agents-tree vs DeepEval

agents-tree 63

1.2.0 on PyPI on 8 October 2026, 24 days before the check, and a commit on main on 11 October (30). Five PyPI releases between 7 and 8 October 2026 (20). Issue and pull-request replies couldn't be read, as github.com was unreachable. The bare clone shows two Dependabot branches of 28 October unmerged (5 of 25). Not an MCP server and in no official directory; herdr's plugin marketplace couldn't be read (0). No runtime dependencies, a lock file, CI on five Python versions and Dependabot for the workflow actions, with its two updates unmerged (8 of 10). 63 in all.

DeepEval 83

Python 4.2.8 was tagged on 2 October 2026, seven days before the check (30). 14 Python releases tagged since 9 August, from 4.1.6 to 4.2.8 (20). 124 commits in the 30 days to 9 October, most by three maintainers, and a Discord community. 322 issues and 387 pull requests are open and reply times were not read (14). Current official packages in Python and TypeScript, the latter at 0.9.21 on 30 September (15). A poetry.lock file and CI on pull requests. No Dependabot configuration was found and the core test workflow is failing on main (4).

agents-tree 66

Harness reading of the framework checklist, as agent-tree and superpowers were read. 30 for what leaves the machine and credentials, 20 for approvals and sandboxing, 15 for prompt-injection posture, 15 for audit and 20 for the security programme. No credentials, no network code and no runtime dependencies; PyPI releases are built by trusted publishing with no stored token and wait for a maintainer to approve the pypi environment. It reads every transcript of four agent CLIs, prompts included, and the herdr plugin runs the repository's bundled source rather than a PyPI release (26). Read-only by design. SQLite files are opened with mode=ro, nothing is written to an agent's files, and the only writes are a pane mark (directory 0700, file 0600, O_NOFOLLOW) and herdr's config block with a backup and check. It can't act on an agent (17). Control characters and escape sequences are stripped from every transcript field before a view, and the help warns that output run inside an agent lands in its context, but --json passes prompts and last messages unredacted with no note that they are untrusted (10). It keeps no state or log of its own. The detail view names each transcript's path, and herdr's config keeps a backup (8). No SECURITY.md, no security.txt and no advisories found; GitHub's security page couldn't be read. CI pins third-party actions to commit SHAs with Dependabot on them (5). 66 in all.

DeepEval 47

Local runs need no credential. Provider keys and CONFIDENT_API_KEY are read from the environment or a dotenv file, and storing keys in the legacy .deepeval/.deepeval file is deprecated in the source. Confident AI project keys take a name and an expiry and can be deactivated, rotated with a grace period or deleted. No per-permission scopes were found (20). The framework has no read-only mode. Once logged in, test runs and traces upload to Confident AI (8). Metrics pass application output to an LLM judge, and no guidance on untrusted content reaching the judge was found in the pages read (5). Each run is recorded in local JSON or SQLite. Confident AI documents audit log exports, which we did not read (7). GitHub shows no security policy and no published advisories, and security.txt answered 404 on both domains. No bug bounty was found. The Confident AI site states SOC 2 Type II and HIPAA, and its trust centre is drawn by script and was not read (7).

agents-tree 64

Framework reading, docs a model can follow, as agent-tree was read. --json writes one document with schema_version 1 and a fixed set of session, agent and detail fields, and model.py types them as dataclasses, but no JSON Schema or field reference is published (14 of 25). README, AGENTS.md and docs/demo are Markdown in the repository; no llms.txt (10). The README says what it shows and reads, has a caveats section per provider (context window inference, internal formats, how running sessions are found), and the command's help says not to run it inside an agent (15 of 20). argparse with choices for --provider and --color, positive-number checks for --window and --interval, and --json refused with --watch (10 of 15). Usage examples for every flag, key and column tables, and errors as messages on stderr with exit code 1, with few error outputs documented (10 of 15). Semver tags and a schema version, no changelog (5 of 15). 64 in all.

DeepEval 78

Read on the framework lines. The Python package ships py.typed and pydantic models, the TypeScript package ships type declarations, and the CLI is built on typer. A library has no OpenAPI file to publish (18). llms.txt on deepeval.com indexes the docs, and pages carry a Copy Markdown control (10). Each metric has its own page with required parameters and usage, and three agent skills in the repository tell a coding agent how to add evaluations and tracing (16). Typed test case and metric classes, with enums for evaluation parameters and CLI choices (12). Many runnable examples, a troubleshooting page and an environment variable reference. Error types are not listed in one place (11). Tagged releases for both packages and a public changelog by year, but the 2026 changelog stops at 4.2.0 of 25 August and has no entry for 4.2.1 to 4.2.8 (11).