gawrys/counterparty-ai

Optional AI-assisted risk research subsystem for counterparty-verification. Advisory only; never decides hard pass/fail.

Latest v0.1.2

Packagist

72%

Total Score

caution

Usable with caveats: one contributor and six unpinned workflow actions limit long-term resilience and build reproducibility.

Health Score Breakdown

Maintainers

Only one registry account has publish access. That is a modest operational resilience concern for a user-owned project, although repository activity shows the same maintainer is actively publishing and committing.

Project backing

The repository is owned by an individual user rather than an organization, so the single-maintainer and single-contributor concentration is not offset by visible organizational backing.

Repo bus factor

One contributor made all four commits in the last three months, giving the project a bus factor of one and increasing continuity risk if that maintainer becomes unavailable.

Version stability

Version v0.1.2 is not a stable-major release, so its API may still change. It is not marked as a prerelease, which partly offsets that concern.

Workflow audit

All three workflows were analyzed with no reported audit findings or untrusted checkouts. However, all six action references are unpinned and one workflow grants top-level write permissions, creating reproducibility and mildly broader-token concerns.