By-Design Findings: Research Report

> **Date:** 2026-02-02 > **Context:** ECAP Trust Registry scores packages 0–100. Currently all findings penalize equally, causing ML/agent frameworks (llama-index, crewai, autogen) to score "caution"/"unsafe" because their core features (exec(), pickle, dynamic imports) trigger findings.