{"$schema":"https://verifymcp.io/schemas/trust-report.json","schemaVersion":1,"license":{"name":"CC BY-NC 4.0","url":"https://creativecommons.org/licenses/by-nc/4.0/"},"generatedAt":"2026-11-05T16:38:54.586Z","url":"https://verifymcp.io/servers/pedroknigge-ark/ark-runtime-kernel","markdownUrl":"https://verifymcp.io/servers/pedroknigge-ark/ark-runtime-kernel.md","server":{"slug":"pedroknigge-ark","name":"io.github.pedroknigge/ark","registryName":"io.github.pedroknigge/ark","description":"Architecture co-pilot for AI TypeScript (write gate, CI, plan/loop)","registryStatus":"deprecated","deletedAt":null,"statusMessage":null,"liveness":"degraded","publisher":{"class":"unknown","claimed":false}},"component":{"slug":"ark-runtime-kernel","type":"npm","identifier":"ark-runtime-kernel","withdrawn":false,"url":"https://verifymcp.io/servers/pedroknigge-ark/ark-runtime-kernel","version":"2.0.1","transport":"stdio","scoredAt":"2026-11-05T08:42:09.511Z"},"score":{"total":26,"tier":"low","status":"scored","weekDelta":-18,"history":[{"date":"2026-11-05","total":26},{"date":"2026-11-04","total":35},{"date":"2026-11-03","total":44},{"date":"2026-11-02","total":44},{"date":"2026-11-01","total":44},{"date":"2026-10-31","total":44},{"date":"2026-10-30","total":43},{"date":"2026-10-29","total":44},{"date":"2026-10-28","total":44},{"date":"2026-10-27","total":44},{"date":"2026-10-26","total":44},{"date":"2026-10-25","total":44},{"date":"2026-10-24","total":44},{"date":"2026-10-23","total":44},{"date":"2026-10-22","total":44},{"date":"2026-10-21","total":43},{"date":"2026-10-20","total":44},{"date":"2026-10-19","total":44},{"date":"2026-10-18","total":43},{"date":"2026-10-17","total":44},{"date":"2026-10-16","total":44},{"date":"2026-10-15","total":44},{"date":"2026-10-14","total":44},{"date":"2026-10-13","total":44},{"date":"2026-10-12","total":44},{"date":"2026-10-11","total":43},{"date":"2026-10-04","total":44},{"date":"2026-10-03","total":44},{"date":"2026-10-02","total":44},{"date":"2026-10-01","total":44}]},"categories":[{"name":"Supply Chain Security","score":50,"verdict":"unverified","reasons":["No malware found by supply-chain analysis.","Known CVEs could not be checked: the version this server declares is not published in its registry.","Install-script risk not yet assessed.","Dependency health could not be checked: the version this server declares is not published in its registry."],"codes":[{"code":"supplychain.malware_clean","args":{}},{"code":"cve.inconclusive","args":{"reason":"root_version_missing"}},{"code":"installscript.inconclusive","args":{"reason":"metadata_unavailable"}},{"code":"dephealth.inconclusive","args":{"reason":"root_version_missing"}}]},{"name":"Provenance & Transparency","score":3,"verdict":"fail","reasons":["Repository check failed: the declared repository URL redirects; it must resolve directly.","Provenance check failed: the declared version isn't published, so its provenance can't be verified.","License check failed: no license is declared.","Maintenance history not yet determined.","Publishes a security disclosure policy (SECURITY.md)."],"codes":[{"code":"provenance.repo_redirected","args":{}},{"code":"provenance.version_unpublished","args":{}},{"code":"license.absent","args":{}},{"code":"maintenance.inconclusive","args":{"reason":"no_publish_times"}},{"code":"disclosure.present","args":{}}]},{"name":"Schema Quality & AI Usability","score":0,"verdict":"unverified","reasons":["Schema quality not yet verified: this package installed, but its server did not start, so we have no schema