← Back to search

@fetchproxy/server

GitHub Actions Scanned 1d ago

Localhost WebSocket bridge an MCP server uses to relay fetches through the user's signed-in browser via the fetchproxy extension.

npm
? Not scanned yet

Versions

1.7.0latest
Jul 29, 2026
1.6.2
Jul 27, 2026
1.6.1
Jul 19, 2026
1.6.0
Jul 13, 2026
1.5.1
Jul 13, 2026
+ show 32 moreshow less
1.5.0
Jul 13, 2026
1.4.0
Jul 9, 2026
1.3.5
Jul 5, 2026
1.3.4
Jun 15, 2026
1.3.3
Jun 12, 2026
1.3.2
Jun 10, 2026
1.3.1
Jun 9, 2026
1.3.0
Jun 6, 2026
1.2.0
Jun 4, 2026
1.1.0
Jun 4, 2026
1.0.1
Jun 4, 2026
1.0.0
Jun 4, 2026
0.13.0
Jun 3, 2026
0.12.0
Jun 3, 2026
0.11.1
May 30, 2026
0.11.0
May 29, 2026
0.10.0
May 28, 2026
0.9.0
May 28, 2026
0.8.0
May 27, 2026
0.7.1
May 27, 2026
0.7.0
May 26, 2026
0.6.0
May 26, 2026
0.5.1
May 25, 2026
0.5.0
May 25, 2026
0.4.2
May 21, 2026
0.4.0
May 21, 2026
0.3.0
May 21, 2026
0.2.0
May 21, 2026
0.1.0
May 21, 2026
0.0.3
May 21, 2026
0.0.2
May 21, 2026
0.0.1
May 21, 2026

Tools 0

No tools indexed yet.

Permissions 4

network medium
Server uses network capabilities via: fetch()
filesystem low
Server uses filesystem capabilities via: fs, fs/promises
shell high
Server uses shell capabilities via: child_process, spawn()
env_vars low
Server uses env_vars capabilities via: process.env

