← Back to search Server uses network capabilities via: http, socket, urllib Server uses filesystem capabilities via: fs, fs sync ops, open(), os, path, pathlib, shutil, tempfile Server uses shell capabilities via: child_process, spawn(), subprocess Server uses database capabilities via: sqlite3 Server uses env_vars capabilities via: os.environ, os.getenv(), process.env
io.github.SaravananJaichandar/world-model-mcp
Temporal knowledge graph for codebases with constraint enforcement at the edit boundary.
? Not scanned yet
Versions
0.10.0latestfirst seen Jul 1, 2026
0.6.1first seen Jun 5, 2026
0.7.1first seen May 19, 2026
Tools 0
No tools indexed yet.
Permissions 5
network medium filesystem low shell high database medium env_vars low Scan Findings 45
medium
OAuth implementation without PKCE
info
Sandbox failed to start for behavioral verification
medium
Vulnerable dependency: mcp@1.0.0,<1.29.0 (GHSA-3qhf-m339-9g5v)
medium
Vulnerable dependency: mcp@1.0.0,<1.29.0 (GHSA-9h52-p55h-vw2f)
medium
Vulnerable dependency: mcp@1.0.0,<1.29.0 (GHSA-j975-95f5-7wqh)
medium
Vulnerable dependency: mcp@1.0.0,<1.29.0 (GHSA-jpw9-pfvf-9f58)
medium
Vulnerable dependency: mcp@1.0.0,<1.29.0 (GHSA-vj7q-gjh5-988w)
medium
Vulnerable dependency: mcp@1.0.0,<1.29.0 (PYSEC-2026-1616)
medium
Vulnerable dependency: mcp@1.0.0,<1.29.0 (PYSEC-2026-1617)
medium
Vulnerable dependency: mcp@1.0.0,<1.29.0 (PYSEC-2026-1618)
medium
Vulnerable dependency: mcp@1.0.0,<1.29.0 (PYSEC-2026-3482)
medium
Vulnerable dependency: mcp@1.0.0,<1.29.0 (PYSEC-2026-3483)
medium
Vulnerable dependency: pydantic@2.0.0 (GHSA-mr82-8j83-vxmv)
medium
Vulnerable dependency: pydantic@2.0.0 (PYSEC-2026-1812)
medium
Vulnerable dependency: python-dotenv@1.0.0 (GHSA-mf9w-mj56-hr94)
medium
Vulnerable dependency: python-dotenv@1.0.0 (PYSEC-2026-2270)
medium
Vulnerable dependency: cryptography@42.0.0 (GHSA-537c-gmf6-5ccf)
medium
Vulnerable dependency: cryptography@42.0.0 (GHSA-6vqw-3v5j-54x4)
medium
Vulnerable dependency: cryptography@42.0.0 (GHSA-79v4-65xg-pq4g)
medium
Vulnerable dependency: cryptography@42.0.0 (GHSA-9v9h-cgj8-h64p)
medium
Vulnerable dependency: cryptography@42.0.0 (GHSA-h4gh-qq45-vh27)
medium
Vulnerable dependency: cryptography@42.0.0 (GHSA-jwv3-5hgf-82ww)
medium
Vulnerable dependency: cryptography@42.0.0 (GHSA-m2h6-j472-rp4c)
medium
Vulnerable dependency: cryptography@42.0.0 (GHSA-m959-cc7f-wv43)
medium
Vulnerable dependency: cryptography@42.0.0 (GHSA-r6ph-v2qm-q3c2)
medium
Vulnerable dependency: cryptography@42.0.0 (PYSEC-2024-225)
medium
Vulnerable dependency: cryptography@42.0.0 (PYSEC-2026-1284)
medium
Vulnerable dependency: cryptography@42.0.0 (PYSEC-2026-1285)
medium
Vulnerable dependency: cryptography@42.0.0 (PYSEC-2026-2141)
medium
Vulnerable dependency: cryptography@42.0.0 (PYSEC-2026-35)
medium
Vulnerable dependency: cryptography@42.0.0 (PYSEC-2026-3553)
medium
Vulnerable dependency: cryptography@42.0.0 (PYSEC-2026-3554)
medium
Hex string literal (>50 chars) in SaravananJaichandar-world-model-mcp-6ffd85b/tests/test_v0130_merkle.py:292
info
package.json metadata
info
pyproject.toml metadata
info
Transport: stdio
info
Required env vars (27)
info
Sandbox failed to start for output poisoning scan
medium
Permission: network access detected
low
Permission: filesystem access detected
high
Permission: shell access detected
medium
Permission: database access detected
low
Permission: env_vars access detected
info
SBOM generated: 3 components
medium
No build provenance detected (SLSA L0)