← Back to search

@salesforce/b2c-dx-mcp

GitHub Actions Scanned 22d ago

MCP server for B2C Commerce developer experience tools

npm ↗
D
40 / 100

Versions

1.9.3latest
Jul 31, 2026
0.0.0-nightly.20260731031142
Jul 31, 2026
0.0.0-nightly.20260730031020
Jul 30, 2026
0.0.0-nightly.20260729030911
Jul 29, 2026
0.0.0-nightly.20260728031024
Jul 28, 2026
+ show 177 moreshow less
1.9.2
Jul 27, 2026
0.0.0-nightly.20260727031328
Jul 27, 2026
0.0.0-nightly.20260724031101
Jul 24, 2026
1.9.1
Jul 23, 2026
0.0.0-nightly.20260723031046
Jul 23, 2026
0.0.0-nightly.20260722031057
Jul 22, 2026
0.0.0-nightly.20260721031055
Jul 21, 2026
0.0.0-nightly.20260720031228
Jul 20, 2026
0.0.0-nightly.20260717031025
Jul 17, 2026
1.9.0
Jul 16, 2026
0.0.0-nightly.20260716031019
Jul 16, 2026
1.8.1
Jul 15, 2026
0.0.0-nightly.20260715031023
Jul 15, 2026
0.0.0-nightly.20260714030945
Jul 14, 2026
1.8.0
Jul 13, 2026
0.0.0-nightly.20260713031302
Jul 13, 2026
0.0.0-nightly.20260710031349
Jul 10, 2026
1.7.0
Jul 9, 2026
0.0.0-nightly.20260709161834
Jul 9, 2026
1.6.0
Jul 8, 2026
1.5.0
Jul 8, 2026
0.0.0-nightly.20260708031122
Jul 8, 2026
0.0.0-nightly.20260707031415
Jul 7, 2026
0.0.0-nightly.20260706031701
Jul 6, 2026
0.0.0-nightly.20260703031332
Jul 3, 2026
0.0.0-nightly.20260702031652
Jul 2, 2026
0.0.0-nightly.20260701031954
Jul 1, 2026
0.0.0-nightly.20260630031813
Jun 30, 2026
1.4.1
Jun 29, 2026
0.0.0-nightly.20260629032150
Jun 29, 2026
0.0.0-nightly.20260626031910
Jun 26, 2026
0.0.0-nightly.20260625031817
Jun 25, 2026
0.0.0-nightly.20260624031832
Jun 24, 2026
1.4.0
Jun 23, 2026
0.0.0-nightly.20260623031810
Jun 23, 2026
0.0.0-nightly.20260622032236
Jun 22, 2026
1.3.3
Jun 20, 2026
0.0.0-nightly.20260619032154
Jun 19, 2026
1.3.2
Jun 19, 2026
1.3.1
Jun 18, 2026
0.0.0-nightly.20260618032009
Jun 18, 2026
1.3.0
Jun 17, 2026
0.0.0-nightly.20260617032053
Jun 17, 2026
0.0.0-nightly.20260616032109
Jun 16, 2026
0.0.0-nightly.20260615032241
Jun 15, 2026
0.0.0-nightly.20260612032057
Jun 12, 2026
1.2.1
Jun 11, 2026
0.0.0-nightly.20260611031817
Jun 11, 2026
0.0.0-nightly.20260610031911
Jun 10, 2026
1.2.0
Jun 9, 2026
0.0.0-nightly.20260609031930
Jun 9, 2026
0.0.0-nightly.20260608032206
Jun 8, 2026
