Package Health

@agentclientprotocol/sdk

The Agent Client Protocol (ACP) is a protocol that standardizes communication between *code editors* (interactive programs for viewing and editing source code) and *coding agents* (programs that use generative AI to autonomously modify code).

Latest 1.7.0NPMNPM

84%

Total Score

healthy

Healthy release with active maintenance and verified publishing, despite a broad app-token permission in the publish workflow.

Health Score Breakdown

Repo bus factorcaution

One contributor made 87.5% of recent commits, which is concentrated, but two additional contributors were active and the repository is organization-owned, providing some handoff capacity.

Security policycaution

No repository security policy was found, leaving vulnerability-reporting expectations less explicit; this is a transparency gap but not an abandonment signal.

Workflow auditcaution

All workflows were analyzed, all nine action references are pinned, and no untrusted checkout or script-injection paths were found. However, the publish workflow has a high-confidence finding that an app token inherits blanket installation permissions, plus a low-confidence hygiene issue from installing a package outside a lockfile.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Direct Dependencies

No direct dependencies.

Weekly Downloads

Info

Last Published
7 days ago
Created
12 months ago
Unpacked Size
5.9 MB

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform