public evidence dossier
com.dustforge/demipass
Credential custody for agents: use secrets blind (ssh/http/smtp/git/db), never in context.
Latest visible observation: 2026-08-30T22:30:41.080Z
Identity
namespacedomain · observed 2026-07-07T06:04:54.268516Z
registry statusactive · observed 2026-07-07T06:04:54.268516Z
origin systemsadoption, github, npm, osv, registry · observed 2026-08-30T22:30:41.080Z
Distribution
repositoryhttps://github.com/bildow/demipass · observed 2026-07-07T15:08:43.719250+00:00
npm packagedemipass · observed 2026-07-07T15:08:43.719250+00:00
PyPI packageUnknown
hosted endpointUnknown
Maintenance and public findings
repository pushed2026-08-14T00:10:21Z · observed 2026-08-14T00:10:21Z
repository archivedNo · observed 2026-07-07T15:08:43.719250+00:00
npm deprecatedNo · observed 2026-07-07T15:08:43.719250+00:00
OSV package advisoryNone on record · observed 2026-07-07T15:08:43.719250+00:00
Hosted liveness
last endpoint observationUnknown
reported MCP revisionUnknown
Limits
This dossier reports public evidence. It is not a safety, code, permission, scope, runtime, or penetration-test verdict. Missing evidence remains unknown.