Trust score
57/100
MarketNow Registry / Security / draugr
draugr
Run Trivy, Semgrep, Gitleaks and more from one file. Consolidates SAST, SCA, secrets, IaC and container findings into one SARIF report and one pass/fail gate for CI — ranked by real risk, and can fail
Security
v1.0.0
by draugr-dev
Install risk
Review advised
GitHub stars
6
Source
github
Indexed
2026-09-12
Install
$ go install github.com/draugr-dev/draugrHeuristic signals advise review before installing: young package, low adoption, stale repository, or name similarity to a popular package.
Adoption evidence: 6 GitHub stars.
How MarketNow scored this
Sentinel Index Heuristics — a security-first estimate from public signals:
- Package age and release activity (stale repositories lose points)
- Verified adoption: registry downloads or GitHub stars, not follower counts
- Typosquat distance against the 150 most-installed MCP packages
- Injection markers scanned in the package description
Heuristic, not a guarantee. For verified agent credentials and revocation, see the MarketNow Trust API.
What is draugr?
Run Trivy, Semgrep, Gitleaks and more from one file. Consolidates SAST, SCA, secrets, IaC and container findings into one SARIF report and one pass/fail gate for CI — ranked by real risk, and can fail Indexed by MarketNow with trust 57/100 (Review advised).
How do I install it?
Run $ go install github.com/draugr-dev/draugr Heuristic signals advise review before installing: young package, low adoption, stale repository, or name similarity to a popular package.
What does the trust score mean?
Security-first heuristic over public signals (age, adoption, typosquat distance, injection markers). It is not a popularity ranking and not a guarantee of safety. draugr scores 57/100.