← Back to search

@bulkhead-ai/server

GitHub Actions Scanned 4h ago

Bulkhead guardrails HTTP REST and MCP server

npm ↗
D
40 / 100

Versions

No versions found.

PermissionsTool SafetyAuthAnnotationsCode QualityStabilitySpecVuln HistoryAuthorTransparencyCommunity

Tools 3

bulkhead_scan
annotations: none low

Scan text for PII, secrets, prompt injection, and system prompt leakage. Returns detections with confidence scores and entity types.

text string
bulkhead_redact
annotations: none low

Scan text and return a redacted version with sensitive content replaced by [REDACTED-TYPE] placeholders.

text string
bulkhead_configure
annotations: none low

Enable or disable specific guards at runtime. Returns the current guard configuration.

enabled boolean

Permissions 3

network medium
Server uses network capabilities via: fetch()
filesystem low
Server uses filesystem capabilities via: open(), pathlib, shutil
env_vars low
Server uses env_vars capabilities via: process.env

Scan Findings 117

low
Tool 'bulkhead_scan' has no annotations annotation_checker · 100%
low
Tool 'bulkhead_redact' has no annotations annotation_checker · 100%
low
Tool 'bulkhead_configure' has no annotations annotation_checker · 100%
info
Sandbox failed to start for behavioral verification behavioral_verifier · 100%
medium
Vulnerable dependency: tsup@8.0.0 (GHSA-3mv9-4h5g-vhg3) dependency_analyzer · 95%
medium
Vulnerable dependency: vitest@1.2.0 (GHSA-5xrq-8626-4rwp) dependency_analyzer · 95%
medium
Vulnerable dependency: vitest@1.2.0 (GHSA-9crc-q9x8-hgqq) dependency_analyzer · 95%
medium
Vulnerable dependency: @modelcontextprotocol/sdk@1.29.0 (GHSA-6qxp-vccf-f47h) dependency_analyzer · 95%
medium
Vulnerable dependency: fastify@5.0.0 (GHSA-444r-cwp2-x5xf) dependency_analyzer · 95%
medium
Vulnerable dependency: fastify@5.0.0 (GHSA-4mh8-r7rc-xpvc) dependency_analyzer · 95%
medium
Vulnerable dependency: fastify@5.0.0 (GHSA-667r-xxjv-c9mm) dependency_analyzer · 95%
medium
Vulnerable dependency: fastify@5.0.0 (GHSA-9q9j-q6p8-xq58) dependency_analyzer · 95%
medium
Vulnerable dependency: fastify@5.0.0 (GHSA-hwr6-493r-vm6h) dependency_analyzer · 95%
medium
Vulnerable dependency: fastify@5.0.0 (GHSA-jx2c-rxcm-jvmq) dependency_analyzer · 95%
medium
Vulnerable dependency: fastify@5.0.0 (GHSA-mg2h-6x62-wpwc) dependency_analyzer · 95%
medium
Vulnerable dependency: fastify@5.0.0 (GHSA-mrq3-vjjr-p77c) dependency_analyzer · 95%
medium
Vulnerable dependency: fastify@5.0.0 (GHSA-p68q-wchp-6fh7) dependency_analyzer · 95%
medium
Vulnerable dependency: fastify@5.0.0 (GHSA-w2qp-rph6-63g4) dependency_analyzer · 95%
medium
Vulnerable dependency: esbuild@0.20.0 (GHSA-67mh-4wv8-2f99) dependency_analyzer · 95%
medium
Vulnerable dependency: torch@2.0 (GHSA-3749-ghw9-m3mg) dependency_analyzer · 95%
medium
Vulnerable dependency: torch@2.0 (GHSA-53q9-r3pm-6pq6) dependency_analyzer · 95%
medium
Vulnerable dependency: torch@2.0 (GHSA-5pcm-hx3q-hm94) dependency_analyzer · 95%
medium
Vulnerable dependency: torch@2.0 (GHSA-887c-mr87-cxwp) dependency_analyzer · 95%
medium
Vulnerable dependency: torch@2.0 (GHSA-c678-jfcj-6jmf) dependency_analyzer · 95%
medium
Vulnerable dependency: torch@2.0 (GHSA-f4hp-rmr7-r7v8) dependency_analyzer · 95%
medium
Vulnerable dependency: torch@2.0 (GHSA-pg7h-5qx3-wjr3) dependency_analyzer · 95%
medium
Vulnerable dependency: torch@2.0 (GHSA-qfhq-4f3w-5fph) dependency_analyzer · 95%
medium
Vulnerable dependency: torch@2.0 (GHSA-rrmf-rvhw-rf47) dependency_analyzer · 95%
medium
Vulnerable dependency: torch@2.0 (GHSA-vgrw-7cvw-pwgx) dependency_analyzer · 95%
medium
Vulnerable dependency: torch@2.0 (GHSA-x3gm-94wq-g975) dependency_analyzer · 95%
medium
Vulnerable dependency: torch@2.0 (PYSEC-2024-250) dependency_analyzer · 95%
medium
