Week 45, updated 2 Nov 2026

Automation & agent frameworks smolagents

Is smolagents safe?

Short answer: No issues in the code checks, but dependencies were not checked. StackGrade's weekly scan of huggingface/smolagents found no issues in the code and agent instruction files of the public repo, but there was no dependency list to check: osv-scanner found no runtime lockfile or package manifest, so the label is “No dependencies scanned”, not a passed dependency check. Automated scan of commit 96f33fa on 2 Nov 2026, not a manual audit.

Updated : the last week its score, rank or safety result changed.

Hugging Face's minimal library for agents that think in code.

  • 30,181 stars
  • pushed 29 Oct
  • Apache-2.0
  • Python

github.com/huggingface/smolagents · huggingface.co/docs/smolagents

30score out of 100

#47of 52 overall#13in Automation & agent frameworks▲ 1 vs Week 44

  • Maintenance 30%15
  • Adoption 30%18
  • Docs 20%69
  • Community 20%–
W42W43W44W45

Score over the last 4 weeks: 28, 28, 29, 30.

No dependencies scanned

Code checks clean. No runtime lockfile or manifest, so dependencies could not be checked.

How this score works

Each part is a percentile among all 52 tracked tools, so 50 is average for this list. Community is not measured yet; the score uses the other 80%.

  • Maintenance: Last push 29 Oct 2026. Last 10 GitHub releases within 322 days (about 0.8 per 30 days), latest release 29 May 2026. Median 406 h to close an issue (5 closed issues).
  • Adoption: 30,181 stars (70%), 3,185 forks (30%).
  • Docs: README 14,111 characters, 11 headings, 15 code blocks, install section: yes.

Methodology

#13 of 14 in Automation & agent frameworks

Ranked by score. The yellow row is this tool.

Automation & agent frameworks, Week 45score 0–100, safety
  1. 1n8n#3 overall70Caution
  2. 2AutoGPT#14 overall62Caution
  3. 3CrewAI#18 overall57Caution
  4. 4Dify#20 overall56Caution
  5. 5LangChain#23 overall54Caution
  6. 6Pydantic AI#31 overall46Caution
  7. 7Mastra#33 overall44No issues found
  8. 8LangGraph#34 overall44No issues found
  9. 9Agent Development Kit (ADK, Python)#36 overall43Caution
  10. 10OpenBot#39 overall41Caution
  11. 11AutoGen#41 overall40Caution
  12. 12OpenAI Agents SDK (Python)#42 overall39Caution
  13. 13smolagents#47 overall30No dependencies scanned
Show the other 1
  1. 14artemis#50 overall25Caution

Safety scan, 2 Nov 2026

Automated scan of commit 96f33fa, 176 files. Not a manual audit.

No dependencies scanned

  • –DependenciesNo runtime lockfile or manifest, so nothing to check.
  • 0Install hooksNo npm install scripts found.
  • 0Remote-code patternsFor example eval(fetch(…)).
  • 5Agent files checked0 phrases flagged for review.
  • 0curl | sh installersIn docs or program code. Information only.
Why this label?

No issues found by the code checks. osv-scanner only found 2 dev/test/docs manifests, no runtime dependencies to check. So “no issues” here does not cover dependencies.

Known vulnerabilities in runtime dependencies (OSV): 0 critical, 0 high, 0 medium, 0 low

Notes:

  • 12 affected packages only in dev/test/docs manifests, not counted

Automated scan of commit 96f33fa on 2 Nov 2026, not a manual audit. 176 files checked. What we check

Repo activity

From the GitHub API, fetched 2 Nov 2026.

  • 0Releases, 90 daysLatest v1.26.0, 29 May
  • 17dMedian issue closeOver 5 closed issues
  • 30.2kStars+125 since 26 Oct
  • 3.2kForks1,033 open issues
  • 2024Repo created5 Dec 2024
30 days ago2 Nov
0 releases in the last 30 days, one mark each (GitHub releases feed, last 10 entries).

0 releases in the last 30 days (GitHub releases feed, last 10 entries).

Questions about smolagents

Answers use this week's StackGrade data.

Is smolagents safe to use?

No issues in the code checks, but dependencies were not checked. StackGrade's weekly scan of huggingface/smolagents found no issues in the code and agent instruction files of the public repo, but there was no dependency list to check: osv-scanner found no runtime lockfile or package manifest, so the label is “No dependencies scanned”, not a passed dependency check. Automated scan of commit 96f33fa on 2 Nov 2026, not a manual audit.

How does StackGrade score smolagents?

smolagents scores 30 out of 100 in Week 45: #47 of 52 tracked tools overall and #13 in Automation & agent frameworks. The score combines maintenance (15), adoption (18) and docs (69) as percentiles among all 52 tracked tools; community (20% weight) is not measured yet, so the score uses the other 80%. It is not a hands-on test and it is separate from the safety label.

What are the alternatives to smolagents?

The highest-scored other tools in Automation & agent frameworks this week: n8n (70, Caution), AutoGPT (62, Caution), CrewAI (57, Caution), Dify (56, Caution). StackGrade has not tested them hands-on.

What licence does smolagents use?

The licence listed for huggingface/smolagents is Apache-2.0. Read the licence text before commercial use.

Compare and use it

All facts and sources
Type
Agent framework
License
Apache-2.0
Language
Python
Created
5 Dec 2024
Owner
huggingface (Organization)
Forks
3,185

GitHub description: “🤗 smolagents: a barebones library for agents that think in code.”

Sources: github.com/huggingface/smolagents, api.github.com/repos/huggingface/smolagents, raw.githubusercontent.com/huggingface/smolagents/main/README. Fetched 2 Nov 2026.

Know when smolagents changes label

One email a week: the new top 10, the biggest score changes and every safety label that changed.

Free. Double opt-in: you confirm by email first, unsubscribe in one click.