← Back to search

YAP — Yet Another Packager

M0Rf30 Scanned 30d ago

Build native Linux packages (.deb/.rpm/.apk/.pkg.tar.zst) from a single PKGBUILD via MCP.

MCP Registry ↗
? Not scanned yet

Versions

2.2.2latest
first seen Jun 5, 2026

Tools 0

No tools indexed yet.

Permissions 0

No permissions indexed yet.

Scan Findings 17

info
Sandbox failed to start for behavioral verification behavioral_verifier · 100%
medium
Excessive dependency count: 88 direct dependencies dependency_analyzer · 90%
medium
Vulnerable dependency: golang.org/x/crypto@0.55.0 (GO-2026-5932) dependency_analyzer · 95%
medium
Hex string literal (>50 chars) in M0Rf30-yap-11fc896/pkg/pkgbuild/pkgbuild_test.go:1346 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in M0Rf30-yap-11fc896/pkg/pkgbuild/pkgbuild_test.go:1347 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in M0Rf30-yap-11fc896/pkg/pkgbuild/pkgbuild_test.go:1357 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in M0Rf30-yap-11fc896/pkg/aptcache/safety_test.go:32 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in M0Rf30-yap-11fc896/pkg/dnfcache/coverage_test.go:654 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in M0Rf30-yap-11fc896/pkg/dnfcache/helpers_test.go:1348 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in M0Rf30-yap-11fc896/pkg/gensum/fuzz_test.go:90 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in M0Rf30-yap-11fc896/pkg/gensum/fuzz_test.go:91 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in M0Rf30-yap-11fc896/pkg/gensum/fuzz_test.go:265 entropy_analyzer · 70%
info
Transport: stdio manifest_parser · 90%
info
Required env vars (22) manifest_parser · 80%
info
Sandbox failed to start for output poisoning scan output_poisoning · 100%
info
SBOM generated: 88 components sbom_generator · 100%
medium
No build provenance detected (SLSA L0) slsa_assessor · 90%