← Back to search

@clidey/whodb-cli

GitHub Actions Scanned 22d ago

WhoDB CLI - database management tool with TUI, programmatic commands, and MCP server

npm ↗
D
40 / 100

Versions

0.122.0latest
Jul 24, 2026
0.121.0
Jul 16, 2026
0.120.0
Jul 10, 2026
0.119.0
Jul 3, 2026
0.118.0
Jun 26, 2026
+ show 33 moreshow less
0.117.0
Jun 23, 2026
0.116.0
Jun 23, 2026
0.115.0
Jun 19, 2026
0.114.0
Jun 13, 2026
0.113.0
Jun 4, 2026
0.112.0
May 27, 2026
0.111.0
May 20, 2026
0.110.0
May 15, 2026
0.109.0
May 9, 2026
0.108.0
May 9, 2026
0.107.0
May 2, 2026
0.106.0
Apr 15, 2026
0.105.0
Apr 10, 2026
0.104.0
Apr 2, 2026
0.103.0
Mar 27, 2026
0.102.0
Mar 27, 2026
0.101.0
Mar 23, 2026
0.100.0
Mar 19, 2026
0.99.0
Mar 13, 2026
0.98.0
Mar 9, 2026
0.97.0
Mar 3, 2026
0.96.0
Mar 3, 2026
0.95.0
Feb 26, 2026
0.94.0
Feb 19, 2026
0.93.0
Feb 16, 2026
0.92.0
Feb 11, 2026
0.91.0
Feb 4, 2026
0.90.1
Jan 28, 2026
0.90.0
Jan 27, 2026
0.89.0
Jan 20, 2026
0.88.0
Jan 15, 2026
0.87.0
Dec 30, 2025
0.1.0
Dec 29, 2025
PermissionsTool SafetyAuthAnnotationsCode QualityStabilitySpecVuln HistoryAuthorTransparencyCommunity

Tools 15

whodb_platform_transform_wait
annotations: none low

Wait for a real hosted transform run to reach success or failure. Use the run id returned by whodb_platform_action and keep the timeout bounded.

whodb_platform_workflow_recipe
annotations: none low

Return a goal-oriented, read-first recipe for using the hosted WhoDB platform. This never executes writes; use its steps to build and apply a confirmed workflow.

whodb_query
annotations: verified low

readOnlyHint true idempotentHint false
whodb_schemas
annotations: verified low

readOnlyHint true idempotentHint true
whodb_tables
annotations: verified low

readOnlyHint true idempotentHint true
whodb_columns
annotations: verified low

readOnlyHint true idempotentHint true
whodb_connections
annotations: verified low

readOnlyHint true idempotentHint true
whodb_confirm
annotations: verified low

readOnlyHint false idempotentHint false
whodb_pending
annotations: verified low

readOnlyHint true idempotentHint true
whodb_explain
annotations: verified low

readOnlyHint true idempotentHint true
whodb_diff
annotations: verified low

readOnlyHint true idempotentHint true
whodb_erd
annotations: verified low

readOnlyHint true idempotentHint true
whodb_audit
annotations: verified low

readOnlyHint true idempotentHint true
whodb_suggestions
annotations: verified low

readOnlyHint true idempotentHint true
whodb_platform_resolve_resource
annotations: none low

Resolve a hosted resource name or id to an exact project resource before reading, planning, or writing it.

