Install payload
Install payload is mixed and needs spot-checking.
73% (8/11)
Privacy notes filter active — add entries to compare trust side by side.
11 results in this view
2 trust signals differ in this sample: Source provenance, Submitter
Signals differ on Source provenance, Submitter — add entries to compare before you install.
Rollout signal scan
Biggest gaps: metadata review, package integrity. 0 entries have 2+ required gaps.
Install payload
Install payload is mixed and needs spot-checking.
73% (8/11)
Adoption queue
3/11 visible results are in hold tier and need mitigation before adoption.
1 blockers: Metadata review
50/100
Request metadata review from maintainers or internal owners.
Collect package checksum or signed artifact information.
rules/ai-generated-insecure-deserialization-review-rules · trust review · confidence 67%
1 blockers: Metadata review
50/100
Request metadata review from maintainers or internal owners.
Collect package checksum or signed artifact information.
hooks/api-endpoint-documentation-generator · trust review · confidence 67%
1 blockers: Metadata review
50/100
Request metadata review from maintainers or internal owners.
Collect package checksum or signed artifact information.
agents/buf-protobuf-api-review-agent · trust review · confidence 67%
1 blockers: Metadata review
50/100
Request metadata review from maintainers or internal owners.
Collect package checksum or signed artifact information.
mcp/dagu-mcp-server · trust review · confidence 67%
1 blockers: Metadata review
50/100
Request metadata review from maintainers or internal owners.
Collect package checksum or signed artifact information.
agents/dynamic-workflow-migration-planner-agent · trust review · confidence 67%
1 blockers: Metadata review
50/100
Request metadata review from maintainers or internal owners.
Collect package checksum or signed artifact information.
hooks/github-actions-workflow-validator · trust review · confidence 67%
1 blockers: Metadata review
50/100
Request metadata review from maintainers or internal owners.
Collect package checksum or signed artifact information.
hooks/kubernetes-manifest-validator · trust review · confidence 67%
1 blockers: Metadata review
50/100
Request metadata review from maintainers or internal owners.
Collect package checksum or signed artifact information.
hooks/package-lock-risk-detector-hook · trust review · confidence 67%
Decision confidence
3/11 results are low-confidence and need review before adoption.
Address Metadata review, Package integrity before broader rollout.
54/100
rules/ai-generated-insecure-deserialization-review-rules · trust review
Address Metadata review, Package integrity before broader rollout.
54/100
hooks/api-endpoint-documentation-generator · trust review
Address Metadata review, Package integrity before broader rollout.
54/100
agents/buf-protobuf-api-review-agent · trust review
Address Metadata review, Package integrity before broader rollout.
54/100
mcp/dagu-mcp-server · trust review
Address Metadata review, Package integrity before broader rollout.
54/100
agents/dynamic-workflow-migration-planner-agent · trust review
Address Metadata review, Package integrity before broader rollout.
54/100
hooks/github-actions-workflow-validator · trust review
Address Metadata review, Package integrity before broader rollout.
54/100
hooks/kubernetes-manifest-validator · trust review
Address Metadata review, Package integrity before broader rollout.
54/100
hooks/package-lock-risk-detector-hook · trust review
Freshness distribution
Median age 52 days; 8 fresh, 3 aging or stale of 11 scanned.
Oldest entries in this view
Theme distribution
42 distinct themes with no dominant one. Most common: automation, workflows, claude-code.
42 distinct themes across 11 scanned
Open-source workflow engine for AI coding agents that runs YAML-defined development processes with deterministic phases, isolated git worktrees, validation gates, and integration with Claude Code and other AI assistants.
Built-in Streamable HTTP MCP server for Dagu that lets AI agents read workflow state, inspect DAG specs and logs, preview or apply workflow changes, and start, enqueue, retry, or stop DAG runs.
Source-backed rules for reviewing AI-generated code that deserializes data before merge for insecure deserialization risk, covering native serialization formats (pickle, PyYAML, Java Serializable) that can execute arbitrary code on untrusted input, safe data-interchange alternatives, and class allowlisting/integrity checks when native formats can't be avoided.
PostToolUse hook that extracts JSDoc and pydoc comments from modified API endpoint files and generates OpenAPI 3.1.0-compatible YAML documentation on every save.
Validates Kubernetes YAML manifests for syntax and best practices when modified.
Validates GitHub Actions workflow files for syntax errors and best practices.
Free open-source, config-driven LLM fine-tuning framework covering full and parameter-efficient fine-tuning (LoRA, QLoRA), preference tuning (DPO, KTO, ORPO), and reinforcement learning across many model families through declarative YAML configs.
Community reusable agent prompt for migrating teams to Claude Code dynamic workflows using official workflows documentation: audit phases, YAML or config migration steps, validation gates, and rollback planning for large codebase automation.
Apache-2.0 dbt engine for transforming warehouse data with SQL models, Jinja, YAML configs, tests, documentation, lineage, metadata, and build artifacts.
PostToolUse hook that flags risky package-lock.json, yarn.lock, and pnpm-lock.yaml edits: missing lockfile updates, unexpected registry hosts, and dependency count spikes before merge.
Source-backed agent for reviewing typed Protobuf and gRPC API contract changes with Buf breaking-change evidence, lint results, buf.yaml policy, BSR schema checks, generated-code impact, consumer compatibility, and rollout decisions.