Safety rating · all kinds

com.rightshold/rightshold

Score 53/100 — Moderate public signals

Automated checks of public signals as of the date shown. Not a security audit, certification or endorsement, and not a statement about the people who maintain the project. Signals can be incomplete or out of date; each check shows its evidence and source so anyone can verify it.

Checks

• Authentication posture (as documented publicly) — Partly found (7.5/15): The public record documents an authentication requirement (api_key_or_other).
• Safety documentation: tool annotations, access scope, injection notes — Partly found (4/12): Tool annotations or read-only markers in public documentation: not documented. Access scope terms: permission, scope. Prompt-injection / untrusted-input notes: none found.
• License recorded (OSI-approved) — Not found (0/10): No license is recorded in the registry entry or the public repository metadata checked.
• Known advisories for the backing package (OSV) — Not applicable: The registry entry names no backing package, so there is no package version to query against OSV.
• Listing activity (version recency and count) — Partly found (8/10): Most recent listed version 13 day(s) before the check; 2 version(s) listed.
• TLS posture of the remote endpoint (passive) — Found (8/8): A passive TLS handshake to the recorded remote host succeeds; the certificate is valid until 2027-01-06.
• Registry documentation completeness — Partly found (6/8): Recorded in the registry entry: description present, repository absent, website/docs linked, transport named.