Receive a detailed risk assessment for a package or repository, including maintenance forecasts, activity health metrics, and calibration records to inform auditing decisions.
The agent queries the Anteproof API for a specific dependency (npm, PyPI, crates.io, or GitHub repo). It retrieves the latest open maintenance forecasts (e.g., probability of commits or releases in the next 90 days), 90-day activity summaries, and the entity's dependent count. The agent analyzes the plain-language signals and calibration records to determine if the dependency is healthy or at risk of abandonment, checking for any missing data or collapsed metrics.
- Category: Software development
- Effect: Read-only
- MCP servers: Anteproof MCP (https://koskamo.com/explore/anteproof-mcp)
- Source: Developer docs — Anteproof (https://api.anteproof.com/docs)
- Source quote: "One answer about a package or repository for an agent or engineer choosing or auditing a dependency: the latest open maintenance forecasts, 90 days of activity summarised, the day the entity was last velocity-scored, the plain-language signals those numbers support, and the families' own…"
- Playbook page: https://koskamo.com/explore/use-cases/assess-dependency-maintenance-risk
Prompt: Check the maintenance risk for the 'express' npm package. Provide the probability of receiving 21+ commits in the next 90 days, the probability of a release, and the current status of its activity metrics like commits and stars.