← Back to search

io.github.piiiico/proof-of-commitment

piiiico streamable_http Scanned 27d ago

Supply chain risk scoring for npm, PyPI, Cargo, and Go. 9 tools. Behavioral signals.

MCP Registry ↗
D
40 / 100

Versions

0.5.0latest
first seen Jun 5, 2026
PermissionsTool SafetyAuthAnnotationsCode QualityStabilitySpecVuln HistoryAuthorTransparencyCommunity

Tools 1

query_commitment
annotations: none low

Query verified behavioral commitment data for a domain. Returns aggregated signals: unique verified visitors, repeat visit rate, and average time spent. These prove real human engagement — harder to fake than reviews or content.

Permissions 4

network medium
Server uses network capabilities via: fetch(), urllib
filesystem low
Server uses filesystem capabilities via: fs, fs sync ops, open(), path, pathlib
shell high
Server uses shell capabilities via: child_process, execSync(), subprocess
env_vars low
Server uses env_vars capabilities via: process.env

Scan Findings 62

low
Tool 'query_commitment' has no annotations annotation_checker · 100%
info
Sandbox failed to start for behavioral verification behavioral_verifier · 100%
medium
Suspicious package name: lodash.startcase dependency_analyzer · 60%
medium
Vulnerable dependency: hono@4.12.8 (GHSA-26pp-8wgv-hjvm) dependency_analyzer · 95%
medium
Vulnerable dependency: hono@4.12.8 (GHSA-2gcr-mfcq-wcc3) dependency_analyzer · 95%
medium
Vulnerable dependency: hono@4.12.8 (GHSA-3hrh-pfw6-9m5x) dependency_analyzer · 95%
medium
Vulnerable dependency: hono@4.12.8 (GHSA-458j-xx4x-4375) dependency_analyzer · 95%
medium
Vulnerable dependency: hono@4.12.8 (GHSA-54fx-42gc-7vw4) dependency_analyzer · 95%
medium
Vulnerable dependency: hono@4.12.8 (GHSA-69xw-7hcm-h432) dependency_analyzer · 95%
medium
Vulnerable dependency: hono@4.12.8 (GHSA-79qm-7rj5-m7r9) dependency_analyzer · 95%
medium
Vulnerable dependency: hono@4.12.8 (GHSA-88fw-hqm2-52qc) dependency_analyzer · 95%
medium
Vulnerable dependency: hono@4.12.8 (GHSA-8j4g-w8fx-2239) dependency_analyzer · 95%
medium
Vulnerable dependency: hono@4.12.8 (GHSA-9vqf-7f2p-gf9v) dependency_analyzer · 95%
medium
Vulnerable dependency: hono@4.12.8 (GHSA-crvj-82cr-hjcx) dependency_analyzer · 95%
medium
Vulnerable dependency: hono@4.12.8 (GHSA-f23p-vx2j-j53r) dependency_analyzer · 95%
medium
Vulnerable dependency: hono@4.12.8 (GHSA-f577-qrjj-4474) dependency_analyzer · 95%
medium
Vulnerable dependency: hono@4.12.8 (GHSA-g6gw-c38x-mqfc) dependency_analyzer · 95%
medium
Vulnerable dependency: hono@4.12.8 (GHSA-gqvv-2mrq-wpjv) dependency_analyzer · 95%
medium
Vulnerable dependency: hono@4.12.8 (GHSA-hm8q-7f3q-5f36) dependency_analyzer · 95%
medium
Vulnerable dependency: hono@4.12.8 (GHSA-hvrm-45r6-mjfj) dependency_analyzer · 95%
medium
Vulnerable dependency: hono@4.12.8 (GHSA-j6c9-x7qj-28xf) dependency_analyzer · 95%
medium
Vulnerable dependency: hono@4.12.8 (GHSA-p77w-8qqv-26rm) dependency_analyzer · 95%
medium
Vulnerable dependency: hono@4.12.8 (GHSA-qp7p-654g-cw7p) dependency_analyzer · 95%
medium
Vulnerable dependency: hono@4.12.8 (GHSA-r5rp-j6wh-rvv4) dependency_analyzer · 95%
medium
Vulnerable dependency: hono@4.12.8 (GHSA-rv63-4mwf-qqc2) dependency_analyzer · 95%
