Contributing and community
Carina core is MIT licensed. You can install from npm, clone source, and contribute without a contributor agreement.
Start here
| Resource | Link |
|---|---|
| Source (core only) | github.com/malike2356/carina-agent |
| npm package | carina-agent |
| Community hub | carinaai.uk/community |
| Questions and ideas | GitHub Discussions |
| Bugs and features | Issues |
| Conduct | CODE_OF_CONDUCT |
The private carina-ai monorepo is VERLOX internal (ops, Scout server, deploy). Contributors work in carina-agent only.
Best first contribution: a skill pack
Skill packs are the lowest barrier and highest leverage path. You add domain workflows and knowledge without changing the agent core.
- Read Creating packs
- Study
property-ukin the public repo undersrc/skills/packs/property-uk/ - Propose your pack with the skill pack issue template
- Open a PR or publish to skills.carinaai.uk
Development from source
git clone https://github.com/malike2356/carina-agent.git
cd carina-agent
pnpm install
pnpm build
pnpm test
See Getting started for Postgres, Redis, and first-run setup.
Code contributions
- Fork
carina-agent, branch frommain - Run
pnpm testandpnpm buildbefore opening a PR - One focused change per PR when possible
- Full guide: CONTRIBUTING.md
Look for issues labeled good first issue.
What to build together
| Area | Examples |
|---|---|
| Skill packs | Finance, legal, healthcare workflows (your domain expertise) |
| Tools | New MCP-compatible tools with tests |
| Gateways | Channel adapter improvements, docs for setup |
| Providers | New LLM provider wiring |
| Docs | Tutorials, troubleshooting, examples |
Commercial vs open source
| Open (MIT) | Commercial (VERLOX) |
|---|---|
carina-agent core | Carina Cloud hosted SaaS |
| Skill packs you author | Labyrinth Scout security monitoring |
| Self-host with Docker/npm | Enterprise trust and provisioning |
You can self-host Carina for free under MIT and optionally add Scout or Cloud later.
Security
Report vulnerabilities privately per SECURITY.md. Do not open public issues for security bugs.