{"name":"io.github.JeanFrancoisGagne/crapkit","slug":"jeanfrancoisgagne-crapkit","title":"crapkit","description":"Twelve tools to inspect CRAP scores, find work, and check edited functions against their ceiling.","url":"https://mcp.market/server/jeanfrancoisgagne-crapkit","rating":null,"grade":"A","score":85,"certified":false,"status":"active","category":"other","tags":[],"presence":{"score":35,"stars":1,"forks":1,"downloads_week":645,"last_push_at":"2026-09-16T02:29:10.000Z","license":"MIT"},"uptime":null,"claimed":false,"transport":"pypi","callable_via_gateway":false,"default_price_micros":0,"repository":"https://github.com/JeanFrancoisGagne/crapkit","website":"https://jeanfrancoisgagne.github.io/crapkit/","version":"0.7.5","remotes":[],"packages":[{"registryType":"pypi","identifier":"crapkit","version":"0.7.5","transport":{"type":"stdio"},"packageArguments":[{"value":"mcp","type":"positional"}]}],"tools":[],"scan":{"score":85,"grade":"A","scanned_at":"2026-09-19T21:03:57.697Z","report":{"scannerVersion":"0.1.8","scannedAt":"2026-09-19T21:03:57.733Z","components":{"code":{"score":20,"max":25,"notes":["80 source files scanned"]},"reliability":{"score":-1,"max":20,"notes":["no gateway calls yet and no remote to probe"]},"poisoning":{"score":-1,"max":15,"notes":["tools not inspected (local package is not executed); not counted"]},"auth":{"score":12,"max":15,"notes":["local package, no credentials required"]},"maintenance":{"score":15,"max":15,"notes":["last push 4 days ago"]},"identity":{"score":8,"max":10,"notes":["registry namespace matches repository owner","GitHub account older than a year"]}},"findings":[{"id":"exec.shell-true","severity":"medium","component":"code","title":"subprocess with shell=True","evidence":"crapkit-0.7.5/src/crapkit/cli/reports.py: …roc = subprocess.run(cfg.alert_command, shell=True, cwd=root, input=body, …"}],"inputs":{"packages":[{"registryType":"pypi","identifier":"crapkit","version":"0.7.5","found":true,"license":"MIT","dependencyCount":9,"publishedAt":"2026-09-16T02:31:01.516641Z","repositoryUrl":"https://github.com/JeanFrancoisGagne/crapkit"}],"repo":{"found":true,"owner":"JeanFrancoisGagne","repo":"crapkit","archived":false,"pushedAt":"2026-09-16T02:29:10Z","stars":1,"forks":1,"openIssues":4,"ownerType":"User","ownerAvatarUrl":"https://avatars.githubusercontent.com/u/150529940?v=4","ownerCreatedAt":"2023-11-11T13:49:41Z","license":"MIT"},"icon":{"url":null,"source":"none"},"presence":{"stars":1,"forks":1,"downloadsWeek":645,"license":"MIT","lastPushAt":"2026-09-16T02:29:10.000Z","score":35}}}},"grade_history":[{"kind":"restore","fromGrade":"C","toGrade":"A","reason":"score 85: subprocess with shell=True","createdAt":"2026-09-19T21:03:58.111Z"}],"reviews":[]}