Announcing Beacon: Self-improving memory for coding agents

← All MCP servers

MCP server

EchelonGraph CVE & Exposure

mcp:echelongraph/echelongraph-mcp

CVE, KEV, EPSS, SBOM and advisory lookups; per-CVE exposure from Shodan data (© Shodan). Keyless.

awesome-mcp-servers Glama MCP Registry

Verdict

Not analyzed

Indexed from the registries, but not analyzed yet. Lineage and listings below are current.

Execution chain 500

What it calls, runs, installs, reads and writes, with the line that does it.

Environment variables 104

*

test/barred-claims.test.mjs:50 · passthrough

*

test/bod-2604.test.mjs:89 · passthrough

*

test/check_affected.test.mjs:113 · passthrough

*

test/check_sbom-large-rows.test.mjs:106 · passthrough

*

test/check_sbom-large-rows.test.mjs:285 · passthrough

*

test/check_sbom-large-rows.test.mjs:507 · passthrough

*

test/check_sbom-large-rows.test.mjs:713 · passthrough

*

test/check_sbom-large-rows.test.mjs:953 · passthrough

*

test/check_sbom-large-rows.test.mjs:1138 · passthrough

*

test/check_sbom-large-rows.test.mjs:1240 · passthrough

*

test/check_sbom.test.mjs:135 · passthrough

*

test/cve_intel.test.mjs:512 · passthrough

*

test/cve_remediation.test.mjs:324 · passthrough

*

test/description-policy.test.mjs:80 · passthrough

*

test/epss_history.test.mjs:211 · all

*

test/eras.test.mjs:85 · all

*

test/http-memory.test.mjs:138 · all

*

test/http.test.mjs:96 · all

*

test/http.test.mjs:1089 · all

*

test/http.test.mjs:2533 · all

*

test/http.test.mjs:2761 · all

*

test/input-bounds.test.mjs:97 · passthrough

*

test/input-bounds.test.mjs:233 · passthrough

*

test/input-elements.test.mjs:95 · all

*

test/kev_recent.test.mjs:131 · passthrough

*

test/kev_recent.test.mjs:288 · passthrough

*

test/kev-text.test.mjs:95 · passthrough

*

test/listings.test.mjs:222 · passthrough

*

test/listings.test.mjs:313 · passthrough

*

test/listings.test.mjs:359 · passthrough

*

test/mcpb-release.test.mjs:367 · passthrough

*

test/mcpb-release.test.mjs:478 · passthrough

*

test/open-success.test.mjs:78 · passthrough

*

test/per-request-server.test.mjs:50 · all

*

test/prompt-fields.test.mjs:400 · passthrough

*

test/prompts-resources.test.mjs:103 · all

*

test/readme-setup.test.mjs:137 · passthrough

*

test/readme.test.mjs:60 · passthrough

*

test/readme.test.mjs:324 · passthrough

*

test/readme.test.mjs:603 · passthrough

*

test/readme.test.mjs:655 · passthrough

*

test/scan_manifest.test.mjs:317 · passthrough

*

test/scan_manifest.test.mjs:667 · passthrough

*

test/schema-compat.mjs:132 · passthrough

*

test/schema-refusal.test.mjs:65 · all

*

test/score-components.test.mjs:151 · passthrough

*

test/text-bound-live.mjs:192 · all

*

test/text-bound.test.mjs:226 · passthrough

*

test/text-bound.test.mjs:1659 · passthrough

*

test/tools.test.mjs:704 · passthrough

*

test/ua-env.test.mjs:35 · all

*

test/vendor-advisories.test.mjs:185 · passthrough

BUILD_TYPE

.github/scripts/check-provenance.sh:120 · read

E

.github/scripts/check-provenance.sh:84 · read

E

.github/scripts/check-provenance.sh:133 · read

ECHELONGRAPH_API_BASE

src/index.ts:114 · read

ECHELONGRAPH_API_BASE

test/check_sbom-budget.test.mjs:175 · read

ECHELONGRAPH_API_BASE

test/check_sbom-cancel.test.mjs:55 · read

ECHELONGRAPH_API_BASE

test/per-request-server.test.mjs:160 · read

ECHELONGRAPH_API_BASE

test/scan_manifest-cancel.test.mjs:43 · read

ECHELONGRAPH_API_TIMEOUT_MS

src/index.ts:132 · read

ECHELONGRAPH_API_TIMEOUT_MS