to assess."],"codes":[{"code":"schema.sandbox_failed","args":{"reason":"startup_failure","status":"unreachable"}}]},{"name":"Stability & Change Management","score":0,"verdict":"unverified","reasons":["Stability not yet verified: this package installed, but its server did not start, so we have no schema to compare."],"codes":[{"code":"stability.sandbox_failed","args":{"reason":"startup_failure","status":"unreachable"}}]},{"name":"Tool Coverage","score":0,"verdict":"unverified","reasons":["Tool coverage not yet verified: this package installed, but its server did not start, so we have no tool definitions to assess."],"codes":[{"code":"toolquality.sandbox_failed","args":{"reason":"startup_failure","status":"unreachable"}}]},{"name":"Tool Safety","score":0,"verdict":"unverified","reasons":["Tool safety not yet verified: this package installed, but its server did not start, so we have no tool text to scan."],"codes":[{"code":"toolsafety.sandbox_failed","args":{"reason":"startup_failure","status":"unreachable"}}]},{"name":"Capabilities","score":0,"verdict":"unverified","reasons":["Protocol version not yet verified: this package installed, but its server did not start, so we never saw its MCP handshake."],"codes":[{"code":"cap.sandbox_failed","args":{"reason":"startup_failure","status":"unreachable"}}]}],"inconclusive":["Known CVEs could not be checked: the version this server declares is not published in its registry.","Install-script risk not yet assessed.","Dependency health could not be checked: the version this server declares is not published in its registry.","Maintenance history not yet determined.","Schema quality not yet verified: this package installed, but its server did not start, so we have no schema to assess.","Stability not yet verified: this package installed, but its server did not start, so we have no schema to compare.","Tool coverage not yet verified: this package installed, but its server did not start, so we have no tool definitions to assess.","Tool safety not yet verified: this package installed, but its server did not start, so we have no tool text to scan.","Protocol version not yet verified: this package installed, but its server did not start, so we never saw its MCP handshake."],"malware":[],"components":[{"slug":"ark-runtime-kernel","type":"npm","identifier":"ark-runtime-kernel","withdrawn":false,"score":26,"current":true,"url":"https://verifymcp.io/servers/pedroknigge-ark/ark-runtime-kernel","markdownUrl":"https://verifymcp.io/servers/pedroknigge-ark/ark-runtime-kernel.md"}],"facts":[{"label":"Registry","value":"npm"},{"label":"Package","value":"ark-runtime-kernel"},{"label":"Version","value":"2.0.1"},{"label":"Transport","value":"stdio"}],"install":{"available":true,"bundleSha256":null},"tools":[],"toolsTruncatedAtCapture":false,"diagnostics":{"capturedAt":"2026-11-05T08:42:09.000Z","track":"package","endpoint":null,"declaredUrl":null,"truncated":false,"tls":null,"dnssec":null,"auth":null,"httpsRedirect":null,"transports":[],"provenance":{"outcome":"version_unpublished","label":"Version not published","reason":null,"reasonLabel":null,"discovery":null,"discoveryLabel":null,"sourceRepo":null,"attestationSkipped":null,"attestationSkippedLabel":null},"installScripts":[],"installScriptsTotal":null,"vulnerabilities":[],"vulnerabilitiesTotal":null,"dependencies":null},"mismatches":[],"changelog":{"trackingSince":"2026-07-26","recent":[{"id":"chg_01a1aadf-6524-7309-8c3e-cabe0b7183f0","kind":"score.total_changed","summary":"Trust score (35 → 