← Back to search

@likec4/mcp

GitHub Actions Scanned 3d ago

Model Context Protocol server for LikeC4

npm ↗
? Not scanned yet

Versions

No versions found.

Tools 0

No tools indexed yet.

Permissions 4

network medium
Server uses network capabilities via: fetch()
filesystem low
Server uses filesystem capabilities via: fs sync ops, pathlib
shell high
Server uses shell capabilities via: child_process, execSync(), spawn(), spawnSync()
env_vars low
Server uses env_vars capabilities via: process.env

Scan Findings 120

medium
OAuth implementation without PKCE auth_checker · 75%
info
Sandbox failed to start for behavioral verification behavioral_verifier · 100%
medium
Excessive dependency count: 316 direct dependencies dependency_analyzer · 90%
medium
Suspicious package name: react-dom dependency_analyzer · 60%
medium
Vulnerable dependency: turbo@catalog: (GHSA-hcf7-66rw-9f5r) dependency_analyzer · 95%
medium
Vulnerable dependency: vitest@catalog:vitest (GHSA-5xrq-8626-4rwp) dependency_analyzer · 95%
medium
Vulnerable dependency: vitest@catalog:vitest (GHSA-9crc-q9x8-hgqq) dependency_analyzer · 95%
medium
Vulnerable dependency: vitest@4.0.16 (GHSA-5xrq-8626-4rwp) dependency_analyzer · 95%
medium
Vulnerable dependency: defu@catalog:utils (GHSA-737v-mqg7-c878) dependency_analyzer · 95%
medium
Vulnerable dependency: zx@catalog: (GHSA-w87r-vg9q-crqm) dependency_analyzer · 95%
medium
Vulnerable dependency: astro@catalog:astro (GHSA-2pvr-wf23-7pc7) dependency_analyzer · 95%
medium
Vulnerable dependency: astro@catalog:astro (GHSA-49w6-73cw-chjr) dependency_analyzer · 95%
medium
Vulnerable dependency: astro@catalog:astro (GHSA-5ff5-9fcw-vg88) dependency_analyzer · 95%
medium
Vulnerable dependency: astro@catalog:astro (GHSA-8hv8-536x-4wqp) dependency_analyzer · 95%
medium
Vulnerable dependency: astro@catalog:astro (GHSA-c4pw-33h3-35xw) dependency_analyzer · 95%
medium
Vulnerable dependency: astro@catalog:astro (GHSA-f48w-9m4c-m7f5) dependency_analyzer · 95%
medium
Vulnerable dependency: astro@catalog:astro (GHSA-fvmw-cj7j-j39q) dependency_analyzer · 95%
medium
Vulnerable dependency: astro@catalog:astro (GHSA-ggxq-hp9w-j794) dependency_analyzer · 95%
medium
Vulnerable dependency: astro@catalog:astro (GHSA-j687-52p2-xcff) dependency_analyzer · 95%
medium
Vulnerable dependency: astro@catalog:astro (GHSA-jrpj-wcv7-9fh9) dependency_analyzer · 95%
medium
Vulnerable dependency: astro@catalog:astro (GHSA-whqg-ppgf-wp8c) dependency_analyzer · 95%
medium
Vulnerable dependency: astro@catalog:astro (GHSA-wrwg-2hg8-v723) dependency_analyzer · 95%
medium
Vulnerable dependency: astro@catalog:astro (GHSA-x3h8-62x9-952g) dependency_analyzer · 95%
medium
Vulnerable dependency: astro@catalog:astro (GHSA-xf8x-j4p2-f749) dependency_analyzer · 95%
medium
Vulnerable dependency: astro@catalog:astro (GHSA-xr5h-phrj-8vxv) dependency_analyzer · 95%
medium
Vulnerable dependency: vite@catalog:vite (GHSA-353f-5xf4-qw67) dependency_analyzer · 95%
medium