test/check_sbom-budget.test.mjs:176 · read

ECHELONGRAPH_API_TIMEOUT_MS

test/check_sbom-cancel.test.mjs:56 · read

ECHELONGRAPH_API_TIMEOUT_MS

test/per-request-server.test.mjs:161 · read

ECHELONGRAPH_API_TIMEOUT_MS

test/scan_manifest-cancel.test.mjs:44 · read

ECHELONGRAPH_FORWARD_HOST

src/runtime.ts:222 · read

ECHELONGRAPH_FORWARD_TOKEN

src/runtime.ts:208 · read

ECHELONGRAPH_MCP_BIN

test/server-under-test.mjs:15 · read

ECHELONGRAPH_MCP_UA

src/index.ts:123 · read

GITHUB_ACTIONS

.github/scripts/check-provenance.sh:44 · read

JSON

.github/scripts/check-provenance.sh:90 · read

JSON

.github/scripts/check-provenance.sh:95 · read

JSON

.github/scripts/check-provenance.sh:96 · read

JSON

.github/scripts/check-provenance.sh:100 · read

JSON

.github/scripts/check-provenance.sh:111 · read

JSON

.github/scripts/check-provenance.sh:114 · read

JSON

.github/scripts/check-provenance.sh:120 · read

JSON

.github/scripts/check-provenance.sh:122 · read

JSON

.github/scripts/check-provenance.sh:123 · read

JSON

.github/scripts/check-provenance.sh:124 · read

MCP_ADMISSION_WAIT_MS

src/http.ts:105 · read

MCP_BODY_IDLE_MS

src/http.ts:108 · read

MCP_H2C

src/http.ts:115 · read

MCP_LARGE_BODY_SLOTS

src/http.ts:99 · read

MCP_LARGE_BODY_WAIT_MS

src/http.ts:101 · read

MCP_MAX_BODY_BYTES

src/http.ts:97 · read

MCP_MAX_IN_FLIGHT

src/http.ts:104 · read

MCP_MAX_SBOM_BODY_BYTES

src/http.ts:98 · read

MCP_RATE_LIMIT_PER_MIN

src/http.ts:95 · read

MCP_REQUEST_TIMEOUT_MS

src/http.ts:109 · read

MCP_REQUIRE_FORWARD_TOKEN

src/http.ts:150 · read

PATH

listings/mcpb/check-bundle.mjs:167 · read

PATH

test/mcpb-release.test.mjs:260 · read

PORT

src/http.ts:92 · read

PORT

src/http.ts:93 · read

REF

.github/scripts/check-provenance.sh:124 · read

REF

.github/scripts/check-provenance.sh:125 · read

REF

.github/scripts/check-provenance.sh:127 · read

REF

.github/scripts/check-provenance.sh:134 · read

SLSA

.github/scripts/check-provenance.sh:95 · read

SLSA

.github/scripts/check-provenance.sh:107 · read

SLSA

.github/scripts/check-provenance.sh:114 · read

UPDATE_INPUT_SCHEMA_SNAPSHOT

test/schema-refusal.test.mjs:34 · read

UPDATE_PROMPT_SNAPSHOTS

test/prompts-resources.test.mjs:22 · read

Commands run 27

{…}sum {…}

test/mcpb-release.test.mjs:266 · process

<dynamic>

test/http-memory.test.mjs:143 · process

<dynamic>

test/http.test.mjs:104 · process

<dynamic>

test/input-elements.test.mjs:164 · process

<dynamic>

test/mcp-stdio-client.mjs:44 · process

<dynamic>

test/mcpb-release.test.mjs:365 · process

<dynamic>

test/mcpb-release.test.mjs:413 · process

<dynamic>

test/mcpb-release.test.mjs:478 · process

<dynamic>

test/mcpb-release.test.mjs:497 · process

<dynamic>

test/mcpb-release.test.mjs:526 · process

<dynamic>

test/per-request-server.test.mjs:68 · process

<dynamic>

test/schema-refusal.test.mjs:175 · process

bash --noprofile --norc -eo pipefail {…}

test/mcpb-release.test.mjs:258 · process

bash -c {…}

test/readme-setup.test.mjs:137 · command

bash -c {…}

test/readme-setup.test.mjs:137 · process

bash -c command -v {…}

test/mcpb-release.test.mjs:57 · process

bash -c command -v {…}

test/mcpb-release.test.mjs:57 · command

code="$(curl -sS --retry 3 --retry-delay 5 --max-time 30 -H 'Accept: application/json' -o "$2" -w '%{http_code}' "$1" 2>"$T/curl.err")" || true

.github/scripts/check-provenance.sh:51 · dynamic_code

node -e "$PROVENANCE_JS" -- "$T/doc.json" "$ATT_FILE" "$PACKAGE_NAME" "$VERSION" "$REPO_URL" "$WORKFLOW" "$COMMIT"