16)","materiality":"functional","direction":"regression","scoreDelta":-19,"occurredOn":"2026-11-05","url":"https://verifymcp.io/servers/pedroknigge-ark/ark-runtime-kernel#chg-chg_01a1aadf-6524-7309-8c3e-cabe0b7183f0"},{"id":"chg_01a1a5b5-0681-7001-b87f-f51e6de64251","kind":"score.total_changed","summary":"Trust score (44 → 16)","materiality":"functional","direction":"regression","scoreDelta":-28,"occurredOn":"2026-11-04","url":"https://verifymcp.io/servers/pedroknigge-ark/ark-runtime-kernel#chg-chg_01a1a5b5-0681-7001-b87f-f51e6de64251"},{"id":"chg_01a1a091-159c-7b63-aeb3-4882d737f6ed","kind":"score.total_changed","summary":"Trust score (44 → 16)","materiality":"functional","direction":"regression","scoreDelta":-28,"occurredOn":"2026-11-03","url":"https://verifymcp.io/servers/pedroknigge-ark/ark-runtime-kernel#chg-chg_01a1a091-159c-7b63-aeb3-4882d737f6ed"},{"id":"chg_01a19b75-bdc8-7001-be97-d39d32e2c79e","kind":"check.verdict","summary":"Provenance (pass → fail)","materiality":"security","direction":"regression","scoreDelta":null,"occurredOn":"2026-11-02","url":"https://verifymcp.io/servers/pedroknigge-ark/ark-runtime-kernel#chg-chg_01a19b75-bdc8-7001-be97-d39d32e2c79e"},{"id":"chg_01a19b75-bdc9-76bd-992c-31a609d5f207","kind":"check.unverifiable","summary":"Known CVEs (pass → unverified)","materiality":"security","direction":"regression","scoreDelta":null,"occurredOn":"2026-11-02","url":"https://verifymcp.io/servers/pedroknigge-ark/ark-runtime-kernel#chg-chg_01a19b75-bdc9-76bd-992c-31a609d5f207"},{"id":"chg_01a19b75-bdc9-7c76-a58c-2bb8a0792ddf","kind":"check.unverifiable","summary":"Install scripts (pass → unverified)","materiality":"security","direction":"regression","scoreDelta":null,"occurredOn":"2026-11-02","url":"https://verifymcp.io/servers/pedroknigge-ark/ark-runtime-kernel#chg-chg_01a19b75-bdc9-7c76-a58c-2bb8a0792ddf"},{"id":"chg_01a19b75-bdca-7863-ae6e-f4d7edc7ede1","kind":"provenance.repo_changed","summary":"The attested source repository moved (pedroknigge/ark-runtime-kernel)","materiality":"security","direction":"neutral","scoreDelta":null,"occurredOn":"2026-11-02","url":"https://verifymcp.io/servers/pedroknigge-ark/ark-runtime-kernel#chg-chg_01a19b75-bdca-7863-ae6e-f4d7edc7ede1"},{"id":"chg_01a19b75-bdca-7d1c-a0b4-c4b7b878c794","kind":"check.verdict","summary":"License (pass → fail)","materiality":"functional","direction":"regression","scoreDelta":null,"occurredOn":"2026-11-02","url":"https://verifymcp.io/servers/pedroknigge-ark/ark-runtime-kernel#chg-chg_01a19b75-bdca-7d1c-a0b4-c4b7b878c794"},{"id":"chg_01a19b75-bdcb-7bb8-b5df-0537a068a3bd","kind":"check.unverifiable","summary":"Maintenance (fail → unverified)","materiality":"functional","direction":"regression","scoreDelta":null,"occurredOn":"2026-11-02","url":"https://verifymcp.io/servers/pedroknigge-ark/ark-runtime-kernel#chg-chg_01a19b75-bdcb-7bb8-b5df-0537a068a3bd"},{"id":"chg_01a19b75-bdcc-7564-b197-405ef2b4ba92","kind":"check.unverifiable","summary":"Dependency health (pass → unverified)","materiality":"functional","direction":"regression","scoreDelta":null,"occurredOn":"2026-11-02","url":"https://verifymcp.io/servers/pedroknigge-ark/ark-runtime-kernel#chg-chg_01a19b75-bdcc-7564-b197-405ef2b4ba92"},{"id":"chg_01a19b75-bdcc-7a37-a69c-9089fbcb134d","kind":"license.changed","summary":"Licence (MIT)","materiality":"functional","direction":"neutral","scoreDelta":null,"occurredOn":"2026-11-02","url":"https://verifymcp.io/servers/pedroknigge-ark/ark-runtime-kernel#chg-chg_01a19b75-bdcc-7a37-a69c-9089fbcb134d"},{"id":"chg_01a19b75-bdcc-7ec1-8ef4-89e1210800d6","kind":"score.total_changed","summary":"Trust