← Back to search

io.github.archradhq/deterministic

archradhq Scanned 20d ago

Deterministic IR/IR-LINT validation, policy packs, drift vs exports (archrad). Apache-2.0.

MCP Registry ↗
C
71.8 / 100

Versions

0.4.1latest
first seen May 19, 2026
PermissionsTool SafetyAuthAnnotationsCode QualityStabilitySpecVuln HistoryAuthorTransparencyCommunity

Tools 6

archrad_lint_summary
annotations: none low

ir unknown irPath string
archrad_suggest_fix
annotations: none low

findingCode string
archrad_list_rule_codes
annotations: none low

archrad_validate_ir
annotations: none low

ir unknown irPath string
archrad_validate_drift
annotations: none low

ir unknown irPath string skipIrLint boolean policiesDirectory string
archrad_policy_packs_load
annotations: none low

name string content string directory string

Permissions 4

network medium
Server uses network capabilities via: axios, fetch(), requests
filesystem low
Server uses filesystem capabilities via: fs, fs sync ops, fs/promises, open(), os, path, pathlib, shutil, tempfile
shell high
Server uses shell capabilities via: child_process, spawnSync(), subprocess
env_vars low
Server uses env_vars capabilities via: os.environ, os.getenv(), process.env

Scan Findings 34

low
Tool 'archrad_validate_ir' has no annotations annotation_checker · 100%
low
Tool 'archrad_lint_summary' has no annotations annotation_checker · 100%
low
Tool 'archrad_suggest_fix' has no annotations annotation_checker · 100%
low
Tool 'archrad_list_rule_codes' has no annotations annotation_checker · 100%
low
Tool 'archrad_validate_drift' has no annotations annotation_checker · 100%
low
Tool 'archrad_policy_packs_load' has no annotations annotation_checker · 100%
info
Sandbox failed to start for behavioral verification behavioral_verifier · 100%
medium
Vulnerable dependency: js-yaml@4.1.0 (GHSA-52cp-r559-cp3m) dependency_analyzer · 95%
medium
Vulnerable dependency: js-yaml@4.1.0 (GHSA-5p4m-2wfm-xmqj) dependency_analyzer · 95%
medium
Vulnerable dependency: js-yaml@4.1.0 (GHSA-h67p-54hq-rp68) dependency_analyzer · 95%
medium
Vulnerable dependency: js-yaml@4.1.0 (GHSA-mh29-5h37-fv8m) dependency_analyzer · 95%
medium
Vulnerable dependency: express@4.18.0 (GHSA-qw6h-vgh9-j6wx) dependency_analyzer · 95%
medium
Vulnerable dependency: express@4.18.0 (GHSA-rv95-896h-c2vc) dependency_analyzer · 95%
medium
Vulnerable dependency: body-parser@1.20.0 (GHSA-qwcr-r2fm-qrc7) dependency_analyzer · 95%
medium
Vulnerable dependency: body-parser@1.20.0 (GHSA-v422-hmwv-36x6) dependency_analyzer · 95%
medium
Vulnerable dependency: ajv@8.12.0 (GHSA-2g4f-4pwh-qvx6) dependency_analyzer · 95%
medium
Hex string literal (>50 chars) in archradhq-arch-deterministic-3d21356/src/policy-pack-sign.test.ts:46 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in archradhq-arch-deterministic-3d21356/src/policy-pack-sign.test.ts:49 entropy_analyzer · 70%
info
package.json metadata manifest_parser · 100%
info
Tool: archrad_validate_ir manifest_parser · 85%
info
Tool: archrad_lint_summary manifest_parser · 85%
info
Tool: archrad_suggest_fix manifest_parser · 85%
info
Tool: archrad_list_rule_codes manifest_parser · 85%
info
Tool: archrad_validate_drift manifest_parser · 85%
info
Tool: archrad_policy_packs_load manifest_parser · 85%
info
Transport: stdio manifest_parser · 90%
info
Required env vars (17) manifest_parser · 80%
info
Sandbox failed to start for output poisoning scan output_poisoning · 100%
medium
Permission: network access detected permission_analyzer · 90%
low
Permission: filesystem access detected permission_analyzer · 90%
high
Permission: shell access detected permission_analyzer · 95%
low
Permission: env_vars access detected permission_analyzer · 90%
info
SBOM generated: 187 components sbom_generator · 100%
medium
No build provenance detected (SLSA L0) slsa_assessor · 90%