@openiap/core
AMCP server package @openiap/core
Install
agr install @openiap/core --target claudeThis artifact does not publish files for Claude.
Document
{ "name": "@openiap/core", "version": "1.5.11.124", "description": "Easy orchestration of data, code and automation tools.\r Also the "backend" for OpenRPA", "main": "index.js", "scripts": { "test": "_mocha 'src/test//*.test.ts'", "build": "tsc --build tsconfig.json", "coverage": "nyc ./node_modules/.bin/_mocha 'test//*.test.ts'", "compose": "gulp compose", "latest": "gulp latest", "updateapilocal": "npm uninstall @openiap/nodeapi && npm i ../nodeapi", "updateapidev": "npm uninstall @openiap/nodeapi && npm i openiap/nodeapi", "updateapi": "npm uninstall @openiap/nodeapi && npm i @openiap/nodeapi", "updatejsapi": "npm uninstall @openiap/jsapi && npm i openiap/jsapi#esm", "ncu": "npx -y npm-check-updates", "spec": "tsoa spec", "routes": "tsoa routes", "generate": "tsoa spec && tsoa routes", "copypublic": "rm -rf public && cp -r ../openflow-web/dist/ public", "linkpublic": "rm -rf public && ln -s /mnt/data/vscode/config/workspace/code/openflow-web/dist /mnt/data/vscode/config/workspace/code/openflow/public", "copypublic2": "rm -rf public && cp -r ../core-web/build/ public", "linkpublic2": "rm -rf public && ln -s /mnt/data/vscode/config/workspace/code/core-web/build /mnt/data/vscode/config/workspace/code/openflow/public", "inspector": "npx @modelcontextprotocol/inspector " }, "repository": { "type": "git", "url": "git+https://github.com/open-rpa/openflow.git" }, "publishConfig": { "access": "public" }, "author": "OpenIAP ApS / Allan Zimmermann", "license": "MPL-2.0", "bugs": { "url": "https://community.openiap.io/" }, "type": "module", "homepage": "https://github.com/open-rpa/openflow", "funding": "https://github.com/sponsors/skadefro", "dependencies": { "@kubernetes/client-node": "0.21.0", "@modelcontextprotocol/sdk": "^1.9.0", "@node-saml/passport-saml": "4.0.1", "@openiap/cloud-git-mongodb": "1.0.39", "@openiap/jsapi": "github:openiap/jsapi#esm", "@openiap/nodeapi": "0.0.41", "@openiap/openflow-api": "2.1.12", "@opentelemetry/api-logs": "0.57.1", "@opentelemetry/exporter-logs-otlp-grpc": "0.57.1", "@opentelemetry/exporter-metrics-otlp-grpc": "0.57.1", "@opentelemetry/exporter-metrics-otlp-http": "^0.57.1", "@opentelemetry/exporter-trace-otlp-http": "^0.57.1", "@opentelemetry/sdk-node": "0.57.1", "amqplib": "0.10.4", "bcryptjs": "2.4.3", "cache-manager": "5.2.3", "cache-manager-ioredis-yet": "1.2.2", "compression": "1.7.4", "cookie-parser": "1.4.6", "cookie-session": "2.1.0", "dockerode": "3.3.4", "dotenv": "16.4.5", "express": "4.19.2", "global-agent": "^3.0.0", "got": "11.8.5", "hjson": "3.2.2", "ip": "2.0.1", "jose": "2.0.6", "json-stable-stringify": "1.0.2", "jsondiffpatch": "0.4.1", "jsonpath-plus": "7.2.0", "jsonwebtoken": "8.5.1", "mimetype": "0.0.8", "mongodb": "4.11.0", "multer": "1.4.2", "multer-gridfs-storage": "5.0.2", "nodemailer": "6.9.14", "oidc-provider": "6.31.0", "openid-client": "5.3.0", "pako": "2.1.0", "passport": "0.5.3", "passport-google-oauth20": "2.0.0", "passport-local": "1.0.0", "passport-openidconnect": "0.1.1", "pidusage": "3.0.2", "rate-limiter-flexible": "2.4.1", "request": "2.88.2", "saml20": "0.1.14", "samlp": "6.0.2", "showdown": "2.1.0", "swagger-ui-express": "4.6.3", "systeminformation": "5.22.11", "tsoa": "5.1.1", "tsx": "4.16.0", "web-push": "3.6.7", "ws": "8.17.1", "xml2js": "0.4.23" }, "devDependencies": { "@testdeck/mocha": "0.3.3", "@types/amqplib": "0.10.5", "@types/mocha": "10.0.7", "@types/node": "20.14.9", "@types/passport": "1.0.16", "gulp": "4.0.2", "gulp-shell": "0.8.0", "mocha": "10.5.2", "nyc": "17.0.0", "typescript": "4.8.4", "wtfnode": "0.10.0" } }
Trustgrade A
- passBody integrity
Whether the stored document is plausibly the kind of file the artifact declares, rather than something fetched by mistake.
- warnType matchbest-effort: server code not analyzed
Whether the artifact is really the kind of thing its metadata claims it is.
- passFreshness
How long since the source repository was last pushed to.
- passPrompt injection
Scans the artifact's own text for instructions aimed at your agent rather than at you.
- passLicense
Whether the source repository declares an SPDX license permissive enough to redistribute.
How the grade is calculated
Each check contributes 0 points when it passes, 1 when it warns, and 2 when it fails. The total maps to a letter:
- Aevery check passed
- Bone warning
- Ctwo warnings
- Dprompt injection or body integrity failed, or three warnings
- Fone of those failed, and something else is wrong
These are automated hygiene checks, not a security audit, and not a dependency or vulnerability scan. A grade of A means nothing was flagged — not that the artifact is safe.
Versions
git-d0d1318933b12026-08-06