← Back to search

@bytebase/dbhub

GitHub Actions Scanned 13d ago

Minimal, token-efficient Database MCP Server for PostgreSQL, MySQL, SQL Server, SQLite, MariaDB

npm
? Not scanned yet

Versions

1.1.0latest
Jul 31, 2026
1.0.0
Jul 29, 2026
0.24.0
Jul 20, 2026
0.23.0
Jul 10, 2026
0.22.6
Jun 24, 2026
+ show 69 moreshow less
0.22.5
Jun 24, 2026
0.22.4
Jun 23, 2026
0.22.3
Jun 9, 2026
0.22.2
Jun 7, 2026
0.22.1
Jun 7, 2026
0.21.2
Apr 7, 2026
0.21.1
Apr 3, 2026
0.21.0
Mar 28, 2026
0.20.0
Mar 27, 2026
0.19.1
Mar 24, 2026
0.19.0
Mar 12, 2026
0.18.0
Mar 5, 2026
0.17.0
Feb 23, 2026
0.16.1
Feb 19, 2026
0.16.0
Feb 3, 2026
0.15.0
Dec 27, 2025
0.14.0
Dec 22, 2025
0.13.2
Dec 18, 2025
0.13.1
Dec 17, 2025
0.13.0
Dec 7, 2025
0.12.0
Dec 1, 2025
0.11.10
Nov 25, 2025
0.11.9
Nov 25, 2025
0.11.8
Nov 24, 2025
0.11.7
Nov 23, 2025
0.11.6
Oct 12, 2025
0.11.5
Oct 9, 2025
0.11.4
Sep 23, 2025
0.11.3
Sep 2, 2025
0.11.2
Jul 22, 2025
0.11.1
Jul 22, 2025
0.11.0
Jul 21, 2025
0.10.0
Jun 26, 2025
0.9.0
Jun 14, 2025
0.8.4
Jun 14, 2025
0.8.2
Jun 14, 2025
0.7.0
Jun 8, 2025
0.6.2
Jun 5, 2025
0.6.1
Jun 5, 2025
0.6.0
Jun 5, 2025
0.5.0
Jun 5, 2025
0.4.11
Jun 5, 2025
0.4.10
May 28, 2025
0.4.9
May 28, 2025
0.4.8
May 21, 2025
0.4.7
May 10, 2025
0.4.6
May 10, 2025
0.4.5
May 6, 2025
0.4.2
May 6, 2025
0.4.1
Apr 30, 2025
0.4.0
Apr 27, 2025
0.3.3
Apr 23, 2025
0.3.2
Apr 23, 2025
0.3.1
Apr 13, 2025
0.3.0
Apr 10, 2025
0.2.3
Mar 25, 2025
0.2.2
Mar 25, 2025
0.1.2
Mar 18, 2025
0.1.1
Mar 17, 2025
0.1.0
Mar 16, 2025
0.0.8
Mar 16, 2025
0.0.7
Mar 16, 2025
0.0.6
Mar 15, 2025
0.0.5
Mar 12, 2025
0.0.4
Mar 12, 2025
0.0.3
Mar 12, 2025
0.0.2-20250312
Mar 12, 2025
0.0.1
Mar 12, 2025
0.0.1-20250312.929c614
Mar 12, 2025
0.24.0latest
first seen Jul 21, 2026
0.13.1
first seen Jun 5, 2026
0.21.1
first seen May 19, 2026

Tools 0

No tools indexed yet.

Permissions 0

No permissions indexed yet.

