← Back to search

@rawdash/mcp

GitHub Actions Scanned 14d ago

Rawdash MCP server — exposes dashboards, widgets, and connectors to AI agents

npm ↗
D
40 / 100

Versions

0.29.2latest
Jul 4, 2026
0.29.1
Jul 4, 2026
0.29.0
Jul 4, 2026
0.28.2
Jun 28, 2026
0.28.0
Jun 22, 2026
+ show 31 moreshow less
0.27.0
Jun 17, 2026
0.26.0
Jun 14, 2026
0.25.0
Jun 14, 2026
0.24.0
Jun 13, 2026
0.23.0
Jun 13, 2026
0.22.0
Jun 10, 2026
0.21.1
Jun 8, 2026
0.21.0
Jun 8, 2026
0.20.0
Jun 8, 2026
0.19.0
Jun 7, 2026
0.18.0
Jun 7, 2026
0.17.0
May 31, 2026
0.16.0
May 30, 2026
0.15.0
May 22, 2026
0.14.0
May 22, 2026
0.12.0
May 21, 2026
0.11.0
May 20, 2026
0.10.1
May 20, 2026
0.10.0
May 20, 2026
0.9.0
May 19, 2026
0.8.0
May 18, 2026
0.7.1
May 18, 2026
0.7.0
May 18, 2026
0.6.1
May 18, 2026
0.6.0
May 17, 2026
0.5.0
May 17, 2026
0.4.0
May 17, 2026
0.3.0
May 17, 2026
0.2.0
May 16, 2026
0.1.1
May 12, 2026
0.1.0
May 11, 2026
PermissionsTool SafetyAuthAnnotationsCode QualityStabilitySpecVuln HistoryAuthorTransparencyCommunity

Tools 10

list_widgets
annotations: none low

List all widgets on a dashboard.

set_secret
annotations: none low

Set a secret for the running Rawdash instance. Secret names must be uppercase (e.g. GITHUB_TOKEN). For OSS, secrets are stored in process.env (runtime-only, not persisted).

value string
read_widget
annotations: none low

Fetch resolved widget data. Returns the same shape as the HTTP read API.

widget_id string dashboard_id string
list_dashboards
annotations: none low

List all dashboards available on this Rawdash instance.

add_connector
annotations: none low

Add a connector instance to this Rawdash instance. Settings are validated against the connector

list_connectors
annotations: none low

List all configured connectors and their sync status.

list_secrets
annotations: none low

List secret names known to this Rawdash instance. Values are never returned.

trigger_sync
annotations: none low

Kick off a sync for one or all connectors. Runs in the background and returns immediately once started.

render_widget
annotations: none low

Render a widget as an inline artifact in the chat. Returns a formatted markdown representation of the widget data.

widget_id string dashboard_id string
remove_connector
annotations: none low

Remove a connector from this Rawdash instance. For OSS, this is a runtime-only change. Idempotent — removing a non-existent connector returns success.

connector_id string

Permissions 3

network medium
Server uses network capabilities via: fetch()
shell high
Server uses shell capabilities via: child_process, execSync(), spawn()
env_vars low
Server uses env_vars capabilities via: process.env

