- Reliability 8/20
- Evidence is limited to the manifest and README; no source, tests, or CI were supplied. The described happy path (session_start/remember/session_end, 5 default tools) is plausible and the design is detailed. Deductions: no executable verification, no committed tests or CI in scope, and the manifest version 3.4.32 conflicts with a README reference to v3.4.37 features, so confidence is reduced.
- Security and permissions 10/20
- No red lines triggered: no real tokens in install examples, no covert exfiltration indicators, and default local-only storage is disclosed. Optional network paths (Supabase, OpenAI, Telegram) are mentioned, with claims of scrubbed egress and owner-gated rule edits. Deductions: source was not reviewed, so least privilege, confirmation flows for dangerous operations, and actual data-flow boundaries cannot be verified.
- Maintenance 12/20
- Positive signals: MIT license, versioned npm packages, changelog, docs, 28 open issues, repo not archived, contributing guide. Deductions: no commit history, release dates, dependency-update evidence, or issue-response metrics were provided, and no security-response channel is documented, so full marks are not justified.
- Documentation 13/20
- README is layered and detailed: install instructions for multiple clients, SDK/CLI examples, architecture, 5-layer model, command reference, benchmark caveats, and links to fuller documentation. Deductions: exact MCP tool parameter schemas and authentication/troubleshooting details are not fully present in the supplied material, and the v3.4.32/v3.4.37 inconsistency is a documentation defect.
- Setup experience 14/20
- Setup is well documented: copy-paste commands for Claude Code, Cursor, VS Code, Windsurf, Codex, generic JSON, SDK, and CLI, plus a skill install. The steps are few and target mainstream clients. Deductions: no committed CI or tests were provided to verify the path, and no install troubleshooting section is present, so the score stays below the 15 cap.