{"name":"io.github.habibafaisal/wherewent","slug":"habibafaisal-wherewent","title":null,"description":"Zero-config SQL flight recorder for slow Python/SQLAlchemy jobs: exact call site, count, and fix.","url":"https://mcp.market/server/habibafaisal-wherewent","rating":null,"grade":"B","score":80,"certified":false,"status":"active","category":"data","tags":["data","maps"],"presence":{"score":19,"stars":0,"forks":0,"downloads_week":14,"last_push_at":"2026-07-30T21:13:11.000Z","license":"MIT"},"uptime":null,"claimed":false,"transport":"pypi","callable_via_gateway":false,"default_price_micros":0,"repository":"https://github.com/habibafaisal/wherewent","website":"https://github.com/habibafaisal/wherewent","version":"0.4.1","remotes":[],"packages":[{"registryType":"pypi","registryBaseUrl":"https://pypi.org","identifier":"wherewent","version":"0.4.1","runtimeHint":"The MCP server ships in the optional [mcp] extra and is exposed as the console entry point `wherewent-mcp`. Install with the extra (e.g. `pipx install 'wherewent[mcp]'` or `uvx --from 'wherewent[mcp]' wherewent-mcp`) so the `mcp` SDK is present, then run `wherewent-mcp`.","transport":{"type":"stdio"}}],"tools":[{"name":"analyze_job","description":"Run a Python/SQLAlchemy job under wherewent and return WHY it was slow.","write_action":true,"price_micros":0,"input_schema":null},{"name":"explain_run","description":"Return the enriched analysis from a saved wherewent JSON file.","write_action":true,"price_micros":0,"input_schema":null}],"scan":{"score":80,"grade":"B","scanned_at":"2026-09-24T21:41:59.682Z","report":{"scannerVersion":"0.1.9","scannedAt":"2026-09-24T21:41:59.631Z","components":{"code":{"score":20,"max":25,"notes":["12 source files scanned"]},"reliability":{"score":-1,"max":20,"notes":["no gateway calls yet and no remote to probe"]},"poisoning":{"score":-1,"max":15,"notes":["tools not inspected (local package is not executed); not counted"]},"auth":{"score":12,"max":15,"notes":["local package, no credentials required"]},"maintenance":{"score":12,"max":15,"notes":["last push 56 days ago"]},"identity":{"score":8,"max":10,"notes":["registry namespace matches repository owner","GitHub account older than a year"]}},"findings":[{"id":"exec.shell-true","severity":"medium","component":"code","title":"subprocess with shell=True","evidence":"wherewent-0.4.1/src/wherewent/mcp_server.py: …ST executed directly (no shell, no `shell=True`) — there is no shell interpolation and…"}],"inputs":{"packages":[{"registryType":"pypi","identifier":"wherewent","version":"0.4.1","found":true,"weeklyDownloads":14,"license":"MIT","dependencyCount":5,"publishedAt":"2026-07-26T01:12:30.185395Z","repositoryUrl":"https://github.com/habibafaisal/wherewent"}],"repo":{"found":true,"owner":"habibafaisal","repo":"wherewent","archived":false,"pushedAt":"2026-07-30T21:13:11Z","stars":0,"forks":0,"openIssues":0,"ownerType":"User","ownerAvatarUrl":"https://avatars.githubusercontent.com/u/83090322?v=4","ownerCreatedAt":"2021-04-23T18:24:42Z","license":"MIT"},"icon":{"url":"https://avatars.githubusercontent.com/u/83090322?v=4&s=128","source":"github"},"presence":{"stars":0,"forks":0,"downloadsWeek":14,"license":"MIT","lastPushAt":"2026-07-30T21:13:11.000Z","score":19}}}},"grade_history":[],"reviews":[]}