Back to search
medium low high low
? Not scanned yet
code-graph-context
Author drewhcodes
Scanned just now
MCP server that builds code graphs to provide rich context to LLMs
Versions
5.1.0May 13, 2026
5.0.1May 13, 2026
5.0.0May 13, 2026
4.4.0May 12, 2026
4.3.0May 12, 2026
+ show 71 moreshow less
4.2.0May 12, 2026
4.1.0Apr 27, 2026
4.0.0Apr 26, 2026
3.0.20Apr 24, 2026
3.0.19Apr 24, 2026
3.0.18Apr 23, 2026
3.0.17Apr 14, 2026
3.0.16Apr 14, 2026
3.0.15Apr 14, 2026
3.0.14Apr 14, 2026
3.0.13Apr 13, 2026
3.0.12Apr 13, 2026
3.0.11Apr 13, 2026
3.0.10Mar 19, 2026
3.0.9Mar 19, 2026
3.0.8Mar 18, 2026
3.0.7Mar 18, 2026
3.0.6Mar 18, 2026
3.0.5Mar 18, 2026
3.0.4Mar 18, 2026
3.0.3Mar 18, 2026
3.0.2Mar 18, 2026
3.0.1Mar 18, 2026
3.0.0Mar 18, 2026
2.14.1Mar 17, 2026
2.14.0Mar 16, 2026
2.13.3Mar 15, 2026
2.13.2Mar 11, 2026
2.13.1Mar 11, 2026
2.13.0Mar 11, 2026
2.12.8Mar 11, 2026
2.12.7Mar 11, 2026
2.12.6Mar 11, 2026
2.12.5Mar 11, 2026
2.12.4Mar 11, 2026
2.12.3Mar 11, 2026
2.12.2Mar 11, 2026
2.12.1Mar 11, 2026
2.12.0Mar 11, 2026
2.11.1Mar 11, 2026
2.11.0Mar 11, 2026
2.10.5Mar 11, 2026
2.10.4Mar 11, 2026
2.10.3Mar 11, 2026
2.10.2Mar 11, 2026
2.10.1Mar 11, 2026
2.10.0Mar 11, 2026
2.9.0Mar 9, 2026
2.8.0Mar 4, 2026
2.7.0Feb 26, 2026
2.6.2Feb 23, 2026
2.6.1Feb 20, 2026
2.6.0Jan 26, 2026
2.5.4Jan 25, 2026
2.5.3Jan 23, 2026
2.5.2Jan 23, 2026
2.5.1Jan 23, 2026
2.5.0Jan 23, 2026
2.4.5Jan 7, 2026
2.4.4Jan 7, 2026
2.4.3Jan 5, 2026
2.4.2Jan 5, 2026
2.4.1Jan 5, 2026
2.4.0Jan 5, 2026
2.3.0Jan 2, 2026
2.2.0Jan 1, 2026
2.0.1Dec 31, 2025
2.0.0Dec 31, 2025
1.1.0Dec 22, 2025
1.0.0Dec 4, 2025
0.1.0Nov 26, 2025
Tools 0
No tools indexed yet.
Permissions 4
network Server uses network capabilities via: fetch() filesystem Server uses filesystem capabilities via: fs sync ops, fs/promises, os, path shell Server uses shell capabilities via: child_process, execSync(), spawn() env_vars Server uses env_vars capabilities via: os.environ, process.env Scan Findings 108
medium
OAuth implementation without PKCE
info
Sandbox failed to start for behavioral verification
medium
Vulnerable dependency: @modelcontextprotocol/sdk@1.15.1 (GHSA-345p-7cg4-v4c7)
medium
Vulnerable dependency: @modelcontextprotocol/sdk@1.15.1 (GHSA-46jr-4wx8-v453)
medium
Vulnerable dependency: @modelcontextprotocol/sdk@1.15.1 (GHSA-6prh-2h8m-c8cw)
medium
Vulnerable dependency: @modelcontextprotocol/sdk@1.15.1 (GHSA-6qxp-vccf-f47h)
medium
Vulnerable dependency: @modelcontextprotocol/sdk@1.15.1 (GHSA-8r9q-7v3j-jr4g)
medium
Vulnerable dependency: @modelcontextprotocol/sdk@1.15.1 (GHSA-f897-62hf-6gxq)
medium
Vulnerable dependency: @modelcontextprotocol/sdk@1.15.1 (GHSA-rvq5-wwqv-78pq)
medium
Vulnerable dependency: @modelcontextprotocol/sdk@1.15.1 (GHSA-w48q-cv73-mx4w)
medium
Vulnerable dependency: glob@11.0.3 (GHSA-3g3m-2fjr-6pw4)
medium
Vulnerable dependency: glob@11.0.3 (GHSA-5j98-mcp5-4vw2)
medium
Vulnerable dependency: yaml@2.8.2 (GHSA-48c2-rrv3-qjmp)
medium
Vulnerable dependency: zod@3.25.76 (GHSA-mrhx-c7xc-m3w5)
medium
Vulnerable dependency: uuid@11.1.0 (GHSA-w5hq-g745-h8pq)
medium
