Protocol Buffer encoding/decoding for **Agent-User Interaction (AG-UI) Protocol** events.
82%
Total Score
healthy
Active releases and broad repository participation outweigh a few workflow and package-identity concerns.
The repository name does not match @ag-ui/proto and its README does not mention the package, creating some uncertainty about package-to-repository ownership; the monorepo structure partly explains the name mismatch but not the absent mention.
No repository security policy was found, leaving vulnerability-reporting expectations and disclosure procedures less transparent.
All 28 workflows were analyzed with no unpinned action references or untrusted checkouts, but the audit found an archived action, an ad hoc package install, and trusted publishing; these are workflow hygiene and credential-handling concerns.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
zod Version ^3.25.76 | — | — |
@ag-ui/core Version 1.0.2 | — | — |
@bufbuild/protobuf Version ^2.2.5 | — | — |
@protobuf-ts/protoc Version ^2.11.1 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.