Scan Findings 218

low
Tool 'set_secret' has no annotations annotation_checker · 100%
low
Tool 'read_widget' has no annotations annotation_checker · 100%
low
Tool 'list_dashboards' has no annotations annotation_checker · 100%
low
Tool 'add_connector' has no annotations annotation_checker · 100%
low
Tool 'list_connectors' has no annotations annotation_checker · 100%
low
Tool 'trigger_sync' has no annotations annotation_checker · 100%
low
Tool 'list_widgets' has no annotations annotation_checker · 100%
low
Tool 'list_secrets' has no annotations annotation_checker · 100%
low
Tool 'render_widget' has no annotations annotation_checker · 100%
low
Tool 'remove_connector' has no annotations annotation_checker · 100%
high
Hardcoded OAuth client secret in rawdash-rawdash-5391ee0/packages/connectors/wiz/src/wiz.test.ts auth_checker · 95%
high
Hardcoded OAuth client secret in rawdash-rawdash-5391ee0/packages/connectors/wiz/src/property.test.ts auth_checker · 95%
high
Hardcoded OAuth client secret in rawdash-rawdash-5391ee0/packages/connectors/salesforce/src/property.test.ts auth_checker · 95%
high
Hardcoded OAuth client secret in rawdash-rawdash-5391ee0/packages/connectors/salesforce/src/salesforce.test.ts auth_checker · 95%
high
Hardcoded OAuth client secret in rawdash-rawdash-5391ee0/packages/connectors/vanta/src/property.test.ts auth_checker · 95%
high
Hardcoded OAuth client secret in rawdash-rawdash-5391ee0/packages/connectors/vanta/src/vanta.test.ts auth_checker · 95%
high
Hardcoded OAuth client ID in rawdash-rawdash-5391ee0/packages/connectors/azure-monitor/src/example.config.ts auth_checker · 85%
high
Hardcoded OAuth client ID in rawdash-rawdash-5391ee0/packages/connectors/azure-monitor/src/azure-monitor.test.ts auth_checker · 85%
high
Hardcoded OAuth client secret in rawdash-rawdash-5391ee0/packages/connectors/azure-monitor/src/azure-monitor.test.ts auth_checker · 95%
high
Hardcoded OAuth client ID in rawdash-rawdash-5391ee0/packages/connectors/entra-id/src/example.config.ts auth_checker · 85%
high
Hardcoded OAuth client secret in rawdash-rawdash-5391ee0/packages/connectors/entra-id/src/property.test.ts auth_checker · 95%
medium
Vulnerable dependency: hono@4.7.7 (GHSA-26pp-8wgv-hjvm) dependency_analyzer · 95%
high
Hardcoded OAuth client ID in rawdash-rawdash-5391ee0/packages/connectors/entra-id/src/entra-id.test.ts auth_checker · 85%
high
Hardcoded OAuth client secret in rawdash-rawdash-5391ee0/packages/connectors/entra-id/src/entra-id.test.ts auth_checker · 95%
high
Hardcoded OAuth client secret in rawdash-rawdash-5391ee0/packages/connectors/gcp-shared/src/access-token.test.ts auth_checker · 95%
high
Hardcoded OAuth client secret in rawdash-rawdash-5391ee0/packages/connectors/gcp-shared/src/auth.test.ts auth_checker · 95%
high
Hardcoded OAuth client secret in rawdash-rawdash-5391ee0/packages/connectors/auth0/src/property.test.ts auth_checker · 95%