0.0.0-nightly.20260605032030
Jun 5, 2026
0.0.0-nightly.20260604032151
Jun 4, 2026
0.0.0-nightly.20260603032225
Jun 3, 2026
0.0.0-nightly.20260602032210
Jun 2, 2026
0.0.0-nightly.20260601032236
Jun 1, 2026
0.0.0-nightly.20260529032030
May 29, 2026
1.1.3
May 29, 2026
0.0.0-nightly.20260528032208
May 28, 2026
0.0.0-nightly.20260527032048
May 27, 2026
0.0.0-nightly.20260526031944
May 26, 2026
0.0.0-nightly.20260525032118
May 25, 2026
0.0.0-nightly.20260522031954
May 22, 2026
0.0.0-nightly.20260521031952
May 21, 2026
1.1.2
May 20, 2026
0.0.0-nightly.20260520031912
May 20, 2026
0.0.0-nightly.20260519031905
May 19, 2026
0.0.0-nightly.20260518032050
May 18, 2026
0.0.0-nightly.20260515031926
May 15, 2026
0.0.0-nightly.20260514031721
May 14, 2026
0.0.0-nightly.20260513031847
May 13, 2026
1.1.1
May 13, 2026
0.0.0-nightly.20260512031815
May 12, 2026
0.0.0-nightly.20260511032033
May 11, 2026
0.0.0-nightly.20260508031508
May 8, 2026
1.1.0
May 8, 2026
0.0.0-nightly.20260507031825
May 7, 2026
0.0.0-nightly.20260506031756
May 6, 2026
0.0.0-nightly.20260505031620
May 5, 2026
0.0.0-nightly.20260504031851
May 4, 2026
0.0.0-nightly.20260501031717
May 1, 2026
0.0.0-nightly.20260430031752
Apr 30, 2026
0.0.0-nightly.20260429031724
Apr 29, 2026
0.0.0-nightly.20260428031729
Apr 28, 2026
0.0.0-nightly.20260427031733
Apr 27, 2026
1.0.14
Apr 25, 2026
1.0.13
Apr 24, 2026
0.0.0-nightly.20260424031543
Apr 24, 2026
1.0.12
Apr 23, 2026
0.0.0-nightly.20260423030025
Apr 23, 2026
1.0.11
Apr 22, 2026
0.0.0-nightly.20260422030024
Apr 22, 2026
1.0.10
Apr 22, 2026
0.0.0-nightly.20260421030031
Apr 21, 2026
1.0.9
Apr 21, 2026
0.0.0-nightly.20260420030038
Apr 20, 2026
1.0.8
Apr 17, 2026
0.0.0-nightly.20260417030027
Apr 17, 2026
0.0.0-nightly.20260416030051
Apr 16, 2026
0.0.0-nightly.20260415030027
Apr 15, 2026
1.0.7
Apr 14, 2026
0.0.0-nightly.20260414030028
Apr 14, 2026
1.0.6
Apr 13, 2026
0.0.0-nightly.20260413030106
Apr 13, 2026
0.0.0-nightly.20260410030056
Apr 10, 2026
1.0.5
Apr 9, 2026
0.0.0-nightly.20260409030001
Apr 9, 2026
0.0.0-nightly.20260408030026
Apr 8, 2026
0.0.0-nightly.20260407030012
Apr 7, 2026
1.0.4
Apr 6, 2026
0.0.0-nightly.20260403025949
Apr 3, 2026
0.0.0-nightly.20260402030000
Apr 2, 2026