.github/scripts/check-provenance.sh:137 · dynamic_code

npm pack --dry-run --json --ignore-scripts

test/listings.test.mjs:208 · process

sh -c echo $$ > "$0/cgroup.procs" && exec "$@" {…} {…} {…}

test/http-memory.test.mjs:142 · command

sh -c echo $$ > "$0/cgroup.procs" && exec "$@" {…} {…} {…}

test/http-memory.test.mjs:142 · process

sha1

test/mcpb-release.test.mjs:284 · via:sha

sha256

test/mcpb-release.test.mjs:284 · via:sha

sha256

test/mcpb-release.test.mjs:300 · via:sha

tar -czf {…} -C {…} package

test/mcpb-release.test.mjs:274 · process

zip -qj {…} {…}

test/mcpb-release.test.mjs:275 · process

Files read 332

/usr/local/bin/npx

test/dockerfile-base.test.mjs:177 · literal

../../dist/index.js

test/mcpb-release.test.mjs:422 · read

/proc/{…}/stat

test/mcp-stdio-client.test.mjs:29 · read

/proc/{…}/status

test/http-memory.test.mjs:208 · read

/usr/local/bin/corepack

test/dockerfile-base.test.mjs:124 · literal

/usr/local/bin/npm

test/dockerfile-base.test.mjs:124 · literal

/usr/local/bin/npx

test/dockerfile-base.test.mjs:124 · literal

<dynamic>

listings/mcpb/check-bundle.mjs:73 · read

<dynamic>

listings/mcpb/check-bundle.mjs:90 · read

<dynamic>

listings/mcpb/check-bundle.mjs:93 · via:files

<dynamic>

listings/mcpb/check-bundle.mjs:99 · read

<dynamic>

listings/mcpb/check-bundle.mjs:108 · via:same

<dynamic>

listings/mcpb/check-bundle.mjs:109 · via:jsonOf

<dynamic>

listings/mcpb/check-bundle.mjs:118 · read

<dynamic>

listings/mcpb/check-bundle.mjs:130 · via:same

<dynamic>

listings/mcpb/check-bundle.mjs:132 · via:jsonOf

<dynamic>

listings/mcpb/check-bundle.mjs:137 · via:files

<dynamic>

listings/mcpb/check-bundle.mjs:139 · via:files

<dynamic>

listings/mcpb/check-bundle.mjs:144 · via:same

<dynamic>

listings/mcpb/check-bundle.mjs:153 · via:files

<dynamic>

listings/mcpb/check-bundle.mjs:157 · via:same

<dynamic>

src/index.ts:101 · read

<dynamic>

src/index.ts:668 · via:of

<dynamic>

src/index.ts:673 · via:of

<dynamic>

src/index.ts:678 · via:of

<dynamic>

src/tools/check_sbom.ts:516 · via:walk

<dynamic>

src/tools/check_sbom.ts:521 · via:walk

<dynamic>

src/tools/manifests/index.ts:71 · via:read

<dynamic>

src/tools/manifests/npmlock.ts:91 · via:walk

<dynamic>

src/tools/manifests/npmlock.ts:95 · via:walk

<dynamic>

synthetic/probes.mjs:643 · read

<dynamic>

synthetic/probes.mjs:661 · via:fromFixture

<dynamic>

synthetic/probes.mjs:667 · via:fromFixture

<dynamic>

test/barred-claims.test.mjs:28 · read

<dynamic>

test/barred-claims.test.mjs:40 · via:textsOf

<dynamic>

test/barred-claims.test.mjs:41 · via:textsOf

<dynamic>

test/bod-2201.test.mjs:24 · read

<dynamic>

test/bod-2201.test.mjs:26 · via:files

<dynamic>

test/bod-2201.test.mjs:44 · read

<dynamic>

test/check_affected.test.mjs:276 · read

<dynamic>

test/check_affected.test.mjs:292 · read

<dynamic>

test/check_affected.test.mjs:303 · read

<dynamic>

test/check_affected.test.mjs:312 · read

<dynamic>

test/check_sbom-large-rows.test.mjs:37 · read

<dynamic>

test/check_sbom-large-rows.test.mjs:271 · read

<dynamic>

test/check_sbom.test.mjs:32 · read

<dynamic>

test/cve_intel.test.mjs:126 · read

<dynamic>

test/cve_intel.test.mjs:211 · read

<dynamic>

test/cve_intel.test.mjs:302 · read

<dynamic>

test/cve_intel.test.mjs:306 · read

<dynamic>

test/cve_intel.test.mjs:770 · read

<dynamic>

test/cve_remediation.test.mjs:131 · read

<dynamic>

test/cve_remediation.test.mjs:134 · read

<dynamic>

test/cve_remediation.test.mjs:373 · via:textsOf

<dynamic>

test/cve_remediation.test.mjs:374 · via:textsOf

<dynamic>

test/cve_remediation.test.mjs:783 · via:walk

<dynamic>

test/cve_remediation.test.mjs:784 · via:walk

<dynamic>

test/cve_remediation.test.mjs:785 · via:walk

<dynamic>

test/cve_remediation.test.mjs:797 · via:walk

