{"providers":["Amazon Bedrock","OpenAI"],"requires_api_keys":false,"confidence":"high","evidence":["Found OpenAI dependency 'openai' in LlamaFirewall/pyproject.toml","Found Amazon Bedrock dependency 'boto3' in CybersecurityBenchmarks/requirements.txt"]},"tool_plugin_surface":{"plugin_system":"none","tool_tags":["code"],"confidence":"medium","evidence":["README/docs mention code capabilities"]},"package_provenance_drift":{"status":"not_applicable","confidence":null,"summary":"No package source configured","evidence":[]},"evidence_grade":"C","coverage_grade":"B","signal_coverage":0.6,"signal_types":3,"listing_status":"listed","display_listing_status":"listed","display_status_label":"Listed","has_warning":false,"warning_reasons":[],"license_spdx":"NOASSERTION","license_type":"open","license_override":"","trust_score":51.5,"trust_score_v2":51.5,"rank_v2":227,"rank_v2_delta":4,"trust_v2_adjustment":-0.8,"trust_confidence":1.0,"trust_breakdown":{"safety":7.4,"identity":10.8,"transparency":13.5,"maintenance":11.9,"adoption":8.7},"trust_v2_breakdown":{"mcp":0.0,"external_dependencies":-0.5,"tool_plugin_surface":-0.3,"package_provenance_drift":0.0},"pending_signals":false},{"name":"AgenticSeek","repo":"Fosowl/agenticSeek","display_repo":"","url":"https://github.com/Fosowl/agenticSeek","rank":228,"previous_rank":228,"rank_delta":0,"stars":26614,"stars_fmt":"26.6k","forks":2979,"forks_fmt":"3.0k","last_push":"2026-07-04","days_ago":7,"weekly_commits":18,"commits_low_confidence":false,"score":82.9,"description":"Fully Local Manus AI. No APIs, No $200 monthly bills. Enjoy an autonomous agent that thinks, browses the web, and code f","language":"Python","open_issues":29,"category":"Agent Frameworks","category_rank":54,"npm_package":"","crate_package":"","pypi_package":"","weekly_downloads":null,"dl_source":"","hn_mentions_30d":null,"has_provenance":false,"npm_provenance":null,"pypi_provenance":null,"signed_commits_ratio":0.43,"scorecard_score":3.8,"scorecard_checks":{"Binary-Artifacts":9,"Branch-Protection":1,"CI-Tests":0,"CII-Best-Practices":0,"Code-Review":5,"Contributors":10,"Dangerous-Workflow":-1,"Dependency-Update-Tool":0,"Fuzzing":0,"License":10,"Maintained":10,"Packaging":-1,"Pinned-Dependencies":0,"SAST":0,"Security-Policy":10,"Signed-Releases":-1,"Token-Permissions":-1,"Vulnerabilities":0},"scorecard_scanned_at":"2026-07-10T17:41:22Z","slug":"agenticseek","source_note":"","public_actions":null,"mcp_server_support":{"status":"none","confidence":null,"evidence":[]},"external_service_dependencies":{"providers":["Anthropic","Google Gemini","OpenAI","Redis","SerpAPI"],"requires_api_keys":true,"confidence":"high","evidence":["README/docs mention OpenAI","Found OpenAI dependency 'openai' in setup.py","Found OpenAI credential/config marker 'OPENAI_API_KEY'","README/docs mention Anthropic","Found Anthropic credential/config marker 'ANTHROPIC_API_KEY'","README/docs mention Google Gemini"]},"tool_plugin_surface":{"plugin_system":"extension-based","tool_tags":["browser","code","database","filesystem","search","shell"],"confidence":"high","evidence":["README/docs mention a extension-based plugin/integration surface","README/docs mention browser capabilities","README/docs mention shell capabilities","README/docs mention filesystem capabilities","README/docs mention search capabilities","README/docs mention database capabilities"]},"package_provenance_drift":{"status":"not_applicable","confidence":null,"summary":"No package source configured","evidence":[]},"evidence_grade":"C","coverage_grade":"C","signal_coverage":0.4,"signal_types":2,"listing_status":"listed","display_listing_status":"listed","display_status_label":"Listed","has_warning":false,"warning_reasons":[],"license_spdx":"GPL-3.0","license_type":"open","license_override":"","trust_score":51.5,"trust_score_v2":51.5,"rank_v2":228,"rank_v2_delta":-18,"trust_v2_adjustment":-5.1,"trust_confidence":1.0,"trust_breakdown":{"safety":6.9,"identity":10.8,"transparency":11.7,"maintenance":16.6,"adoption":10.6},"trust_v2_breakdown":{"mcp":0.0,"external_dependencies":-3.0,"tool_plugin_surface":-2.1,"package_provenance_drift":0.0},"pending_signals":false},{"name":"Portkey AI Gateway","repo":"Portkey-AI/gateway","display_repo":"","url":"https://github.com/Portkey-AI/gateway","rank":229,"previous_rank":229,"rank_delta":0,"stars":12393,"stars_fmt":"12.4k","forks":1196,"forks_fmt":"1.2k","last_push":"2026-05-25","days_ago":47,"weekly_commits":0,"commits_low_confidence":false,"score":57.5,"description":"A blazing fast AI Gateway with integrated guardrails. Route to 1,600+ LLMs, 50+ AI Guardrails with 1 fast & friendly API","language":"TypeScript","open_issues":90,"category":"LLM Gateways & Infra","category_rank":7,"npm_package":"portkey-ai","crate_package":"","pypi_package":"","weekly_downloads":174404,"dl_source":"npm","hn_mentions_30d":28,"has_provenance":false,"npm_provenance":false,"pypi_provenance":null,"signed_commits_ratio":0.74,"scorecard_score":5.3,"scorecard_checks":{"Binary-Artifacts":10,"Branch-Protection":6,"CI-Tests":10,"CII-Best-Practices":0,"Code-Review":9,"Contributors":10,"Dangerous-Workflow":10,"Dependency-Update-Tool":0,"Fuzzing":0,"License":10,"Maintained":7,"Packaging":10,"Pinned-Dependencies":1,"SAST":0,"Security-Policy":10,"Signed-Releases":-1,"Token-Permissions":0,"Vulnerabilities":0},"scorecard_scanned_at":"2026-07-08T06:56:12Z","slug":"portkey-ai-gateway","source_note":"","public_actions":null,"mcp_server_support":{"status":"declared","confidence":"low","evidence":["README/docs mention MCP support"]},"external_service_dependencies":{"providers":["Amazon Bedrock","Anthropic","Azure OpenAI","Google Gemini","OpenAI","Redis"],"requires_api_keys":false,"confidence":"high","evidence":["README/docs mention OpenAI","Found OpenAI dependency 'openai' in package.json","README/docs mention Anthropic","README/docs mention Google Gemini","README/docs mention Azure OpenAI","README/docs mention Amazon Bedrock"]},"tool_plugin_surface":{"plugin_system":"declared","tool_tags":["code","database"],"confidence":"high","evidence":["README/docs mention a declared plugin/integration surface","Found database dependency 'redis' in package.json","README/docs mention code capabilities"]},"package_provenance_drift":{"status":"warning","confidence":"high","summary":"1 package source mismatch detected","evidence":["npm package 'portkey-ai' points to portkey-ai/portkey-node-sdk, not portkey-ai/gateway"]},"evidence_grade":"C","coverage_grade":"A","signal_coverage":0.8,"signal_types":4,"listing_status":"listed","display_listing_status":"listed","display_status_label":"Listed","has_warning":false,"warning_reasons":[],"license_spdx":"MIT","license_type":"open","license_override":"","trust_score":51.4,"trust_score_v2":51.4,"rank_v2":229,"rank_v2_delta":-46,"trust_v2_adjustment":-8.4,"trust_confidence":1.0,"trust_breakdown":{"safety":10.3,"identity":10.8,"transparency":13.0,"maintenance":8.9,"adoption":16.8},"trust_v2_breakdown":{"mcp":0.0,"external_dependencies":-2.5,"tool_plugin_surface":-0.9,"package_provenance_drift":-5.0},"pending_signals":false},{"name":"LLM Wiki Agent","repo":"SamurAIGPT/llm-wiki-agent","display_repo":"","url":"https://github.com/SamurAIGPT/llm-wiki-agent","rank":230,"previous_rank":239,"rank_delta":9,"stars":3179,"stars_fmt":"3.2k","forks":368,"forks_fmt":"368","last_push":"2026-07-11","days_ago":0,"weekly_commits":13,"commits_low_confidence":false,"score":72.2,"description":"A personal knowledge base that builds and maintains itself. Drop in sources — Claude (or Codex/Gemini) reads them, extra","language":"Python","open_issues":2,"category":"Memory & Knowledge","category_rank":25,"npm_package":"","crate_package":"","pypi_package":"","weekly_downloads":null,"dl_source":"","hn_mentions_30d":null,"has_provenance":false,"npm_provenance":null,"pypi_provenance":null,"signed_commits_ratio":0.448,"scorecard_score":3.5,"scorecard_checks":{"Binary-Artifacts":10,"Branch-Protection":0,"CI-Tests":0,"CII-Best-Practices":0,"Code-Review":7,"Contributors":0,"Dangerous-Workflow":10,"Dependency-Update-Tool":0,"Fuzzing":0,"License":10,"Maintained":10,"Packaging":-1,"Pinned-Dependencies":0,"SAST":0,"Security-Policy":0,"Signed-Releases":-1,"Token-Permissions":0,"Vulnerabilities":0},"scorecard_scanned_at":"2026-07-10T18:34:15Z","slug":"llm-wiki-agent","source_note":"","public_actions":null,"mcp_server_support":{"status":"none","confidence":null,"evidence":[]},"external_service_dependencies":{"providers":["Anthropic","Google Gemini","OpenAI"],"requires_api_keys":true,"confidence":"high","evidence":["README/docs mention OpenAI","README/docs mention Anthropic","Found Anthropic credential/config marker 'ANTHROPIC_API_KEY'","README/docs mention Google Gemini"]},"tool_plugin_surface":{"plugin_system":"declared","tool_tags":["code","search"],"confidence":"high","evidence":["README/docs mention a declared plugin/integration surface","README/docs mention search capabilities","README/docs mention code capabilities"]},"package_provenance_drift":{"status":"not_applicable","confidence":null,"summary":"No package source configured","evidence":[]},"evidence_grade":"C","coverage_grade":"C","signal_coverage":0.4,"signal_types":2,"listing_status":"listed","display_listing_status":"listed","display_status_label":"Listed","has_warning":false,"warning_reasons":[],"license_spdx":"MIT","license_type":"open","license_override":"","trust_score":51.0,"trust_score_v2":51.0,"rank_v2":230,"rank_v2_delta":-5,"trust_v2_adjustment":-2.9,"trust_confidence":1.0,"trust_breakdown":{"safety":6.6,"identity":10.8,"transparency":11.5,"maintenance":16.6,"adoption":8.4},"trust_v2_breakdown":{"mcp":0.0,"external_dependencies":-2.0,"tool_plugin_surface":-0.9,"package_provenance_drift":0.0},"pending_signals":false},{"name":"Coze Studio","repo":"coze-dev/coze-studio","display_repo":"","url":"https://github.com/coze-dev/coze-studio","rank":231,"previous_rank":230,"rank_delta":-1,"stars":21147,"stars_fmt":"21.1k","forks":3080,"forks_fmt":"3.1k","last_push":"2026-04-20","days_ago":82,"weekly_commits":0,"commits_low_confidence":false,"score":56.0,"description":"An AI agent development platform with all-in-one visual tools, simplifying agent creation, debugging, and deployment lik","language":"TypeScript","open_issues":482,"category":"Workflow Platforms","category_rank":17,"npm_package":"","crate_package":"","pypi_package":"","weekly_downloads":null,"dl_source":"","hn_mentions_30d":null,"has_provenance":false,"npm_provenance":null,"pypi_provenance":null,"signed_commits_ratio":1.0,"scorecard_score":4.9,"scorecard_checks":{"Binary-Artifacts":10,"Branch-Protection":5,"CI-Tests":9,"CII-Best-Practices":0,"Code-Review":10,"Contributors":3,"Dangerous-Workflow":10,"Dependency-Update-Tool":0,"Fuzzing":0,"License":10,"Maintained":0,"Packaging":-1,"Pinned-Dependencies":1,"SAST":7,"Security-Policy":0,"Signed-Releases":-1,"Token-Permissions":9,"Vulnerabilities":0},"scorecard_scanned_at":"2026-07-11T02:09:27Z","slug":"coze-studio","source_note":"","public_actions":null,"mcp_server_support":{"status":"declared","confidence":"medium","evidence":["Found MCP-related server path: frontend/packages/arch/idl/src/auto-generated/bytefaas_api/namespaces/mcp_server.ts"]},"external_service_dependencies":{"providers":["OpenAI"],"requires_api_keys":false,"confidence":"medium","evidence":["README/docs mention OpenAI"]},"tool_plugin_surface":{"plugin_system":"declared","tool_tags":["code","search"],"confidence":"high","evidence":["README/docs mention a declared plugin/integration surface","README/docs mention search capabilities","README/docs mention code capabilities"]},"package_provenance_drift":{"status":"not_applicable","confidence":null,"summary":"No package source configured","evidence":[]},"evidence_grade":"C","coverage_grade":"C","signal_coverage":0.4,"signal_types":2,"listing_status":"listed","display_listing_status":"listed","display_status_label":"Listed","has_warning":false,"warning_reasons":[],"license_spdx":"Apache-2.0","license_type":"open","license_override":"","trust_score":50.6,"trust_score_v2":50.6,"rank_v2":231,"rank_v2_delta":4,"trust_v2_adjustment":-0.9,"trust_confidence":1.0,"trust_breakdown":{"safety":11.1,"identity":10.8,"transparency":12.7,"maintenance":6.5,"adoption":10.4},"trust_v2_breakdown":{"mcp":0.0,"external_dependencies":-0.0,"tool_plugin_surface":-0.9,"package_provenance_drift":0.0},"pending_signals":false},{"name":"Verl Agent","repo":"langfengQ/verl-agent","display_repo":"","url":"https://github.com/langfengQ/verl-agent","rank":232,"previous_rank":233,"rank_delta":1,"stars":2104,"stars_fmt":"2.1k","forks":202,"forks_fmt":"202","last_push":"2026-06-09","days_ago":32,"weekly_commits":0,"commits_low_confidence":false,"score":51.3,"description":"verl-agent is an extension of veRL, designed for training LLM/VLM agents via RL. verl-agent is also the official code fo","language":"Python","open_issues":58,"category":"Agent Frameworks","category_rank":55,"npm_package":"","crate_package":"","pypi_package":"verl","weekly_downloads":22847,"dl_source":"pypi","hn_mentions_30d":null,"has_provenance":false,"npm_provenance":null,"pypi_provenance":false,"signed_commits_ratio":0.6,"scorecard_score":5.5,"scorecard_checks":{"Binary-Artifacts":9,"Branch-Protection":6,"CI-Tests":9,"CII-Best-Practices":0,"Code-Review":3,"Contributors":10,"Dangerous-Workflow":10,"Dependency-Update-Tool":10,"Fuzzing":0,"License":10,"Maintained":5,"Packaging":-1,"Pinned-Dependencies":2,"SAST":0,"Security-Policy":0,"Signed-Releases":-1,"Token-Permissions":10,"Vulnerabilities":0},"scorecard_scanned_at":"2026-07-11T01:30:34Z","slug":"verl-agent","source_note":"","public_actions":null,"mcp_server_support":{"status":"none","confidence":null,"evidence":[]},"external_service_dependencies":{"providers":["OpenAI","Postgres"],"requires_api_keys":false,"confidence":"high","evidence":["Found OpenAI dependency 'openai' in setup.py","Found Postgres dependency 'pg' in pyproject.toml"]},"tool_plugin_surface":{"plugin_system":"extension-based","tool_tags":["code","database","search","shell"],"confidence":"high","evidence":["README/docs mention a extension-based plugin/integration surface","README/docs mention shell capabilities","README/docs mention search capabilities","Found database dependency 'pg' in pyproject.toml","README/docs mention code capabilities"]},"package_provenance_drift":{"status":"warning","confidence":"high","summary":"1 package source mismatch detected","evidence":["pypi package 'verl' points to verl-project/verl, not langfengq/verl-agent"]},"evidence_grade":"C","coverage_grade":"B","signal_coverage":0.6,"signal_types":3,"listing_status":"listed","display_listing_status":"listed","display_status_label":"Listed","has_warning":false,"warning_reasons":[],"license_spdx":"Apache-2.0","license_type":"open","license_override":"","trust_score":50.3,"trust_score_v2":50.3,"rank_v2":232,"rank_v2_delta":-31,"trust_v2_adjustment":-7.3,"trust_confidence":1.0,"trust_breakdown":{"safety":9.9,"identity":10.8,"transparency":13.2,"maintenance":9.9,"adoption":13.8},"trust_v2_breakdown":{"mcp":0.0,"external_dependencies":-0.5,"tool_plugin_surface":-1.8,"package_provenance_drift":-5.0},"pending_signals":false},{"name":"Qwen Agent","repo":"QwenLM/Qwen-Agent","display_repo":"","url":"https://github.com/QwenLM/Qwen-Agent","rank":233,"previous_rank":231,"rank_delta":-2,"stars":16703,"stars_fmt":"16.7k","forks":1666,"forks_fmt":"1.7k","last_push":"2026-03-04","days_ago":129,"weekly_commits":0,"commits_low_confidence":false,"score":47.5,"description":"Agent framework and applications built upon Qwen>=3.0, featuring Function Calling, MCP, Code Interpreter, RAG, Chrome ex","language":"Python","open_issues":419,"category":"Agent Frameworks","category_rank":56,"npm_package":"","crate_package":"","pypi_package":"qwen-agent","weekly_downloads":64682,"dl_source":"pypi","hn_mentions_30d":0,"has_provenance":false,"npm_provenance":null,"pypi_provenance":false,"signed_commits_ratio":null,"scorecard_score":3.6,"scorecard_checks":{"Binary-Artifacts":10,"Branch-Protection":3,"CI-Tests":0,"CII-Best-Practices":0,"Code-Review":1,"Contributors":10,"Dangerous-Workflow":10,"Dependency-Update-Tool":0,"Fuzzing":0,"License":10,"Maintained":0,"Packaging":-1,"Pinned-Dependencies":1,"SAST":0,"Security-Policy":0,"Signed-Releases":-1,"Token-Permissions":10,"Vulnerabilities":0},"scorecard_scanned_at":"2026-07-11T04:04:55Z","slug":"qwen-agent","source_note":"","public_actions":null,"mcp_server_support":{"status":"implemented","confidence":"medium","evidence":["README/docs explicitly mention an MCP server"]},"external_service_dependencies":{"providers":["OpenAI"],"requires_api_keys":true,"confidence":"high","evidence":["README/docs mention OpenAI","Found OpenAI dependency 'openai' in setup.py"]},"tool_plugin_surface":{"plugin_system":"extension-based","tool_tags":["code","filesystem","search"],"confidence":"high","evidence":["README/docs mention a extension-based plugin/integration surface","README/docs mention filesystem capabilities","README/docs mention search capabilities","README/docs mention code capabilities"]},"package_provenance_drift":{"status":"match","confidence":"high","summary":"Published package metadata matches the tracked repo","evidence":["pypi package 'qwen-agent' points to the tracked repo"]},"evidence_grade":"C","coverage_grade":"A","signal_coverage":0.8,"signal_types":4,"listing_status":"listed","display_listing_status":"listed","display_status_label":"Listed","has_warning":false,"warning_reasons":[],"license_spdx":"Apache-2.0","license_type":"open","license_override":"","trust_score":50.3,"trust_score_v2":50.3,"rank_v2":233,"rank_v2_delta":28,"trust_v2_adjustment":3.5,"trust_confidence":1.0,"trust_breakdown":{"safety":4.5,"identity":10.8,"transparency":11.6,"maintenance":3.4,"adoption":16.5},"trust_v2_breakdown":{"mcp":2.0,"external_dependencies":-1.0,"tool_plugin_surface":-1.5,"package_provenance_drift":4.0},"pending_signals":false},{"name":"FinRobot","repo":"AI4Finance-Foundation/FinRobot","display_repo":"","url":"https://github.com/AI4Finance-Foundation/FinRobot","rank":234,"previous_rank":232,"rank_delta":-2,"stars":7525,"stars_fmt":"7.5k","forks":1270,"forks_fmt":"1.3k","last_push":"2026-07-07","days_ago":4,"weekly_commits":5,"commits_low_confidence":true,"score":72.0,"description":"FinRobot: An Open-Source AI Agent Platform for Financial Analysis using LLMs 🚀 🚀 🚀 ","language":"Jupyter Notebook","open_issues":59,"category":"Research & Data","category_rank":11,"npm_package":"","crate_package":"","pypi_package":"","weekly_downloads":null,"dl_source":"","hn_mentions_30d":null,"has_provenance":false,"npm_provenance":null,"pypi_provenance":null,"signed_commits_ratio":0.86,"scorecard_score":2.7,"scorecard_checks":{"Binary-Artifacts":10,"Branch-Protection":0,"CI-Tests":0,"CII-Best-Practices":0,"Code-Review":0,"Contributors":10,"Dangerous-Workflow":-1,"Dependency-Update-Tool":0,"Fuzzing":0,"License":10,"Maintained":5,"Packaging":-1,"Pinned-Dependencies":0,"SAST":0,"Security-Policy":0,"Signed-Releases":8,"Token-Permissions":-1,"Vulnerabilities":0},"scorecard_scanned_at":"2026-07-10T17:40:30Z","slug":"finrobot","source_note":"","public_actions":null,"mcp_server_support":{"status":"none","confidence":null,"evidence":[]},"external_service_dependencies":{"providers":["OpenAI"],"requires_api_keys":true,"confidence":"high","evidence":["Found OpenAI dependency 'openai' in finrobot_equity/core/requirements.txt","Found OpenAI credential/config marker 'OPENAI_API_KEY'","README/docs also mention OpenAI"]},"tool_plugin_surface":{"plugin_system":"declared","tool_tags":["shell"],"confidence":"high","evidence":["README/docs mention a declared plugin/integration surface","Found shell dependency 'subprocess' in finrobot_equity/core/requirements.txt","README/docs also mention shell capabilities"]},"package_provenance_drift":{"status":"not_applicable","confidence":null,"summary":"No package source configured","evidence":[]},"evidence_grade":"C","coverage_grade":"C","signal_coverage":0.4,"signal_types":2,"listing_status":"listed","display_listing_status":"listed","display_status_label":"Listed","has_warning":false,"warning_reasons":[],"license_spdx":"Apache-2.0","license_type":"open","license_override":"","trust_score":50.3,"trust_score_v2":50.3,"rank_v2":234,"rank_v2_delta":-2,"trust_v2_adjustment":-1.6,"trust_confidence":1.0,"trust_breakdown":{"safety":7.7,"identity":10.8,"transparency":10.8,"maintenance":13.3,"adoption":9.3},"trust_v2_breakdown":{"mcp":0.0,"external_dependencies":-1.0,"tool_plugin_surface":-0.6,"package_provenance_drift":0.0},"pending_signals":false},{"name":"OpenFang","repo":"RightNow-AI/openfang","display_repo":"","url":"https://github.com/RightNow-AI/openfang","rank":235,"previous_rank":234,"rank_delta":-1,"stars":17996,"stars_fmt":"18.0k","forks":2277,"forks_fmt":"2.3k","last_push":"2026-07-02","days_ago":9,"weekly_commits":0,"commits_low_confidence":false,"score":65.0,"description":"Open-source Agent Operating System","language":"Rust","open_issues":70,"category":"Agent Frameworks","category_rank":57,"npm_package":"","crate_package":"","pypi_package":"","weekly_downloads":null,"dl_source":"","hn_mentions_30d":null,"has_provenance":false,"npm_provenance":null,"pypi_provenance":null,"signed_commits_ratio":0.26,"scorecard_score":4.5,"scorecard_checks":{"Binary-Artifacts":10,"Branch-Protection":0,"CI-Tests":0,"CII-Best-Practices":0,"Code-Review":0,"Contributors":10,"Dangerous-Workflow":10,"Dependency-Update-Tool":10,"Fuzzing":0,"License":10,"Maintained":10,"Packaging":10,"Pinned-Dependencies":0,"SAST":0,"Security-Policy":10,"Signed-Releases":0,"Token-Permissions":0,"Vulnerabilities":0},"scorecard_scanned_at":"2026-07-10T10:27:21Z","slug":"openfang","source_note":"","public_actions":null,"mcp_server_support":{"status":"implemented","confidence":"high","evidence":["README/docs explicitly mention an MCP server","Found MCP-related server path: crates/openfang-runtime/src/mcp_server.rs"]},"external_service_dependencies":{"providers":["Amazon Bedrock","Anthropic","Google Gemini","OpenAI"],"requires_api_keys":false,"confidence":"high","evidence":["README/docs mention OpenAI","Found OpenAI dependency 'openai' in agents/langchain-code-reviewer/requirements.txt","README/docs mention Anthropic","README/docs mention Google Gemini","README/docs mention Amazon Bedrock"]},"tool_plugin_surface":{"plugin_system":"marketplace","tool_tags":["browser","code","shell"],"confidence":"high","evidence":["README/docs mention a marketplace plugin/integration surface","README/docs mention browser capabilities","README/docs mention shell capabilities","README/docs mention code capabilities"]},"package_provenance_drift":{"status":"not_applicable","confidence":null,"summary":"No package source configured","evidence":[]},"evidence_grade":"C","coverage_grade":"C","signal_coverage":0.4,"signal_types":2,"listing_status":"listed","display_listing_status":"listed","display_status_label":"Listed","has_warning":false,"warning_reasons":[],"license_spdx":"Apache-2.0","license_type":"open","license_override":"","trust_score":50.2,"trust_score_v2":50.2,"rank_v2":235,"rank_v2_delta":-1,"trust_v2_adjustment":-1.4,"trust_confidence":1.0,"trust_breakdown":{"safety":6.9,"identity":10.8,"transparency":12.3,"maintenance":11.4,"adoption":10.2},"trust_v2_breakdown":{"mcp":2.0,"external_dependencies":-1.5,"tool_plugin_surface":-1.9,"package_provenance_drift":0.0},"pending_signals":false},{"name":"Stakpak Agent","repo":"stakpak/agent","display_repo":"","url":"https://github.com/stakpak/agent","rank":236,"previous_rank":236,"rank_delta":0,"stars":1653,"stars_fmt":"1.7k","forks":167,"forks_fmt":"167","last_push":"2026-07-06","days_ago":5,"weekly_commits":7,"commits_low_confidence":false,"score":65.3,"description":"Ship your code, on autopilot. An open source agent that lives on your machines 24/7 and keeps your apps running. 🦀","language":"Rust","open_issues":25,"category":"Coding Agents","category_rank":34,"npm_package":"","crate_package":"","pypi_package":"","weekly_downloads":null,"dl_source":"","hn_mentions_30d":null,"has_provenance":false,"npm_provenance":null,"pypi_provenance":null,"signed_commits_ratio":0.34,"scorecard_score":3.5,"scorecard_checks":{"Binary-Artifacts":10,"Branch-Protection":0,"CI-Tests":10,"CII-Best-Practices":0,"Code-Review":2,"Contributors":3,"Dangerous-Workflow":10,"Dependency-Update-Tool":0,"Fuzzing":0,"License":10,"Maintained":10,"Packaging":10,"Pinned-Dependencies":0,"SAST":0,"Security-Policy":0,"Signed-Releases":0,"Token-Permissions":0,"Vulnerabilities":0},"scorecard_scanned_at":"2026-07-10T16:23:07Z","slug":"stakpak-agent","source_note":"","public_actions":null,"mcp_server_support":{"status":"implemented","confidence":"high","evidence":["README/docs explicitly mention an MCP server","Found MCP-related server path: cli/src/commands/mcp/server.rs"]},"external_service_dependencies":{"providers":["Anthropic","Google Gemini","OpenAI"],"requires_api_keys":true,"confidence":"high","evidence":["README/docs mention OpenAI","Found OpenAI credential/config marker 'OPENAI_API_KEY'","README/docs mention Anthropic","Found Anthropic credential/config marker 'ANTHROPIC_API_KEY'","README/docs mention Google Gemini","Found Google Gemini credential/config marker 'GEMINI_API_KEY'"]},"tool_plugin_surface":{"plugin_system":"declared","tool_tags":["code","search","shell"],"confidence":"high","evidence":["README/docs mention a declared plugin/integration surface","README/docs mention shell capabilities","README/docs mention search capabilities","README/docs mention code capabilities"]},"package_provenance_drift":{"status":"not_applicable","confidence":null,"summary":"No package source configured","evidence":[]},"evidence_grade":"C","coverage_grade":"C","signal_coverage":0.4,"signal_types":2,"listing_status":"listed","display_listing_status":"listed","display_status_label":"Listed","has_warning":false,"warning_reasons":[],"license_spdx":"Apache-2.0","license_type":"open","license_override":"","trust_score":50.2,"trust_score_v2":50.2,"rank_v2":236,"rank_v2_delta":0,"trust_v2_adjustment":-1.2,"trust_confidence":1.0,"trust_breakdown":{"safety":6.1,"identity":10.8,"transparency":11.5,"maintenance":15.3,"adoption":7.7},"trust_v2_breakdown":{"mcp":2.0,"external_dependencies":-2.0,"tool_plugin_surface":-1.2,"package_provenance_drift":0.0},"pending_signals":false},{"name":"AdalFlow","repo":"SylphAI-Inc/AdalFlow","display_repo":"","url":"https://github.com/SylphAI-Inc/AdalFlow","rank":237,"previous_rank":235,"rank_delta":-2,"stars":4178,"stars_fmt":"4.2k","forks":378,"forks_fmt":"378","last_push":"2026-05-29","days_ago":43,"weekly_commits":0,"commits_low_confidence":false,"score":52.9,"description":"AdalFlow: The library to build & auto-optimize LLM applications.","language":"Python","open_issues":33,"category":"Agent Frameworks","category_rank":58,"npm_package":"","crate_package":"","pypi_package":"adalflow","weekly_downloads":1492,"dl_source":"pypi","hn_mentions_30d":0,"has_provenance":false,"npm_provenance":null,"pypi_provenance":false,"signed_commits_ratio":0.32,"scorecard_score":3.9,"scorecard_checks":{"Binary-Artifacts":10,"Branch-Protection":1,"CI-Tests":10,"CII-Best-Practices":0,"Code-Review":10,"Contributors":10,"Dangerous-Workflow":10,"Dependency-Update-Tool":0,"Fuzzing":0,"License":10,"Maintained":8,"Packaging":-1,"Pinned-Dependencies":0,"SAST":0,"Security-Policy":0,"Signed-Releases":0,"Token-Permissions":0,"Vulnerabilities":0},"scorecard_scanned_at":"2026-07-11T02:01:03Z","slug":"adalflow","source_note":"","public_actions":null,"mcp_server_support":{"status":"none","confidence":null,"evidence":[]},"external_service_dependencies":{"providers":["Amazon Bedrock","Anthropic","Google Gemini","OpenAI","Postgres","Qdrant"],"requires_api_keys":true,"confidence":"high","evidence":["README/docs mention OpenAI","Found OpenAI dependency 'openai' in pyproject.toml","Found OpenAI credential/config marker 'OPENAI_API_KEY'","Found Anthropic dependency 'anthropic' in pyproject.toml","Found Google Gemini dependency 'google-generativeai' in pyproject.toml","Found Amazon Bedrock dependency 'boto3' in pyproject.toml"]},"tool_plugin_surface":{"plugin_system":"declared","tool_tags":["code","database","search","shell"],"confidence":"high","evidence":["README/docs mention a declared plugin/integration surface","Found shell dependency 'pty' in docs/pyproject.toml","README/docs mention search capabilities","Found database dependency 'pg' in pyproject.toml","README/docs mention code capabilities"]},"package_provenance_drift":{"status":"match","confidence":"high","summary":"Published package metadata matches the tracked repo","evidence":["pypi package 'adalflow' points to the tracked repo"]},"evidence_grade":"C","coverage_grade":"A","signal_coverage":0.8,"signal_types":4,"listing_status":"listed","display_listing_status":"listed","display_status_label":"Listed","has_warning":false,"warning_reasons":[],"license_spdx":"MIT","license_type":"open","license_override":"","trust_score":50.1,"trust_score_v2":50.1,"rank_v2":237,"rank_v2_delta":1,"trust_v2_adjustment":-1.0,"trust_confidence":1.0,"trust_breakdown":{"safety":6.5,"identity":10.8,"transparency":11.8,"maintenance":9.1,"adoption":12.9},"trust_v2_breakdown":{"mcp":0.0,"external_dependencies":-3.5,"tool_plugin_surface":-1.5,"package_provenance_drift":4.0},"pending_signals":false},{"name":"CopilotKit","repo":"CopilotKit/CopilotKit","display_repo":"","url":"https://github.com/CopilotKit/CopilotKit","rank":238,"previous_rank":237,"rank_delta":-1,"stars":35914,"stars_fmt":"35.9k","forks":4437,"forks_fmt":"4.4k","last_push":"2026-07-11","days_ago":0,"weekly_commits":1941,"commits_low_confidence":false,"score":94.3,"description":"The Frontend Stack for Agents & Generative UI. React, Angular, Mobile, Slack, and more.  