{"name":"io.github.ciloops/vuln-check","slug":"ciloops-vuln-check","title":null,"description":"Local vulnerability scan on top of grype, with prioritised upgrade actions for agents.","url":"https://mcp.market/server/ciloops-vuln-check","rating":null,"grade":"B","score":75,"certified":false,"status":"active","category":"security","tags":["security"],"presence":{"score":18,"stars":1,"forks":0,"downloads_week":null,"last_push_at":"2026-10-23T16:17:01.000Z","license":"Apache-2.0"},"uptime":null,"claimed":false,"transport":"mixed","callable_via_gateway":false,"default_price_micros":0,"repository":"https://github.com/ciloops/vuln-check","website":null,"version":"0.1.3","remotes":[],"packages":[{"registryType":"npm","registryBaseUrl":"https://registry.npmjs.org","identifier":"@ciloops/vuln-check","version":"0.1.3","runtimeHint":"npx","transport":{"type":"stdio"},"packageArguments":[{"value":"mcp","type":"positional"}]},{"registryType":"oci","identifier":"ghcr.io/ciloops/vuln-check:0.1.3","runtimeHint":"docker","transport":{"type":"stdio"},"runtimeArguments":[{"value":"{workdir}:/work","type":"named","name":"-v"},{"value":"vuln-check-db:/cache","type":"named","name":"-v"}],"packageArguments":[{"value":"mcp","type":"positional"}]}],"tools":[],"scan":{"score":75,"grade":"B","scanned_at":"2026-10-24T04:07:21.593Z","report":{"scannerVersion":"0.1.10","scannedAt":"2026-10-24T04:07:21.563Z","components":{"code":{"score":15,"max":25,"notes":["3 source files scanned"]},"reliability":{"score":-1,"max":20,"notes":["no gateway calls yet and no remote to probe"]},"poisoning":{"score":-1,"max":15,"notes":["tools not inspected (local package is not executed); not counted"]},"auth":{"score":12,"max":15,"notes":["local package, no credentials required"]},"maintenance":{"score":15,"max":15,"notes":["last push 0 days ago"]},"identity":{"score":7,"max":10,"notes":["registry namespace matches repository owner"]}},"findings":[{"id":"install.script","severity":"medium","component":"code","title":"npm install lifecycle script present"},{"id":"install.script","severity":"medium","component":"code","title":"npm install lifecycle script present","evidence":"package.json: … \"README.md\" ], \"scripts\": { \"postinstall\": \"node install.js\" }, \"engines\": { …"}],"inputs":{"packages":[{"registryType":"npm","identifier":"@ciloops/vuln-check","version":"0.1.3","found":true,"license":"Apache-2.0","hasInstallScripts":true,"dependencyCount":0,"publishedAt":"2026-10-23T15:59:53.328Z","repositoryUrl":"git+https://github.com/ciloops/vuln-check.git"}],"repo":{"found":true,"owner":"ciloops","repo":"vuln-check","archived":false,"pushedAt":"2026-10-23T16:17:01Z","stars":1,"forks":0,"openIssues":0,"ownerType":"Organization","ownerAvatarUrl":"https://avatars.githubusercontent.com/u/333112031?v=4","ownerCreatedAt":"2026-09-23T22:31:34Z","license":"Apache-2.0"},"icon":{"url":"https://avatars.githubusercontent.com/u/333112031?v=4&s=128","source":"github"},"presence":{"stars":1,"forks":0,"downloadsWeek":null,"license":"Apache-2.0","lastPushAt":"2026-10-23T16:17:01.000Z","score":18}}}},"grade_history":[],"reviews":[]}