🎩 You're Invited:Meet the Socket team at Black Hat in Las Vegas, August 3-6.RSVP
Sign In

@absolutejs/agent-reputation

Package Overview
Dependencies
Maintainers
1
Versions
7
Alerts
File Explorer

Advanced tools

Socket logo

Install Socket

Detect and block malicious and high-risk dependencies

Install

@absolutejs/agent-reputation

Evidence-based scoped AI agent reputation with W3C Verifiable Credentials 2.0 adapters.

Source
npmnpm
Version
0.2.1
Version published
Weekly downloads
258
-68.57%
Maintainers
1
Weekly downloads
 
Created
Source

@absolutejs/agent-reputation

Portable, evidence-based reputation for AI agents without a gameable universal trust score.

Reputation is always assessed for an explicit scope. Evidence has a stable subject and issuer, bounded value and confidence, issuance and expiration, optional receipt digest, verification status, and revocation state. Assessment uses a neutral Bayesian prior, time decay, configurable issuer trust, and a cap per issuer so one party cannot inflate a score by repeating claims.

import { createAgentReputation } from "@absolutejs/agent-reputation";
import {
  agentReputationDrizzleSchema,
  createDrizzleAgentReputationStore,
} from "@absolutejs/agent-reputation/drizzle";

const reputation = createAgentReputation({
  store: createDrizzleAgentReputationStore({ db }),
  verifyEvidence: (evidence) => verifyIssuerReceipt(evidence),
  issuerWeights: { "did:web:certifier.example": 1 },
});

await reputation.record(signedConformanceEvidence);
const assessment = await reputation.assess(
  "https://agents.example/calendar",
  "calendar.scheduling",
);

Include agentReputationDrizzleSchema in the host's normal Drizzle migrations. The package-owned RC4 store works with Postgres providers including Neon, generates insert/select TypeBoxes, and uses a Bun-portable JSONB codec. The structural SQL adapter remains available for compatibility.

Unsigned or unverifiable evidence is denied by default. allowUnverified is an explicit local-development escape hatch. Revoked and expired evidence is never scored, evidence from each issuer is capped, old evidence decays, and evidence from one scope is never silently reused in another.

createAgentReputationCredential() maps an assessment to the W3C Verifiable Credentials Data Model 2.0. Signing and verification remain adapters so callers can use the W3C JOSE/COSE Recommendation, Data Integrity proofs, SD-JWT, a DID stack, or an enterprise trust service without provider lock-in. The package publishes a stable remote JSON-LD context at https://absolutejs.github.io/agents/contexts/reputation/v1.json.

Standards:

License

MIT

FAQs

Package last updated on 24 Jul 2026

Did you know?

Socket

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Install

Related posts