Makers of the AG-UI Protocol","language":"TypeScript","open_issues":329,"category":"UI & App Builders","category_rank":11,"npm_package":"@copilotkit/react-core","crate_package":"","pypi_package":"","weekly_downloads":356613,"dl_source":"npm","hn_mentions_30d":0,"has_provenance":false,"npm_provenance":false,"pypi_provenance":null,"signed_commits_ratio":0.68,"scorecard_score":null,"scorecard_checks":{},"scorecard_scanned_at":null,"slug":"copilotkit","source_note":"","public_actions":null,"mcp_server_support":{"status":"implemented","confidence":"high","evidence":["Found MCP-related server path: examples/integrations/mcp-apps/scripts/run-mcp-server.bat","Found MCP-related server path: examples/integrations/mcp-apps/scripts/run-mcp-server.sh","Found MCP-related server test path: packages/runtime/src/agent/__tests__/mcp-servers-integration.test.ts","Found MCP-related server docs path: showcase/shell-docs/src/content/docs/integrations/built-in-agent/mcp-servers.mdx"]},"external_service_dependencies":{"providers":["Anthropic","Google Gemini","OpenAI"],"requires_api_keys":false,"confidence":"high","evidence":["README/docs mention OpenAI","README/docs mention Anthropic","README/docs mention Google Gemini"]},"tool_plugin_surface":{"plugin_system":"declared","tool_tags":["browser","code"],"confidence":"high","evidence":["README/docs mention a declared plugin/integration surface","Found browser dependency 'playwright' in examples/e2e/package.json","README/docs mention code capabilities"]},"package_provenance_drift":{"status":"match","confidence":"high","summary":"Published package metadata matches the tracked repo","evidence":["npm package '@copilotkit/react-core' points to the tracked repo"]},"evidence_grade":"D","coverage_grade":"B","signal_coverage":0.6,"signal_types":3,"listing_status":"listed","display_listing_status":"listed","display_status_label":"Listed","has_warning":false,"warning_reasons":[],"license_spdx":"MIT","license_type":"open","license_override":"","trust_score":49.9,"trust_score_v2":49.9,"rank_v2":238,"rank_v2_delta":27,"trust_v2_adjustment":4.1,"trust_confidence":0.75,"trust_breakdown":{"safety":3.4,"identity":10.8,"transparency":8.5,"maintenance":20.0,"adoption":18.3},"trust_v2_breakdown":{"mcp":2.0,"external_dependencies":-1.0,"tool_plugin_surface":-0.9,"package_provenance_drift":4.0},"pending_signals":false},{"name":"Turbovec","repo":"RyanCodrai/turbovec","display_repo":"","url":"https://github.com/RyanCodrai/turbovec","rank":239,"previous_rank":238,"rank_delta":-1,"stars":12643,"stars_fmt":"12.6k","forks":1118,"forks_fmt":"1.1k","last_push":"2026-06-10","days_ago":31,"weekly_commits":0,"commits_low_confidence":false,"score":59.6,"description":"A vector index built on TurboQuant, written in Rust with Python bindings","language":"Python","open_issues":12,"category":"Needs review","category_rank":7,"npm_package":"","crate_package":"","pypi_package":"","weekly_downloads":null,"dl_source":"","hn_mentions_30d":null,"has_provenance":false,"npm_provenance":null,"pypi_provenance":null,"signed_commits_ratio":null,"scorecard_score":5.5,"scorecard_checks":{"Binary-Artifacts":10,"Branch-Protection":4,"CI-Tests":5,"CII-Best-Practices":0,"Code-Review":0,"Contributors":0,"Dangerous-Workflow":10,"Dependency-Update-Tool":0,"Fuzzing":0,"License":10,"Maintained":10,"Packaging":10,"Pinned-Dependencies":1,"SAST":0,"Security-Policy":10,"Signed-Releases":-1,"Token-Permissions":10,"Vulnerabilities":5},"scorecard_scanned_at":"2026-07-11T01:34:17Z","slug":"turbovec","source_note":"","public_actions":null,"mcp_server_support":{"status":"none","confidence":null,"evidence":[]},"external_service_dependencies":{"providers":["OpenAI"],"requires_api_keys":false,"confidence":"medium","evidence":["README/docs mention OpenAI"]},"tool_plugin_surface":{"plugin_system":"declared","tool_tags":["code","search"],"confidence":"high","evidence":["README/docs mention a declared plugin/integration surface","README/docs mention search capabilities","README/docs mention code capabilities"]},"package_provenance_drift":{"status":"not_applicable","confidence":null,"summary":"No package source configured","evidence":[]},"evidence_grade":"D","coverage_grade":"C","signal_coverage":0.4,"signal_types":2,"listing_status":"listed","display_listing_status":"listed","display_status_label":"Listed","has_warning":false,"warning_reasons":[],"license_spdx":"MIT","license_type":"open","license_override":"","trust_score":49.7,"trust_score_v2":49.7,"rank_v2":239,"rank_v2_delta":1,"trust_v2_adjustment":-0.9,"trust_confidence":1.0,"trust_breakdown":{"safety":6.9,"identity":10.8,"transparency":13.2,"maintenance":9.9,"adoption":9.8},"trust_v2_breakdown":{"mcp":0.0,"external_dependencies":-0.0,"tool_plugin_surface":-0.9,"package_provenance_drift":0.0},"pending_signals":false},{"name":"BrowserGym agents","repo":"ServiceNow/BrowserGym","display_repo":"","url":"https://github.com/ServiceNow/BrowserGym","rank":240,"previous_rank":240,"rank_delta":0,"stars":1271,"stars_fmt":"1.3k","forks":180,"forks_fmt":"180","last_push":"2026-03-17","days_ago":116,"weekly_commits":0,"commits_low_confidence":false,"score":38.1,"description":"🌎💪 BrowserGym, a Gym environment for web task automation","language":"Python","open_issues":18,"category":"Browser & Computer Use","category_rank":9,"npm_package":"","crate_package":"","pypi_package":"browsergym","weekly_downloads":6923,"dl_source":"pypi","hn_mentions_30d":0,"has_provenance":true,"npm_provenance":null,"pypi_provenance":true,"signed_commits_ratio":null,"scorecard_score":null,"scorecard_checks":{},"scorecard_scanned_at":null,"slug":"browsergym-agents","source_note":"","public_actions":null,"mcp_server_support":{"status":"declared","confidence":"medium","evidence":["Found MCP-related server path: browsergym/core/src/browsergym/utils/mcp_server.py"]},"external_service_dependencies":{"providers":["OpenAI"],"requires_api_keys":true,"confidence":"high","evidence":["README/docs mention OpenAI","Found OpenAI credential/config marker 'OPENAI_API_KEY'"]},"tool_plugin_surface":{"plugin_system":"none","tool_tags":["browser","code"],"confidence":"high","evidence":["README/docs mention browser capabilities","README/docs mention code capabilities"]},"package_provenance_drift":{"status":"unknown","confidence":"low","summary":"Package source metadata is missing or inconclusive","evidence":["pypi package 'browsergym' has a non-GitHub or unparseable source URL"]},"evidence_grade":"D","coverage_grade":"A","signal_coverage":0.8,"signal_types":4,"listing_status":"listed","display_listing_status":"listed","display_status_label":"Listed","has_warning":false,"warning_reasons":[],"license_spdx":"NOASSERTION","license_type":"open","license_override":"","trust_score":49.3,"trust_score_v2":49.3,"rank_v2":240,"rank_v2_delta":-1,"trust_v2_adjustment":-1.6,"trust_confidence":1.0,"trust_breakdown":{"safety":7.5,"identity":18.0,"transparency":8.5,"maintenance":4.3,"adoption":12.6},"trust_v2_breakdown":{"mcp":0.0,"external_dependencies":-1.0,"tool_plugin_surface":-0.6,"package_provenance_drift":0.0},"pending_signals":false},{"name":"Habitat-Lab","repo":"facebookresearch/habitat-lab","display_repo":"","url":"https://github.com/facebookresearch/habitat-lab","rank":241,"previous_rank":241,"rank_delta":0,"stars":3052,"stars_fmt":"3.1k","forks":680,"forks_fmt":"680","last_push":"2026-05-07","days_ago":65,"weekly_commits":0,"commits_low_confidence":false,"score":50.2,"description":"A modular high-level library to train embodied AI agents across a variety of tasks and environments.","language":"Python","open_issues":256,"category":"Robotics & Embodied","category_rank":2,"npm_package":"","crate_package":"","pypi_package":"","weekly_downloads":null,"dl_source":"","hn_mentions_30d":null,"has_provenance":false,"npm_provenance":null,"pypi_provenance":null,"signed_commits_ratio":1.0,"scorecard_score":4.5,"scorecard_checks":{"Binary-Artifacts":10,"Branch-Protection":6,"CI-Tests":1,"CII-Best-Practices":0,"Code-Review":8,"Contributors":10,"Dangerous-Workflow":10,"Dependency-Update-Tool":0,"Fuzzing":0,"License":10,"Maintained":1,"Packaging":10,"Pinned-Dependencies":0,"SAST":0,"Security-Policy":9,"Signed-Releases":-1,"Token-Permissions":0,"Vulnerabilities":0},"scorecard_scanned_at":"2026-07-10T17:38:54Z","slug":"habitat-lab","source_note":"","public_actions":null,"mcp_server_support":{"status":"none","confidence":null,"evidence":[]},"external_service_dependencies":{"providers":[],"requires_api_keys":false,"confidence":null,"evidence":[]},"tool_plugin_surface":{"plugin_system":"none","tool_tags":["code","shell"],"confidence":"high","evidence":["README/docs mention shell capabilities","README/docs mention code capabilities"]},"package_provenance_drift":{"status":"not_applicable","confidence":null,"summary":"No package source configured","evidence":[]},"evidence_grade":"D","coverage_grade":"C","signal_coverage":0.4,"signal_types":2,"listing_status":"listed","display_listing_status":"listed","display_status_label":"Listed","has_warning":false,"warning_reasons":[],"license_spdx":"MIT","license_type":"open","license_override":"","trust_score":49.2,"trust_score_v2":49.2,"rank_v2":241,"rank_v2_delta":3,"trust_v2_adjustment":-0.6,"trust_confidence":1.0,"trust_breakdown":{"safety":10.6,"identity":10.8,"transparency":12.3,"maintenance":7.7,"adoption":8.4},"trust_v2_breakdown":{"mcp":0.0,"external_dependencies":-0.0,"tool_plugin_surface":-0.6,"package_provenance_drift":0.0},"pending_signals":false},{"name":"Browser Use Web UI","repo":"browser-use/web-ui","display_repo":"","url":"https://github.com/browser-use/web-ui","rank":242,"previous_rank":242,"rank_delta":0,"stars":16184,"stars_fmt":"16.2k","forks":2716,"forks_fmt":"2.7k","last_push":"2026-05-15","days_ago":57,"weekly_commits":0,"commits_low_confidence":false,"score":58.5,"description":"🖥️ Run AI Agent in your browser.","language":"Python","open_issues":272,"category":"Browser & Computer Use","category_rank":10,"npm_package":"","crate_package":"","pypi_package":"","weekly_downloads":null,"dl_source":"","hn_mentions_30d":null,"has_provenance":false,"npm_provenance":null,"pypi_provenance":null,"signed_commits_ratio":0.45,"scorecard_score":4.2,"scorecard_checks":{"Binary-Artifacts":10,"Branch-Protection":3,"CI-Tests":1,"CII-Best-Practices":0,"Code-Review":9,"Contributors":10,"Dangerous-Workflow":10,"Dependency-Update-Tool":0,"Fuzzing":0,"License":10,"Maintained":2,"Packaging":-1,"Pinned-Dependencies":0,"SAST":1,"Security-Policy":10,"Signed-Releases":-1,"Token-Permissions":0,"Vulnerabilities":0},"scorecard_scanned_at":"2026-07-11T02:11:14Z","slug":"browser-use-web-ui","source_note":"","public_actions":null,"mcp_server_support":{"status":"none","confidence":null,"evidence":[]},"external_service_dependencies":{"providers":[],"requires_api_keys":false,"confidence":null,"evidence":[]},"tool_plugin_surface":{"plugin_system":"none","tool_tags":[],"confidence":null,"evidence":[]},"package_provenance_drift":{"status":"not_applicable","confidence":null,"summary":"No package source configured","evidence":[]},"evidence_grade":"D","coverage_grade":"C","signal_coverage":0.4,"signal_types":2,"listing_status":"listed","display_listing_status":"listed","display_status_label":"Listed","has_warning":false,"warning_reasons":[],"license_spdx":"MIT","license_type":"open","license_override":"","trust_score":48.7,"trust_score_v2":48.7,"rank_v2":242,"rank_v2_delta":7,"trust_v2_adjustment":0.0,"trust_confidence":1.0,"trust_breakdown":{"safety":7.5,"identity":10.8,"transparency":12.1,"maintenance":8.2,"adoption":10.1},"trust_v2_breakdown":{"mcp":0.0,"external_dependencies":-0.0,"tool_plugin_surface":-0.0,"package_provenance_drift":0.0},"pending_signals":false},{"name":"FastAgency","repo":"ag2ai/fastagency","display_repo":"","url":"https://github.com/ag2ai/fastagency","rank":243,"previous_rank":243,"rank_delta":0,"stars":544,"stars_fmt":"544","forks":63,"forks_fmt":"63","last_push":"2026-02-23","days_ago":138,"weekly_commits":0,"commits_low_confidence":false,"score":30.6,"description":"The fastest way to bring multi-agent workflows to production.","language":"Python","open_issues":72,"category":"Agent Frameworks","category_rank":59,"npm_package":"fastagency","crate_package":"","pypi_package":"fastagency","weekly_downloads":155,"dl_source":"npm+pypi","hn_mentions_30d":0,"has_provenance":false,"npm_provenance":false,"pypi_provenance":false,"signed_commits_ratio":1.0,"scorecard_score":5.8,"scorecard_checks":{"Binary-Artifacts":10,"Branch-Protection":8,"CI-Tests":2,"CII-Best-Practices":0,"Code-Review":7,"Contributors":10,"Dangerous-Workflow":10,"Dependency-Update-Tool":10,"Fuzzing":0,"License":10,"Maintained":0,"Packaging":10,"Pinned-Dependencies":0,"SAST":7,"Security-Policy":0,"Signed-Releases":-1,"Token-Permissions":0,"Vulnerabilities":9},"scorecard_scanned_at":"2026-07-11T02:12:43Z","slug":"fastagency","source_note":"","public_actions":null,"mcp_server_support":{"status":"none","confidence":null,"evidence":[]},"external_service_dependencies":{"providers":["Anthropic","OpenAI"],"requires_api_keys":true,"confidence":"high","evidence":["Found OpenAI dependency 'openai' in pyproject.toml","Found OpenAI credential/config marker 'OPENAI_API_KEY'","README/docs also mention OpenAI","Found Anthropic dependency 'anthropic' in pyproject.toml"]},"tool_plugin_surface":{"plugin_system":"declared","tool_tags":["browser"],"confidence":"high","evidence":["README/docs mention a declared plugin/integration surface","Found browser dependency 'playwright' in package.json"]},"package_provenance_drift":{"status":"partial","confidence":"medium","summary":"Some package metadata matches; some source metadata is missing","evidence":["npm package 'fastagency' does not expose a source repo URL","pypi package 'fastagency' points to the tracked repo"]},"evidence_grade":"D","coverage_grade":"A","signal_coverage":0.8,"signal_types":4,"listing_status":"listed","display_listing_status":"listed","display_status_label":"Listed","has_warning":false,"warning_reasons":[],"license_spdx":"Apache-2.0","license_type":"open","license_override":"","trust_score":48.6,"trust_score_v2":48.6,"rank_v2":243,"rank_v2_delta":7,"trust_v2_adjustment":-0.1,"trust_confidence":1.0,"trust_breakdown":{"safety":12.2,"identity":10.8,"transparency":13.4,"maintenance":2.8,"adoption":9.5},"trust_v2_breakdown":{"mcp":0.0,"external_dependencies":-1.5,"tool_plugin_surface":-0.6,"package_provenance_drift":2.0},"pending_signals":false},{"name":"Parlant","repo":"emcie-co/parlant","display_repo":"","url":"https://github.com/emcie-co/parlant","rank":244,"previous_rank":244,"rank_delta":0,"stars":18163,"stars_fmt":"18.2k","forks":1535,"forks_fmt":"1.5k","last_push":"2026-07-10","days_ago":1,"weekly_commits":7,"commits_low_confidence":true,"score":76.7,"description":"Build reliable customer-facing AI agents with Parlant: an interaction control harness optimized for controlled, consiste","language":"Python","open_issues":22,"category":"Agent Frameworks","category_rank":60,"npm_package":"","crate_package":"","pypi_package":"","weekly_downloads":null,"dl_source":"","hn_mentions_30d":null,"has_provenance":false,"npm_provenance":null,"pypi_provenance":null,"signed_commits_ratio":0.03,"scorecard_score":3.8,"scorecard_checks":{"Binary-Artifacts":10,"Branch-Protection":4,"CI-Tests":0,"CII-Best-Practices":0,"Code-Review":1,"Contributors":10,"Dangerous-Workflow":10,"Dependency-Update-Tool":0,"Fuzzing":0,"License":10,"Maintained":10,"Packaging":-1,"Pinned-Dependencies":3,"SAST":0,"Security-Policy":0,"Signed-Releases":-1,"Token-Permissions":0,"Vulnerabilities":0},"scorecard_scanned_at":"2026-07-10T08:39:27Z","slug":"parlant","source_note":"","public_actions":null,"mcp_server_support":{"status":"declared","confidence":"medium","evidence":["Found MCP dependency 'fastmcp' in pyproject.toml"]},"external_service_dependencies":{"providers":["Amazon Bedrock","Anthropic","OpenAI","Qdrant"],"requires_api_keys":false,"confidence":"high","evidence":["README/docs mention OpenAI","Found OpenAI dependency 'openai' in pyproject.toml","README/docs mention Anthropic","Found Anthropic dependency 'anthropic' in pyproject.toml","Found Amazon Bedrock dependency 'boto3' in pyproject.toml","Found Qdrant dependency 'qdrant' in pyproject.toml"]},"tool_plugin_surface":{"plugin_system":"declared","tool_tags":["code","database","search"],"confidence":"high","evidence":["README/docs mention a declared plugin/integration surface","README/docs mention search capabilities","Found database dependency 'qdrant' in pyproject.toml","README/docs mention code capabilities"]},"package_provenance_drift":{"status":"not_applicable","confidence":null,"summary":"No package source configured","evidence":[]},"evidence_grade":"D","coverage_grade":"C","signal_coverage":0.4,"signal_types":2,"listing_status":"listed","display_listing_status":"listed","display_status_label":"Listed","has_warning":false,"warning_reasons":[],"license_spdx":"Apache-2.0","license_type":"open","license_override":"","trust_score":48.6,"trust_score_v2":48.6,"rank_v2":244,"rank_v2_delta":-7,"trust_v2_adjustment":-2.7,"trust_confidence":1.0,"trust_breakdown":{"safety":4.9,"identity":10.8,"transparency":11.7,"maintenance":13.7,"adoption":10.2},"trust_v2_breakdown":{"mcp":0.0,"external_dependencies":-1.5,"tool_plugin_surface":-1.2,"package_provenance_drift":0.0},"pending_signals":false},{"name":"Integuru","repo":"Integuru-AI/Integuru","display_repo":"","url":"https://github.com/Integuru-AI/Integuru","rank":245,"previous_rank":246,"rank_delta":1,"stars":4635,"stars_fmt":"4.6k","forks":363,"forks_fmt":"363","last_push":"2026-06-24","days_ago":17,"weekly_commits":0,"commits_low_confidence":false,"score":56.7,"description":"The first AI agent that builds permissionless integrations through reverse engineering platforms' internal APIs.","language":"Python","open_issues":10,"category":"Coding Agents","category_rank":35,"npm_package":"","crate_package":"","pypi_package":"","weekly_downloads":null,"dl_source":"","hn_mentions_30d":null,"has_provenance":false,"npm_provenance":null,"pypi_provenance":null,"signed_commits_ratio":0.579,"scorecard_score":3.9,"scorecard_checks":{"Binary-Artifacts":10,"Branch-Protection":0,"CI-Tests":0,"CII-Best-Practices":0,"Code-Review":2,"Contributors":0,"Dangerous-Workflow":10,"Dependency-Update-Tool":10,"Fuzzing":0,"License":10,"Maintained":10,"Packaging":-1,"Pinned-Dependencies":0,"SAST":0,"Security-Policy":0,"Signed-Releases":-1,"Token-Permissions":0,"Vulnerabilities":0},"scorecard_scanned_at":"2026-07-11T02:09:54Z","slug":"integuru","source_note":"","public_actions":null,"mcp_server_support":{"status":"none","confidence":null,"evidence":[]},"external_service_dependencies":{"providers":["OpenAI"],"requires_api_keys":true,"confidence":"high","evidence":["Found OpenAI credential/config marker 'OPENAI_API_KEY'","README/docs also mention OpenAI"]},"tool_plugin_surface":{"plugin_system":"declared","tool_tags":["browser"],"confidence":"high","evidence":["README/docs mention a declared plugin/integration surface","Found browser dependency 'playwright' in pyproject.toml"]},"package_provenance_drift":{"status":"not_applicable","confidence":null,"summary":"No package source configured","evidence":[]},"evidence_grade":"D","coverage_grade":"C","signal_coverage":0.4,"signal_types":2,"listing_status":"listed","display_listing_status":"listed","display_status_label":"Listed","has_warning":false,"warning_reasons":[],"license_spdx":"AGPL-3.0","license_type":"open","license_override":"","trust_score":48.5,"trust_score_v2":48.5,"rank_v2":245,"rank_v2_delta":-2,"trust_v2_adjustment":-1.6,"trust_confidence":1.0,"trust_breakdown":{"safety":7.8,"identity":10.8,"transparency":11.8,"maintenance":10.9,"adoption":8.8},"trust_v2_breakdown":{"mcp":0.0,"external_dependencies":-1.0,"tool_plugin_surface":-0.6,"package_provenance_drift":0.0},"pending_signals":false},{"name":"Hive","repo":"aden-hive/hive","display_repo":"","url":"https://github.com/aden-hive/hive","rank":246,"previous_rank":245,"rank_delta":-1,"stars":10672,"stars_fmt":"10.7k","forks":5652,"forks_fmt":"5.7k","last_push":"2026-05-29","days_ago":43,"weekly_commits":0,"commits_low_confidence":false,"score":60.8,"description":"Multi-Agent Harness for Production AI","language":"Python","open_issues":891,"category":"Multi-Agent Systems","category_rank":14,"npm_package":"","crate_package":"","pypi_package":"","weekly_downloads":null,"dl_source":"","hn_mentions_30d":null,"has_provenance":false,"npm_provenance":null,"pypi_provenance":null,"signed_commits_ratio":0.12,"scorecard_score":4.3,"scorecard_checks":{"Binary-Artifacts":10,"Branch-Protection":3,"CI-Tests":10,"CII-Best-Practices":0,"Code-Review":0,"Contributors":10,"Dangerous-Workflow":10,"Dependency-Update-Tool":0,"Fuzzing":0,"License":10,"Maintained":10,"Packaging":-1,"Pinned-Dependencies":0,"SAST":0,"Security-Policy":10,"Signed-Releases":-1,"Token-Permissions":0,"Vulnerabilities":0},"scorecard_scanned_at":"2026-07-08T09:32:24Z","slug":"hive","source_note":"","public_actions":null,"mcp_server_support":{"status":"implemented","confidence":"high","evidence":["Found MCP-related server path: core/MCP_SERVER_GUIDE.md","Found MCP-related server path: core/examples/mcp_servers.json","Found MCP-related server test path: core/tests/test_mcp_server.py","Found MCP dependency 'fastmcp' in core/pyproject.toml"]},"external_service_dependencies":{"providers":["Anthropic","Postgres"],"requires_api_keys":false,"confidence":"high","evidence":["Found Anthropic dependency 'anthropic' in core/pyproject.toml","README/docs also mention Anthropic","Found Postgres dependency 'psycopg' in tools/pyproject.toml"]},"tool_plugin_surface":{"plugin_system":"extension-based","tool_tags":["browser"],"confidence":"high","evidence":["README/docs mention a extension-based plugin/integration surface","Found browser dependency 'playwright' in tools/pyproject.toml"]},"package_provenance_drift":{"status":"not_applicable","confidence":null,"summary":"No package source configured","evidence":[]},"evidence_grade":"D","coverage_grade":"C","signal_coverage":0.4,"signal_types":2,"listing_status":"listed","display_listing_status":"listed","display_status_label":"Listed","has_warning":false,"warning_reasons":[],"license_spdx":"Apache-2.0","license_type":"open","license_override":"","trust_score":48.4,"trust_score_v2":48.4,"rank_v2":246,"rank_v2_delta":8,"trust_v2_adjustment":0.6,"trust_confidence":1.0,"trust_breakdown":{"safety":6.0,"identity":10.8,"transparency":12.2,"maintenance":9.1,"adoption":9.7},"trust_v2_breakdown":{"mcp":2.0,"external_dependencies":-0.5,"tool_plugin_surface":-0.9,"package_provenance_drift":0.0},"pending_signals":false},{"name":"Upsonic","repo":"Upsonic/Upsonic","display_repo":"","url":"https://github.com/Upsonic/Upsonic","rank":247,"previous_rank":249,"rank_delta":2,"stars":7906,"stars_fmt":"7.9k","forks":737,"forks_fmt":"737","last_push":"2026-06-18","days_ago":23,"weekly_commits":4,"commits_low_confidence":true,"score":67.3,"description":"Build autonomous AI agents in Python.","language":"Python","open_issues":16,"category":"Agent Frameworks","category_rank":61,"npm_package":"","crate_package":"","pypi_package":"","weekly_downloads":null,"dl_source":"","hn_mentions_30d":null,"has_provenance":false,"npm_provenance":null,"pypi_provenance":null,"signed_commits_ratio":0.48,"scorecard_score":4.5,"scorecard_checks":{"Binary-Artifacts":10,"Branch-Protection":0,"CI-Tests":8,"CII-Best-Practices":0,"Code-Review":1,"Contributors":10,"Dangerous-Workflow":10,"Dependency-Update-Tool":0,"Fuzzing":0,"License":10,"Maintained":10,"Packaging":-1,"Pinned-Dependencies":8,"SAST":0,"Security-Policy":10,"Signed-Releases":-1,"Token-Permissions":0,"Vulnerabilities":0},"scorecard_scanned_at":"2026-07-06T11:16:19Z","slug":"upsonic","source_note":"","public_actions":null,"mcp_server_support":{"status":"declared","confidence":"medium","evidence":["Found MCP dependency 'fastmcp' in pyproject.toml"]},"external_service_dependencies":{"providers":["Amazon Bedrock","Anthropic","E2B","Firecrawl","OpenAI","Pinecone","Postgres","Qdrant","Redis","Tavily","Weaviate"],"requires_api_keys":false,"confidence":"high","evidence":["Found OpenAI dependency 'openai' in pyproject.toml","README/docs mention Anthropic","Found Anthropic dependency 'anthropic' in pyproject.toml","Found Amazon Bedrock dependency 'bedrock' in pyproject.toml","Found Pinecone dependency 'pinecone' in pyproject.toml","Found Qdrant dependency 'qdrant' in pyproject.toml"]},"tool_plugin_surface":{"plugin_system":"declared","tool_tags":["browser","code","database","search"],"confidence":"high","evidence":["README/docs mention a declared plugin/integration surface","Found browser dependency 'playwright' in pyproject.toml","Found search dependency 'tavily' in pyproject.toml","Found database dependency 'postgres' in pyproject.toml","README/docs mention code capabilities"]},"package_provenance_drift":{"status":"not_applicable","confidence":null,"summary":"No package source configured","evidence":[]},"evidence_grade":"D","coverage_grade":"C","signal_coverage":0.4,"signal_types":2,"listing_status":"listed","display_listing_status":"listed","display_status_label":"Listed","has_warning":false,"warning_reasons":[],"license_spdx":"MIT","license_type":"open","license_override":"","trust_score":47.9,"trust_score_v2":47.9,"rank_v2":247,"rank_v2_delta":-18,"trust_v2_adjustment":-4.5,"trust_confidence":1.0,"trust_breakdown":{"safety":8.0,"identity":10.8,"transparency":12.3,"maintenance":11.9,"adoption":9.4},"trust_v2_breakdown":{"mcp":0.0,"external_dependencies":-3.0,"tool_plugin_surface":-1.5,"package_provenance_drift":0.0},"pending_signals":false},{"name":"Call Center AI","repo":"microsoft/call-center-ai","display_repo":"","url":"https://github.com/microsoft/call-center-ai","rank":248,"previous_rank":248,"rank_delta":0,"stars":6529,"stars_fmt":"6.5k","forks":773,"forks_fmt":"773","last_push":"2026-07-01","days_ago":10,"weekly_commits":0,"commits_low_confidence":false,"score":60.1,"description":"Send a phone call from AI agent, in an API call. Or, directly call the bot from the configured phone number!","language":"Python","open_issues":19,"category":"Voice & Conversational","category_rank":6,"npm_package":"","crate_package":"","pypi_package":"","weekly_downloads":null,"dl_source":"","hn_mentions_30d":null,"has_provenance":false,"npm_provenance":null,"pypi_provenance":null,"signed_commits_ratio":0.17,"scorecard_score":4.6,"scorecard_checks":{"Binary-Artifacts":10,"Branch-Protection":3,"CI-Tests":0,"CII-Best-Practices":0,"Code-Review":0,"Contributors":3,"Dangerous-Workflow":10,"Dependency-Update-Tool":10,"Fuzzing":0,"License":10,"Maintained":0,"Packaging":10,"Pinned-Dependencies":1,"SAST":7,"Security-Policy":10,"Signed-Releases":-1,"Token-Permissions":0,"Vulnerabilities":0},"scorecard_scanned_at":"2026-07-10T16:22:37Z","slug":"call-center-ai","source_note":"","public_actions":null,"mcp_server_support":{"status":"none","confidence":null,"evidence":[]},"external_service_dependencies":{"providers":["Azure OpenAI","OpenAI","Redis"],"requires_api_keys":false,"confidence":"high","evidence":["README/docs mention OpenAI","Found OpenAI dependency 'openai' in pyproject.toml","README/docs mention Azure OpenAI","README/docs mention Redis","Found Redis dependency 'redis' in pyproject.toml"]},"tool_plugin_surface":{"plugin_system":"declared","tool_tags":["code","database","search","shell"],"confidence":"high","evidence":["README/docs mention a declared plugin/integration surface","README/docs mention shell capabilities","README/docs mention search capabilities","README/docs mention database capabilities","README/docs mention code capabilities"]},"package_provenance_drift":{"status":"not_applicable","confidence":null,"summary":"No package source configured","evidence":[]},"evidence_grade":"D","coverage_grade":"C","signal_coverage":0.4,"signal_types":2,"listing_status":"listed","display_listing_status":"listed","display_status_label":"Listed","has_warning":false,"warning_reasons":[],"license_spdx":"Apache-2.0","license_type":"open","license_override":"","trust_score":47.8,"trust_score_v2":47.8,"rank_v2":248,"rank_v2_delta":-6,"trust_v2_adjustment":-2.5,"trust_confidence":1.0,"trust_breakdown":{"safety":6.6,"identity":10.8,"transparency":12.4,"maintenance":11.3,"adoption":9.2},"trust_v2_breakdown":{"mcp":0.0,"external_dependencies":-1.0,"tool_plugin_surface":-1.5,"package_provenance_drift":0.0},"pending_signals":false},{"name":"AI Town","repo":"a16z-infra/ai-town","display_repo":"","url":"https://github.com/a16z-infra/ai-town","rank":249,"previous_rank":247,"rank_delta":-2,"stars":10138,"stars_fmt":"10.1k","forks":1126,"forks_fmt":"1.1k","last_push":"2026-06-12","days_ago":29,"weekly_commits":1,"commits_low_confidence":false,"score":63.1,"description":"A MIT-licensed, deployable starter kit for building and customizing your own version of AI town - a virtual town where A","language":"TypeScript","open_issues":67,"category":"Needs review","category_rank":8,"npm_package":"","crate_package":"","pypi_package":"","weekly_downloads":null,"dl_source":"","hn_mentions_30d":null,"has_provenance":false,"npm_provenance":null,"pypi_provenance":null,"signed_commits_ratio":0.26,"scorecard_score":3.5,"scorecard_checks":{"Binary-Artifacts":10,"Branch-Protection":6,"CI-Tests":0,"CII-Best-Practices":0,"Code-Review":1,"Contributors":10,"Dangerous-Workflow":-1,"Dependency-Update-Tool":10,"Fuzzing":0,"License":10,"Maintained":1,"Packaging":-1,"Pinned-Dependencies":0,"SAST":0,"Security-Policy":0,"Signed-Releases":-1,"Token-Permissions":-1,"Vulnerabilities":0},"scorecard_scanned_at":"2026-07-11T03:37:23Z","slug":"ai-town","source_note":"","public_actions":null,"mcp_server_support":{"status":"none","confidence":null,"evidence":[]},"external_service_dependencies":{"providers":["OpenAI"],"requires_api_keys":true,"confidence":"high","evidence":["Found OpenAI credential/config marker 'OPENAI_API_KEY'","README/docs also mention OpenAI"]},"tool_plugin_surface":{"plugin_system":"declared","tool_tags":[],"confidence":"medium","evidence":["README/docs mention a declared plugin/integration surface"]},"package_provenance_drift":{"status":"not_applicable","confidence":null,"summary":"No package source configured","evidence":[]},"evidence_grade":"D","coverage_grade":"C","signal_coverage":0.4,"signal_types":2,"listing_status":"listed","display_listing_status":"listed","display_status_label":"Listed","has_warning":false,"warning_reasons":[],"license_spdx":"MIT","license_type":"open","license_override":"","trust_score":47.6,"trust_score_v2":47.6,"rank_v2":249,"rank_v2_delta":-1,"trust_v2_adjustment":-1.3,"trust_confidence":1.0,"trust_breakdown":{"safety":5.7,"identity":10.8,"transparency":11.5,"maintenance":11.3,"adoption":9.6},"trust_v2_breakdown":{"mcp":0.0,"external_dependencies":-1.0,"tool_plugin_surface":-0.3,"package_provenance_drift":0.0},"pending_signals":false},{"name":"Ragas","repo":"explodinggradients/ragas","display_repo":"","url":"https://github.com/vibrantlabsai/ragas","rank":250,"previous_rank":250,"rank_delta":0,"stars":14780,"stars_fmt":"14.8k","forks":1552,"forks_fmt":"1.6k","last_push":"2026-02-24","days_ago":137,"weekly_commits":0,"commits_low_confidence":false,"score":45.9,"description":"Supercharge Your LLM Application Evaluations 🚀","language":"Python","open_issues":328,"category":"Observability & Evaluation","category_rank":15,"npm_package":"","crate_package":"","pypi_package":"ragas","weekly_downloads":390877,"dl_source":"pypi","hn_mentions_30d":3,"has_provenance":false,"npm_provenance":null,"pypi_provenance":false,"signed_commits_ratio":1.0,"scorecard_score":4.4,"scorecard_checks":{"Binary-Artifacts":10,"Branch-Protection":3,"CI-Tests":9,"CII-Best-Practices":0,"Code-Review":4,"Contributors":10,"Dangerous-Workflow":0,"Dependency-Update-Tool":0,"Fuzzing":0,"License":10,"Maintained":0,"Packaging":10,"Pinned-Dependencies":0,"SAST":0,"Security-Policy":10,"Signed-Releases":-1,"Token-Permissions":7,"Vulnerabilities":10},"scorecard_scanned_at":"2026-07-11T04:02:41Z","slug":"ragas","source_note":"","public_actions":null,"mcp_server_support":{"status":"none","confidence":null,"evidence":[]},"external_service_dependencies":{"providers":["OpenAI"],"requires_api_keys":true,"confidence":"high","evidence":["README/docs mention OpenAI","Found OpenAI dependency 'openai' in pyproject.toml","Found OpenAI credential/config marker 'OPENAI_API_KEY'"]},"tool_plugin_surface":{"plugin_system":"declared","tool_tags":["code","search"],"confidence":"high","evidence":["README/docs mention a declared plugin/integration surface","README/docs mention search capabilities","README/docs mention code capabilities"]},"package_provenance_drift":{"status":"warning","confidence":"high","summary":"1 package source mismatch detected","evidence":["pypi package 'ragas' points to vibrantlabsai/ragas, not explodinggradients/ragas"]},"evidence_grade":"D","coverage_grade":"A","signal_coverage":0.8,"signal_types":4,"listing_status":"listed","display_listing_status":"listed","display_status_label":"Listed","has_warning":false,"warning_reasons":[],"license_spdx":"Apache-2.0","license_type":"open","license_override":"","trust_score":47.0,"trust_score_v2":47.0,"rank_v2":250,"rank_v2_delta":-24,"trust_v2_adjustment":-6.9,"trust_confidence":1.0,"trust_breakdown":{"safety":10.5,"identity":10.8,"transparency":12.2,"maintenance":2.9,"adoption":17.5},"trust_v2_breakdown":{"mcp":0.0,"external_dependencies":-1.0,"tool_plugin_surface":-0.9,"package_provenance_drift":-5.0},"pending_signals":false},{"name":"MiroThinker","repo":"MiroMindAI/MiroThinker","display_repo":"","url":"https://github.com/MiroMindAI/MiroThinker","rank":251,"previous_rank":251,"rank_delta":0,"stars":8330,"stars_fmt":"8.3k","forks":644,"forks_fmt":"644","last_push":"2026-07-06","days_ago":5,"weekly_commits":0,"commits_low_confidence":false,"score":61.0,"description":"MiroThinker is a deep research agent optimized for complex research and prediction tasks. Our latest models, MiroThinker","language":"Python","open_issues":1,"category":"Research & Data","category_rank":12,"npm_package":"","crate_package":"","pypi_package":"","weekly_downloads":null,"dl_source":"","hn_mentions_30d":null,"has_provenance":false,"npm_provenance":null,"pypi_provenance":null,"signed_commits_ratio":0.49,"scorecard_score":3.1,"scorecard_checks":{"Binary-Artifacts":10,"Branch-Protection":0,"CI-Tests":10,"CII-Best-Practices":0,"Code-Review":4,"Contributors":10,"Dangerous-Workflow":10,"Dependency-Update-Tool":0,"Fuzzing":0,"License":10,"Maintained":1,"Packaging":-1,"Pinned-Dependencies":0,"SAST":0,"Security-Policy":0,"Signed-Releases":-1,"Token-Permissions":0,"Vulnerabilities":0},"scorecard_scanned_at":"2026-07-10T10:16:47Z","slug":"mirothinker","source_note":"","public_actions":null,"mcp_server_support":{"status":"implemented","confidence":"high","evidence":["Found MCP-related server path: libs/miroflow-tools/src/miroflow_tools/dev_mcp_servers/jina_scrape_llm_summary.py","Found MCP-related server path: libs/miroflow-tools/src/miroflow_tools/dev_mcp_servers/search_and_scrape_webpage.py","Found MCP dependency 'fastmcp' in apps/miroflow-agent/pyproject.toml","Found MCP dependency 'fastmcp' in libs/miroflow-tools/pyproject.toml"]},"external_service_dependencies":{"providers":["Anthropic","E2B","Google Gemini","OpenAI","Redis"],"requires_api_keys":true,"confidence":"high","evidence":["README/docs mention OpenAI","Found OpenAI dependency 'openai' in apps/collect-trace/pyproject.toml","Found OpenAI credential/config marker 'OPENAI_API_KEY'","README/docs mention Anthropic","Found Anthropic dependency 'anthropic' in apps/miroflow-agent/pyproject.toml","Found Anthropic credential/config marker 'ANTHROPIC_API_KEY'"]},"tool_plugin_surface":{"plugin_system":"declared","tool_tags":["browser","code","database","search"],"confidence":"high","evidence":["README/docs mention a declared plugin/integration surface","Found browser dependency 'playwright' in libs/miroflow-tools/pyproject.toml","README/docs mention search capabilities","Found database dependency 'redis' in libs/miroflow-tools/pyproject.toml","README/docs mention code capabilities"]},"package_provenance_drift":{"status":"not_applicable","confidence":null,"summary":"No package source configured","evidence":[]},"evidence_grade":"D","coverage_grade":"C","signal_coverage":0.4,"signal_types":2,"listing_status":"listed","display_listing_status":"listed","display_status_label":"Listed","has_warning":false,"warning_reasons":[],"license_spdx":"Apache-2.0","license_type":"open","license_override":"","trust_score":46.8,"trust_score_v2":46.8,"rank_v2":251,"rank_v2_delta":-6,"trust_v2_adjustment":-2.5,"trust_confidence":1.0,"trust_breakdown":{"safety":6.3,"identity":10.8,"transparency":11.1,"maintenance":11.7,"adoption":9.4},"trust_v2_breakdown":{"mcp":2.0,"external_dependencies":-3.0,"tool_plugin_surface":-1.5,"package_provenance_drift":0.0},"pending_signals":false},{"name":"YoMo","repo":"yomorun/yomo","display_repo":"","url":"https://github.com/yomorun/yomo","rank":252,"previous_rank":252,"rank_delta":0,"stars":1913,"stars_fmt":"1.9k","forks":144,"forks_fmt":"144","last_push":"2026-07-10","days_ago":1,"weekly_commits":45,"commits_low_confidence":false,"score":75.5,"description":"🦖 Serverless AI Agent Framework with Geo-distributed Edge AI Infra.","language":"Rust","open_issues":0,"category":"Agent Frameworks","category_rank":62,"npm_package":"","crate_package":"","pypi_package":"","weekly_downloads":null,"dl_source":"","hn_mentions_30d":null,"has_provenance":false,"npm_provenance":null,"pypi_provenance":null,"signed_commits_ratio":0.09,"scorecard_score":4.3,"scorecard_checks":{"Binary-Artifacts":10,"Branch-Protection":6,"CI-Tests":5,"CII-Best-Practices":0,"Code-Review":4,"Contributors":0,"Dangerous-Workflow":10,"Dependency-Update-Tool":0,"Fuzzing":0,"License":0,"Maintained":10,"Packaging":10,"Pinned-Dependencies":0,"SAST":0,"Security-Policy":0,"Signed-Releases":0,"Token-Permissions":0,"Vulnerabilities":9},"scorecard_scanned_at":"2026-07-10T17:27:33Z","slug":"yomo","source_note":"","public_actions":null,"mcp_server_support":{"status":"none","confidence":null,"evidence":[]},"external_service_dependencies":{"providers":["OpenAI"],"requires_api_keys":false,"confidence":"medium","evidence":["README/docs mention OpenAI"]},"tool_plugin_surface":{"plugin_system":"none","tool_tags":["code"],"confidence":"medium","evidence":["README/docs mention code capabilities"]},"package_provenance_drift":{"status":"not_applicable","confidence":null,"summary":"No package source configured","evidence":[]},"evidence_grade":"D","coverage_grade":"C","signal_coverage":0.4,"signal_types":2,"listing_status":"warning","display_listing_status":"warning","display_status_label":"Needs review","has_warning":true,"warning_reasons":[{"repo":"yomorun/yomo","criterion":"4.1.1","detail":"no declared license (GitHub license field is