{"$schema":"https://wellknown.network/schemas/agent-record-v1.json","schemaVersion":"1","id":"ag_tvszu6nbu6sm","handle":"proof-of-commitment","url":"https://wellknown.network/agents/proof-of-commitment","links":{"self":"https://wellknown.network/agents/proof-of-commitment/record.json","html":"https://wellknown.network/agents/proof-of-commitment","markdown":"https://wellknown.network/agents/proof-of-commitment/record.md","api":"https://wellknown.network/api/v1/agents/proof-of-commitment","status":"https://wellknown.network/api/v1/agents/proof-of-commitment/status","claim":"https://wellknown.network/agents/proof-of-commitment/claim","claimApi":"https://wellknown.network/api/v1/claims","badge":"https://wellknown.network/agents/proof-of-commitment/badge.svg","openapi":"https://wellknown.network/openapi.json"},"ard":{"identifier":"urn:air::server:proof-of-commitment","type":"application/mcp-server-card+json"},"kind":"mcp_server","declared":{"name":"proof-of-commitment","summary":"Supply chain security risk scorer for npm, PyPI, Cargo, and Go packages — behavioral signals that can't be faked","description":"Supply chain security risk scorer for npm, PyPI, Cargo, and Go packages — behavioral signals that can't be faked","publisher":{"name":"piiiico","url":null},"homepage":"https://getcommit.dev/audit","repository":"git+https://github.com/piiiico/proof-of-commitment.git","version":"1.36.0","license":"MIT","protocols":["mcp"],"tags":["supply-chain","supply-chain-security","security","scanner","npm","pypi","cargo","rust","golang","go","go-modules","dependencies","audit","risk","behavioral","commitment","maintainer","publisher","provenance","trusted-publishing","mcp","mcp-server","vulnerability","sca","dependency-audit","lockfile","devsecops","ci","sarif","code-scanning"],"pricing":null,"endpoints":[{"url":"npm:proof-of-commitment","type":"package_npm","auth":null,"probeable":false}],"skills":null,"tools":null,"extra":{"npmKeywords":["supply-chain","supply-chain-security","security","scanner","npm","pypi","cargo","rust","golang","go","go-modules","dependencies","audit","risk","behavioral","commitment","maintainer","publisher","provenance","trusted-publishing","mcp","mcp-server","vulnerability","sca","dependency-audit","lockfile","devsecops","ci","sarif","code-scanning"]},"attribution":{"kind":"npm","name":"npm","license":"npm","repoUrl":"npm","summary":"npm","version":"npm","description":"npm","homepageUrl":"npm","publisherName":"npm"}},"derived":{"capabilities":[{"slug":"code.security-review","name":"Security Review","confidence":1,"provenance":"declared"},{"slug":"dev.package-management","name":"Packages & Dependencies","confidence":1,"provenance":"declared"},{"slug":"security.scanning","name":"Security Scanning","confidence":1,"provenance":"declared"},{"slug":"dev.ci-cd","name":"CI/CD & Deploy","confidence":1,"provenance":"declared"}],"categories":["code","dev","security"]},"observed":{"status":"unknown","statusReason":"Distributed as a package to run locally; no network endpoint to check.","lastOkAt":null,"lastProbedAt":null,"statusComputedAt":null,"reliability30d":null,"latestObservations":[],"tools":null,"package":{"name":"proof-of-commitment","registry":"npm","observedAt":"2026-09-05T14:18:06.107Z","publishedAt":"2026-06-20T16:32:52.702Z","latestVersion":"1.36.0","weeklyDownloads":105}},"verification":{"claimed":false,"claimedAt":null,"proofs":[]},"provenance":{"sources":[{"source":"npm","key":"proof-of-commitment","url":"https://www.npmjs.com/package/proof-of-commitment","firstSeenAt":"2026-09-05T14:17:32.837Z","fetchedAt":"2026-09-05T14:17:32.837Z","normalizedAt":"2026-09-05T14:17:32.837Z"}]},"firstSeenAt":"2026-09-05T14:17:32.837Z","updatedAt":"2026-09-05T14:18:06.107Z"}