Vulnerable dependency: vite@catalog:vite (GHSA-356w-63v5-8wf4) dependency_analyzer · 95%
medium
Vulnerable dependency: vite@catalog:vite (GHSA-4r4m-qw57-chr8) dependency_analyzer · 95%
medium
Vulnerable dependency: vite@catalog:vite (GHSA-4w7w-66w2-5vf9) dependency_analyzer · 95%
medium
Vulnerable dependency: vite@catalog:vite (GHSA-64vr-g452-qvp3) dependency_analyzer · 95%
medium
Vulnerable dependency: vite@catalog:vite (GHSA-859w-5945-r5v3) dependency_analyzer · 95%
medium
Vulnerable dependency: vite@catalog:vite (GHSA-9cwx-2883-4wfx) dependency_analyzer · 95%
medium
Vulnerable dependency: vite@catalog:vite (GHSA-c27g-q93r-2cwf) dependency_analyzer · 95%
medium
Vulnerable dependency: vite@catalog:vite (GHSA-fx2h-pf6j-xcff) dependency_analyzer · 95%
medium
Vulnerable dependency: vite@catalog:vite (GHSA-g4jq-h2w9-997c) dependency_analyzer · 95%
medium
Vulnerable dependency: vite@catalog:vite (GHSA-jqfw-vq24-v9c3) dependency_analyzer · 95%
medium
Vulnerable dependency: vite@catalog:vite (GHSA-mv48-hcvh-8jj8) dependency_analyzer · 95%
medium
Vulnerable dependency: vite@catalog:vite (GHSA-v6wh-96g9-6wx3) dependency_analyzer · 95%
medium
Vulnerable dependency: vite@catalog:vite (GHSA-vg6x-rcgg-rjx6) dependency_analyzer · 95%
medium
Vulnerable dependency: vite@catalog:vite (GHSA-x574-m823-4x7w) dependency_analyzer · 95%
medium
Vulnerable dependency: vite@catalog:vite (GHSA-xcj6-pq6g-qj4x) dependency_analyzer · 95%
medium
Vulnerable dependency: sharp@catalog:utils (GHSA-54xq-cgqr-rpm3) dependency_analyzer · 95%
medium
Vulnerable dependency: sharp@catalog:utils (GHSA-f88m-g3jw-g9cj) dependency_analyzer · 95%
medium
Vulnerable dependency: sharp@catalog:utils (GHSA-gp95-ppv5-3jc5) dependency_analyzer · 95%
medium
Vulnerable dependency: wrangler@catalog:cloudflare (GHSA-8c93-4hch-xgxp) dependency_analyzer · 95%
medium
Vulnerable dependency: @cloudflare/vite-plugin@catalog:cloudflare (GHSA-4pfg-2mw5-f8jx) dependency_analyzer · 95%
medium
Vulnerable dependency: hono@catalog:hono (GHSA-2234-fmw7-43wr) dependency_analyzer · 95%
medium
Vulnerable dependency: hono@catalog:hono (GHSA-26pp-8wgv-hjvm) dependency_analyzer · 95%
medium
Vulnerable dependency: hono@catalog:hono (GHSA-2gcr-mfcq-wcc3) dependency_analyzer · 95%
medium
Vulnerable dependency: hono@catalog:hono (GHSA-3hrh-pfw6-9m5x) dependency_analyzer · 95%
medium
Vulnerable dependency: hono@catalog:hono (GHSA-3mpf-rcc7-5347) dependency_analyzer · 95%
medium
Vulnerable dependency: hono@catalog:hono (GHSA-3vhc-576x-3qv4) dependency_analyzer · 95%
medium
Vulnerable dependency: hono@catalog:hono (GHSA-458j-xx4x-4375) dependency_analyzer · 95%
medium
Vulnerable dependency: hono@catalog:hono (GHSA-5pq2-9x2x-5p6w) dependency_analyzer · 95%
medium
Vulnerable dependency: hono@catalog:hono (GHSA-69xw-7hcm-h432) dependency_analyzer · 95%
medium
Vulnerable dependency: hono@catalog:hono (GHSA-6wqw-2p9w-4vw4) dependency_analyzer · 95%
medium
Vulnerable dependency: hono@catalog:hono (GHSA-88fw-hqm2-52qc) dependency_analyzer · 95%