null)"}],"license_spdx":null,"license_type":"unlicensed","license_override":"","trust_score":46.5,"trust_score_v2":46.5,"rank_v2":252,"rank_v2_delta":7,"trust_v2_adjustment":-0.3,"trust_confidence":1.0,"trust_breakdown":{"safety":5.8,"identity":10.8,"transparency":3.7,"maintenance":18.6,"adoption":7.9},"trust_v2_breakdown":{"mcp":0.0,"external_dependencies":-0.0,"tool_plugin_surface":-0.3,"package_provenance_drift":0.0},"pending_signals":false},{"name":"Opik","repo":"comet-ml/opik","display_repo":"","url":"https://github.com/comet-ml/opik","rank":253,"previous_rank":253,"rank_delta":0,"stars":20531,"stars_fmt":"20.5k","forks":1596,"forks_fmt":"1.6k","last_push":"2026-07-10","days_ago":1,"weekly_commits":346,"commits_low_confidence":false,"score":90.8,"description":"Debug, evaluate, and monitor your LLM applications, RAG systems, and agentic workflows with comprehensive tracing, autom","language":"Python","open_issues":89,"category":"Observability & Evaluation","category_rank":16,"npm_package":"opik","crate_package":"","pypi_package":"opik","weekly_downloads":936642,"dl_source":"npm+pypi","hn_mentions_30d":205,"has_provenance":false,"npm_provenance":false,"pypi_provenance":false,"signed_commits_ratio":0.89,"scorecard_score":null,"scorecard_checks":{},"scorecard_scanned_at":null,"slug":"opik","source_note":"","public_actions":null,"mcp_server_support":{"status":"declared","confidence":"medium","evidence":["Found MCP-related server path: .agents/mcp.json","Found MCP-related server path: apps/opik-documentation/documentation/fern/docs-v2/prompt_engineering/mcp-server.mdx","Found MCP-related server docs path: apps/opik-documentation/documentation/fern/docs/prompt_engineering/mcp_server.mdx"]},"external_service_dependencies":{"providers":["Amazon Bedrock","Anthropic","Google Gemini","OpenAI"],"requires_api_keys":false,"confidence":"high","evidence":["README/docs mention OpenAI","Found OpenAI dependency 'openai' in sdks/python/setup.py","README/docs mention Anthropic","Found Anthropic dependency 'anthropic' in tests_load/requirements.txt","README/docs mention Google Gemini","README/docs mention Amazon Bedrock"]},"tool_plugin_surface":{"plugin_system":"declared","tool_tags":["code"],"confidence":"high","evidence":["README/docs mention a declared plugin/integration surface","README/docs mention code capabilities"]},"package_provenance_drift":{"status":"partial","confidence":"medium","summary":"Some package metadata matches; some source metadata is missing","evidence":["npm package 'opik' points to the tracked repo","pypi package 'opik' has a non-GitHub or unparseable source URL"]},"evidence_grade":"D","coverage_grade":"B","signal_coverage":0.6,"signal_types":3,"listing_status":"listed","display_listing_status":"listed","display_status_label":"Listed","has_warning":false,"warning_reasons":[],"license_spdx":"Apache-2.0","license_type":"open","license_override":"","trust_score":46.4,"trust_score_v2":46.4,"rank_v2":253,"rank_v2_delta":10,"trust_v2_adjustment":-0.1,"trust_confidence":0.75,"trust_breakdown":{"safety":4.5,"identity":10.8,"transparency":8.5,"maintenance":19.9,"adoption":18.3},"trust_v2_breakdown":{"mcp":0.0,"external_dependencies":-1.5,"tool_plugin_surface":-0.6,"package_provenance_drift":2.0},"pending_signals":false},{"name":"opencode","repo":"anomalyco/opencode","display_repo":"","url":"https://github.com/anomalyco/opencode","rank":254,"previous_rank":255,"rank_delta":1,"stars":184605,"stars_fmt":"184.6k","forks":23021,"forks_fmt":"23.0k","last_push":"2026-07-11","days_ago":0,"weekly_commits":846,"commits_low_confidence":false,"score":100.0,"description":"The open source coding agent.","language":"TypeScript","open_issues":3583,"category":"Coding Agents","category_rank":36,"npm_package":"opencode-ai","crate_package":"","pypi_package":"","weekly_downloads":1934132,"dl_source":"npm","hn_mentions_30d":57,"has_provenance":false,"npm_provenance":false,"pypi_provenance":null,"signed_commits_ratio":0.67,"scorecard_score":null,"scorecard_checks":{},"scorecard_scanned_at":null,"slug":"opencode","source_note":"","public_actions":null,"mcp_server_support":{"status":"declared","confidence":"medium","evidence":["Found MCP-related server docs path: packages/web/src/content/docs/ar/mcp-servers.mdx","Found MCP-related server docs path: packages/web/src/content/docs/bs/mcp-servers.mdx","Found MCP dependency '@modelcontextprotocol/sdk' in package.json"]},"external_service_dependencies":{"providers":[],"requires_api_keys":false,"confidence":null,"evidence":[]},"tool_plugin_surface":{"plugin_system":"declared","tool_tags":["browser"],"confidence":"high","evidence":["Found declared path: .opencode/plugins/smoke-theme.json","Found browser dependency 'playwright' in package.json"]},"package_provenance_drift":{"status":"unknown","confidence":"low","summary":"Package source metadata is missing or inconclusive","evidence":["npm package 'opencode-ai' does not expose a source repo URL"]},"evidence_grade":"D","coverage_grade":"B","signal_coverage":0.6,"signal_types":3,"listing_status":"listed","display_listing_status":"listed","display_status_label":"Listed","has_warning":false,"warning_reasons":[],"license_spdx":"MIT","license_type":"open","license_override":"","trust_score":46.4,"trust_score_v2":46.4,"rank_v2":254,"rank_v2_delta":2,"trust_v2_adjustment":-0.6,"trust_confidence":0.75,"trust_breakdown":{"safety":3.4,"identity":10.8,"transparency":8.5,"maintenance":20.0,"adoption":20.0},"trust_v2_breakdown":{"mcp":0.0,"external_dependencies":-0.0,"tool_plugin_surface":-0.6,"package_provenance_drift":0.0},"pending_signals":false},{"name":"autoMate","repo":"yuruotong1/autoMate","display_repo":"","url":"https://github.com/yuruotong1/autoMate","rank":255,"previous_rank":254,"rank_delta":-1,"stars":3928,"stars_fmt":"3.9k","forks":490,"forks_fmt":"490","last_push":"2026-04-30","days_ago":72,"weekly_commits":0,"commits_low_confidence":false,"score":49.2,"description":"Like Manus, Computer Use Agent(CUA) and Omniparser, we are computer-using agents.AI-driven local automation assistant th","language":"Python","open_issues":0,"category":"Browser & Computer Use","category_rank":11,"npm_package":"","crate_package":"","pypi_package":"","weekly_downloads":null,"dl_source":"","hn_mentions_30d":null,"has_provenance":false,"npm_provenance":null,"pypi_provenance":null,"signed_commits_ratio":0.67,"scorecard_score":4.0,"scorecard_checks":{"Binary-Artifacts":10,"Branch-Protection":0,"CI-Tests":-1,"CII-Best-Practices":0,"Code-Review":0,"Contributors":6,"Dangerous-Workflow":10,"Dependency-Update-Tool":0,"Fuzzing":0,"License":10,"Maintained":10,"Packaging":10,"Pinned-Dependencies":0,"SAST":0,"Security-Policy":0,"Signed-Releases":0,"Token-Permissions":0,"Vulnerabilities":10},"scorecard_scanned_at":"2026-07-11T01:35:55Z","slug":"automate","source_note":"","public_actions":null,"mcp_server_support":{"status":"implemented","confidence":"medium","evidence":["README/docs explicitly mention an MCP server"]},"external_service_dependencies":{"providers":["Anthropic","Google Gemini","OpenAI"],"requires_api_keys":false,"confidence":"high","evidence":["README/docs mention OpenAI","Found OpenAI dependency 'openai' in pyproject.toml","README/docs mention Anthropic","README/docs mention Google Gemini"]},"tool_plugin_surface":{"plugin_system":"extension-based","tool_tags":["browser","code","search"],"confidence":"high","evidence":["README/docs mention a extension-based plugin/integration surface","README/docs mention browser capabilities","README/docs mention search capabilities","README/docs mention code capabilities"]},"package_provenance_drift":{"status":"not_applicable","confidence":null,"summary":"No package source configured","evidence":[]},"evidence_grade":"D","coverage_grade":"C","signal_coverage":0.4,"signal_types":2,"listing_status":"listed","display_listing_status":"listed","display_status_label":"Listed","has_warning":false,"warning_reasons":[],"license_spdx":"MIT","license_type":"open","license_override":"","trust_score":46.3,"trust_score_v2":46.3,"rank_v2":255,"rank_v2_delta":5,"trust_v2_adjustment":-0.5,"trust_confidence":1.0,"trust_breakdown":{"safety":8.3,"identity":10.8,"transparency":11.9,"maintenance":7.2,"adoption":8.6},"trust_v2_breakdown":{"mcp":2.0,"external_dependencies":-1.0,"tool_plugin_surface":-1.5,"package_provenance_drift":0.0},"pending_signals":false},{"name":"Fedml","repo":"FedML-AI/FedML","display_repo":"","url":"https://github.com/FedML-AI/FedML","rank":256,"previous_rank":257,"rank_delta":1,"stars":4051,"stars_fmt":"4.1k","forks":765,"forks_fmt":"765","last_push":"2025-10-28","days_ago":256,"weekly_commits":0,"commits_low_confidence":false,"score":35.0,"description":"FEDML - The unified and scalable ML library for large-scale distributed training, model serving, and federated learning.","language":"Python","open_issues":122,"category":"Agent Frameworks","category_rank":63,"npm_package":"","crate_package":"","pypi_package":"fedml","weekly_downloads":239,"dl_source":"pypi","hn_mentions_30d":null,"has_provenance":false,"npm_provenance":null,"pypi_provenance":false,"signed_commits_ratio":0.37,"scorecard_score":5.3,"scorecard_checks":{"Binary-Artifacts":4,"Branch-Protection":8,"CI-Tests":0,"CII-Best-Practices":0,"Code-Review":9,"Contributors":10,"Dangerous-Workflow":10,"Dependency-Update-Tool":10,"Fuzzing":0,"License":10,"Maintained":0,"Packaging":-1,"Pinned-Dependencies":0,"SAST":7,"Security-Policy":0,"Signed-Releases":-1,"Token-Permissions":0,"Vulnerabilities":10},"scorecard_scanned_at":"2026-07-08T08:55:52Z","slug":"fedml","source_note":"","public_actions":null,"mcp_server_support":{"status":"none","confidence":null,"evidence":[]},"external_service_dependencies":{"providers":["Amazon Bedrock","Redis"],"requires_api_keys":false,"confidence":"high","evidence":["Found Amazon Bedrock dependency 'boto3' in requirements.txt","Found Redis dependency 'redis' in requirements.txt"]},"tool_plugin_surface":{"plugin_system":"marketplace","tool_tags":["code","database"],"confidence":"high","evidence":["README/docs mention a marketplace plugin/integration surface","README/docs mention database capabilities","README/docs mention code capabilities"]},"package_provenance_drift":{"status":"match","confidence":"high","summary":"Published package metadata matches the tracked repo","evidence":["pypi package 'fedml' points to the tracked repo"]},"evidence_grade":"D","coverage_grade":"B","signal_coverage":0.6,"signal_types":3,"listing_status":"listed","display_listing_status":"listed","display_status_label":"Listed","has_warning":false,"warning_reasons":[],"license_spdx":"Apache-2.0","license_type":"open","license_override":"","trust_score":46.0,"trust_score_v2":46.0,"rank_v2":256,"rank_v2_delta":15,"trust_v2_adjustment":1.9,"trust_confidence":1.0,"trust_breakdown":{"safety":8.5,"identity":10.8,"transparency":13.0,"maintenance":0.0,"adoption":11.8},"trust_v2_breakdown":{"mcp":0.0,"external_dependencies":-0.5,"tool_plugin_surface":-1.6,"package_provenance_drift":4.0},"pending_signals":false},{"name":"GPT Pilot","repo":"Pythagora-io/gpt-pilot","display_repo":"","url":"https://github.com/Pythagora-io/gpt-pilot","rank":257,"previous_rank":256,"rank_delta":-1,"stars":33730,"stars_fmt":"33.7k","forks":3477,"forks_fmt":"3.5k","last_push":"2026-06-18","days_ago":23,"weekly_commits":2,"commits_low_confidence":true,"score":71.6,"description":"The first real AI developer","language":"Python","open_issues":244,"category":"Coding Agents","category_rank":37,"npm_package":"","crate_package":"","pypi_package":"gpt-pilot","weekly_downloads":21,"dl_source":"pypi","hn_mentions_30d":2,"has_provenance":false,"npm_provenance":null,"pypi_provenance":false,"signed_commits_ratio":null,"scorecard_score":2.5,"scorecard_checks":{"Binary-Artifacts":10,"Branch-Protection":0,"CI-Tests":0,"CII-Best-Practices":0,"Code-Review":0,"Contributors":10,"Dangerous-Workflow":10,"Dependency-Update-Tool":0,"Fuzzing":0,"License":9,"Maintained":1,"Packaging":-1,"Pinned-Dependencies":0,"SAST":0,"Security-Policy":0,"Signed-Releases":-1,"Token-Permissions":0,"Vulnerabilities":0},"scorecard_scanned_at":"2026-06-28T09:11:08Z","slug":"gpt-pilot","source_note":"","public_actions":null,"mcp_server_support":{"status":"none","confidence":null,"evidence":[]},"external_service_dependencies":{"providers":["Anthropic","OpenAI","Postgres"],"requires_api_keys":false,"confidence":"high","evidence":["README/docs mention OpenAI","Found OpenAI dependency 'openai' in pyproject.toml","README/docs mention Anthropic","Found Anthropic dependency 'anthropic' in pyproject.toml","README/docs mention Postgres","Found Postgres dependency 'postgres' in core/db/setup.py"]},"tool_plugin_surface":{"plugin_system":"marketplace","tool_tags":["code","database"],"confidence":"high","evidence":["README/docs mention a marketplace plugin/integration surface","Found database dependency 'postgres' in core/db/setup.py","README/docs mention code capabilities"]},"package_provenance_drift":{"status":"unknown","confidence":"low","summary":"Package source metadata is missing or inconclusive","evidence":["pypi package 'gpt-pilot' has a non-GitHub or unparseable source URL"]},"evidence_grade":"D","coverage_grade":"A","signal_coverage":0.8,"signal_types":4,"listing_status":"listed","display_listing_status":"listed","display_status_label":"Listed","has_warning":false,"warning_reasons":[],"license_spdx":"NOASSERTION","license_type":"source-available","license_override":"","trust_score":46.0,"trust_score_v2":46.0,"rank_v2":257,"rank_v2_delta":-6,"trust_v2_adjustment":-2.6,"trust_confidence":1.0,"trust_breakdown":{"safety":3.1,"identity":10.8,"transparency":10.6,"maintenance":11.4,"adoption":12.7},"trust_v2_breakdown":{"mcp":0.0,"external_dependencies":-1.0,"tool_plugin_surface":-1.6,"package_provenance_drift":0.0},"pending_signals":false},{"name":"Swarm by OpenAI","repo":"openai/swarm","display_repo":"","url":"https://github.com/openai/swarm","rank":258,"previous_rank":258,"rank_delta":0,"stars":21784,"stars_fmt":"21.8k","forks":2321,"forks_fmt":"2.3k","last_push":"2026-04-15","days_ago":87,"weekly_commits":0,"commits_low_confidence":false,"score":54.8,"description":"Educational framework exploring ergonomic, lightweight multi-agent orchestration. Managed by OpenAI Solution team.","language":"Python","open_issues":30,"category":"Multi-Agent Systems","category_rank":15,"npm_package":"","crate_package":"","pypi_package":"openai-swarm","weekly_downloads":297,"dl_source":"pypi","hn_mentions_30d":2,"has_provenance":false,"npm_provenance":null,"pypi_provenance":false,"signed_commits_ratio":null,"scorecard_score":3.5,"scorecard_checks":{"Binary-Artifacts":10,"Branch-Protection":0,"CI-Tests":0,"CII-Best-Practices":0,"Code-Review":2,"Contributors":3,"Dangerous-Workflow":-1,"Dependency-Update-Tool":0,"Fuzzing":0,"License":10,"Maintained":0,"Packaging":-1,"Pinned-Dependencies":-1,"SAST":0,"Security-Policy":10,"Signed-Releases":-1,"Token-Permissions":-1,"Vulnerabilities":10},"scorecard_scanned_at":"2026-07-11T03:02:54Z","slug":"swarm-by-openai","source_note":"","public_actions":null,"mcp_server_support":{"status":"none","confidence":null,"evidence":[]},"external_service_dependencies":{"providers":["OpenAI","Qdrant"],"requires_api_keys":false,"confidence":"high","evidence":["README/docs mention OpenAI","Found Qdrant dependency 'qdrant' in examples/support_bot/requirements.txt"]},"tool_plugin_surface":{"plugin_system":"none","tool_tags":["code","database","search"],"confidence":"high","evidence":["README/docs mention search capabilities","Found database dependency 'qdrant' in examples/support_bot/requirements.txt","README/docs mention code capabilities"]},"package_provenance_drift":{"status":"unknown","confidence":"low","summary":"Package source metadata is missing or inconclusive","evidence":["pypi package 'openai-swarm' has a non-GitHub or unparseable source URL"]},"evidence_grade":"D","coverage_grade":"A","signal_coverage":0.8,"signal_types":4,"listing_status":"listed","display_listing_status":"listed","display_status_label":"Listed","has_warning":false,"warning_reasons":[],"license_spdx":"MIT","license_type":"open","license_override":"","trust_score":45.2,"trust_score_v2":45.2,"rank_v2":258,"rank_v2_delta":4,"trust_v2_adjustment":-1.4,"trust_confidence":1.0,"trust_breakdown":{"safety":4.4,"identity":10.8,"transparency":11.5,"maintenance":6.2,"adoption":13.7},"trust_v2_breakdown":{"mcp":0.0,"external_dependencies":-0.5,"tool_plugin_surface":-0.9,"package_provenance_drift":0.0},"pending_signals":false},{"name":"Mastra","repo":"mastra-ai/mastra","display_repo":"","url":"https://github.com/mastra-ai/mastra","rank":259,"previous_rank":259,"rank_delta":0,"stars":26033,"stars_fmt":"26.0k","forks":2395,"forks_fmt":"2.4k","last_push":"2026-07-11","days_ago":0,"weekly_commits":889,"commits_low_confidence":false,"score":92.2,"description":"From the team behind Gatsby, Mastra is a framework for building AI-powered applications and agents with a modern TypeScr","language":"TypeScript","open_issues":229,"category":"Agent Frameworks","category_rank":64,"npm_package":"@mastra-ai/mastra","crate_package":"","pypi_package":"","weekly_downloads":null,"dl_source":"","hn_mentions_30d":57,"has_provenance":false,"npm_provenance":null,"pypi_provenance":null,"signed_commits_ratio":0.94,"scorecard_score":5.1,"scorecard_checks":{"Binary-Artifacts":10,"Branch-Protection":4,"CI-Tests":10,"CII-Best-Practices":0,"Code-Review":7,"Contributors":10,"Dangerous-Workflow":0,"Dependency-Update-Tool":10,"Fuzzing":0,"License":9,"Maintained":10,"Packaging":10,"Pinned-Dependencies":6,"SAST":7,"Security-Policy":0,"Signed-Releases":-1,"Token-Permissions":0,"Vulnerabilities":0},"scorecard_scanned_at":"2026-07-11T03:02:41Z","slug":"mastra","source_note":"","public_actions":null,"mcp_server_support":{"status":"declared","confidence":"medium","evidence":["README/docs mention MCP support","Found MCP-related server path: .cursor/mcp.json","Found MCP-related server path: examples/agent/src/mastra/mcp/external-app-server.ts","Found MCP-related server docs path: docs/src/content/en/guides/guide/notes-mcp-server.mdx"]},"external_service_dependencies":{"providers":["Anthropic","Google Gemini","OpenAI","Postgres","Tavily"],"requires_api_keys":false,"confidence":"high","evidence":["README/docs mention OpenAI","Found OpenAI dependency 'openai' in mastracode/package.json","README/docs mention Anthropic","Found Anthropic dependency 'anthropic' in mastracode/package.json","README/docs mention Google Gemini","Found Tavily dependency 'tavily' in mastracode/package.json"]},"tool_plugin_surface":{"plugin_system":"declared","tool_tags":["browser","code","database","filesystem","search","shell"],"confidence":"high","evidence":["README/docs mention a declared plugin/integration surface","Found browser dependency 'playwright' in docs/package.json","Found shell dependency 'execa' in mastracode/package.json","Found filesystem dependency 'fs-extra' in docs/package.json","Found search dependency 'tavily' in mastracode/package.json","Found database dependency 'pg' in mastracode/package.json"]},"package_provenance_drift":{"status":"unknown","confidence":"low","summary":"Package source metadata is missing or inconclusive","evidence":["npm package '@mastra-ai/mastra' does not expose a source repo URL"]},"evidence_grade":"D","coverage_grade":"B","signal_coverage":0.6,"signal_types":3,"listing_status":"listed","display_listing_status":"listed","display_status_label":"Listed","has_warning":false,"warning_reasons":[],"license_spdx":"NOASSERTION","license_type":"open","license_override":"","trust_score":45.2,"trust_score_v2":45.2,"rank_v2":259,"rank_v2_delta":-12,"trust_v2_adjustment":-3.8,"trust_confidence":0.75,"trust_breakdown":{"safety":11.1,"identity":10.8,"transparency":12.8,"maintenance":20.0,"adoption":10.6},"trust_v2_breakdown":{"mcp":0.0,"external_dependencies":-2.0,"tool_plugin_surface":-1.8,"package_provenance_drift":0.0},"pending_signals":false},{"name":"Convex Chef","repo":"get-convex/chef","display_repo":"","url":"https://github.com/get-convex/chef","rank":260,"previous_rank":260,"rank_delta":0,"stars":4596,"stars_fmt":"4.6k","forks":928,"forks_fmt":"928","last_push":"2026-04-22","days_ago":80,"weekly_commits":0,"commits_low_confidence":false,"score":49.7,"description":"The only AI app builder that knows backend","language":"TypeScript","open_issues":21,"category":"UI & App Builders","category_rank":12,"npm_package":"","crate_package":"","pypi_package":"","weekly_downloads":null,"dl_source":"","hn_mentions_30d":null,"has_provenance":false,"npm_provenance":null,"pypi_provenance":null,"signed_commits_ratio":1.0,"scorecard_score":4.0,"scorecard_checks":{"Binary-Artifacts":10,"Branch-Protection":0,"CI-Tests":10,"CII-Best-Practices":0,"Code-Review":4,"Contributors":10,"Dangerous-Workflow":10,"Dependency-Update-Tool":10,"Fuzzing":10,"License":10,"Maintained":0,"Packaging":-1,"Pinned-Dependencies":0,"SAST":0,"Security-Policy":0,"Signed-Releases":0,"Token-Permissions":0,"Vulnerabilities":0},"scorecard_scanned_at":"2026-07-10T16:21:08Z","slug":"convex-chef","source_note":"","public_actions":null,"mcp_server_support":{"status":"none","confidence":null,"evidence":[]},"external_service_dependencies":{"providers":["Amazon Bedrock","Anthropic","Google Gemini","OpenAI"],"requires_api_keys":true,"confidence":"high","evidence":["README/docs mention OpenAI","Found OpenAI dependency 'openai' in package.json","Found OpenAI credential/config marker 'OPENAI_API_KEY'","README/docs mention Anthropic","Found Anthropic dependency 'anthropic' in package.json","Found Anthropic credential/config marker 'ANTHROPIC_API_KEY'"]},"tool_plugin_surface":{"plugin_system":"none","tool_tags":["browser","code","shell"],"confidence":"high","evidence":["Found browser dependency 'playwright' in chefshot/package.json","README/docs mention shell capabilities","README/docs mention code capabilities"]},"package_provenance_drift":{"status":"not_applicable","confidence":null,"summary":"No package source configured","evidence":[]},"evidence_grade":"D","coverage_grade":"C","signal_coverage":0.4,"signal_types":2,"listing_status":"listed","display_listing_status":"listed","display_status_label":"Listed","has_warning":false,"warning_reasons":[],"license_spdx":"Apache-2.0","license_type":"open","license_override":"","trust_score":44.8,"trust_score_v2":44.8,"rank_v2":260,"rank_v2_delta":-8,"trust_v2_adjustment":-3.4,"trust_confidence":1.0,"trust_breakdown":{"safety":10.0,"identity":10.8,"transparency":11.9,"maintenance":6.7,"adoption":8.8},"trust_v2_breakdown":{"mcp":0.0,"external_dependencies":-2.5,"tool_plugin_surface":-0.9,"package_provenance_drift":0.0},"pending_signals":false},{"name":"auto-deep-researcher-24x7","repo":"Xiangyue-Zhang/auto-deep-researcher-24x7","display_repo":"","url":"https://github.com/Xiangyue-Zhang/auto-deep-researcher-24x7","rank":261,"previous_rank":261,"rank_delta":0,"stars":1242,"stars_fmt":"1.2k","forks":101,"forks_fmt":"101","last_push":"2026-06-03","days_ago":38,"weekly_commits":0,"commits_low_confidence":false,"score":47.6,"description":"🔥 An autonomous AI agent that runs your deep learning experiments 24/7 while you sleep. Zero-cost monitoring, Leader-Wor","language":"Python","open_issues":11,"category":"Research & Data","category_rank":13,"npm_package":"","crate_package":"","pypi_package":"","weekly_downloads":null,"dl_source":"","hn_mentions_30d":null,"has_provenance":false,"npm_provenance":null,"pypi_provenance":null,"signed_commits_ratio":0.0,"scorecard_score":5.1,"scorecard_checks":{"Binary-Artifacts":10,"Branch-Protection":3,"CI-Tests":10,"CII-Best-Practices":0,"Code-Review":0,"Contributors":0,"Dangerous-Workflow":10,"Dependency-Update-Tool":0,"Fuzzing":0,"License":10,"Maintained":10,"Packaging":-1,"Pinned-Dependencies":0,"SAST":0,"Security-Policy":0,"Signed-Releases":-1,"Token-Permissions":10,"Vulnerabilities":10},"scorecard_scanned_at":"2026-07-11T03:37:10Z","slug":"auto-deep-researcher-24x7","source_note":"","public_actions":null,"mcp_server_support":{"status":"none","confidence":null,"evidence":[]},"external_service_dependencies":{"providers":["Anthropic","OpenAI"],"requires_api_keys":true,"confidence":"high","evidence":["README/docs mention OpenAI","Found OpenAI dependency 'openai' in requirements.txt","Found OpenAI credential/config marker 'OPENAI_API_KEY'","README/docs mention Anthropic","Found Anthropic dependency 'anthropic' in requirements.txt","Found Anthropic credential/config marker 'ANTHROPIC_API_KEY'"]},"tool_plugin_surface":{"plugin_system":"declared","tool_tags":["code","search","shell"],"confidence":"high","evidence":["README/docs mention a declared plugin/integration surface","README/docs mention shell capabilities","README/docs mention search capabilities","README/docs mention code capabilities"]},"package_provenance_drift":{"status":"not_applicable","confidence":null,"summary":"No package source configured","evidence":[]},"evidence_grade":"D","coverage_grade":"C","signal_coverage":0.4,"signal_types":2,"listing_status":"listed","display_listing_status":"listed","display_status_label":"Listed","has_warning":false,"warning_reasons":[],"license_spdx":"Apache-2.0","license_type":"open","license_override":"","trust_score":44.2,"trust_score_v2":44.2,"rank_v2":261,"rank_v2_delta":-3,"trust_v2_adjustment":-2.7,"trust_confidence":1.0,"trust_breakdown":{"safety":6.4,"identity":10.8,"transparency":12.8,"maintenance":9.5,"adoption":7.4},"trust_v2_breakdown":{"mcp":0.0,"external_dependencies":-1.5,"tool_plugin_surface":-1.2,"package_provenance_drift":0.0},"pending_signals":false},{"name":"STORM","repo":"stanford-oval/storm","display_repo":"","url":"https://github.com/stanford-oval/storm","rank":262,"previous_rank":263,"rank_delta":1,"stars":30011,"stars_fmt":"30.0k","forks":2806,"forks_fmt":"2.8k","last_push":"2025-09-30","days_ago":284,"weekly_commits":0,"commits_low_confidence":false,"score":42.9,"description":"An LLM-powered knowledge curation system that researches a topic and generates a full-length report with citations.","language":"Python","open_issues":59,"category":"Research & Data","category_rank":14,"npm_package":"","crate_package":"","pypi_package":"knowledge-storm","weekly_downloads":2214,"dl_source":"pypi","hn_mentions_30d":2,"has_provenance":false,"npm_provenance":null,"pypi_provenance":false,"signed_commits_ratio":0.33,"scorecard_score":3.2,"scorecard_checks":{"Binary-Artifacts":10,"Branch-Protection":1,"CI-Tests":0,"CII-Best-Practices":0,"Code-Review":4,"Contributors":3,"Dangerous-Workflow":10,"Dependency-Update-Tool":0,"Fuzzing":0,"License":10,"Maintained":0,"Packaging":-1,"Pinned-Dependencies":0,"SAST":0,"Security-Policy":0,"Signed-Releases":-1,"Token-Permissions":0,"Vulnerabilities":7},"scorecard_scanned_at":"2026-07-08T08:31:57Z","slug":"storm","source_note":"","public_actions":null,"mcp_server_support":{"status":"none","confidence":null,"evidence":[]},"external_service_dependencies":{"providers":["OpenAI","Qdrant"],"requires_api_keys":true,"confidence":"high","evidence":["README/docs mention OpenAI","Found OpenAI credential/config marker 'OPENAI_API_KEY'","Found Qdrant dependency 'qdrant' in requirements.txt"]},"tool_plugin_surface":{"plugin_system":"declared","tool_tags":["code","database","search"],"confidence":"high","evidence":["README/docs mention a declared plugin/integration surface","README/docs mention search capabilities","Found database dependency 'qdrant' in requirements.txt","README/docs mention code capabilities"]},"package_provenance_drift":{"status":"match","confidence":"high","summary":"Published package metadata matches the tracked repo","evidence":["pypi package 'knowledge-storm' points to the tracked repo"]},"evidence_grade":"D","coverage_grade":"A","signal_coverage":0.8,"signal_types":4,"listing_status":"listed","display_listing_status":"listed","display_status_label":"Listed","has_warning":false,"warning_reasons":[],"license_spdx":"MIT","license_type":"open","license_override":"","trust_score":44.2,"trust_score_v2":44.2,"rank_v2":262,"rank_v2_delta":14,"trust_v2_adjustment":1.3,"trust_confidence":1.0,"trust_breakdown":{"safety":5.7,"identity":10.8,"transparency":11.2,"maintenance":0.0,"adoption":15.2},"trust_v2_breakdown":{"mcp":0.0,"external_dependencies":-1.5,"tool_plugin_surface":-1.2,"package_provenance_drift":4.0},"pending_signals":false},{"name":"HyperAgent","repo":"hyperbrowserai/HyperAgent","display_repo":"","url":"https://github.com/hyperbrowserai/HyperAgent","rank":263,"previous_rank":262,"rank_delta":-1,"stars":1466,"stars_fmt":"1.5k","forks":180,"forks_fmt":"180","last_push":"2026-05-11","days_ago":61,"weekly_commits":0,"commits_low_confidence":false,"score":46.2,"description":"AI Browser Automation","language":"TypeScript","open_issues":14,"category":"Needs review","category_rank":9,"npm_package":"","crate_package":"","pypi_package":"","weekly_downloads":null,"dl_source":"","hn_mentions_30d":null,"has_provenance":false,"npm_provenance":null,"pypi_provenance":null,"signed_commits_ratio":0.51,"scorecard_score":3.8,"scorecard_checks":{"Binary-Artifacts":10,"Branch-Protection":4,"CI-Tests":0,"CII-Best-Practices":0,"Code-Review":5,"Contributors":6,"Dangerous-Workflow":10,"Dependency-Update-Tool":0,"Fuzzing":0,"License":9,"Maintained":0,"Packaging":-1,"Pinned-Dependencies":0,"SAST":0,"Security-Policy":0,"Signed-Releases":-1,"Token-Permissions":9,"Vulnerabilities":0},"scorecard_scanned_at":"2026-07-10T10:01:22Z","slug":"hyperagent","source_note":"","public_actions":null,"mcp_server_support":{"status":"implemented","confidence":"high","evidence":["README/docs mention MCP support","Found MCP-related server path: examples/mcp/weather/servers/weather-server.js","Found MCP dependency '@modelcontextprotocol/sdk' in package.json"]},"external_service_dependencies":{"providers":["Anthropic","Google Gemini","OpenAI"],"requires_api_keys":true,"confidence":"high","evidence":["README/docs mention OpenAI","Found OpenAI dependency 'openai' in package.json","README/docs mention Anthropic","Found Anthropic dependency 'anthropic' in package.json","README/docs mention Google Gemini","Found Google Gemini dependency '@google/genai' in package.json"]},"tool_plugin_surface":{"plugin_system":"declared","tool_tags":["browser","code","search"],"confidence":"high","evidence":["README/docs mention a declared plugin/integration surface","README/docs mention browser capabilities","README/docs mention search capabilities","README/docs mention code capabilities"]},"package_provenance_drift":{"status":"not_applicable","confidence":null,"summary":"No package source configured","evidence":[]},"evidence_grade":"D","coverage_grade":"C","signal_coverage":0.4,"signal_types":2,"listing_status":"listed","display_listing_status":"listed","display_status_label":"Listed","has_warning":false,"warning_reasons":[],"license_spdx":"NOASSERTION","license_type":"open","license_override":"","trust_score":44.1,"trust_score_v2":44.1,"rank_v2":263,"rank_v2_delta":3,"trust_v2_adjustment":-1.2,"trust_confidence":1.0,"trust_breakdown":{"safety":7.3,"identity":10.8,"transparency":11.7,"maintenance":7.9,"adoption":7.6},"trust_v2_breakdown":{"mcp":2.0,"external_dependencies":-2.0,"tool_plugin_surface":-1.2,"package_provenance_drift":0.0},"pending_signals":false},{"name":"OmniParser","repo":"microsoft/OmniParser","display_repo":"","url":"https://github.com/microsoft/OmniParser","rank":264,"previous_rank":265,"rank_delta":1,"stars":25034,"stars_fmt":"25.0k","forks":2200,"forks_fmt":"2.2k","last_push":"2026-04-13","days_ago":89,"weekly_commits":0,"commits_low_confidence":false,"score":54.7,"description":"A simple screen parsing tool towards pure vision based GUI agent","language":"Jupyter Notebook","open_issues":173,"category":"Browser & Computer Use","category_rank":12,"npm_package":"","crate_package":"","pypi_package":"","weekly_downloads":null,"dl_source":"","hn_mentions_30d":1,"has_provenance":false,"npm_provenance":null,"pypi_provenance":null,"signed_commits_ratio":0.12,"scorecard_score":4.1,"scorecard_checks":{"Binary-Artifacts":10,"Branch-Protection":6,"CI-Tests":3,"CII-Best-Practices":0,"Code-Review":1,"Contributors":10,"Dangerous-Workflow":-1,"Dependency-Update-Tool":0,"Fuzzing":0,"License":10,"Maintained":0,"Packaging":-1,"Pinned-Dependencies":0,"SAST":4,"Security-Policy":10,"Signed-Releases":-1,"Token-Permissions":-1,"Vulnerabilities":7},"scorecard_scanned_at":"2026-07-10T07:35:10Z","slug":"omniparser","source_note":"","public_actions":null,"mcp_server_support":{"status":"none","confidence":null,"evidence":[]},"external_service_dependencies":{"providers":["Amazon Bedrock","Anthropic","OpenAI"],"requires_api_keys":false,"confidence":"high","evidence":["README/docs mention OpenAI","Found OpenAI dependency 'openai' in requirements.txt","README/docs mention Anthropic","Found Anthropic dependency 'anthropic' in requirements.txt","Found Amazon Bedrock dependency 'bedrock' in requirements.txt"]},"tool_plugin_surface":{"plugin_system":"none","tool_tags":["code"],"confidence":"medium","evidence":["README/docs mention code capabilities"]},"package_provenance_drift":{"status":"not_applicable","confidence":null,"summary":"No package source configured","evidence":[]},"evidence_grade":"D","coverage_grade":"B","signal_coverage":0.6,"signal_types":3,"listing_status":"listed","display_listing_status":"listed","display_status_label":"Listed","has_warning":false,"warning_reasons":[],"license_spdx":"CC-BY-4.0","license_type":"open","license_override":"","trust_score":43.9,"trust_score_v2":43.9,"rank_v2":264,"rank_v2_delta":4,"trust_v2_adjustment":-1.3,"trust_confidence":1.0,"trust_breakdown":{"safety":5.7,"identity":10.8,"transparency":12.0,"maintenance":6.1,"adoption":10.6},"trust_v2_breakdown":{"mcp":0.0,"external_dependencies":-1.0,"tool_plugin_surface":-0.3,"package_provenance_drift":0.0},"pending_signals":false},{"name":"MolmoWeb","repo":"allenai/molmoweb","display_repo":"","url":"https://github.com/allenai/molmoweb","rank":265,"previous_rank":264,"rank_delta":-1,"stars":574,"stars_fmt":"574","forks":80,"forks_fmt":"80","last_push":"2026-06-26","days_ago":15,"weekly_commits":2,"commits_low_confidence":false,"score":54.6,"description":"","language":"Python","open_issues":2,"category":"Browser & Computer