<dynamic>

test/dockerfile-base.test.mjs:64 · read

<dynamic>

test/dockerfile-base.test.mjs:71 · read

<dynamic>

test/dockerfile-base.test.mjs:74 · read

<dynamic>

test/dockerfile-base.test.mjs:75 · via:of

<dynamic>

test/dockerfile-base.test.mjs:76 · via:of

<dynamic>

test/dockerfile-base.test.mjs:150 · read

<dynamic>

test/dockerfile-base.test.mjs:154 · read

<dynamic>

test/dockerfile-base.test.mjs:160 · read

<dynamic>

test/dockerfile-base.test.mjs:168 · read

<dynamic>

test/handler-error.test.mjs:33 · read

<dynamic>

test/http-memory.test.mjs:55 · read

<dynamic>

test/http-memory.test.mjs:78 · read

<dynamic>

test/http-memory.test.mjs:205 · read

<dynamic>

test/http-memory.test.mjs:206 · read

<dynamic>

test/http-memory.test.mjs:250 · via:aftermath

<dynamic>

test/http-memory.test.mjs:295 · via:aftermath

<dynamic>

test/http-policy.test.mjs:568 · read

<dynamic>

test/http-policy.test.mjs:569 · read

<dynamic>

test/http.test.mjs:424 · read

<dynamic>

test/http.test.mjs:499 · read

<dynamic>

test/http.test.mjs:2219 · read

<dynamic>

test/http.test.mjs:2949 · read

<dynamic>

test/http.test.mjs:2950 · via:walk

<dynamic>

test/http.test.mjs:2951 · read

<dynamic>

test/http.test.mjs:2954 · via:walk

<dynamic>

test/http.test.mjs:2959 · read

<dynamic>

test/input-bounds.test.mjs:40 · via:walk

<dynamic>

test/input-bounds.test.mjs:49 · via:walk

<dynamic>

test/input-bounds.test.mjs:51 · via:walk

<dynamic>

test/kev_recent.test.mjs:318 · via:walk

<dynamic>

test/kev_recent.test.mjs:321 · via:walk

<dynamic>

test/listings.test.mjs:33 · read

<dynamic>

test/log-type.test.mjs:40 · via:read

<dynamic>

test/log-type.test.mjs:47 · read

<dynamic>

test/mcp-stdio-client.test.mjs:42 · via:blockUntilZombie

<dynamic>

test/mcpb-release.test.mjs:89 · via:walk

<dynamic>

test/mcpb-release.test.mjs:115 · read

<dynamic>

test/mcpb-release.test.mjs:129 · read

<dynamic>

test/mcpb-release.test.mjs:163 · read

<dynamic>

test/mcpb-release.test.mjs:203 · read

<dynamic>

test/mcpb-release.test.mjs:228 · read

<dynamic>

test/mcpb-release.test.mjs:262 · read

<dynamic>

test/mcpb-release.test.mjs:280 · read

<dynamic>

test/mcpb-release.test.mjs:281 · read

<dynamic>

test/mcpb-release.test.mjs:335 · read

<dynamic>

test/mcpb-release.test.mjs:339 · read

<dynamic>

test/mcpb-release.test.mjs:348 · read

<dynamic>

test/mcpb-release.test.mjs:350 · read

<dynamic>

test/mcpb-release.test.mjs:357 · read

<dynamic>

test/mcpb-release.test.mjs:358 · read

<dynamic>

test/mcpb-release.test.mjs:359 · read

<dynamic>

test/mcpb-release.test.mjs:360 · read

<dynamic>

test/mcpb-release.test.mjs:380 · read

<dynamic>

test/mcpb-release.test.mjs:403 · read

<dynamic>

test/mcpb-release.test.mjs:428 · read

<dynamic>

test/mcpb-release.test.mjs:431 · read

<dynamic>

test/mcpb-release.test.mjs:436 · read

<dynamic>

test/mcpb-release.test.mjs:446 · read

<dynamic>

test/mcpb-release.test.mjs:493 · read

<dynamic>

test/mcpb-release.test.mjs:522 · read

<dynamic>

test/open-success.test.mjs:186 · via:of

<dynamic>

test/open-success.test.mjs:270 · read

<dynamic>

test/prompt-fields.test.mjs:384 · via:read

<dynamic>

test/prompt-fields.test.mjs:386 · via:read

<dynamic>

test/prompt-fields.test.mjs:552 · via:walk

<dynamic>

test/prompt-fields.test.mjs:555 · via:walk

<dynamic>

test/prompt-fields.test.mjs:589 · read

<dynamic>

test/prompt-fields.test.mjs:846 · read

<dynamic>

test/prompt-fields.test.mjs:943 · read

<dynamic>

test/prompt-fields.test.mjs:963 · read

<dynamic>

test/prompt-fields.test.mjs:993 · read

<dynamic>

test/prompts-resources.test.mjs:123 · read

<dynamic>

test/prompts-resources.test.mjs:263 · read

<dynamic>

test/radar-staleness.test.mjs:74 · read

<dynamic>

test/readme.test.mjs:220 · read

<dynamic>

