Assess dependency maintenance risk
Receive a detailed risk assessment for a package or repository, including maintenance forecasts, activity health metrics, and calibration records to inform auditing decisions.
How it works
The agent queries the Anteproof API for a specific dependency (npm, PyPI, crates.io, or GitHub repo). It retrieves the latest open maintenance forecasts (e.g., probability of commits or releases in the next 90 days), 90-day activity summaries, and the entity's dependent count. The agent analyzes the plain-language signals and calibration records to determine if the dependency is healthy or at risk of abandonment, checking for any missing data or collapsed metrics.
Prompt
Paste this into an agent that has the servers below connected. Adjust the names and dates to your own.
Check the maintenance risk for the 'express' npm package. Provide the probability of receiving 21+ commits in the next 90 days, the probability of a release, and the current status of its activity metrics like commits and stars.MCP servers it needs
Source
The vendor page this playbook is drawn from, and the passage that supports it.
One answer about a package or repository for an agent or engineer choosing or auditing a dependency: the latest open maintenance forecasts, 90 days of activity summarised, the day the entity was last velocity-scored, the plain-language signals those numbers support, and the families' own…Developer docs — Anteproof