Use","category_rank":13,"npm_package":"","crate_package":"","pypi_package":"","weekly_downloads":null,"dl_source":"","hn_mentions_30d":null,"has_provenance":false,"npm_provenance":null,"pypi_provenance":null,"signed_commits_ratio":0.297,"scorecard_score":3.2,"scorecard_checks":{"Binary-Artifacts":10,"Branch-Protection":0,"CI-Tests":0,"CII-Best-Practices":0,"Code-Review":2,"Contributors":3,"Dangerous-Workflow":-1,"Dependency-Update-Tool":10,"Fuzzing":0,"License":10,"Maintained":4,"Packaging":-1,"Pinned-Dependencies":-1,"SAST":0,"Security-Policy":0,"Signed-Releases":-1,"Token-Permissions":-1,"Vulnerabilities":0},"scorecard_scanned_at":"2026-07-10T16:12:49Z","slug":"molmoweb","source_note":"","public_actions":null,"mcp_server_support":{"status":"none","confidence":null,"evidence":[]},"external_service_dependencies":{"providers":["Amazon Bedrock","Browserbase","Google Gemini","OpenAI"],"requires_api_keys":true,"confidence":"high","evidence":["Found OpenAI dependency 'openai' in pyproject.toml","Found OpenAI credential/config marker 'OPENAI_API_KEY'","README/docs also mention OpenAI","Found Google Gemini credential/config marker 'GOOGLE_API_KEY'","README/docs also mention Google Gemini","Found Amazon Bedrock dependency 'boto3' in train/pyproject.toml"]},"tool_plugin_surface":{"plugin_system":"declared","tool_tags":["browser"],"confidence":"high","evidence":["README/docs mention a declared plugin/integration surface","Found browser dependency 'playwright' in pyproject.toml","README/docs also mention browser capabilities"]},"package_provenance_drift":{"status":"not_applicable","confidence":null,"summary":"No package source configured","evidence":[]},"evidence_grade":"D","coverage_grade":"C","signal_coverage":0.4,"signal_types":2,"listing_status":"listed","display_listing_status":"listed","display_status_label":"Listed","has_warning":false,"warning_reasons":[],"license_spdx":"Apache-2.0","license_type":"open","license_override":"","trust_score":43.9,"trust_score_v2":43.9,"rank_v2":265,"rank_v2_delta":-8,"trust_v2_adjustment":-3.1,"trust_confidence":1.0,"trust_breakdown":{"safety":5.5,"identity":10.8,"transparency":11.2,"maintenance":12.9,"adoption":6.6},"trust_v2_breakdown":{"mcp":0.0,"external_dependencies":-2.5,"tool_plugin_surface":-0.6,"package_provenance_drift":0.0},"pending_signals":false},{"name":"Agenta","repo":"Agenta-AI/agenta","display_repo":"","url":"https://github.com/Agenta-AI/agenta","rank":266,"previous_rank":266,"rank_delta":0,"stars":4283,"stars_fmt":"4.3k","forks":565,"forks_fmt":"565","last_push":"2026-07-11","days_ago":0,"weekly_commits":446,"commits_low_confidence":false,"score":84.6,"description":"The open-source LLMOps platform: prompt playground, prompt management, LLM evaluation, and LLM observability all in one ","language":"TypeScript","open_issues":122,"category":"Observability & Evaluation","category_rank":17,"npm_package":"","crate_package":"","pypi_package":"agenta","weekly_downloads":3701,"dl_source":"pypi","hn_mentions_30d":2415,"has_provenance":false,"npm_provenance":null,"pypi_provenance":false,"signed_commits_ratio":0.57,"scorecard_score":null,"scorecard_checks":{},"scorecard_scanned_at":null,"slug":"agenta","source_note":"","public_actions":null,"mcp_server_support":{"status":"declared","confidence":"medium","evidence":["Found MCP-related server docs path: docs/blog/entries/mcp-server.mdx","Found MCP-related server docs path: docs/docs/misc/05-mcp-server.mdx"]},"external_service_dependencies":{"providers":["Amazon Bedrock","OpenAI","Postgres","Redis"],"requires_api_keys":false,"confidence":"high","evidence":["Found OpenAI dependency 'openai' in api/pyproject.toml","Found Amazon Bedrock dependency 'boto3' in services/pyproject.toml","Found Postgres dependency 'asyncpg' in api/pyproject.toml","Found Redis dependency 'redis' in api/pyproject.toml"]},"tool_plugin_surface":{"plugin_system":"declared","tool_tags":["database"],"confidence":"high","evidence":["README/docs mention a declared plugin/integration surface","Found database dependency 'redis' in api/pyproject.toml"]},"package_provenance_drift":{"status":"match","confidence":"high","summary":"Published package metadata matches the tracked repo","evidence":["pypi package 'agenta' points to the tracked repo"]},"evidence_grade":"D","coverage_grade":"B","signal_coverage":0.6,"signal_types":3,"listing_status":"listed","display_listing_status":"listed","display_status_label":"Listed","has_warning":false,"warning_reasons":[],"license_spdx":"NOASSERTION","license_type":"open","license_override":"","trust_score":43.6,"trust_score_v2":43.6,"rank_v2":266,"rank_v2_delta":16,"trust_v2_adjustment":1.9,"trust_confidence":0.75,"trust_breakdown":{"safety":2.8,"identity":10.8,"transparency":8.5,"maintenance":20.0,"adoption":13.5},"trust_v2_breakdown":{"mcp":0.0,"external_dependencies":-1.5,"tool_plugin_surface":-0.6,"package_provenance_drift":4.0},"pending_signals":false},{"name":"Sotopia agents","repo":"sotopia-lab/sotopia","display_repo":"","url":"https://github.com/sotopia-lab/sotopia","rank":267,"previous_rank":267,"rank_delta":0,"stars":316,"stars_fmt":"316","forks":49,"forks_fmt":"49","last_push":"2026-06-05","days_ago":36,"weekly_commits":0,"commits_low_confidence":false,"score":43.0,"description":"Sotopia: an Open-ended Social Learning Environment (ICLR 2024 spotlight)","language":"Python","open_issues":5,"category":"Research & Data","category_rank":15,"npm_package":"","crate_package":"","pypi_package":"sotopia","weekly_downloads":98,"dl_source":"pypi","hn_mentions_30d":7,"has_provenance":false,"npm_provenance":null,"pypi_provenance":false,"signed_commits_ratio":null,"scorecard_score":4.2,"scorecard_checks":{"Binary-Artifacts":10,"Branch-Protection":4,"CI-Tests":3,"CII-Best-Practices":0,"Code-Review":6,"Contributors":10,"Dangerous-Workflow":10,"Dependency-Update-Tool":10,"Fuzzing":0,"License":10,"Maintained":0,"Packaging":-1,"Pinned-Dependencies":1,"SAST":0,"Security-Policy":0,"Signed-Releases":-1,"Token-Permissions":0,"Vulnerabilities":0},"scorecard_scanned_at":"2026-07-10T08:00:52Z","slug":"sotopia-agents","source_note":"","public_actions":null,"mcp_server_support":{"status":"none","confidence":null,"evidence":[]},"external_service_dependencies":{"providers":["Anthropic","Google Gemini","OpenAI","Redis"],"requires_api_keys":true,"confidence":"high","evidence":["README/docs mention OpenAI","Found OpenAI dependency 'openai' in pyproject.toml","Found OpenAI credential/config marker 'OPENAI_API_KEY'","Found Anthropic dependency 'anthropic' in pyproject.toml","Found Google Gemini dependency 'google-generativeai' in pyproject.toml","README/docs mention Redis"]},"tool_plugin_surface":{"plugin_system":"none","tool_tags":["code","database"],"confidence":"high","evidence":["README/docs mention database capabilities","README/docs mention code capabilities"]},"package_provenance_drift":{"status":"unknown","confidence":"low","summary":"Package source metadata is missing or inconclusive","evidence":["pypi package 'sotopia' has a non-GitHub or unparseable source URL"]},"evidence_grade":"D","coverage_grade":"A","signal_coverage":0.8,"signal_types":4,"listing_status":"listed","display_listing_status":"listed","display_status_label":"Listed","has_warning":false,"warning_reasons":[],"license_spdx":"MIT","license_type":"open","license_override":"","trust_score":43.4,"trust_score_v2":43.4,"rank_v2":267,"rank_v2_delta":-3,"trust_v2_adjustment":-3.1,"trust_confidence":1.0,"trust_breakdown":{"safety":5.3,"identity":10.8,"transparency":12.1,"maintenance":9.6,"adoption":8.7},"trust_v2_breakdown":{"mcp":0.0,"external_dependencies":-2.5,"tool_plugin_surface":-0.6,"package_provenance_drift":0.0},"pending_signals":false},{"name":"Srcbook","repo":"srcbookdev/srcbook","display_repo":"","url":"https://github.com/srcbookdev/srcbook","rank":268,"previous_rank":268,"rank_delta":0,"stars":3441,"stars_fmt":"3.4k","forks":312,"forks_fmt":"312","last_push":"2026-04-06","days_ago":96,"weekly_commits":0,"commits_low_confidence":false,"score":44.6,"description":"TypeScript-centric app development platform: notebook and AI app builder","language":"TypeScript","open_issues":29,"category":"UI & App Builders","category_rank":13,"npm_package":"","crate_package":"","pypi_package":"","weekly_downloads":null,"dl_source":"","hn_mentions_30d":null,"has_provenance":false,"npm_provenance":null,"pypi_provenance":null,"signed_commits_ratio":0.88,"scorecard_score":3.0,"scorecard_checks":{"Binary-Artifacts":10,"Branch-Protection":5,"CI-Tests":0,"CII-Best-Practices":0,"Code-Review":2,"Contributors":10,"Dangerous-Workflow":10,"Dependency-Update-Tool":0,"Fuzzing":0,"License":10,"Maintained":0,"Packaging":-1,"Pinned-Dependencies":0,"SAST":0,"Security-Policy":0,"Signed-Releases":-1,"Token-Permissions":0,"Vulnerabilities":0},"scorecard_scanned_at":"2026-07-11T01:36:26Z","slug":"srcbook","source_note":"","public_actions":null,"mcp_server_support":{"status":"none","confidence":null,"evidence":[]},"external_service_dependencies":{"providers":["Anthropic","OpenAI"],"requires_api_keys":false,"confidence":"high","evidence":["Found OpenAI dependency 'openai' in srcbook/package.json","README/docs mention Anthropic","Found Anthropic dependency 'anthropic' in srcbook/package.json"]},"tool_plugin_surface":{"plugin_system":"none","tool_tags":["code"],"confidence":"medium","evidence":["README/docs mention code capabilities"]},"package_provenance_drift":{"status":"not_applicable","confidence":null,"summary":"No package source configured","evidence":[]},"evidence_grade":"D","coverage_grade":"C","signal_coverage":0.4,"signal_types":2,"listing_status":"listed","display_listing_status":"listed","display_status_label":"Listed","has_warning":false,"warning_reasons":[],"license_spdx":"Apache-2.0","license_type":"open","license_override":"","trust_score":43.4,"trust_score_v2":43.4,"rank_v2":268,"rank_v2_delta":2,"trust_v2_adjustment":-0.8,"trust_confidence":1.0,"trust_breakdown":{"safety":8.2,"identity":10.8,"transparency":11.1,"maintenance":5.6,"adoption":8.5},"trust_v2_breakdown":{"mcp":0.0,"external_dependencies":-0.5,"tool_plugin_surface":-0.3,"package_provenance_drift":0.0},"pending_signals":false},{"name":"LlamaIndex","repo":"run-llama/llama_index","display_repo":"","url":"https://github.com/run-llama/llama_index","rank":269,"previous_rank":269,"rank_delta":0,"stars":50779,"stars_fmt":"50.8k","forks":7729,"forks_fmt":"7.7k","last_push":"2026-07-11","days_ago":0,"weekly_commits":28,"commits_low_confidence":false,"score":89.5,"description":"LlamaIndex is the leading document agent and OCR platform","language":"Python","open_issues":192,"category":"Agent Frameworks","category_rank":65,"npm_package":"","crate_package":"","pypi_package":"llama-index","weekly_downloads":1798567,"dl_source":"pypi","hn_mentions_30d":2,"has_provenance":false,"npm_provenance":null,"pypi_provenance":false,"signed_commits_ratio":null,"scorecard_score":null,"scorecard_checks":{},"scorecard_scanned_at":null,"slug":"llamaindex","source_note":"","public_actions":null,"mcp_server_support":{"status":"declared","confidence":"medium","evidence":["Found MCP-related server path: llama-index-integrations/tools/llama-index-tools-mcp/examples/mcp_server.py"]},"external_service_dependencies":{"providers":["Amazon Bedrock","OpenAI","Redis"],"requires_api_keys":true,"confidence":"high","evidence":["README/docs mention OpenAI","Found OpenAI dependency 'openai' in pyproject.toml","Found OpenAI credential/config marker 'OPENAI_API_KEY'","Found Amazon Bedrock dependency 'boto3' in llama-index-core/pyproject.toml","Found Redis dependency 'redis' in pyproject.toml"]},"tool_plugin_surface":{"plugin_system":"declared","tool_tags":["code","database","search"],"confidence":"high","evidence":["README/docs mention a declared plugin/integration surface","README/docs mention search capabilities","Found database dependency 'redis' in pyproject.toml","README/docs mention code capabilities"]},"package_provenance_drift":{"status":"match","confidence":"high","summary":"Published package metadata matches the tracked repo","evidence":["pypi package 'llama-index' points to the tracked repo"]},"evidence_grade":"D","coverage_grade":"B","signal_coverage":0.6,"signal_types":3,"listing_status":"listed","display_listing_status":"listed","display_status_label":"Listed","has_warning":false,"warning_reasons":[],"license_spdx":"MIT","license_type":"open","license_override":"","trust_score":43.3,"trust_score_v2":43.3,"rank_v2":269,"rank_v2_delta":8,"trust_v2_adjustment":0.8,"trust_confidence":0.75,"trust_breakdown":{"safety":0.0,"identity":10.8,"transparency":8.5,"maintenance":17.8,"adoption":19.6},"trust_v2_breakdown":{"mcp":0.0,"external_dependencies":-2.0,"tool_plugin_surface":-1.2,"package_provenance_drift":4.0},"pending_signals":false},{"name":"AnythingLLM","repo":"Mintplex-Labs/anything-llm","display_repo":"","url":"https://github.com/Mintplex-Labs/anything-llm","rank":270,"previous_rank":270,"rank_delta":0,"stars":63089,"stars_fmt":"63.1k","forks":6906,"forks_fmt":"6.9k","last_push":"2026-07-11","days_ago":0,"weekly_commits":172,"commits_low_confidence":false,"score":96.7,"description":"Stop renting your intelligence. Own it with AnythingLLM. Everything you need for a powerful local-first agent experience","language":"JavaScript","open_issues":297,"category":"Memory & Knowledge","category_rank":26,"npm_package":"anything-llm","crate_package":"","pypi_package":"","weekly_downloads":null,"dl_source":"","hn_mentions_30d":0,"has_provenance":false,"npm_provenance":null,"pypi_provenance":null,"signed_commits_ratio":0.58,"scorecard_score":4.9,"scorecard_checks":{"Binary-Artifacts":10,"Branch-Protection":0,"CI-Tests":7,"CII-Best-Practices":0,"Code-Review":4,"Contributors":10,"Dangerous-Workflow":10,"Dependency-Update-Tool":0,"Fuzzing":0,"License":10,"Maintained":10,"Packaging":10,"Pinned-Dependencies":1,"SAST":0,"Security-Policy":10,"Signed-Releases":0,"Token-Permissions":0,"Vulnerabilities":8},"scorecard_scanned_at":"2026-07-11T03:26:47Z","slug":"anythingllm","source_note":"","public_actions":null,"mcp_server_support":{"status":"declared","confidence":"medium","evidence":["Found MCP dependency '@modelcontextprotocol/sdk' in server/package.json"]},"external_service_dependencies":{"providers":["Amazon Bedrock","Anthropic","Azure OpenAI","Google Gemini","OpenAI","Pinecone","Postgres","Qdrant","Weaviate"],"requires_api_keys":false,"confidence":"high","evidence":["README/docs mention OpenAI","Found OpenAI dependency 'openai' in server/package.json","README/docs mention Anthropic","Found Anthropic dependency 'anthropic' in server/package.json","README/docs mention Google Gemini","README/docs mention Azure OpenAI"]},"tool_plugin_surface":{"plugin_system":"extension-based","tool_tags":["browser","code","database","search"],"confidence":"high","evidence":["README/docs mention a extension-based plugin/integration surface","Found browser dependency 'puppeteer' in collector/package.json","README/docs mention search capabilities","README/docs mention database capabilities","README/docs mention code capabilities"]},"package_provenance_drift":{"status":"unknown","confidence":"low","summary":"Package source metadata is missing or inconclusive","evidence":["npm package 'anything-llm' does not expose a source repo URL"]},"evidence_grade":"D","coverage_grade":"B","signal_coverage":0.6,"signal_types":3,"listing_status":"listed","display_listing_status":"listed","display_status_label":"Listed","has_warning":false,"warning_reasons":[],"license_spdx":"MIT","license_type":"open","license_override":"","trust_score":43.2,"trust_score_v2":43.2,"rank_v2":270,"rank_v2_delta":-17,"trust_v2_adjustment":-4.8,"trust_confidence":0.75,"trust_breakdown":{"safety":9.0,"identity":10.8,"transparency":12.7,"maintenance":20.0,"adoption":11.5},"trust_v2_breakdown":{"mcp":0.0,"external_dependencies":-3.0,"tool_plugin_surface":-1.8,"package_provenance_drift":0.0},"pending_signals":false},{"name":"AgentLite","repo":"SalesforceAIResearch/AgentLite","display_repo":"","url":"https://github.com/SalesforceAIResearch/AgentLite","rank":271,"previous_rank":271,"rank_delta":0,"stars":647,"stars_fmt":"647","forks":80,"forks_fmt":"80","last_push":"2026-06-02","days_ago":39,"weekly_commits":0,"commits_low_confidence":false,"score":45.5,"description":"","language":"Jupyter Notebook","open_issues":13,"category":"Agent Frameworks","category_rank":66,"npm_package":"","crate_package":"","pypi_package":"agentlite-llm","weekly_downloads":60,"dl_source":"pypi","hn_mentions_30d":0,"has_provenance":false,"npm_provenance":null,"pypi_provenance":false,"signed_commits_ratio":null,"scorecard_score":3.3,"scorecard_checks":{"Binary-Artifacts":10,"Branch-Protection":6,"CI-Tests":0,"CII-Best-Practices":0,"Code-Review":1,"Contributors":0,"Dangerous-Workflow":-1,"Dependency-Update-Tool":0,"Fuzzing":0,"License":10,"Maintained":0,"Packaging":-1,"Pinned-Dependencies":-1,"SAST":0,"Security-Policy":10,"Signed-Releases":-1,"Token-Permissions":-1,"Vulnerabilities":4},"scorecard_scanned_at":"2026-07-11T04:09:38Z","slug":"agentlite","source_note":"","public_actions":null,"mcp_server_support":{"status":"none","confidence":null,"evidence":[]},"external_service_dependencies":{"providers":["OpenAI"],"requires_api_keys":true,"confidence":"high","evidence":["README/docs mention OpenAI","Found OpenAI dependency 'openai' in requirements.txt","Found OpenAI credential/config marker 'OPENAI_API_KEY'"]},"tool_plugin_surface":{"plugin_system":"none","tool_tags":["code","search","shell"],"confidence":"high","evidence":["README/docs mention shell capabilities","README/docs mention search capabilities","README/docs mention code capabilities"]},"package_provenance_drift":{"status":"unknown","confidence":"low","summary":"Package source metadata is missing or inconclusive","evidence":["pypi package 'agentlite-llm' has a non-GitHub or unparseable source URL"]},"evidence_grade":"D","coverage_grade":"A","signal_coverage":0.8,"signal_types":4,"listing_status":"listed","display_listing_status":"listed","display_status_label":"Listed","has_warning":false,"warning_reasons":[],"license_spdx":"Apache-2.0","license_type":"open","license_override":"","trust_score":42.8,"trust_score_v2":42.8,"rank_v2":271,"rank_v2_delta":-2,"trust_v2_adjustment":-1.9,"trust_confidence":1.0,"trust_breakdown":{"safety":4.1,"identity":10.8,"transparency":11.3,"maintenance":9.4,"adoption":9.1},"trust_v2_breakdown":{"mcp":0.0,"external_dependencies":-1.0,"tool_plugin_surface":-0.9,"package_provenance_drift":0.0},"pending_signals":false},{"name":"RA.Aid","repo":"ai-christianson/RA.Aid","display_repo":"","url":"https://github.com/ai-christianson/RA.Aid","rank":272,"previous_rank":272,"rank_delta":0,"stars":2224,"stars_fmt":"2.2k","forks":212,"forks_fmt":"212","last_push":"2026-01-30","days_ago":162,"weekly_commits":0,"commits_low_confidence":false,"score":33.5,"description":"Develop software autonomously.","language":"Python","open_issues":54,"category":"Coding Agents","category_rank":38,"npm_package":"","crate_package":"","pypi_package":"ra-aid","weekly_downloads":377,"dl_source":"pypi","hn_mentions_30d":0,"has_provenance":false,"npm_provenance":null,"pypi_provenance":false,"signed_commits_ratio":0.17,"scorecard_score":4.4,"scorecard_checks":{"Binary-Artifacts":10,"Branch-Protection":5,"CI-Tests":10,"CII-Best-Practices":0,"Code-Review":10,"Contributors":10,"Dangerous-Workflow":10,"Dependency-Update-Tool":10,"Fuzzing":0,"License":10,"Maintained":0,"Packaging":-1,"Pinned-Dependencies":0,"SAST":0,"Security-Policy":0,"Signed-Releases":0,"Token-Permissions":0,"Vulnerabilities":0},"scorecard_scanned_at":"2026-07-11T04:03:59Z","slug":"ra-aid","source_note":"","public_actions":null,"mcp_server_support":{"status":"declared","confidence":"medium","evidence":["Found MCP-related server path: examples/custom-tools-mcp/mcp_server.py"]},"external_service_dependencies":{"providers":["Amazon Bedrock","Anthropic","Google Gemini","OpenAI","Tavily"],"requires_api_keys":true,"confidence":"high","evidence":["Found OpenAI credential/config marker 'OPENAI_API_KEY'","README/docs also mention OpenAI","Found Anthropic credential/config marker 'ANTHROPIC_API_KEY'","README/docs also mention Anthropic","Found Google Gemini credential/config marker 'GEMINI_API_KEY'","README/docs also mention Google Gemini"]},"tool_plugin_surface":{"plugin_system":"declared","tool_tags":["code","search"],"confidence":"high","evidence":["README/docs mention a declared plugin/integration surface","Found search dependency 'tavily' in pyproject.toml","README/docs also mention search capabilities","Found code dependency 'gitpython' in pyproject.toml","README/docs also mention code capabilities"]},"package_provenance_drift":{"status":"match","confidence":"high","summary":"Published package metadata matches the tracked repo","evidence":["pypi package 'ra-aid' points to the tracked repo"]},"evidence_grade":"D","coverage_grade":"A","signal_coverage":0.8,"signal_types":4,"listing_status":"listed","display_listing_status":"listed","display_status_label":"Listed","has_warning":false,"warning_reasons":[],"license_spdx":"Apache-2.0","license_type":"open","license_override":"","trust_score":42.1,"trust_score_v2":42.1,"rank_v2":272,"rank_v2_delta":6,"trust_v2_adjustment":0.1,"trust_confidence":1.0,"trust_breakdown":{"safety":6.3,"identity":10.8,"transparency":12.2,"maintenance":1.2,"adoption":11.5},"trust_v2_breakdown":{"mcp":0.0,"external_dependencies":-3.0,"tool_plugin_surface":-0.9,"package_provenance_drift":4.0},"pending_signals":false},{"name":"Agent-S","repo":"simular-ai/Agent-S","display_repo":"","url":"https://github.com/simular-ai/Agent-S","rank":273,"previous_rank":274,"rank_delta":1,"stars":12002,"stars_fmt":"12.0k","forks":1407,"forks_fmt":"1.4k","last_push":"2026-05-13","days_ago":59,"weekly_commits":0,"commits_low_confidence":false,"score":56.0,"description":"Agent S: an open agentic framework that uses computers like a human","language":"Python","open_issues":23,"category":"Browser & Computer Use","category_rank":14,"npm_package":"","crate_package":"","pypi_package":"","weekly_downloads":null,"dl_source":"","hn_mentions_30d":null,"has_provenance":false,"npm_provenance":null,"pypi_provenance":null,"signed_commits_ratio":null,"scorecard_score":3.8,"scorecard_checks":{"Binary-Artifacts":10,"Branch-Protection":0,"CI-Tests":3,"CII-Best-Practices":0,"Code-Review":4,"Contributors":10,"Dangerous-Workflow":10,"Dependency-Update-Tool":0,"Fuzzing":0,"License":10,"Maintained":2,"Packaging":-1,"Pinned-Dependencies":0,"SAST":0,"Security-Policy":0,"Signed-Releases":-1,"Token-Permissions":0,"Vulnerabilities":10},"scorecard_scanned_at":"2026-07-10T17:24:56Z","slug":"agent-s","source_note":"","public_actions":null,"mcp_server_support":{"status":"none","confidence":null,"evidence":[]},"external_service_dependencies":{"providers":["Anthropic","Azure OpenAI","Google Gemini","OpenAI"],"requires_api_keys":true,"confidence":"high","evidence":["README/docs mention OpenAI","Found OpenAI dependency 'openai' in setup.py","Found OpenAI credential/config marker 'OPENAI_API_KEY'","README/docs mention Anthropic","Found Anthropic dependency 'anthropic' in setup.py","Found Anthropic credential/config marker 'ANTHROPIC_API_KEY'"]},"tool_plugin_surface":{"plugin_system":"none","tool_tags":["browser","code"],"confidence":"high","evidence":["Found browser dependency 'selenium' in setup.py","README/docs mention code capabilities"]},"package_provenance_drift":{"status":"not_applicable","confidence":null,"summary":"No package source configured","evidence":[]},"evidence_grade":"D","coverage_grade":"C","signal_coverage":0.4,"signal_types":2,"listing_status":"listed","display_listing_status":"listed","display_status_label":"Listed","has_warning":false,"warning_reasons":[],"license_spdx":"Apache-2.0","license_type":"open","license_override":"","trust_score":42.1,"trust_score_v2":42.1,"rank_v2":273,"rank_v2_delta":-6,"trust_v2_adjustment":-3.1,"trust_confidence":1.0,"trust_breakdown":{"safety":4.8,"identity":10.8,"transparency":11.7,"maintenance":8.1,"adoption":9.8},"trust_v2_breakdown":{"mcp":0.0,"external_dependencies":-2.5,"tool_plugin_surface":-0.6,"package_provenance_drift":0.0},"pending_signals":false},{"name":"Superagent","repo":"homanp/superagent","display_repo":"","url":"https://github.com/superagent-ai/superagent","rank":274,"previous_rank":273,"rank_delta":-1,"stars":6669,"stars_fmt":"6.7k","forks":963,"forks_fmt":"963","last_push":"2026-04-11","days_ago":91,"weekly_commits":0,"commits_low_confidence":false,"score":49.3,"description":"Superagent protects your AI applications against prompt injections, data leaks, and harmful outputs. Embed safety direct","language":"TypeScript","open_issues":6,"category":"Workflow Platforms","category_rank":18,"npm_package":"safety-agent","crate_package":"","pypi_package":"superagent-py","weekly_downloads":7233,"dl_source":"npm+pypi","hn_mentions_30d":0,"has_provenance":false,"npm_provenance":false,"pypi_provenance":false,"signed_commits_ratio":0.55,"scorecard_score":2.6,"scorecard_checks":{"Binary-Artifacts":10,"Branch-Protection":3,"CI-Tests":2,"CII-Best-Practices":0,"Code-Review":2,"Contributors":6,"Dangerous-Workflow":10,"Dependency-Update-Tool":0,"Fuzzing":0,"License":10,"Maintained":0,"Packaging":-1,"Pinned-Dependencies":0,"SAST":0,"Security-Policy":0,"Signed-Releases":0,"Token-Permissions":0,"Vulnerabilities":0},"scorecard_scanned_at":"2026-07-11T02:13:14Z","slug":"superagent","source_note":"","public_actions":null,"mcp_server_support":{"status":"implemented","confidence":"high","evidence":["README/docs explicitly mention an MCP server","Found MCP-related server docs path: docs/content/docs/sdk/examples/scan-mcp-servers.mdx","Found MCP dependency '@modelcontextprotocol/sdk' in mcp/package.json"]},"external_service_dependencies":{"providers":["Amazon Bedrock","Anthropic","OpenAI"],"requires_api_keys":true,"confidence":"high","evidence":["README/docs mention OpenAI","README/docs mention Anthropic","README/docs mention Amazon Bedrock"]},"tool_plugin_surface":{"plugin_system":"declared","tool_tags":["code"],"confidence":"high","evidence":["README/docs mention a declared plugin/integration surface","README/docs mention code capabilities"]},"package_provenance_drift":{"status":"warning","confidence":"high","summary":"1 package source mismatch detected","evidence":["npm package 'safety-agent' points to superagent-ai/superagent, not homanp/superagent","pypi package 'superagent-py' has a non-GitHub or unparseable source URL"]},"evidence_grade":"D","coverage_grade":"A","signal_coverage":0.8,"signal_types":4,"listing_status":"listed","display_listing_status":"listed","display_status_label":"Listed","has_warning":false,"warning_reasons":[],"license_spdx":"MIT","license_type":"open","license_override":"","trust_score":42.1,"trust_score_v2":42.1,"rank_v2":274,"rank_v2_delta":-19,"trust_v2_adjustment":-5.6,"trust_confidence":1.0,"trust_breakdown":{"safety":6.0,"identity":10.8,"transparency":10.7,"maintenance":5.9,"adoption":14.3},"trust_v2_breakdown":{"mcp":2.0,"external_dependencies":-2.0,"tool_plugin_surface":-0.6,"package_provenance_drift":-5.0},"pending_signals":false},{"name":"LiteFlow","repo":"dromara/liteflow","display_repo":"","url":"https://github.com/dromara/liteflow","rank":275,"previous_rank":275,"rank_delta":0,"stars":3796,"stars_fmt":"3.8k","forks":519,"forks_fmt":"519","last_push":"2026-06-02","days_ago":39,"weekly_commits":0,"commits_low_confidence":false,"score":53.8,"description":"Lightweight, fast, stable, programmable component-based rule engine — where AI Agents orchestrate just like ordinary com","language":"Java","open_issues":50,"category":"Workflow Platforms","category_rank":19,"npm_package":"","crate_package":"","pypi_package":"","weekly_downloads":null,"dl_source":"","hn_mentions_30d":null,"has_provenance":false,"npm_provenance":null,"pypi_provenance":null,"signed_commits_ratio":0.01,"scorecard_score":3.0,"scorecard_checks":{"Binary-Artifacts":10,"Branch-Protection":0,"CI-Tests":-1,"CII-Best-Practices":0,"Code-Review":0,"Contributors":10,"Dangerous-Workflow":-1,"Dependency-Update-Tool":0,"Fuzzing":0,"License":10,"Maintained":10,"Packaging":-1,"Pinned-Dependencies":-1,"SAST":0,"Security-Policy":0,"Signed-Releases":-1,"Token-Permissions":-1,"Vulnerabilities":0},"scorecard_scanned_at":"2026-07-11T03:07:54Z","slug":"liteflow","source_note":"","public_actions":null,"mcp_server_support":{"status":"none","confidence":null,"evidence":[]},"external_service_dependencies":{"providers":["Google Gemini","OpenAI","Redis"],"requires_api_keys":false,"confidence":"high","evidence":["README/docs mention OpenAI","README/docs mention Google Gemini","README/docs mention Redis"]},"tool_plugin_surface":{"plugin_system":"extension-based","tool_tags":["database"],"confidence":"high","evidence":["README/docs mention a extension-based plugin/integration surface","README/docs mention database capabilities"]},"package_provenance_drift":{"status":"not_applicable","confidence":null,"summary":"No package source configured","evidence":[]},"evidence_grade":"D","coverage_grade":"C","signal_coverage":0.4,"signal_types":2,"listing_status":"listed","display_listing_status":"listed","display_status_label":"Listed","has_warning":false,"warning_reasons":[],"license_spdx":"Apache-2.0","license_type":"open","license_override":"","trust_score":41.8,"trust_score_v2":41.8,"rank_v2":275,"rank_v2_delta":-3,"trust_v2_adjustment":-1.9,"trust_confidence":1.0,"trust_breakdown":{"safety":3.8,"identity":10.8,"transparency":11.1,"maintenance":9.4,"adoption":8.6},"trust_v2_breakdown":{"mcp":0.0,"external_dependencies":-1.0,"tool_plugin_surface":-0.9,"package_provenance_drift":0.0},"pending_signals":false},{"name":"CrewAI tools","repo":"crewAIInc/crewAI-tools","display_repo":"","url":"https://github.com/crewAIInc/crewAI-tools","rank":276,"previous_rank":276,"rank_delta":0,"stars":1457,"stars_fmt":"1.5k","forks":535,"forks_fmt":"535","last_push":"2025-10-23","days_ago":261,"weekly_commits":0,"commits_low_confidence":false,"score":31.7,"description":"Extend the capabilities of your CrewAI agents with Tools","language":"Python","open_issues":72,"category":"Protocols & Tool Integration","category_rank":19,"npm_package":"","crate_package":"","pypi_package":"crewai-tools","weekly_downloads":2660001,"dl_source":"pypi","hn_mentions_30d":3,"has_provenance":false,"npm_provenance":null,"pypi_provenance":false,"signed_commits_ratio":0.93,"scorecard_score":4.3,"scorecard_checks":{"Binary-Artifacts":10,"Branch-Protection":6,"CI-Tests":10,"CII-Best-Practices":0,"Code-Review":9,"Contributors":10,"Dangerous-Workflow":10,"Dependency-Update-Tool":0,"Fuzzing":0,"License":10,"Maintained":0,"Packaging":-1,"Pinned-Dependencies":0,"SAST":7,"Security-Policy":0,"Signed-Releases":-1,"Token-Permissions":0,"Vulnerabilities":0},"scorecard_scanned_at":"2026-07-10T17:19:43Z","slug":"crewai-tools","source_note":"","public_actions":null,"mcp_server_support":{"status":"implemented","confidence":"medium","evidence":["README/docs explicitly mention an MCP server"]},"external_service_dependencies":{"providers":["Amazon Bedrock","Browserbase","Firecrawl","Postgres","Qdrant","SerpAPI","Tavily","Weaviate"],"requires_api_keys":false,"confidence":"high","evidence":["Found Amazon Bedrock dependency 'bedrock' in pyproject.toml","Found Qdrant dependency 'qdrant' in pyproject.toml","Found Weaviate dependency 'weaviate' in pyproject.toml","Found Tavily dependency 'tavily' in pyproject.toml","Found SerpAPI dependency 'serpapi' in pyproject.toml","Found Firecrawl dependency 'firecrawl' in pyproject.toml"]},"tool_plugin_surface":{"plugin_system":"declared","tool_tags":["browser","code","database","search"],"confidence":"high","evidence":["README/docs mention a declared plugin/integration surface","Found browser dependency 'playwright' in pyproject.toml","Found search dependency 'tavily' in pyproject.toml","Found database dependency 'postgres' in pyproject.toml","README/docs mention code capabilities"]},"package_provenance_drift":{"status":"warning","confidence":"high","summary":"1 package source mismatch detected","evidence":["pypi package 'crewai-tools' points to crewaiinc/crewai, not crewaiinc/crewai-tools"]},"evidence_grade":"D","coverage_grade":"A","signal_coverage":0.8,"signal_types":4,"listing_status":"warning","display_listing_status":"warning","display_status_label":"Needs review","has_warning":true,"warning_reasons":[{"repo":"crewAIInc/crewAI-tools","criterion":"5.1","detail":"repository is archived"}],"license_spdx":"MIT","license_type":"open","license_override":"","trust_score":41.7,"trust_score_v2":41.7,"rank_v2":276,"rank_v2_delta":-30,"trust_v2_adjustment":-7.5,"trust_confidence":1.0,"trust_breakdown":{"safety":10.0,"identity":10.8,"transparency":12.2,"maintenance":0.0,"adoption":16.2},"trust_v2_breakdown":{"mcp":2.0,"external_dependencies":-3.0,"tool_plugin_surface":-1.5,"package_provenance_drift":-5.0},"pending_signals":false},{"name":"OpenSSA","repo":"aitomatic/openssa","display_repo":"","url":"https://github.com/aitomatic/openssa","rank":277,"previous_rank":277,"rank_delta":0,"stars":345,"stars_fmt":"345","forks":58,"forks_fmt":"58","last_push":"2025-08-14","days_ago":331,"weekly_commits":0,"commits_low_confidence":false,"score":23.4,"description":"OpenSSA: Small Specialist Agents based on Domain-Aware Neurosymbolic Agent (DANA) architecture for industrial problem-so","language":"Python","open_issues":10,"category":"Agent Frameworks","category_rank":67,"npm_package":"","crate_package":"","pypi_package":"openssa","weekly_downloads":13,"dl_source":"pypi","hn_mentions_30d":71,"has_provenance":false,"npm_provenance":null,"pypi_provenance":false,"signed_commits_ratio":0.42,"scorecard_score":4.0,"scorecard_checks":{"Binary-Artifacts":10,"Branch-Protection":6,"CI-Tests":10,"CII-Best-Practices":0,"Code-Review":10,"Contributors":10,"Dangerous-Workflow":10,"Dependency-Update-Tool":0,"Fuzzing":0,"License":9,"Maintained":0,"Packaging":-1,"Pinned-Dependencies":0,"SAST":0,"Security-Policy":0,"Signed-Releases":-1,"Token-Permissions":0,"Vulnerabilities":0},"scorecard_scanned_at":"2026-07-11T01:26:41Z","slug":"openssa","source_note":"","public_actions":null,"mcp_server_support":{"status":"none","confidence":null,"evidence":[]},"external_service_dependencies":{"providers":["OpenAI"],"requires_api_keys":false,"confidence":"medium","evidence":["Found OpenAI dependency 'openai' in pyproject.toml"]},"tool_plugin_surface":{"plugin_system":"none","tool_tags":[],"confidence":null,"evidence":[]},"package_provenance_drift":{"status":"match","confidence":"high","summary":"Published package metadata matches the tracked repo","evidence":["pypi package 'openssa' points to the tracked