ai-trust

opena2a-org

Trust check for AI packages before you install them. ai-trust check <pkg> returns a 0-100 score from the OpenA2A Registry, covering security scans, advisories, and community consensus. For MCP servers, A2A agents, skills, and LLM packages.

Last commit

3w ago

Branch

main

Language

TypeScript

Stars

Commits (30d)

Open issues

Open PRs

Working tree

clean

Linked todos (0)

No todos linked to this repo.

Recent commits

ci(parity): bump SHA to pick up check-registered-ai-pypi 3-way (opena2a-parity#11) (#56)

3w ago

chore: bump @opena2a/cli-ui pin to 0.5.1 + Node 24 actions (#55)

3w ago

ci(parity): bump SHA to pick up check-registered-ai-pypi fixture (opena2a-parity#10) (#54)

3w ago

ci(parity): bump SHA to pick up scan-soul-hardened fixture (opena2a-parity#9) (#53)

3w ago

fix(check): strip pip:/npm: ecosystem prefix + thread through (closes #50) (#52)

3w ago

ci(parity): bump SHA to pick up secure-empty-dir fixture (opena2a-parity#8) (#51)

3w ago

ci(parity): bump SHA to pick up check-not-found fixture (opena2a-parity#7) (#49)

3w ago

docs: add STATUS.md (stable) and status badge (#47)

3w ago

ci(parity): point uses: at opena2a-standards/opena2a-parity (org move) (#48)

3w ago

chore(deps): audit fix - qs DoS + ip-address chain (#46)

3w ago

feat(telemetry): pass semanticSuccessCodes [2] per [CHIEF-CSR-018] + [CHIEF-CPO-022] (0.7.2) (#45)

3w ago

chore(telemetry): migrate to @opena2a/telemetry 0.2.0 successFromExitCode helper (#44)

3w ago

chore(release): bump version to 0.7.1 (#43)

1mo ago

docs(readme): mirror AIM README structure (#42)

1mo ago

fix(telemetry): treat exit 1 as success (verdict-below-threshold ≠ failure) (#41)

1mo ago

docs: add tests badge + SLSA provenance verification (#40)

1mo ago

feat(help): two-bucket telemetry disclosure on --help (#39)

1mo ago

release-smoke: --scan-path flag + [private] harness + identity-guard hardening (#38)

1mo ago

feat(check): rich-context block for skill: / mcp: + Tier-1 telemetry + AI-TRUST-1 (0.7.0) (#37)

1mo ago

docs(testing): add release-smoke walkthrough (#36)

1mo ago

feat(check): 0.6.0 — consume @opena2a/check-core@0.2.0 + round 2 buildNotFoundOutput ride-along (#35)

1mo ago

feat(check): consume @opena2a/check-core@0.1.0 (CA-034 M3) (#34)

1mo ago

feat(ai-trust): consume @opena2a/cli-ui@0.3.0 primitives (CA-034 M2) (#33)

1mo ago

release: ai-trust 0.3.1 — @opena2a/registry-client@0.1.0 consume (CA-034 M1) (#32)

1mo ago

feat: migrate to @opena2a/registry-client@0.1.0 (#31)

1mo ago