Static repository check
- Checked commit
7e7dd742e596- Evidence Score
- 68/100
- Static risk
- Medium risk
- Files scanned
- 3
- Findings
- 6
Evidence breakdown
Source provenance25/25
Install documentation15/25
Maintenance13/20
Compatibility evidence5/20
Security signals10/10
Compatibility confidence: Limited
Findings (6)
- Medium
credentials.env-secretdsh/cordis.patch.yml:28credential-accessdisabled: !!js (process.env.TREG_TOKEN ?? '') === '' - Medium
credentials.env-secretdsh/cordis.patch.yml:34credential-accessAuthorization: !!js '`Bearer ${process.env.TREG_TOKEN}`' - Low
network.external-hostdsh/cordis.patch.yml:32networkurl: https://treg.to/mcp/ - Low
network.external-hostpackage.json:27network"homepage": "https://treg.to", - Low
network.external-hostpackage.json:32network"author": "Superdesign dev, Inc. <jason@superdesign.dev> (https://treg.to)", - Low
network.external-hostpackages/npm/package.json:15network"homepage": "https://treg.to",
Not run
- Dependency advisory database scan
- Installation execution test
- Runtime behavior verification
Scanner 1.0.0 · Scorer 1.0.0
