{"name":"io.github.quantamixsol/graqle","slug":"quantamixsol-graqle","title":"Graqle","description":"Graph-powered codebase reasoning, impact analysis, and governance tools over MCP.","url":"https://mcp.market/server/quantamixsol-graqle","rating":null,"grade":"B","score":77,"certified":false,"status":"active","category":"other","tags":[],"presence":{"score":46,"stars":32,"forks":10,"downloads_week":480,"last_push_at":"2026-10-25T06:23:37.000Z","license":"NOASSERTION"},"uptime":null,"claimed":false,"transport":"pypi","callable_via_gateway":false,"default_price_micros":0,"repository":"https://github.com/quantamixsol/graqle","website":"https://graqle.com","version":"0.87.1","remotes":[],"packages":[{"registryType":"pypi","identifier":"graqle","version":"0.87.1","transport":{"type":"stdio"}}],"tools":[],"scan":{"score":77,"grade":"B","scanned_at":"2026-11-03T23:29:02.060Z","report":{"scannerVersion":"0.1.10","scannedAt":"2026-11-03T23:29:02.008Z","components":{"code":{"score":15,"max":25,"notes":["653 source files scanned"]},"reliability":{"score":-1,"max":20,"notes":["no gateway calls yet and no remote to probe"]},"poisoning":{"score":-1,"max":15,"notes":["tools not inspected (local package is not executed); not counted"]},"auth":{"score":12,"max":15,"notes":["local package, no credentials required"]},"maintenance":{"score":15,"max":15,"notes":["last push 10 days ago"]},"identity":{"score":8,"max":10,"notes":["registry namespace matches repository owner","GitHub account older than a year"]}},"findings":[{"id":"exec.shell-true","severity":"medium","component":"code","title":"subprocess with shell=True","evidence":"graqle-0.87.1/graqle/cli/commands/trustctl.py: …rocess with an explicit arg list (never shell=True).\"\"\" return subprocess.run( # noqa…"},{"id":"exec.eval","severity":"medium","component":"code","title":"eval / new Function used","evidence":"graqle-0.87.1/sdk_self_audit.py: …, \"subprocess.run\", \"subprocess.call\", \"eval(\", \"exec(\"]) if has_interpolatio…"}],"inputs":{"packages":[{"registryType":"pypi","identifier":"graqle","version":"0.87.1","found":true,"weeklyDownloads":480,"license":"Apache-2.0","dependencyCount":106,"publishedAt":"2026-10-25T06:34:42.105072Z","repositoryUrl":"https://github.com/quantamixsol/graqle"}],"repo":{"found":true,"owner":"quantamixsol","repo":"graqle","archived":false,"pushedAt":"2026-10-25T06:23:37Z","stars":32,"forks":10,"openIssues":22,"ownerType":"User","ownerAvatarUrl":"https://avatars.githubusercontent.com/u/49729052?v=4","ownerCreatedAt":"2019-04-17T17:22:43Z","license":"NOASSERTION"},"icon":{"url":"https://graqle.com/icon.svg","source":"registry"},"presence":{"stars":32,"forks":10,"downloadsWeek":480,"license":"NOASSERTION","lastPushAt":"2026-10-25T06:23:37.000Z","score":46}}}},"grade_history":[],"reviews":[]}