4.36/ 5.00
trustedBeta
Mar 16, 2026 at 9:31 AM6 signals analysedNo manual reviews · fully automated
Trust Signal Breakdown
high23 sub-signals across 6 dimensions

CVEs, dependency health, and supply chain integrity

3 of 3 sub-signals with data

Known CVEs40%5.0

No known CVEs

via OSV.dev

Dependency Health30%5.0

2 dependencies (minimal)

via npm / PyPI

Supply Chain30%4.9

3 transitive CVEs found (penalty: -0.09)

via npm provenance

Uptime, latency, error rates, and incident history

4 of 4 sub-signals with data

Uptime35%5.0

100.00% over 1000 checks

via Health checks

Response Latency25%3.0

p99: 837ms, p50: 539ms

via Health checks

Error Rate20%5.0

0.00% error rate (0/1000)

via Health checks

Incident History20%2.0

5 incidents in last 90 days

via Incidents table

Commit recency, release cadence, issue response, CI/CD

4 of 4 sub-signals with data

Commit Recency30%5.0

via GitHub

Release Cadence25%5.0

via GitHub

Issue Response20%5.0

via GitHub

CI/CD Presence25%5.0

via GitHub Actions

Downloads, stars, dependents, and growth trajectory

3 of 4 sub-signals with data

Download Volume43%3.0

9,151 weekly downloads

via npm / PyPI

GitHub Stars36%5.0

21,179 stars

via GitHub

Dependent Packagesno data

Weight redistributed to sub-signals with data

Growth Trend21%1.0

-49.3% week-over-week

via npm

License, documentation, security policy, changelog

4 of 4 sub-signals with data

Open Source30%5.0

Public repo with OSI-approved license (mit)

via GitHub

Documentation25%4.0

Good README (>2000 bytes with examples)

via GitHub

Security Policy20%2.0

No SECURITY.md found

via GitHub

Changelog25%5.0

CHANGELOG.md present and releases exist

via GitHub

Track record, org maturity, community standing

4 of 4 sub-signals with data

Track Record30%4.5

Internal: 4.0 (22 services), External: 4.5 (5445 followers, 66097 stars)

via Fabric index

Org Maturity30%5.0

User account, 13.3 years old

via GitHub

Community Standing20%5.0

165 public repositories

via GitHub

Cross-Platform20%3.0

Present on 2 platform(s): github, npm

via Registry scan

About this score
Scored across 23 sub-signals in 6 dimensionsScoring engine v1 (beta) — actively being expandedPhase 1: Core sub-signal architecture (live)Phase 2: Permission scope & expanded collection (in progress)
Trust AssessmentAI Assessment

claude-flow is an MIT-licensed npm package by ruvnet that provides AI agent orchestration for Claude Code, featuring specialized agents with vector memory and MCP integration. The service shows solid operational reliability with zero vulnerabilities and minimal dependencies (only zod and semver), though adoption remains modest at 13.3K weekly downloads. Single-maintainer governance presents typical bus factor risk, but the clean dependency tree and strong uptime suggest low operational risk for teams already invested in Claude workflows.

Generated by Fabric AI · Mar 4, 2026 at 4:21 AM

Service Health (30d)
100.00%
p50: 539ms · p99: 837ms
Avg Latency
557ms
averaged across 30d health checks
Weekly Downloads
no package registry data
Incidents & Alertslast 90 days
Mar 1GitHub repository renamed4.51
Mar 1Trust score increased by 1.274.51
Mar 1Trust score decreased by 0.893.24
Feb 26Trust score increased by 1.284.13
Feb 21claude-flow added to Trust Index2.96
Showing 5 of 5 events
Score History90 snapshots
5.003.752.501.250.00
Feb 21Mar 5
Supply Chain & Dependenciestrust chain
semver
npm · ^7.6.0 · 2 CVEs2H
zod
npm · ^3.22.4 · 1 CVE1M
Showing 2 of 2 dependencies
Data Sources6 indexed
Version Historyscore per release
VERSIONRELEASEDSCOREDELTA
v3.5.15Mar 9, 20264.42
v3.5.14Mar 6, 20264.42
v3.5.7Mar 5, 20264.42
v3.5.4Mar 5, 20264.42
v3.5.3Mar 5, 20264.42
v3.0.0-alpha.79Jan 15, 2026
Showing 6 of 10 releases

Are you the publisher?

Claim this profile to unlock deeper evaluation, real-time monitoring,
and trust signals that help agents discover your service.

Share this Trust Score

Generate a scorecard image optimised for X, LinkedIn and other social platforms.

⬇ Download Score Card