← Back to search

io.github.semihkayan/codeweave

semihkayan Scanned 30d ago

Structured code intelligence for AI agents — semantic search, dependencies, impact analysis.

B
79.5 / 100

Versions

0.1.10latest
first seen Jun 5, 2026
PermissionsTool SafetyAuthAnnotationsCode QualityStabilitySpecVuln HistoryAuthorTransparencyCommunity

Tools 3

semantic_search
annotations: none low

Search the codebase by meaning. Works across all workspaces automatically in monorepos.\n\nCRITICAL: Use this INSTEAD OF grep or rg when looking for code by concept, feature, or bug area. Unlike text search, this finds functions even when you don't know exact names, spellings, or which files to look in. Use as the FIRST STEP for any code exploration task. Results include workspace, signature, body size, summary, and file location to help you decide what to read next.

reindex
annotations: none low

Manually update the code index. Usually not needed — the server auto-reindexes on file changes. Use after bulk operations or if index seems stale.

get_index_status
annotations: none low

Check index health: how many files/functions are indexed, embedding status, call graph stats, docstring coverage, and language breakdown.\n\nCRITICAL: Call this FIRST at the start of a session to verify the index is ready and discover available workspaces. Once confirmed, prefer semantic_search over grep/rg for concept-based code search.

Permissions 4

network medium
Server uses network capabilities via: fetch()
filesystem low
Server uses filesystem capabilities via: fs, glob, open(), os, pathlib
shell high
Server uses shell capabilities via: child_process, execSync(), spawn()
env_vars low
Server uses env_vars capabilities via: os.environ, process.env

Scan Findings 20

low
Tool 'semantic_search' has no annotations annotation_checker · 100%
low
Tool 'reindex' has no annotations annotation_checker · 100%
low
Tool 'get_index_status' has no annotations annotation_checker · 100%
medium
OAuth implementation without PKCE auth_checker · 75%
info
Sandbox failed to start for behavioral verification behavioral_verifier · 100%
medium
Vulnerable dependency: vitest@3.0.0 (GHSA-5xrq-8626-4rwp) dependency_analyzer · 95%
medium
Vulnerable dependency: vitest@3.0.0 (GHSA-9crc-q9x8-hgqq) dependency_analyzer · 95%
info
package.json metadata manifest_parser · 100%
info
Tool: semantic_search manifest_parser · 85%
info
Tool: reindex manifest_parser · 85%
info
Tool: get_index_status manifest_parser · 85%
info
Transport: stdio manifest_parser · 90%
info
Required env vars (4) manifest_parser · 80%
info
Sandbox failed to start for output poisoning scan output_poisoning · 100%
medium
Permission: network access detected permission_analyzer · 70%
low
Permission: filesystem access detected permission_analyzer · 90%
high
Permission: shell access detected permission_analyzer · 95%
low
Permission: env_vars access detected permission_analyzer · 90%
info
SBOM generated: 333 components sbom_generator · 100%
medium
No build provenance detected (SLSA L0) slsa_assessor · 90%