← Back to search Server uses network capabilities via: aiohttp, fetch() Server uses filesystem capabilities via: fs, open(), os, path, pathlib, tempfile Server uses env_vars capabilities via: os.environ, process.env
GoldenFlow
Standardize, reshape, and normalize messy data — CSV, Excel, Parquet, S3, databases.
? Not scanned yet
Versions
1.13.0latestfirst seen Jul 8, 2026
1.2.0first seen Jun 5, 2026
Tools 0
No tools indexed yet.
Permissions 3
network medium filesystem low env_vars low Scan Findings 27
info
Sandbox failed to start for behavioral verification
medium
Vulnerable dependency: vitest@4.1.0 (GHSA-82fw-gwwq-j7x9)
medium
Vulnerable dependency: yaml@2.7.0 (GHSA-48c2-rrv3-qjmp)
medium
Vulnerable dependency: python-multipart@0.0.20 (GHSA-5rvq-cxj2-64vf)
medium
Vulnerable dependency: python-multipart@0.0.20 (GHSA-6jv3-5f52-599m)
medium
Vulnerable dependency: python-multipart@0.0.20 (GHSA-mj87-hwqh-73pj)
medium
Vulnerable dependency: python-multipart@0.0.20 (GHSA-pp6c-gr5w-3c5g)
medium
Vulnerable dependency: python-multipart@0.0.20 (GHSA-v9pg-7xvm-68hf)
medium
Vulnerable dependency: python-multipart@0.0.20 (GHSA-vffw-93wf-4j4q)
medium
Vulnerable dependency: python-multipart@0.0.20 (GHSA-wp53-j4wj-2cfg)
medium
Vulnerable dependency: python-multipart@0.0.20 (PYSEC-2026-1852)
medium
Vulnerable dependency: python-multipart@0.0.20 (PYSEC-2026-3036)
medium
Vulnerable dependency: python-multipart@0.0.20 (PYSEC-2026-3037)
medium
Vulnerable dependency: python-multipart@0.0.20 (PYSEC-2026-3038)
medium
Vulnerable dependency: python-multipart@0.0.20 (PYSEC-2026-3039)
medium
Vulnerable dependency: python-multipart@0.0.20 (PYSEC-2026-3040)
medium
Vulnerable dependency: python-multipart@0.0.20 (PYSEC-2026-3041)
info
package.json metadata
info
pyproject.toml metadata
info
Transport: stdio
info
Required env vars (3)
info
Sandbox failed to start for output poisoning scan
medium
Permission: network access detected
low
Permission: filesystem access detected
low
Permission: env_vars access detected
info
SBOM generated: 206 components
medium
No build provenance detected (SLSA L0)