← Back to search

@vohongtho.infotech/code-intel

vohongtho Scanned 14h ago

Static code analysis platform — builds a Knowledge Graph from source code with Web UI, HTTP API, CLI, and MCP server

npm ↗
D
40 / 100

Versions

1.0.8latest
Jul 31, 2026
1.0.7
Jul 30, 2026
1.0.6
Jul 27, 2026
1.0.5
Jul 25, 2026
1.0.4
Jul 18, 2026
+ show 19 moreshow less
1.0.3
Jun 21, 2026
1.0.2
May 11, 2026
1.0.1
May 7, 2026
1.0.0
May 4, 2026
0.9.0
May 3, 2026
0.8.0
May 3, 2026
0.7.0
May 3, 2026
0.6.0
May 3, 2026
0.5.0
May 3, 2026
0.4.0
May 2, 2026
0.3.1
Apr 29, 2026
0.3.0
Apr 29, 2026
0.2.0
Apr 28, 2026
0.1.5
Apr 27, 2026
0.1.4
Apr 26, 2026
0.1.3
Apr 26, 2026
0.1.2
Apr 26, 2026
0.1.1
Apr 25, 2026
0.1.0
Apr 25, 2026
PermissionsTool SafetyAuthAnnotationsCode QualityStabilitySpecVuln HistoryAuthorTransparencyCommunity

Tools 1

search
annotations: none low

Permissions 4

network medium
Server uses network capabilities via: fetch(), http
filesystem low
Server uses filesystem capabilities via: fs sync ops, fs.promises
shell high
Server uses shell capabilities via: child_process, execSync(), spawn(), spawnSync()
env_vars low
Server uses env_vars capabilities via: process.env

Scan Findings 28

low
Tool 'search' has no annotations annotation_checker · 100%
high
Hardcoded OAuth client secret in vohongtho-code-intel-platform-20e46e8/code-intel/core/tests/unit/auth/oidc.test.ts auth_checker · 95%
info
Sandbox failed to start for behavioral verification behavioral_verifier · 100%
medium
Suspicious package name: react-dom dependency_analyzer · 60%
medium
Suspicious package name: react-router dependency_analyzer · 60%
medium
Suspicious package name: react-markdown dependency_analyzer · 60%
medium
Vulnerable dependency: @modelcontextprotocol/sdk@1.30.0 (GHSA-6qxp-vccf-f47h) dependency_analyzer · 95%
medium
Vulnerable dependency: braces@3.0.2 (GHSA-grv7-fg5c-xmjg) dependency_analyzer · 95%
medium
Vulnerable dependency: braces@3.0.2 (GHSA-vfj7-8cjw-p6xm) dependency_analyzer · 95%
medium
Vulnerable dependency: compression@1.8.1 (GHSA-vc2v-76pw-4v95) dependency_analyzer · 95%
medium
Vulnerable dependency: minimatch@10.0.0 (GHSA-23c5-xmqv-rm74) dependency_analyzer · 95%
medium
Vulnerable dependency: minimatch@10.0.0 (GHSA-3ppc-4f35-3m26) dependency_analyzer · 95%
medium
Vulnerable dependency: minimatch@10.0.0 (GHSA-7r86-cg39-jmmj) dependency_analyzer · 95%
medium
Vulnerable dependency: esbuild@0.28.0 (GHSA-g7r4-m6w7-qqqr) dependency_analyzer · 95%
medium
Vulnerable dependency: vitest@3.2.4 (GHSA-5xrq-8626-4rwp) dependency_analyzer · 95%
medium
Vulnerable dependency: vitest@3.2.4 (GHSA-82fw-gwwq-j7x9) dependency_analyzer · 95%
info
package.json metadata manifest_parser · 100%
info
Tool: search manifest_parser · 70%
info
Transport: stdio manifest_parser · 90%
info
Required env vars (62) manifest_parser · 80%
info
Sandbox failed to start for output poisoning scan output_poisoning · 100%
medium
Permission: network access detected permission_analyzer · 80%
low
Permission: filesystem access detected permission_analyzer · 90%
high
Permission: shell access detected permission_analyzer · 95%
low
Permission: env_vars access detected permission_analyzer · 90%
info
SBOM generated: 888 components sbom_generator · 100%
critical
RSA Private Key found in vohongtho-code-intel-platform-20e46e8/code-intel/core/src/security/secret-scanner.ts secret_scanner · 95%
medium
No build provenance detected (SLSA L0) slsa_assessor · 90%