score (44 → 16)","materiality":"functional","direction":"regression","scoreDelta":-28,"occurredOn":"2026-11-02","url":"https://verifymcp.io/servers/pedroknigge-ark/ark-runtime-kernel#chg-chg_01a19b75-bdcc-7ec1-8ef4-89e1210800d6"},{"id":"chg_01a19125-62fe-7635-9fed-12bb851c36b5","kind":"check.reverified","summary":"Security disclosure (unverified → pass)","materiality":"functional","direction":"improvement","scoreDelta":null,"occurredOn":"2026-10-31","url":"https://verifymcp.io/servers/pedroknigge-ark/ark-runtime-kernel#chg-chg_01a19125-62fe-7635-9fed-12bb851c36b5"},{"id":"chg_01a19125-62ff-7d2e-bce0-0e7847a91e99","kind":"score.total_changed","summary":"Trust score (43 → 44)","materiality":"functional","direction":"improvement","scoreDelta":1,"occurredOn":"2026-10-31","url":"https://verifymcp.io/servers/pedroknigge-ark/ark-runtime-kernel#chg-chg_01a19125-62ff-7d2e-bce0-0e7847a91e99"},{"id":"chg_01a18c3c-a362-7366-8518-b6c5326baf7c","kind":"check.unverifiable","summary":"Security disclosure (pass → unverified)","materiality":"functional","direction":"regression","scoreDelta":null,"occurredOn":"2026-10-30","url":"https://verifymcp.io/servers/pedroknigge-ark/ark-runtime-kernel#chg-chg_01a18c3c-a362-7366-8518-b6c5326baf7c"},{"id":"chg_01a18c3c-a363-7930-8477-37eb781e9f98","kind":"score.total_changed","summary":"Trust score (44 → 43)","materiality":"functional","direction":"regression","scoreDelta":-1,"occurredOn":"2026-10-30","url":"https://verifymcp.io/servers/pedroknigge-ark/ark-runtime-kernel#chg-chg_01a18c3c-a363-7930-8477-37eb781e9f98"},{"id":"chg_01a162ce-2838-7d06-a158-131d62b6fe60","kind":"check.reverified","summary":"Security disclosure (unverified → pass)","materiality":"functional","direction":"improvement","scoreDelta":null,"occurredOn":"2026-10-22","url":"https://verifymcp.io/servers/pedroknigge-ark/ark-runtime-kernel#chg-chg_01a162ce-2838-7d06-a158-131d62b6fe60"},{"id":"chg_01a162ce-283b-7e99-a6ec-09747237ecaf","kind":"score.total_changed","summary":"Trust score (43 → 44)","materiality":"functional","direction":"improvement","scoreDelta":1,"occurredOn":"2026-10-22","url":"https://verifymcp.io/servers/pedroknigge-ark/ark-runtime-kernel#chg-chg_01a162ce-283b-7e99-a6ec-09747237ecaf"},{"id":"chg_01a15d95-ae14-709d-ba9a-e3a3faace5b6","kind":"check.unverifiable","summary":"Security disclosure (pass → unverified)","materiality":"functional","direction":"regression","scoreDelta":null,"occurredOn":"2026-10-21","url":"https://verifymcp.io/servers/pedroknigge-ark/ark-runtime-kernel#chg-chg_01a15d95-ae14-709d-ba9a-e3a3faace5b6"},{"id":"chg_01a15d95-ae14-7e54-bdf2-0e9cf7b28c32","kind":"score.total_changed","summary":"Trust score (44 → 43)","materiality":"functional","direction":"regression","scoreDelta":-1,"occurredOn":"2026-10-21","url":"https://verifymcp.io/servers/pedroknigge-ark/ark-runtime-kernel#chg-chg_01a15d95-ae14-7e54-bdf2-0e9cf7b28c32"}],"truncated":true,"feedUrl":"https://verifymcp.io/servers/pedroknigge-ark/ark-runtime-kernel/changelog.json"},"links":{"html":"https://verifymcp.io/servers/pedroknigge-ark/ark-runtime-kernel","markdown":"https://verifymcp.io/servers/pedroknigge-ark/ark-runtime-kernel.md","changelogJson":"https://verifymcp.io/servers/pedroknigge-ark/ark-runtime-kernel/changelog.json","changelogRss":"https://verifymcp.io/servers/pedroknigge-ark/ark-runtime-kernel.xml","external":[{"label":"npm package","href":"https://www.npmjs.com/package/ark-runtime-kernel"},{"label":"Socket report","href":"https://socket.dev/npm/package/ark-runtime-kernel"}]}}