Is patchwork-os safe to use?

patchwork-os has 1 known vulnerabilities on the latest version (1.1.0-beta.4). DepScope rates its health at 40/100 (high risk).

What is the latest version of patchwork-os?

The latest version of patchwork-os is 1.1.0-beta.4, released 2026-07-17.

Does patchwork-os have known vulnerabilities?

Yes. patchwork-os has 1 known vulnerabilities. See depscope.dev/pkg/npm/patchwork-os for details.

Is patchwork-os deprecated?

No, patchwork-os is actively maintained. Latest release: 1.1.0-beta.4 (2026-07-17).

What are alternatives to patchwork-os?

Popular alternatives to patchwork-os in npm include: ?, semver, minimatch, ansi-styles, brace-expansion.

What license does patchwork-os use?

patchwork-os is licensed under MIT.

patchwork-os

npmv1.1.0-beta.4

Your personal AI runtime, local-first. Patchwork OS gives any AI model a consistent set of tools, YAML recipes, a delegation policy with approval queue, and a durable trace memory — all on your machine, all under your policy.

License MITpermissive546 versions1 maintainers12 deps4,470 weekly dl

Oolab-labs/patchwork-os

/ 100

Health

do not use

patchwork-os has critical vulnerabilities — do not use

Moderate health score (40/100) — verify manually
1 critical vulnerabilities

Health breakdown0 – 100

25/25

maintenance

6/20

popularity

15/25

security

15/15

maturity

2/15

community

Vulnerabilities

1 critical

Advisories (1)

Severity	ID	Summary	Fixed in
critical	MAL-2026-10744	Malicious code in patchwork-os (npm)	—

Bundle & TypeScript

🌟

TypeScript

10/10typed

bundled

Health History

Dependency Tree

License Audit

Dependencies (12)

ws ajv yaml undici ipaddr.js minimatch node-cron @opentelemetry/api @opentelemetry/resources @opentelemetry/sdk-trace-node @opentelemetry/semantic-conventions @opentelemetry/exporter-trace-otlp-http

API access

Get this data programmatically — free, no authentication.

curl https://depscope.dev/api/check/npm/patchwork-os