high
Hardcoded OAuth client secret in rawdash-rawdash-5391ee0/packages/connectors/auth0/src/auth0.test.ts auth_checker · 95%
high
Hardcoded OAuth client ID in rawdash-rawdash-5391ee0/packages/connectors/azure-cost/src/example.config.ts auth_checker · 85%
high
Hardcoded OAuth client secret in rawdash-rawdash-5391ee0/packages/connectors/azure-cost/src/azure-cost.test.ts auth_checker · 95%
high
Hardcoded OAuth client secret in rawdash-rawdash-5391ee0/packages/connectors/google-ads/src/google-ads.test.ts auth_checker · 95%
info
Sandbox failed to start for behavioral verification behavioral_verifier · 100%
medium
Excessive dependency count: 262 direct dependencies dependency_analyzer · 90%
medium
Suspicious package name: react-dom dependency_analyzer · 60%
medium
Vulnerable dependency: turbo@2.3.3 (GHSA-3qcw-2rhx-2726) dependency_analyzer · 95%
medium
Vulnerable dependency: turbo@2.3.3 (GHSA-hcf7-66rw-9f5r) dependency_analyzer · 95%
medium
Vulnerable dependency: tsup@8.0.0 (GHSA-3mv9-4h5g-vhg3) dependency_analyzer · 95%
medium
Vulnerable dependency: hono@4.7.7 (GHSA-2gcr-mfcq-wcc3) dependency_analyzer · 95%
medium
Vulnerable dependency: hono@4.7.7 (GHSA-3hrh-pfw6-9m5x) dependency_analyzer · 95%
medium
Vulnerable dependency: hono@4.7.7 (GHSA-3vhc-576x-3qv4) dependency_analyzer · 95%
medium
Vulnerable dependency: hono@4.7.7 (GHSA-458j-xx4x-4375) dependency_analyzer · 95%
medium
Vulnerable dependency: hono@4.7.7 (GHSA-5pq2-9x2x-5p6w) dependency_analyzer · 95%
medium
Vulnerable dependency: hono@4.7.7 (GHSA-69xw-7hcm-h432) dependency_analyzer · 95%
medium
Vulnerable dependency: hono@4.7.7 (GHSA-6wqw-2p9w-4vw4) dependency_analyzer · 95%
medium
Vulnerable dependency: hono@4.7.7 (GHSA-79qm-7rj5-m7r9) dependency_analyzer · 95%
medium
Vulnerable dependency: hono@4.7.7 (GHSA-88fw-hqm2-52qc) dependency_analyzer · 95%
medium
Vulnerable dependency: hono@4.7.7 (GHSA-8j4g-w8fx-2239) dependency_analyzer · 95%
medium
Vulnerable dependency: hono@4.7.7 (GHSA-92vj-g62v-jqhh) dependency_analyzer · 95%
medium
Vulnerable dependency: hono@4.7.7 (GHSA-9r54-q6cx-xmh5) dependency_analyzer · 95%
medium
Vulnerable dependency: hono@4.7.7 (GHSA-9vqf-7f2p-gf9v) dependency_analyzer · 95%
medium
Vulnerable dependency: hono@4.7.7 (GHSA-f23p-vx2j-j53r) dependency_analyzer · 95%
medium
Vulnerable dependency: hono@4.7.7 (GHSA-f577-qrjj-4474) dependency_analyzer · 95%
medium
Vulnerable dependency: hono@4.7.7 (GHSA-f67f-6cw9-8mq4) dependency_analyzer · 95%
medium
Vulnerable dependency: hono@4.7.7 (GHSA-gq3j-xvxp-8hrf) dependency_analyzer · 95%
medium
Vulnerable dependency: hono@4.7.7 (GHSA-hm8q-7f3q-5f36) dependency_analyzer · 95%
medium
Vulnerable dependency: hono@4.7.7 (GHSA-j6c9-x7qj-28xf) dependency_analyzer · 95%
medium
Vulnerable dependency: hono@4.7.7 (GHSA-m732-5p4w-x69g) dependency_analyzer · 95%
medium
