← Back to search

io.github.benzsevern/goldenmatch

benzsevern streamable_http Scanned 7d ago

Find duplicate records in 30 seconds. Zero-config entity resolution, 97.2% F1 out of the box.

MCP Registry ↗
? Not scanned yet

Versions

1.4.8latest
first seen May 19, 2026

Tools 0

No tools indexed yet.

Permissions 5

network medium
Server uses network capabilities via: aiohttp, fetch(), http, requests, socket, urllib
filesystem low
Server uses filesystem capabilities via: fs, fs sync ops, fs/promises, glob, open(), os, path, pathlib, shutil, tempfile
shell high
Server uses shell capabilities via: child_process, subprocess
database medium
Server uses database capabilities via: better-sqlite3, pg, psycopg, pymongo, sqlalchemy, sqlite3
env_vars low
Server uses env_vars capabilities via: os.environ, os.getenv(), process.env

Scan Findings 115

info
Sandbox failed to start for behavioral verification behavioral_verifier · 100%
medium
Excessive dependency count: 102 direct dependencies dependency_analyzer · 90%
medium
Suspicious package name: react-dom dependency_analyzer · 60%
medium
Vulnerable dependency: duckdb@1.0 (GHSA-w2gf-jxc9-pf2q) dependency_analyzer · 95%
medium
Vulnerable dependency: duckdb@1.0 (PYSEC-2024-203) dependency_analyzer · 95%
medium
Vulnerable dependency: pyarrow@14.0 (GHSA-5wvp-7f3h-6wmm) dependency_analyzer · 95%
medium
Vulnerable dependency: pyarrow@14.0 (PYSEC-2023-238) dependency_analyzer · 95%
medium
Vulnerable dependency: pyarrow@14.0 (PYSEC-2024-161) dependency_analyzer · 95%
medium
Vulnerable dependency: pyarrow@10 (GHSA-5wvp-7f3h-6wmm) dependency_analyzer · 95%
medium
Vulnerable dependency: pyarrow@10 (PYSEC-2023-238) dependency_analyzer · 95%
medium
Vulnerable dependency: pyarrow@10 (PYSEC-2024-161) dependency_analyzer · 95%
medium
Vulnerable dependency: pydantic@2.7,<3 (GHSA-5jqp-qgf6-3pvh) dependency_analyzer · 95%
medium
Vulnerable dependency: pydantic@2.7,<3 (GHSA-mr82-8j83-vxmv) dependency_analyzer · 95%
medium
Vulnerable dependency: pydantic@2.7,<3 (PYSEC-2021-47) dependency_analyzer · 95%
medium
Vulnerable dependency: pydantic@2.7,<3 (PYSEC-2026-1812) dependency_analyzer · 95%
medium
Vulnerable dependency: pyarrow@15 (GHSA-rgxp-2hwp-jwgg) dependency_analyzer · 95%
medium
Vulnerable dependency: pyarrow@15 (PYSEC-2024-161) dependency_analyzer · 95%
medium
Vulnerable dependency: pyarrow@15 (PYSEC-2026-113) dependency_analyzer · 95%
medium
Vulnerable dependency: duckdb@0.9 (PYSEC-2024-203) dependency_analyzer · 95%
medium
Vulnerable dependency: duckdb@0.9 (PYSEC-2024-25) dependency_analyzer · 95%
medium
Vulnerable dependency: python-multipart@0.0.20 (GHSA-5rvq-cxj2-64vf) dependency_analyzer · 95%
medium
Vulnerable dependency: python-multipart@0.0.20 (GHSA-6jv3-5f52-599m) dependency_analyzer · 95%
medium
Vulnerable dependency: python-multipart@0.0.20 (GHSA-mj87-hwqh-73pj) dependency_analyzer · 95%
medium
Vulnerable dependency: python-multipart@0.0.20 (GHSA-pp6c-gr5w-3c5g) dependency_analyzer · 95%
medium
Vulnerable dependency: python-multipart@0.0.20 (GHSA-v9pg-7xvm-68hf) dependency_analyzer · 95%
medium
Vulnerable dependency: python-multipart@0.0.20 (GHSA-vffw-93wf-4j4q) dependency_analyzer · 95%
medium
Vulnerable dependency: python-multipart@0.0.20 (GHSA-wp53-j4wj-2cfg) dependency_analyzer · 95%
medium
Vulnerable dependency: python-multipart@0.0.20 (PYSEC-2026-1852) dependency_analyzer · 95%
medium
Vulnerable dependency: python-multipart@0.0.20 (PYSEC-2026-3036) dependency_analyzer · 95%
