← Back to search

io.github.addozhang/nexus

addozhang Scanned 14d ago

Query Sonatype Nexus Repository (OSS/Pro) for Maven, Python, and Docker artifacts

B
77.7 / 100

Versions

0.1.1latest
first seen May 19, 2026
PermissionsTool SafetyAuthAnnotationsCode QualityStabilitySpecVuln HistoryAuthorTransparencyCommunity

Tools 6

search_maven_artifact
annotations: none low

Search for Maven artifacts by group ID, artifact ID, or version. Searches across all Maven repositories (or a specific one) and returns matching artifacts with their available versions and download URLs. At least one of group_id or artifact_id must be provided.

version string group_id string repository string artifact_id string
get_maven_versions
annotations: none low

Get all versions of a specific Maven artifact with pagination. Returns a paginated list of available versions for the specified groupId:artifactId. Use continuation_token to fetch subsequent pages. Response includes: - versions: List of versions in this page - hasMore: Whether there are more pages - continuationToken: Token to fetch next page (if hasMore is true)

group_id string page_size string repository string artifact_id string continuation_token string
search_python_package
annotations: none low

Search for Python/PyPI packages by name. Searches PyPI-format repositories and automatically handles Python's naming conventions (converts between hyphens and underscores, e.g., 'my-package' vs 'my_package'). Returns matching packages with their versions and download URLs.

name string repository string
get_python_versions
annotations: none low

Get all versions of a specific Python package with pagination. Returns paginated versions of the package with format information (wheel, sdist, etc.) and download URLs. Response includes: - versions: List of versions in this page - hasMore: Whether there are more pages - continuationToken: Token to fetch next page (if hasMore is true)

page_size string repository string package_name string continuation_token string
list_docker_images
annotations: none low

List all Docker images in a repository. Returns all Docker images available in the specified repository with their available tags (sorted by tag name).

repository string
get_docker_tags
annotations: none low

Get all tags/versions for a specific Docker image. Returns detailed information about all tags for the specified image, including manifests, digests, and download URLs.

image_name string repository string

Permissions 3

network medium
Server uses network capabilities via: httpx, urllib
filesystem low
Server uses filesystem capabilities via: os
env_vars low
Server uses env_vars capabilities via: os.environ

Scan Findings 38

low
Tool 'search_maven_artifact' has no annotations annotation_checker · 100%
low
Tool 'get_maven_versions' has no annotations annotation_checker · 100%
low
Tool 'search_python_package' has no annotations annotation_checker · 100%
low
Tool 'get_python_versions' has no annotations annotation_checker · 100%
low
Tool 'list_docker_images' has no annotations annotation_checker · 100%
low
Tool 'get_docker_tags' has no annotations annotation_checker · 100%
info
Sandbox failed to start for behavioral verification behavioral_verifier · 100%
medium
Vulnerable dependency: fastmcp@0.1.0 (GHSA-5h2m-4q8j-pqpj) dependency_analyzer · 95%
medium
Vulnerable dependency: fastmcp@0.1.0 (GHSA-c2jp-c369-7pvx) dependency_analyzer · 95%
medium
Vulnerable dependency: fastmcp@0.1.0 (GHSA-m8x7-r2rg-vh5g) dependency_analyzer · 95%
medium
Vulnerable dependency: fastmcp@0.1.0 (GHSA-mxxr-jv3v-6pgc) dependency_analyzer · 95%
medium
Vulnerable dependency: fastmcp@0.1.0 (GHSA-rcfx-77hg-w2wv) dependency_analyzer · 95%
medium
Vulnerable dependency: fastmcp@0.1.0 (GHSA-rj5c-58rq-j5g5) dependency_analyzer · 95%
medium
Vulnerable dependency: fastmcp@0.1.0 (GHSA-rww4-4w9c-7733) dependency_analyzer · 95%
medium
Vulnerable dependency: fastmcp@0.1.0 (GHSA-vv7q-7jx5-f767) dependency_analyzer · 95%
medium
Vulnerable dependency: fastmcp@0.1.0 (PYSEC-2026-1364) dependency_analyzer · 95%
medium
Vulnerable dependency: fastmcp@0.1.0 (PYSEC-2026-1365) dependency_analyzer · 95%
medium
Vulnerable dependency: fastmcp@0.1.0 (PYSEC-2026-2474) dependency_analyzer · 95%
medium
Vulnerable dependency: fastmcp@0.1.0 (PYSEC-2026-2475) dependency_analyzer · 95%
medium
Vulnerable dependency: fastmcp@0.1.0 (PYSEC-2026-2476) dependency_analyzer · 95%
medium
Vulnerable dependency: fastmcp@0.1.0 (PYSEC-2026-338) dependency_analyzer · 95%
medium
Vulnerable dependency: pydantic@2.0.0 (GHSA-mr82-8j83-vxmv) dependency_analyzer · 95%
medium
Vulnerable dependency: pydantic@2.0.0 (PYSEC-2026-1812) dependency_analyzer · 95%
info
pyproject.toml metadata manifest_parser · 100%
info
Tool: search_maven_artifact manifest_parser · 90%
info
Tool: get_maven_versions manifest_parser · 90%
info
Tool: search_python_package manifest_parser · 90%
info
Tool: get_python_versions manifest_parser · 90%
info
Tool: list_docker_images manifest_parser · 90%
info
Tool: get_docker_tags manifest_parser · 90%
info
Transport: streamable-http manifest_parser · 80%
info
Required env vars (3) manifest_parser · 80%
info
Sandbox failed to start for output poisoning scan output_poisoning · 100%
medium
Permission: network access detected permission_analyzer · 90%
low
Permission: filesystem access detected permission_analyzer · 70%
low
Permission: env_vars access detected permission_analyzer · 90%
info
No dependency files found for SBOM generation sbom_generator · 100%
medium
No build provenance detected (SLSA L0) slsa_assessor · 90%