1.0.3
Apr 1, 2026
0.0.0-nightly.20260401030023
Apr 1, 2026
0.0.0-nightly.20260331030001
Mar 31, 2026
1.0.2
Mar 30, 2026
0.0.0-nightly.20260330030012
Mar 30, 2026
1.0.0
Mar 27, 2026
0.0.0-nightly.20260327025958
Mar 27, 2026
0.0.0-nightly.20260326030002
Mar 26, 2026
0.0.0-nightly.20260325025819
Mar 25, 2026
0.5.4
Mar 24, 2026
0.5.3
Mar 24, 2026
0.0.0-nightly.20260324025611
Mar 24, 2026
0.0.0-nightly.20260323025940
Mar 23, 2026
0.5.2
Mar 22, 2026
0.0.0-nightly.20260320025457
Mar 20, 2026
0.5.1
Mar 19, 2026
0.0.0-nightly.20260319025924
Mar 19, 2026
0.0.0-nightly.20260318025909
Mar 18, 2026
0.5.0
Mar 18, 2026
0.0.0-nightly.20260317025551
Mar 17, 2026
0.4.14
Mar 16, 2026
0.0.0-nightly.20260316030026
Mar 16, 2026
0.4.13
Mar 13, 2026
0.4.12
Mar 13, 2026
0.0.0-nightly.20260313025411
Mar 13, 2026
0.4.11
Mar 12, 2026
0.0.0-nightly.20260312025534
Mar 12, 2026
0.4.10
Mar 11, 2026
0.0.0-nightly.20260311025214
Mar 11, 2026
0.4.9
Mar 10, 2026
0.0.0-nightly.20260310025241
Mar 10, 2026
0.4.8
Mar 9, 2026
0.0.0-nightly.20260309025758
Mar 9, 2026
0.0.0-nightly.20260306025424
Mar 6, 2026
0.4.7
Mar 5, 2026
0.0.0-nightly.20260305025439
Mar 5, 2026
0.0.0-nightly.20260304025255
Mar 4, 2026
0.0.0-nightly.20260303025716
Mar 3, 2026
0.4.6
Mar 2, 2026
0.4.5
Mar 2, 2026
0.0.0-nightly.20260302025501
Mar 2, 2026
0.0.0-nightly.20260227025412
Feb 27, 2026
0.0.0-nightly.20260226025523
Feb 26, 2026
0.4.4
Feb 25, 2026
0.0.0-nightly.20260225025747
Feb 25, 2026
0.4.3
Feb 25, 2026
0.4.2
Feb 24, 2026
0.4.1
Feb 24, 2026
0.0.0-nightly.20260224025713
Feb 24, 2026
0.4.0
Feb 24, 2026
0.0.0-nightly.20260223025834
Feb 23, 2026
0.0.0-nightly.20260220025543
Feb 20, 2026
0.0.0-nightly.20260219025744
Feb 19, 2026
0.0.0-nightly.20260218025815
Feb 18, 2026
0.0.0-nightly.20260217025715
Feb 17, 2026
0.0.0-nightly.20260216025847
Feb 16, 2026
0.3.2
Feb 13, 2026
0.0.0-nightly.20260213025933
Feb 13, 2026
0.3.1
Feb 12, 2026
0.0.0-nightly.20260211025956
Feb 11, 2026
0.0.0-nightly.20260210025957
Feb 10, 2026
0.0.0-nightly.20260210003245
Feb 10, 2026
0.0.0-nightly.20260209025906
Feb 9, 2026
0.0.1
Jan 29, 2026
PermissionsTool SafetyAuthAnnotationsCode QualityStabilitySpecVuln HistoryAuthorTransparencyCommunity