medium
Vulnerable dependency: hono@catalog:hono (GHSA-8j4g-w8fx-2239) dependency_analyzer · 95%
medium
Vulnerable dependency: hono@catalog:hono (GHSA-92vj-g62v-jqhh) dependency_analyzer · 95%
medium
Vulnerable dependency: hono@catalog:hono (GHSA-9r54-q6cx-xmh5) dependency_analyzer · 95%
medium
Vulnerable dependency: hono@catalog:hono (GHSA-9vqf-7f2p-gf9v) dependency_analyzer · 95%
medium
Vulnerable dependency: hono@catalog:hono (GHSA-f577-qrjj-4474) dependency_analyzer · 95%
medium
Vulnerable dependency: hono@catalog:hono (GHSA-f67f-6cw9-8mq4) dependency_analyzer · 95%
medium
Vulnerable dependency: hono@catalog:hono (GHSA-f6gv-hh8j-q8vq) dependency_analyzer · 95%
medium
Vulnerable dependency: hono@catalog:hono (GHSA-gq3j-xvxp-8hrf) dependency_analyzer · 95%
medium
Vulnerable dependency: hono@catalog:hono (GHSA-hm8q-7f3q-5f36) dependency_analyzer · 95%
medium
Vulnerable dependency: hono@catalog:hono (GHSA-j6c9-x7qj-28xf) dependency_analyzer · 95%
medium
Vulnerable dependency: hono@catalog:hono (GHSA-p6xx-57qc-3wxr) dependency_analyzer · 95%
medium
Vulnerable dependency: hono@catalog:hono (GHSA-p77w-8qqv-26rm) dependency_analyzer · 95%
medium
Vulnerable dependency: hono@catalog:hono (GHSA-q5qw-h33p-qvwr) dependency_analyzer · 95%
medium
Vulnerable dependency: hono@catalog:hono (GHSA-q7jf-gf43-6x6p) dependency_analyzer · 95%
medium
Vulnerable dependency: hono@catalog:hono (GHSA-qp7p-654g-cw7p) dependency_analyzer · 95%
medium
Vulnerable dependency: hono@catalog:hono (GHSA-r354-f388-2fhh) dependency_analyzer · 95%
medium
Vulnerable dependency: hono@catalog:hono (GHSA-r5rp-j6wh-rvv4) dependency_analyzer · 95%
medium
Vulnerable dependency: hono@catalog:hono (GHSA-rpfr-3m35-5vx5) dependency_analyzer · 95%
medium
Vulnerable dependency: hono@catalog:hono (GHSA-rv63-4mwf-qqc2) dependency_analyzer · 95%
medium
Vulnerable dependency: hono@catalog:hono (GHSA-v8w9-8mx6-g223) dependency_analyzer · 95%
medium
Vulnerable dependency: hono@catalog:hono (GHSA-w332-q679-j88p) dependency_analyzer · 95%
medium
Vulnerable dependency: hono@catalog:hono (GHSA-wgpf-jwqj-8h8p) dependency_analyzer · 95%
medium
Vulnerable dependency: hono@catalog:hono (GHSA-wmmm-f939-6g9c) dependency_analyzer · 95%
medium
Vulnerable dependency: hono@catalog:hono (GHSA-wwfh-h76j-fc44) dependency_analyzer · 95%
medium
Vulnerable dependency: hono@catalog:hono (GHSA-xpcf-pg52-r92g) dependency_analyzer · 95%
medium
Vulnerable dependency: hono@catalog:hono (GHSA-xrhx-7g5j-rcj5) dependency_analyzer · 95%
medium
Vulnerable dependency: nanoid@catalog:utils (GHSA-28wg-ghj8-5hjv) dependency_analyzer · 95%
medium
Vulnerable dependency: nanoid@catalog:utils (GHSA-2v37-7h3g-55p8) dependency_analyzer · 95%
medium
Vulnerable dependency: nanoid@catalog:utils (GHSA-mwcw-c2x4-8c55) dependency_analyzer · 95%
medium
Vulnerable dependency: postcss@catalog:css (GHSA-566m-qj78-rww5) dependency_analyzer · 95%
medium
Vulnerable dependency: postcss@catalog:css (GHSA-6g55-p6wh-862q) dependency_analyzer · 95%