repo"]},"evidence_grade":"D","coverage_grade":"A","signal_coverage":0.8,"signal_types":4,"listing_status":"listed","display_listing_status":"listed","display_status_label":"Listed","has_warning":false,"warning_reasons":[],"license_spdx":"NOASSERTION","license_type":"open","license_override":"","trust_score":41.4,"trust_score_v2":41.4,"rank_v2":277,"rank_v2_delta":28,"trust_v2_adjustment":4.0,"trust_confidence":1.0,"trust_breakdown":{"safety":7.1,"identity":10.8,"transparency":11.9,"maintenance":0.0,"adoption":7.6},"trust_v2_breakdown":{"mcp":0.0,"external_dependencies":-0.0,"tool_plugin_surface":-0.0,"package_provenance_drift":4.0},"pending_signals":false},{"name":"Sweep","repo":"sweepai/sweep","display_repo":"","url":"https://github.com/sweepai/sweep","rank":278,"previous_rank":278,"rank_delta":0,"stars":7701,"stars_fmt":"7.7k","forks":463,"forks_fmt":"463","last_push":"2025-09-18","days_ago":296,"weekly_commits":0,"commits_low_confidence":false,"score":35.7,"description":"Sweep: AI coding assistant for JetBrains","language":"Jupyter Notebook","open_issues":243,"category":"Coding Agents","category_rank":39,"npm_package":"","crate_package":"","pypi_package":"sweepai","weekly_downloads":22,"dl_source":"pypi","hn_mentions_30d":null,"has_provenance":false,"npm_provenance":null,"pypi_provenance":false,"signed_commits_ratio":0.24,"scorecard_score":4.2,"scorecard_checks":{"Binary-Artifacts":10,"Branch-Protection":6,"CI-Tests":0,"CII-Best-Practices":0,"Code-Review":10,"Contributors":10,"Dangerous-Workflow":10,"Dependency-Update-Tool":10,"Fuzzing":0,"License":9,"Maintained":0,"Packaging":-1,"Pinned-Dependencies":0,"SAST":0,"Security-Policy":0,"Signed-Releases":0,"Token-Permissions":0,"Vulnerabilities":0},"scorecard_scanned_at":"2026-07-11T01:24:16Z","slug":"sweep","source_note":"","public_actions":null,"mcp_server_support":{"status":"none","confidence":null,"evidence":[]},"external_service_dependencies":{"providers":["Amazon Bedrock","Anthropic","OpenAI","Postgres","Redis"],"requires_api_keys":false,"confidence":"high","evidence":["Found OpenAI dependency 'openai' in pyproject.toml","Found Anthropic dependency 'anthropic' in pyproject.toml","Found Amazon Bedrock dependency 'boto3' in pyproject.toml","Found Postgres dependency 'pg' in requirements.txt","Found Redis dependency 'redis' in pyproject.toml"]},"tool_plugin_surface":{"plugin_system":"declared","tool_tags":["code","database","shell"],"confidence":"high","evidence":["README/docs mention a declared plugin/integration surface","Found shell dependency 'pty' in requirements.txt","Found database dependency 'redis' in pyproject.toml","Found code dependency 'gitpython' in pyproject.toml"]},"package_provenance_drift":{"status":"match","confidence":"high","summary":"Published package metadata matches the tracked repo","evidence":["pypi package 'sweepai' points to the tracked repo"]},"evidence_grade":"D","coverage_grade":"B","signal_coverage":0.6,"signal_types":3,"listing_status":"listed","display_listing_status":"listed","display_status_label":"Listed","has_warning":false,"warning_reasons":[],"license_spdx":"NOASSERTION","license_type":"source-available","license_override":"source-available","trust_score":41.3,"trust_score_v2":41.3,"rank_v2":278,"rank_v2_delta":8,"trust_v2_adjustment":0.8,"trust_confidence":1.0,"trust_breakdown":{"safety":6.5,"identity":10.8,"transparency":12.1,"maintenance":0.0,"adoption":11.1},"trust_v2_breakdown":{"mcp":0.0,"external_dependencies":-2.0,"tool_plugin_surface":-1.2,"package_provenance_drift":4.0},"pending_signals":false},{"name":"HexStrike AI","repo":"0x4m4/hexstrike-ai","display_repo":"","url":"https://github.com/0x4m4/hexstrike-ai","rank":279,"previous_rank":279,"rank_delta":0,"stars":10260,"stars_fmt":"10.3k","forks":2155,"forks_fmt":"2.2k","last_push":"2026-04-27","days_ago":75,"weekly_commits":0,"commits_low_confidence":false,"score":54.3,"description":"HexStrike AI MCP Agents is an advanced MCP server that lets AI agents (Claude, GPT, Copilot, etc.) autonomously run 150+","language":"Python","open_issues":53,"category":"Security & Guardrails","category_rank":9,"npm_package":"","crate_package":"","pypi_package":"","weekly_downloads":null,"dl_source":"","hn_mentions_30d":null,"has_provenance":false,"npm_provenance":null,"pypi_provenance":null,"signed_commits_ratio":0.048,"scorecard_score":1.8,"scorecard_checks":{"Binary-Artifacts":10,"Branch-Protection":0,"CI-Tests":0,"CII-Best-Practices":0,"Code-Review":0,"Contributors":3,"Dangerous-Workflow":-1,"Dependency-Update-Tool":0,"Fuzzing":0,"License":10,"Maintained":2,"Packaging":-1,"Pinned-Dependencies":-1,"SAST":0,"Security-Policy":0,"Signed-Releases":-1,"Token-Permissions":-1,"Vulnerabilities":0},"scorecard_scanned_at":"2026-07-10T17:38:20Z","slug":"hexstrike-ai","source_note":"","public_actions":null,"mcp_server_support":{"status":"implemented","confidence":"high","evidence":["README/docs explicitly mention an MCP server","Found MCP dependency 'fastmcp' in requirements.txt"]},"external_service_dependencies":{"providers":[],"requires_api_keys":false,"confidence":null,"evidence":[]},"tool_plugin_surface":{"plugin_system":"extension-based","tool_tags":["browser"],"confidence":"high","evidence":["README/docs mention a extension-based plugin/integration surface","Found browser dependency 'selenium' in requirements.txt","README/docs also mention browser capabilities"]},"package_provenance_drift":{"status":"not_applicable","confidence":null,"summary":"No package source configured","evidence":[]},"evidence_grade":"D","coverage_grade":"C","signal_coverage":0.4,"signal_types":2,"listing_status":"listed","display_listing_status":"listed","display_status_label":"Listed","has_warning":false,"warning_reasons":[],"license_spdx":"MIT","license_type":"open","license_override":"","trust_score":41.0,"trust_score_v2":41.0,"rank_v2":279,"rank_v2_delta":12,"trust_v2_adjustment":1.1,"trust_confidence":1.0,"trust_breakdown":{"safety":2.5,"identity":10.8,"transparency":10.0,"maintenance":7.0,"adoption":9.6},"trust_v2_breakdown":{"mcp":2.0,"external_dependencies":-0.0,"tool_plugin_surface":-0.9,"package_provenance_drift":0.0},"pending_signals":false},{"name":"PromptFlow","repo":"microsoft/promptflow","display_repo":"","url":"https://github.com/microsoft/promptflow","rank":280,"previous_rank":280,"rank_delta":0,"stars":11180,"stars_fmt":"11.2k","forks":1109,"forks_fmt":"1.1k","last_push":"2026-07-09","days_ago":2,"weekly_commits":0,"commits_low_confidence":false,"score":63.4,"description":"Build high-quality LLM apps - from prototyping, testing to production deployment and monitoring.","language":"Python","open_issues":67,"category":"Workflow Platforms","category_rank":20,"npm_package":"","crate_package":"","pypi_package":"promptflow","weekly_downloads":20662,"dl_source":"pypi","hn_mentions_30d":0,"has_provenance":false,"npm_provenance":null,"pypi_provenance":false,"signed_commits_ratio":0.99,"scorecard_score":null,"scorecard_checks":{},"scorecard_scanned_at":null,"slug":"promptflow","source_note":"","public_actions":null,"mcp_server_support":{"status":"none","confidence":null,"evidence":[]},"external_service_dependencies":{"providers":["Azure OpenAI","OpenAI"],"requires_api_keys":false,"confidence":"high","evidence":["README/docs mention OpenAI","README/docs mention Azure OpenAI"]},"tool_plugin_surface":{"plugin_system":"marketplace","tool_tags":["code"],"confidence":"high","evidence":["README/docs mention a marketplace plugin/integration surface","README/docs mention code capabilities"]},"package_provenance_drift":{"status":"match","confidence":"high","summary":"Published package metadata matches the tracked repo","evidence":["pypi package 'promptflow' points to the tracked repo"]},"evidence_grade":"D","coverage_grade":"B","signal_coverage":0.6,"signal_types":3,"listing_status":"listed","display_listing_status":"listed","display_status_label":"Listed","has_warning":false,"warning_reasons":[],"license_spdx":"MIT","license_type":"open","license_override":"","trust_score":41.0,"trust_score_v2":41.0,"rank_v2":280,"rank_v2_delta":18,"trust_v2_adjustment":2.2,"trust_confidence":0.75,"trust_breakdown":{"safety":5.0,"identity":10.8,"transparency":8.5,"maintenance":11.9,"adoption":15.5},"trust_v2_breakdown":{"mcp":0.0,"external_dependencies":-0.5,"tool_plugin_surface":-1.3,"package_provenance_drift":4.0},"pending_signals":false},{"name":"Activepieces","repo":"activepieces/activepieces","display_repo":"","url":"https://github.com/activepieces/activepieces","rank":281,"previous_rank":281,"rank_delta":0,"stars":23207,"stars_fmt":"23.2k","forks":3911,"forks_fmt":"3.9k","last_push":"2026-07-10","days_ago":1,"weekly_commits":281,"commits_low_confidence":false,"score":92.9,"description":"AI Agents & MCPs & AI Workflow Automation • (~400 MCP servers for AI agents) • AI Automation / AI Agent with MCPs • AI W","language":"TypeScript","open_issues":351,"category":"Workflow Platforms","category_rank":21,"npm_package":"@activepieces/shared","crate_package":"","pypi_package":"","weekly_downloads":1452097,"dl_source":"npm","hn_mentions_30d":null,"has_provenance":false,"npm_provenance":false,"pypi_provenance":null,"signed_commits_ratio":0.98,"scorecard_score":null,"scorecard_checks":{},"scorecard_scanned_at":null,"slug":"activepieces","source_note":"","public_actions":null,"mcp_server_support":{"status":"implemented","confidence":"high","evidence":["Found MCP-related server path: .agents/skills/mcp-builder/reference/node_mcp_server.md","Found MCP-related server path: .agents/skills/mcp-builder/reference/python_mcp_server.md","Found MCP dependency '@modelcontextprotocol/sdk' in package.json"]},"external_service_dependencies":{"providers":["Anthropic","OpenAI","Postgres","Redis"],"requires_api_keys":false,"confidence":"high","evidence":["Found OpenAI dependency 'openai' in package.json","README/docs also mention OpenAI","Found Anthropic dependency 'anthropic' in package.json","Found Postgres dependency 'pg' in package.json","Found Redis dependency 'redis' in package.json"]},"tool_plugin_surface":{"plugin_system":"declared","tool_tags":["browser","code","database","filesystem"],"confidence":"high","evidence":["README/docs mention a declared plugin/integration surface","Found browser dependency 'playwright' in package.json","Found filesystem dependency 'fs-extra' in package.json","Found database dependency 'pg' in package.json","Found code dependency 'simple-git' in package.json","README/docs also mention code capabilities"]},"package_provenance_drift":{"status":"unknown","confidence":"low","summary":"Package source metadata is missing or inconclusive","evidence":["npm package '@activepieces/shared' does not expose a source repo URL"]},"evidence_grade":"D","coverage_grade":"C","signal_coverage":0.4,"signal_types":2,"listing_status":"listed","display_listing_status":"listed","display_status_label":"Listed","has_warning":false,"warning_reasons":[],"license_spdx":"NOASSERTION","license_type":"open","license_override":"","trust_score":40.9,"trust_score_v2":40.9,"rank_v2":281,"rank_v2_delta":-2,"trust_v2_adjustment":-1.0,"trust_confidence":0.67,"trust_breakdown":{"safety":4.9,"identity":10.8,"transparency":8.5,"maintenance":19.9,"adoption":18.7},"trust_v2_breakdown":{"mcp":2.0,"external_dependencies":-1.5,"tool_plugin_surface":-1.5,"package_provenance_drift":0.0},"pending_signals":false},{"name":"UI-TARS","repo":"bytedance/UI-TARS","display_repo":"","url":"https://github.com/bytedance/UI-TARS","rank":282,"previous_rank":282,"rank_delta":0,"stars":11158,"stars_fmt":"11.2k","forks":846,"forks_fmt":"846","last_push":"2026-01-27","days_ago":165,"weekly_commits":0,"commits_low_confidence":false,"score":40.0,"description":"Pioneering Automated GUI Interaction with Native Agents","language":"Python","open_issues":43,"category":"Browser & Computer Use","category_rank":15,"npm_package":"","crate_package":"","pypi_package":"ui-tars","weekly_downloads":613,"dl_source":"pypi","hn_mentions_30d":1,"has_provenance":false,"npm_provenance":null,"pypi_provenance":false,"signed_commits_ratio":0.19,"scorecard_score":2.7,"scorecard_checks":{"Binary-Artifacts":10,"Branch-Protection":0,"CI-Tests":0,"CII-Best-Practices":0,"Code-Review":1,"Contributors":10,"Dangerous-Workflow":10,"Dependency-Update-Tool":0,"Fuzzing":0,"License":10,"Maintained":0,"Packaging":-1,"Pinned-Dependencies":0,"SAST":0,"Security-Policy":0,"Signed-Releases":-1,"Token-Permissions":0,"Vulnerabilities":2},"scorecard_scanned_at":"2026-07-11T02:08:14Z","slug":"ui-tars","source_note":"","public_actions":null,"mcp_server_support":{"status":"none","confidence":null,"evidence":[]},"external_service_dependencies":{"providers":[],"requires_api_keys":false,"confidence":null,"evidence":[]},"tool_plugin_surface":{"plugin_system":"declared","tool_tags":[],"confidence":"medium","evidence":["README/docs mention a declared plugin/integration surface"]},"package_provenance_drift":{"status":"unknown","confidence":"low","summary":"Package source metadata is missing or inconclusive","evidence":["pypi package 'ui-tars' has a non-GitHub or unparseable source URL"]},"evidence_grade":"D","coverage_grade":"A","signal_coverage":0.8,"signal_types":4,"listing_status":"listed","display_listing_status":"listed","display_status_label":"Listed","has_warning":false,"warning_reasons":[],"license_spdx":"Apache-2.0","license_type":"open","license_override":"","trust_score":40.0,"trust_score_v2":40.0,"rank_v2":282,"rank_v2_delta":7,"trust_v2_adjustment":-0.3,"trust_confidence":1.0,"trust_breakdown":{"safety":4.3,"identity":10.8,"transparency":10.8,"maintenance":1.0,"adoption":13.4},"trust_v2_breakdown":{"mcp":0.0,"external_dependencies":-0.0,"tool_plugin_surface":-0.3,"package_provenance_drift":0.0},"pending_signals":false},{"name":"TruLens","repo":"truera/trulens","display_repo":"","url":"https://github.com/truera/trulens","rank":283,"previous_rank":283,"rank_delta":0,"stars":3434,"stars_fmt":"3.4k","forks":309,"forks_fmt":"309","last_push":"2026-07-11","days_ago":0,"weekly_commits":5,"commits_low_confidence":true,"score":67.5,"description":"Evaluation and Tracking for LLM Experiments and AI Agents","language":"Python","open_issues":47,"category":"Observability & Evaluation","category_rank":18,"npm_package":"","crate_package":"","pypi_package":"trulens-core","weekly_downloads":12963,"dl_source":"pypi","hn_mentions_30d":22,"has_provenance":false,"npm_provenance":null,"pypi_provenance":false,"signed_commits_ratio":1.0,"scorecard_score":null,"scorecard_checks":{},"scorecard_scanned_at":null,"slug":"trulens","source_note":"","public_actions":null,"mcp_server_support":{"status":"declared","confidence":"low","evidence":["README/docs mention MCP support"]},"external_service_dependencies":{"providers":["Amazon Bedrock","Anthropic","Azure OpenAI","Google Gemini","OpenAI"],"requires_api_keys":false,"confidence":"high","evidence":["README/docs mention OpenAI","Found OpenAI dependency 'openai' in pyproject.toml","README/docs mention Anthropic","README/docs mention Google Gemini","README/docs mention Azure OpenAI","README/docs mention Amazon Bedrock"]},"tool_plugin_surface":{"plugin_system":"declared","tool_tags":["code","search"],"confidence":"high","evidence":["README/docs mention a declared plugin/integration surface","README/docs mention search capabilities","README/docs mention code capabilities"]},"package_provenance_drift":{"status":"match","confidence":"high","summary":"Published package metadata matches the tracked repo","evidence":["pypi package 'trulens-core' points to the tracked repo"]},"evidence_grade":"D","coverage_grade":"B","signal_coverage":0.6,"signal_types":3,"listing_status":"listed","display_listing_status":"listed","display_status_label":"Listed","has_warning":false,"warning_reasons":[],"license_spdx":"MIT","license_type":"open","license_override":"","trust_score":40.0,"trust_score_v2":40.0,"rank_v2":283,"rank_v2_delta":14,"trust_v2_adjustment":1.1,"trust_confidence":0.75,"trust_breakdown":{"safety":5.0,"identity":10.8,"transparency":8.5,"maintenance":13.6,"adoption":14.0},"trust_v2_breakdown":{"mcp":0.0,"external_dependencies":-2.0,"tool_plugin_surface":-0.9,"package_provenance_drift":4.0},"pending_signals":false},{"name":"Open Deep Research (dzhng)","repo":"dzhng/deep-research","display_repo":"","url":"https://github.com/dzhng/deep-research","rank":284,"previous_rank":284,"rank_delta":0,"stars":19328,"stars_fmt":"19.3k","forks":1972,"forks_fmt":"2.0k","last_push":"2026-04-11","days_ago":91,"weekly_commits":0,"commits_low_confidence":false,"score":53.5,"description":"An AI-powered research assistant that performs iterative, deep research on any topic by combining search engines, web sc","language":"TypeScript","open_issues":71,"category":"Research & Data","category_rank":16,"npm_package":"","crate_package":"","pypi_package":"","weekly_downloads":null,"dl_source":"","hn_mentions_30d":null,"has_provenance":false,"npm_provenance":null,"pypi_provenance":null,"signed_commits_ratio":0.403,"scorecard_score":1.8,"scorecard_checks":{"Binary-Artifacts":10,"Branch-Protection":0,"CI-Tests":0,"CII-Best-Practices":0,"Code-Review":3,"Contributors":6,"Dangerous-Workflow":-1,"Dependency-Update-Tool":0,"Fuzzing":0,"License":10,"Maintained":0,"Packaging":-1,"Pinned-Dependencies":0,"SAST":0,"Security-Policy":0,"Signed-Releases":-1,"Token-Permissions":-1,"Vulnerabilities":0},"scorecard_scanned_at":"2026-07-10T08:38:27Z","slug":"open-deep-research-dzhng","source_note":"","public_actions":null,"mcp_server_support":{"status":"none","confidence":null,"evidence":[]},"external_service_dependencies":{"providers":["Firecrawl","Google Gemini","OpenAI"],"requires_api_keys":false,"confidence":"high","evidence":["README/docs mention OpenAI","Found OpenAI dependency 'openai' in package.json","README/docs mention Google Gemini","README/docs mention Firecrawl","Found Firecrawl dependency 'firecrawl' in package.json"]},"tool_plugin_surface":{"plugin_system":"none","tool_tags":["code","search"],"confidence":"high","evidence":["README/docs mention search capabilities","README/docs mention code capabilities"]},"package_provenance_drift":{"status":"not_applicable","confidence":null,"summary":"No package source configured","evidence":[]},"evidence_grade":"D","coverage_grade":"C","signal_coverage":0.4,"signal_types":2,"listing_status":"listed","display_listing_status":"listed","display_status_label":"Listed","has_warning":false,"warning_reasons":[],"license_spdx":"MIT","license_type":"open","license_override":"","trust_score":39.7,"trust_score_v2":39.7,"rank_v2":284,"rank_v2_delta":0,"trust_v2_adjustment":-1.6,"trust_confidence":1.0,"trust_breakdown":{"safety":4.3,"identity":10.8,"transparency":10.0,"maintenance":5.9,"adoption":10.3},"trust_v2_breakdown":{"mcp":0.0,"external_dependencies":-1.0,"tool_plugin_surface":-0.6,"package_provenance_drift":0.0},"pending_signals":false},{"name":"Magentic","repo":"jackmpcollins/magentic","display_repo":"","url":"https://github.com/jackmpcollins/magentic","rank":285,"previous_rank":285,"rank_delta":0,"stars":2412,"stars_fmt":"2.4k","forks":127,"forks_fmt":"127","last_push":"2026-03-11","days_ago":122,"weekly_commits":0,"commits_low_confidence":false,"score":38.3,"description":"Seamlessly integrate LLMs as Python functions","language":"Python","open_issues":40,"category":"Agent Frameworks","category_rank":68,"npm_package":"","crate_package":"","pypi_package":"","weekly_downloads":null,"dl_source":"","hn_mentions_30d":null,"has_provenance":false,"npm_provenance":null,"pypi_provenance":null,"signed_commits_ratio":0.76,"scorecard_score":3.9,"scorecard_checks":{"Binary-Artifacts":10,"Branch-Protection":3,"CI-Tests":3,"CII-Best-Practices":0,"Code-Review":2,"Contributors":3,"Dangerous-Workflow":10,"Dependency-Update-Tool":10,"Fuzzing":0,"License":10,"Maintained":0,"Packaging":10,"Pinned-Dependencies":0,"SAST":0,"Security-Policy":0,"Signed-Releases":-1,"Token-Permissions":0,"Vulnerabilities":0},"scorecard_scanned_at":"2026-07-10T16:21:45Z","slug":"magentic","source_note":"","public_actions":null,"mcp_server_support":{"status":"none","confidence":null,"evidence":[]},"external_service_dependencies":{"providers":["Anthropic","Azure OpenAI","Google Gemini","OpenAI"],"requires_api_keys":true,"confidence":"high","evidence":["README/docs mention OpenAI","Found OpenAI dependency 'openai' in pyproject.toml","Found OpenAI credential/config marker 'OPENAI_API_KEY'","README/docs mention Anthropic","Found Anthropic dependency 'anthropic' in pyproject.toml","Found Anthropic credential/config marker 'ANTHROPIC_API_KEY'"]},"tool_plugin_surface":{"plugin_system":"declared","tool_tags":["code","search","shell"],"confidence":"high","evidence":["README/docs mention a declared plugin/integration surface","Found shell dependency 'pty' in pyproject.toml","README/docs mention search capabilities","README/docs mention code capabilities"]},"package_provenance_drift":{"status":"not_applicable","confidence":null,"summary":"No package source configured","evidence":[]},"evidence_grade":"D","coverage_grade":"C","signal_coverage":0.4,"signal_types":2,"listing_status":"listed","display_listing_status":"listed","display_status_label":"Listed","has_warning":false,"warning_reasons":[],"license_spdx":"MIT","license_type":"open","license_override":"","trust_score":39.6,"trust_score_v2":39.6,"rank_v2":285,"rank_v2_delta":-10,"trust_v2_adjustment":-3.7,"trust_confidence":1.0,"trust_breakdown":{"safety":8.7,"identity":10.8,"transparency":11.8,"maintenance":3.9,"adoption":8.1},"trust_v2_breakdown":{"mcp":0.0,"external_dependencies":-2.5,"tool_plugin_surface":-1.2,"package_provenance_drift":0.0},"pending_signals":false},{"name":"ChatArena","repo":"Farama-Foundation/ChatArena","display_repo":"","url":"https://github.com/Farama-Foundation/ChatArena","rank":286,"previous_rank":286,"rank_delta":0,"stars":1549,"stars_fmt":"1.5k","forks":148,"forks_fmt":"148","last_push":"2025-08-11","days_ago":334,"weekly_commits":0,"commits_low_confidence":false,"score":29.2,"description":"ChatArena (or Chat Arena) is a Multi-Agent Language Game Environments for LLMs. The goal is to develop communication and","language":"Python","open_issues":5,"category":"Multi-Agent Systems","category_rank":16,"npm_package":"","crate_package":"","pypi_package":"","weekly_downloads":null,"dl_source":"","hn_mentions_30d":null,"has_provenance":false,"npm_provenance":null,"pypi_provenance":null,"signed_commits_ratio":0.97,"scorecard_score":4.7,"scorecard_checks":{"Binary-Artifacts":10,"Branch-Protection":6,"CI-Tests":0,"CII-Best-Practices":0,"Code-Review":2,"Contributors":10,"Dangerous-Workflow":10,"Dependency-Update-Tool":10,"Fuzzing":0,"License":10,"Maintained":0,"Packaging":-1,"Pinned-Dependencies":0,"SAST":0,"Security-Policy":0,"Signed-Releases":-1,"Token-Permissions":0,"Vulnerabilities":10},"scorecard_scanned_at":"2026-07-11T01:37:15Z","slug":"chatarena","source_note":"","public_actions":null,"mcp_server_support":{"status":"none","confidence":null,"evidence":[]},"external_service_dependencies":{"providers":["Anthropic","OpenAI","Supabase"],"requires_api_keys":true,"confidence":"high","evidence":["README/docs mention OpenAI","Found OpenAI dependency 'openai' in pyproject.toml","Found OpenAI credential/config marker 'OPENAI_API_KEY'","README/docs mention Anthropic","Found Anthropic dependency 'anthropic' in pyproject.toml","Found Supabase dependency 'supabase' in pyproject.toml"]},"tool_plugin_surface":{"plugin_system":"none","tool_tags":["code"],"confidence":"medium","evidence":["README/docs mention code capabilities"]},"package_provenance_drift":{"status":"not_applicable","confidence":null,"summary":"No package source configured","evidence":[]},"evidence_grade":"D","coverage_grade":"C","signal_coverage":0.4,"signal_types":2,"listing_status":"listed","display_listing_status":"listed","display_status_label":"Listed","has_warning":false,"warning_reasons":[],"license_spdx":"Apache-2.0","license_type":"open","license_override":"","trust_score":39.4,"trust_score_v2":39.4,"rank_v2":286,"rank_v2_delta":-3,"trust_v2_adjustment":-2.3,"trust_confidence":1.0,"trust_breakdown":{"safety":10.7,"identity":10.8,"transparency":12.5,"maintenance":0.0,"adoption":7.7},"trust_v2_breakdown":{"mcp":0.0,"external_dependencies":-2.0,"tool_plugin_surface":-0.3,"package_provenance_drift":0.0},"pending_signals":false},{"name":"OpenCUA","repo":"xlang-ai/OpenCUA","display_repo":"","url":"https://github.com/xlang-ai/OpenCUA","rank":287,"previous_rank":287,"rank_delta":0,"stars":796,"stars_fmt":"796","forks":104,"forks_fmt":"104","last_push":"2026-05-25","days_ago":47,"weekly_commits":0,"commits_low_confidence":false,"score":45.3,"description":"[NeurIPS 2025 Spotlight] OpenCUA: Open Foundations for Computer-Use Agents","language":"Python","open_issues":14,"category":"Browser & Computer Use","category_rank":16,"npm_package":"","crate_package":"","pypi_package":"","weekly_downloads":null,"dl_source":"","hn_mentions_30d":264,"has_provenance":false,"npm_provenance":null,"pypi_provenance":null,"signed_commits_ratio":0.267,"scorecard_score":1.6,"scorecard_checks":{"Binary-Artifacts":10,"Branch-Protection":0,"CI-Tests":0,"CII-Best-Practices":0,"Code-Review":0,"Contributors":0,"Dangerous-Workflow":-1,"Dependency-Update-Tool":0,"Fuzzing":0,"License":10,"Maintained":0,"Packaging":-1,"Pinned-Dependencies":-1,"SAST":0,"Security-Policy":0,"Signed-Releases":0,"Token-Permissions":-1,"Vulnerabilities":3},"scorecard_scanned_at":"2026-07-11T01:27:23Z","slug":"opencua","source_note":"","public_actions":null,"mcp_server_support":{"status":"none","confidence":null,"evidence":[]},"external_service_dependencies":{"providers":["OpenAI"],"requires_api_keys":false,"confidence":"medium","evidence":["README/docs mention OpenAI"]},"tool_plugin_surface":{"plugin_system":"declared","tool_tags":["code"],"confidence":"high","evidence":["README/docs mention a declared plugin/integration surface","README/docs mention code capabilities"]},"package_provenance_drift":{"status":"not_applicable","confidence":null,"summary":"No package source configured","evidence":[]},"evidence_grade":"D","coverage_grade":"B","signal_coverage":0.6,"signal_types":3,"listing_status":"listed","display_listing_status":"listed","display_status_label":"Listed","has_warning":false,"warning_reasons":[],"license_spdx":"MIT","license_type":"open","license_override":"","trust_score":39.3,"trust_score_v2":39.3,"rank_v2":287,"rank_v2_delta":5,"trust_v2_adjustment":-0.6,"trust_confidence":1.0,"trust_breakdown":{"safety":3.3,"identity":10.8,"transparency":9.9,"maintenance":8.9,"adoption":7.0},"trust_v2_breakdown":{"mcp":0.0,"external_dependencies":-0.0,"tool_plugin_surface":-0.6,"package_provenance_drift":0.0},"pending_signals":false},{"name":"OpenAI CUA Sample App","repo":"openai/openai-cua-sample-app","display_repo":"","url":"https://github.com/openai/openai-cua-sample-app","rank":288,"previous_rank":288,"rank_delta":0,"stars":1747,"stars_fmt":"1.7k","forks":427,"forks_fmt":"427","last_push":"2026-03-30","days_ago":103,"weekly_commits":0,"commits_low_confidence":false,"score":42.5,"description":"Learn how to use CUA (our Computer Using Agent) via the API on multiple computer environments.","language":"TypeScript","open_issues":23,"category":"Browser & Computer Use","category_rank":17,"npm_package":"","crate_package":"","pypi_package":"","weekly_downloads":null,"dl_source":"","hn_mentions_30d":null,"has_provenance":false,"npm_provenance":null,"pypi_provenance":null,"signed_commits_ratio":0.486,"scorecard_score":2.7,"scorecard_checks":{"Binary-Artifacts":10,"Branch-Protection":5,"CI-Tests":0,"CII-Best-Practices":0,"Code-Review":6,"Contributors":3,"Dangerous-Workflow":-1,"Dependency-Update-Tool":0,"Fuzzing":0,"License":10,"Maintained":0,"Packaging":-1,"Pinned-Dependencies":-1,"SAST":0,"Security-Policy":0,"Signed-Releases":-1,"Token-Permissions":-1,"Vulnerabilities":0},"scorecard_scanned_at":"2026-07-08T09:24:25Z","slug":"openai-cua-sample-app","source_note":"","public_actions":null,"mcp_server_support":{"status":"none","confidence":null,"evidence":[]},"external_service_dependencies":{"providers":["OpenAI"],"requires_api_keys":true,"confidence":"high","evidence":["README/docs mention OpenAI","Found OpenAI dependency 'openai' in package.json","Found OpenAI credential/config marker 'OPENAI_API_KEY'"]},"tool_plugin_surface":{"plugin_system":"none","tool_tags":["browser","code"],"confidence":"high","evidence":["README/docs mention browser capabilities","README/docs mention code capabilities"]},"package_provenance_drift":{"status":"not_applicable","confidence":null,"summary":"No package source configured","evidence":[]},"evidence_grade":"D","coverage_grade":"C","signal_coverage":0.4,"signal_types":2,"listing_status":"listed","display_listing_status":"listed","display_status_label":"Listed","has_warning":false,"warning_reasons":[],"license_spdx":"MIT","license_type":"open","license_override":"","trust_score":38.7,"trust_score_v2":38.7,"rank_v2":288,"rank_v2_delta":0,"trust_v2_adjustment":-1.6,"trust_confidence":1.0,"trust_breakdown":{"safety":5.8,"identity":10.8,"transparency":10.8,"maintenance":5.1,"adoption":7.8},"trust_v2_breakdown":{"mcp":0.0,"external_dependencies":-1.0,"tool_plugin_surface":-0.6,"package_provenance_drift":0.0},"pending_signals":false},{"name":"PocketFlow","repo":"The-Pocket/PocketFlow","display_repo":"","url":"https://github.com/The-Pocket/PocketFlow","rank":289,"previous_rank":289,"rank_delta":0,"stars":10954,"stars_fmt":"11.0k","forks":1186,"forks_fmt":"1.2k","last_push":"2026-03-27","days_ago":106,"weekly_commits":0,"commits_low_confidence":false,"score":48.9,"description":"Pocket Flow: 100-line LLM framework. Let Agents build Agents!","language":"Python","open_issues":60,"category":"Agent Frameworks","category_rank":69,"npm_package":"","crate_package":"","pypi_package":"","weekly_downloads":null,"dl_source":"","hn_mentions_30d":null,"has_provenance":false,"npm_provenance":null,"pypi_provenance":null,"signed_commits_ratio":0.37,"scorecard_score":2.3,"scorecard_checks":{"Binary-Artifacts":10,"Branch-Protection":0,"CI-Tests":0,"CII-Best-Practices":0,"Code-Review":5,"Contributors":10,"Dangerous-Workflow":-1,"Dependency-Update-Tool":0,"Fuzzing":0,"License":10,"Maintained":0,"Packaging":-1,"Pinned-Dependencies":-1,"SAST":0,"Security-Policy":0,"Signed-Releases":-1,"Token-Permissions":-1,"Vulnerabilities":0},"scorecard_scanned_at":"2026-07-10T08:48:09Z","slug":"pocketflow","source_note":"","public_actions":null,"mcp_server_support":{"status":"declared","confidence":"medium","evidence":["README/docs mention MCP support","Found MCP dependency 'fastmcp' in cookbook/pocketflow-mcp/requirements.txt"]},"external_service_dependencies":{"providers":["Anthropic","OpenAI","Pinecone"],"requires_api_keys":false,"confidence":"high","evidence":["README/docs mention OpenAI","Found OpenAI dependency 'openai' in cookbook/pocketflow-a2a/requirements.txt","README/docs mention Anthropic","README/docs mention Pinecone"]},"tool_plugin_surface":{"plugin_system":"none","tool_tags":["code","search","shell"],"confidence":"high","evidence":["Found shell dependency 'subprocess' in cookbook/pocketflow-tracing/setup.py","README/docs mention search capabilities","README/docs mention code capabilities"]},"package_provenance_drift":{"status":"not_applicable","confidence":null,"summary":"No package source configured","evidence":[]},"evidence_grade":"D","coverage_grade":"C","signal_coverage":0.4,"signal_types":2,"listing_status":"listed","display_listing_status":"listed","display_status_label":"Listed","has_warning":false,"warning_reasons":[],"license_spdx":"MIT","license_type":"open","license_override":"","trust_score":38.7,"trust_score_v2":38.7,"rank_v2":289,"rank_v2_delta":-4,"trust_v2_adjustment":-1.9,"trust_confidence":1.0,"trust_breakdown":{"safety":4.7,"identity":10.8,"transparency":10.5,"maintenance":4.9,"adoption":9.7},"trust_v2_breakdown":{"mcp":0.0,"external_dependencies":-1.0,"tool_plugin_surface":-0.9,"package_provenance_drift":0.0},"pending_signals":false},{"name":"Agent-E","repo":"EmergenceAI/agent-e","display_repo":"","url":"https://github.com/EmergenceAI/Agent-E","rank":290,"previous_rank":290,"rank_delta":0,"stars":1244,"stars_fmt":"1.2k","forks":189,"forks_fmt":"189","last_push":"2026-05-04","days_ago":68,"weekly_commits":0,"commits_low_confidence":false,"score":44.9,"description":"Agent driven automation starting with the web. Try it: https://www.emergence.ai/web-automation-api","language":"Python","open_issues":17,"category":"Browser & Computer Use","category_rank":18,"npm_package":"","crate_package":"","pypi_package":"","weekly_downloads":null,"dl_source":"","hn_mentions_30d":0,"has_provenance":false,"npm_provenance":null,"pypi_provenance":null,"signed_commits_ratio":0.36,"scorecard_score":3.6,"scorecard_checks":{"Binary-Artifacts":10,"Branch-Protection":5,"CI-Tests":0,"CII-Best-Practices":0,"Code-Review":7,"Contributors":3,"Dangerous-Workflow":-1,"Dependency-Update-Tool":0,"Fuzzing":0,"License":10,"Maintained":0,"Packaging":-1,"Pinned-Dependencies":0,"SAST":0,"Security-Policy":0,"Signed-Releases":-1,"Token-Permissions":-1,"Vulnerabilities":10},"scorecard_scanned_at":"2026-07-11T02:13:02Z","slug":"agent-e","source_note":"","public_actions":null,"mcp_server_support":{"status":"none","confidence":null,"evidence":[]},"external_service_dependencies":{"providers":["Anthropic","Azure OpenAI","Google Gemini","OpenAI","Postgres"],"requires_api_keys":true,"confidence":"high","evidence":["README/docs mention OpenAI","Found OpenAI dependency 'openai' in requirements.txt","Found Anthropic dependency 'anthropic' in pyproject.toml","Found Google Gemini dependency 'google-generativeai' in pyproject.toml","README/docs mention Azure OpenAI","Found Postgres dependency 'pg' in pyproject.toml"]},"tool_plugin_surface":{"plugin_system":"extension-based","tool_tags":["browser","code","database","search","shell"],"confidence":"high","evidence":["README/docs mention a extension-based plugin/integration surface","README/docs mention browser capabilities","README/docs mention shell capabilities","README/docs mention search capabilities","Found database dependency 'pg' in pyproject.toml","README/docs mention code capabilities"]},"package_provenance_drift":{"status":"not_applicable","confidence":null,"summary":"No package source