osint-d2

Dependency freshness

Declared = lowest version the kit's dependency file (package.json, pyproject.toml or requirements.txt) allows. Latest = the npm "latest" tag or the newest PyPI release. TypeScript, the Stripe SDK, FastAPI and other 0.x packages are shown but not counted in the verdict.

What's in the stack

Framework

FastAPI

AI

OpenAI SDK

API layer

Pydantic, Uvicorn

Detected from declared dependencies. A listed package means it's installed, not necessarily fully wired up.

What the README says you get

• AI
  Agentic ReAct loopReAct reasoning loop — the LLM decides which tools to invoke
• Deploy
  Docker deploymentOne-command deployment. Ollama sidecar for fully offline operation
• Other
  Trust anchorsDeclare known-good sources (`--trust github:user`)
• Other
  Weighted false-positive scoring4-signal weighted scoring (name 40%, bio 30%, avatar 20%, location 10%)
• Other
  Breach checkHaveIBeenPwned k-anonymity check
• Other
  SSRF-protected URL fetchExtract intelligence from any URL (SSRF-protected)
• Other
  Avatar comparisonPerceptual dHash image comparison

Extracted from the kit's README by a local AI model (deepseek-flash) on Oct 19, 2026. Every item is checked against an exact README quote; 7 unverifiable items were discarded. A README claim is the maker's description, not something we tested.