Vestige
io.github.samvallad33/vestige
Local-first memory for AI agents that reaches backward to find a failure's root cause.
AGPL-3.0medium
98.8
/ 100 activity
rank #89
How this score was reached
Every point is accounted for below. The weights are published on the methodology page and come from the same code that computes them.
recency
35 / 35
Last pushed 0 days ago, within the 30-day full-marks window.
responsiveness
20 / 20
6 open issues against 613 stars (ratio 0.01; full marks at or below 0.10, zero at 1.00 or above).
cadence
15 / 15
Registry entry updated 0 days ago, within the 90-day release window.
community
13.8 / 15
613 stars and 14 contributors, log-scaled so large outliers do not dominate.
metadata
15 / 15
Publisher metadata has OSI-approved licence (AGPL-3.0), a substantive description, a declared repository link.
Risk flags
Static observations from published metadata. Nothing is installed or executed, and these are deliberately kept out of the score above.
medium
Package runs an install script
The published package defines postinstall script, which run on the installing machine before the server is started.
Native modules legitimately need this. It is flagged because it is also the usual supply-chain exfiltration vector — review the script, do not assume malice.
Score over time
2 readings, oldest first. Latest 98.8.
Registry record
- Repository
- https://github.com/samvallad33/vestige
- Version
- 2.6.0
- Licence
- AGPL-3.0
- GitHub
- 613 stars · 63 forks · 6 open issues · 14 contributors
- Last push
- Packages
- npm: vestige-mcp-server@2.6.0
- Registry updated
- First indexed
Something wrong here? This index reads public registry and GitHub data; if a record is stale or misattributed, email contact@klars.ai.