{"name":"io.github.New1Direction/korg-ledger","slug":"new1direction-korg-ledger","title":null,"description":"Verifiable cognition: prove a session ledger is tamper-evident; audit & import any agent's logs.","url":"https://mcp.market/server/new1direction-korg-ledger","rating":null,"grade":"B","score":71,"certified":false,"status":"active","category":"ai","tags":["ai"],"presence":{"score":13,"stars":5,"forks":0,"downloads_week":null,"last_push_at":"2026-06-22T21:26:34.000Z","license":"MIT"},"uptime":null,"claimed":false,"transport":"pypi","callable_via_gateway":false,"default_price_micros":0,"repository":"https://github.com/New1Direction/korgex","website":null,"version":"0.6.3","remotes":[],"packages":[{"registryType":"pypi","identifier":"korgex","version":"0.6.3","transport":{"type":"stdio"},"runtimeArguments":[{"description":"the korgex subcommand that runs the MCP server","isRequired":true,"value":"mcp-server","type":"positional"}],"environmentVariables":[{"description":"Path to the JSONL ledger journal (defaults to .korg/journal.jsonl).","name":"KORG_JOURNAL_PATH"},{"description":"Optional HMAC key — makes the chain tamper-PROOF, not just tamper-evident.","name":"KORG_LEDGER_HMAC_KEY"}]}],"tools":[],"scan":{"score":71,"grade":"B","scanned_at":"2026-09-27T17:04:50.286Z","report":{"scannerVersion":"0.1.9","scannedAt":"2026-09-27T17:04:50.346Z","components":{"code":{"score":20,"max":25,"notes":["41 source files scanned"]},"reliability":{"score":-1,"max":20,"notes":["no gateway calls yet and no remote to probe"]},"poisoning":{"score":-1,"max":15,"notes":["tools not inspected (local package is not executed); not counted"]},"auth":{"score":12,"max":15,"notes":["local package, no credentials required"]},"maintenance":{"score":8,"max":15,"notes":["last push 97 days ago"]},"identity":{"score":6,"max":10,"notes":["registry namespace matches repository owner"]}},"findings":[{"id":"exec.shell-true","severity":"medium","component":"code","title":"subprocess with shell=True","evidence":"korgex-0.6.3/src/hooks.py: … = subprocess.run( command, shell=True, input=json.dumps(payload), …"}],"inputs":{"packages":[{"registryType":"pypi","identifier":"korgex","version":"0.6.3","found":true,"license":"MIT","dependencyCount":19,"publishedAt":"2026-05-29T23:32:44.383111Z","repositoryUrl":"https://github.com/New1Direction/Korgex"}],"repo":{"found":true,"owner":"New1Direction","repo":"korgex","archived":false,"pushedAt":"2026-06-22T21:26:34Z","stars":5,"forks":0,"openIssues":1,"ownerType":"User","ownerAvatarUrl":"https://avatars.githubusercontent.com/u/285551516?v=4","ownerCreatedAt":"2026-05-18T02:52:14Z","license":"MIT"},"icon":{"url":"https://avatars.githubusercontent.com/u/285551516?v=4&s=128","source":"github"},"presence":{"stars":5,"forks":0,"downloadsWeek":null,"license":"MIT","lastPushAt":"2026-06-22T21:26:34.000Z","score":13}}}},"grade_history":[],"reviews":[]}