test/readme.test.mjs:222 · via:walk

<dynamic>

test/readme.test.mjs:223 · read

<dynamic>

test/readme.test.mjs:226 · via:walk

<dynamic>

test/readme.test.mjs:307 · read

<dynamic>

test/readme.test.mjs:725 · via:readPkgFile

<dynamic>

test/readme.test.mjs:732 · via:readPkgFile

<dynamic>

test/readme.test.mjs:736 · via:readPkgFile

<dynamic>

test/readme.test.mjs:751 · read

<dynamic>

test/runtime-deps.test.mjs:33 · read

<dynamic>

test/runtime-deps.test.mjs:34 · read

<dynamic>

test/runtime-deps.test.mjs:54 · read

<dynamic>

test/scan_manifest.test.mjs:39 · read

<dynamic>

test/scan_manifest.test.mjs:299 · via:fixture

<dynamic>

test/schema-compat.mjs:124 · read

<dynamic>

test/schema-compat.mjs:135 · read

<dynamic>

test/schema-compat.mjs:167 · via:toolsOf

<dynamic>

test/schema-compat.mjs:175 · via:toolsOf

<dynamic>

test/schema-compat.mjs:176 · read

<dynamic>

test/schema-compat.mjs:177 · via:toolsOf

<dynamic>

test/schema-refusal.test.mjs:101 · read

<dynamic>

test/schema-refusal.test.mjs:121 · read

<dynamic>

test/schema-refusal.test.mjs:207 · read

<dynamic>

test/server-under-test.mjs:21 · read

<dynamic>

test/server-under-test.mjs:28 · read

<dynamic>

test/server-under-test.mjs:30 · via:readPkgFile

<dynamic>

test/text-bound-hosted.test.mjs:18 · read

<dynamic>

test/text-bound-hosted.test.mjs:67 · read

<dynamic>

test/text-bound-live.mjs:197 · read

<dynamic>

test/text-bound-live.mjs:213 · read

<dynamic>

test/text-bound-live.mjs:289 · read

<dynamic>

test/text-bound.mjs:169 · via:same

<dynamic>

test/text-bound.mjs:294 · read

<dynamic>

test/text-bound.mjs:301 · via:generatedAtByFile

<dynamic>

test/text-bound.mjs:313 · via:generatedAtByFile

<dynamic>

test/text-bound.mjs:335 · via:generatedAtByFile

<dynamic>

test/text-bound.mjs:410 · read

<dynamic>

test/text-bound.mjs:439 · read

<dynamic>

test/text-bound.mjs:514 · read

<dynamic>

test/text-bound.mjs:623 · read

<dynamic>

test/text-bound.mjs:914 · read

<dynamic>

test/text-bound.mjs:936 · via:readShaped

<dynamic>

test/text-bound.mjs:963 · via:readShaped

<dynamic>

test/text-bound.mjs:974 · via:readShaped

<dynamic>

test/text-bound.test.mjs:1024 · read

<dynamic>

test/text-bound.test.mjs:1028 · read

<dynamic>

test/text-bound.test.mjs:1423 · via:generatedAtByFile

<dynamic>

test/text-bound.test.mjs:1524 · via:fixture

<dynamic>

test/text-bound.test.mjs:1525 · read

<dynamic>

test/text-bound.test.mjs:1526 · via:fixture

<dynamic>

test/text-bound.test.mjs:1528 · via:fixture

<dynamic>

test/text-bound.test.mjs:1533 · read

<dynamic>

test/text-bound.test.mjs:1533 · via:fixture

<dynamic>

test/text-bound.test.mjs:1538 · read

<dynamic>

test/text-bound.test.mjs:1542 · via:remeasure

<dynamic>

test/text-bound.test.mjs:1556 · via:fixture

<dynamic>

test/text-bound.test.mjs:1557 · read

<dynamic>

test/text-bound.test.mjs:1568 · via:remeasure

<dynamic>

test/text-bound.test.mjs:1573 · via:fixture

<dynamic>

test/text-bound.test.mjs:1577 · via:fixture

<dynamic>

test/text-bound.test.mjs:1577 · read

<dynamic>

test/text-bound.test.mjs:1578 · via:remeasure

<dynamic>

test/text-bound.test.mjs:1588 · via:remeasure

<dynamic>

test/text-bound.test.mjs:1590 · via:fixture

<dynamic>

test/tools.test.mjs:975 · via:walk

<dynamic>

test/tools.test.mjs:977 · via:walk

<dynamic>

test/tools.test.mjs:1058 · via:walk

<dynamic>

test/tools.test.mjs:1059 · via:walk

<dynamic>

test/tools.test.mjs:1061 · via:walk

<dynamic>

test/tools.test.mjs:1506 · via:readPkgFile

<dynamic>

test/tools.test.mjs:2926 · via:walk

<dynamic>

test/tools.test.mjs:3155 · via:walk

<dynamic>

test/tools.test.mjs:3157 · via:walk

<dynamic>

test/tools.test.mjs:3991 · read

Cargo.lock

test/scan_manifest.test.mjs:86 · via:read

Cargo.lock

test/scan_manifest.test.mjs:181 · via:read