Vulnerable dependency: torch@2.0 (PYSEC-2024-251) dependency_analyzer · 95%
medium
Vulnerable dependency: torch@2.0 (PYSEC-2024-252) dependency_analyzer · 95%
medium
Vulnerable dependency: torch@2.0 (PYSEC-2024-259) dependency_analyzer · 95%
medium
Vulnerable dependency: torch@2.0 (PYSEC-2025-191) dependency_analyzer · 95%
medium
Vulnerable dependency: torch@2.0 (PYSEC-2025-198) dependency_analyzer · 95%
medium
Vulnerable dependency: torch@2.0 (PYSEC-2025-203) dependency_analyzer · 95%
medium
Vulnerable dependency: torch@2.0 (PYSEC-2025-204) dependency_analyzer · 95%
medium
Vulnerable dependency: torch@2.0 (PYSEC-2025-205) dependency_analyzer · 95%
medium
Vulnerable dependency: torch@2.0 (PYSEC-2025-206) dependency_analyzer · 95%
medium
Vulnerable dependency: torch@2.0 (PYSEC-2025-207) dependency_analyzer · 95%
medium
Vulnerable dependency: torch@2.0 (PYSEC-2025-208) dependency_analyzer · 95%
medium
Vulnerable dependency: torch@2.0 (PYSEC-2025-209) dependency_analyzer · 95%
medium
Vulnerable dependency: torch@2.0 (PYSEC-2025-41) dependency_analyzer · 95%
medium
Vulnerable dependency: torch@2.0 (PYSEC-2026-139) dependency_analyzer · 95%
medium
Vulnerable dependency: torch@2.0 (PYSEC-2026-1970) dependency_analyzer · 95%
medium
Vulnerable dependency: torch@2.0 (PYSEC-2026-2286) dependency_analyzer · 95%
medium
Vulnerable dependency: transformers@4.40 (GHSA-29pf-2h5f-8g72) dependency_analyzer · 95%
medium
Vulnerable dependency: transformers@4.40 (GHSA-37mw-44qp-f5jm) dependency_analyzer · 95%
medium
Vulnerable dependency: transformers@4.40 (GHSA-4w7r-h757-3r74) dependency_analyzer · 95%
medium
Vulnerable dependency: transformers@4.40 (GHSA-59p9-h35m-wg4g) dependency_analyzer · 95%
medium
Vulnerable dependency: transformers@4.40 (GHSA-69w3-r845-3855) dependency_analyzer · 95%
medium
Vulnerable dependency: transformers@4.40 (GHSA-6rvg-6v2m-4j46) dependency_analyzer · 95%
medium
Vulnerable dependency: transformers@4.40 (GHSA-9356-575x-2w9m) dependency_analyzer · 95%
medium
Vulnerable dependency: transformers@4.40 (GHSA-fgcw-684q-jj6r) dependency_analyzer · 95%
medium
Vulnerable dependency: transformers@4.40 (GHSA-fpwr-67px-3qhx) dependency_analyzer · 95%
medium
Vulnerable dependency: transformers@4.40 (GHSA-hxxf-235m-72v3) dependency_analyzer · 95%
medium
Vulnerable dependency: transformers@4.40 (GHSA-jjph-296x-mrcr) dependency_analyzer · 95%
medium
Vulnerable dependency: transformers@4.40 (GHSA-phhr-52qp-3mj4) dependency_analyzer · 95%
medium
Vulnerable dependency: transformers@4.40 (GHSA-q2wp-rjmx-x6x9) dependency_analyzer · 95%
medium
Vulnerable dependency: transformers@4.40 (GHSA-qq3j-4f4f-9583) dependency_analyzer · 95%
medium
Vulnerable dependency: transformers@4.40 (GHSA-qxrp-vhvm-j765) dependency_analyzer · 95%
medium
Vulnerable dependency: transformers@4.40 (GHSA-rcv9-qm8p-9p6j) dependency_analyzer · 95%
medium
Vulnerable dependency: transformers@4.40 (GHSA-wrfc-pvp9-mr9g) dependency_analyzer · 95%
medium
Vulnerable dependency: transformers@4.40 (GHSA-xrqw-3rrv-vx5w) dependency_analyzer · 95%
medium
Vulnerable dependency: transformers@4.40 (PYSEC-2024-227) dependency_analyzer · 95%
medium
Vulnerable dependency: transformers@4.40 (PYSEC-2024-228) dependency_analyzer · 95%
medium
Vulnerable dependency: transformers@4.40 (PYSEC-2024-229) dependency_analyzer · 95%
medium
Vulnerable dependency: transformers@4.40 (PYSEC-2025-211) dependency_analyzer · 95%
medium
Vulnerable dependency: transformers@4.40 (PYSEC-2025-212) dependency_analyzer · 95%
medium
Vulnerable dependency: transformers@4.40 (PYSEC-2025-213) dependency_analyzer · 95%
medium
Vulnerable dependency: transformers@4.40 (PYSEC-2025-214) dependency_analyzer · 95%
medium
Vulnerable dependency: transformers@4.40 (PYSEC-2025-215) dependency_analyzer · 95%
medium
Vulnerable dependency: transformers@4.40 (PYSEC-2025-216) dependency_analyzer · 95%