Vulnerable dependency: hono@4.7.7 (GHSA-p6xx-57qc-3wxr) dependency_analyzer · 95%
medium
Vulnerable dependency: hono@4.7.7 (GHSA-p77w-8qqv-26rm) dependency_analyzer · 95%
medium
Vulnerable dependency: hono@4.7.7 (GHSA-q5qw-h33p-qvwr) dependency_analyzer · 95%
medium
Vulnerable dependency: hono@4.7.7 (GHSA-q7jf-gf43-6x6p) dependency_analyzer · 95%
medium
Vulnerable dependency: hono@4.7.7 (GHSA-qp7p-654g-cw7p) dependency_analyzer · 95%
medium
Vulnerable dependency: hono@4.7.7 (GHSA-r354-f388-2fhh) dependency_analyzer · 95%
medium
Vulnerable dependency: hono@4.7.7 (GHSA-r5rp-j6wh-rvv4) dependency_analyzer · 95%
medium
Vulnerable dependency: hono@4.7.7 (GHSA-rv63-4mwf-qqc2) dependency_analyzer · 95%
medium
Vulnerable dependency: hono@4.7.7 (GHSA-v8w9-8mx6-g223) dependency_analyzer · 95%
medium
Vulnerable dependency: hono@4.7.7 (GHSA-w332-q679-j88p) dependency_analyzer · 95%
medium
Vulnerable dependency: hono@4.7.7 (GHSA-w62v-xxxg-mg59) dependency_analyzer · 95%
medium
Vulnerable dependency: hono@4.7.7 (GHSA-wgpf-jwqj-8h8p) dependency_analyzer · 95%
medium
Vulnerable dependency: hono@4.7.7 (GHSA-wmmm-f939-6g9c) dependency_analyzer · 95%
medium
Vulnerable dependency: hono@4.7.7 (GHSA-wwfh-h76j-fc44) dependency_analyzer · 95%
medium
Vulnerable dependency: hono@4.7.7 (GHSA-xf4j-xp2r-rqqx) dependency_analyzer · 95%
medium
Vulnerable dependency: hono@4.7.7 (GHSA-xgm2-5f3f-mvvc) dependency_analyzer · 95%
medium
Vulnerable dependency: hono@4.7.7 (GHSA-xpcf-pg52-r92g) dependency_analyzer · 95%
medium
Vulnerable dependency: hono@4.7.7 (GHSA-xrhx-7g5j-rcj5) dependency_analyzer · 95%
medium
Vulnerable dependency: @modelcontextprotocol/sdk@1.12.0 (GHSA-345p-7cg4-v4c7) dependency_analyzer · 95%
medium
Vulnerable dependency: @modelcontextprotocol/sdk@1.12.0 (GHSA-8r9q-7v3j-jr4g) dependency_analyzer · 95%
medium
Vulnerable dependency: @modelcontextprotocol/sdk@1.12.0 (GHSA-w48q-cv73-mx4w) dependency_analyzer · 95%
medium
Vulnerable dependency: next@15.0.0 (GHSA-36qx-fr4f-26g5) dependency_analyzer · 95%
medium
Vulnerable dependency: next@15.0.0 (GHSA-3g8h-86w9-wvmq) dependency_analyzer · 95%
medium
Vulnerable dependency: next@15.0.0 (GHSA-3h52-269p-cp9r) dependency_analyzer · 95%
medium
Vulnerable dependency: next@15.0.0 (GHSA-3x4c-7xq6-9pq8) dependency_analyzer · 95%
medium
Vulnerable dependency: next@15.0.0 (GHSA-4342-x723-ch2f) dependency_analyzer · 95%
medium
Vulnerable dependency: next@15.0.0 (GHSA-4633-3j49-mh5q) dependency_analyzer · 95%
medium
Vulnerable dependency: next@15.0.0 (GHSA-4c39-4ccg-62r3) dependency_analyzer · 95%
medium
Vulnerable dependency: next@15.0.0 (GHSA-68g3-v927-f742) dependency_analyzer · 95%
medium
Vulnerable dependency: next@15.0.0 (GHSA-7m27-7ghc-44w9) dependency_analyzer · 95%
medium
Vulnerable dependency: next@15.0.0 (GHSA-89xv-2m56-2m9x) dependency_analyzer · 95%
medium
Vulnerable dependency: next@15.0.0 (GHSA-8h8q-6873-q5fj) dependency_analyzer · 95%