Scan Findings 42

medium
OAuth implementation without PKCE auth_checker · 75%
info
Sandbox failed to start for behavioral verification behavioral_verifier · 100%
medium
Buffer.from base64 in chrischall-fetchproxy-d8f8f69/packages/server/tests/peer.test.ts:84 entropy_analyzer · 75%
medium
Buffer.from base64 in chrischall-fetchproxy-d8f8f69/packages/server/tests/host.test.ts:340 entropy_analyzer · 75%
medium
Buffer.from base64 in chrischall-fetchproxy-d8f8f69/packages/server/tests/host.test.ts:538 entropy_analyzer · 75%
medium
Buffer.from base64 in chrischall-fetchproxy-d8f8f69/packages/server/tests/host.test.ts:546 entropy_analyzer · 75%
medium
Buffer.from base64 in chrischall-fetchproxy-d8f8f69/packages/server/tests/integration/two-mcps.test.ts:117 entropy_analyzer · 75%
medium
Buffer.from base64 in chrischall-fetchproxy-d8f8f69/packages/server/tests/integration/two-mcps.test.ts:119 entropy_analyzer · 75%
medium
Buffer.from base64 in chrischall-fetchproxy-d8f8f69/packages/server/tests/integration/read-cookies.test.ts:97 entropy_analyzer · 75%
medium
Buffer.from base64 in chrischall-fetchproxy-d8f8f69/packages/server/tests/integration/read-cookies.test.ts:99 entropy_analyzer · 75%
medium
Buffer.from base64 in chrischall-fetchproxy-d8f8f69/packages/server/tests/integration/all-bootstrap-verbs.test.ts:101 entropy_analyzer · 75%
medium
Buffer.from base64 in chrischall-fetchproxy-d8f8f69/packages/server/tests/integration/all-bootstrap-verbs.test.ts:103 entropy_analyzer · 75%
medium
Buffer.from base64 in chrischall-fetchproxy-d8f8f69/packages/server/tests/integration/pair-pending.test.ts:58 entropy_analyzer · 75%
medium
Buffer.from base64 in chrischall-fetchproxy-d8f8f69/packages/server/tests/integration/pair-pending.test.ts:60 entropy_analyzer · 75%
medium
Buffer.from base64 in chrischall-fetchproxy-d8f8f69/packages/server/tests/integration/pair-pending.test.ts:62 entropy_analyzer · 75%
medium
Buffer.from base64 in chrischall-fetchproxy-d8f8f69/packages/server/tests/integration/pair-code-self-derived.test.ts:60 entropy_analyzer · 75%
medium
Buffer.from base64 in chrischall-fetchproxy-d8f8f69/packages/server/tests/integration/pair-code-self-derived.test.ts:62 entropy_analyzer · 75%
medium
Buffer.from base64 in chrischall-fetchproxy-d8f8f69/packages/server/tests/integration/pair-code-self-derived.test.ts:64 entropy_analyzer · 75%
medium
Buffer.from base64 in chrischall-fetchproxy-d8f8f69/packages/server/tests/integration/pair-code-self-derived.test.ts:398 entropy_analyzer · 75%
medium
Buffer.from base64 in chrischall-fetchproxy-d8f8f69/packages/server/tests/integration/pair-code-self-derived.test.ts:400 entropy_analyzer · 75%
medium
Buffer.from base64 in chrischall-fetchproxy-d8f8f69/packages/server/tests/integration/pair-code-self-derived.test.ts:402 entropy_analyzer · 75%
medium
Buffer.from base64 in chrischall-fetchproxy-d8f8f69/packages/server/tests/integration/mutual-auth-idb.test.ts:103 entropy_analyzer · 75%
medium
Buffer.from base64 in chrischall-fetchproxy-d8f8f69/packages/server/tests/integration/mutual-auth-idb.test.ts:104 entropy_analyzer · 75%
medium
Buffer.from base64 in chrischall-fetchproxy-d8f8f69/packages/server/tests/integration/mutual-auth-idb.test.ts:200 entropy_analyzer · 75%
medium
Buffer.from base64 in chrischall-fetchproxy-d8f8f69/packages/server/tests/integration/mutual-auth-idb.test.ts:202 entropy_analyzer · 75%
medium
Buffer.from base64 in chrischall-fetchproxy-d8f8f69/packages/server/tests/integration/graphql-query.test.ts:89 entropy_analyzer · 75%
medium
Buffer.from base64 in chrischall-fetchproxy-d8f8f69/packages/server/tests/integration/graphql-query.test.ts:91 entropy_analyzer · 75%
medium
Buffer.from base64 in chrischall-fetchproxy-d8f8f69/packages/server/tests/integration/graphql-query.test.ts:251 entropy_analyzer · 75%
medium
Buffer.from base64 in chrischall-fetchproxy-d8f8f69/packages/server/tests/integration/graphql-query.test.ts:253 entropy_analyzer · 75%
medium
Buffer.from base64 in chrischall-fetchproxy-d8f8f69/packages/protocol/tests/seal.test.ts:61 entropy_analyzer · 75%
medium
Buffer.from base64 in chrischall-fetchproxy-d8f8f69/packages/protocol/tests/seal.test.ts:77 entropy_analyzer · 75%
medium
Buffer.from base64 in chrischall-fetchproxy-d8f8f69/packages/protocol/tests/seal.test.ts:132 entropy_analyzer · 75%
medium
Hex string literal (>50 chars) in chrischall-fetchproxy-d8f8f69/packages/protocol/tests/crypto.test.ts:81 entropy_analyzer · 70%
info
package.json metadata manifest_parser · 100%
info
Required env vars (8) manifest_parser · 80%
info
Sandbox failed to start for output poisoning scan output_poisoning · 100%
medium
Permission: network access detected permission_analyzer · 70%
low
Permission: filesystem access detected permission_analyzer · 90%
high
Permission: shell access detected permission_analyzer · 95%
low
Permission: env_vars access detected permission_analyzer · 90%
info
SBOM generated: 135 components sbom_generator · 100%
medium
No build provenance detected (SLSA L0) slsa_assessor · 90%