loopgantt.com D

Rated from the outside, unasked, from the public census — the way a credit bureau rates a borrower. Every number here recomputes from a sealed board you can verify yourself.

Standing

rank #4971 of 6,896

score 0.3097 · 26.2th percentile · cohort median 0.3322

Grade is percentile standing within the 6,896 rated operators, not an absolute pass. The whole economy scores low on these dimensions today — the top operator sits at 0.739.

Rail position

NEITHER

probed for an A2A agent card and none was served, and advertises no machine-payable rail — unreachable to an agent that wants to pay or negotiate

A2A probe 2026-10-19 covered 6,896 hosts · 1,175 advertise an agent card · x402 advertised by 303

No dated surface-change finding at or above CLASS_SUSPENDED_CRITICAL on this host.

Behavioral exposure (crime-watch)

No dated tool-behavior exposure recorded for this host in our live MCP probing as of 2026-10-06. That is not an attestation that the endpoint is clean — only endpoints that answered tools/list at both ends of a window can be compared.

Dependency floor exposure — 13 flagged

This host's 1 measured server transitively depends on 90 packages that sit beneath ~80% of the measured MCP ecosystem, of which 13 have a single maintainer and no release in 5+ years. Closure measured 2026-10-06.

package	ecosystem reach	maintainers	dormant
`@hono/node-server`	70.96%	1	0y	actively published
`@modelcontextprotocol/sdk`	—	—	—	actively published
`accepts`	—	—	—	actively published
`ajv`	—	—	—	actively published
`ajv-formats`	—	—	—	actively published
`body-parser`	—	—	—	actively published
`bytes`	—	—	—	actively published
`call-bind-apply-helpers`	—	—	—	actively published
`call-bound`	—	—	—	actively published
`content-disposition`	—	—	—	actively published
`content-type`	—	—	—	actively published
`cookie`	—	—	—	actively published
`cookie-signature`	—	—	—	actively published
`cors`	—	—	—	actively published
`cross-spawn`	—	—	—	actively published
`debug`	—	—	—	actively published
`depd`	70.21%	1	8y	sole maintainer, dormant 5y+
`dunder-proto`	—	—	—	actively published
`ee-first`	—	—	—	actively published
`encodeurl`	—	—	—	actively published
`es-define-property`	—	—	—	actively published
`es-errors`	—	—	—	actively published
`es-object-atoms`	70.51%	1	0.4y	actively published
`escape-html`	70.21%	1	11.1y	sole maintainer, dormant 5y+
`etag`	—	—	—	actively published
`eventsource`	—	—	—	actively published
`eventsource-parser`	70.55%	1	0y	actively published
`express`	—	—	—	actively published
`express-rate-limit`	—	—	—	actively published
`fast-deep-equal`	69.39%	1	6.4y	sole maintainer, dormant 5y+
`fast-uri`	—	—	—	actively published
`finalhandler`	—	—	—	actively published
`forwarded`	—	—	—	actively published
`fresh`	—	—	—	actively published
`function-bind`	—	—	—	actively published
`get-intrinsic`	—	—	—	actively published
`get-proto`	—	—	—	actively published
`gopd`	—	—	—	actively published
`has-symbols`	—	—	—	actively published
`hasown`	—	—	—	actively published
`hono`	70.24%	1	0y	actively published
`http-errors`	—	—	—	actively published
`iconv-lite`	—	—	—	actively published
`inherits`	70.28%	1	7.3y	sole maintainer, dormant 5y+
`ip-address`	69.19%	1	0y	actively published
`ipaddr.js`	70.21%	1	0.2y	actively published
`is-promise`	—	—	—	actively published
`isexe`	70.55%	1	0.7y	actively published
`jose`	70.76%	1	0.1y	actively published
`json-schema-traverse`	69.35%	1	5.8y	sole maintainer, dormant 5y+
`json-schema-typed`	69.02%	1	0y	actively published
`math-intrinsics`	—	—	—	actively published
`media-typer`	—	—	—	actively published
`merge-descriptors`	—	—	—	actively published
`mime-db`	—	—	—	actively published
`mime-types`	—	—	—	actively published
`ms`	—	—	—	actively published
`negotiator`	—	—	—	actively published
`object-assign`	—	—	—	actively published
`object-inspect`	—	—	—	actively published
`on-finished`	—	—	—	actively published
`once`	71.38%	1	10.1y	sole maintainer, dormant 5y+
`parseurl`	—	—	—	actively published
`path-key`	70.6%	1	5.5y	sole maintainer, dormant 5y+
`path-to-regexp`	—	—	—	actively published
`pkce-challenge`	70.5%	1	0.7y	actively published
`proxy-addr`	—	—	—	actively published
`qs`	—	—	—	actively published
`range-parser`	—	—	—	actively published
`raw-body`	—	—	—	actively published
`require-from-string`	69.39%	1	8.5y	sole maintainer, dormant 5y+
`router`	—	—	—	actively published
`safer-buffer`	70.39%	1	8.5y	sole maintainer, dormant 5y+
`send`	—	—	—	actively published
`serve-static`	—	—	—	actively published
`setprototypeof`	70.21%	1	7.3y	sole maintainer, dormant 5y+
`shebang-command`	70.53%	1	7.1y	sole maintainer, dormant 5y+
`shebang-regex`	70.53%	1	5.2y	sole maintainer, dormant 5y+
`side-channel`	70.24%	1	0.4y	actively published
`side-channel-list`	70.24%	1	0.5y	actively published
`side-channel-map`	—	—	—	actively published
`side-channel-weakmap`	—	—	—	actively published
`statuses`	—	—	—	actively published
`toidentifier`	—	—	—	actively published
`type-is`	—	—	—	actively published
`vary`	—	—	—	actively published
`which`	—	—	—	actively published
`wrappy`	71.38%	1	10.4y	sole maintainer, dormant 5y+
`zod`	74.45%	1	0y	actively published
`zod-to-json-schema`	69.07%	1	0.6y	actively published