medium
Vulnerable dependency: postcss@catalog:css (GHSA-7fh5-64p2-3v2j) dependency_analyzer · 95%
medium
Vulnerable dependency: postcss@catalog:css (GHSA-fxqj-rqcc-2cmp) dependency_analyzer · 95%
medium
Vulnerable dependency: postcss@catalog:css (GHSA-qx2v-qp2m-jg93) dependency_analyzer · 95%
medium
Vulnerable dependency: postcss@catalog:css (GHSA-r28c-9q8g-f849) dependency_analyzer · 95%
medium
Vulnerable dependency: zod@catalog:externals (GHSA-m95q-7qp3-xv42) dependency_analyzer · 95%
medium
Vulnerable dependency: @babel/core@catalog:react (GHSA-4x5r-pxfx-6jf8) dependency_analyzer · 95%
medium
Vulnerable dependency: esbuild@catalog:esbuild (GHSA-67mh-4wv8-2f99) dependency_analyzer · 95%
medium
Vulnerable dependency: playwright@catalog: (GHSA-7mvr-c777-76hp) dependency_analyzer · 95%
medium
Vulnerable dependency: picomatch@catalog:externals (GHSA-3v7f-55p6-f55p) dependency_analyzer · 95%
medium
Vulnerable dependency: picomatch@catalog:externals (GHSA-c2c7-rcm5-vvqj) dependency_analyzer · 95%
medium
Vulnerable dependency: json5@catalog:utils (GHSA-9c47-m6qq-7p4h) dependency_analyzer · 95%
medium
Vulnerable dependency: ws@catalog:ai (GHSA-2mhh-w6q8-5hxw) dependency_analyzer · 95%
medium
Vulnerable dependency: ws@catalog:ai (GHSA-6663-c963-2gqg) dependency_analyzer · 95%
medium
Vulnerable dependency: @hono/node-server@catalog:hono (GHSA-92pp-h63x-v22m) dependency_analyzer · 95%
medium
Vulnerable dependency: @hono/node-server@catalog:hono (GHSA-frvp-7c67-39w9) dependency_analyzer · 95%
medium
Vulnerable dependency: @hono/node-server@catalog:hono (GHSA-wc8c-qw6v-h7f6) dependency_analyzer · 95%
medium
Vulnerable dependency: @modelcontextprotocol/sdk@catalog:mcp (GHSA-w48q-cv73-mx4w) dependency_analyzer · 95%
medium
Vulnerable dependency: superjson@catalog:utils (GHSA-5888-ffcr-r425) dependency_analyzer · 95%
medium
Vulnerable dependency: esbuild@catalog:esbuild-wasm (GHSA-67mh-4wv8-2f99) dependency_analyzer · 95%
medium
Buffer.from base64 in likec4-likec4-84ff665/packages/likec4/src/vite/vite-build.spec.ts:87 entropy_analyzer · 75%
medium
Buffer.from base64 in likec4-likec4-84ff665/packages/generators/src/drawio/parse-drawio.ts:1411 entropy_analyzer · 75%
medium
High-entropy string (5.95 bits/char) in likec4-likec4-84ff665/packages/vscode/src/panel/writeHTMLToWebview.ts:79 entropy_analyzer · 54%
info
package.json metadata manifest_parser · 100%
info
Transport: streamable-http manifest_parser · 80%
info
Required env vars (18) manifest_parser · 80%
info
Sandbox failed to start for output poisoning scan output_poisoning · 100%
medium
Permission: network access detected permission_analyzer · 70%
low
Permission: filesystem access detected permission_analyzer · 90%
high
Permission: shell access detected permission_analyzer · 95%
low
Permission: env_vars access detected permission_analyzer · 90%
info
SBOM generated: 283 components sbom_generator · 100%
medium
No build provenance detected (SLSA L0) slsa_assessor · 90%