- Reliability 10/20
- Source structure is reasonable, with core, MCP, and CLI packages, CI workflow and test files present, but not executed. Tools claimed as 145 but no full list provided. Structured error handling exists, indicating some design for errors. However, actual runtime stability cannot be confirmed, so deduction.
- Security and permissions 14/20
- API keys stored locally, supports read-only mode, rate limiter and module filtering, but no explicit data-flow disclosure or confirmation for dangerous operations found. No malware or real secrets in install examples. Main risks visible, but permission and confirmation are incomplete.
- Maintenance 15/20
- Active project with CI badges, codecov, npm releases, changelog and contributing guide, clear MIT license. However, version governance details and dependency update strategies not fully shown, leaving room for improvement.
- Documentation 16/20
- Documentation is comprehensive, including quickstart, module docs, CLI reference, configuration guide, FAQ, security policy. Bilingual. But some limitations (like rate limit details) and cost info not fully disclosed across all docs.
- Setup experience 13/20
- Clear install guide, supports multiple clients (Claude, Cursor, etc.), interactive config wizard and one-line install script. Requires Node.js >=18, but lacks detailed platform compatibility. No verified execution evidence, so cap at 15.