medium
Vulnerable dependency: python-multipart@0.0.20 (PYSEC-2026-3037) dependency_analyzer · 95%
medium
Vulnerable dependency: python-multipart@0.0.20 (PYSEC-2026-3038) dependency_analyzer · 95%
medium
Vulnerable dependency: python-multipart@0.0.20 (PYSEC-2026-3039) dependency_analyzer · 95%
medium
Vulnerable dependency: python-multipart@0.0.20 (PYSEC-2026-3040) dependency_analyzer · 95%
medium
Vulnerable dependency: python-multipart@0.0.20 (PYSEC-2026-3041) dependency_analyzer · 95%
medium
Vulnerable dependency: mcp@1.28.1,<2 (GHSA-3qhf-m339-9g5v) dependency_analyzer · 95%
medium
Vulnerable dependency: mcp@1.28.1,<2 (GHSA-9h52-p55h-vw2f) dependency_analyzer · 95%
medium
Vulnerable dependency: mcp@1.28.1,<2 (GHSA-j975-95f5-7wqh) dependency_analyzer · 95%
medium
Vulnerable dependency: mcp@1.28.1,<2 (GHSA-jpw9-pfvf-9f58) dependency_analyzer · 95%
medium
Vulnerable dependency: mcp@1.28.1,<2 (GHSA-vj7q-gjh5-988w) dependency_analyzer · 95%
medium
Vulnerable dependency: mcp@1.28.1,<2 (PYSEC-2026-1616) dependency_analyzer · 95%
medium
Vulnerable dependency: mcp@1.28.1,<2 (PYSEC-2026-1617) dependency_analyzer · 95%
medium
Vulnerable dependency: mcp@1.28.1,<2 (PYSEC-2026-1618) dependency_analyzer · 95%
medium
Vulnerable dependency: mcp@1.28.1,<2 (PYSEC-2026-3482) dependency_analyzer · 95%
medium
Vulnerable dependency: mcp@1.28.1,<2 (PYSEC-2026-3483) dependency_analyzer · 95%
medium
Vulnerable dependency: starlette@1.0.1 (GHSA-82w8-qh3p-5jfq) dependency_analyzer · 95%
medium
Vulnerable dependency: starlette@1.0.1 (GHSA-jp82-jpqv-5vv3) dependency_analyzer · 95%
medium
Vulnerable dependency: starlette@1.0.1 (GHSA-wqp7-x3pw-xc5r) dependency_analyzer · 95%
medium
Vulnerable dependency: starlette@1.0.1 (GHSA-x746-7m8f-x49c) dependency_analyzer · 95%
medium
Vulnerable dependency: starlette@1.0.1 (PYSEC-2026-2280) dependency_analyzer · 95%
medium
Vulnerable dependency: starlette@1.0.1 (PYSEC-2026-2281) dependency_analyzer · 95%
medium
Vulnerable dependency: starlette@1.0.1 (PYSEC-2026-248) dependency_analyzer · 95%
medium
Vulnerable dependency: starlette@1.0.1 (PYSEC-2026-249) dependency_analyzer · 95%
medium
Vulnerable dependency: pyarrow@14 (GHSA-5wvp-7f3h-6wmm) dependency_analyzer · 95%
medium
Vulnerable dependency: pyarrow@14 (PYSEC-2023-238) dependency_analyzer · 95%
medium
Vulnerable dependency: pyarrow@14 (PYSEC-2024-161) dependency_analyzer · 95%
medium
Vulnerable dependency: click@8.1 (PYSEC-2026-2132) dependency_analyzer · 95%
medium
Vulnerable dependency: dbt-core@1.7 (GHSA-j4g3-3q8x-jxqp) dependency_analyzer · 95%
medium
Vulnerable dependency: dbt-core@1.7 (GHSA-p3f3-5ccg-83xq) dependency_analyzer · 95%
medium
Vulnerable dependency: dbt-core@1.7 (GHSA-p72q-h37j-3hq7) dependency_analyzer · 95%
medium
Vulnerable dependency: dbt-core@1.7 (GHSA-pmrx-695r-4349) dependency_analyzer · 95%
medium
Vulnerable dependency: dbt-core@1.7 (PYSEC-2024-66) dependency_analyzer · 95%
medium
Vulnerable dependency: dbt-core@1.7 (PYSEC-2026-1292) dependency_analyzer · 95%
medium
