4.15/ 5.00
trustedBeta
Mar 5, 2026 at 7:04 AM6 signals analysedNo manual reviews · fully automated
Trust Signal Breakdown
high23 sub-signals across 6 dimensions

CVEs, dependency health, and supply chain integrity

2 of 3 sub-signals with data

Known CVEs57%5.0

No known CVEs

via OSV.dev

Dependency Healthno data

Weight redistributed to sub-signals with data

Supply Chain43%4.9

3 transitive CVEs found (penalty: -0.09)

via npm provenance

Uptime, latency, error rates, and incident history

4 of 4 sub-signals with data

Uptime35%5.0

100.00% over 3 checks

via Health checks

Response Latency25%5.0

p99: 17ms, p50: 17ms

via Health checks

Error Rate20%1.0

33.33% error rate (1/3)

via Health checks

Incident History20%3.0

3 incidents in last 90 days

via Incidents table

Commit recency, release cadence, issue response, CI/CD

4 of 4 sub-signals with data

Commit Recency30%5.0

via GitHub

Release Cadence25%4.0

via GitHub

Issue Response20%1.0

via GitHub

CI/CD Presence25%5.0

via GitHub Actions

Downloads, stars, dependents, and growth trajectory

2 of 4 sub-signals with data

Download Volume55%1.0

57 weekly downloads

via npm / PyPI

GitHub Stars45%5.0

73,938 stars

via GitHub

Dependent Packagesno data

Weight redistributed to sub-signals with data

Growth Trendno data

Weight redistributed to sub-signals with data

License, documentation, security policy, changelog

4 of 4 sub-signals with data

Open Source30%5.0

Public repo with OSI-approved license (apache-2.0)

via GitHub

Documentation25%5.0

Docs site present with comprehensive README (>2000 bytes + examples)

via GitHub

Security Policy20%5.0

SECURITY.md present

via GitHub

Changelog25%4.0

Releases exist but no CHANGELOG.md

via GitHub

Track record, org maturity, community standing

4 of 4 sub-signals with data

Track Record30%4.5

Internal: 1.0 (0 services), External: 4.5 (1067 followers, 78444 stars)

via Fabric index

Org Maturity30%5.0

Organization, 5.5 years old

via GitHub

Community Standing20%3.0

10 public repositories

via GitHub

Cross-Platform20%3.0

Present on 2 platform(s): github, pypi

via Registry scan

About this score
Scored across 23 sub-signals in 6 dimensionsScoring engine v1 (beta) — actively being expandedPhase 1: Core sub-signal architecture (live)Phase 2: Permission scope & expanded collection (in progress)
Trust AssessmentAI Assessment

RAGFlow is an open-source RAG engine published by infiniflow under Apache-2.0 license, designed to enhance LLM context through retrieval-augmented generation with agent capabilities. The service shows no known vulnerabilities and maintains consistent operational uptime with transparent development practices. Adoption remains limited with only 57 weekly downloads, indicating the project is still in early community growth despite solid technical foundations.

Generated by Fabric AI · Mar 4, 2026 at 4:10 AM

Package Availability (30d)
100.00%
p50: 17ms · p99: 17ms
Avg Latency
17ms
averaged across 30d health checks
Weekly Downloads
no package registry data
Incidents & Alertslast 90 days
Mar 1Trust score increased by 0.924.16
Mar 1Trust score decreased by 1.233.24
Feb 26Trust score increased by 1.654.47
Feb 23ragflow added to Trust Index2.52
Showing 4 of 4 events
Score History90 snapshots
5.003.752.501.250.00
Feb 23Mar 2
Supply Chain & Dependenciestrust chain
click
pypi · *
pip-tools
pypi · *
pytest
pypi · *
tqdm
pypi · * · 3 CVEs2L1H
Showing 4 of 4 dependencies
Data Sources6 indexed
Version History
VERSIONRELEASED
v0.24.0Feb 10, 2026
v0.23.1Dec 31, 2025
v0.23.0Dec 27, 2025
nightlyDec 1, 2025
v0.22.1Nov 19, 2025
v0.22.0Nov 12, 2025
Showing 6 of 10 releases

Are you the publisher?

Claim this profile to unlock deeper evaluation, real-time monitoring,
and trust signals that help agents discover your service.

Share this Trust Score

Generate a scorecard image optimised for X, LinkedIn and other social platforms.

⬇ Download Score Card