dappcore/agent

Release historycaution

This is a young package, only 56 days old, with 22 releases published on the same day and a median interval of 0 days. That rapid initial burst provides limited evidence of a settled release process.

Repo bus factorcaution

One contributor made all 156 commits in the last 3 months, creating a genuine continuity risk. Organization ownership provides some handoff capacity but does not remove the absence of a second active contributor.

Security policycaution

The repository has no published security policy, leaving vulnerability reporting and response expectations unclear for a package that coordinates agents and MCP tools.

Version stabilitycaution

Version v0.22.0 is not on a stable major version, which signals a still-evolving API; the release itself is not marked prerelease, partly reducing the concern.

Workflow auditcaution

The single analyzed workflow has read-only permissions and no untrusted checkout or script-injection findings, but all 15 action references are unpinned, weakening build reproducibility and update safety.