Vulnerable dependency: vitest@4.1.6 (GHSA-82fw-gwwq-j7x9)
medium
Vulnerable dependency: fastapi@0.104.0 (PYSEC-2024-38)
medium
Vulnerable dependency: sentence-transformers@3.0.0 (GHSA-jhr6-gm9c-rqjv)
medium
Vulnerable dependency: sentence-transformers@3.0.0 (PYSEC-2026-4164)
medium
Vulnerable dependency: torch@2.0.0 (GHSA-3749-ghw9-m3mg)
medium
Vulnerable dependency: torch@2.0.0 (GHSA-53q9-r3pm-6pq6)
medium
Vulnerable dependency: torch@2.0.0 (GHSA-5pcm-hx3q-hm94)
medium
Vulnerable dependency: torch@2.0.0 (GHSA-63cw-57p8-fm3p)
medium
Vulnerable dependency: torch@2.0.0 (GHSA-887c-mr87-cxwp)
medium
Vulnerable dependency: torch@2.0.0 (GHSA-c678-jfcj-6jmf)
medium
Vulnerable dependency: torch@2.0.0 (GHSA-f4hp-rmr7-r7v8)
medium
Vulnerable dependency: torch@2.0.0 (GHSA-pg7h-5qx3-wjr3)
medium
Vulnerable dependency: torch@2.0.0 (GHSA-qfhq-4f3w-5fph)
medium
Vulnerable dependency: torch@2.0.0 (GHSA-rrmf-rvhw-rf47)
medium
Vulnerable dependency: torch@2.0.0 (GHSA-vgrw-7cvw-pwgx)
medium
Vulnerable dependency: torch@2.0.0 (GHSA-x3gm-94wq-g975)
medium
Vulnerable dependency: torch@2.0.0 (PYSEC-2024-250)
medium
Vulnerable dependency: torch@2.0.0 (PYSEC-2024-251)
medium
Vulnerable dependency: torch@2.0.0 (PYSEC-2024-252)
medium
Vulnerable dependency: torch@2.0.0 (PYSEC-2024-259)
medium
Vulnerable dependency: torch@2.0.0 (PYSEC-2025-191)
medium
Vulnerable dependency: torch@2.0.0 (PYSEC-2025-198)
medium
Vulnerable dependency: torch@2.0.0 (PYSEC-2025-203)
medium
Vulnerable dependency: torch@2.0.0 (PYSEC-2025-204)
medium
Vulnerable dependency: torch@2.0.0 (PYSEC-2025-205)
medium
Vulnerable dependency: torch@2.0.0 (PYSEC-2025-206)
medium
Vulnerable dependency: torch@2.0.0 (PYSEC-2025-207)
medium
Vulnerable dependency: torch@2.0.0 (PYSEC-2025-208)
medium
Vulnerable dependency: torch@2.0.0 (PYSEC-2025-209)
medium
Vulnerable dependency: torch@2.0.0 (PYSEC-2025-41)
medium
Vulnerable dependency: torch@2.0.0 (PYSEC-2026-139)
medium
Vulnerable dependency: torch@2.0.0 (PYSEC-2026-1970)
medium
Vulnerable dependency: torch@2.0.0 (PYSEC-2026-2286)
medium
Vulnerable dependency: pydantic@2.0.0 (GHSA-mr82-8j83-vxmv)
medium
Vulnerable dependency: pydantic@2.0.0 (PYSEC-2026-1812)
medium
Vulnerable dependency: transformers@4.44.0 (GHSA-29pf-2h5f-8g72)
medium
Vulnerable dependency: transformers@4.44.0 (GHSA-37mw-44qp-f5jm)
medium
Vulnerable dependency: transformers@4.44.0 (GHSA-4w7r-h757-3r74)
medium
Vulnerable dependency: transformers@4.44.0 (GHSA-59p9-h35m-wg4g)
medium
Vulnerable dependency: transformers@4.44.0 (GHSA-69w3-r845-3855)
medium
Vulnerable dependency: transformers@4.44.0 (GHSA-6rvg-6v2m-4j46)
medium
Vulnerable dependency: transformers@4.44.0 (GHSA-9356-575x-2w9m)
medium
Vulnerable dependency: transformers@4.44.0 (GHSA-fgcw-684q-jj6r)
medium
Vulnerable dependency: transformers@4.44.0 (GHSA-fpwr-67px-3qhx)
medium
Vulnerable dependency: transformers@4.44.0 (GHSA-hxxf-235m-72v3)
medium
Vulnerable dependency: transformers@4.44.0 (GHSA-jjph-296x-mrcr)
medium
Vulnerable dependency: transformers@4.44.0 (GHSA-phhr-52qp-3mj4)
medium