medium
Vulnerable dependency: hono@4.12.8 (GHSA-w62v-xxxg-mg59) dependency_analyzer · 95%
medium
Vulnerable dependency: hono@4.12.8 (GHSA-wgpf-jwqj-8h8p) dependency_analyzer · 95%
medium
Vulnerable dependency: hono@4.12.8 (GHSA-wmmm-f939-6g9c) dependency_analyzer · 95%
medium
Vulnerable dependency: hono@4.12.8 (GHSA-wwfh-h76j-fc44) dependency_analyzer · 95%
medium
Vulnerable dependency: hono@4.12.8 (GHSA-xf4j-xp2r-rqqx) dependency_analyzer · 95%
medium
Vulnerable dependency: hono@4.12.8 (GHSA-xgm2-5f3f-mvvc) dependency_analyzer · 95%
medium
Vulnerable dependency: hono@4.12.8 (GHSA-xpcf-pg52-r92g) dependency_analyzer · 95%
medium
Vulnerable dependency: hono@4.12.8 (GHSA-xrhx-7g5j-rcj5) dependency_analyzer · 95%
medium
Vulnerable dependency: micromatch@4.0.2 (GHSA-952p-6rrq-rcjv) dependency_analyzer · 95%
medium
Vulnerable dependency: semver@7.3.5 (GHSA-c2qf-rxjj-qqgw) dependency_analyzer · 95%
medium
Vulnerable dependency: undici@7.24.2 (GHSA-35p6-xmwp-9g52) dependency_analyzer · 95%
medium
Vulnerable dependency: undici@7.24.2 (GHSA-4cwx-7wf7-3272) dependency_analyzer · 95%
medium
Vulnerable dependency: undici@7.24.2 (GHSA-8xcm-r25x-g524) dependency_analyzer · 95%
medium
Vulnerable dependency: undici@7.24.2 (GHSA-g8m3-5g58-fq7m) dependency_analyzer · 95%
medium
Vulnerable dependency: undici@7.24.2 (GHSA-hm92-r4w5-c3mj) dependency_analyzer · 95%
medium
Vulnerable dependency: undici@7.24.2 (GHSA-jr45-8vmc-qm54) dependency_analyzer · 95%
medium
Vulnerable dependency: undici@7.24.2 (GHSA-m8rv-5g2x-5cg5) dependency_analyzer · 95%
medium
Vulnerable dependency: undici@7.24.2 (GHSA-p88m-4jfj-68fv) dependency_analyzer · 95%
medium
Vulnerable dependency: undici@7.24.2 (GHSA-pr7r-676h-xcf6) dependency_analyzer · 95%
medium
Vulnerable dependency: undici@7.24.2 (GHSA-v3r7-h72x-cjcm) dependency_analyzer · 95%
medium
Vulnerable dependency: undici@7.24.2 (GHSA-vmh5-mc38-953g) dependency_analyzer · 95%
medium
Vulnerable dependency: undici@7.24.2 (GHSA-vxpw-j846-p89q) dependency_analyzer · 95%
medium
Vulnerable dependency: minimatch@10.2.2 (GHSA-23c5-xmqv-rm74) dependency_analyzer · 95%
medium
Vulnerable dependency: minimatch@10.2.2 (GHSA-7r86-cg39-jmmj) dependency_analyzer · 95%
high
Long hex escape sequence in piiiico-proof-of-commitment-bab8111/contracts/lib/openzeppelin-contracts/test/utils/Strings.test.js:360 entropy_analyzer · 85%
info
package.json metadata manifest_parser · 100%
info
Tool: query_commitment manifest_parser · 70%
info
Transport: streamable-http manifest_parser · 80%
info
Required env vars (19) manifest_parser · 80%
info
Sandbox failed to start for output poisoning scan output_poisoning · 100%
medium
Permission: network access detected permission_analyzer · 80%
low
Permission: filesystem access detected permission_analyzer · 90%
high
Permission: shell access detected permission_analyzer · 95%
low
Permission: env_vars access detected permission_analyzer · 90%
info
SBOM generated: 731 components sbom_generator · 100%
critical
AWS Access Key ID found in piiiico-proof-of-commitment-bab8111/src/backend/og-font.ts secret_scanner · 95%
medium
No build provenance detected (SLSA L0) slsa_assessor · 90%