Permissions 4

network medium
Server uses network capabilities via: fetch(), http, httpx, net
filesystem low
Server uses filesystem capabilities via: fs, fs sync ops, open(), os, path, pathlib
shell high
Server uses shell capabilities via: child_process, execSync(), spawn(), spawnSync(), subprocess
env_vars low
Server uses env_vars capabilities via: os.environ, process.env

Scan Findings 113

low
Tool 'whodb_platform_transform_wait' has no annotations annotation_checker · 100%
low
Tool 'whodb_platform_workflow_recipe' has no annotations annotation_checker · 100%
info
Tool 'whodb_query' annotations are consistent annotation_checker · 80%
info
Tool 'whodb_schemas' annotations are consistent annotation_checker · 80%
info
Tool 'whodb_tables' annotations are consistent annotation_checker · 80%
info
Tool 'whodb_columns' annotations are consistent annotation_checker · 80%
info
Tool 'whodb_connections' annotations are consistent annotation_checker · 80%
info
Tool 'whodb_confirm' annotations are consistent annotation_checker · 80%
info
Tool 'whodb_pending' annotations are consistent annotation_checker · 80%
info
Tool 'whodb_explain' annotations are consistent annotation_checker · 80%
info
Tool 'whodb_diff' annotations are consistent annotation_checker · 80%
info
Tool 'whodb_erd' annotations are consistent annotation_checker · 80%
info
Tool 'whodb_audit' annotations are consistent annotation_checker · 80%
info
Tool 'whodb_suggestions' annotations are consistent annotation_checker · 80%
low
Tool 'whodb_platform_resolve_resource' has no annotations annotation_checker · 100%
medium
OAuth implementation without PKCE auth_checker · 75%
info
Sandbox failed to start for behavioral verification behavioral_verifier · 100%
medium
Excessive dependency count: 676 direct dependencies dependency_analyzer · 90%
medium
Suspicious package name: react-dom dependency_analyzer · 60%
medium
Suspicious package name: react-markdown dependency_analyzer · 60%
medium
Suspicious package name: react-redux dependency_analyzer · 60%
medium
Vulnerable dependency: github.com/clidey/whodb/core@0.0.0 (GHSA-5pf6-cq2v-23ww) dependency_analyzer · 95%
medium
Vulnerable dependency: github.com/clidey/whodb/core@0.0.0 (GO-2024-3350) dependency_analyzer · 95%
medium
Vulnerable dependency: github.com/xuri/excelize/v2@2.11.0 (GO-2026-6452) dependency_analyzer · 95%
medium
Vulnerable dependency: golang.org/x/crypto@0.54.0 (GO-2026-5932) dependency_analyzer · 95%
medium
Vulnerable dependency: golang.org/x/crypto@0.54.0 (GO-2026-6303) dependency_analyzer · 95%
medium
Vulnerable dependency: golang.org/x/crypto@0.54.0 (GO-2026-6354) dependency_analyzer · 95%
medium
Vulnerable dependency: golang.org/x/crypto@0.54.0 (GO-2026-6355) dependency_analyzer · 95%
medium
Vulnerable dependency: golang.org/x/mod@0.38.0 (GO-2026-6179) dependency_analyzer · 95%
medium
Vulnerable dependency: golang.org/x/mod@0.38.0 (GO-2026-6180) dependency_analyzer · 95%
medium
Vulnerable dependency: google.golang.org/grpc@1.83.1 (GHSA-2v4p-qf9q-27wj) dependency_analyzer · 95%
medium
Vulnerable dependency: google.golang.org/grpc@1.83.1 (GO-2026-6443) dependency_analyzer · 95%
medium
Vulnerable dependency: golang.org/x/crypto@0.57.0 (GO-2026-5932) dependency_analyzer · 95%
medium
Hex string literal (>50 chars) in clidey-whodb-799dced/sdk/packages/go/gen/manifest.go:47 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in clidey-whodb-799dced/sdk/packages/java/src/main/java/com/clidey/whodb/gen/Manifest.java:14 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in clidey-whodb-799dced/sdk/packages/python/src/whodb/_generated/manifest.py:91 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in clidey-whodb-799dced/sdk/packages/typescript/src/generated/manifest.ts:91 entropy_analyzer · 70%