configured","evidence":[]},"evidence_grade":"D","coverage_grade":"B","signal_coverage":0.6,"signal_types":3,"listing_status":"listed","display_listing_status":"listed","display_status_label":"Listed","has_warning":false,"warning_reasons":[],"license_spdx":"MIT","license_type":"open","license_override":"","trust_score":38.5,"trust_score_v2":38.5,"rank_v2":290,"rank_v2_delta":-17,"trust_v2_adjustment":-5.1,"trust_confidence":1.0,"trust_breakdown":{"safety":6.3,"identity":10.8,"transparency":11.6,"maintenance":7.5,"adoption":7.4},"trust_v2_breakdown":{"mcp":0.0,"external_dependencies":-3.0,"tool_plugin_surface":-2.1,"package_provenance_drift":0.0},"pending_signals":false},{"name":"Leon","repo":"leon-ai/leon","display_repo":"","url":"https://github.com/leon-ai/leon","rank":291,"previous_rank":291,"rank_delta":0,"stars":17352,"stars_fmt":"17.4k","forks":1450,"forks_fmt":"1.4k","last_push":"2026-06-29","days_ago":12,"weekly_commits":19,"commits_low_confidence":false,"score":79.8,"description":"🧠 Leon is your open-source personal assistant.","language":"TypeScript","open_issues":94,"category":"Voice & Conversational","category_rank":7,"npm_package":"@leon-ai/leon","crate_package":"","pypi_package":"","weekly_downloads":null,"dl_source":"","hn_mentions_30d":null,"has_provenance":false,"npm_provenance":null,"pypi_provenance":null,"signed_commits_ratio":0.89,"scorecard_score":4.5,"scorecard_checks":{"Binary-Artifacts":10,"Branch-Protection":8,"CI-Tests":-1,"CII-Best-Practices":0,"Code-Review":0,"Contributors":10,"Dangerous-Workflow":10,"Dependency-Update-Tool":10,"Fuzzing":0,"License":10,"Maintained":10,"Packaging":-1,"Pinned-Dependencies":0,"SAST":0,"Security-Policy":0,"Signed-Releases":0,"Token-Permissions":0,"Vulnerabilities":0},"scorecard_scanned_at":"2026-07-11T03:29:18Z","slug":"leon","source_note":"","public_actions":null,"mcp_server_support":{"status":"none","confidence":null,"evidence":[]},"external_service_dependencies":{"providers":["Anthropic","OpenAI"],"requires_api_keys":false,"confidence":"high","evidence":["README/docs mention OpenAI","Found OpenAI dependency 'openai' in package.json","Found Anthropic dependency 'anthropic' in package.json"]},"tool_plugin_surface":{"plugin_system":"declared","tool_tags":["code","search","shell"],"confidence":"high","evidence":["Found declared path: server/src/core/http-server/plugins/cors.ts","Found shell dependency 'execa' in package.json","README/docs mention search capabilities","README/docs mention code capabilities"]},"package_provenance_drift":{"status":"unknown","confidence":"low","summary":"Package source metadata is missing or inconclusive","evidence":["npm package '@leon-ai/leon' does not expose a source repo URL"]},"evidence_grade":"D","coverage_grade":"C","signal_coverage":0.4,"signal_types":2,"listing_status":"listed","display_listing_status":"listed","display_status_label":"Listed","has_warning":false,"warning_reasons":[],"license_spdx":"MIT","license_type":"open","license_override":"","trust_score":38.2,"trust_score_v2":38.2,"rank_v2":291,"rank_v2_delta":-1,"trust_v2_adjustment":-1.7,"trust_confidence":0.67,"trust_breakdown":{"safety":10.1,"identity":10.8,"transparency":12.3,"maintenance":16.4,"adoption":10.2},"trust_v2_breakdown":{"mcp":0.0,"external_dependencies":-0.5,"tool_plugin_surface":-1.2,"package_provenance_drift":0.0},"pending_signals":false},{"name":"Chat Nio","repo":"coaidev/coai","display_repo":"","url":"https://github.com/coaidev/coai","rank":292,"previous_rank":292,"rank_delta":0,"stars":9229,"stars_fmt":"9.2k","forks":1213,"forks_fmt":"1.2k","last_push":"2026-03-12","days_ago":121,"weekly_commits":0,"commits_low_confidence":false,"score":46.4,"description":"🚀 Next Gen Multi-tenant AI One-Stop Solution. Builtin Admin & Billing System. Enterprise-Grade Unified LLM Gateway Suppo","language":"TypeScript","open_issues":26,"category":"LLM Gateways & Infra","category_rank":8,"npm_package":"","crate_package":"","pypi_package":"","weekly_downloads":null,"dl_source":"","hn_mentions_30d":null,"has_provenance":false,"npm_provenance":null,"pypi_provenance":null,"signed_commits_ratio":0.5,"scorecard_score":3.2,"scorecard_checks":{"Binary-Artifacts":10,"Branch-Protection":0,"CI-Tests":0,"CII-Best-Practices":0,"Code-Review":0,"Contributors":10,"Dangerous-Workflow":10,"Dependency-Update-Tool":0,"Fuzzing":0,"License":10,"Maintained":0,"Packaging":10,"Pinned-Dependencies":0,"SAST":0,"Security-Policy":0,"Signed-Releases":8,"Token-Permissions":0,"Vulnerabilities":0},"scorecard_scanned_at":"2026-07-10T18:32:44Z","slug":"chat-nio","source_note":"","public_actions":null,"mcp_server_support":{"status":"none","confidence":null,"evidence":[]},"external_service_dependencies":{"providers":["Anthropic","Azure OpenAI","Google Gemini","OpenAI","Redis"],"requires_api_keys":false,"confidence":"high","evidence":["README/docs mention OpenAI","README/docs mention Anthropic","README/docs mention Google Gemini","README/docs mention Azure OpenAI","README/docs mention Redis"]},"tool_plugin_surface":{"plugin_system":"marketplace","tool_tags":["code","database","search"],"confidence":"high","evidence":["README/docs mention a marketplace plugin/integration surface","README/docs mention search capabilities","README/docs mention database capabilities","README/docs mention code capabilities"]},"package_provenance_drift":{"status":"not_applicable","confidence":null,"summary":"No package source configured","evidence":[]},"evidence_grade":"D","coverage_grade":"C","signal_coverage":0.4,"signal_types":2,"listing_status":"listed","display_listing_status":"listed","display_status_label":"Listed","has_warning":false,"warning_reasons":[],"license_spdx":"Apache-2.0","license_type":"open","license_override":"","trust_score":38.0,"trust_score_v2":38.0,"rank_v2":292,"rank_v2_delta":-12,"trust_v2_adjustment":-3.9,"trust_confidence":1.0,"trust_breakdown":{"safety":6.5,"identity":10.8,"transparency":11.2,"maintenance":3.9,"adoption":9.5},"trust_v2_breakdown":{"mcp":0.0,"external_dependencies":-2.0,"tool_plugin_surface":-1.9,"package_provenance_drift":0.0},"pending_signals":false},{"name":"Antigravity CLI","repo":"google-antigravity/antigravity-cli","display_repo":"","url":"https://github.com/google-antigravity/antigravity-cli","rank":293,"previous_rank":293,"rank_delta":0,"stars":1555,"stars_fmt":"1.6k","forks":118,"forks_fmt":"118","last_push":"2026-07-10","days_ago":1,"weekly_commits":12,"commits_low_confidence":true,"score":67.7,"description":"Antigravity CLI brings the reasoning, execution, and orchestration capabilities of Antigravity agent harness directly in","language":"","open_issues":460,"category":"Coding Agents","category_rank":40,"npm_package":"","crate_package":"","pypi_package":"","weekly_downloads":null,"dl_source":"","hn_mentions_30d":null,"has_provenance":false,"npm_provenance":null,"pypi_provenance":null,"signed_commits_ratio":0.143,"scorecard_score":2.5,"scorecard_checks":{"Binary-Artifacts":10,"Branch-Protection":0,"CI-Tests":10,"CII-Best-Practices":0,"Code-Review":0,"Contributors":6,"Dangerous-Workflow":-1,"Dependency-Update-Tool":0,"Fuzzing":0,"License":0,"Maintained":0,"Packaging":-1,"Pinned-Dependencies":-1,"SAST":0,"Security-Policy":0,"Signed-Releases":0,"Token-Permissions":-1,"Vulnerabilities":10},"scorecard_scanned_at":"2026-07-10T16:12:18Z","slug":"antigravity-cli","source_note":"This GitHub repository is a public issue tracker for Antigravity, a closed-source product — it does not contain the product's source code. The OpenSSF Scorecard and license signals below describe that issue-tracker repo, not the shipped product.","public_actions":null,"mcp_server_support":{"status":"none","confidence":null,"evidence":[]},"external_service_dependencies":{"providers":[],"requires_api_keys":false,"confidence":null,"evidence":[]},"tool_plugin_surface":{"plugin_system":"declared","tool_tags":["shell"],"confidence":"high","evidence":["README/docs mention a declared plugin/integration surface","README/docs mention shell capabilities"]},"package_provenance_drift":{"status":"not_applicable","confidence":null,"summary":"No package source configured","evidence":[]},"evidence_grade":"D","coverage_grade":"C","signal_coverage":0.4,"signal_types":2,"listing_status":"listed","display_listing_status":"listed","display_status_label":"Listed","has_warning":false,"warning_reasons":[],"license_spdx":null,"license_type":"proprietary","license_override":"proprietary","trust_score":38.0,"trust_score_v2":38.0,"rank_v2":293,"rank_v2_delta":8,"trust_v2_adjustment":-0.6,"trust_confidence":1.0,"trust_breakdown":{"safety":3.8,"identity":10.8,"transparency":2.1,"maintenance":14.2,"adoption":7.7},"trust_v2_breakdown":{"mcp":0.0,"external_dependencies":-0.0,"tool_plugin_surface":-0.6,"package_provenance_drift":0.0},"pending_signals":false},{"name":"DeepResearchAgent","repo":"SkyworkAI/DeepResearchAgent","display_repo":"","url":"https://github.com/SkyworkAI/DeepResearchAgent","rank":294,"previous_rank":294,"rank_delta":0,"stars":3488,"stars_fmt":"3.5k","forks":453,"forks_fmt":"453","last_push":"2026-05-04","days_ago":68,"weekly_commits":0,"commits_low_confidence":false,"score":49.4,"description":"DeepResearchAgent is a hierarchical multi-agent system designed not only for deep research tasks but also for general-pu","language":"Python","open_issues":5,"category":"Multi-Agent Systems","category_rank":17,"npm_package":"","crate_package":"","pypi_package":"","weekly_downloads":null,"dl_source":"","hn_mentions_30d":null,"has_provenance":false,"npm_provenance":null,"pypi_provenance":null,"signed_commits_ratio":0.03,"scorecard_score":3.0,"scorecard_checks":{"Binary-Artifacts":9,"Branch-Protection":0,"CI-Tests":-1,"CII-Best-Practices":0,"Code-Review":0,"Contributors":0,"Dangerous-Workflow":10,"Dependency-Update-Tool":0,"Fuzzing":0,"License":10,"Maintained":0,"Packaging":-1,"Pinned-Dependencies":0,"SAST":0,"Security-Policy":0,"Signed-Releases":-1,"Token-Permissions":10,"Vulnerabilities":0},"scorecard_scanned_at":"2026-07-11T01:36:13Z","slug":"deepresearchagent","source_note":"","public_actions":null,"mcp_server_support":{"status":"none","confidence":null,"evidence":[]},"external_service_dependencies":{"providers":["Anthropic","Firecrawl","Google Gemini","OpenAI","Postgres"],"requires_api_keys":true,"confidence":"high","evidence":["Found OpenAI dependency 'openai' in requirements.txt","Found Anthropic dependency 'anthropic' in requirements.txt","Found Google Gemini dependency 'google-generativeai' in requirements.txt","Found Firecrawl dependency 'firecrawl' in requirements.txt","Found Postgres dependency 'pg' in src/tool/esg_tools/lightrag/api/requirements.txt"]},"tool_plugin_surface":{"plugin_system":"none","tool_tags":["code","database","filesystem"],"confidence":"high","evidence":["README/docs mention filesystem capabilities","Found database dependency 'pg' in src/tool/esg_tools/lightrag/api/requirements.txt","README/docs mention code capabilities"]},"package_provenance_drift":{"status":"not_applicable","confidence":null,"summary":"No package source configured","evidence":[]},"evidence_grade":"D","coverage_grade":"C","signal_coverage":0.4,"signal_types":2,"listing_status":"listed","display_listing_status":"listed","display_status_label":"Listed","has_warning":false,"warning_reasons":[],"license_spdx":"MIT","license_type":"open","license_override":"","trust_score":37.9,"trust_score_v2":37.9,"rank_v2":294,"rank_v2_delta":-13,"trust_v2_adjustment":-3.9,"trust_confidence":1.0,"trust_breakdown":{"safety":3.9,"identity":10.8,"transparency":11.1,"maintenance":7.5,"adoption":8.5},"trust_v2_breakdown":{"mcp":0.0,"external_dependencies":-3.0,"tool_plugin_surface":-0.9,"package_provenance_drift":0.0},"pending_signals":false},{"name":"Tongyi DeepResearch","repo":"Alibaba-NLP/DeepResearch","display_repo":"","url":"https://github.com/Alibaba-NLP/DeepResearch","rank":295,"previous_rank":295,"rank_delta":0,"stars":19639,"stars_fmt":"19.6k","forks":1503,"forks_fmt":"1.5k","last_push":"2026-02-27","days_ago":134,"weekly_commits":0,"commits_low_confidence":false,"score":47.1,"description":"Tongyi Deep Research, the Leading Open-source Deep Research Agent","language":"Python","open_issues":82,"category":"Research & Data","category_rank":17,"npm_package":"","crate_package":"","pypi_package":"","weekly_downloads":null,"dl_source":"","hn_mentions_30d":null,"has_provenance":false,"npm_provenance":null,"pypi_provenance":null,"signed_commits_ratio":0.59,"scorecard_score":1.5,"scorecard_checks":{"Binary-Artifacts":7,"Branch-Protection":0,"CI-Tests":0,"CII-Best-Practices":0,"Code-Review":0,"Contributors":10,"Dangerous-Workflow":-1,"Dependency-Update-Tool":0,"Fuzzing":0,"License":10,"Maintained":0,"Packaging":-1,"Pinned-Dependencies":2,"SAST":0,"Security-Policy":0,"Signed-Releases":-1,"Token-Permissions":-1,"Vulnerabilities":0},"scorecard_scanned_at":"2026-07-11T02:08:04Z","slug":"tongyi-deepresearch","source_note":"","public_actions":null,"mcp_server_support":{"status":"none","confidence":null,"evidence":[]},"external_service_dependencies":{"providers":["OpenAI"],"requires_api_keys":true,"confidence":"high","evidence":["Found OpenAI dependency 'openai' in requirements.txt","README/docs also mention OpenAI"]},"tool_plugin_surface":{"plugin_system":"extension-based","tool_tags":[],"confidence":"medium","evidence":["README/docs mention a extension-based plugin/integration surface"]},"package_provenance_drift":{"status":"not_applicable","confidence":null,"summary":"No package source configured","evidence":[]},"evidence_grade":"D","coverage_grade":"C","signal_coverage":0.4,"signal_types":2,"listing_status":"listed","display_listing_status":"listed","display_status_label":"Listed","has_warning":false,"warning_reasons":[],"license_spdx":"Apache-2.0","license_type":"open","license_override":"","trust_score":37.2,"trust_score_v2":37.2,"rank_v2":295,"rank_v2_delta":4,"trust_v2_adjustment":-1.6,"trust_confidence":1.0,"trust_breakdown":{"safety":4.8,"identity":10.8,"transparency":9.8,"maintenance":3.1,"adoption":10.3},"trust_v2_breakdown":{"mcp":0.0,"external_dependencies":-1.0,"tool_plugin_surface":-0.6,"package_provenance_drift":0.0},"pending_signals":false},{"name":"PearAI","repo":"trypear/pearai-master","display_repo":"","url":"https://github.com/trypear/pearai-master","rank":296,"previous_rank":296,"rank_delta":0,"stars":757,"stars_fmt":"757","forks":105,"forks_fmt":"105","last_push":"2026-06-19","days_ago":22,"weekly_commits":6,"commits_low_confidence":true,"score":59.1,"description":"Master Repo For PearAI","language":"Shell","open_issues":27,"category":"Coding Agents","category_rank":41,"npm_package":"","crate_package":"","pypi_package":"","weekly_downloads":null,"dl_source":"","hn_mentions_30d":1,"has_provenance":false,"npm_provenance":null,"pypi_provenance":null,"signed_commits_ratio":0.14,"scorecard_score":3.1,"scorecard_checks":{"Binary-Artifacts":10,"Branch-Protection":0,"CI-Tests":0,"CII-Best-Practices":0,"Code-Review":0,"Contributors":10,"Dangerous-Workflow":10,"Dependency-Update-Tool":0,"Fuzzing":0,"License":0,"Maintained":5,"Packaging":-1,"Pinned-Dependencies":0,"SAST":0,"Security-Policy":0,"Signed-Releases":0,"Token-Permissions":0,"Vulnerabilities":10},"scorecard_scanned_at":"2026-07-11T02:12:49Z","slug":"pearai","source_note":"","public_actions":null,"mcp_server_support":{"status":"none","confidence":null,"evidence":[]},"external_service_dependencies":{"providers":["Supabase"],"requires_api_keys":false,"confidence":"medium","evidence":["README/docs mention Supabase"]},"tool_plugin_surface":{"plugin_system":"none","tool_tags":["code"],"confidence":"medium","evidence":["README/docs mention code capabilities"]},"package_provenance_drift":{"status":"not_applicable","confidence":null,"summary":"No package source configured","evidence":[]},"evidence_grade":"D","coverage_grade":"B","signal_coverage":0.6,"signal_types":3,"listing_status":"warning","display_listing_status":"warning","display_status_label":"Needs review","has_warning":true,"warning_reasons":[{"repo":"trypear/pearai-master","criterion":"4.1.1","detail":"no declared license (GitHub license field is null)"}],"license_spdx":null,"license_type":"unlicensed","license_override":"","trust_score":36.8,"trust_score_v2":36.8,"rank_v2":296,"rank_v2_delta":10,"trust_v2_adjustment":-0.3,"trust_confidence":1.0,"trust_breakdown":{"safety":4.6,"identity":10.8,"transparency":2.6,"maintenance":12.2,"adoption":6.9},"trust_v2_breakdown":{"mcp":0.0,"external_dependencies":-0.0,"tool_plugin_surface":-0.3,"package_provenance_drift":0.0},"pending_signals":false},{"name":"LocalAI","repo":"mudler/LocalAI","display_repo":"","url":"https://github.com/mudler/LocalAI","rank":297,"previous_rank":297,"rank_delta":0,"stars":47472,"stars_fmt":"47.5k","forks":4221,"forks_fmt":"4.2k","last_push":"2026-07-11","days_ago":0,"weekly_commits":384,"commits_low_confidence":false,"score":95.0,"description":"LocalAI is the open-source AI engine. Run any model - LLMs, vision, voice, image, video - on any hardware. No GPU requir","language":"Go","open_issues":134,"category":"LLM Gateways & Infra","category_rank":9,"npm_package":"","crate_package":"","pypi_package":"","weekly_downloads":null,"dl_source":"","hn_mentions_30d":675,"has_provenance":false,"npm_provenance":null,"pypi_provenance":null,"signed_commits_ratio":0.99,"scorecard_score":null,"scorecard_checks":{},"scorecard_scanned_at":null,"slug":"localai","source_note":"","public_actions":null,"mcp_server_support":{"status":"implemented","confidence":"high","evidence":["README/docs mention MCP support","Found MCP-related server path: core/cli/mcp_server.go","Found MCP-related server path: pkg/mcp/localaitools/server.go","Found MCP-related server docs path: docs/static/images/diagrams/mcp-server-vs-client.html"]},"external_service_dependencies":{"providers":["Anthropic","OpenAI","Postgres"],"requires_api_keys":false,"confidence":"high","evidence":["README/docs mention OpenAI","README/docs mention Anthropic","README/docs mention Postgres"]},"tool_plugin_surface":{"plugin_system":"declared","tool_tags":["browser","code","shell"],"confidence":"high","evidence":["README/docs mention a declared plugin/integration surface","Found browser dependency 'playwright' in core/http/react-ui/package.json","README/docs mention shell capabilities","README/docs mention code capabilities"]},"package_provenance_drift":{"status":"not_applicable","confidence":null,"summary":"No package source configured","evidence":[]},"evidence_grade":"D","coverage_grade":"C","signal_coverage":0.4,"signal_types":2,"listing_status":"listed","display_listing_status":"listed","display_status_label":"Listed","has_warning":false,"warning_reasons":[],"license_spdx":"MIT","license_type":"open","license_override":"","trust_score":36.8,"trust_score_v2":36.8,"rank_v2":297,"rank_v2_delta":10,"trust_v2_adjustment":-0.2,"trust_confidence":0.67,"trust_breakdown":{"safety":5.0,"identity":10.8,"transparency":8.5,"maintenance":20.0,"adoption":11.2},"trust_v2_breakdown":{"mcp":2.0,"external_dependencies":-1.0,"tool_plugin_surface":-1.2,"package_provenance_drift":0.0},"pending_signals":false},{"name":"OpenBrowser","repo":"ntegrals/openbrowser","display_repo":"","url":"https://github.com/ntegrals/openbrowser","rank":298,"previous_rank":298,"rank_delta":0,"stars":9490,"stars_fmt":"9.5k","forks":865,"forks_fmt":"865","last_push":"2026-04-02","days_ago":100,"weekly_commits":0,"commits_low_confidence":false,"score":48.8,"description":"Let AI agents browse the web. An autonomous toolkit for browser-based AI agents.","language":"TypeScript","open_issues":0,"category":"Browser & Computer Use","category_rank":19,"npm_package":"","crate_package":"","pypi_package":"","weekly_downloads":null,"dl_source":"","hn_mentions_30d":null,"has_provenance":false,"npm_provenance":null,"pypi_provenance":null,"signed_commits_ratio":0.01,"scorecard_score":2.7,"scorecard_checks":{"Binary-Artifacts":10,"Branch-Protection":0,"CI-Tests":0,"CII-Best-Practices":0,"Code-Review":0,"Contributors":0,"Dangerous-Workflow":10,"Dependency-Update-Tool":0,"Fuzzing":0,"License":10,"Maintained":0,"Packaging":-1,"Pinned-Dependencies":0,"SAST":0,"Security-Policy":0,"Signed-Releases":-1,"Token-Permissions":0,"Vulnerabilities":7},"scorecard_scanned_at":"2026-07-11T01:37:20Z","slug":"openbrowser","source_note":"","public_actions":null,"mcp_server_support":{"status":"none","confidence":null,"evidence":[]},"external_service_dependencies":{"providers":["Anthropic","Google Gemini","OpenAI"],"requires_api_keys":true,"confidence":"high","evidence":["README/docs mention OpenAI","Found OpenAI dependency 'openai' in packages/core/package.json","Found OpenAI credential/config marker 'OPENAI_API_KEY'","README/docs mention Anthropic","Found Anthropic dependency 'anthropic' in packages/core/package.json","Found Anthropic credential/config marker 'ANTHROPIC_API_KEY'"]},"tool_plugin_surface":{"plugin_system":"declared","tool_tags":["browser","code","search"],"confidence":"high","evidence":["README/docs mention a declared plugin/integration surface","README/docs mention browser capabilities","README/docs mention search capabilities","README/docs mention code capabilities"]},"package_provenance_drift":{"status":"not_applicable","confidence":null,"summary":"No package source configured","evidence":[]},"evidence_grade":"D","coverage_grade":"C","signal_coverage":0.4,"signal_types":2,"listing_status":"listed","display_listing_status":"listed","display_status_label":"Listed","has_warning":false,"warning_reasons":[],"license_spdx":"MIT","license_type":"open","license_override":"","trust_score":36.6,"trust_score_v2":36.6,"rank_v2":298,"rank_v2_delta":-4,"trust_v2_adjustment":-3.2,"trust_confidence":1.0,"trust_breakdown":{"safety":3.4,"identity":10.8,"transparency":10.8,"maintenance":5.3,"adoption":9.5},"trust_v2_breakdown":{"mcp":0.0,"external_dependencies":-2.0,"tool_plugin_surface":-1.2,"package_provenance_drift":0.0},"pending_signals":false},{"name":"AgentBench","repo":"THUDM/AgentBench","display_repo":"","url":"https://github.com/THUDM/AgentBench","rank":299,"previous_rank":299,"rank_delta":0,"stars":3557,"stars_fmt":"3.6k","forks":270,"forks_fmt":"270","last_push":"2026-02-08","days_ago":153,"weekly_commits":0,"commits_low_confidence":false,"score":36.5,"description":"A Comprehensive Benchmark to Evaluate LLMs as Agents (ICLR'24)","language":"Python","open_issues":62,"category":"Observability & Evaluation","category_rank":19,"npm_package":"","crate_package":"","pypi_package":"","weekly_downloads":null,"dl_source":"","hn_mentions_30d":null,"has_provenance":false,"npm_provenance":null,"pypi_provenance":null,"signed_commits_ratio":0.507,"scorecard_score":3.4,"scorecard_checks":{"Binary-Artifacts":10,"Branch-Protection":6,"CI-Tests":0,"CII-Best-Practices":0,"Code-Review":6,"Contributors":10,"Dangerous-Workflow":10,"Dependency-Update-Tool":0,"Fuzzing":0,"License":10,"Maintained":0,"Packaging":-1,"Pinned-Dependencies":0,"SAST":0,"Security-Policy":0,"Signed-Releases":-1,"Token-Permissions":0,"Vulnerabilities":0},"scorecard_scanned_at":"2026-07-10T10:26:00Z","slug":"agentbench","source_note":"","public_actions":null,"mcp_server_support":{"status":"none","confidence":null,"evidence":[]},"external_service_dependencies":{"providers":["Anthropic","OpenAI","Redis"],"requires_api_keys":false,"confidence":"high","evidence":["README/docs mention OpenAI","Found Anthropic dependency 'anthropic' in requirements.txt","README/docs mention Redis"]},"tool_plugin_surface":{"plugin_system":"extension-based","tool_tags":["browser","code","database","shell"],"confidence":"high","evidence":["README/docs mention a extension-based plugin/integration surface","Found browser dependency 'selenium' in src/server/tasks/webshop/requirements.txt","README/docs mention shell capabilities","README/docs mention database capabilities","README/docs mention code capabilities"]},"package_provenance_drift":{"status":"not_applicable","confidence":null,"summary":"No package source configured","evidence":[]},"evidence_grade":"D","coverage_grade":"C","signal_coverage":0.4,"signal_types":2,"listing_status":"listed","display_listing_status":"listed","display_status_label":"Listed","has_warning":false,"warning_reasons":[],"license_spdx":"Apache-2.0","license_type":"open","license_override":"","trust_score":36.5,"trust_score_v2":36.5,"rank_v2":299,"rank_v2_delta":-4,"trust_v2_adjustment":-2.8,"trust_confidence":1.0,"trust_breakdown":{"safety":6.8,"identity":10.8,"transparency":11.4,"maintenance":1.8,"adoption":8.5},"trust_v2_breakdown":{"mcp":0.0,"external_dependencies":-1.0,"tool_plugin_surface":-1.8,"package_provenance_drift":0.0},"pending_signals":false},{"name":"Devika","repo":"stitionai/devika","display_repo":"","url":"https://github.com/stitionai/devika","rank":300,"previous_rank":300,"rank_delta":0,"stars":19539,"stars_fmt":"19.5k","forks":2581,"forks_fmt":"2.6k","last_push":"2025-09-25","days_ago":289,"weekly_commits":0,"commits_low_confidence":false,"score":41.6,"description":"Devika is the first open-source implementation of an Agentic Software Engineer. Initially started as an open-source alte","language":"Python","open_issues":147,"category":"Coding Agents","category_rank":42,"npm_package":"","crate_package":"","pypi_package":"","weekly_downloads":null,"dl_source":"","hn_mentions_30d":5,"has_provenance":false,"npm_provenance":null,"pypi_provenance":null,"signed_commits_ratio":0.56,"scorecard_score":3.0,"scorecard_checks":{"Binary-Artifacts":10,"Branch-Protection":0,"CI-Tests":0,"CII-Best-Practices":0,"Code-Review":3,"Contributors":10,"Dangerous-Workflow":-1,"Dependency-Update-Tool":0,"Fuzzing":0,"License":10,"Maintained":0,"Packaging":-1,"Pinned-Dependencies":0,"SAST":0,"Security-Policy":0,"Signed-Releases":-1,"Token-Permissions":-1,"Vulnerabilities":10},"scorecard_scanned_at":"2026-07-10T08:49:45Z","slug":"devika","source_note":"","public_actions":null,"mcp_server_support":{"status":"none","confidence":null,"evidence":[]},"external_service_dependencies":{"providers":["Anthropic","Google Gemini","OpenAI"],"requires_api_keys":false,"confidence":"high","evidence":["README/docs mention OpenAI","Found OpenAI dependency 'openai' in requirements.txt","README/docs mention Anthropic","Found Anthropic dependency 'anthropic' in requirements.txt","README/docs mention Google Gemini","Found Google Gemini dependency 'google-generativeai' in requirements.txt"]},"tool_plugin_surface":{"plugin_system":"declared","tool_tags":["browser","code","search","shell"],"confidence":"high","evidence":["README/docs mention a declared plugin/integration surface","README/docs mention browser capabilities","README/docs mention shell capabilities","README/docs mention search capabilities","README/docs mention code capabilities"]},"package_provenance_drift":{"status":"not_applicable","confidence":null,"summary":"No package source configured","evidence":[]},"evidence_grade":"D","coverage_grade":"B","signal_coverage":0.6,"signal_types":3,"listing_status":"listed","display_listing_status":"listed","display_status_label":"Listed","has_warning":false,"warning_reasons":[],"license_spdx":"MIT","license_type":"open","license_override":"","trust_score":36.3,"trust_score_v2":36.3,"rank_v2":300,"rank_v2_delta":0,"trust_v2_adjustment":-2.5,"trust_confidence":1.0,"trust_breakdown":{"safety":6.6,"identity":10.8,"transparency":11.1,"maintenance":0.0,"adoption":10.3},"trust_v2_breakdown":{"mcp":0.0,"external_dependencies":-1.0,"tool_plugin_surface":-1.5,"package_provenance_drift":0.0},"pending_signals":false},{"name":"MCP Playwright","repo":"executeautomation/mcp-playwright","display_repo":"","url":"https://github.com/executeautomation/mcp-playwright","rank":301,"previous_rank":301,"rank_delta":0,"stars":5573,"stars_fmt":"5.6k","forks":524,"forks_fmt":"524","last_push":"2025-12-13","days_ago":210,"weekly_commits":0,"commits_low_confidence":false,"score":35.1,"description":"Playwright Model Context Protocol Server - Tool to automate Browsers and APIs in Claude Desktop, Cline, Cursor IDE and M","language":"TypeScript","open_issues":24,"category":"Protocols & Tool Integration","category_rank":20,"npm_package":"","crate_package":"","pypi_package":"","weekly_downloads":null,"dl_source":"","hn_mentions_30d":null,"has_provenance":false,"npm_provenance":null,"pypi_provenance":null,"signed_commits_ratio":0.36,"scorecard_score":2.9,"scorecard_checks":{"Binary-Artifacts":10,"Branch-Protection":5,"CI-Tests":10,"CII-Best-Practices":0,"Code-Review":0,"Contributors":3,"Dangerous-Workflow":10,"Dependency-Update-Tool":0,"Fuzzing":0,"License":10,"Maintained":0,"Packaging":-1,"Pinned-Dependencies":0,"SAST":0,"Security-Policy":0,"Signed-Releases":-1,"Token-Permissions":0,"Vulnerabilities":0},"scorecard_scanned_at":"2026-07-10T16:19:55Z","slug":"mcp-playwright","source_note":"","public_actions":null,"mcp_server_support":{"status":"implemented","confidence":"high","evidence":["README/docs explicitly mention an MCP server","Found MCP-related server docs path: docs/docs/img/mcp-server.png","Found MCP-related server docs path: docs/docs/local-setup/img/mcp-server-running.png","Found MCP dependency '@modelcontextprotocol/sdk' in package.json"]},"external_service_dependencies":{"providers":["OpenAI"],"requires_api_keys":true,"confidence":"high","evidence":["README/docs mention OpenAI","Found OpenAI credential/config marker 'OPENAI_API_KEY'"]},"tool_plugin_surface":{"plugin_system":"declared","tool_tags":["browser","code"],"confidence":"high","evidence":["README/docs mention a declared plugin/integration surface","README/docs mention browser capabilities","README/docs mention code capabilities"]},"package_provenance_drift":{"status":"not_applicable","confidence":null,"summary":"No package source configured","evidence":[]},"evidence_grade":"D","coverage_grade":"C","signal_coverage":0.4,"signal_types":2,"listing_status":"listed","display_listing_status":"listed","display_status_label":"Listed","has_warning":false,"warning_reasons":[],"license_spdx":"MIT","license_type":"open","license_override":"","trust_score":36.3,"trust_score_v2":36.3,"rank_v2":301,"rank_v2_delta":9,"trust_v2_adjustment":0.1,"trust_confidence":1.0,"trust_breakdown":{"safety":5.4,"identity":10.8,"transparency":11.0,"maintenance":0.0,"adoption":9.0},"trust_v2_breakdown":{"mcp":2.0,"external_dependencies":-1.0,"tool_plugin_surface":-0.9,"package_provenance_drift":0.0},"pending_signals":false},{"name":"JARVIS / HuggingGPT","repo":"microsoft/JARVIS","display_repo":"","url":"https://github.com/microsoft/JARVIS","rank":302,"previous_rank":302,"rank_delta":0,"stars":25034,"stars_fmt":"25.0k","forks":2180,"forks_fmt":"2.2k","last_push":"2025-07-29","days_ago":347,"weekly_commits":0,"commits_low_confidence":false,"score":41.9,"description":"JARVIS, a system to connect LLMs with ML community. Paper: https://arxiv.org/pdf/2303.17580.pdf","language":"Python","open_issues":3506,"category":"Agent Frameworks","category_rank":70,"npm_package":"","crate_package":"","pypi_package":"","weekly_downloads":null,"dl_source":"","hn_mentions_30d":0,"has_provenance":false,"npm_provenance":null,"pypi_provenance":null,"signed_commits_ratio":0.55,"scorecard_score":2.3,"scorecard_checks":{"Binary-Artifacts":10,"Branch-Protection":0,"CI-Tests":0,"CII-Best-Practices":0,"Code-Review":0,"Contributors":10,"Dangerous-Workflow":-1,"Dependency-Update-Tool":0,"Fuzzing":0,"License":10,"Maintained":0,"Packaging":-1,"Pinned-Dependencies":0,"SAST":0,"Security-Policy":10,"Signed-Releases":-1,"Token-Permissions":-1,"Vulnerabilities":0},"scorecard_scanned_at":"2026-07-10T17:20:06Z","slug":"jarvis-hugginggpt","source_note":"","public_actions":null,"mcp_server_support":{"status":"none","confidence":null,"evidence":[]},"external_service_dependencies":{"providers":["OpenAI"],"requires_api_keys":true,"confidence":"high","evidence":["README/docs mention OpenAI","Found OpenAI dependency 'openai' in easytool/requirements.txt","Found OpenAI credential/config marker 'OPENAI_API_KEY'"]},"tool_plugin_surface":{"plugin_system":"none","tool_tags":["code"],"confidence":"medium","evidence":["README/docs mention code capabilities"]},"package_provenance_drift":{"status":"not_applicable","confidence":null,"summary":"No package source configured","evidence":[]},"evidence_grade":"D","coverage_grade":"B","signal_coverage":0.6,"signal_types":3,"listing_status":"listed","display_listing_status":"listed","display_status_label":"Listed","has_warning":false,"warning_reasons":[],"license_spdx":"MIT","license_type":"open","license_override":"","trust_score":36.2,"trust_score_v2":36.2,"rank_v2":302,"rank_v2_delta":2,"trust_v2_adjustment":-1.3,"trust_confidence":1.0,"trust_breakdown":{"safety":5.6,"identity":10.8,"transparency":10.5,"maintenance":0.0,"adoption":10.6},"trust_v2_breakdown":{"mcp":0.0,"external_dependencies":-1.0,"tool_plugin_surface":-0.3,"package_provenance_drift":0.0},"pending_signals":false},{"name":"ClawWork","repo":"HKUDS/ClawWork","display_repo":"","url":"https://github.com/HKUDS/ClawWork","rank":303,"previous_rank":303,"rank_delta":0,"stars":8228,"stars_fmt":"8.2k","forks":1056,"forks_fmt":"1.1k","last_push":"2026-03-03","days_ago":130,"weekly_commits":0,"commits_low_confidence":false,"score":44.7,"description":"\"ClawWork: OpenClaw as Your AI Coworker - 💰 $15K earned in 11 Hours\"","language":"Python","open_issues":15,"category":"Needs review","category_rank":10,"npm_package":"","crate_package":"","pypi_package":"","weekly_downloads":null,"dl_source":"","hn_mentions_30d":null,"has_provenance":false,"npm_provenance":null,"pypi_provenance":null,"signed_commits_ratio":0.297,"scorecard_score":3.3,"scorecard_checks":{"Binary-Artifacts":10,"Branch-Protection":0,"CI-Tests":0,"CII-Best-Practices":0,"Code-Review":1,"Contributors":6,"Dangerous-Workflow":10,"Dependency-Update-Tool":0,"Fuzzing":0,"License":10,"Maintained":0,"Packaging":-1,"Pinned-Dependencies":1,"SAST":0,"Security-Policy":0,"Signed-Releases":-1,"Token-Permissions":10,"Vulnerabilities":0},"scorecard_scanned_at":"2026-07-10T16:13:47Z","slug":"clawwork","source_note":"","public_actions":null,"mcp_server_support":{"status":"declared","confidence":"medium","evidence":["Found MCP dependency 'fastmcp' in requirements.txt","Found MCP dependency 'fastmcp' in livebench/requirements.txt"]},"external_service_dependencies":{"providers":["E2B","Google Gemini","OpenAI","Tavily"],"requires_api_keys":true,"confidence":"high","evidence":["README/docs mention OpenAI","Found OpenAI dependency 'openai' in requirements.txt","Found OpenAI credential/config marker 'OPENAI_API_KEY'","README/docs mention Google Gemini","README/docs mention Tavily","Found Tavily dependency 'tavily' in requirements.txt"]},"tool_plugin_surface":{"plugin_system":"marketplace","tool_tags":["code","search","shell"],"confidence":"high","evidence":["README/docs