Tools 3

valid
annotations: none low

test-server
annotations: none low

contract-test
annotations: none low

Permissions 4

network medium
Server uses network capabilities via: fetch(), http, httpx, net, socket, urllib
filesystem low
Server uses filesystem capabilities via: fs, fs sync ops, fs.promises, glob, open(), os, path, pathlib, shutil, tempfile
shell high
Server uses shell capabilities via: child_process, execSync(), spawn(), subprocess
env_vars low
Server uses env_vars capabilities via: os.environ, process.env

Scan Findings 99

low
Tool 'valid' has no annotations annotation_checker · 100%
low
Tool 'test-server' has no annotations annotation_checker · 100%
low
Tool 'contract-test' has no annotations annotation_checker · 100%
high
Hardcoded OAuth client secret in SalesforceCommerceCloud-b2c-developer-tooling-98aa9ae/python/b2c-tooling-sdk/tests/test_config_resolved_config.py auth_checker · 95%
high
Hardcoded OAuth client secret in SalesforceCommerceCloud-b2c-developer-tooling-98aa9ae/python/b2c-tooling-sdk/tests/test_slas.py auth_checker · 95%
high
Hardcoded OAuth client secret in SalesforceCommerceCloud-b2c-developer-tooling-98aa9ae/python/b2c-tooling-sdk/tests/test_config_redaction.py auth_checker · 95%
high
Hardcoded OAuth client secret in SalesforceCommerceCloud-b2c-developer-tooling-98aa9ae/python/b2c-tooling-sdk/tests/test_config_resolver.py auth_checker · 95%
high
Hardcoded OAuth client ID in SalesforceCommerceCloud-b2c-developer-tooling-98aa9ae/python/b2c-tooling-sdk/src/b2c_tooling_sdk/defaults.py auth_checker · 85%
high
Hardcoded OAuth client secret in SalesforceCommerceCloud-b2c-developer-tooling-98aa9ae/python/b2c-tooling-sdk/src/b2c_tooling_sdk/auth/oauth.py auth_checker · 95%
high
Hardcoded OAuth client secret in SalesforceCommerceCloud-b2c-developer-tooling-98aa9ae/python/b2c-tooling-sdk/src/b2c_tooling_sdk/operations/roles/__init__.py auth_checker · 95%
high
Hardcoded OAuth client secret in SalesforceCommerceCloud-b2c-developer-tooling-98aa9ae/python/b2c-tooling-sdk/src/b2c_tooling_sdk/operations/users/__init__.py auth_checker · 95%
high
Hardcoded OAuth client secret in SalesforceCommerceCloud-b2c-developer-tooling-98aa9ae/python/b2c-tooling-sdk/src/b2c_tooling_sdk/operations/orgs/__init__.py auth_checker · 95%
high
Hardcoded OAuth client secret in SalesforceCommerceCloud-b2c-developer-tooling-98aa9ae/packages/b2c-dx-mcp/test/tools/diagnostics/config-inspect.test.ts auth_checker · 95%
high
Hardcoded OAuth client secret in SalesforceCommerceCloud-b2c-developer-tooling-98aa9ae/packages/b2c-dx-mcp/test/tools/scapi/scapi-code.test.ts auth_checker · 95%
high
Hardcoded OAuth client secret in SalesforceCommerceCloud-b2c-developer-tooling-98aa9ae/packages/b2c-vs-extension/src/walkthrough/commands.ts auth_checker · 95%
high
Hardcoded OAuth client ID in SalesforceCommerceCloud-b2c-developer-tooling-98aa9ae/packages/b2c-tooling-sdk/src/defaults.ts auth_checker · 85%
high
Hardcoded OAuth client secret in SalesforceCommerceCloud-b2c-developer-tooling-98aa9ae/packages/b2c-tooling-sdk/src/auth/index.ts auth_checker · 95%
high
Hardcoded OAuth client secret in SalesforceCommerceCloud-b2c-developer-tooling-98aa9ae/packages/b2c-tooling-sdk/src/auth/oauth.ts auth_checker · 95%
high
Hardcoded OAuth client secret in SalesforceCommerceCloud-b2c-developer-tooling-98aa9ae/packages/b2c-tooling-sdk/src/clients/cdn-zones.ts auth_checker · 95%
high
Hardcoded OAuth client secret in SalesforceCommerceCloud-b2c-developer-tooling-98aa9ae/packages/b2c-tooling-sdk/src/clients/slas-admin.ts auth_checker · 95%
high
Hardcoded OAuth client secret in SalesforceCommerceCloud-b2c-developer-tooling-98aa9ae/packages/b2c-tooling-sdk/src/clients/ods.ts auth_checker · 95%