Cargo.lock

test/scan_manifest.test.mjs:182 · via:read

Cargo.lock

test/scan_manifest.test.mjs:193 · via:read

Cargo.v3.lock

test/scan_manifest.test.mjs:181 · via:fixture

Cargo.v4.lock

test/scan_manifest.test.mjs:86 · via:fixture

Cargo.v4.lock

test/scan_manifest.test.mjs:182 · via:fixture

CHANGELOG.md

test/readme.test.mjs:93 · via:readPkgFile

CHANGELOG.md

test/readme.test.mjs:103 · via:readPkgFile

CHANGELOG.md

test/readme.test.mjs:135 · via:readPkgFile

CHANGELOG.md

test/readme.test.mjs:747 · via:readPkgFile

CHANGELOG.md

test/readme.test.mjs:790 · via:readPkgFile

CHANGELOG.md

test/readme.test.mjs:793 · via:readPkgFile

CHANGELOG.md

test/readme.test.mjs:828 · via:readPkgFile

CHANGELOG.md

test/readme.test.mjs:831 · via:readPkgFile

CHANGELOG.md

test/readme.test.mjs:841 · via:readPkgFile

check_sbom

test/prompt-fields.test.mjs:697 · via:readShaped

check_sbom

test/prompt-fields.test.mjs:717 · via:readShaped

check_sbom

test/prompt-fields.test.mjs:760 · via:readShaped

composer.lock

test/scan_manifest.test.mjs:212 · via:read

composer.lock

test/scan_manifest.test.mjs:212 · via:fixture

composer.lock

test/scan_manifest.test.mjs:215 · via:read

dist/http.js

test/handler-error.test.mjs:104 · via:readPkgFile

docs/tools.md

test/check_sbom-large-rows.test.mjs:821 · via:readPkgFile

docs/tools.md

test/readme.test.mjs:559 · via:readPkgFile

docs/tools.md

test/tools.test.mjs:1542 · via:readPkgFile

docs/tools.md

test/tools.test.mjs:1545 · via:readPkgFile

docs/tools.md

test/tools.test.mjs:1567 · via:readPkgFile

fixture.go.mod

test/scan_manifest.test.mjs:95 · via:fixture

fixture.go.mod

test/scan_manifest.test.mjs:127 · via:fixture

fixture.go.mod

test/scan_manifest.test.mjs:356 · via:fixture

fixture.go.mod

test/scan_manifest.test.mjs:360 · via:fixture

Gemfile.lock

test/scan_manifest.test.mjs:206 · via:read

Gemfile.lock

test/scan_manifest.test.mjs:206 · via:fixture

glama.json

test/listings.test.mjs:141 · via:read

go.mod

test/scan_manifest.test.mjs:95 · via:read

go.mod

test/scan_manifest.test.mjs:111 · via:read

go.mod

test/scan_manifest.test.mjs:115 · via:read

go.mod

test/scan_manifest.test.mjs:118 · via:read

go.mod

test/scan_manifest.test.mjs:122 · via:read

go.mod

test/scan_manifest.test.mjs:127 · via:read

gradle.lockfile

test/scan_manifest.test.mjs:218 · via:read

gradle.lockfile

test/scan_manifest.test.mjs:218 · via:fixture

gradle.lockfile

test/scan_manifest.test.mjs:222 · via:read

gradle.lockfile

test/scan_manifest.test.mjs:424 · via:fixture

juice-shop-11.1.2-50.cdx.json

test/check_sbom.test.mjs:33 · via:fixture

leaked-credentials_stats.json

test/text-bound.test.mjs:1438 · literal

listings/docker/remote/readme.md

test/listings.test.mjs:136 · via:read

listings/docker/remote/readme.md

test/listings.test.mjs:278 · via:read

listings/docker/remote/server.yaml

test/listings.test.mjs:126 · via:read

listings/docker/remote/server.yaml

test/listings.test.mjs:277 · via:read

listings/docker/remote/tools.json

test/listings.test.mjs:135 · via:read

listings/docker/server.yaml

test/listings.test.mjs:97 · via:read

listings/docker/server.yaml

test/listings.test.mjs:276 · via:read

listings/github-repo-settings.json

test/listings.test.mjs:178 · via:read

listings/github-repo-settings.json

test/listings.test.mjs:193 · via:read

listings/github-repo-settings.json

test/listings.test.mjs:273 · via:read

listings/mcpb/manifest.json

test/listings.test.mjs:96 · via:read

listings/mcpb/manifest.json

test/listings.test.mjs:270 · via:read

listings/README.md

test/listings.test.mjs:69 · via:read

listings/README.md

test/listings.test.mjs:385 · via:read

listings/README.md

test/listings.test.mjs:399 · via:read

listings/README.md

test/listings.test.mjs:475 · via:read

listings/README.md