mention a marketplace plugin/integration surface","README/docs mention shell capabilities","README/docs mention search capabilities","README/docs mention code capabilities"]},"package_provenance_drift":{"status":"not_applicable","confidence":null,"summary":"No package source configured","evidence":[]},"evidence_grade":"D","coverage_grade":"C","signal_coverage":0.4,"signal_types":2,"listing_status":"listed","display_listing_status":"listed","display_status_label":"Listed","has_warning":false,"warning_reasons":[],"license_spdx":"MIT","license_type":"open","license_override":"","trust_score":36.0,"trust_score_v2":36.0,"rank_v2":303,"rank_v2_delta":-16,"trust_v2_adjustment":-4.4,"trust_confidence":1.0,"trust_breakdown":{"safety":5.6,"identity":10.8,"transparency":11.3,"maintenance":3.3,"adoption":9.4},"trust_v2_breakdown":{"mcp":0.0,"external_dependencies":-2.5,"tool_plugin_surface":-1.9,"package_provenance_drift":0.0},"pending_signals":false},{"name":"Youtu-Agent","repo":"TencentCloudADP/youtu-agent","display_repo":"","url":"https://github.com/TencentCloudADP/youtu-agent","rank":304,"previous_rank":304,"rank_delta":0,"stars":4580,"stars_fmt":"4.6k","forks":469,"forks_fmt":"469","last_push":"2026-03-21","days_ago":112,"weekly_commits":0,"commits_low_confidence":false,"score":44.0,"description":"A simple yet powerful agent framework that delivers with open-source models","language":"Python","open_issues":50,"category":"Agent Frameworks","category_rank":71,"npm_package":"","crate_package":"","pypi_package":"","weekly_downloads":null,"dl_source":"","hn_mentions_30d":null,"has_provenance":false,"npm_provenance":null,"pypi_provenance":null,"signed_commits_ratio":0.23,"scorecard_score":2.9,"scorecard_checks":{"Binary-Artifacts":10,"Branch-Protection":3,"CI-Tests":3,"CII-Best-Practices":0,"Code-Review":0,"Contributors":10,"Dangerous-Workflow":10,"Dependency-Update-Tool":0,"Fuzzing":0,"License":9,"Maintained":0,"Packaging":10,"Pinned-Dependencies":0,"SAST":0,"Security-Policy":0,"Signed-Releases":0,"Token-Permissions":0,"Vulnerabilities":0},"scorecard_scanned_at":"2026-07-11T03:38:39Z","slug":"youtu-agent","source_note":"","public_actions":null,"mcp_server_support":{"status":"declared","confidence":"medium","evidence":["Found MCP-related server path: examples/mcp/sse_example/server.py","Found MCP-related server path: examples/mcp/streamablehttp_example/server.py"]},"external_service_dependencies":{"providers":["Anthropic","E2B","OpenAI","Postgres"],"requires_api_keys":true,"confidence":"high","evidence":["README/docs mention OpenAI","Found OpenAI dependency 'openai' in pyproject.toml","README/docs mention Anthropic","Found E2B dependency 'e2b' in pyproject.toml","Found Postgres dependency 'psycopg' in pyproject.toml"]},"tool_plugin_surface":{"plugin_system":"extension-based","tool_tags":["code","database","search","shell"],"confidence":"high","evidence":["README/docs mention a extension-based plugin/integration surface","README/docs mention shell capabilities","README/docs mention search capabilities","Found database dependency 'pg' in pyproject.toml","README/docs mention code capabilities"]},"package_provenance_drift":{"status":"not_applicable","confidence":null,"summary":"No package source configured","evidence":[]},"evidence_grade":"D","coverage_grade":"C","signal_coverage":0.4,"signal_types":2,"listing_status":"listed","display_listing_status":"listed","display_status_label":"Listed","has_warning":false,"warning_reasons":[],"license_spdx":"NOASSERTION","license_type":"open","license_override":"","trust_score":35.6,"trust_score_v2":35.6,"rank_v2":304,"rank_v2_delta":-11,"trust_v2_adjustment":-4.3,"trust_confidence":1.0,"trust_breakdown":{"safety":4.8,"identity":10.8,"transparency":11.0,"maintenance":4.5,"adoption":8.8},"trust_v2_breakdown":{"mcp":0.0,"external_dependencies":-2.5,"tool_plugin_surface":-1.8,"package_provenance_drift":0.0},"pending_signals":false},{"name":"Webarena","repo":"web-arena-x/webarena","display_repo":"","url":"https://github.com/web-arena-x/webarena","rank":305,"previous_rank":305,"rank_delta":0,"stars":1539,"stars_fmt":"1.5k","forks":241,"forks_fmt":"241","last_push":"2025-11-26","days_ago":227,"weekly_commits":0,"commits_low_confidence":false,"score":30.2,"description":"Code repo for \"WebArena: A Realistic Web Environment for Building Autonomous Agents\"","language":"Python","open_issues":81,"category":"Observability & Evaluation","category_rank":20,"npm_package":"","crate_package":"","pypi_package":"","weekly_downloads":null,"dl_source":"","hn_mentions_30d":null,"has_provenance":false,"npm_provenance":null,"pypi_provenance":null,"signed_commits_ratio":0.49,"scorecard_score":3.9,"scorecard_checks":{"Binary-Artifacts":10,"Branch-Protection":6,"CI-Tests":6,"CII-Best-Practices":0,"Code-Review":10,"Contributors":10,"Dangerous-Workflow":10,"Dependency-Update-Tool":0,"Fuzzing":0,"License":10,"Maintained":0,"Packaging":-1,"Pinned-Dependencies":0,"SAST":0,"Security-Policy":0,"Signed-Releases":-1,"Token-Permissions":0,"Vulnerabilities":0},"scorecard_scanned_at":"2026-07-10T17:21:35Z","slug":"webarena","source_note":"","public_actions":null,"mcp_server_support":{"status":"none","confidence":null,"evidence":[]},"external_service_dependencies":{"providers":["OpenAI"],"requires_api_keys":true,"confidence":"high","evidence":["README/docs mention OpenAI","Found OpenAI dependency 'openai' in requirements.txt","Found OpenAI credential/config marker 'OPENAI_API_KEY'"]},"tool_plugin_surface":{"plugin_system":"declared","tool_tags":["browser","code","shell"],"confidence":"high","evidence":["README/docs mention a declared plugin/integration surface","README/docs mention browser capabilities","README/docs mention shell capabilities","README/docs mention code capabilities"]},"package_provenance_drift":{"status":"not_applicable","confidence":null,"summary":"No package source configured","evidence":[]},"evidence_grade":"D","coverage_grade":"C","signal_coverage":0.4,"signal_types":2,"listing_status":"listed","display_listing_status":"listed","display_status_label":"Listed","has_warning":false,"warning_reasons":[],"license_spdx":"Apache-2.0","license_type":"open","license_override":"","trust_score":35.4,"trust_score_v2":35.4,"rank_v2":305,"rank_v2_delta":-2,"trust_v2_adjustment":-2.2,"trust_confidence":1.0,"trust_breakdown":{"safety":7.3,"identity":10.8,"transparency":11.8,"maintenance":0.0,"adoption":7.7},"trust_v2_breakdown":{"mcp":0.0,"external_dependencies":-1.0,"tool_plugin_surface":-1.2,"package_provenance_drift":0.0},"pending_signals":false},{"name":"Lingxi","repo":"lingxi-agent/Lingxi","display_repo":"","url":"https://github.com/lingxi-agent/Lingxi","rank":306,"previous_rank":306,"rank_delta":0,"stars":254,"stars_fmt":"254","forks":35,"forks_fmt":"35","last_push":"2026-04-07","days_ago":95,"weekly_commits":0,"commits_low_confidence":false,"score":33.5,"description":"","language":"Python","open_issues":5,"category":"Agent Frameworks","category_rank":72,"npm_package":"","crate_package":"","pypi_package":"","weekly_downloads":null,"dl_source":"","hn_mentions_30d":null,"has_provenance":false,"npm_provenance":null,"pypi_provenance":null,"signed_commits_ratio":0.316,"scorecard_score":2.6,"scorecard_checks":{"Binary-Artifacts":10,"Branch-Protection":0,"CI-Tests":0,"CII-Best-Practices":0,"Code-Review":1,"Contributors":0,"Dangerous-Workflow":-1,"Dependency-Update-Tool":0,"Fuzzing":0,"License":10,"Maintained":0,"Packaging":-1,"Pinned-Dependencies":-1,"SAST":0,"Security-Policy":0,"Signed-Releases":-1,"Token-Permissions":-1,"Vulnerabilities":10},"scorecard_scanned_at":"2026-07-10T16:11:46Z","slug":"lingxi","source_note":"","public_actions":null,"mcp_server_support":{"status":"none","confidence":null,"evidence":[]},"external_service_dependencies":{"providers":["Anthropic","OpenAI"],"requires_api_keys":true,"confidence":"high","evidence":["README/docs mention OpenAI","Found OpenAI dependency 'openai' in pyproject.toml","Found OpenAI credential/config marker 'OPENAI_API_KEY'","README/docs mention Anthropic","Found Anthropic dependency 'anthropic' in pyproject.toml","Found Anthropic credential/config marker 'ANTHROPIC_API_KEY'"]},"tool_plugin_surface":{"plugin_system":"declared","tool_tags":["code","search"],"confidence":"high","evidence":["README/docs mention a declared plugin/integration surface","README/docs mention search capabilities","README/docs mention code capabilities"]},"package_provenance_drift":{"status":"not_applicable","confidence":null,"summary":"No package source configured","evidence":[]},"evidence_grade":"D","coverage_grade":"C","signal_coverage":0.4,"signal_types":2,"listing_status":"listed","display_listing_status":"listed","display_status_label":"Listed","has_warning":false,"warning_reasons":[],"license_spdx":"MIT","license_type":"open","license_override":"","trust_score":35.4,"trust_score_v2":35.4,"rank_v2":306,"rank_v2_delta":-4,"trust_v2_adjustment":-2.4,"trust_confidence":1.0,"trust_breakdown":{"safety":4.8,"identity":10.8,"transparency":10.7,"maintenance":5.7,"adoption":5.8},"trust_v2_breakdown":{"mcp":0.0,"external_dependencies":-1.5,"tool_plugin_surface":-0.9,"package_provenance_drift":0.0},"pending_signals":false},{"name":"II-Agent","repo":"Intelligent-Internet/ii-agent","display_repo":"","url":"https://github.com/Intelligent-Internet/ii-agent","rank":307,"previous_rank":307,"rank_delta":0,"stars":3367,"stars_fmt":"3.4k","forks":518,"forks_fmt":"518","last_push":"2026-04-13","days_ago":89,"weekly_commits":0,"commits_low_confidence":false,"score":46.4,"description":"II-Agent: a new open-source framework to build and deploy intelligent agents","language":"Python","open_issues":2,"category":"Agent Frameworks","category_rank":73,"npm_package":"","crate_package":"","pypi_package":"","weekly_downloads":null,"dl_source":"","hn_mentions_30d":null,"has_provenance":false,"npm_provenance":null,"pypi_provenance":null,"signed_commits_ratio":0.02,"scorecard_score":1.4,"scorecard_checks":{"Binary-Artifacts":10,"Branch-Protection":0,"CI-Tests":0,"CII-Best-Practices":0,"Code-Review":0,"Contributors":0,"Dangerous-Workflow":-1,"Dependency-Update-Tool":0,"Fuzzing":0,"License":10,"Maintained":1,"Packaging":-1,"Pinned-Dependencies":0,"SAST":0,"Security-Policy":0,"Signed-Releases":-1,"Token-Permissions":-1,"Vulnerabilities":0},"scorecard_scanned_at":"2026-07-10T16:22:00Z","slug":"ii-agent","source_note":"","public_actions":null,"mcp_server_support":{"status":"implemented","confidence":"high","evidence":["Found MCP-related server path: src/ii_agent/integrations/connectors/composio/mcp_server_service.py","Found MCP-related server path: src/ii_server/mcp/server.py","Found MCP dependency 'fastmcp' in pyproject.toml","Found MCP dependency 'fastmcp' in docker/sandbox/pyproject.toml"]},"external_service_dependencies":{"providers":["Anthropic","E2B","OpenAI","Postgres","Redis","Tavily"],"requires_api_keys":false,"confidence":"high","evidence":["Found OpenAI dependency 'openai' in pyproject.toml","README/docs also mention OpenAI","Found Anthropic dependency 'anthropic' in pyproject.toml","README/docs also mention Anthropic","Found Tavily dependency 'tavily' in pyproject.toml","Found E2B dependency 'e2b' in pyproject.toml"]},"tool_plugin_surface":{"plugin_system":"declared","tool_tags":["browser","database","search"],"confidence":"high","evidence":["README/docs mention a declared plugin/integration surface","Found browser dependency 'playwright' in pyproject.toml","Found search dependency 'tavily' in pyproject.toml","README/docs also mention search capabilities","Found database dependency 'redis' in pyproject.toml","README/docs also mention database capabilities"]},"package_provenance_drift":{"status":"not_applicable","confidence":null,"summary":"No package source configured","evidence":[]},"evidence_grade":"D","coverage_grade":"C","signal_coverage":0.4,"signal_types":2,"listing_status":"listed","display_listing_status":"listed","display_status_label":"Listed","has_warning":false,"warning_reasons":[],"license_spdx":"Apache-2.0","license_type":"open","license_override":"","trust_score":35.2,"trust_score_v2":35.2,"rank_v2":307,"rank_v2_delta":1,"trust_v2_adjustment":-1.7,"trust_confidence":1.0,"trust_breakdown":{"safety":1.8,"identity":10.8,"transparency":9.7,"maintenance":6.1,"adoption":8.5},"trust_v2_breakdown":{"mcp":2.0,"external_dependencies":-2.5,"tool_plugin_surface":-1.2,"package_provenance_drift":0.0},"pending_signals":false},{"name":"SwarmZero","repo":"swarmzero/swarmzero","display_repo":"","url":"https://github.com/swarmzero/swarmzero","rank":308,"previous_rank":308,"rank_delta":0,"stars":273,"stars_fmt":"273","forks":50,"forks_fmt":"50","last_push":"2025-08-06","days_ago":339,"weekly_commits":0,"commits_low_confidence":false,"score":22.5,"description":"SwarmZero's SDK for building AI agents, swarms of agents and much more.","language":"Python","open_issues":0,"category":"Multi-Agent Systems","category_rank":18,"npm_package":"","crate_package":"","pypi_package":"swarmzero","weekly_downloads":5,"dl_source":"pypi","hn_mentions_30d":0,"has_provenance":false,"npm_provenance":null,"pypi_provenance":false,"signed_commits_ratio":0.627,"scorecard_score":2.8,"scorecard_checks":{"Binary-Artifacts":10,"Branch-Protection":3,"CI-Tests":7,"CII-Best-Practices":0,"Code-Review":3,"Contributors":0,"Dangerous-Workflow":10,"Dependency-Update-Tool":0,"Fuzzing":0,"License":10,"Maintained":0,"Packaging":-1,"Pinned-Dependencies":0,"SAST":0,"Security-Policy":0,"Signed-Releases":-1,"Token-Permissions":0,"Vulnerabilities":0},"scorecard_scanned_at":"2026-07-10T07:48:17Z","slug":"swarmzero","source_note":"","public_actions":null,"mcp_server_support":{"status":"none","confidence":null,"evidence":[]},"external_service_dependencies":{"providers":["Amazon Bedrock","Anthropic","Azure OpenAI","Google Gemini","OpenAI","Pinecone","Postgres","Redis"],"requires_api_keys":true,"confidence":"high","evidence":["README/docs mention OpenAI","Found OpenAI dependency 'openai' in pyproject.toml","Found OpenAI credential/config marker 'OPENAI_API_KEY'","README/docs mention Anthropic","Found Anthropic dependency 'anthropic' in pyproject.toml","README/docs mention Google Gemini"]},"tool_plugin_surface":{"plugin_system":"none","tool_tags":["code","database"],"confidence":"high","evidence":["Found database dependency 'pg' in pyproject.toml","README/docs mention code capabilities"]},"package_provenance_drift":{"status":"match","confidence":"high","summary":"Published package metadata matches the tracked repo","evidence":["pypi package 'swarmzero' points to the tracked repo"]},"evidence_grade":"D","coverage_grade":"A","signal_coverage":0.8,"signal_types":4,"listing_status":"listed","display_listing_status":"listed","display_status_label":"Listed","has_warning":false,"warning_reasons":[],"license_spdx":"Apache-2.0","license_type":"open","license_override":"","trust_score":34.6,"trust_score_v2":34.6,"rank_v2":308,"rank_v2_delta":3,"trust_v2_adjustment":-0.6,"trust_confidence":1.0,"trust_breakdown":{"safety":6.6,"identity":10.8,"transparency":10.9,"maintenance":0.0,"adoption":6.9},"trust_v2_breakdown":{"mcp":0.0,"external_dependencies":-4.0,"tool_plugin_surface":-0.6,"package_provenance_drift":4.0},"pending_signals":false},{"name":"Nanobrowser","repo":"nanobrowser/nanobrowser","display_repo":"","url":"https://github.com/nanobrowser/nanobrowser","rank":309,"previous_rank":309,"rank_delta":0,"stars":13448,"stars_fmt":"13.4k","forks":1411,"forks_fmt":"1.4k","last_push":"2025-11-24","days_ago":229,"weekly_commits":0,"commits_low_confidence":false,"score":39.4,"description":"Open-Source Chrome extension for AI-powered web automation. Run multi-agent workflows using your own LLM API key. Altern","language":"TypeScript","open_issues":47,"category":"Browser & Computer Use","category_rank":20,"npm_package":"","crate_package":"","pypi_package":"","weekly_downloads":null,"dl_source":"","hn_mentions_30d":null,"has_provenance":false,"npm_provenance":null,"pypi_provenance":null,"signed_commits_ratio":0.27,"scorecard_score":2.8,"scorecard_checks":{"Binary-Artifacts":10,"Branch-Protection":6,"CI-Tests":0,"CII-Best-Practices":0,"Code-Review":2,"Contributors":6,"Dangerous-Workflow":-1,"Dependency-Update-Tool":0,"Fuzzing":0,"License":10,"Maintained":0,"Packaging":-1,"Pinned-Dependencies":-1,"SAST":0,"Security-Policy":9,"Signed-Releases":0,"Token-Permissions":-1,"Vulnerabilities":0},"scorecard_scanned_at":"2026-07-10T16:22:21Z","slug":"nanobrowser","source_note":"","public_actions":null,"mcp_server_support":{"status":"none","confidence":null,"evidence":[]},"external_service_dependencies":{"providers":["Anthropic","Google Gemini","OpenAI"],"requires_api_keys":false,"confidence":"high","evidence":["README/docs mention OpenAI","Found OpenAI dependency 'openai' in chrome-extension/package.json","README/docs mention Anthropic","Found Anthropic dependency 'anthropic' in chrome-extension/package.json","README/docs mention Google Gemini"]},"tool_plugin_surface":{"plugin_system":"extension-based","tool_tags":["browser","code"],"confidence":"high","evidence":["README/docs mention a extension-based plugin/integration surface","README/docs mention browser capabilities","README/docs mention code capabilities"]},"package_provenance_drift":{"status":"not_applicable","confidence":null,"summary":"No package source configured","evidence":[]},"evidence_grade":"D","coverage_grade":"C","signal_coverage":0.4,"signal_types":2,"listing_status":"listed","display_listing_status":"listed","display_status_label":"Listed","has_warning":false,"warning_reasons":[],"license_spdx":"Apache-2.0","license_type":"open","license_override":"","trust_score":34.3,"trust_score_v2":34.3,"rank_v2":309,"rank_v2_delta":0,"trust_v2_adjustment":-2.2,"trust_confidence":1.0,"trust_breakdown":{"safety":4.9,"identity":10.8,"transparency":10.9,"maintenance":0.0,"adoption":9.9},"trust_v2_breakdown":{"mcp":0.0,"external_dependencies":-1.0,"tool_plugin_surface":-1.2,"package_provenance_drift":0.0},"pending_signals":false},{"name":"MetaGPT","repo":"FoundationAgents/MetaGPT","display_repo":"","url":"https://github.com/FoundationAgents/MetaGPT","rank":310,"previous_rank":310,"rank_delta":0,"stars":69299,"stars_fmt":"69.3k","forks":8837,"forks_fmt":"8.8k","last_push":"2026-01-21","days_ago":171,"weekly_commits":0,"commits_low_confidence":false,"score":48.8,"description":"🌟 The Multi-Agent Framework: First AI Software Company, Towards Natural Language Programming","language":"Python","open_issues":25,"category":"Multi-Agent Systems","category_rank":19,"npm_package":"","crate_package":"","pypi_package":"metagpt","weekly_downloads":6735,"dl_source":"pypi","hn_mentions_30d":73,"has_provenance":false,"npm_provenance":null,"pypi_provenance":false,"signed_commits_ratio":0.33,"scorecard_score":2.4,"scorecard_checks":{"Binary-Artifacts":10,"Branch-Protection":0,"CI-Tests":3,"CII-Best-Practices":0,"Code-Review":5,"Contributors":10,"Dangerous-Workflow":0,"Dependency-Update-Tool":0,"Fuzzing":0,"License":10,"Maintained":0,"Packaging":-1,"Pinned-Dependencies":0,"SAST":0,"Security-Policy":10,"Signed-Releases":-1,"Token-Permissions":0,"Vulnerabilities":0},"scorecard_scanned_at":"2026-07-11T02:10:28Z","slug":"metagpt","source_note":"","public_actions":null,"mcp_server_support":{"status":"none","confidence":null,"evidence":[]},"external_service_dependencies":{"providers":["Amazon Bedrock","Anthropic","Azure OpenAI","Google Gemini","OpenAI","Qdrant","Redis"],"requires_api_keys":true,"confidence":"high","evidence":["README/docs mention OpenAI","Found OpenAI dependency 'openai' in setup.py","Found Anthropic dependency 'anthropic' in requirements.txt","Found Google Gemini dependency 'google-generativeai' in requirements.txt","Found Azure OpenAI dependency 'azure-openai' in setup.py","Found Amazon Bedrock dependency 'boto3' in setup.py"]},"tool_plugin_surface":{"plugin_system":"none","tool_tags":["browser","code","database","shell"],"confidence":"high","evidence":["Found browser dependency 'selenium' in setup.py","Found shell dependency 'subprocess' in setup.py","Found database dependency 'redis' in requirements.txt","README/docs mention code capabilities"]},"package_provenance_drift":{"status":"warning","confidence":"high","summary":"1 package source mismatch detected","evidence":["pypi package 'metagpt' points to geekan/metagpt, not foundationagents/metagpt"]},"evidence_grade":"D","coverage_grade":"A","signal_coverage":0.8,"signal_types":4,"listing_status":"listed","display_listing_status":"listed","display_status_label":"Listed","has_warning":false,"warning_reasons":[],"license_spdx":"MIT","license_type":"open","license_override":"","trust_score":33.1,"trust_score_v2":33.1,"rank_v2":310,"rank_v2_delta":-36,"trust_v2_adjustment":-10.2,"trust_confidence":1.0,"trust_breakdown":{"safety":4.7,"identity":10.8,"transparency":10.5,"maintenance":0.6,"adoption":16.7},"trust_v2_breakdown":{"mcp":0.0,"external_dependencies":-4.0,"tool_plugin_surface":-1.2,"package_provenance_drift":-5.0},"pending_signals":false},{"name":"BabyAGI","repo":"yoheinakajima/babyagi","display_repo":"","url":"https://github.com/yoheinakajima/babyagi","rank":311,"previous_rank":311,"rank_delta":0,"stars":22330,"stars_fmt":"22.3k","forks":2858,"forks_fmt":"2.9k","last_push":"2026-01-31","days_ago":161,"weekly_commits":0,"commits_low_confidence":false,"score":45.0,"description":"","language":"Python","open_issues":20,"category":"Agent Frameworks","category_rank":74,"npm_package":"","crate_package":"","pypi_package":"babyagi","weekly_downloads":53,"dl_source":"pypi","hn_mentions_30d":14,"has_provenance":false,"npm_provenance":null,"pypi_provenance":false,"signed_commits_ratio":0.4,"scorecard_score":1.2,"scorecard_checks":{"Binary-Artifacts":10,"Branch-Protection":0,"CI-Tests":0,"CII-Best-Practices":0,"Code-Review":0,"Contributors":3,"Dangerous-Workflow":-1,"Dependency-Update-Tool":0,"Fuzzing":0,"License":0,"Maintained":0,"Packaging":-1,"Pinned-Dependencies":-1,"SAST":0,"Security-Policy":0,"Signed-Releases":-1,"Token-Permissions":-1,"Vulnerabilities":0},"scorecard_scanned_at":"2026-07-11T01:22:41Z","slug":"babyagi","source_note":"","public_actions":null,"mcp_server_support":{"status":"none","confidence":null,"evidence":[]},"external_service_dependencies":{"providers":["OpenAI"],"requires_api_keys":true,"confidence":"high","evidence":["README/docs mention OpenAI","Found OpenAI dependency 'openai' in requirements.txt","Found OpenAI credential/config marker 'OPENAI_API_KEY'"]},"tool_plugin_surface":{"plugin_system":"declared","tool_tags":["code","shell"],"confidence":"high","evidence":["README/docs mention a declared plugin/integration surface","Found shell dependency 'pty' in setup.py","README/docs mention code capabilities"]},"package_provenance_drift":{"status":"match","confidence":"high","summary":"Published package metadata matches the tracked repo","evidence":["pypi package 'babyagi' points to the tracked repo"]},"evidence_grade":"D","coverage_grade":"A","signal_coverage":0.8,"signal_types":4,"listing_status":"warning","display_listing_status":"warning","display_status_label":"Needs review","has_warning":true,"warning_reasons":[{"repo":"yoheinakajima/babyagi","criterion":"4.1.1","detail":"no declared license (GitHub license field is null)"}],"license_spdx":null,"license_type":"unlicensed","license_override":"","trust_score":31.4,"trust_score_v2":31.4,"rank_v2":311,"rank_v2_delta":8,"trust_v2_adjustment":2.1,"trust_confidence":1.0,"trust_breakdown":{"safety":3.5,"identity":10.8,"transparency":1.0,"maintenance":1.3,"adoption":12.7},"trust_v2_breakdown":{"mcp":0.0,"external_dependencies":-1.0,"tool_plugin_surface":-0.9,"package_provenance_drift":4.0},"pending_signals":false},{"name":"AutoAgent","repo":"HKUDS/AutoAgent","display_repo":"","url":"https://github.com/HKUDS/AutoAgent","rank":312,"previous_rank":312,"rank_delta":0,"stars":9460,"stars_fmt":"9.5k","forks":1321,"forks_fmt":"1.3k","last_push":"2025-10-16","days_ago":268,"weekly_commits":0,"commits_low_confidence":false,"score":38.4,"description":"\"AutoAgent: Fully-Automated and Zero-Code LLM Agent Framework\"","language":"Python","open_issues":55,"category":"Agent Frameworks","category_rank":75,"npm_package":"","crate_package":"","pypi_package":"","weekly_downloads":null,"dl_source":"","hn_mentions_30d":null,"has_provenance":false,"npm_provenance":null,"pypi_provenance":null,"signed_commits_ratio":0.37,"scorecard_score":1.9,"scorecard_checks":{"Binary-Artifacts":10,"Branch-Protection":0,"CI-Tests":-1,"CII-Best-Practices":0,"Code-Review":0,"Contributors":10,"Dangerous-Workflow":-1,"Dependency-Update-Tool":0,"Fuzzing":0,"License":10,"Maintained":0,"Packaging":-1,"Pinned-Dependencies":-1,"SAST":0,"Security-Policy":0,"Signed-Releases":-1,"Token-Permissions":-1,"Vulnerabilities":0},"scorecard_scanned_at":"2026-07-10T17:27:19Z","slug":"autoagent","source_note":"","public_actions":null,"mcp_server_support":{"status":"none","confidence":null,"evidence":[]},"external_service_dependencies":{"providers":["Anthropic","E2B","Google Gemini","OpenAI"],"requires_api_keys":true,"confidence":"high","evidence":["README/docs mention OpenAI","Found OpenAI credential/config marker 'OPENAI_API_KEY'","README/docs mention Anthropic","Found Anthropic credential/config marker 'ANTHROPIC_API_KEY'","README/docs mention Google Gemini","Found Google Gemini credential/config marker 'GEMINI_API_KEY'"]},"tool_plugin_surface":{"plugin_system":"declared","tool_tags":["code","search"],"confidence":"high","evidence":["README/docs mention a declared plugin/integration surface","README/docs mention search capabilities","README/docs mention code capabilities"]},"package_provenance_drift":{"status":"not_applicable","confidence":null,"summary":"No package source configured","evidence":[]},"evidence_grade":"D","coverage_grade":"C","signal_coverage":0.4,"signal_types":2,"listing_status":"listed","display_listing_status":"listed","display_status_label":"Listed","has_warning":false,"warning_reasons":[],"license_spdx":"MIT","license_type":"open","license_override":"","trust_score":31.2,"trust_score_v2":31.2,"rank_v2":312,"rank_v2_delta":1,"trust_v2_adjustment":-3.4,"trust_confidence":1.0,"trust_breakdown":{"safety":4.2,"identity":10.8,"transparency":10.1,"maintenance":0.0,"adoption":9.5},"trust_v2_breakdown":{"mcp":0.0,"external_dependencies":-2.5,"tool_plugin_surface":-0.9,"package_provenance_drift":0.0},"pending_signals":false},{"name":"Continue","repo":"continuedev/continue","display_repo":"","url":"https://github.com/continuedev/continue","rank":313,"previous_rank":313,"rank_delta":0,"stars":34805,"stars_fmt":"34.8k","forks":5015,"forks_fmt":"5.0k","last_push":"2026-07-10","days_ago":1,"weekly_commits":9,"commits_low_confidence":false,"score":81.9,"description":"open-source coding agent","language":"TypeScript","open_issues":569,"category":"Coding Agents","category_rank":43,"npm_package":"continue","crate_package":"","pypi_package":"","weekly_downloads":3398285,"dl_source":"npm+vscode","hn_mentions_30d":null,"has_provenance":false,"npm_provenance":false,"pypi_provenance":null,"signed_commits_ratio":0.79,"scorecard_score":null,"scorecard_checks":{},"scorecard_scanned_at":null,"slug":"continue","source_note":"","public_actions":null,"mcp_server_support":{"status":"declared","confidence":"medium","evidence":["Found MCP dependency 'modelcontextprotocol' in gui/package.json","Found MCP dependency '@modelcontextprotocol/sdk' in core/package.json"]},"external_service_dependencies":{"providers":["Amazon Bedrock","Anthropic","OpenAI","Postgres"],"requires_api_keys":false,"confidence":"high","evidence":["Found OpenAI dependency 'openai' in core/package.json","Found Anthropic dependency 'anthropic' in core/package.json","Found Amazon Bedrock dependency 'bedrock' in core/package.json","Found Postgres dependency 'pg' in core/package.json"]},"tool_plugin_surface":{"plugin_system":"marketplace","tool_tags":["browser","code","database"],"confidence":"high","evidence":["README/docs mention a marketplace plugin/integration surface","Found browser dependency 'puppeteer' in core/package.json","Found database dependency 'pg' in core/package.json","README/docs mention code capabilities"]},"package_provenance_drift":{"status":"warning","confidence":"high","summary":"1 package source mismatch detected","evidence":["npm package 'continue' points to scottcorgan/continue, not continuedev/continue"]},"evidence_grade":"D","coverage_grade":"C","signal_coverage":0.4,"signal_types":2,"listing_status":"listed","display_listing_status":"listed","display_status_label":"Listed","has_warning":false,"warning_reasons":[],"license_spdx":"Apache-2.0","license_type":"open","license_override":"","trust_score":30.8,"trust_score_v2":30.8,"rank_v2":313,"rank_v2_delta":-17,"trust_v2_adjustment":-8.4,"trust_confidence":0.67,"trust_breakdown":{"safety":4.0,"identity":10.8,"transparency":8.5,"maintenance":15.9,"adoption":19.6},"trust_v2_breakdown":{"mcp":0.0,"external_dependencies":-1.5,"tool_plugin_surface":-1.9,"package_provenance_drift":-5.0},"pending_signals":false},{"name":"Agent Laboratory","repo":"SamuelSchmidgall/AgentLaboratory","display_repo":"","url":"https://github.com/SamuelSchmidgall/AgentLaboratory","rank":314,"previous_rank":314,"rank_delta":0,"stars":5739,"stars_fmt":"5.7k","forks":799,"forks_fmt":"799","last_push":"2025-08-20","days_ago":325,"weekly_commits":0,"commits_low_confidence":false,"score":36.1,"description":"Agent Laboratory is an end-to-end autonomous research workflow meant to assist you as the human researcher toward implem","language":"Python","open_issues":38,"category":"Research & Data","category_rank":18,"npm_package":"","crate_package":"","pypi_package":"","weekly_downloads":null,"dl_source":"","hn_mentions_30d":4,"has_provenance":false,"npm_provenance":null,"pypi_provenance":null,"signed_commits_ratio":null,"scorecard_score":1.8,"scorecard_checks":{"Binary-Artifacts":10,"Branch-Protection":0,"CI-Tests":0,"CII-Best-Practices":0,"Code-Review":2,"Contributors":3,"Dangerous-Workflow":-1,"Dependency-Update-Tool":0,"Fuzzing":0,"License":10,"Maintained":0,"Packaging":-1,"Pinned-Dependencies":-1,"SAST":0,"Security-Policy":0,"Signed-Releases":-1,"Token-Permissions":-1,"Vulnerabilities":0},"scorecard_scanned_at":"2026-07-11T03:34:39Z","slug":"agent-laboratory","source_note":"","public_actions":null,"mcp_server_support":{"status":"none","confidence":null,"evidence":[]},"external_service_dependencies":{"providers":["Anthropic","Google Gemini","OpenAI"],"requires_api_keys":false,"confidence":"high","evidence":["README/docs mention OpenAI","Found OpenAI dependency 'openai' in requirements.txt","Found Anthropic dependency 'anthropic' in requirements.txt","Found Google Gemini dependency 'google-generativeai' in requirements.txt"]},"tool_plugin_surface":{"plugin_system":"none","tool_tags":["code"],"confidence":"medium","evidence":["README/docs mention code capabilities"]},"package_provenance_drift":{"status":"not_applicable","confidence":null,"summary":"No package source configured","evidence":[]},"evidence_grade":"D","coverage_grade":"B","signal_coverage":0.6,"signal_types":3,"listing_status":"listed","display_listing_status":"listed","display_status_label":"Listed","has_warning":false,"warning_reasons":[],"license_spdx":"MIT","license_type":"open","license_override":"","trust_score":30.7,"trust_score_v2":30.7,"rank_v2":314,"rank_v2_delta":2,"trust_v2_adjustment":-1.3,"trust_confidence":1.0,"trust_breakdown":{"safety":2.2,"identity":10.8,"transparency":10.0,"maintenance":0.0,"adoption":9.0},"trust_v2_breakdown":{"mcp":0.0,"external_dependencies":-1.0,"tool_plugin_surface":-0.3,"package_provenance_drift":0.0},"pending_signals":false},{"name":"Open Operator","repo":"browserbase/open-operator","display_repo":"","url":"https://github.com/browserbase/open-operator","rank":315,"previous_rank":315,"rank_delta":0,"stars":1950,"stars_fmt":"1.9k","forks":326,"forks_fmt":"326","last_push":"2026-05-04","days_ago":68,"weekly_commits":0,"commits_low_confidence":false,"score":47.1,"description":"A template for building web agents with Stagehand on Browserbase","language":"TypeScript","open_issues":14,"category":"Browser & Computer Use","category_rank":21,"npm_package":"","crate_package":"","pypi_package":"","weekly_downloads":null,"dl_source":"","hn_mentions_30d":0,"has_provenance":false,"npm_provenance":null,"pypi_provenance":null,"signed_commits_ratio":0.232,"scorecard_score":2.4,"scorecard_checks":{"Binary-Artifacts":10,"Branch-Protection":5,"CI-Tests":0,"CII-Best-Practices":0,"Code-Review":4,"Contributors":10,"Dangerous-Workflow":-1,"Dependency-Update-Tool":0,"Fuzzing":0,"License":0,"Maintained":0,"Packaging":-1,"Pinned-Dependencies":-1,"SAST":0,"Security-Policy":0,"Signed-Releases":-1,"Token-Permissions":-1,"Vulnerabilities":0},"scorecard_scanned_at":"2026-07-11T03:31:02Z","slug":"open-operator","source_note":"","public_actions":null,"mcp_server_support":{"status":"none","confidence":null,"evidence":[]},"external_service_dependencies":{"providers":["Anthropic","Browserbase","OpenAI"],"requires_api_keys":true,"confidence":"high","evidence":["Found OpenAI credential/config marker 'OPENAI_API_KEY'","README/docs also mention OpenAI","Found Anthropic dependency 'anthropic' in package.json","Found Browserbase dependency 'browserbase' in package.json","Found Browserbase credential/config marker 'BROWSERBASE_API_KEY'","README/docs also mention Browserbase"]},"tool_plugin_surface":{"plugin_system":"none","tool_tags":["browser"],"confidence":"high","evidence":["Found browser dependency 'playwright' in package.json","README/docs also mention browser capabilities"]},"package_provenance_drift":{"status":"not_applicable","confidence":null,"summary":"No package source configured","evidence":[]},"evidence_grade":"D","coverage_grade":"B","signal_coverage":0.6,"signal_types":3,"listing_status":"warning","display_listing_status":"warning","display_status_label":"Needs review","has_warning":true,"warning_reasons":[{"repo":"browserbase/open-operator","criterion":"5.1","detail":"repository is archived"},{"repo":"browserbase/open-operator","criterion":"4.1.1","detail":"no declared license (GitHub license field is