Static repository check
- Checked commit
55e8e9fbe843- Evidence Score
- 77/100
- Static risk
- Medium risk
- Files scanned
- 2
- Findings
- 4
Evidence breakdown
Source provenance22/25
Install documentation25/25
Maintenance12/20
Compatibility evidence8/20
Security signals10/10
Compatibility confidence: Limited
Findings (4)
- Medium
credentials.env-secretintegrations/deepseek-harness/cordis.patch.yml:22credential-accessTAVILY_API_KEY: !!js process.env.TAVILY_API_KEY || '' - Medium
credentials.env-secretintegrations/deepseek-harness/cordis.patch.yml:23credential-accessBRAVE_API_KEY: !!js process.env.BRAVE_API_KEY || '' - Medium
credentials.env-secretintegrations/deepseek-harness/cordis.patch.yml:24credential-accessGEMINI_SEARCH_API_KEY: !!js process.env.GEMINI_SEARCH_API_KEY || '' - Medium
credentials.env-secretintegrations/deepseek-harness/cordis.patch.yml:25credential-accessGOOGLE_STUDIO_API_KEY: !!js process.env.GOOGLE_STUDIO_API_KEY || ''
Not run
- Dependency advisory database scan
- Installation execution test
- Runtime behavior verification
Scanner 1.0.0 · Scorer 1.0.0