medium
Vulnerable dependency: next@15.0.0 (GHSA-955p-x3mx-jcvp) dependency_analyzer · 95%
medium
Vulnerable dependency: next@15.0.0 (GHSA-9g9p-9gw9-jx7f) dependency_analyzer · 95%
medium
Vulnerable dependency: next@15.0.0 (GHSA-9qr9-h5gf-34mp) dependency_analyzer · 95%
medium
Vulnerable dependency: next@15.0.0 (GHSA-c4j6-fc7j-m34r) dependency_analyzer · 95%
medium
Vulnerable dependency: next@15.0.0 (GHSA-f82v-jwr5-mffw) dependency_analyzer · 95%
medium
Vulnerable dependency: next@15.0.0 (GHSA-ffhc-5mcf-pf4q) dependency_analyzer · 95%
medium
Vulnerable dependency: next@15.0.0 (GHSA-g5qg-72qw-gw5v) dependency_analyzer · 95%
medium
Vulnerable dependency: next@15.0.0 (GHSA-ggv3-7p47-pfv8) dependency_analyzer · 95%
medium
Vulnerable dependency: next@15.0.0 (GHSA-gx5p-jg67-6x7h) dependency_analyzer · 95%
medium
Vulnerable dependency: next@15.0.0 (GHSA-h25m-26qc-wcjf) dependency_analyzer · 95%
medium
Vulnerable dependency: next@15.0.0 (GHSA-h64f-5h5j-jqjh) dependency_analyzer · 95%
medium
Vulnerable dependency: next@15.0.0 (GHSA-m99w-x7hq-7vfj) dependency_analyzer · 95%
medium
Vulnerable dependency: next@15.0.0 (GHSA-mg66-mrh9-m8jx) dependency_analyzer · 95%
medium
Vulnerable dependency: next@15.0.0 (GHSA-mwv6-3258-q52c) dependency_analyzer · 95%
medium
Vulnerable dependency: next@15.0.0 (GHSA-p9j2-gv94-2wf4) dependency_analyzer · 95%
medium
Vulnerable dependency: next@15.0.0 (GHSA-q4gf-8mx6-v5v3) dependency_analyzer · 95%
medium
Vulnerable dependency: next@15.0.0 (GHSA-qpjv-v59x-3qc4) dependency_analyzer · 95%
medium
Vulnerable dependency: next@15.0.0 (GHSA-vfv6-92ff-j949) dependency_analyzer · 95%
medium
Vulnerable dependency: next@15.0.0 (GHSA-w37m-7fhw-fmv9) dependency_analyzer · 95%
medium
Vulnerable dependency: next@15.0.0 (GHSA-wfc6-r584-vfw7) dependency_analyzer · 95%
medium
Vulnerable dependency: next@15.0.0 (GHSA-xv57-4mr9-wg8v) dependency_analyzer · 95%
medium
Vulnerable dependency: vitest@4.0.0 (GHSA-5xrq-8626-4rwp) dependency_analyzer · 95%
medium
Vulnerable dependency: drizzle-orm@0.38.4 (GHSA-gpj5-g38j-94v9) dependency_analyzer · 95%
medium
Vulnerable dependency: @hono/node-server@1.13.7 (GHSA-92pp-h63x-v22m) dependency_analyzer · 95%
medium
Vulnerable dependency: @hono/node-server@1.13.7 (GHSA-frvp-7c67-39w9) dependency_analyzer · 95%
medium
Vulnerable dependency: @hono/node-server@1.13.7 (GHSA-wc8c-qw6v-h7f6) dependency_analyzer · 95%
medium
Vulnerable dependency: astro@5.0.0 (GHSA-2pvr-wf23-7pc7) dependency_analyzer · 95%
medium
Vulnerable dependency: astro@5.0.0 (GHSA-49w6-73cw-chjr) dependency_analyzer · 95%
medium
Vulnerable dependency: astro@5.0.0 (GHSA-4g3v-8h47-v7g6) dependency_analyzer · 95%
medium
Vulnerable dependency: astro@5.0.0 (GHSA-5ff5-9fcw-vg88) dependency_analyzer · 95%
medium
Vulnerable dependency: astro@5.0.0 (GHSA-7pw4-f3q4-r2p2) dependency_analyzer · 95%
medium
