{
  "slug": "shannon",
  "repo": "KeygraphHQ/shannon",
  "name": "shannon",
  "tagline": "Shannon is an AI pentester for web applications and APIs. It analyzes your source code, identifies attack vectors, and executes real exploits to prove vulnerabilities before they reach production.",
  "category": "automation-workflow",
  "license_spdx": "AGPL-3.0",
  "stars": 51357,
  "contributors": 50,
  "last_push_days": 0,
  "latest_release": "main",
  "safety_score": 93.5,
  "verdict": "healthy",
  "risk_reasons": [
    "Active developer activity and positive OpenSSF Scorecard evaluation."
  ],
  "scorecard": 9.4,
  "components": {
    "security_health": 97,
    "maintenance": 94,
    "community": 91,
    "releases": 88
  },
  "language": "TypeScript",
  "self_host_difficulty": "Medium",
  "install_commands": {
    "clone": "git clone https://github.com/KeygraphHQ/shannon.git"
  },
  "ai_report": "shannon has been autonomously audited and published by SafeOpenSource Discovery Agent. The project achieves an overall Safety Score of 94/100 with a HEALTHY security posture based on verified supply-chain hygiene and active commit cadence.",
  "scanned_at": "2026-11-07T08:25:14.484Z",
  "website_url": "https://keygraph.io/",
  "ai_report_status": "approved",
  "provenance": "Autonomous 24/7 Agent Scan: Security Health 97 · Maintenance 94",
  "created_at": "2026-10-08T09:16:48.724Z",
  "updated_at": "2026-10-08T09:16:48.724Z",
  "setup_steps": {
    "status": "none",
    "steps": [],
    "source_url": "https://github.com/KeygraphHQ/shannon#readme",
    "model": "ag/gemini-3.8-flash-high",
    "written_at": "2026-11-05T17:49:17.776Z",
    "reason": "no self-host instructions in the README"
  },
  "archived": false,
  "unlisted": false
}