Vulnerable dependency: transformers@4.44.0 (GHSA-q2wp-rjmx-x6x9)
medium
Vulnerable dependency: transformers@4.44.0 (GHSA-qq3j-4f4f-9583)
medium
Vulnerable dependency: transformers@4.44.0 (GHSA-qxrp-vhvm-j765)
medium
Vulnerable dependency: transformers@4.44.0 (GHSA-rcv9-qm8p-9p6j)
medium
Vulnerable dependency: transformers@4.44.0 (GHSA-wrfc-pvp9-mr9g)
medium
Vulnerable dependency: transformers@4.44.0 (GHSA-xrqw-3rrv-vx5w)
medium
Vulnerable dependency: transformers@4.44.0 (PYSEC-2024-227)
medium
Vulnerable dependency: transformers@4.44.0 (PYSEC-2024-228)
medium
Vulnerable dependency: transformers@4.44.0 (PYSEC-2024-229)
medium
Vulnerable dependency: transformers@4.44.0 (PYSEC-2025-211)
medium
Vulnerable dependency: transformers@4.44.0 (PYSEC-2025-212)
medium
Vulnerable dependency: transformers@4.44.0 (PYSEC-2025-213)
medium
Vulnerable dependency: transformers@4.44.0 (PYSEC-2025-214)
medium
Vulnerable dependency: transformers@4.44.0 (PYSEC-2025-215)
medium
Vulnerable dependency: transformers@4.44.0 (PYSEC-2025-216)
medium
Vulnerable dependency: transformers@4.44.0 (PYSEC-2025-217)
medium
Vulnerable dependency: transformers@4.44.0 (PYSEC-2025-218)
medium
Vulnerable dependency: transformers@4.44.0 (PYSEC-2025-40)
medium
Vulnerable dependency: transformers@4.44.0 (PYSEC-2026-1977)
medium
Vulnerable dependency: transformers@4.44.0 (PYSEC-2026-1980)
medium
Vulnerable dependency: transformers@4.44.0 (PYSEC-2026-1981)
medium
Vulnerable dependency: transformers@4.44.0 (PYSEC-2026-1982)
medium
Vulnerable dependency: transformers@4.44.0 (PYSEC-2026-1983)
medium
Vulnerable dependency: transformers@4.44.0 (PYSEC-2026-1984)
medium
Vulnerable dependency: transformers@4.44.0 (PYSEC-2026-1985)
medium
Vulnerable dependency: transformers@4.44.0 (PYSEC-2026-1986)
medium
Vulnerable dependency: transformers@4.44.0 (PYSEC-2026-1987)
medium
Vulnerable dependency: transformers@4.44.0 (PYSEC-2026-1988)
medium
Vulnerable dependency: transformers@4.44.0 (PYSEC-2026-2288)
medium
Vulnerable dependency: transformers@4.44.0 (PYSEC-2026-2289)
medium
Vulnerable dependency: transformers@4.44.0 (PYSEC-2026-2290)
medium
Vulnerable dependency: transformers@4.44.0 (PYSEC-2026-3929)
medium
Hex string literal (>50 chars) in andrew-hernandez-paragon-code-graph-context-8e15c77/src/mcp/tools/__tests__/session-memory-scopes.test.ts:38
medium
Hex string literal (>50 chars) in andrew-hernandez-paragon-code-graph-context-8e15c77/src/core/session/__tests__/anchor-paths.test.ts:16
info
package.json metadata
info
Transport: stdio
info
Required env vars (37)
info
Sandbox failed to start for output poisoning scan
medium
Permission: network access detected
low
Permission: filesystem access detected
high
Permission: shell access detected
low
Permission: env_vars access detected
info
SBOM generated: 531 components
high
Hardcoded Password found in andrew-hernandez-paragon-code-graph-context-8e15c77/src/cli/migrate-from-docker.ts
high
Hardcoded Password found in andrew-hernandez-paragon-code-graph-context-8e15c77/src/cli/neo4j-docker.ts
medium
No build provenance detected (SLSA L0)