Vulnerable dependency: astro@5.0.0 (GHSA-8hv8-536x-4wqp) dependency_analyzer · 95%
medium
Vulnerable dependency: astro@5.0.0 (GHSA-f48w-9m4c-m7f5) dependency_analyzer · 95%
medium
Vulnerable dependency: astro@5.0.0 (GHSA-fvmw-cj7j-j39q) dependency_analyzer · 95%
medium
Vulnerable dependency: astro@5.0.0 (GHSA-g735-7g2w-hh3f) dependency_analyzer · 95%
medium
Vulnerable dependency: astro@5.0.0 (GHSA-ggxq-hp9w-j794) dependency_analyzer · 95%
medium
Vulnerable dependency: astro@5.0.0 (GHSA-hr2q-hp5q-x767) dependency_analyzer · 95%
medium
Vulnerable dependency: astro@5.0.0 (GHSA-j687-52p2-xcff) dependency_analyzer · 95%
medium
Vulnerable dependency: astro@5.0.0 (GHSA-jrpj-wcv7-9fh9) dependency_analyzer · 95%
medium
Vulnerable dependency: astro@5.0.0 (GHSA-whqg-ppgf-wp8c) dependency_analyzer · 95%
medium
Vulnerable dependency: astro@5.0.0 (GHSA-wrwg-2hg8-v723) dependency_analyzer · 95%
medium
Vulnerable dependency: astro@5.0.0 (GHSA-x3h8-62x9-952g) dependency_analyzer · 95%
medium
Vulnerable dependency: astro@5.0.0 (GHSA-xf8x-j4p2-f749) dependency_analyzer · 95%
medium
Vulnerable dependency: astro@5.0.0 (GHSA-xr5h-phrj-8vxv) dependency_analyzer · 95%
medium
Vulnerable dependency: sharp@0.33.0 (GHSA-f88m-g3jw-g9cj) dependency_analyzer · 95%
medium
Vulnerable dependency: next@15.5.18 (GHSA-4633-3j49-mh5q) dependency_analyzer · 95%
medium
Vulnerable dependency: next@15.5.18 (GHSA-4c39-4ccg-62r3) dependency_analyzer · 95%
medium
Vulnerable dependency: next@15.5.18 (GHSA-68g3-v927-f742) dependency_analyzer · 95%
medium
Vulnerable dependency: next@15.5.18 (GHSA-89xv-2m56-2m9x) dependency_analyzer · 95%
medium
Vulnerable dependency: next@15.5.18 (GHSA-955p-x3mx-jcvp) dependency_analyzer · 95%
medium
Vulnerable dependency: next@15.5.18 (GHSA-m99w-x7hq-7vfj) dependency_analyzer · 95%
medium
Vulnerable dependency: next@15.5.18 (GHSA-p9j2-gv94-2wf4) dependency_analyzer · 95%
medium
Vulnerable dependency: next@15.5.18 (GHSA-q8wf-6r8g-63ch) dependency_analyzer · 95%
medium
Vulnerable dependency: hono@4.0.0 (GHSA-2234-fmw7-43wr) dependency_analyzer · 95%
medium
Vulnerable dependency: hono@4.0.0 (GHSA-26pp-8wgv-hjvm) dependency_analyzer · 95%
medium
Vulnerable dependency: hono@4.0.0 (GHSA-2gcr-mfcq-wcc3) dependency_analyzer · 95%
medium
Vulnerable dependency: hono@4.0.0 (GHSA-3hrh-pfw6-9m5x) dependency_analyzer · 95%
medium
Vulnerable dependency: hono@4.0.0 (GHSA-3mpf-rcc7-5347) dependency_analyzer · 95%
medium
Vulnerable dependency: hono@4.0.0 (GHSA-3vhc-576x-3qv4) dependency_analyzer · 95%
medium
Vulnerable dependency: hono@4.0.0 (GHSA-458j-xx4x-4375) dependency_analyzer · 95%
medium
Vulnerable dependency: hono@4.0.0 (GHSA-5pq2-9x2x-5p6w) dependency_analyzer · 95%
medium
Vulnerable dependency: hono@4.0.0 (GHSA-69xw-7hcm-h432) dependency_analyzer · 95%
medium
Vulnerable dependency: hono@4.0.0 (GHSA-6wqw-2p9w-4vw4) dependency_analyzer · 95%
medium