Hex string literal (>50 chars) in benseverndev-oss-goldenmatch-a1a9736/packages/rust/extensions/duckdb/tests/test_core_apis.py:414 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in benseverndev-oss-goldenmatch-a1a9736/packages/typescript/goldenmatch/tests/parity/record-fingerprint.parity.test.ts:18 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in benseverndev-oss-goldenmatch-a1a9736/packages/typescript/goldenmatch/tests/parity/record-fingerprint.parity.test.ts:19 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in benseverndev-oss-goldenmatch-a1a9736/packages/typescript/goldenmatch/tests/parity/record-fingerprint.parity.test.ts:20 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in benseverndev-oss-goldenmatch-a1a9736/packages/typescript/goldenmatch/tests/parity/record-fingerprint.parity.test.ts:21 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in benseverndev-oss-goldenmatch-a1a9736/packages/typescript/goldenmatch/tests/unit/transforms.test.ts:204 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in benseverndev-oss-goldenmatch-a1a9736/packages/typescript/goldenmatch/tests/unit/transforms.test.ts:210 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in benseverndev-oss-goldenmatch-a1a9736/packages/typescript/goldenmatch/tests/unit/transforms.test.ts:217 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in benseverndev-oss-goldenmatch-a1a9736/packages/typescript/goldenmatch/tests/unit/transforms.test.ts:224 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in benseverndev-oss-goldenmatch-a1a9736/packages/typescript/goldenmatch/tests/unit/transforms.test.ts:231 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in benseverndev-oss-goldenmatch-a1a9736/packages/typescript/goldenmatch/tests/unit/transforms.test.ts:274 entropy_analyzer · 70%
medium
Buffer.from base64 in benseverndev-oss-goldenmatch-a1a9736/packages/typescript/goldenmatch/src/node/mcp/run-tools.ts:236 entropy_analyzer · 75%
medium
Buffer.from base64 in benseverndev-oss-goldenmatch-a1a9736/packages/typescript/goldenmatch-wasm-runtime/src/index.ts:43 entropy_analyzer · 75%
medium
Hex string literal (>50 chars) in benseverndev-oss-goldenmatch-a1a9736/packages/python/goldenmatch/tests/test_qis_gen_parity.py:30 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in benseverndev-oss-goldenmatch-a1a9736/packages/python/goldenmatch/tests/test_qis_gen_parity.py:31 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in benseverndev-oss-goldenmatch-a1a9736/packages/python/goldenmatch/tests/test_qis_gen_parity.py:32 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in benseverndev-oss-goldenmatch-a1a9736/packages/python/goldenmatch/tests/test_qis_gen_parity.py:33 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in benseverndev-oss-goldenmatch-a1a9736/packages/python/goldenmatch/tests/test_qis_gen_parity.py:37 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in benseverndev-oss-goldenmatch-a1a9736/packages/python/goldenmatch/tests/test_qis_gen_parity.py:38 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in benseverndev-oss-goldenmatch-a1a9736/packages/python/goldenmatch/tests/test_qis_gen_parity.py:39 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in benseverndev-oss-goldenmatch-a1a9736/packages/python/goldenmatch/tests/test_record_fingerprint.py:27 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in benseverndev-oss-goldenmatch-a1a9736/packages/python/goldenmatch/tests/test_record_fingerprint.py:28 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in benseverndev-oss-goldenmatch-a1a9736/packages/python/goldenmatch/tests/test_record_fingerprint.py:29 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in benseverndev-oss-goldenmatch-a1a9736/packages/python/goldenmatch/tests/test_record_fingerprint.py:30 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in