medium
Buffer.from base64 in clidey-whodb-799dced/.agents/skills/impeccable/scripts/generate-image.mjs:231 entropy_analyzer · 75%
medium
Buffer.from base64 in clidey-whodb-799dced/.agents/skills/impeccable/scripts/live/frameworks/tag-strategy.mjs:230 entropy_analyzer · 75%
medium
Hex string literal (>50 chars) in clidey-whodb-799dced/cli/internal/sdkgen/testdata/typescript.golden.ts:8 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in clidey-whodb-799dced/cli/internal/sdkgen/testdata/python.golden.py:13 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in clidey-whodb-799dced/core/src/crypto/encrypt_test.go:26 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in clidey-whodb-799dced/core/src/crypto/encrypt_test.go:27 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in clidey-whodb-799dced/core/src/auth/session_store_test.go:30 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in clidey-whodb-799dced/core/src/auth/session_store_test.go:138 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in clidey-whodb-799dced/core/src/auth/session_key_test.go:30 entropy_analyzer · 70%
info
package.json metadata manifest_parser · 100%
info
pyproject.toml metadata manifest_parser · 100%
info
Tool: whodb_platform_transform_wait manifest_parser · 85%
info
Tool: whodb_platform_workflow_recipe manifest_parser · 85%
info
Tool: whodb_query manifest_parser · 85%
info
Tool: whodb_schemas manifest_parser · 85%
info
Tool: whodb_tables manifest_parser · 85%
info
Tool: whodb_columns manifest_parser · 85%
info
Tool: whodb_connections manifest_parser · 85%
info
Tool: whodb_confirm manifest_parser · 85%
info
Tool: whodb_pending manifest_parser · 85%
info
Tool: whodb_explain manifest_parser · 85%
info
Tool: whodb_diff manifest_parser · 85%
info
Tool: whodb_erd manifest_parser · 85%
info
Tool: whodb_audit manifest_parser · 85%
info
Tool: whodb_suggestions manifest_parser · 85%
info
Tool: whodb_platform_resolve_resource manifest_parser · 85%
info
Transport: stdio manifest_parser · 90%
info
Required env vars (131) manifest_parser · 80%
info
Sandbox failed to start for output poisoning scan output_poisoning · 100%
medium
Permission: network access detected permission_analyzer · 90%
low
Permission: filesystem access detected permission_analyzer · 90%
high
Permission: shell access detected permission_analyzer · 95%
low
Permission: env_vars access detected permission_analyzer · 90%
info
SBOM generated: 278 components sbom_generator · 100%
high
Hardcoded Password found in clidey-whodb-799dced/desktop-common/README.md secret_scanner · 65%
critical
Database URL with Password found in clidey-whodb-799dced/dev/docker-compose.yml secret_scanner · 85%
high
Hardcoded Password found in clidey-whodb-799dced/cli/cmd/connect.go secret_scanner · 65%
high
Hardcoded Password found in clidey-whodb-799dced/cli/cmd/platform.go secret_scanner · 65%
high
Hardcoded Password found in clidey-whodb-799dced/cli/internal/tui/connection_view.go secret_scanner · 65%
high
Hardcoded Password found in clidey-whodb-799dced/frontend/src/generated/schema-types.ts secret_scanner · 65%
high
Hardcoded Password found in clidey-whodb-799dced/frontend/src/locales/pages/login.yaml secret_scanner · 65%
critical
RSA Private Key found in clidey-whodb-799dced/dev/certs/client/cockroachdb/client-key.pem secret_scanner · 95%
critical
RSA Private Key found in clidey-whodb-799dced/dev/certs/client/mysql/client-key.pem secret_scanner · 95%
critical
RSA Private Key found in clidey-whodb-799dced/dev/certs/client/mariadb/client-key.pem secret_scanner · 95%