Vulnerable dependency: hono@4.0.0 (GHSA-88fw-hqm2-52qc) dependency_analyzer · 95%
medium
Vulnerable dependency: hono@4.0.0 (GHSA-8j4g-w8fx-2239) dependency_analyzer · 95%
medium
Vulnerable dependency: hono@4.0.0 (GHSA-92vj-g62v-jqhh) dependency_analyzer · 95%
medium
Vulnerable dependency: hono@4.0.0 (GHSA-9r54-q6cx-xmh5) dependency_analyzer · 95%
medium
Vulnerable dependency: hono@4.0.0 (GHSA-9vqf-7f2p-gf9v) dependency_analyzer · 95%
medium
Vulnerable dependency: hono@4.0.0 (GHSA-f23p-vx2j-j53r) dependency_analyzer · 95%
medium
Vulnerable dependency: hono@4.0.0 (GHSA-f577-qrjj-4474) dependency_analyzer · 95%
medium
Vulnerable dependency: hono@4.0.0 (GHSA-f67f-6cw9-8mq4) dependency_analyzer · 95%
medium
Vulnerable dependency: hono@4.0.0 (GHSA-gq3j-xvxp-8hrf) dependency_analyzer · 95%
medium
Vulnerable dependency: hono@4.0.0 (GHSA-hm8q-7f3q-5f36) dependency_analyzer · 95%
medium
Vulnerable dependency: hono@4.0.0 (GHSA-j6c9-x7qj-28xf) dependency_analyzer · 95%
medium
Vulnerable dependency: hono@4.0.0 (GHSA-m732-5p4w-x69g) dependency_analyzer · 95%
medium
Vulnerable dependency: hono@4.0.0 (GHSA-p6xx-57qc-3wxr) dependency_analyzer · 95%
medium
Vulnerable dependency: hono@4.0.0 (GHSA-p77w-8qqv-26rm) dependency_analyzer · 95%
medium
Vulnerable dependency: hono@4.0.0 (GHSA-q5qw-h33p-qvwr) dependency_analyzer · 95%
medium
Vulnerable dependency: hono@4.0.0 (GHSA-q7jf-gf43-6x6p) dependency_analyzer · 95%
medium
Vulnerable dependency: hono@4.0.0 (GHSA-qp7p-654g-cw7p) dependency_analyzer · 95%
medium
Vulnerable dependency: hono@4.0.0 (GHSA-r354-f388-2fhh) dependency_analyzer · 95%
medium
Vulnerable dependency: hono@4.0.0 (GHSA-r5rp-j6wh-rvv4) dependency_analyzer · 95%
medium
Vulnerable dependency: hono@4.0.0 (GHSA-rpfr-3m35-5vx5) dependency_analyzer · 95%
medium
Vulnerable dependency: hono@4.0.0 (GHSA-rv63-4mwf-qqc2) dependency_analyzer · 95%
medium
Vulnerable dependency: hono@4.0.0 (GHSA-v8w9-8mx6-g223) dependency_analyzer · 95%
medium
Vulnerable dependency: hono@4.0.0 (GHSA-w332-q679-j88p) dependency_analyzer · 95%
medium
Vulnerable dependency: hono@4.0.0 (GHSA-w62v-xxxg-mg59) dependency_analyzer · 95%
medium
Vulnerable dependency: hono@4.0.0 (GHSA-wgpf-jwqj-8h8p) dependency_analyzer · 95%
medium
Vulnerable dependency: hono@4.0.0 (GHSA-wmmm-f939-6g9c) dependency_analyzer · 95%
medium
Vulnerable dependency: hono@4.0.0 (GHSA-wwfh-h76j-fc44) dependency_analyzer · 95%
medium
Vulnerable dependency: hono@4.0.0 (GHSA-xf4j-xp2r-rqqx) dependency_analyzer · 95%
medium
Vulnerable dependency: hono@4.0.0 (GHSA-xpcf-pg52-r92g) dependency_analyzer · 95%
medium
Vulnerable dependency: hono@4.0.0 (GHSA-xrhx-7g5j-rcj5) dependency_analyzer · 95%
medium
Vulnerable dependency: postcss@8 (GHSA-566m-qj78-rww5) dependency_analyzer · 95%
medium
Vulnerable dependency: postcss@8 (GHSA-6g55-p6wh-862q) dependency_analyzer · 95%
medium
