- Reliability 7/20
- The README documents a stdio startup flow with connectivity probing and a detailed table of behaviors for all 17 tools, which is specific and checkable. However, this static review had no access to actual repository files (test suites, CI workflow definitions) — only README-cited build/test scripts and CI/Codecov badges, which count as unverified self-reported evidence. There is no way to confirm that key paths (e.g., dual C64U/VICE backend switching, firmware-version-gated endpoint fallbacks) are actually covered by committed tests. Per the static calibration rule, reliability cannot exceed 12 without verifiable execution evidence; given the significant evidence gap, 7 is assigned.
- Security and permissions 10/20
- Secret handling looks reasonably careful — C64U_PASSWORD and GITHUB_TOKEN are both marked isSecret, and the config file lookup/merge order is clearly documented. However, several high-impact operations are directly callable with no confirmation gate: c64_system's poweroff/reboot/power_cycle, c64_config's reset_defaults/save_flash, and c64_debug's nuclear_reset all lack any confirm-style parameter, relying entirely on the client to gate them. In VICE mode, operations like run_prg read host-local file paths, crossing into host filesystem territory. The optional RAG feature can use GITHUB_TOKEN against GitHub with an undocumented scope. None of this rises to red-line malware/exfiltration territory, but least-privilege scoping and confirmation for destructive actions are clearly incomplete, warranting 10.
- Maintenance 11/20
- The repo is GPL-2.0 licensed, not archived, published to npm at version 1.0.2, and claims CI plus Codecov integration, indicating some engineering process is in place. But with only 33 stars and 1 open issue, and no verifiable commit history, release cadence, or issue-response data available in this review, long-term sustainability and governance rigor cannot be established, so a middling 11 is given.
- Documentation 17/20
- Documentation quality is strong: the README is organized into config file order/merge rules, a per-backend (C64U/U2/VICE) capability comparison, an environment variable reference table with defaults and JSON config key mappings, explicit firmware-version dependency notes, and an auto-generated full inventory of tools/resources/prompts with per-operation required/optional inputs and a platform support matrix. Concrete client setup examples (VS Code, Claude Code, Cursor) are also included. Points are deducted for lacking a consolidated 'known limitations/troubleshooting' section — firmware-dependency caveats (e.g., machine:input) are scattered through the body rather than centralized — so 17 rather than full marks.
- Setup experience 13/20
- The README supplies Node 24+ install steps across platforms, three startup paths (npx / local npm install / source build), one-click install badges with JSON configs for multiple mainstream clients, and detailed backend-selection/override rules — the overall path looks clear. However, this static review found no verifiable execution logs or integration tests proving these install paths actually work, and per the static calibration rule setup cannot exceed 15 without such evidence. The setup also depends on external factors like firmware versions and VICE binary auto-detection, adding real-world fragility, so 13 is assigned.