Skip to content
Yoshio NomuraContact

All work · Services and data

AgentRisk DaaS

Supply-chain risk data for AI-agent packages

  • Solo
  • March – August 2026

What it is

A risk-data API for the MCP servers, npm and PyPI packages that AI agents depend on, built from public registry and GitHub metadata.

How it works

Scheduled scraper feeding a keyed risk-data API

A scraper on a six-hourly GitHub Actions schedule pulls registry and GitHub metadata into PostgreSQL through SQLAlchemy and Alembic, and a FastAPI service behind API keys and Redis rate limiting serves it. Two indices are computed from that data — maintainer concentration and dormancy reactivation — and each returns "insufficient data" rather than a number when its inputs are missing, instead of filling the gap. A static Next.js frontend documents the API; the service is deployed on Render.