{"name":"io.github.UnboundCompute/lachesis","slug":"unboundcompute-lachesis","title":"Lachesis","description":"Compiler-precise code property graph for C, Python, and TypeScript, navigable over MCP.","url":"https://mcp.market/server/unboundcompute-lachesis","rating":null,"grade":"B","score":75,"certified":false,"status":"active","category":"other","tags":[],"presence":{"score":32,"stars":3,"forks":0,"downloads_week":202,"last_push_at":"2026-09-07T11:23:53.000Z","license":"AGPL-3.0"},"uptime":null,"claimed":false,"transport":"pypi","callable_via_gateway":false,"default_price_micros":0,"repository":"https://github.com/UnboundCompute/lachesis","website":null,"version":"0.5.3","remotes":[],"packages":[{"registryType":"pypi","registryBaseUrl":"https://pypi.org","identifier":"lachesis-cpg","version":"0.5.3","runtimeHint":"uvx","transport":{"type":"stdio"},"runtimeArguments":[{"value":"lachesis-cpg","type":"named","name":"--from"},{"value":"lachesis","type":"positional"}],"packageArguments":[{"value":"mcp","type":"positional"}]}],"tools":[],"scan":{"score":75,"grade":"B","scanned_at":"2026-09-20T00:27:41.457Z","report":{"scannerVersion":"0.1.9","scannedAt":"2026-09-20T00:27:41.427Z","components":{"code":{"score":15,"max":25,"notes":["217 source files scanned"]},"reliability":{"score":-1,"max":20,"notes":["no gateway calls yet and no remote to probe"]},"poisoning":{"score":-1,"max":15,"notes":["tools not inspected (local package is not executed); not counted"]},"auth":{"score":12,"max":15,"notes":["local package, no credentials required"]},"maintenance":{"score":15,"max":15,"notes":["last push 13 days ago"]},"identity":{"score":7,"max":10,"notes":["registry namespace matches repository owner"]}},"findings":[{"id":"exec.eval","severity":"medium","component":"code","title":"eval / new Function used","evidence":"lachesis_cpg-0.5.3/lachesis/_atropos_catalog/models/javascript/sinks.json: … \"corroboration\": 2, \"notes\": \"new Function(body)\" }, { \"id\": \"javascr…"},{"id":"exec.shell-true","severity":"medium","component":"code","title":"subprocess with shell=True","evidence":"lachesis_cpg-0.5.3/lachesis/_atropos_catalog/models/python/sinks.json: … \"corroboration\": 3, \"notes\": \"shell=True makes arg0 a shell command; the shell c…"}],"inputs":{"packages":[{"registryType":"pypi","identifier":"lachesis-cpg","version":"0.5.3","found":true,"weeklyDownloads":202,"license":"AGPL-3.0-or-later","dependencyCount":7,"publishedAt":"2026-09-07T11:18:31.034890Z","repositoryUrl":"https://github.com/UnboundCompute/lachesis"}],"repo":{"found":true,"owner":"UnboundCompute","repo":"lachesis","archived":false,"pushedAt":"2026-09-07T11:23:53Z","stars":3,"forks":0,"openIssues":8,"ownerType":"Organization","ownerAvatarUrl":"https://avatars.githubusercontent.com/u/315464286?v=4","ownerCreatedAt":"2026-08-10T16:19:19Z","license":"AGPL-3.0"},"icon":{"url":"https://avatars.githubusercontent.com/u/315464286?v=4&s=128","source":"github"},"presence":{"stars":3,"forks":0,"downloadsWeek":202,"license":"AGPL-3.0","lastPushAt":"2026-09-07T11:23:53.000Z","score":32}}}},"grade_history":[],"reviews":[]}