Static repository check
- Checked commit
8c6118d2097d- Evidence Score
- 86/100
- Static risk
- Medium risk
- Files scanned
- 7
- Findings
- 7
Evidence breakdown
Compatibility confidence: Limited
Findings (7)
- Medium
credentials.env-secretpackages/dsh-mcp-context7/cordis.patch.yml:13credential-accessheaders: !!js "(process.env.CONTEXT7_API_KEY ? { Authorization: 'Bearer ' + process.env.CONTEXT7_API_KEY } : {})" - Medium
credentials.env-secretpackages/dsh-mcp-firecrawl/cordis.patch.yml:14credential-accessheaders: !!js "(process.env.FIRECRAWL_API_KEY ? { Authorization: 'Bearer ' + process.env.FIRECRAWL_API_KEY } : {})" - Medium
credentials.env-secretpackages/dsh-tavily/cordis.patch.yml:25credential-accessheaders: !!js "(process.env.TAVILY_API_KEY ? { Authorization: 'Bearer ' + process.env.TAVILY_API_KEY } : { 'X-Tavily-Access-Mode': 'keyless' })" - Medium
deps.core-package-installedpackages/dsh-tavily/package.jsondependencies"@deepseek-ai/schemastery": "^3.18.1" - Low
network.external-hostpackages/dsh-mcp-context7/cordis.patch.yml:12networkurl: https://mcp.context7.com/mcp - Low
network.external-hostpackages/dsh-mcp-firecrawl/cordis.patch.yml:13networkurl: https://mcp.firecrawl.dev/v2/mcp - Low
network.external-hostpackages/dsh-tavily/cordis.patch.yml:24networkurl: https://mcp.tavily.com/mcp/
- Dependency advisory database scan
- Installation execution test
- Runtime behavior verification
Scanner 1.0.0 · Scorer 1.0.0