high
Hardcoded OAuth client secret in SalesforceCommerceCloud-b2c-developer-tooling-98aa9ae/packages/b2c-tooling-sdk/src/clients/granular-replications.ts auth_checker · 95%
high
Hardcoded OAuth client secret in SalesforceCommerceCloud-b2c-developer-tooling-98aa9ae/packages/b2c-tooling-sdk/src/clients/custom-apis.ts auth_checker · 95%
high
Hardcoded OAuth client secret in SalesforceCommerceCloud-b2c-developer-tooling-98aa9ae/packages/b2c-tooling-sdk/src/clients/am-api.ts auth_checker · 95%
high
Hardcoded OAuth client secret in SalesforceCommerceCloud-b2c-developer-tooling-98aa9ae/packages/b2c-tooling-sdk/src/clients/scapi-schemas.ts auth_checker · 95%
high
Hardcoded OAuth client secret in SalesforceCommerceCloud-b2c-developer-tooling-98aa9ae/packages/b2c-tooling-sdk/src/operations/roles/index.ts auth_checker · 95%
high
Hardcoded OAuth client secret in SalesforceCommerceCloud-b2c-developer-tooling-98aa9ae/packages/b2c-tooling-sdk/src/operations/users/index.ts auth_checker · 95%
high
Hardcoded OAuth client secret in SalesforceCommerceCloud-b2c-developer-tooling-98aa9ae/packages/b2c-tooling-sdk/src/operations/orgs/index.ts auth_checker · 95%
high
Hardcoded OAuth client secret in SalesforceCommerceCloud-b2c-developer-tooling-98aa9ae/packages/b2c-tooling-sdk/src/config/sources/env-source.ts auth_checker · 95%
high
Hardcoded OAuth client secret in SalesforceCommerceCloud-b2c-developer-tooling-98aa9ae/packages/b2c-tooling-sdk/test/cli/job-command.test.ts auth_checker · 95%
high
Hardcoded OAuth client secret in SalesforceCommerceCloud-b2c-developer-tooling-98aa9ae/packages/b2c-tooling-sdk/test/cli/am-command.test.ts auth_checker · 95%
high
Hardcoded OAuth client ID in SalesforceCommerceCloud-b2c-developer-tooling-98aa9ae/packages/b2c-tooling-sdk/test/cli/base-command.test.ts auth_checker · 85%
high
Hardcoded OAuth client secret in SalesforceCommerceCloud-b2c-developer-tooling-98aa9ae/packages/b2c-tooling-sdk/test/cli/lifecycle.test.ts auth_checker · 95%
high
Hardcoded OAuth client secret in SalesforceCommerceCloud-b2c-developer-tooling-98aa9ae/packages/b2c-tooling-sdk/test/scapi/auth-primitives.test.ts auth_checker · 95%
high
Hardcoded OAuth client secret in SalesforceCommerceCloud-b2c-developer-tooling-98aa9ae/packages/b2c-tooling-sdk/test/config/resolver.test.ts auth_checker · 95%
high
Hardcoded OAuth client secret in SalesforceCommerceCloud-b2c-developer-tooling-98aa9ae/packages/b2c-tooling-sdk/test/config/resolved-config.test.ts auth_checker · 95%
high
Hardcoded OAuth client secret in SalesforceCommerceCloud-b2c-developer-tooling-98aa9ae/packages/b2c-tooling-sdk/test/config/env-source.test.ts auth_checker · 95%
high
Hardcoded OAuth client secret in SalesforceCommerceCloud-b2c-developer-tooling-98aa9ae/packages/b2c-tooling-sdk/test/config/redaction.test.ts auth_checker · 95%
high
Hardcoded OAuth client secret in SalesforceCommerceCloud-b2c-developer-tooling-98aa9ae/packages/b2c-tooling-sdk/test/config/sources.test.ts auth_checker · 95%
high
Hardcoded OAuth client secret in SalesforceCommerceCloud-b2c-developer-tooling-98aa9ae/packages/b2c-tooling-sdk/test/config/dw-json.test.ts auth_checker · 95%
high
Hardcoded OAuth client secret in SalesforceCommerceCloud-b2c-developer-tooling-98aa9ae/packages/b2c-tooling-sdk/test/auth/resolve.test.ts auth_checker · 95%
high
Hardcoded OAuth client secret in SalesforceCommerceCloud-b2c-developer-tooling-98aa9ae/packages/b2c-tooling-sdk/test/auth/middleware.test.ts auth_checker · 95%
high
Hardcoded OAuth client ID in SalesforceCommerceCloud-b2c-developer-tooling-98aa9ae/packages/b2c-tooling-sdk/test/auth/oauth-pkce.test.ts auth_checker · 85%
