Score capped to 2.99 (raw score: 3.36) due to insufficient data in one or more signals. The composite is held at caution level until all signals can be fully evaluated.
Jun 12, 2026 at 11:01 AM6 signals analysedNo manual reviews · fully automated
Trust Signal Breakdown
medium23 sub-signals across 6 dimensions
CVEs, dependency health, and supply chain integrity
1 of 3 sub-signals with data
Known CVEs100%5.0
No known CVEs
via OSV.dev
Dependency Healthno data—
Weight redistributed to sub-signals with data
Supply Chainno data—
Weight redistributed to sub-signals with data
Uptime, latency, error rates, and incident history
Limited data available — 3 of 6 signals pending evaluation
About this score
Scored across 23 sub-signals in 6 dimensionsScoring engine v1 (beta) — actively being expandedPhase 1: Core sub-signal architecture (live)Phase 2: Permission scope & expanded collection (in progress)
Trust AssessmentAI Assessment
**dowhistle-mcp-server121** is an agent service published by godson under an unknown license with no available documentation. The service shows perfect operational uptime but fails all other trust signals including zero vulnerability scanning, no maintenance indicators, no adoption metrics, and complete absence of transparency or publisher credibility data. Without a README, license clarity, or any verifiable security posture, this service presents significant risk despite its operational availability and is not recommended for production use.
Generated by Fabric AI · Mar 4, 2026 at 4:16 AM
Package Availability (30d)
100.00%
p50: 46ms · p99: 50ms
Avg Latency
37ms
averaged across 30d health checks
Weekly Downloads
—
no package registry data
Incidents & Alertslast 90 days
Mar 5Trust score decreased by 1.141.85
Feb 24dowhistle-mcp-server121 added to Trust Index2.52