critical
RSA Private Key found in clidey-whodb-799dced/dev/certs/client/elasticsearch/client-key.pem secret_scanner · 95%
critical
RSA Private Key found in clidey-whodb-799dced/dev/certs/client/redis/client-key.pem secret_scanner · 95%
critical
RSA Private Key found in clidey-whodb-799dced/dev/certs/client/memcached/client-key.pem secret_scanner · 95%
critical
RSA Private Key found in clidey-whodb-799dced/dev/certs/client/mongodb/client-key.pem secret_scanner · 95%
critical
RSA Private Key found in clidey-whodb-799dced/dev/certs/client/postgres/client-key.pem secret_scanner · 95%
critical
RSA Private Key found in clidey-whodb-799dced/dev/certs/client/clickhouse/client-key.pem secret_scanner · 95%
critical
RSA Private Key found in clidey-whodb-799dced/dev/certs/server/cockroachdb/server-key.pem secret_scanner · 95%
critical
RSA Private Key found in clidey-whodb-799dced/dev/certs/server/mysql/server-key.pem secret_scanner · 95%
critical
RSA Private Key found in clidey-whodb-799dced/dev/certs/server/mariadb/server-key.pem secret_scanner · 95%
critical
RSA Private Key found in clidey-whodb-799dced/dev/certs/server/elasticsearch/server-key.pem secret_scanner · 95%
critical
RSA Private Key found in clidey-whodb-799dced/dev/certs/server/redis/redis.pem secret_scanner · 95%
critical
RSA Private Key found in clidey-whodb-799dced/dev/certs/server/redis/server-key.pem secret_scanner · 95%
critical
RSA Private Key found in clidey-whodb-799dced/dev/certs/server/memcached/server-key.pem secret_scanner · 95%
critical
RSA Private Key found in clidey-whodb-799dced/dev/certs/server/mongodb/mongodb.pem secret_scanner · 95%
critical
RSA Private Key found in clidey-whodb-799dced/dev/certs/server/mongodb/server-key.pem secret_scanner · 95%
critical
RSA Private Key found in clidey-whodb-799dced/dev/certs/server/postgres/server-key.pem secret_scanner · 95%
critical
RSA Private Key found in clidey-whodb-799dced/dev/certs/server/clickhouse/server-key.pem secret_scanner · 95%
critical
RSA Private Key found in clidey-whodb-799dced/dev/certs/ca/cockroachdb/ca-key.pem secret_scanner · 95%
critical
RSA Private Key found in clidey-whodb-799dced/dev/certs/ca/mysql/ca-key.pem secret_scanner · 95%
critical
RSA Private Key found in clidey-whodb-799dced/dev/certs/ca/mariadb/ca-key.pem secret_scanner · 95%
critical
RSA Private Key found in clidey-whodb-799dced/dev/certs/ca/elasticsearch/ca-key.pem secret_scanner · 95%
critical
RSA Private Key found in clidey-whodb-799dced/dev/certs/ca/redis/ca-key.pem secret_scanner · 95%
critical
RSA Private Key found in clidey-whodb-799dced/dev/certs/ca/memcached/ca-key.pem secret_scanner · 95%
critical
RSA Private Key found in clidey-whodb-799dced/dev/certs/ca/mongodb/ca-key.pem secret_scanner · 95%
critical
RSA Private Key found in clidey-whodb-799dced/dev/certs/ca/postgres/ca-key.pem secret_scanner · 95%
critical
RSA Private Key found in clidey-whodb-799dced/dev/certs/ca/clickhouse/ca-key.pem secret_scanner · 95%
high
Hardcoded Password found in clidey-whodb-799dced/dev/sample-data/mongo/data.js secret_scanner · 65%
high
Hardcoded Password found in clidey-whodb-799dced/docs/best-practices/access-control.mdx secret_scanner · 65%
critical
Database URL with Password found in clidey-whodb-799dced/docs/resources/integrations/ci-cd.mdx secret_scanner · 85%
high
Generic API Key Assignment found in clidey-whodb-799dced/core/src/env/env.go secret_scanner · 75%
critical
RSA Private Key found in clidey-whodb-799dced/.github/scripts/appstore-connect.sh secret_scanner · 95%
medium
No build provenance detected (SLSA L0) slsa_assessor · 90%