high
Hardcoded OAuth client ID in SalesforceCommerceCloud-b2c-developer-tooling-98aa9ae/packages/b2c-tooling-sdk/test/auth/oauth.test.ts auth_checker · 85%
high
Hardcoded OAuth client secret in SalesforceCommerceCloud-b2c-developer-tooling-98aa9ae/packages/b2c-tooling-sdk/test/auth/oauth.test.ts auth_checker · 95%
high
Hardcoded OAuth client ID in SalesforceCommerceCloud-b2c-developer-tooling-98aa9ae/packages/b2c-tooling-sdk/test/auth/oauth-pkce-fallback.test.ts auth_checker · 85%
high
Hardcoded OAuth client ID in SalesforceCommerceCloud-b2c-developer-tooling-98aa9ae/packages/b2c-tooling-sdk/test/auth/oauth-implicit.test.ts auth_checker · 85%
high
Hardcoded OAuth client secret in SalesforceCommerceCloud-b2c-developer-tooling-98aa9ae/packages/b2c-tooling-sdk/test/clients/cip.test.ts auth_checker · 95%
high
Hardcoded OAuth client secret in SalesforceCommerceCloud-b2c-developer-tooling-98aa9ae/packages/b2c-cli/test/helpers/test-setup.ts auth_checker · 95%
high
Hardcoded OAuth client secret in SalesforceCommerceCloud-b2c-developer-tooling-98aa9ae/packages/b2c-cli/test/commands/setup/inspect.test.ts auth_checker · 95%
high
Hardcoded OAuth client secret in SalesforceCommerceCloud-b2c-developer-tooling-98aa9ae/packages/b2c-cli/test/functional/e2e/auth-token.test.ts auth_checker · 95%
high
Hardcoded OAuth client secret in SalesforceCommerceCloud-b2c-developer-tooling-98aa9ae/packages/b2c-cli/test/functional/e2e/sandbox-lifecycle.test.ts auth_checker · 95%
info
Sandbox failed to start for behavioral verification behavioral_verifier · 100%
medium
Excessive dependency count: 86 direct dependencies dependency_analyzer · 90%
medium
Suspicious package name: react-dom dependency_analyzer · 60%
info
OSV.dev API query failed dependency_analyzer · 100%
medium
Buffer.from base64 in SalesforceCommerceCloud-b2c-developer-tooling-98aa9ae/packages/b2c-tooling-sdk/src/logging/logger.ts:43 entropy_analyzer · 75%
medium
Buffer.from base64 in SalesforceCommerceCloud-b2c-developer-tooling-98aa9ae/packages/b2c-tooling-sdk/src/auth/oauth.ts:37 entropy_analyzer · 75%
medium
Buffer.from base64 in SalesforceCommerceCloud-b2c-developer-tooling-98aa9ae/packages/b2c-tooling-sdk/src/auth/oauth.ts:38 entropy_analyzer · 75%
medium
Buffer.from base64 in SalesforceCommerceCloud-b2c-developer-tooling-98aa9ae/packages/b2c-tooling-sdk/test/auth/oauth-jwt.test.ts:290 entropy_analyzer · 75%
medium
Buffer.from base64 in SalesforceCommerceCloud-b2c-developer-tooling-98aa9ae/packages/b2c-tooling-sdk/test/auth/oauth-jwt.test.ts:327 entropy_analyzer · 75%
medium
Buffer.from base64 in SalesforceCommerceCloud-b2c-developer-tooling-98aa9ae/packages/b2c-tooling-sdk/test/auth/client-credentials.test.ts:15 entropy_analyzer · 75%
medium
Buffer.from base64 in SalesforceCommerceCloud-b2c-developer-tooling-98aa9ae/packages/b2c-tooling-sdk/test/auth/client-credentials.test.ts:38 entropy_analyzer · 75%
medium
Buffer.from base64 in SalesforceCommerceCloud-b2c-developer-tooling-98aa9ae/packages/b2c-tooling-sdk/test/auth/client-credentials.test.ts:44 entropy_analyzer · 75%
medium
Buffer.from base64 in SalesforceCommerceCloud-b2c-developer-tooling-98aa9ae/packages/b2c-cli/src/commands/mrt/bundle/save.ts:113 entropy_analyzer · 75%
medium
Buffer.from base64 in SalesforceCommerceCloud-b2c-developer-tooling-98aa9ae/packages/b2c-cli/test/functional/e2e/auth-token.test.ts:28 entropy_analyzer · 75%
info
package.json metadata manifest_parser · 100%
info
pyproject.toml metadata manifest_parser · 100%
info
Tool: valid manifest_parser · 75%
info
Tool: test-server manifest_parser · 75%
info
Tool: contract-test manifest_parser · 75%
info
Transport: stdio manifest_parser · 90%
info
