- Reliability 8/20
- README lists six tools, an error-scenario table, and a fallback discovery chain; the description is internally coherent. However, this static review has no server source, no committed tests, and no verifiable CI run logs to confirm declared tools match behavior. The npm package is only a launcher requiring the .NET 10 SDK plus an external dotMemory CLI download, adding fragile multi-step startup. No verifiable execution evidence, so reliability stays below the 12 cap at 8.
- Security and permissions 8/20
- No malicious indicators, but notable weaknesses: automatic network download and execution of JetBrains binaries on first use (verification mechanism not shown); Docker path requires --pid=host and SYS_PTRACE, well beyond least privilege; heap snapshots expose target-process memory with no data-boundary disclosure; no explicit confirmation flow for privileged operations. No red-line violation, but incomplete scoping/confirmation, score 8.
- Maintenance 10/20
- MIT license, version 2.1.2 dual-published on npm and NuGet, a CI badge, and 1 open issue indicate an active project; but no evidence of release cadence, dependency-update policy, or a security-response channel. Governance gaps keep this at 10.
- Documentation 14/20
- Documentation is fairly complete: install paths, prerequisites, platform matrix, cache location, fallback chain, error troubleshooting table, rule table, config examples, usage examples, and Docker limitations. Deductions: tool parameter details are missing, the hosted deployment link (Fronteir AI) is unaudited and possibly misspelled, and rule-engine accuracy has no supporting evidence. Score 14.
- Setup experience 11/20
- Multiple install paths (npx, dnx, Claude Code plugin, dotnet tool, Docker) with client JSON config examples make setup clear, but the hard .NET 10 SDK requirement, the launcher-only npm package, the multi-step dotMemory CLI handling, and a complex Docker route with platform caveats add fragility. Score 11.