Cybersecurity toolkits · Rank #2

A

violin

Grade A: derived only from the two verdicts below. How grades work

Supervised, Hermes-native penetration testing profile with 35 routed playbooks, guarded target execution, persistent engagement state, evidence-backed findings, and release-gated reporting.

ActiveCurrent depsFree

Why this verdict

How we check →
  • 219 commits by 6 contributors in the last 90 days (143 in the last 30). receipt ↗
  • Latest release v4.0.0, 5 days ago. receipt ↗
  • On current major: Pydantic. receipt ↗

Snapshot: commit 10d802a on master, checked 2026-10-19 07:29 UTC. Receipts link to files at this exact commit.

Dependency freshness

PackageDeclaredLatestStatus
Pydantic pydantic2.0.02.14.1Current

Declared = lowest version the kit's dependency file (package.json, pyproject.toml or requirements.txt) allows. Latest = the npm "latest" tag or the newest PyPI release. TypeScript, the Stripe SDK, FastAPI and other 0.x packages are shown but not counted in the verdict.

What's in the stack

API layer
Pydantic

Detected from declared dependencies. A listed package means it's installed, not necessarily fully wired up.

What the README says you get

  • Other
    Guarded target executionScope, phase, PTT, skill, hypothesis, history, and synchronization checks run before a target command starts.
  • Other
    Evidence-backed findingsA typed submission binds each validated finding to authenticated execution receipts.
  • Other
    Guarded command executionExecute one guarded command
  • Other
    Bounded command burstsExecute a bounded command file
  • Other
    Background execution statusRead background execution status
  • Other
    Background execution cancelCancel tracked background execution
  • Other
    Batch reviewReview a completed batch and settle state
  • Other
    Target resolutionResolve the approved assessment target
  • Other
    Status and blockersExplain current tasks, skills, and blockers
  • Other
    Scope approval gateNo target interaction before scope approval and bootstrap validation.
  • Testing
    Release-gated verificationPlugin registration, schemas, skill snapshots, documentation contracts, lint, formatting, and the full test suite are release-gated.

Extracted from the kit's README by a local AI model (deepseek-flash) on Oct 19, 2026. Every item is checked against an exact README quote; 3 unverifiable items were discarded. A README claim is the maker's description, not something we tested.

Watch violin

Get told if it goes dormant, gets archived, falls further behind on a core dependency, or changes its license or price.

You'll get a confirmation email first. One click to unsubscribe. Watch as many kits as you like.

RSS feed for violin · all changes

History

Sep 29, 2026 → Oct 19, 2026. One square per check, colored by maintenance status. Hover for details.

Show as a table
DateMaintenanceDependenciesCommits (90d)
Oct 19, 2026ActiveCurrent deps219
Oct 12, 2026ActiveCurrent deps157
Sep 29, 2026ActiveCurrent deps186

Sources

Every claim on this page comes from these public records, checked . Open them to verify.

Maintainer? Add the badge

It updates automatically every time we refresh the evidence. Clicking it opens this page.

kitproof badge for violin
[![kitproof](https://kitproof.dev/badge/violin.svg)](https://kitproof.dev/kits/violin/)