4.47/ 5.00
trustedBeta
Sep 16, 2026 at 3:32 PM6 signals analysedNo manual reviews · fully automated
Trust Signal Breakdown
high23 sub-signals across 6 dimensions

CVEs, dependency health, and supply chain integrity

3 of 3 sub-signals with data

Known CVEs40%5.0

No known CVEs

via OSV.dev

Dependency Health30%5.0

2 dependencies (minimal)

via npm / PyPI

Supply Chain30%4.8

32 transitive CVEs found (penalty: -0.25)

via npm provenance

Uptime, latency, error rates, and incident history

4 of 4 sub-signals with data

Uptime35%5.0

99.90% over 1000 checks

via Health checks

Response Latency25%2.0

p99: 1016ms, p50: 506ms

via Health checks

Error Rate20%4.0

0.10% error rate (1/1000)

via Health checks

Incident History20%3.0

2 incidents in last 90 days

via Incidents table

Commit recency, release cadence, issue response, CI/CD

4 of 4 sub-signals with data

Commit Recency30%5.0

via GitHub

Release Cadence25%5.0

via GitHub

Issue Response20%3.0

via GitHub

CI/CD Presence25%5.0

via GitHub Actions

Downloads, stars, dependents, and growth trajectory

3 of 4 sub-signals with data

Download Volume43%3.5

17,661 weekly downloads

via npm / PyPI

GitHub Stars36%5.0

72,559 stars

via GitHub

Dependent Packagesno data

Weight redistributed to sub-signals with data

Growth Trend21%2.0

-8.2% week-over-week

via npm

License, documentation, security policy, changelog

4 of 4 sub-signals with data

Open Source30%5.0

Public repo with OSI-approved license (mit)

via GitHub

Documentation25%5.0

Docs site present with comprehensive README (>2000 bytes + examples)

via GitHub

Security Policy20%5.0

SECURITY.md present

via GitHub

Changelog25%5.0

CHANGELOG.md present and releases exist

via GitHub

Track record, org maturity, community standing

4 of 4 sub-signals with data

Track Record30%5.0

Internal: 4.0 (21 services), External: 5.0 (11446 followers, 176384 stars)

via Fabric index

Org Maturity30%5.0

User account, 13.8 years old

via GitHub

Community Standing20%5.0

218 public repositories

via GitHub

Cross-Platform20%3.0

Present on 2 platform(s): github, npm

via Registry scan

About this score
Scored across 23 sub-signals in 6 dimensionsScoring engine v1 (beta) — actively being expandedPhase 1: Core sub-signal architecture (live)Phase 2: Permission scope & expanded collection (in progress)
Trust AssessmentAI Assessment

claude-flow is an MIT-licensed npm package by ruvnet that provides AI agent orchestration for Claude Code, featuring specialized agents with vector memory and MCP integration. The service shows solid operational reliability with zero vulnerabilities and minimal dependencies (only zod and semver), though adoption remains modest at 13.3K weekly downloads. Single-maintainer governance presents typical bus factor risk, but the clean dependency tree and strong uptime suggest low operational risk for teams already invested in Claude workflows.

Generated by Fabric AI · Mar 4, 2026 at 4:21 AM

Service Health (30d)
99.90%
p50: 506ms · p99: 1016ms
Avg Latency
552ms
averaged across 30d health checks
Weekly Downloads
no package registry data
Incidents & Alertslast 90 days
Sep 13claude-flow added to Trust Index4.56
Jul 11claude-flow added to Trust Index4.60
Mar 1GitHub repository renamed4.51
Mar 1Trust score increased by 1.274.51
Mar 1Trust score decreased by 0.893.24
Feb 26Trust score increased by 1.284.13
Showing 6 of 7 events
Score History90 snapshots
5.003.752.501.250.00
Feb 21Mar 5
Supply Chain & Dependenciestrust chain
@claude-flow/cli-core
npm · 3.7.0-alpha.5
@claude-flow/codex
npm · 3.0.3
@claude-flow/mcp
npm · 3.0.0-alpha.10
@claude-flow/neural
npm · 3.0.0-alpha.9
@claude-flow/plugin-agent-federation
npm · 1.0.0-alpha.18
@claude-flow/security
npm · 3.0.0-alpha.14
Showing 6 of 26 dependencies
Data Sources6 indexed
Version Historyscore per release
VERSIONRELEASEDSCOREDELTA
v3.42.0Sep 15, 20264.46
v3.41.4Sep 14, 20264.46
v3.41.3Sep 14, 20264.46
v3.41.2Sep 10, 20264.46
v3.41.1Sep 10, 20264.46
v3.41.0Sep 10, 20264.46
Showing 6 of 10 releases

Are you the publisher?

Claim this profile to unlock deeper evaluation, real-time monitoring,
and trust signals that help agents discover your service.

Share this Trust Score

Generate a scorecard image optimised for X, LinkedIn and other social platforms.

⬇ Download Score Card