Evaluation report
Warningsdashclaw-platform · mcpdc89c19· 3 months ago
Every check MetaHub ran on this artifact, grouped by area. Static checks run on the source at publish time; behavioral checks run the artifact in a sandbox and judge what it actually does.
Structural
5 passedRepository is reachable
https://github.com/ucsandman/DashClaw @ dc89c19 — ★ 284 · TypeScript · MIT · last push today
Manifest detected
kind=mcp slug=dashclaw-platform · source=package.json
Slug is URL-safe
"dashclaw-platform" matches /^[a-z0-9][a-z0-9-]{0,62}$/
Slug is unique within kind
No collision found for mcp/dashclaw-platform
Version is semver
5.3.0
Documentation
5 passedDescription quality
16 words · 135 chars — "Decision infrastructure for AI agents — governance runtime with policy enforceme…"
README is present and substantial
26,798 chars · 13 sections · 8 code blocks
Tags / topics declared
18 total — agent-framework, agent-governance, agent-runtime, ai-agents, ai-governance, ai-infrastructure (+12)
README has usage / example sections
found: Quick start
Homepage / docs URL declared
https://www.dashclaw.io/
Safety
3 passedDependencies: known vulnerabilities
OSV.dev clean — 0 high/critical across 18 deps
LICENSE file at repo root
LICENSE
No sensitive files in the repo
scanned for .env, credentials.json, *.pem, .ssh/, AWS / GCP configs — none found
Kind-specific
4 passed1 warningMCP: ESM packagewarn
package.json missing "type": "module"
Modern MCP servers are ESM. Add `"type": "module"` unless you have a CJS-only reason.
MCP: launch path
scripts.start
MCP: @modelcontextprotocol/sdk in dependencies
pinned at "^2.0.0-alpha.2"
MCP: SDK version pinned
pinned at "^2.0.0-alpha.2"
MCP: server surface
0 tools
Maintenance
3 passedRecent activity
last push today
Tests detected
8 test directories · 431 test files
CI configuration detected
GitHub Actions (13 workflows)
Behavioral
This artifact hasn't produced behavioral results yet: the evaluation sandbox couldn't run it (it may need credentials we don't provide, or a build our environment doesn't support). That's a limitation of our environment, not a verdict on the artifact.