Required env vars (101) manifest_parser · 80%
high
Deprecated implicit grant flow in SalesforceCommerceCloud-b2c-developer-tooling-98aa9ae/python/b2c-tooling-sdk/tests/test_oauth_pkce_fallback.py oauth_scope_analyzer · 85%
high
Deprecated implicit grant flow in SalesforceCommerceCloud-b2c-developer-tooling-98aa9ae/python/b2c-tooling-sdk/tests/test_oauth_implicit.py oauth_scope_analyzer · 85%
medium
Hardcoded OAuth client ID in SalesforceCommerceCloud-b2c-developer-tooling-98aa9ae/python/b2c-tooling-sdk/src/b2c_tooling_sdk/defaults.py oauth_scope_analyzer · 80%
medium
Hardcoded OAuth client ID in SalesforceCommerceCloud-b2c-developer-tooling-98aa9ae/packages/b2c-tooling-sdk/src/defaults.ts oauth_scope_analyzer · 80%
high
Deprecated implicit grant flow in SalesforceCommerceCloud-b2c-developer-tooling-98aa9ae/packages/b2c-tooling-sdk/src/auth/oauth-implicit.ts oauth_scope_analyzer · 85%
medium
Hardcoded OAuth client ID in SalesforceCommerceCloud-b2c-developer-tooling-98aa9ae/packages/b2c-tooling-sdk/test/cli/base-command.test.ts oauth_scope_analyzer · 80%
medium
Hardcoded OAuth client ID in SalesforceCommerceCloud-b2c-developer-tooling-98aa9ae/packages/b2c-tooling-sdk/test/auth/oauth-pkce.test.ts oauth_scope_analyzer · 80%
medium
Hardcoded OAuth client ID in SalesforceCommerceCloud-b2c-developer-tooling-98aa9ae/packages/b2c-tooling-sdk/test/auth/oauth.test.ts oauth_scope_analyzer · 80%
medium
Hardcoded OAuth client ID in SalesforceCommerceCloud-b2c-developer-tooling-98aa9ae/packages/b2c-tooling-sdk/test/auth/oauth-pkce-fallback.test.ts oauth_scope_analyzer · 80%
medium
Hardcoded OAuth client ID in SalesforceCommerceCloud-b2c-developer-tooling-98aa9ae/packages/b2c-tooling-sdk/test/auth/oauth-implicit.test.ts oauth_scope_analyzer · 80%
info
Sandbox failed to start for output poisoning scan output_poisoning · 100%
medium
Permission: network access detected permission_analyzer · 90%
low
Permission: filesystem access detected permission_analyzer · 90%
high
Permission: shell access detected permission_analyzer · 95%
low
Permission: env_vars access detected permission_analyzer · 90%
info
SBOM generated: 135 components sbom_generator · 100%
high
Hardcoded Password found in SalesforceCommerceCloud-b2c-developer-tooling-98aa9ae/docs/api-readme.md secret_scanner · 65%
high
Hardcoded Password found in SalesforceCommerceCloud-b2c-developer-tooling-98aa9ae/packages/b2c-tooling-sdk/README.md secret_scanner · 65%
high
Hardcoded Password found in SalesforceCommerceCloud-b2c-developer-tooling-98aa9ae/packages/b2c-vs-extension/src/walkthrough/commands.ts secret_scanner · 65%
high
Hardcoded Password found in SalesforceCommerceCloud-b2c-developer-tooling-98aa9ae/packages/b2c-tooling-sdk/src/logging/index.ts secret_scanner · 65%
critical
RSA Private Key found in SalesforceCommerceCloud-b2c-developer-tooling-98aa9ae/packages/b2c-tooling-sdk/src/clients/cdn-zones.generated.ts secret_scanner · 95%
high
Hardcoded Password found in SalesforceCommerceCloud-b2c-developer-tooling-98aa9ae/packages/b2c-tooling-sdk/src/config/sources/env-source.ts secret_scanner · 65%
high
Hardcoded Password found in SalesforceCommerceCloud-b2c-developer-tooling-98aa9ae/python/b2c-tooling-sdk/src/b2c_tooling_sdk/clients/models/preferences.py secret_scanner · 65%
high
Hardcoded Password found in SalesforceCommerceCloud-b2c-developer-tooling-98aa9ae/python/b2c-tooling-sdk/src/b2c_tooling_sdk/clients/models/ocapi.py secret_scanner · 65%
critical
RSA Private Key found in SalesforceCommerceCloud-b2c-developer-tooling-98aa9ae/python/b2c-tooling-sdk/src/b2c_tooling_sdk/clients/models/cdn_zones.py secret_scanner · 95%
medium
No build provenance detected (SLSA L0) slsa_assessor · 90%