Technology & Software Engineering Top 100 / #–ARD = Agentic Resource Discovery · A2A = Agent2Agent · MCP = Model Context Protocol

Open-source project · Apache-2.0 · self-hosted

a-stock-data

A股全栈数据工具包：行情K线·当日逐笔·研报·信号·资金面·新闻·财务·公告·打板·ETF期权·舆情·宏观利率·期货大宗(含大商所日K)·事件驱动·可转债 | 15层·87端点·34数据源·除iwencai外免Key | A-share data for AI agents: K-lines, ticks, reports, fund flow, news, financials, filings, options, macro, futures, events, convertibles | 15 layers·87 endpoints·34 sources Publisher: simonlin1212.

Vendor page ↗+ CompareExport JSON

Trust profileas of 2026-10-26

Publisherlikely · Repository ownership or inferred publisher domain — repository or Hub account ownershiplikely

Complianceno evidence foundT5

SecurityNo CVE linked to this agent in the CVE registry — none linked in the products checked, not a findingnone

ProtocolsModel Context Protocol (MCP) not checked — not probed: URL is on a code host, which never carries a publisher's well-known filesAgent2Agent (A2A) not checked — not probed: URL is on a code host, which never carries a publisher's well-known filesAgentic Resource Discovery (ARD) not checked — not probed: URL is on a code host, which never carries a publisher's well-known files0 / 3

TracesNone found — nobody has published what this agent does under attacknone

Issues found0 regulator actions · 0 incidents · 0 withdrawn certificates · CVEs: see Securitylinks only

Evidence available — not a safety certification. Suitability depends on your task, deployment and permissions. Rows marked vendor-level describe simonlin1212, not this agent specifically.

Traces — under attack, in defence, in incidents

none public · what a trace is

No public trace found. Nobody has published what a-stock-data does when its inputs carry instructions it should not follow, when a tool asks for credentials, or when a task invites a destructive command. Defenders can't learn from what they can't see: run it in a sandbox before the pilot and keep the transcript, or ask the vendor to publish one.

● third-party or vendor report · ◎ this registry's own probe transcript · ⚠ data left the environment. A trace describes one version on one date; it is evidence of behaviour, never a certification. Rows marked unreviewed have not yet been checked against their source by the maintainer.

CVEs — on the official record

none linked · the registry

No CVE in the registry names this agent or its listed product. That reads "none linked in the products checked", never as a finding: a product that is not on the registry's list, or a record that names it differently, is not seen. The vendor's own advisories remain the source of truth.

Compliance evidence

4 frameworks shown

–

SOC 2

T5 Unknown

Nothing found in the sources checked.

Scope: — · registries, marketplaces, vendor pages

ask the vendor

–

ISO 27001

T5 Unknown

Nothing found in the sources checked.

Scope: — · registries, marketplaces, vendor pages

ask the vendor

–

ISO 42001

T5 Unknown

Nothing found in the sources checked.

Scope: — · registries, marketplaces, vendor pages

ask the vendor

–

CSA STAR

T5 Unknown

Nothing found in the sources checked.

Scope: — · CSA STAR Registry

ask the vendor

"Unknown" means nothing was found in the sources checked — registries, marketplaces and the vendor's own pages. It is not a finding of non-compliance; ask the vendor.

✔ found · ○ claimed · – not found · ⚠ expired, stale or revoked. Every row links to its source.Dispute or correct this dossier

GDPR, assembled from checks

GDPR● 0 found in registries or documents○ 0 vendor-claimed⚠ 0 issues linkedas of 2026-10-26

– Not foundNo Article 42 GDPR seal. "GDPR certified" is never shown without one.

☐ You checkYour lawful basis, DPIA, and whether this agent is inside the certificate scope.

News and chatter

last 90 days · linked with confidence ≥ 0.85

2026-10-11

a-stock-data: v3.10.2 — PE 消化年数修正（#58）

GitHub releases · 十五层、87 个入口、34 个来源都不变。只修 `full_valuation()` 的 PE 消化年数。 ### 修复 **`full_valuation()` 在盈利不增长时把 PE 消化年数报成 0 年（#58）** 前向 PE 高于 30x、下一年一致预期盈利持平或下降时，`digest_years` 原来返回 `0`，读起来像「已经消化到 30x」，实际是永远消化不到。同一份文档里的 `pe_digestion()` 对这种情况本来就返回无穷大，`full

Product update

2026-10-07

a-stock-data: v3.10.1 — 成交量单位更正（#57）/ 逐笔提速与盘后核对

GitHub releases · 十五层、87 个入口、34 个来源都不变，返回的数据也不变。§1.2 只改文档；§1.4 逐笔和 §13.7 期货日 K 修的是 v3.10.0 发版后补做代码复审查出的问题，§1.4 多了一个 `frame.attrs["complete"]`。 ### 修复 **§1.2 `tencent_kline()` 的成交量单位写错了：科创板是股，不是手（#57）** §1.2 的返回列、函数说明，以及「备用源速查」里的腾讯分钟 K 线字段说明，都把成交量写成「手」。 20

Product update

Headline, link and a summary attributed to the outlet. News never changes trust or domain scores.

Technology & Software Engineering score

technology profile · sar-score-2.0 · unranked

Adoption / usage23 / 30

Trust & security16 / 25

Project / product health20 / 20

Ecosystem / interoperability3 / 15

Domain expertise / fit71 / 100

Governance / compliance evidenceunknown

Docs / transparency7 / 10

Raw component / maximum, then weighted by the technology profile (adoption 30, trust 20, project 20, ecosystem 15, domain 10, governance 0, docs 5). Trust and governance are computed from the evidence on this page (vendor-level rows at half credit); the other components come from the curated workbook, whose order is the rank. Unknown components count as 0 and are never imputed.

Before you deploy

Derived from the evidence ledger. This agent is not yet in the reference set, so deployment questions (credentials, approval, data handling) are not answered here — ask the vendor.

Evidence supporting this use (0)

Nothing found in the sources checked.

Unknowns to check (3)

Your lawful basis and DPIA for the personal data the agent will process

Ask the vendor for SOC 2, ISO 27001, ISO 42001, CSA STAR evidence; none was found in the sources checked

Whether the agent exposes MCP or A2A endpoints; none were observed

Suggested restrictions for a pilot (2)

Ask for the SOC 2 report under NDA before the pilot touches customer data; none was found in the sources checked.

No public trace of this agent under adversarial input was found. Run it in a sandbox against your own prompt-injection and tool-abuse scenarios before the pilot, and keep the transcript; the enterprise edition records one.

Rules: config/deploy_rules.json. Advice for a bounded pilot, not a verdict.

Provenance

GitHubrepository signals, license

NVDsecurity (CVE keyword search)

Hacker News, GDELT, vendor feedsnews and chatter

First seen2026-10-26

Recordres_6ff0398d7ba80202

Open the full record (JSON) →