A host's own published packages are excluded — a package cannot be its own transitive risk. Exposure, not accusation: this asserts no vulnerability and no wrongdoing by anyone. Method, criterion and negative controls →

The five dimensions, against the cohort

Dimension	This node	Percentile	Cohort median	Top decile
Reach how much of the measured tool surface this operator serves	0.0989	tied with 6,733 (98%)	0.0989	0.0989
Payment readiness advertises a machine-payable rail (x402)	0.0000	tied with 6,593 (96%)	0.0000	0.0000 (only 2 distinct values exist)
Surface stability tool surface did NOT change under an unchanged version string	1.0000	tied with 5,121 (74%)	1.0000	1.0000
Maturity serves a version string at all, and keeps it coherent	0.2000	27th	0.3500	1.0000
Self-identification names itself in its own server info	0.5000	tied with 6,896 (100%)	0.5000	0.5000 — constant across all 6,896 operators, so it cannot affect anyone's rank

Weights: Reach 0.3 · Payment readiness 0.25 · Surface stability 0.2 · Maturity 0.15 · Self-identification 0.1. Observable facts behind them: 1 endpoint(s) · median 4 tools · declares a version · does not self-identify · 0 silent change(s) across stable windows.

Known weakness in this rating: Self-identification carries 10% of the weight and has exactly one value across all 6,896 operators — that share of every score is a constant and changes no ranking. Published rather than hidden; it is the next fix to the model, not a property of this operator.

Is this your node?

Claim it and the dossier is yours free, permanently. We do not charge the operator — see why.

Disagree with it?

Then recompute it. The board is sealed and public, the method is published, and the dimensions above are arithmetic over it — there is no judgement call to argue with and no appeal to make to us.

Verify the source →

Board captured 2026-10-19T13:40:07Z · file scoreboard-2026-10-19T13-40-07-530Z.json

Rank #4,971 of 6,896 — show it

This badge is generated live from the sealed board, so it updates itself when the census refreshes. It is free, it needs no account, and claiming is not required to use it.

Markdown (README)

[![StillOS rating: D, rank 4971 of 6896](https://stillosdigitalholdings.com/ratings/badge/loopgantt.com.svg)](https://stillosdigitalholdings.com/ratings/n/loopgantt.com)

HTML (website)

<a href="https://stillosdigitalholdings.com/ratings/n/loopgantt.com"><img src="https://stillosdigitalholdings.com/ratings/badge/loopgantt.com.svg" alt="StillOS rating: D, rank 4971 of 6896"></a>

The badge states percentile standing in a measured population. It is not a security audit and does not certify this node is safe — the same caveat it carries in its own alt text, so embedding it cannot overstate what we measured.

All 6,896 rated operators · How this is computed · What this costs (nothing, for you) · this dossier as JSON