medium
Vulnerable dependency: transformers@4.40 (PYSEC-2025-217) dependency_analyzer · 95%
medium
Vulnerable dependency: transformers@4.40 (PYSEC-2025-218) dependency_analyzer · 95%
medium
Vulnerable dependency: transformers@4.40 (PYSEC-2025-40) dependency_analyzer · 95%
medium
Vulnerable dependency: transformers@4.40 (PYSEC-2026-1977) dependency_analyzer · 95%
medium
Vulnerable dependency: transformers@4.40 (PYSEC-2026-1980) dependency_analyzer · 95%
medium
Vulnerable dependency: transformers@4.40 (PYSEC-2026-1981) dependency_analyzer · 95%
medium
Vulnerable dependency: transformers@4.40 (PYSEC-2026-1982) dependency_analyzer · 95%
medium
Vulnerable dependency: transformers@4.40 (PYSEC-2026-1983) dependency_analyzer · 95%
medium
Vulnerable dependency: transformers@4.40 (PYSEC-2026-1984) dependency_analyzer · 95%
medium
Vulnerable dependency: transformers@4.40 (PYSEC-2026-1985) dependency_analyzer · 95%
medium
Vulnerable dependency: transformers@4.40 (PYSEC-2026-1986) dependency_analyzer · 95%
medium
Vulnerable dependency: transformers@4.40 (PYSEC-2026-1987) dependency_analyzer · 95%
medium
Vulnerable dependency: transformers@4.40 (PYSEC-2026-1988) dependency_analyzer · 95%
medium
Vulnerable dependency: transformers@4.40 (PYSEC-2026-2288) dependency_analyzer · 95%
medium
Vulnerable dependency: transformers@4.40 (PYSEC-2026-2289) dependency_analyzer · 95%
medium
Vulnerable dependency: transformers@4.40 (PYSEC-2026-2290) dependency_analyzer · 95%
medium
Vulnerable dependency: transformers@4.40 (PYSEC-2026-3929) dependency_analyzer · 95%
medium
Vulnerable dependency: datasets@2.18 (GHSA-379c-qx7v-6h59) dependency_analyzer · 95%
medium
Vulnerable dependency: datasets@2.18 (PYSEC-2026-3716) dependency_analyzer · 95%
medium
Vulnerable dependency: accelerate@0.28 (GHSA-4j2p-28q2-5m79) dependency_analyzer · 95%
medium
Vulnerable dependency: accelerate@0.28 (PYSEC-2026-3804) dependency_analyzer · 95%
medium
High-entropy string (5.73 bits/char) in floatingsidewal-bulkhead-ac58e45/packages/core/test/perf/perf.test.ts:101 entropy_analyzer · 51%
info
package.json metadata manifest_parser · 100%
info
Tool: bulkhead_scan manifest_parser · 70%
info
Tool: bulkhead_redact manifest_parser · 70%
info
Tool: bulkhead_configure manifest_parser · 70%
info
Transport: stdio manifest_parser · 90%
info
Required env vars (10) manifest_parser · 80%
info
Sandbox failed to start for output poisoning scan output_poisoning · 100%
medium
Permission: network access detected permission_analyzer · 70%
low
Permission: filesystem access detected permission_analyzer · 90%
low
Permission: env_vars access detected permission_analyzer · 90%
info
SBOM generated: 423 components sbom_generator · 100%
critical
AWS Access Key ID found in floatingsidewal-bulkhead-ac58e45/README.md secret_scanner · 95%
critical
AWS Access Key ID found in floatingsidewal-bulkhead-ac58e45/scripts/demo-http.sh secret_scanner · 95%
critical
GitHub Personal Access Token found in floatingsidewal-bulkhead-ac58e45/scripts/demo-http.sh secret_scanner · 95%
critical
AWS Access Key ID found in floatingsidewal-bulkhead-ac58e45/scripts/demo-mcp.sh secret_scanner · 95%
critical
AWS Access Key ID found in floatingsidewal-bulkhead-ac58e45/scripts/demo-docker.sh secret_scanner · 95%
critical
AWS Access Key ID found in floatingsidewal-bulkhead-ac58e45/docs/deployment.md secret_scanner · 95%
critical
AWS Access Key ID found in floatingsidewal-bulkhead-ac58e45/docs/how-to.md secret_scanner · 95%
critical
AWS Access Key ID found in floatingsidewal-bulkhead-ac58e45/docs/api.md secret_scanner · 95%
critical
AWS Access Key ID found in floatingsidewal-bulkhead-ac58e45/packages/core/README.md secret_scanner · 95%
medium
No build provenance detected (SLSA L0) slsa_assessor · 90%