test/listings.test.mjs:497 · via:read

listings/README.md

test/listings.test.mjs:528 · via:read

listings/README.md

test/listings.test.mjs:534 · via:read

listings/README.md

test/listings.test.mjs:566 · via:read

listings/README.md

test/listings.test.mjs:613 · via:read

lodash-4.17.15.package-lock.json

test/scan_manifest.test.mjs:83 · via:fixture

lodash-4.17.15.package-lock.json

test/scan_manifest.test.mjs:89 · via:fixture

lodash-4.17.21.package-lock.json

test/scan_manifest.test.mjs:90 · via:fixture

package-lock.json

test/scan_manifest.test.mjs:58 · via:read

package-lock.json

test/scan_manifest.test.mjs:77 · via:read

package-lock.json

test/scan_manifest.test.mjs:84 · via:read

package-lock.json

test/scan_manifest.test.mjs:89 · via:read

package-lock.json

test/scan_manifest.test.mjs:90 · via:read

package-lock.json

test/scan_manifest.test.mjs:398 · via:read

package-lock.json

test/tools.test.mjs:5156 · via:readPkgFile

package.json

test/listings.test.mjs:94 · via:read

package.json

test/server-under-test.mjs:22 · via:readPkgFile

poetry.lock

test/scan_manifest.test.mjs:200 · via:fixture

poetry.lock

test/scan_manifest.test.mjs:200 · via:read

README.md

test/barred-claims.test.mjs:74 · via:readPkgFile

README.md

test/check_sbom-large-rows.test.mjs:817 · via:readPkgFile

README.md

test/epss_history.test.mjs:520 · via:readPkgFile

README.md

test/http.test.mjs:2995 · via:readPkgFile

README.md

test/http.test.mjs:3009 · via:readPkgFile

README.md

test/http.test.mjs:3017 · via:readPkgFile

README.md

test/http.test.mjs:3026 · via:readPkgFile

README.md

test/http.test.mjs:3027 · via:readPkgFile

README.md

test/http.test.mjs:3034 · via:readPkgFile

README.md

test/http.test.mjs:3035 · via:readPkgFile

README.md

test/listings.test.mjs:428 · via:read

README.md

test/listings.test.mjs:433 · via:read

README.md

test/readme-setup.test.mjs:26 · via:readPkgFile

README.md

test/readme.test.mjs:40 · via:readPkgFile

README.md

test/server-under-test.mjs:30 · via:readPkgFile

README.md

test/tools.test.mjs:1491 · via:readPkgFile

README.md

test/tools.test.mjs:1505 · via:readPkgFile

README.md

test/tools.test.mjs:1576 · via:readPkgFile

README.md

test/tools.test.mjs:1608 · via:readPkgFile

README.md

test/tools.test.mjs:1610 · via:readPkgFile

README.md

test/tools.test.mjs:1633 · via:readPkgFile

README.md

test/tools.test.mjs:1648 · via:readPkgFile

requirements.txt

test/scan_manifest.test.mjs:85 · via:read

requirements.txt

test/scan_manifest.test.mjs:132 · via:fixture

requirements.txt

test/scan_manifest.test.mjs:132 · via:read

requirements.txt

test/scan_manifest.test.mjs:152 · via:read

requirements.txt

test/scan_manifest.test.mjs:383 · via:fixture

requirements.txt

test/scan_manifest.test.mjs:398 · via:read

server.json

test/barred-claims.test.mjs:33 · via:readPkgFile

server.json

test/http.test.mjs:2746 · via:readPkgFile

server.json

test/listings.test.mjs:95 · via:read

server.json

test/readme-setup.test.mjs:27 · via:readPkgFile

server.json

test/readme.test.mjs:41 · via:readPkgFile

server.json

test/tools.test.mjs:1419 · via:readPkgFile

server.json

test/tools.test.mjs:1440 · via:readPkgFile

server.json

test/tools.test.mjs:1508 · via:readPkgFile

server.json

test/tools.test.mjs:5140 · via:readPkgFile

SPDXJSONExample-v2.3.spdx.json

test/check_sbom.test.mjs:35 · via:fixture

test/retired-tool-phrases.json

test/listings.test.mjs:78 · via:read

test/tools.test.mjs

test/listings.test.mjs:40 · via:read

tree.v{…}.package-lock.json

test/scan_manifest.test.mjs:58 · via:fixture

tree.v1.package-lock.json

test/scan_manifest.test.mjs:406 · via:fixture

tree.v3.package-lock.json

test/scan_manifest.test.mjs:384 · via:fixture

Files written 37

[

.github/scripts/check-provenance.sh:37 · write

]