Vulnerable dependency: postcss@8 (GHSA-7fh5-64p2-3v2j) dependency_analyzer · 95%
medium
Vulnerable dependency: postcss@8 (GHSA-fxqj-rqcc-2cmp) dependency_analyzer · 95%
medium
Vulnerable dependency: postcss@8 (GHSA-hwj9-h5mp-3pm3) dependency_analyzer · 95%
medium
Vulnerable dependency: postcss@8 (GHSA-qx2v-qp2m-jg93) dependency_analyzer · 95%
medium
Vulnerable dependency: postcss@8 (GHSA-r28c-9q8g-f849) dependency_analyzer · 95%
medium
Hex string literal (>50 chars) in rawdash-rawdash-5391ee0/packages/connectors/aws-shared/src/sigv4.test.ts:8 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in rawdash-rawdash-5391ee0/packages/connectors/aws-shared/src/sigv4.test.ts:14 entropy_analyzer · 70%
info
package.json metadata manifest_parser · 100%
info
Tool: set_secret manifest_parser · 70%
info
Tool: read_widget manifest_parser · 70%
info
Tool: list_dashboards manifest_parser · 70%
info
Tool: add_connector manifest_parser · 70%
info
Tool: list_connectors manifest_parser · 70%
info
Tool: trigger_sync manifest_parser · 70%
info
Tool: list_widgets manifest_parser · 70%
info
Tool: list_secrets manifest_parser · 70%
info
Tool: render_widget manifest_parser · 70%
info
Tool: remove_connector manifest_parser · 70%
info
Required env vars (25) manifest_parser · 80%
high
Deprecated implicit grant flow in rawdash-rawdash-5391ee0/packages/connectors/salesforce/src/salesforce.ts oauth_scope_analyzer · 85%
medium
Hardcoded OAuth client ID in rawdash-rawdash-5391ee0/packages/connectors/azure-monitor/src/example.config.ts oauth_scope_analyzer · 80%
medium
Hardcoded OAuth client ID in rawdash-rawdash-5391ee0/packages/connectors/azure-monitor/src/azure-monitor.test.ts oauth_scope_analyzer · 80%
medium
Hardcoded OAuth client ID in rawdash-rawdash-5391ee0/packages/connectors/entra-id/src/example.config.ts oauth_scope_analyzer · 80%
medium
Hardcoded OAuth client ID in rawdash-rawdash-5391ee0/packages/connectors/entra-id/src/entra-id.test.ts oauth_scope_analyzer · 80%
medium
Hardcoded OAuth client ID in rawdash-rawdash-5391ee0/packages/connectors/azure-cost/src/example.config.ts oauth_scope_analyzer · 80%
info
Sandbox failed to start for output poisoning scan output_poisoning · 100%
medium
Permission: network access detected permission_analyzer · 70%
high
Permission: shell access detected permission_analyzer · 95%
low
Permission: env_vars access detected permission_analyzer · 90%
info
SBOM generated: 145 components sbom_generator · 100%
critical
RSA Private Key found in rawdash-rawdash-5391ee0/packages/connectors/app-store-connect/README.md secret_scanner · 95%
critical
RSA Private Key found in rawdash-rawdash-5391ee0/packages/connectors/gcp-shared/src/auth.ts secret_scanner · 95%
critical
RSA Private Key found in rawdash-rawdash-5391ee0/packages/connectors/app-store-connect/src/app-store-connect.ts secret_scanner · 95%
medium
No build provenance detected (SLSA L0) slsa_assessor · 90%