{"name":"io.github.hedgerow-dev/hayward","slug":"hedgerow-dev-hayward","title":null,"description":"Checks ML model files (pickle, PyTorch, joblib, NumPy, GGUF, ONNX) for code that runs on load.","url":"https://mcp.market/server/hedgerow-dev-hayward","rating":null,"grade":"C","score":63,"certified":false,"status":"active","category":"ai","tags":["ai"],"presence":{"score":32,"stars":1,"forks":1,"downloads_week":771,"last_push_at":"2026-10-23T08:44:21.000Z","license":"MIT"},"uptime":null,"claimed":false,"transport":"pypi","callable_via_gateway":false,"default_price_micros":0,"repository":"https://github.com/hedgerow-dev/hayward","website":null,"version":"1.4.1","remotes":[],"packages":[{"registryType":"pypi","identifier":"hayward","version":"1.4.1","runtimeHint":"uvx","transport":{"type":"stdio"},"runtimeArguments":[{"value":"mcp>=2.3,<3","type":"named","name":"--with"}],"packageArguments":[{"value":"mcp","type":"positional"}]}],"tools":[{"name":"scan_path","description":"Scan a model file or directory for unsafe content without loading it.","write_action":false,"price_micros":0,"input_schema":null}],"scan":{"score":63,"grade":"C","scanned_at":"2026-10-24T16:18:00.353Z","report":{"scannerVersion":"0.1.10","scannedAt":"2026-10-24T16:18:00.324Z","components":{"code":{"score":8,"max":25,"notes":["25 source files scanned"]},"reliability":{"score":-1,"max":20,"notes":["no gateway calls yet and no remote to probe"]},"poisoning":{"score":-1,"max":15,"notes":["tools not inspected (local package is not executed); not counted"]},"auth":{"score":12,"max":15,"notes":["local package, no credentials required"]},"maintenance":{"score":15,"max":15,"notes":["last push 1 days ago"]},"identity":{"score":6,"max":10,"notes":["registry namespace matches repository owner"]}},"findings":[{"id":"install.curl-pipe","severity":"high","component":"code","title":"curl | sh in a script","evidence":"hayward-1.4.1/hayward/_pickle_engine.py: …oncrete args) -- e.g. resolving `os.system('curl ... | sh')` instead of just noting that `os.…"},{"id":"exec.eval","severity":"medium","component":"code","title":"eval / new Function used","evidence":"hayward-1.4.1/hayward/_pickle_engine.py: …\"os.system\", b\"subprocess\", b\"exec(\", b\"eval(\", b\"__import__\", b\"posix\\nsystem\", …"}],"inputs":{"packages":[{"registryType":"pypi","identifier":"hayward","version":"1.4.1","found":true,"weeklyDownloads":771,"dependencyCount":7,"publishedAt":"2026-10-23T08:45:42.971835Z","repositoryUrl":"https://github.com/hedgerow-dev/hayward"}],"repo":{"found":true,"owner":"hedgerow-dev","repo":"hayward","archived":false,"pushedAt":"2026-10-23T08:44:21Z","stars":1,"forks":1,"openIssues":8,"ownerType":"User","ownerAvatarUrl":"https://avatars.githubusercontent.com/u/289219779?v=4","ownerCreatedAt":"2026-05-30T14:38:12Z","license":"MIT"},"icon":{"url":"https://avatars.githubusercontent.com/u/289219779?v=4&s=128","source":"github"},"presence":{"stars":1,"forks":1,"downloadsWeek":771,"license":"MIT","lastPushAt":"2026-10-23T08:44:21.000Z","score":32}}}},"grade_history":[],"reviews":[]}