.github/scripts/check-provenance.sh:37 · write

{

.github/scripts/check-provenance.sh:84 · write

{

.github/scripts/check-provenance.sh:85 · write

/sys/fs/cgroup/memory/eg-mcp-2773-{…}-{…}-r{…}

test/http-memory.test.mjs:67 · write

/sys/fs/cgroup/memory/eg-mcp-2773-{…}-{…}-r{…}/memory.limit_in_bytes

test/http-memory.test.mjs:68 · write

<dynamic>

listings/mcpb/check-bundle.mjs:183 · write

<dynamic>

test/http-memory.test.mjs:171 · write

<dynamic>

test/mcpb-release.test.mjs:231 · write

<dynamic>

test/mcpb-release.test.mjs:250 · write

<dynamic>

test/mcpb-release.test.mjs:251 · write

<dynamic>

test/mcpb-release.test.mjs:252 · write

<dynamic>

test/mcpb-release.test.mjs:253 · write

<dynamic>

test/mcpb-release.test.mjs:254 · write

<dynamic>

test/mcpb-release.test.mjs:255 · write

<dynamic>

test/mcpb-release.test.mjs:257 · write

<dynamic>

test/mcpb-release.test.mjs:270 · write

<dynamic>

test/mcpb-release.test.mjs:271 · write

<dynamic>

test/mcpb-release.test.mjs:278 · write

<dynamic>

test/mcpb-release.test.mjs:279 · write

<dynamic>

test/mcpb-release.test.mjs:280 · write

<dynamic>

test/mcpb-release.test.mjs:281 · write

<dynamic>

test/mcpb-release.test.mjs:299 · write

<dynamic>

test/mcpb-release.test.mjs:300 · write

<dynamic>

test/mcpb-release.test.mjs:301 · via:put

<dynamic>

test/mcpb-release.test.mjs:302 · via:put

<dynamic>

test/mcpb-release.test.mjs:309 · write

<dynamic>

test/mcpb-release.test.mjs:325 · write

<dynamic>

test/mcpb-release.test.mjs:326 · write

<dynamic>

test/mcpb-release.test.mjs:327 · write

<dynamic>

test/mcpb-release.test.mjs:328 · write

<dynamic>

test/mcpb-release.test.mjs:329 · write

<dynamic>

test/mcpb-release.test.mjs:356 · write

<dynamic>

test/mcpb-release.test.mjs:357 · write

<dynamic>

test/mcpb-release.test.mjs:358 · write

<dynamic>

test/mcpb-release.test.mjs:359 · write

<dynamic>

test/mcpb-release.test.mjs:360 · write

Linked repositories 95

GitHub repositories it links to or installs from, and whether their names can be taken over.

apache/trafficserver

url · not tracked

ashtuchkin/iconv-lite

url · not tracked

auth0/express-jwt

url · not tracked

auth0/node-jsonwebtoken

url · not tracked

bkimminich/juice-shop

url · not tracked

url · not tracked

url · not tracked

chalker/safer-buffer

url · not tracked

url · no ownership changes

cisagov/log4j-affected-db

url · not tracked

component/toidentifier

url · not tracked

url · not tracked

docker/mcp-registry

url · not tracked

doctrine/instantiator

url · not tracked

dotnet/announcements

url · not tracked

dougwilson/nodejs-depd

url · not tracked

url · not tracked

envoyproxy/envoy

url · not tracked

url · not tracked

expressjs/body-parser

url · not tracked

expressjs/cookie-parser

url · not tracked

expressjs/express

url · not tracked

expressjs/morgan

url · not tracked

expressjs/multer

url · not tracked

facebook/proxygen

url · not tracked

fasterxml/woodstox

url · not tracked

url · not tracked

froxlor/froxlor

url · not tracked

url · not tracked

url · not tracked

url · not tracked

helmetjs/helmet

url · not tracked

isaacs/inherits

url · not tracked

jahlives/openssl_encrypt

url · not tracked

jonathanong/ee-first

url · not tracked

jonschlinkert/kind-of

url · not tracked

jshttp/content-type

url · not tracked

jshttp/http-errors

url · not tracked

jshttp/media-typer

url · not tracked

url · not tracked

jshttp/mime-types

url · not tracked

jshttp/on-finished

url · not tracked

jshttp/statuses

url · not tracked

url · not tracked

kazu-yamamoto/http2

url · not tracked

kozmer/log4j-shell-poc

url · not tracked

url · not tracked

kubernetes/kubernetes

url · not tracked

url · not tracked

linkerd/website

url · not tracked

url · not tracked

url · not tracked

mapbox/node-pre-gyp

url · not tracked

mapbox/node-sqlite3

url · not tracked

marudor/libxmljs2

url · not tracked

mgol/check-dependencies

url · not tracked

mickhansen/dottie.js

url · not tracked

microsoft/cbl-mariner

url · not tracked

microsoft/kafka-connect-cosmosdb

url · not tracked

microsoft/msquic

url · not tracked

mmckegg/notevil

url · not tracked

modelcontextprotocol/mcpb

url · not tracked

msealand/z85.node

url · not tracked

url · not tracked

nghttp2/nghttp2

url · not tracked

url · not tracked

nu11secur1ty/cve-mitre

url · not tracked

opensearch-project/data-prepper

url · not tracked

openssl/openssl

url · not tracked

url · not tracked

php-fig/http-message

url · not tracked

pillarjs/encodeurl

url · not tracked

pjsip/pjproject

url · not tracked

projectcontour/contour

url · not tracked

projectdiscovery/nuclei-templates

url · not tracked

punkave/sanitize-html

url · not tracked

python-attrs/attrs

url · not tracked

ralouphie/getallheaders

url · not tracked

rapid7/metasploit-framework

url · not tracked

request/request

url · not tracked

rust-lang/crates.io-index

url · not tracked

sequelize/sequelize

url · not tracked

socketio/socket.io

url · not tracked

stream-utils/raw-body

url · not tracked

stream-utils/unpipe

url · not tracked

substack/minimist

url · not tracked

symfony/polyfill

url · not tracked

symfony/polyfill-ctype

url · not tracked

timrwood/moment

url · not tracked

visionmedia/bytes.js

url · not tracked

visionmedia/debug

url · not tracked

wesleytodd/setprototypeof

url · not tracked

yargs/yargs-parser

url · not tracked

url · not tracked

zjonsson/node-unzipper

url · not tracked