Week 45, updated 2 Nov 2026

Weekly archive Week 44

Week 44: what changed

All 52 tools re-scored on 26 Oct 2026, compared with Week 43.

Scores changed
41
Label changes
2
Tool releases, 7 days
31

Plus 5 tools relabelled to “No dependencies scanned” (scan result unchanged).

Biggest gainspoints
  1. RAGFlownow 71+6
  2. OpenHandsnow 67+6
  3. Open WebUInow 72+4
  4. MarkItDownnow 57+4
  5. KiroCrewnow 48+4
Biggest dropspoints
  1. OpenCodenow 70−13
  2. Crawl4AInow 46−6
  3. Clinenow 64−4
  4. Codexnow 56−4
  5. skill-recordernow 25−4

This week's top 10, 3 weeks of history

Score per week from our weekly history files. Yellow line = #1.

Week 42Week 43Week 4455606570758085 1. Firecrawl 782. Gemini CLI 733. Ollama 724. Open WebUI 725. n8n 726. RAGFlow 717. OpenCode 708. LobeHub 689. OpenHands 6710. Claude Code 67
  1. 1FirecrawlW42, W43, W44: 77, 79, 7878No issues found
  2. 2Gemini CLIW42, W43, W44: 70, 70, 7373Caution
  3. 3OllamaW42, W43, W44: 71, 74, 7272Caution
  4. 4Open WebUIW42, W43, W44: 69, 68, 7272Caution
  5. 5n8nW42, W43, W44: 69, 72, 7272Caution
  6. 6RAGFlowW42, W43, W44: 64, 65, 7171Caution
  7. 7OpenCodeW42, W43, W44: 81, 83, 7070Caution
  8. 8LobeHubW42, W43, W44: 76, 68, 6868Caution
  9. 9OpenHandsW42, W43, W44: 64, 61, 6767Caution
  10. 10Claude CodeW42, W43, W44: 65, 65, 6767No dependencies scanned

No tools were added since Week 43.

Top 10 as a table
#ToolUse caseScorevs Week 43SafetyStars
1FirecrawlResearch & web data78▼ 1No issues found195,395
2Gemini CLICoding agents73▲ 3Caution108,389
3OllamaLocal AI72▼ 2Caution184,784
4Open WebUILocal AI72▲ 4Caution156,767
5n8nAutomation & agent frameworks72=Caution208,612
6RAGFlowRAG, knowledge & memory71▲ 6Caution92,871
7OpenCodeCoding agents70▼ 13Caution221,625
8LobeHubLocal AI68=Caution83,494
9OpenHandsCoding agents67▲ 6Caution91,860
10Claude CodeCoding agents67▲ 2No dependencies scanned153,384

Safety label changes

  • wshobson/agentsNo issues found changed to Caution6 critical-severity known vulnerabilities in runtime dependencies (OSV)
  • MastraNo issues found changed to Caution1 critical-severity known vulnerability in runtime dependencies (OSV)
5 relabels without a scan change

Claude Code, Superpowers, awesome-mcp-servers, smolagents, MarkItDown: “No issues found” became “No dependencies scanned” because these repos have no lockfile to check.

Safety counts this week

36 tools with at least one critical-severity known vulnerability in runtime dependencies (OSV). 7 tools with an agent or skill file that tells the agent to pipe a remote script into a shell. Counts are this week's scan only; since 27 Oct 2026 each critical advisory counts once per package per tool, so totals are not compared with earlier weeks.

Full safety watch

31 tool releases in 7 days

By job.

Tools with a release this weekof tools in the job
  1. Coding agents10 / 14
  2. Agent skills & MCP4 / 9
  3. Automation & agent frameworks9 / 14
  4. Research & web data2 / 6
  5. RAG, knowledge & memory1 / 3
  6. Local AI4 / 5
  7. Media & creative1 / 1
All releases and models this week

Tracked tools (31)

Models (1)

Get this page by email every week

One email a week: the new top 10, the biggest score changes and every safety label that changed.

Free. Double opt-in: you confirm by email first, unsubscribe in one click.