FlowiseAI/Flowise (opens in a new tab)
Probably fine
Probably fine. Read the warnings first.
Build AI Agents, Visually
What should I do?
We found no malware tricks, but it misses some signs of a well-run project. Read the warning signs, and download it only from its official GitHub page.
Warning signs 1
Runs code during install Good to know
package.json runs "husky install" the moment you install it.
Why this grade?
It scored 84 out of 100. 70 to 84 is a B. Open a row to see what we checked.
Do people trust it?, 30 out of 30 points
Good: Stars. 55,516 people starred it.
Stars are like bookmarks. Malware repos rarely have many real users, and lots of stars means lots of people have looked at it. Stars can be bought, so we also check how fast they came.
Good: Forks. 25,070 copies made by other developers.
A fork is a copy another developer made to build on. Real projects get copied; fake ones rarely do.
Good: Owner history. Organization created 3.6 years ago.
Scammers use brand-new accounts that get banned and replaced. An owner who has been around for years has more to lose.
Is anyone looking after it?, 13 out of 25 points
Poor: Recent updates. The owner archived it. Nobody fixes problems anymore.
Software nobody updates stops getting security fixes.
Good: Track record. Repo is 3.6 years old.
Older projects have had more time for problems to be spotted and reported.
Good: Releases. Publishes versioned releases.
A release is an official, finished version. Without one, you download whatever is in the code that day.
Is it open about itself?, 15 out of 15 points
Good: License. Uses the NOASSERTION license.
A license says whether you're allowed to use it. Serious projects almost always have one.
Good: Instructions. Has a README that explains the project.
A README explains what the project does and how to use it. Malware often has a thin or copied one.
Good: Security contact. Tells people how to report security problems.
A security policy tells people how to report problems privately, so they get fixed before attackers use them.
Any malware tricks?, 26 out of 30 points
Good: 1 warning sign. Each one is explained under Warning signs.
We look for tricks that keep showing up in malware: requests to turn off antivirus, locked zip files, cracks and free premium, hidden code, and AI instruction files that try to take over your assistant. Serious ones cap the grade, however popular the repo is.
Checked Oct 22, 2026. We re-check this repo every night. A grade is a set of warning signs, not a guarantee. How we score