← Back to search

kozou

GitHub Actions Scanned 5d ago

Kozou CLI: scaffolding, schema introspection, and MCP server entry points.

npm
D
40 / 100

Versions

1.17.0latest
Jul 27, 2026
1.16.0
Jul 22, 2026
1.15.1
Jul 19, 2026
1.15.0
Jul 19, 2026
1.14.0
Jul 14, 2026
+ show 29 moreshow less
1.13.0
Jul 13, 2026
1.12.4
Jun 24, 2026
1.12.3
Jun 23, 2026
1.12.2
Jun 21, 2026
1.12.1
Jun 19, 2026
1.12.0
Jun 18, 2026
1.11.0
Jun 17, 2026
1.10.0
Jun 17, 2026
1.9.1
Jun 16, 2026
1.9.0
Jun 16, 2026
1.8.1
Jun 16, 2026
1.8.0
Jun 15, 2026
1.7.0
Jun 14, 2026
1.6.0
Jun 14, 2026
1.5.1
Jun 14, 2026
1.5.0
Jun 14, 2026
1.4.2
Jun 13, 2026
1.4.1
Jun 13, 2026
1.4.0
Jun 13, 2026
1.3.0
Jun 13, 2026
1.2.0
Jun 12, 2026
1.1.1
Jun 12, 2026
1.1.0
Jun 11, 2026
1.0.0
Jun 8, 2026
0.2.1
Jun 4, 2026
0.2.0
Jun 4, 2026
0.1.1
May 30, 2026
0.1.0
May 27, 2026
0.0.2
May 21, 2026
PermissionsTool SafetyAuthAnnotationsCode QualityStabilitySpecVuln HistoryAuthorTransparencyCommunity

Tools 1

search_schema
annotations: none low

Search the schema documentation for a substring and return ranked hits

Permissions 4

network medium
Server uses network capabilities via: fetch()
shell high
Server uses shell capabilities via: child_process, spawn(), spawnSync()
database medium
Server uses database capabilities via: pg
env_vars low
Server uses env_vars capabilities via: process.env

Scan Findings 30

medium
Vulnerable dependency: @kozou/core@workspace:* (GHSA-v52w-28xh-v562) dependency_analyzer · 95%
low
Tool 'search_schema' has no annotations annotation_checker · 100%
high
Hardcoded OAuth client secret in kozou-dev-kozou-9bc7339/packages/mcp/test/keycloak.e2e.test.ts auth_checker · 95%
info
Sandbox failed to start for behavioral verification behavioral_verifier · 100%
medium
Excessive dependency count: 51 direct dependencies dependency_analyzer · 90%
medium
Suspicious package name: react-dom dependency_analyzer · 60%
medium
Vulnerable dependency: vite@8.0.14 (GHSA-fx2h-pf6j-xcff) dependency_analyzer · 95%
medium
Vulnerable dependency: vite@8.0.14 (GHSA-v6wh-96g9-6wx3) dependency_analyzer · 95%
medium
Vulnerable dependency: @modelcontextprotocol/sdk@1.0.0 (GHSA-w48q-cv73-mx4w) dependency_analyzer · 95%
medium
Vulnerable dependency: kozou@workspace:* (GHSA-v52w-28xh-v562) dependency_analyzer · 95%
medium
Vulnerable dependency: @kozou/api@workspace:* (GHSA-v52w-28xh-v562) dependency_analyzer · 95%
medium
Vulnerable dependency: @sveltejs/kit@2.69.1 (GHSA-29g2-3rmr-qm68) dependency_analyzer · 95%
medium
Vulnerable dependency: @kozou/mcp@workspace:* (GHSA-v52w-28xh-v562) dependency_analyzer · 95%
medium
Vulnerable dependency: yaml@2.6.0 (GHSA-48c2-rrv3-qjmp) dependency_analyzer · 95%
info
package.json metadata manifest_parser · 100%
info
pyproject.toml metadata manifest_parser · 100%
info
Tool: search_schema manifest_parser · 75%
info
Transport: streamable-http manifest_parser · 80%
info
Required env vars (26) manifest_parser · 80%
info
Sandbox failed to start for output poisoning scan output_poisoning · 100%
medium
Permission: network access detected permission_analyzer · 70%
high
Permission: shell access detected permission_analyzer · 95%
medium
Permission: database access detected permission_analyzer · 90%
low
Permission: env_vars access detected permission_analyzer · 90%
info
SBOM generated: 58 components sbom_generator · 100%
critical
Database URL with Password found in kozou-dev-kozou-9bc7339/packages/svelte-ui/e2e/setup/global-setup.ts secret_scanner · 85%
critical
Database URL with Password found in kozou-dev-kozou-9bc7339/packages/kozou/e2e/setup/global-setup.ts secret_scanner · 85%
critical
Database URL with Password found in kozou-dev-kozou-9bc7339/packages/kozou/src/templates/docker-compose.yml secret_scanner · 85%
critical
Database URL with Password found in kozou-dev-kozou-9bc7339/examples/quickstart/docker-compose.yml secret_scanner · 85%
medium
No build provenance detected (SLSA L0) slsa_assessor · 90%