opena2a

opena2a-org

One scan for AI risk. `opena2a review` checks an AI project across credentials, shadow agents, MCP servers, and dependencies, returns a score, and routes each finding to the tool that fixes it. Open source.

Last commit

4w ago

Branch

main

Language

TypeScript

Stars

Commits (30d)

Open issues

Open PRs

Working tree

clean

1 open PR(s)

Linked todos (0)

No todos linked to this repo.

Recent commits

fix(telemetry): suppress telemetry in CI and under DO_NOT_TRACK (#240)

4w ago

chore(cli): bump hackmyagent pin 0.24.0 -> 0.25.0 + re-bake corpus goldens (#239)

1mo ago

release: @opena2a/atx-verify 0.4.0 (#238)

1mo ago

fix(release-smoke): resolve corpus parity reference from the pinned hackmyagent (#237)

1mo ago

fix(cli): init detects credential-shaped values in template env files (#227)

1mo ago

chore: point published contact email to info@opena2a.org (#235)

1mo ago

Change security contact email to info@opena2a.org

1mo ago

fix(atx-verify): release-test P3 batch — anchor-fault diagnostics, exports map, type/doc precision (#234)

1mo ago

Add `opena2a admin sensors` enrollment-inbox operator command (#224)

1mo ago

fix(atx-verify): release-test findings — verify() null guard, mldsaPresent on reject, reason wording (#233)

1mo ago

release: @opena2a/atx-verify 0.3.0 (#232)

1mo ago

atx-verify: strict-parse raw credential entry point + declaredPurpose TBS coverage (#230)

1mo ago

chore(deps): bump hackmyagent to 0.24.0 (exact) (#229)

1mo ago

fix(telemetry): point SDK default endpoint at the canonical ingest path (#225)

1mo ago

chore(deps): bump hackmyagent 0.23.6 -> 0.23.11 (#223)

1mo ago

fix(review): reconcile verdict line with composite band (#221) (#222)

1mo ago

opena2a-cli 0.10.11: bump @opena2a/aicomply 2.1.0 -> 2.2.0 (comply detects sk-ant) (#220)

1mo ago

fix(review): adoption is a recovery opportunity, not a composite penalty (#219)

1mo ago

fix(review): dominant-analyzer floor — direction-agreement verdict for #175 (#218)

1mo ago

fix(deps): bump hono and js-yaml in lockfile to clear npm audit (#217)

1mo ago

Release opena2a-cli 0.10.10

1mo ago

Add `opena2a comply` command (delegates to @opena2a/aicomply) (#216)

1mo ago

feat(atx-verify): key-to-issuer binding via optional keyId (0.1.1 -> 0.2.0) (#215)

1mo ago

chore: ship LICENSE in every sub-package, self-contained sourcemaps (#211)

1mo ago

release: @opena2a/atx-verify 0.1.1 (first OIDC/attested publish) (#214)

1mo ago