null)"}],"license_spdx":null,"license_type":"unlicensed","license_override":"","trust_score":30.1,"trust_score_v2":30.1,"rank_v2":315,"rank_v2_delta":0,"trust_v2_adjustment":-2.3,"trust_confidence":1.0,"trust_breakdown":{"safety":4.2,"identity":10.8,"transparency":2.0,"maintenance":7.5,"adoption":7.9},"trust_v2_breakdown":{"mcp":0.0,"external_dependencies":-2.0,"tool_plugin_surface":-0.3,"package_provenance_drift":0.0},"pending_signals":false},{"name":"ScaleCUA","repo":"OpenGVLab/ScaleCUA","display_repo":"","url":"https://github.com/OpenGVLab/ScaleCUA","rank":316,"previous_rank":316,"rank_delta":0,"stars":1121,"stars_fmt":"1.1k","forks":79,"forks_fmt":"79","last_push":"2026-01-07","days_ago":185,"weekly_commits":0,"commits_low_confidence":false,"score":27.1,"description":"[ICLR 2026 Oral] ScaleCUA is the open-sourced computer use agents that can operate on cross-platform environments (Windo","language":"Python","open_issues":14,"category":"Browser & Computer Use","category_rank":22,"npm_package":"","crate_package":"","pypi_package":"","weekly_downloads":null,"dl_source":"","hn_mentions_30d":null,"has_provenance":false,"npm_provenance":null,"pypi_provenance":null,"signed_commits_ratio":0.609,"scorecard_score":1.4,"scorecard_checks":{"Binary-Artifacts":10,"Branch-Protection":0,"CI-Tests":0,"CII-Best-Practices":0,"Code-Review":0,"Contributors":6,"Dangerous-Workflow":-1,"Dependency-Update-Tool":0,"Fuzzing":0,"License":10,"Maintained":0,"Packaging":-1,"Pinned-Dependencies":0,"SAST":0,"Security-Policy":0,"Signed-Releases":0,"Token-Permissions":-1,"Vulnerabilities":0},"scorecard_scanned_at":"2026-07-11T03:40:17Z","slug":"scalecua","source_note":"","public_actions":null,"mcp_server_support":{"status":"none","confidence":null,"evidence":[]},"external_service_dependencies":{"providers":["Amazon Bedrock","Anthropic","Google Gemini","OpenAI"],"requires_api_keys":false,"confidence":"high","evidence":["README/docs mention OpenAI","Found OpenAI dependency 'openai' in requirements.txt","Found Anthropic dependency 'anthropic' in requirements.txt","Found Google Gemini dependency 'google-generativeai' in playground/requirements.txt","Found Amazon Bedrock dependency 'boto3' in requirements.txt"]},"tool_plugin_surface":{"plugin_system":"declared","tool_tags":["browser","code","search","shell"],"confidence":"high","evidence":["Found declared path: evaluation/AndroidWorld/apps/java/com/google/androidenv/miniwob/app/assets/html/flight/AA/apps/common/js/jquery/aacom/plugins/aaAirportAutoComplete.js","Found browser dependency 'playwright' in requirements.txt","Found shell dependency 'subprocess' in evaluation/OSWorld/setup.py","README/docs mention search capabilities","README/docs mention code capabilities"]},"package_provenance_drift":{"status":"not_applicable","confidence":null,"summary":"No package source configured","evidence":[]},"evidence_grade":"D","coverage_grade":"C","signal_coverage":0.4,"signal_types":2,"listing_status":"listed","display_listing_status":"listed","display_status_label":"Listed","has_warning":false,"warning_reasons":[],"license_spdx":"Apache-2.0","license_type":"open","license_override":"","trust_score":29.6,"trust_score_v2":29.6,"rank_v2":316,"rank_v2_delta":-2,"trust_v2_adjustment":-3.0,"trust_confidence":1.0,"trust_breakdown":{"safety":4.8,"identity":10.8,"transparency":9.7,"maintenance":0.0,"adoption":7.3},"trust_v2_breakdown":{"mcp":0.0,"external_dependencies":-1.5,"tool_plugin_surface":-1.5,"package_provenance_drift":0.0},"pending_signals":false},{"name":"Quivr","repo":"QuivrHQ/quivr","display_repo":"","url":"https://github.com/QuivrHQ/quivr","rank":317,"previous_rank":317,"rank_delta":0,"stars":39197,"stars_fmt":"39.2k","forks":3722,"forks_fmt":"3.7k","last_push":"2025-07-09","days_ago":367,"weekly_commits":0,"commits_low_confidence":false,"score":44.2,"description":"Opiniated RAG for integrating GenAI in your apps 🧠   Focus on your product rather than the RAG. Easy integration in exis","language":"Python","open_issues":9,"category":"Memory & Knowledge","category_rank":27,"npm_package":"","crate_package":"","pypi_package":"quivr-core","weekly_downloads":63,"dl_source":"pypi","hn_mentions_30d":12,"has_provenance":false,"npm_provenance":null,"pypi_provenance":false,"signed_commits_ratio":null,"scorecard_score":4.3,"scorecard_checks":{"Binary-Artifacts":10,"Branch-Protection":6,"CI-Tests":1,"CII-Best-Practices":0,"Code-Review":7,"Contributors":10,"Dangerous-Workflow":10,"Dependency-Update-Tool":0,"Fuzzing":0,"License":9,"Maintained":0,"Packaging":-1,"Pinned-Dependencies":0,"SAST":0,"Security-Policy":0,"Signed-Releases":-1,"Token-Permissions":0,"Vulnerabilities":10},"scorecard_scanned_at":"2026-07-10T17:08:36Z","slug":"quivr","source_note":"","public_actions":null,"mcp_server_support":{"status":"none","confidence":null,"evidence":[]},"external_service_dependencies":{"providers":["Anthropic","OpenAI"],"requires_api_keys":true,"confidence":"high","evidence":["README/docs mention OpenAI","Found OpenAI dependency 'openai' in core/pyproject.toml","Found OpenAI credential/config marker 'OPENAI_API_KEY'","README/docs mention Anthropic","Found Anthropic dependency 'anthropic' in core/pyproject.toml"]},"tool_plugin_surface":{"plugin_system":"declared","tool_tags":["code","search"],"confidence":"high","evidence":["README/docs mention a declared plugin/integration surface","README/docs mention search capabilities","README/docs mention code capabilities"]},"package_provenance_drift":{"status":"unknown","confidence":"low","summary":"Package source metadata is missing or inconclusive","evidence":["pypi package 'quivr-core' has a non-GitHub or unparseable source URL"]},"evidence_grade":"D","coverage_grade":"A","signal_coverage":0.8,"signal_types":4,"listing_status":"warning","display_listing_status":"warning","display_status_label":"Needs review","has_warning":true,"warning_reasons":[{"repo":"QuivrHQ/quivr","criterion":"4.2.1","detail":"no meaningful activity in 12 months (last push 2025-07-09)"}],"license_spdx":"NOASSERTION","license_type":"open","license_override":"","trust_score":29.4,"trust_score_v2":29.4,"rank_v2":317,"rank_v2_delta":0,"trust_v2_adjustment":-2.4,"trust_confidence":1.0,"trust_breakdown":{"safety":5.4,"identity":10.8,"transparency":12.2,"maintenance":0.0,"adoption":13.4},"trust_v2_breakdown":{"mcp":0.0,"external_dependencies":-1.5,"tool_plugin_surface":-0.9,"package_provenance_drift":0.0},"pending_signals":false},{"name":"PyWinAssistant","repo":"a-real-ai/pywinassistant","display_repo":"","url":"https://github.com/a-real-ai/pywinassistant","rank":318,"previous_rank":318,"rank_delta":0,"stars":1343,"stars_fmt":"1.3k","forks":192,"forks_fmt":"192","last_push":"2025-02-13","days_ago":513,"weekly_commits":0,"commits_low_confidence":false,"score":29.4,"description":"The first open-source Artificial Narrow Intelligence generalist agentic framework Computer-Using-Agent that fully operat","language":"Python","open_issues":10,"category":"Browser & Computer Use","category_rank":23,"npm_package":"","crate_package":"","pypi_package":"","weekly_downloads":null,"dl_source":"","hn_mentions_30d":null,"has_provenance":false,"npm_provenance":null,"pypi_provenance":null,"signed_commits_ratio":0.942,"scorecard_score":3.8,"scorecard_checks":{"Binary-Artifacts":10,"Branch-Protection":0,"CI-Tests":0,"CII-Best-Practices":0,"Code-Review":0,"Contributors":6,"Dangerous-Workflow":10,"Dependency-Update-Tool":0,"Fuzzing":0,"License":10,"Maintained":0,"Packaging":-1,"Pinned-Dependencies":2,"SAST":0,"Security-Policy":0,"Signed-Releases":0,"Token-Permissions":10,"Vulnerabilities":10},"scorecard_scanned_at":"2026-07-10T08:41:52Z","slug":"pywinassistant","source_note":"","public_actions":null,"mcp_server_support":{"status":"none","confidence":null,"evidence":[]},"external_service_dependencies":{"providers":["OpenAI"],"requires_api_keys":false,"confidence":"high","evidence":["Found OpenAI dependency 'openai' in requirements.txt","README/docs also mention OpenAI"]},"tool_plugin_surface":{"plugin_system":"declared","tool_tags":[],"confidence":"medium","evidence":["README/docs mention a declared plugin/integration surface"]},"package_provenance_drift":{"status":"not_applicable","confidence":null,"summary":"No package source configured","evidence":[]},"evidence_grade":"D","coverage_grade":"C","signal_coverage":0.4,"signal_types":2,"listing_status":"warning","display_listing_status":"warning","display_status_label":"Needs review","has_warning":true,"warning_reasons":[{"repo":"a-real-ai/pywinassistant","criterion":"4.2.1","detail":"no meaningful activity in 12 months (last push 2025-02-13)"}],"license_spdx":"MIT","license_type":"open","license_override":"","trust_score":29.2,"trust_score_v2":29.2,"rank_v2":318,"rank_v2_delta":0,"trust_v2_adjustment":-0.3,"trust_confidence":1.0,"trust_breakdown":{"safety":9.5,"identity":10.8,"transparency":11.7,"maintenance":0.0,"adoption":7.5},"trust_v2_breakdown":{"mcp":0.0,"external_dependencies":-0.0,"tool_plugin_surface":-0.3,"package_provenance_drift":0.0},"pending_signals":false},{"name":"Bolt","repo":"stackblitz/bolt.new","display_repo":"","url":"https://github.com/stackblitz/bolt.new","rank":319,"previous_rank":319,"rank_delta":0,"stars":16455,"stars_fmt":"16.5k","forks":14697,"forks_fmt":"14.7k","last_push":"2024-12-17","days_ago":571,"weekly_commits":0,"commits_low_confidence":false,"score":44.7,"description":"Prompt, run, edit, and deploy full-stack web applications. -- bolt.new -- Help Center: https://support.bolt.new/ -- Comm","language":"TypeScript","open_issues":0,"category":"UI & App Builders","category_rank":14,"npm_package":"bolt","crate_package":"","pypi_package":"","weekly_downloads":4423,"dl_source":"npm","hn_mentions_30d":0,"has_provenance":false,"npm_provenance":false,"pypi_provenance":null,"signed_commits_ratio":0.65,"scorecard_score":3.5,"scorecard_checks":{"Binary-Artifacts":10,"Branch-Protection":4,"CI-Tests":0,"CII-Best-Practices":0,"Code-Review":4,"Contributors":10,"Dangerous-Workflow":10,"Dependency-Update-Tool":0,"Fuzzing":0,"License":10,"Maintained":0,"Packaging":-1,"Pinned-Dependencies":8,"SAST":0,"Security-Policy":0,"Signed-Releases":-1,"Token-Permissions":0,"Vulnerabilities":0},"scorecard_scanned_at":"2026-07-10T16:12:10Z","slug":"bolt","source_note":"","public_actions":null,"mcp_server_support":{"status":"none","confidence":null,"evidence":[]},"external_service_dependencies":{"providers":["Anthropic"],"requires_api_keys":false,"confidence":"medium","evidence":["Found Anthropic dependency 'anthropic' in package.json"]},"tool_plugin_surface":{"plugin_system":"none","tool_tags":["code","filesystem","search","shell"],"confidence":"high","evidence":["README/docs mention shell capabilities","README/docs mention filesystem capabilities","README/docs mention search capabilities","README/docs mention code capabilities"]},"package_provenance_drift":{"status":"warning","confidence":"high","summary":"1 package source mismatch detected","evidence":["npm package 'bolt' points to boltpkg/bolt, not stackblitz/bolt.new"]},"evidence_grade":"D","coverage_grade":"A","signal_coverage":0.8,"signal_types":4,"listing_status":"warning","display_listing_status":"warning","display_status_label":"Needs review","has_warning":true,"warning_reasons":[{"repo":"stackblitz/bolt.new","criterion":"4.2.1","detail":"no meaningful activity in 12 months (last push 2024-12-17)"}],"license_spdx":"MIT","license_type":"open","license_override":"","trust_score":28.7,"trust_score_v2":28.7,"rank_v2":319,"rank_v2_delta":-7,"trust_v2_adjustment":-6.2,"trust_confidence":1.0,"trust_breakdown":{"safety":7.6,"identity":10.8,"transparency":11.5,"maintenance":0.0,"adoption":15.0},"trust_v2_breakdown":{"mcp":0.0,"external_dependencies":-0.0,"tool_plugin_surface":-1.2,"package_provenance_drift":-5.0},"pending_signals":false},{"name":"MindSearch","repo":"InternLM/MindSearch","display_repo":"","url":"https://github.com/InternLM/MindSearch","rank":320,"previous_rank":320,"rank_delta":0,"stars":6888,"stars_fmt":"6.9k","forks":685,"forks_fmt":"685","last_push":"2025-07-04","days_ago":372,"weekly_commits":0,"commits_low_confidence":false,"score":36.2,"description":"🔍 An LLM-based Multi-agent Framework of Web Search Engine (like Perplexity.ai Pro and SearchGPT)","language":"JavaScript","open_issues":47,"category":"Research & Data","category_rank":19,"npm_package":"","crate_package":"","pypi_package":"","weekly_downloads":null,"dl_source":"","hn_mentions_30d":null,"has_provenance":false,"npm_provenance":null,"pypi_provenance":null,"signed_commits_ratio":1.0,"scorecard_score":2.4,"scorecard_checks":{"Binary-Artifacts":10,"Branch-Protection":0,"CI-Tests":0,"CII-Best-Practices":0,"Code-Review":9,"Contributors":6,"Dangerous-Workflow":-1,"Dependency-Update-Tool":0,"Fuzzing":0,"License":10,"Maintained":0,"Packaging":-1,"Pinned-Dependencies":0,"SAST":0,"Security-Policy":0,"Signed-Releases":-1,"Token-Permissions":-1,"Vulnerabilities":0},"scorecard_scanned_at":"2026-07-11T01:33:38Z","slug":"mindsearch","source_note":"","public_actions":null,"mcp_server_support":{"status":"none","confidence":null,"evidence":[]},"external_service_dependencies":{"providers":["Brave Search"],"requires_api_keys":true,"confidence":"medium","evidence":["README/docs mention Brave Search"]},"tool_plugin_surface":{"plugin_system":"none","tool_tags":["code","search","shell"],"confidence":"high","evidence":["README/docs mention shell capabilities","README/docs mention search capabilities","README/docs mention code capabilities"]},"package_provenance_drift":{"status":"not_applicable","confidence":null,"summary":"No package source configured","evidence":[]},"evidence_grade":"D","coverage_grade":"C","signal_coverage":0.4,"signal_types":2,"listing_status":"warning","display_listing_status":"warning","display_status_label":"Needs review","has_warning":true,"warning_reasons":[{"repo":"InternLM/MindSearch","criterion":"4.2.1","detail":"no meaningful activity in 12 months (last push 2025-07-04)"}],"license_spdx":"Apache-2.0","license_type":"open","license_override":"","trust_score":26.6,"trust_score_v2":26.6,"rank_v2":320,"rank_v2_delta":0,"trust_v2_adjustment":-1.9,"trust_confidence":1.0,"trust_breakdown":{"safety":8.0,"identity":10.8,"transparency":10.5,"maintenance":0.0,"adoption":9.2},"trust_v2_breakdown":{"mcp":0.0,"external_dependencies":-1.0,"tool_plugin_surface":-0.9,"package_provenance_drift":0.0},"pending_signals":false},{"name":"mcp-agent","repo":"lastmile-ai/mcp-agent","display_repo":"","url":"https://github.com/lastmile-ai/mcp-agent","rank":321,"previous_rank":321,"rank_delta":0,"stars":8416,"stars_fmt":"8.4k","forks":858,"forks_fmt":"858","last_push":"2026-01-25","days_ago":167,"weekly_commits":0,"commits_low_confidence":false,"score":39.1,"description":"Build effective agents using Model Context Protocol and simple workflow patterns","language":"Python","open_issues":83,"category":"Agent Frameworks","category_rank":76,"npm_package":"","crate_package":"","pypi_package":"mcp-agent","weekly_downloads":7548,"dl_source":"pypi","hn_mentions_30d":null,"has_provenance":false,"npm_provenance":null,"pypi_provenance":false,"signed_commits_ratio":0.72,"scorecard_score":null,"scorecard_checks":{},"scorecard_scanned_at":null,"slug":"mcp-agent","source_note":"","public_actions":null,"mcp_server_support":{"status":"implemented","confidence":"high","evidence":["README/docs explicitly mention an MCP server","Found MCP-related server path: examples/basic/mcp_server_aggregator/README.md","Found MCP-related server path: examples/basic/mcp_server_aggregator/main.py","Found MCP-related server docs path: docs/cloud/mcp-agent-cloud/deploy-mcp-server.mdx"]},"external_service_dependencies":{"providers":["Amazon Bedrock","Anthropic","OpenAI","Redis"],"requires_api_keys":true,"confidence":"high","evidence":["README/docs mention OpenAI","Found OpenAI dependency 'openai' in pyproject.toml","Found OpenAI credential/config marker 'OPENAI_API_KEY'","README/docs mention Anthropic","Found Anthropic dependency 'anthropic' in pyproject.toml","README/docs mention Amazon Bedrock"]},"tool_plugin_surface":{"plugin_system":"declared","tool_tags":["code","database","filesystem"],"confidence":"high","evidence":["README/docs mention a declared plugin/integration surface","README/docs mention filesystem capabilities","Found database dependency 'redis' in pyproject.toml","README/docs mention code capabilities"]},"package_provenance_drift":{"status":"unknown","confidence":"low","summary":"Package source metadata is missing or inconclusive","evidence":["pypi package 'mcp-agent' has a non-GitHub or unparseable source URL"]},"evidence_grade":"D","coverage_grade":"C","signal_coverage":0.4,"signal_types":2,"listing_status":"listed","display_listing_status":"listed","display_status_label":"Listed","has_warning":false,"warning_reasons":[],"license_spdx":"Apache-2.0","license_type":"open","license_override":"","trust_score":23.9,"trust_score_v2":23.9,"rank_v2":321,"rank_v2_delta":1,"trust_v2_adjustment":-1.7,"trust_confidence":0.67,"trust_breakdown":{"safety":3.6,"identity":10.8,"transparency":8.5,"maintenance":0.9,"adoption":14.6},"trust_v2_breakdown":{"mcp":2.0,"external_dependencies":-2.5,"tool_plugin_surface":-1.2,"package_provenance_drift":0.0},"pending_signals":false},{"name":"AIlice","repo":"myshell-ai/AIlice","display_repo":"","url":"https://github.com/myshell-ai/AIlice","rank":322,"previous_rank":322,"rank_delta":0,"stars":1408,"stars_fmt":"1.4k","forks":205,"forks_fmt":"205","last_push":"2025-08-18","days_ago":327,"weekly_commits":0,"commits_low_confidence":false,"score":29.7,"description":"AIlice is a fully autonomous, general-purpose AI agent.","language":"Python","open_issues":6,"category":"Agent Frameworks","category_rank":77,"npm_package":"","crate_package":"","pypi_package":"ailice","weekly_downloads":null,"dl_source":"","hn_mentions_30d":8,"has_provenance":false,"npm_provenance":null,"pypi_provenance":null,"signed_commits_ratio":0.0,"scorecard_score":3.1,"scorecard_checks":{"Binary-Artifacts":10,"Branch-Protection":0,"CI-Tests":-1,"CII-Best-Practices":0,"Code-Review":0,"Contributors":0,"Dangerous-Workflow":10,"Dependency-Update-Tool":0,"Fuzzing":0,"License":10,"Maintained":0,"Packaging":-1,"Pinned-Dependencies":0,"SAST":0,"Security-Policy":0,"Signed-Releases":-1,"Token-Permissions":0,"Vulnerabilities":10},"scorecard_scanned_at":"2026-07-11T01:29:33Z","slug":"ailice","source_note":"","public_actions":null,"mcp_server_support":{"status":"implemented","confidence":"medium","evidence":["README/docs explicitly mention an MCP server"]},"external_service_dependencies":{"providers":["Anthropic","Google Gemini","OpenAI"],"requires_api_keys":true,"confidence":"high","evidence":["README/docs mention OpenAI","Found OpenAI dependency 'openai' in pyproject.toml","README/docs mention Anthropic","Found Anthropic dependency 'anthropic' in pyproject.toml","README/docs mention Google Gemini"]},"tool_plugin_surface":{"plugin_system":"extension-based","tool_tags":["browser","code","search"],"confidence":"high","evidence":["README/docs mention a extension-based plugin/integration surface","Found browser dependency 'selenium' in pyproject.toml","README/docs mention search capabilities","README/docs mention code capabilities"]},"package_provenance_drift":{"status":"unknown","confidence":"low","summary":"Package source metadata is missing or inconclusive","evidence":["pypi package 'ailice' does not expose a source repo URL"]},"evidence_grade":"D","coverage_grade":"B","signal_coverage":0.6,"signal_types":3,"listing_status":"listed","display_listing_status":"listed","display_status_label":"Listed","has_warning":false,"warning_reasons":[],"license_spdx":"MIT","license_type":"open","license_override":"","trust_score":23.5,"trust_score_v2":23.5,"rank_v2":322,"rank_v2_delta":2,"trust_v2_adjustment":-1.5,"trust_confidence":0.75,"trust_breakdown":{"safety":3.9,"identity":10.8,"transparency":11.1,"maintenance":0.0,"adoption":7.6},"trust_v2_breakdown":{"mcp":2.0,"external_dependencies":-2.0,"tool_plugin_surface":-1.5,"package_provenance_drift":0.0},"pending_signals":false},{"name":"Supervision","repo":"roboflow/supervision","display_repo":"","url":"https://github.com/roboflow/supervision","rank":323,"previous_rank":323,"rank_delta":0,"stars":47779,"stars_fmt":"47.8k","forks":4447,"forks_fmt":"4.4k","last_push":"2026-07-10","days_ago":1,"weekly_commits":104,"commits_low_confidence":false,"score":95.1,"description":"We write your reusable computer vision tools. 💜","language":"Python","open_issues":45,"category":"Needs review","category_rank":11,"npm_package":"","crate_package":"","pypi_package":"","weekly_downloads":null,"dl_source":"","hn_mentions_30d":null,"has_provenance":false,"npm_provenance":null,"pypi_provenance":null,"signed_commits_ratio":null,"scorecard_score":null,"scorecard_checks":{},"scorecard_scanned_at":null,"slug":"supervision","source_note":"","public_actions":null,"mcp_server_support":{"status":"none","confidence":null,"evidence":[]},"external_service_dependencies":{"providers":["Postgres"],"requires_api_keys":true,"confidence":"medium","evidence":["Found Postgres dependency 'pg' in pyproject.toml"]},"tool_plugin_surface":{"plugin_system":"declared","tool_tags":["code","database"],"confidence":"high","evidence":["README/docs mention a declared plugin/integration surface","Found database dependency 'pg' in pyproject.toml","README/docs mention code capabilities"]},"package_provenance_drift":{"status":"not_applicable","confidence":null,"summary":"No package source configured","evidence":[]},"evidence_grade":"D","coverage_grade":"D","signal_coverage":0.2,"signal_types":1,"listing_status":"listed","display_listing_status":"listed","display_status_label":"Listed","has_warning":false,"warning_reasons":[],"license_spdx":"MIT","license_type":"open","license_override":"","trust_score":23.3,"trust_score_v2":23.3,"rank_v2":323,"rank_v2_delta":0,"trust_v2_adjustment":-1.9,"trust_confidence":0.5,"trust_breakdown":{"safety":0.0,"identity":10.8,"transparency":8.5,"maintenance":19.9,"adoption":11.2},"trust_v2_breakdown":{"mcp":0.0,"external_dependencies":-1.0,"tool_plugin_surface":-0.9,"package_provenance_drift":0.0},"pending_signals":false},{"name":"Plandex","repo":"plandex-ai/plandex","display_repo":"","url":"https://github.com/plandex-ai/plandex","rank":324,"previous_rank":324,"rank_delta":0,"stars":15512,"stars_fmt":"15.5k","forks":1158,"forks_fmt":"1.2k","last_push":"2025-10-03","days_ago":281,"weekly_commits":0,"commits_low_confidence":false,"score":39.3,"description":"Open source AI coding agent. Designed for large projects and real world tasks.","language":"Go","open_issues":39,"category":"Coding Agents","category_rank":44,"npm_package":"","crate_package":"","pypi_package":"plandex","weekly_downloads":null,"dl_source":"","hn_mentions_30d":null,"has_provenance":false,"npm_provenance":null,"pypi_provenance":null,"signed_commits_ratio":null,"scorecard_score":2.8,"scorecard_checks":{"Binary-Artifacts":10,"Branch-Protection":3,"CI-Tests":-1,"CII-Best-Practices":0,"Code-Review":0,"Contributors":6,"Dangerous-Workflow":10,"Dependency-Update-Tool":0,"Fuzzing":0,"License":10,"Maintained":0,"Packaging":10,"Pinned-Dependencies":0,"SAST":0,"Security-Policy":0,"Signed-Releases":0,"Token-Permissions":0,"Vulnerabilities":0},"scorecard_scanned_at":"2026-07-11T02:09:04Z","slug":"plandex","source_note":"","public_actions":null,"mcp_server_support":{"status":"none","confidence":null,"evidence":[]},"external_service_dependencies":{"providers":["Anthropic","OpenAI"],"requires_api_keys":true,"confidence":"high","evidence":["README/docs mention OpenAI","README/docs mention Anthropic"]},"tool_plugin_surface":{"plugin_system":"declared","tool_tags":["code","shell"],"confidence":"high","evidence":["README/docs mention a declared plugin/integration surface","README/docs mention shell capabilities","README/docs mention code capabilities"]},"package_provenance_drift":{"status":"unknown","confidence":"low","summary":"Package source metadata is missing or inconclusive","evidence":["pypi package 'plandex' does not expose a source repo URL"]},"evidence_grade":"D","coverage_grade":"C","signal_coverage":0.4,"signal_types":2,"listing_status":"listed","display_listing_status":"listed","display_status_label":"Listed","has_warning":false,"warning_reasons":[],"license_spdx":"MIT","license_type":"open","license_override":"","trust_score":21.1,"trust_score_v2":21.1,"rank_v2":324,"rank_v2_delta":1,"trust_v2_adjustment":-2.4,"trust_confidence":0.67,"trust_breakdown":{"safety":3.5,"identity":10.8,"transparency":10.9,"maintenance":0.0,"adoption":10.1},"trust_v2_breakdown":{"mcp":0.0,"external_dependencies":-1.5,"tool_plugin_surface":-0.9,"package_provenance_drift":0.0},"pending_signals":false},{"name":"DeepAnalyze","repo":"ruc-datalab/DeepAnalyze","display_repo":"","url":"https://github.com/ruc-datalab/DeepAnalyze","rank":325,"previous_rank":325,"rank_delta":0,"stars":4347,"stars_fmt":"4.3k","forks":687,"forks_fmt":"687","last_push":"2026-07-01","days_ago":10,"weekly_commits":3,"commits_low_confidence":false,"score":66.1,"description":"DeepAnalyze is the first agentic LLM for autonomous data science. 🎈你的AI数据分析师，自动分析大量数据，一键生成专业分析报告！","language":"Python","open_issues":16,"category":"Research & Data","category_rank":20,"npm_package":"","crate_package":"","pypi_package":"","weekly_downloads":null,"dl_source":"","hn_mentions_30d":null,"has_provenance":false,"npm_provenance":null,"pypi_provenance":null,"signed_commits_ratio":0.13,"scorecard_score":null,"scorecard_checks":{},"scorecard_scanned_at":null,"slug":"deepanalyze","source_note":"","public_actions":null,"mcp_server_support":{"status":"declared","confidence":"medium","evidence":["Found MCP dependency 'fastmcp' in demo/jupyter/pyproject.toml"]},"external_service_dependencies":{"providers":["OpenAI"],"requires_api_keys":false,"confidence":"high","evidence":["Found OpenAI dependency 'openai' in requirements.txt","README/docs also mention OpenAI"]},"tool_plugin_surface":{"plugin_system":"declared","tool_tags":[],"confidence":"medium","evidence":["Found declared path: deepanalyze/ms-swift/examples/train/grpo/plugin/plugin.py"]},"package_provenance_drift":{"status":"not_applicable","confidence":null,"summary":"No package source configured","evidence":[]},"evidence_grade":"D","coverage_grade":"D","signal_coverage":0.2,"signal_types":1,"listing_status":"listed","display_listing_status":"listed","display_status_label":"Listed","has_warning":false,"warning_reasons":[],"license_spdx":"MIT","license_type":"open","license_override":"","trust_score":20.9,"trust_score_v2":20.9,"rank_v2":325,"rank_v2_delta":2,"trust_v2_adjustment":-0.3,"trust_confidence":0.5,"trust_breakdown":{"safety":0.7,"identity":10.8,"transparency":8.5,"maintenance":13.7,"adoption":8.7},"trust_v2_breakdown":{"mcp":0.0,"external_dependencies":-0.0,"tool_plugin_surface":-0.3,"package_provenance_drift":0.0},"pending_signals":false},{"name":"OpenManus","repo":"FoundationAgents/OpenManus","display_repo":"","url":"https://github.com/FoundationAgents/OpenManus","rank":326,"previous_rank":326,"rank_delta":0,"stars":57035,"stars_fmt":"57.0k","forks":9930,"forks_fmt":"9.9k","last_push":"2026-02-11","days_ago":150,"weekly_commits":0,"commits_low_confidence":false,"score":51.4,"description":"No fortress, purely open ground.  OpenManus is Coming.","language":"Python","open_issues":312,"category":"Agent Frameworks","category_rank":78,"npm_package":"","crate_package":"","pypi_package":"openmanus","weekly_downloads":38,"dl_source":"pypi","hn_mentions_30d":2,"has_provenance":false,"npm_provenance":null,"pypi_provenance":false,"signed_commits_ratio":0.24,"scorecard_score":null,"scorecard_checks":{},"scorecard_scanned_at":null,"slug":"openmanus","source_note":"","public_actions":null,"mcp_server_support":{"status":"declared","confidence":"medium","evidence":["Found MCP-related server path: app/mcp/server.py","Found MCP-related server path: run_mcp_server.py"]},"external_service_dependencies":{"providers":["Amazon Bedrock","Anthropic","OpenAI"],"requires_api_keys":false,"confidence":"high","evidence":["README/docs mention OpenAI","Found OpenAI dependency 'openai' in setup.py","README/docs mention Anthropic","Found Amazon Bedrock dependency 'boto3' in requirements.txt"]},"tool_plugin_surface":{"plugin_system":"none","tool_tags":["browser","code","shell"],"confidence":"high","evidence":["README/docs mention browser capabilities","README/docs mention shell capabilities","README/docs mention code capabilities"]},"package_provenance_drift":{"status":"warning","confidence":"high","summary":"1 package source mismatch detected","evidence":["pypi package 'openmanus' points to mannaandpoem/openmanus, not foundationagents/openmanus"]},"evidence_grade":"D","coverage_grade":"B","signal_coverage":0.6,"signal_types":3,"listing_status":"listed","display_listing_status":"listed","display_status_label":"Listed","has_warning":false,"warning_reasons":[],"license_spdx":"MIT","license_type":"open","license_override":"","trust_score":20.1,"trust_score_v2":20.1,"rank_v2":326,"rank_v2_delta":-5,"trust_v2_adjustment":-6.9,"trust_confidence":0.75,"trust_breakdown":{"safety":1.2,"identity":10.8,"transparency":8.5,"maintenance":2.0,"adoption":13.5},"trust_v2_breakdown":{"mcp":0.0,"external_dependencies":-1.0,"tool_plugin_surface":-0.9,"package_provenance_drift":-5.0},"pending_signals":false},{"name":"Kodu","repo":"kodu-ai/claude-coder","display_repo":"","url":"https://github.com/kodu-ai/claude-coder","rank":327,"previous_rank":327,"rank_delta":0,"stars":5256,"stars_fmt":"5.3k","forks":198,"forks_fmt":"198","last_push":"2025-04-30","days_ago":437,"weekly_commits":0,"commits_low_confidence":false,"score":33.0,"description":"Kodu is an autonomous coding agent that lives in your IDE. It is a VSCode extension that can help you build your dream p","language":"TypeScript","open_issues":42,"category":"Coding Agents","category_rank":45,"npm_package":"","crate_package":"","pypi_package":"","weekly_downloads":null,"dl_source":"","hn_mentions_30d":null,"has_provenance":false,"npm_provenance":null,"pypi_provenance":null,"signed_commits_ratio":0.01,"scorecard_score":1.6,"scorecard_checks":{"Binary-Artifacts":10,"Branch-Protection":0,"CI-Tests":0,"CII-Best-Practices":0,"Code-Review":0,"Contributors":6,"Dangerous-Workflow":-1,"Dependency-Update-Tool":0,"Fuzzing":0,"License":9,"Maintained":0,"Packaging":-1,"Pinned-Dependencies":-1,"SAST":0,"Security-Policy":0,"Signed-Releases":-1,"Token-Permissions":-1,"Vulnerabilities":0},"scorecard_scanned_at":"2026-07-10T16:20:32Z","slug":"kodu","source_note":"","public_actions":null,"mcp_server_support":{"status":"none","confidence":null,"evidence":[]},"external_service_dependencies":{"providers":["Amazon Bedrock","Anthropic","OpenAI"],"requires_api_keys":false,"confidence":"high","evidence":["Found OpenAI dependency 'openai' in extension/package.json","Found Anthropic dependency 'anthropic' in extension/package.json","Found Amazon Bedrock dependency 'bedrock' in extension/package.json"]},"tool_plugin_surface":{"plugin_system":"marketplace","tool_tags":["browser","code","search","shell"],"confidence":"high","evidence":["README/docs mention a marketplace plugin/integration surface","Found browser dependency 'puppeteer' in extension/package.json","Found shell dependency 'execa' in extension/package.json","README/docs mention search capabilities","README/docs mention code capabilities"]},"package_provenance_drift":{"status":"not_applicable","confidence":null,"summary":"No package source configured","evidence":[]},"evidence_grade":"D","coverage_grade":"C","signal_coverage":0.4,"signal_types":2,"listing_status":"warning","display_listing_status":"warning","display_status_label":"Needs review","has_warning":true,"warning_reasons":[{"repo":"kodu-ai/claude-coder","criterion":"4.2.1","detail":"no meaningful activity in 12 months (last push 2025-04-30)"}],"license_spdx":"NOASSERTION","license_type":"open","license_override":"","trust_score":18.5,"trust_score_v2":18.5,"rank_v2":327,"rank_v2_delta":-1,"trust_v2_adjustment":-3.2,"trust_confidence":1.0,"trust_breakdown":{"safety":2.1,"identity":10.8,"transparency":9.9,"maintenance":0.0,"adoption":8.9},"trust_v2_breakdown":{"mcp":0.0,"external_dependencies":-1.0,"tool_plugin_surface":-2.2,"package_provenance_drift":0.0},"pending_signals":false},{"name":"TuriX","repo":"TurixAI/TuriX-CUA","display_repo":"","url":"https://github.com/TurixAI/TuriX-CUA","rank":328,"previous_rank":328,"rank_delta":0,"stars":3105,"stars_fmt":"3.1k","forks":319,"forks_fmt":"319","last_push":"2026-06-08","days_ago":33,"weekly_commits":0,"commits_low_confidence":false,"score":53.2,"description":"This is the official website for TuriX Computer-use-Agent","language":"Python","open_issues":4,"category":"Browser & Computer Use","category_rank":24,"npm_package":"","crate_package":"","pypi_package":"","weekly_downloads":null,"dl_source":"","hn_mentions_30d":null,"has_provenance":false,"npm_provenance":null,"pypi_provenance":null,"signed_commits_ratio":0.03,"scorecard_score":null,"scorecard_checks":{},"scorecard_scanned_at":null,"slug":"turix","source_note":"","public_actions":null,"mcp_server_support":{"status":"declared","confidence":"low","evidence":["README/docs mention MCP support"]},"external_service_dependencies":{"providers":["Anthropic","Google Gemini","OpenAI"],"requires_api_keys":true,"confidence":"high","evidence":["README/docs mention OpenAI","Found OpenAI dependency 'openai' in requirements.txt","Found Anthropic dependency 'anthropic' in requirements.txt","README/docs mention Google Gemini"]},"tool_plugin_surface":{"plugin_system":"none","tool_tags":["browser","code","search","shell"],"confidence":"high","evidence":["Found browser dependency 'playwright' in requirements.txt","README/docs mention shell capabilities","README/docs mention search capabilities","README/docs mention code capabilities"]},"package_provenance_drift":{"status":"not_applicable","confidence":null,"summary":"No package source configured","evidence":[]},"evidence_grade":"D","coverage_grade":"D","signal_coverage":0.2,"signal_types":1,"listing_status":"listed","display_listing_status":"listed","display_status_label":"Listed","has_warning":false,"warning_reasons":[],"license_spdx":"MIT","license_type":"open","license_override":"","trust_score":15.6,"trust_score_v2":15.6,"rank_v2":328,"rank_v2_delta":0,"trust_v2_adjustment":-3.2,"trust_confidence":0.5,"trust_breakdown":{"safety":0.1,"identity":10.8,"transparency":8.5,"maintenance":9.8,"adoption":8.4},"trust_v2_breakdown":{"mcp":0.0,"external_dependencies":-2.0,"tool_plugin_surface":-1.2,"package_provenance_drift":0.0},"pending_signals":false}]}