@dagucloud/dagu
A powerful Workflow Orchestration Engine with simple declarative YAML API. Zero-dependency, single binary for Linux, macOS, and Windows.
6
Versions
GPL-3.0
License
Yes
Install Scripts
Verified
Provenance
Supply chain provenance
Status for the latest visible version.
SLSA provenance attestation
npm registry signatures
gitHead linked
Maintainers
yottahmd
Keywords
workflowautomationorchestrationdagpipelineschedulertask-runnerworkflow-enginedevopsci-cd
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| install-scripts | install-script:postinstall | AI (install-scripts): Postinstall extracts platform-specific prebuilt binary from optional deps; standard binary distribution pattern. | ai | |
| semgrep | semgrep:child-process-import | AI (semgrep): child_process used in install.js for binary extraction/setup; consistent with prebuilt binary distribution. | ai | |
| phantom-deps | phantom-dep:tar | AI (phantom-deps): tar is a declared dependency used in install.js for binary extraction; phantom-dep heuristic is a false positive here. | ai |