watchtower

Dependency freshness

Declared = lowest version the kit's dependency file (package.json, pyproject.toml or requirements.txt) allows. Latest = the npm "latest" tag or the newest PyPI release. TypeScript, the Stripe SDK, FastAPI and other 0.x packages are shown but not counted in the verdict.

What's in the stack

Database / ORM

SQLAlchemy

AI

LangChain, LangGraph

API layer

Pydantic

Detected from declared dependencies. A listed package means it's installed, not necessarily fully wired up.

What the README says you get

• AI
  Multi-agent architecturea team of specialized agents reasons through the engagement
• AI
  LLM-agnostic providersswap between OpenAI, Google Gemini, OpenRouter, and dozens of other providers
• AI
  Custom LLM endpointsany custom HTTP endpoint
• Data
  SQLite state storageuses local `SQLite` to store a historical record of observations and findings
• Other
  23 security tools23 security tools integrated via Python subprocess wrappers
• Other
  Interactive tool selectioninteractive checklist and highlights which of the 23 tools are installed
• Other
  Authenticated pentestingsupports authenticated workflows via session cookies or custom headers
• Other
  PDF report exportExport all findings to a cleanly formatted PDF without re-running the pentest

Extracted from the kit's README by a local AI model (deepseek-flash) on Oct 19, 2026. Every item is checked against an exact README quote; 6 unverifiable items were discarded. A README claim is the maker's description, not something we tested.