PraisonAI
io.github.MervinPraison/praisonai
AI Agents Framework with Self Reflection and MCP support
unverified activityno licencehigh
9.0
/ 100 activity
rank #54,181
How this score was reached
Every point is accounted for below. The weights are published on the methodology page and come from the same code that computes them.
recency
0 / 35
No GitHub repository data available, so push recency could not be verified.
responsiveness
0 / 20
No GitHub repository data available, so issue activity could not be assessed.
cadence
0 / 15
Registry entry updated 325 days ago, past the 90-day window, so this signal is reduced.
community
0 / 15
No GitHub repository data available, so community size could not be measured.
metadata
9 / 15
Publisher metadata has no detected licence, a substantive description, a declared repository link.
Risk flags
Static observations from published metadata. Nothing is installed or executed, and these are deliberately kept out of the score above.
high
Known vulnerability GHSA-26mh-57q7-jfvr
praisonai@2.3.42: PraisonAI vulnerable to Remote Code Execution via Broken AST Sandbox
Matched by package version against public advisory data. Verify whether your configuration is actually affected.
high
Known vulnerability GHSA-2763-cj5r-c79m
praisonai@2.3.42: PraisonAI Vulnerable to OS Command Injection
Matched by package version against public advisory data. Verify whether your configuration is actually affected.
high
Known vulnerability GHSA-29w3-p9w9-wc47
praisonai@2.3.42: PraisonAI: Arbitrary File Read/Write via `multiedit` Tool Without Path Validation
Matched by package version against public advisory data. Verify whether your configuration is actually affected.
high
Known vulnerability GHSA-2g3w-cpc4-chr4
praisonai@2.3.42: PraisonAI Vulnerable to Implicit Execution of Arbitrary Code via Automatic `tools.py` Loading
Matched by package version against public advisory data. Verify whether your configuration is actually affected.
high
Known vulnerability GHSA-2gpf-2492-q9jh
praisonai@2.3.42: PraisonAI: Call API localhost-only authentication bypass via spoofed Host header
Matched by package version against public advisory data. Verify whether your configuration is actually affected.
Score over time
12 readings, oldest first. Latest 9.0.
Registry record
- Repository
- https://github.com/MervinPraison/PraisonAI
- Version
- 2.3.42
- Licence
- none detected
- Activity data
- Not available — the repository is not on GitHub, or could not be read. Activity signals score zero rather than being guessed at.
- Packages
- pypi: praisonai@2.3.42
- Registry updated
- First indexed
Something wrong here? This index reads public registry and GitHub data; if a record is stale or misattributed, email contact@klars.ai.