{
  "slug": "trilium",
  "repo": "TriliumNext/Trilium",
  "name": "Trilium",
  "tagline": "Build your personal knowledge base with Trilium Notes",
  "category": "notes-wiki",
  "license_spdx": "AGPL-3.0",
  "stars": 38728,
  "contributors": 50,
  "last_push_days": 0,
  "latest_release": "main",
  "safety_score": 92.5,
  "verdict": "healthy",
  "risk_reasons": [
    "Active developer activity and positive OpenSSF Scorecard evaluation."
  ],
  "scorecard": 9.3,
  "components": {
    "security_health": 96,
    "maintenance": 94,
    "community": 89,
    "releases": 86
  },
  "language": "TypeScript",
  "self_host_difficulty": "Medium",
  "install_commands": {
    "clone": "git clone https://github.com/TriliumNext/Trilium.git"
  },
  "website_url": "https://triliumnotes.org",
  "ai_report": "### Autonomous Evaluation Report: Trilium\n\n**Category:** notes-wiki | **Self-Host Difficulty:** Medium | **Safety Score:** 93/100 (HEALTHY)\n\n#### 1. Architecture & Maintenance Cadence\nTrilium is an active open-source software project tracked under `TriliumNext/Trilium`. Maintenance telemetry scores 94/100 and community trust scores 89/100 based on repository activity and contributor adoption. The codebase is distributed under the `AGPL-3.0` open-source license.\n\n#### 2. Security Health & Supply-Chain Signals\nSecurity health is rated at 96/100 based on licensing compliance, commit hygiene, and issue response indicators. Release cadence discipline is evaluated at 86/100.\n\n#### 3. Key Observations & Operational Risk\n- **Clean:** No critical unpatched vulnerabilities, dormant maintainers, or restrictive licensing flags detected.\n\n#### 4. Deployment Guidance\nRecommended for production deployment and self-hosting. Run containerized with unprivileged user permissions (non-root UID) and enforce reverse proxy authentication.",
  "ai_report_status": "approved",
  "scanned_at": "2026-11-07T08:28:31.305Z",
  "unlisted": false,
  "archived": false,
  "advisories_count": 0,
  "provenance": "Autonomous Heuristic Audit: Security Health 96 · Maintenance 94",
  "use_cases": [
    "Deploy Trilium in secure environments",
    "Integrate with developer and agent workflows"
  ],
  "audience": {
    "perfectFor": [
      "DevSecOps teams",
      "Homelab administrators",
      "Software engineers"
    ],
    "skipIf": [
      "Teams requiring proprietary vendor warranties"
    ]
  },
  "setup_steps": {
    "status": "ok",
    "steps": [
      {
        "title": "Get the repository and dependencies",
        "detail": "Clone the repository, enter the project directory, and install the project dependencies.",
        "command": "git clone https://github.com/TriliumNext/Trilium.git\ncd Trilium\npnpm install"
      },
      {
        "title": "Start the application server",
        "detail": "Launch the Trilium Notes server.",
        "command": "pnpm run server:start"
      },
      {
        "title": "Open the application",
        "detail": "Open your web browser and navigate to http://localhost:8080."
      }
    ],
    "source_url": "https://github.com/TriliumNext/Trilium#readme",
    "model": "ag/gemini-3.8-flash-high",
    "written_at": "2026-11-05T18:27:37.001Z"
  }
}