Scan Findings 49

info
Sandbox failed to start for behavioral verification behavioral_verifier · 100%
medium
Suspicious package name: react-dom dependency_analyzer · 60%
medium
Vulnerable dependency: express@4.18.2 (GHSA-qw6h-vgh9-j6wx) dependency_analyzer · 95%
medium
Vulnerable dependency: express@4.18.2 (GHSA-rv95-896h-c2vc) dependency_analyzer · 95%
medium
Vulnerable dependency: vitest@4.0.6 (GHSA-5xrq-8626-4rwp) dependency_analyzer · 95%
medium
Vulnerable dependency: vite@6.0.3 (GHSA-356w-63v5-8wf4) dependency_analyzer · 95%
medium
Vulnerable dependency: vite@6.0.3 (GHSA-4r4m-qw57-chr8) dependency_analyzer · 95%
medium
Vulnerable dependency: vite@6.0.3 (GHSA-4w7w-66w2-5vf9) dependency_analyzer · 95%
medium
Vulnerable dependency: vite@6.0.3 (GHSA-859w-5945-r5v3) dependency_analyzer · 95%
medium
Vulnerable dependency: vite@6.0.3 (GHSA-93m4-6634-74q7) dependency_analyzer · 95%
medium
Vulnerable dependency: vite@6.0.3 (GHSA-fx2h-pf6j-xcff) dependency_analyzer · 95%
medium
Vulnerable dependency: vite@6.0.3 (GHSA-g4jq-h2w9-997c) dependency_analyzer · 95%
medium
Vulnerable dependency: vite@6.0.3 (GHSA-jqfw-vq24-v9c3) dependency_analyzer · 95%
medium
Vulnerable dependency: vite@6.0.3 (GHSA-p9ff-h696-f583) dependency_analyzer · 95%
medium
Vulnerable dependency: vite@6.0.3 (GHSA-v6wh-96g9-6wx3) dependency_analyzer · 95%
medium
Vulnerable dependency: vite@6.0.3 (GHSA-vg6x-rcgg-rjx6) dependency_analyzer · 95%
medium
Vulnerable dependency: vite@6.0.3 (GHSA-x574-m823-4x7w) dependency_analyzer · 95%
medium
Vulnerable dependency: vite@6.0.3 (GHSA-xcj6-pq6g-qj4x) dependency_analyzer · 95%
medium
Buffer.from base64 in bytebase-dbhub-13371f4/src/utils/ssh-tunnel.ts:71 entropy_analyzer · 75%
info
package.json metadata manifest_parser · 100%
info
Transport: streamable-http manifest_parser · 80%
info
Required env vars (34) manifest_parser · 80%
info
Sandbox failed to start for output poisoning scan output_poisoning · 100%
medium
Permission: network access detected permission_analyzer · 70%
low
Permission: filesystem access detected permission_analyzer · 90%
high
Permission: shell access detected permission_analyzer · 95%
low
Permission: env_vars access detected permission_analyzer · 90%
info
SBOM generated: 51 components sbom_generator · 100%
critical
Database URL with Password found in bytebase-dbhub-13371f4/dbhub.toml.example secret_scanner · 85%
high
Hardcoded Password found in bytebase-dbhub-13371f4/dbhub.toml.example secret_scanner · 65%
critical
Database URL with Password found in bytebase-dbhub-13371f4/README.md secret_scanner · 85%
critical
Database URL with Password found in bytebase-dbhub-13371f4/CLAUDE.md secret_scanner · 85%
critical
Database URL with Password found in bytebase-dbhub-13371f4/plugin/README.md secret_scanner · 85%
critical
Database URL with Password found in bytebase-dbhub-13371f4/mcpb/manifest.json secret_scanner · 85%
critical
Database URL with Password found in bytebase-dbhub-13371f4/docs/installation.mdx secret_scanner · 85%
critical
Database URL with Password found in bytebase-dbhub-13371f4/docs/mcpb.mdx secret_scanner · 85%
critical
Database URL with Password found in bytebase-dbhub-13371f4/src/connectors/interface.ts secret_scanner · 85%
critical
Database URL with Password found in bytebase-dbhub-13371f4/src/connectors/postgres/index.ts secret_scanner · 85%
critical
Database URL with Password found in bytebase-dbhub-13371f4/src/connectors/mysql/index.ts secret_scanner · 85%
critical
Database URL with Password found in bytebase-dbhub-13371f4/plugin/.claude-plugin/plugin.json secret_scanner · 85%
critical
Database URL with Password found in bytebase-dbhub-13371f4/plugin/skills/setup/SKILL.md secret_scanner · 85%
critical
Database URL with Password found in bytebase-dbhub-13371f4/docs/config/debug.mdx secret_scanner · 85%
critical
Database URL with Password found in bytebase-dbhub-13371f4/docs/config/command-line.mdx secret_scanner · 85%
high
Hardcoded Password found in bytebase-dbhub-13371f4/docs/config/command-line.mdx secret_scanner · 65%
critical
Database URL with Password found in bytebase-dbhub-13371f4/docs/config/toml.mdx secret_scanner · 85%
high
Hardcoded Password found in bytebase-dbhub-13371f4/docs/config/toml.mdx secret_scanner · 65%
critical
Database URL with Password found in bytebase-dbhub-13371f4/docs/blog/postgres-mcp-server-review-dbhub.mdx secret_scanner · 85%
medium
No build provenance detected (SLSA L0) slsa_assessor · 90%
high
Declared package '@bytebase/dbhub' matches no manifest in the repo identity_guard · 70%