benseverndev-oss-goldenmatch-a1a9736/packages/python/goldenmatch/goldenmatch/core/_llm_loader.py:75 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in benseverndev-oss-goldenmatch-a1a9736/packages/python/goldenmatch/goldenmatch/core/er_matcher/registry.py:52 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in benseverndev-oss-goldenmatch-a1a9736/packages/python/goldenmatch/tests/identity/test_audit_chain.py:334 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in benseverndev-oss-goldenmatch-a1a9736/packages/jvm/goldenmatch-spark/test/dev/goldensuite/spark/NativeSelfTest.java:219 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in benseverndev-oss-goldenmatch-a1a9736/packages/jvm/goldenmatch-spark/test/dev/goldensuite/spark/NativeSelfTest.java:222 entropy_analyzer · 70%
info
package.json metadata manifest_parser · 100%
info
pyproject.toml metadata manifest_parser · 100%
info
Transport: streamable-http manifest_parser · 80%
info
Required env vars (413) manifest_parser · 80%
info
Sandbox failed to start for output poisoning scan output_poisoning · 100%
medium
Permission: network access detected permission_analyzer · 90%
low
Permission: filesystem access detected permission_analyzer · 90%
high
Permission: shell access detected permission_analyzer · 95%
medium
Permission: database access detected permission_analyzer · 90%
low
Permission: env_vars access detected permission_analyzer · 90%
info
SBOM generated: 218 components sbom_generator · 100%
critical
Database URL with Password found in benseverndev-oss-goldenmatch-a1a9736/docs/ci-lanes.md secret_scanner · 85%
critical
AWS Access Key ID found in benseverndev-oss-goldenmatch-a1a9736/packages/typescript/goldenmatch/warehouse/bigquery/goldenmatch_fingerprint.sql secret_scanner · 95%
critical
AWS Access Key ID found in benseverndev-oss-goldenmatch-a1a9736/packages/typescript/goldenmatch/src/core/_wasm/perceptualWasmBytes.ts secret_scanner · 95%
critical
AWS Access Key ID found in benseverndev-oss-goldenmatch-a1a9736/packages/typescript/goldenmatch/src/core/_wasm/goldenhnswWasmBytes.ts secret_scanner · 95%
critical
AWS Access Key ID found in benseverndev-oss-goldenmatch-a1a9736/packages/typescript/goldenmatch/src/core/_wasm/graphWasmBytes.ts secret_scanner · 95%
critical
AWS Access Key ID found in benseverndev-oss-goldenmatch-a1a9736/packages/typescript/goldenmatch/src/core/_wasm/keyIntegrityWasmBytes.ts secret_scanner · 95%
critical
AWS Access Key ID found in benseverndev-oss-goldenmatch-a1a9736/packages/typescript/goldenmatch/src/core/_wasm/goldenembedWasmBytes.ts secret_scanner · 95%
critical
AWS Access Key ID found in benseverndev-oss-goldenmatch-a1a9736/packages/typescript/goldenmatch/src/core/_wasm/sketchWasmBytes.ts secret_scanner · 95%
critical
AWS Access Key ID found in benseverndev-oss-goldenmatch-a1a9736/packages/typescript/goldencheck/src/core/_wasm/goldencheckWasmBytes.ts secret_scanner · 95%
critical
AWS Access Key ID found in benseverndev-oss-goldenmatch-a1a9736/packages/python/infermap/benchmark/cases/valentine/opendata/miller2_both_50_50_ac5_av_010/source.csv secret_scanner · 95%
critical
AWS Access Key ID found in benseverndev-oss-goldenmatch-a1a9736/packages/python/infermap/benchmark/cases/valentine/opendata/miller2_vertical_70_ac4_av_014/source.csv secret_scanner · 95%
critical
Database URL with Password found in benseverndev-oss-goldenmatch-a1a9736/.github/workflows/ci.yml secret_scanner · 85%
medium
No build provenance detected (SLSA L0) slsa_assessor · 90%